last executing test programs: 1m17.426839138s ago: executing program 3 (id=3047): r0 = socket(0x1e, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x4e23, 0x20381ffd, @loopback, 0x6}, 0x1c) 1m17.09114927s ago: executing program 3 (id=3048): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x8000000000000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0xca, 0x4, 0x65cb, 0x6, r4}, &(0x7f0000000080)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r9, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) r10 = eventfd2(0x0, 0x800) io_setup(0x18, &(0x7f0000000140)=0x0) io_submit(r11, 0x1, &(0x7f0000000c80)=[&(0x7f0000000580)={0x0, 0x0, 0x8, 0x0, 0x0, r10, &(0x7f0000000640)="adea42a8ab2b3806", 0x8}]) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r5, 0x7}, 0x8) 1m15.665726107s ago: executing program 3 (id=3052): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x184}) ioctl$VT_OPENQRY(r2, 0x5600, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x20) unshare(0x2040400) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57}) 1m12.265189139s ago: executing program 3 (id=3061): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x4c) listen(r0, 0x0) listen(r0, 0x400) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x40, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xc, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b007f000001e000000200000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x110, r3, 0x82000000) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000200)=0xa0000) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m11.64234528s ago: executing program 3 (id=3063): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0) 1m10.741912498s ago: executing program 3 (id=3067): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 1m10.211252016s ago: executing program 1 (id=3076): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d2004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000080)=0xffff) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000240)) r2 = semget$private(0x0, 0x6, 0x0) semctl$SETVAL(r2, 0x5, 0x10, &(0x7f0000000200)=0x3) 1m9.91384396s ago: executing program 1 (id=3077): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x184}) ioctl$VT_OPENQRY(r2, 0x5600, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m8.110497892s ago: executing program 1 (id=3080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x7, 0xf3, @generic=0x8, 0x6, 0x24, 0x7}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000008, 0x5, 0x3) 24.133179784s ago: executing program 1 (id=3081): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b011d08afc99cf6754d4c259d71c7596afc4a76608a319a454412a02a4c22930", 0x20) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1}, 0x81}], 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 24.12830646s ago: executing program 1 (id=3085): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000000400000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (fail_nth: 2) 24.123847733s ago: executing program 2 (id=3086): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) clock_gettime(0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x8000, 0x7800, 0xe9a, 0x5ef, {{0x59, 0x4, 0x1, 0x1, 0x164, 0x66, 0x0, 0xf2, 0x2f, 0x0, @private=0xa010101, @loopback, {[@rr={0x7, 0x1f, 0x1c, [@multicast1, @rand_addr=0x64010100, @broadcast, @private=0xa010102, @multicast2, @multicast1, @multicast2]}, @lsrr={0x83, 0x1b, 0x26, [@multicast2, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010102, @broadcast, @remote, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xc9, 0x3, 0x8, [{@empty, 0x1}]}, @ssrr={0x89, 0x2b, 0x9e, [@multicast1, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1, @multicast2, @broadcast]}, @cipso={0x86, 0x36, 0x1, [{0x0, 0x2}, {0x6, 0x9, "396cb1522d2013"}, {0x2, 0x3, "a5"}, {0x6, 0x9, "6618a43898b843"}, {0x0, 0xb, "c3fea28efe1e502750"}, {0x0, 0x4, '0xffffffffffffffff}, 0x84880) tee(r1, r1, 0xe, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000080)={0x40, 0x7, 0x28, {0x28, 0x30, "0b64ce746d53128aac5b67127a18a16ba79f24f002673c10f4692c9cbe4efe5105807141c869"}}, &(0x7f0000000140)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "53d89911a4c950dd129038176016c306ef143f6a4d898500f58feed226e29c40723bd7f6340a599c3e0a77d2045cd8269487ef2488c67ca07cd7c238679cd19f099d3726e629911b1c40af39dfc33000b1decb5adb1c36ffb5cd8656cae48664cdf1b731534ad33986d0c8a899ad64626b9c8dd60473648236445bb85e5f5f9c91e0c7737322ad5199955a766cefb1cbdcf09cf6b23b22e256efa5328fcb90e48e256b4d24a46bdc0a4c83aedd568286086a47dfc157e4671349f39b91347933dcdfb14984bcbf03f6cf08216cda4cd33bef908bc94abc787d496b9deb8efc"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x40, 0x10, 0x52, "9f87459fa6eeba930e38843cebd7c9c948f46ec65db00bfc612e97c64adc58196d0ea590db8828c62ec659003567838996f61dd1ef6628cf376a0a273043ae9115a90fdafd557c18b6c406ab8ebc2a415460"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000003c0)={0x20, 0x81, 0x1, "99"}, &(0x7f0000000400)={0x20, 0x82, 0x1, "de"}, &(0x7f0000000440)={0x20, 0x83, 0x1, "ed"}, &(0x7f0000000480)={0x20, 0x84, 0x3, "598b72"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "948475"}}) 24.11049191s ago: executing program 1 (id=3091): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/176, &(0x7f0000000100)=0xb0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x808, 0x0, 0x3d0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) close(0x3) close(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="59baf6000004400000002100000008002b01fe"], 0x28}, 0x1, 0x0, 0x0, 0x488d1}, 0x0) unshare(0x2a020400) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 24.110221887s ago: executing program 2 (id=3092): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001040)=""/4103, 0xffffffffffffff34) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x75, 0x1a, 0x68, 0x10, 0x930, 0x220, 0x8df6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2f, 0x0, 0x0, [{{0x9, 0x4, 0x20, 0x0, 0x0, 0x53, 0xd8, 0x62}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22.381673426s ago: executing program 2 (id=3094): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknod(&(0x7f0000000140)='./file0\x00', 0x8, 0x7) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x7ffffbfe, 0x1f00, 0xa, 0x1ff, 0x1}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x2}, {}, @raw8={"3ad5e4aa05fd1f1646e53f27"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {}], 0x70) 22.045229408s ago: executing program 2 (id=3095): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000009040000160202000005c07fab6205240000000d240f01000000000000000000042402000905810340000000000905"], 0x0) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) syz_open_procfs(r3, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x8, 0x0, &(0x7f0000000080)) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 21.648795498s ago: executing program 0 (id=3096): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x5, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x77359400}, {r1, r2+10000000}}, 0x0) syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a7000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000014000100000000000000000002088000", @ANYRES32=r4, @ANYBLOB="080002007f"], 0x20}}, 0x0) 20.925733895s ago: executing program 4 (id=3097): munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40103, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x8000, 0x1, 0x8, 0x3}]}) 20.811374993s ago: executing program 4 (id=3098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000012c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0xa0, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5e829f40}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1ff}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x158}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) 20.760824127s ago: executing program 2 (id=3099): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x184}) ioctl$VT_OPENQRY(r2, 0x5600, 0x0) unshare(0x2040400) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57}) 20.717577012s ago: executing program 4 (id=3100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x168, 0x188, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 20.661361428s ago: executing program 4 (id=3101): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00?'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0x23, 0x17, {0x17, 0x10, "4d040f2b9b85075f8a38a95de62c40688f288fa95c"}}, &(0x7f0000000100)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "6d93eb2cb3d61304c9ede659abd5a0af5749a2daf0262141cedf5e175cf6d91886e61cb91ebfc274c0efbdf1afb537c3d5d44367f9f95930664bac5ad2a666a97358050d66a78e7491720473dddea6a32cc116d7d471b121832452d13efc8349056d61ad9671d285d691c650f240e04377ca50dfd046ab267cebe9db08ebae0cbbf720b8ba9b9a25a35cdc62dfcf1b0aa42a5ca9b977733f060bd05b137efdacb91af45ee6734c1a257328e03679de77193cb786a1d628a3f683196a10b9fbc176beb8fe7766f4674c256d8e6c7c49836c"}}, &(0x7f0000000040)={0x0, 0xf, 0x1e, {0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x9, 0xa, 0xff, 0x4, 0x8}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x70, 0x5, 0x2, 0x9, 0x75}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x8, 0x92, "8468c75c", "7e33bec3"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6a, 0x80, 0xe, 0x8, 0x2, 0xec2, 0xe3ef}}}, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x0, 0xe, 0xe7, "d1061b3ffdf1aecfa7d2af42418c572a2f8c3f4f13c117d96960de59ac04e45f01e3383f3479029d1c9c8200afffd07e202831ba23e1180799a5cfa1e48df372646a4d891d8f8d37ad3687b39106f4db62f44061e335aa8e40488a9b69170e986a337e9a94b12e1241c17ad8d5c5ada6965c66a3833f6581d44f545e2122ed3317347d0950fa9089f0fcace5398bafd9381489b11746f8868428ebb4b47dce3c5361c46252b3529a854bcad52ac79dd3a8a9a8e8fa64633e8b950a4d37668ce95a63fe5e0683f596a5d7ad4602b15f88ff146095502f043b1e4d0195a1ae3af74b3deb59376706"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x100, 0x2, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x8c}, &(0x7f0000000540)={0x40, 0xb, 0x2, "c23f"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @random="041ceed50f45"}, &(0x7f0000000680)={0x40, 0x19, 0x2, "f024"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7}}) 19.731412555s ago: executing program 2 (id=3102): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/176, &(0x7f0000000100)=0xb0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x808, 0x0, 0x3d0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) close(0x3) close(r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 18.557863459s ago: executing program 0 (id=3103): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000300)={0x3, @output={0x0, 0x1, {0x1, 0x2}, 0x8, 0x7}}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 17.718048614s ago: executing program 0 (id=3104): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/176, &(0x7f0000000100)=0xb0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x808, 0x0, 0x3d0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) close(0x3) close(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="59baf6000004400000002100000008002b01fe"], 0x28}, 0x1, 0x0, 0x0, 0x488d1}, 0x0) unshare(0x2a020400) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 17.54434341s ago: executing program 4 (id=3105): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="00930100001f64"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000ac0)={0x20, 0x3, 0x2, "a1a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84880) tee(r1, r1, 0xe, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000080)={0x40, 0x7, 0x28, {0x28, 0x30, "0b64ce746d53128aac5b67127a18a16ba79f24f002673c10f4692c9cbe4efe5105807141c869"}}, &(0x7f0000000140)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "53d89911a4c950dd129038176016c306ef143f6a4d898500f58feed226e29c40723bd7f6340a599c3e0a77d2045cd8269487ef2488c67ca07cd7c238679cd19f099d3726e629911b1c40af39dfc33000b1decb5adb1c36ffb5cd8656cae48664cdf1b731534ad33986d0c8a899ad64626b9c8dd60473648236445bb85e5f5f9c91e0c7737322ad5199955a766cefb1cbdcf09cf6b23b22e256efa5328fcb90e48e256b4d24a46bdc0a4c83aedd568286086a47dfc157e4671349f39b91347933dcdfb14984bcbf03f6cf08216cda4cd33bef908bc94abc787d496b9deb8efc"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x40, 0x10, 0x52, "9f87459fa6eeba930e38843cebd7c9c948f46ec65db00bfc612e97c64adc58196d0ea590db8828c62ec659003567838996f61dd1ef6628cf376a0a273043ae9115a90fdafd557c18b6c406ab8ebc2a415460"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000003c0)={0x20, 0x81, 0x1, "99"}, &(0x7f0000000400)={0x20, 0x82, 0x1, "de"}, &(0x7f0000000440)={0x20, 0x83, 0x1, "ed"}, &(0x7f0000000480)={0x20, 0x84, 0x3, "598b72"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "948475"}}) 15.351017897s ago: executing program 4 (id=3106): mremap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f000000d000/0x4000)=nil) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000340)={0x0, &(0x7f0000000080)}) write$ppp(r0, &(0x7f00000004c0)="31bedebd0e06", 0x6) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x0, {0x2, 0x0, @loopback}, 'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x4b4a, 0x10000000000004) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x8}, 0x10) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x501040, 0x0) getsockopt$inet6_int(r5, 0x29, 0xce, 0x0, &(0x7f00000001c0)=0x51ae41c1d50e6bf1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) write$sequencer(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8108"], 0x8) keyctl$set_reqkey_keyring(0xe, 0x6) mincore(&(0x7f000000d000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/180) 8.576119298s ago: executing program 32 (id=3091): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/176, &(0x7f0000000100)=0xb0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x808, 0x0, 0x3d0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) close(0x3) close(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="59baf6000004400000002100000008002b01fe"], 0x28}, 0x1, 0x0, 0x0, 0x488d1}, 0x0) unshare(0x2a020400) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4.019285487s ago: executing program 33 (id=3102): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/176, &(0x7f0000000100)=0xb0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x808, 0x0, 0x3d0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) close(0x3) close(r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2.511014828s ago: executing program 34 (id=3104): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/176, &(0x7f0000000100)=0xb0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x808, 0x0, 0x3d0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) close(0x3) close(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="59baf6000004400000002100000008002b01fe"], 0x28}, 0x1, 0x0, 0x0, 0x488d1}, 0x0) unshare(0x2a020400) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 0s ago: executing program 35 (id=3106): mremap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f000000d000/0x4000)=nil) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000340)={0x0, &(0x7f0000000080)}) write$ppp(r0, &(0x7f00000004c0)="31bedebd0e06", 0x6) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x0, {0x2, 0x0, @loopback}, 'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x4b4a, 0x10000000000004) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x8}, 0x10) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x501040, 0x0) getsockopt$inet6_int(r5, 0x29, 0xce, 0x0, &(0x7f00000001c0)=0x51ae41c1d50e6bf1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) write$sequencer(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8108"], 0x8) keyctl$set_reqkey_keyring(0xe, 0x6) mincore(&(0x7f000000d000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/180) kernel console output (not intermixed with test programs): j_user' [ 889.860008][ T5888] usb 1-1: USB disconnect, device number 67 [ 889.913575][T15334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.967668][T15334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.556278][T15343] rdma_op ffff888053e491f0 conn xmit_rdma 0000000000000000 [ 891.587584][ T3078] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 891.600816][T15368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2661'. [ 891.642346][T12935] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 891.749003][ T3078] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.937209][T10157] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 892.302420][ T3078] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.332267][ T3078] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 892.341540][ T3078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 892.357453][ T3078] usb 5-1: SerialNumber: syz [ 892.378024][T12935] usb 1-1: Using ep0 maxpacket: 8 [ 892.417676][T12935] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 892.472537][T12935] usb 1-1: config 0 has no interface number 0 [ 892.480904][T12935] usb 1-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10 [ 892.493979][T12935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.503215][T12935] usb 1-1: Product: syz [ 892.519592][T12935] usb 1-1: Manufacturer: syz [ 892.527467][T12935] usb 1-1: SerialNumber: syz [ 892.549733][T10157] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 892.562248][T12935] usb 1-1: config 0 descriptor?? [ 892.570146][T10157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.582511][ T3078] usb 5-1: 0:2 : does not exist [ 892.583238][T12935] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614 [ 892.608746][T10157] usb 4-1: config 0 descriptor?? [ 892.645761][ T3078] usb 5-1: USB disconnect, device number 66 [ 892.665804][T15379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.678924][T15379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.803784][T12935] gspca_sn9c20x: Write register 1000 failed -71 [ 892.810200][T12935] gspca_sn9c20x: Device initialization failed [ 892.849139][T12935] gspca_sn9c20x 1-1:0.250: probe with driver gspca_sn9c20x failed with error -71 [ 892.867678][T12935] usb 1-1: USB disconnect, device number 68 [ 892.898234][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.171025][T10157] [drm:udl_init] *ERROR* Selecting channel failed [ 893.193289][T10157] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 893.200887][T10157] [drm] Initialized udl on minor 2 [ 893.222190][T10157] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 893.232048][T10157] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 893.240645][T12935] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 893.250006][T10157] usb 4-1: USB disconnect, device number 76 [ 893.261295][T12935] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 893.277445][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 893.343247][T15388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2667'. [ 893.375735][T15389] IPv6: NLM_F_CREATE should be specified when creating new route [ 893.397333][T15389] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2666'. [ 893.447428][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 893.454241][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.465113][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.476079][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.482602][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.489620][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 893.506966][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.516241][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.530574][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 893.545254][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 893.555693][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.564401][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.572566][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 893.580910][ T9] usb 3-1: SerialNumber: syz [ 893.591303][ T9] cdc_acm 3-1:1.0: skipping garbage [ 893.598851][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.612620][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.810314][ T5888] usb 3-1: USB disconnect, device number 77 [ 893.996542][T15408] sctp_transport_update_pmtu: 46 callbacks suppressed [ 893.996569][T15408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 894.014296][T15408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 894.025072][T15408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 894.036635][T15408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 894.048565][T15408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 894.059342][T15408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 894.070159][T15408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 894.080983][T15408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 894.091786][T15408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 894.102410][T15408] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 894.410700][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.430707][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.448085][T15413] netlink: 'syz.4.2675': attribute type 9 has an invalid length. [ 894.462185][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.475369][T15413] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.2675'. [ 894.556913][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.611558][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.638816][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.657540][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.665505][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.833168][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.849248][T15402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.887411][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.905551][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.928343][T10157] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 894.934070][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.950319][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.958782][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 894.990763][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.026883][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.049296][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.067294][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.078268][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.086901][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.095731][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.105402][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.109934][T10157] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.113834][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.133371][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.141660][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.150608][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.158960][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.160578][T10157] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 895.167172][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.187234][ T3078] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 895.198793][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.208787][T10157] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 895.208862][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.226312][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.234676][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.275934][T10157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 895.284666][T10157] usb 3-1: SerialNumber: syz [ 895.297667][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.309347][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 895.326557][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.337656][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.345540][T14916] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 895.357545][ T3078] usb 4-1: Using ep0 maxpacket: 8 [ 895.374240][ T3078] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 895.388603][ T3078] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 895.413855][T14916] hid-generic 0000:007F:FFFFFFFE.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 895.428790][ T3078] usb 4-1: config 2 has no interface number 0 [ 895.435395][ T3078] usb 4-1: config 2 interface 31 has no altsetting 0 [ 895.464787][ T3078] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 895.474662][ T3078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.511721][T10157] usb 3-1: 0:2 : does not exist [ 895.514889][ T3078] usb 4-1: Product: syz [ 895.518104][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 895.542650][ T3078] usb 4-1: Manufacturer: syz [ 895.551764][ T3078] usb 4-1: SerialNumber: syz [ 895.555701][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 895.583502][T10157] usb 3-1: USB disconnect, device number 78 [ 895.589489][ T3078] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 895.623694][ T9] usb 5-1: can't read configurations, error -61 [ 895.696078][T15424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2679'. [ 895.767800][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 895.783493][T15420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.803412][T15420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.822404][T15420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.832131][T15420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.837608][T15430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.855559][T15430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.876039][T10157] usb 4-1: USB disconnect, device number 77 [ 895.927229][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 895.935391][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 895.943671][ T9] usb 5-1: can't read configurations, error -61 [ 895.950744][ T9] usb usb5-port1: attempt power cycle [ 896.275348][T15435] syz.2.2683 (15435): drop_caches: 2 [ 896.297281][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 896.320216][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 896.329891][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 896.349678][ T9] usb 5-1: can't read configurations, error -61 [ 896.537520][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 896.604070][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 896.614186][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 896.622123][ T9] usb 5-1: can't read configurations, error -61 [ 896.830211][ T9] usb usb5-port1: unable to enumerate USB device [ 897.297266][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 897.447239][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 897.456453][ T9] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 897.483130][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.505031][ T9] usb 4-1: config 0 descriptor?? [ 897.865358][T15463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2691'. [ 898.230800][ T9] ortek 0003:1223:3F07.000F: item fetching failed at offset 2/5 [ 898.247775][ T9] ortek 0003:1223:3F07.000F: probe with driver ortek failed with error -22 [ 898.357288][T14916] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 898.509737][T14916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.520803][T14916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 898.546527][T15490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.566596][T15490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.587456][T14916] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 898.617496][T14916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 898.625735][T14916] usb 3-1: SerialNumber: syz [ 898.848524][T14916] usb 3-1: 0:2 : does not exist [ 898.882103][T14916] usb 3-1: USB disconnect, device number 79 [ 899.089692][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.051502][ T9] usb 4-1: USB disconnect, device number 78 [ 900.142615][T10157] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 900.394804][T10157] usb 3-1: config 0 has no interfaces? [ 900.409074][T10157] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 900.418627][T10157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.426644][T10157] usb 3-1: Product: syz [ 900.451312][T10157] usb 3-1: Manufacturer: syz [ 900.467270][T10157] usb 3-1: SerialNumber: syz [ 900.482273][T10157] usb 3-1: config 0 descriptor?? [ 901.697245][ T3078] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 901.849767][ T3078] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.901489][ T3078] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 901.932796][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.973236][ T3078] usb 1-1: Product: syz [ 902.000820][ T3078] usb 1-1: Manufacturer: syz [ 902.015501][ T3078] usb 1-1: SerialNumber: syz [ 902.044141][T15524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.068240][T15524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.627332][ T5887] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 902.699731][T15533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2715'. [ 902.817430][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 902.847991][ T5887] usb 4-1: config 0 has an invalid interface number: 43 but max is 0 [ 902.865179][ T5887] usb 4-1: config 0 has no interface number 0 [ 902.872469][ T5887] usb 4-1: config 0 interface 43 has no altsetting 0 [ 902.881814][ T5887] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 902.891511][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.909843][ T5887] usb 4-1: config 0 descriptor?? [ 902.981913][ T5888] usb 3-1: USB disconnect, device number 80 [ 903.072772][ T3078] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 903.081954][ T3078] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 903.091897][ T3078] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 903.104314][T15544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.114309][T15544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.142343][T15544] capability: warning: `syz.1.2719' uses deprecated v2 capabilities in a way that may be insecure [ 903.154330][T15544] kvm: user requested TSC rate below hardware speed [ 903.163133][T15544] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4199442 ns). Using initial count to start timer. [ 903.183965][T15545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.195949][T15545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.397334][ T5888] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 903.474111][ T3078] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 903.489768][ T3078] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 903.506683][ T3078] usb 1-1: USB disconnect, device number 69 [ 903.525388][ T3078] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 903.547265][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 903.556869][ T5888] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 903.574100][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.584881][ T5888] usb 3-1: Product: syz [ 903.589262][ T5888] usb 3-1: Manufacturer: syz [ 903.593918][ T5888] usb 3-1: SerialNumber: syz [ 903.601906][ T5888] usb 3-1: config 0 descriptor?? [ 903.816979][ T5888] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 904.344765][T15567] Invalid option length (1048117) for dns_resolver key [ 904.368597][T15567] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2729'. [ 904.387404][ T3078] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 904.656006][ T3078] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 904.675754][ T3078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.728392][ T3078] usb 5-1: config 0 descriptor?? [ 904.777365][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 904.854782][ T5888] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 905.139101][ T9] usb 1-1: config 0 has no interfaces? [ 905.160371][ T3078] [drm:udl_init] *ERROR* Selecting channel failed [ 905.179860][ T3078] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 905.194386][ T3078] [drm] Initialized udl on minor 2 [ 905.408415][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 905.433349][ T3078] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 905.442292][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.446480][ T3078] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 905.451431][ T9] usb 1-1: Product: syz [ 905.468349][ T9] usb 1-1: Manufacturer: syz [ 905.483233][ T5887] usb 4-1: string descriptor 0 read error: -71 [ 905.509433][T14916] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 905.530819][ T3078] usb 5-1: USB disconnect, device number 71 [ 905.530952][ T9] usb 1-1: SerialNumber: syz [ 905.546992][ T5887] usb 4-1: USB disconnect, device number 79 [ 905.582998][T14916] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 905.615106][ T9] usb 1-1: config 0 descriptor?? [ 905.949321][T15573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.977873][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2733'. [ 906.275816][ T3078] usb 3-1: USB disconnect, device number 81 [ 907.385287][ T5841] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 907.577633][ T9] usb 1-1: USB disconnect, device number 70 [ 908.049321][T15602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.060603][T15616] fuse: Bad value for 'rootmode' [ 909.186130][T15642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.196707][T15642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.293458][T15632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.302400][T15632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.467350][ T5887] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 910.787255][ T5887] usb 3-1: device descriptor read/64, error -71 [ 910.838594][T15648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.957221][T12935] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 911.149521][ T5887] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 911.349426][T12935] usb 5-1: config 0 has no interfaces? [ 911.360452][T12935] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 911.371376][ T5887] usb 3-1: device descriptor read/64, error -71 [ 911.449296][T12935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.498788][ T5887] usb usb3-port1: attempt power cycle [ 911.537292][T14916] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 911.554478][T12935] usb 5-1: Product: syz [ 911.586654][T12935] usb 5-1: Manufacturer: syz [ 911.689929][T14916] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 911.704031][T14916] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 911.728389][T14916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.736854][T12935] usb 5-1: SerialNumber: syz [ 911.776007][T14916] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 911.790595][T12935] usb 5-1: config 0 descriptor?? [ 911.867595][ T5887] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 911.924142][ T5887] usb 3-1: device descriptor read/8, error -71 [ 911.991546][T15677] netlink: 'syz.3.2763': attribute type 9 has an invalid length. [ 912.014593][T15677] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2763'. [ 912.058372][T15673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.068497][T15673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.307439][ T5887] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 912.351496][ T5887] usb 3-1: device descriptor read/8, error -71 [ 912.468402][ T5887] usb usb3-port1: unable to enumerate USB device [ 912.555668][T15685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.572172][T15685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.307787][T14916] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 913.327990][T14916] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 913.363914][T14916] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 913.437503][ T5887] usb 5-1: USB disconnect, device number 72 [ 913.504351][T14916] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 914.113129][T15710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.204558][T10157] usb 1-1: USB disconnect, device number 71 [ 914.317368][ T5887] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 914.376903][T15713] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 914.487964][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 914.494899][ T5887] usb 5-1: config 0 has an invalid interface number: 43 but max is 0 [ 914.503472][ T5887] usb 5-1: config 0 has no interface number 0 [ 914.510093][ T5887] usb 5-1: config 0 interface 43 has no altsetting 0 [ 914.517050][ T5887] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 914.547255][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.418268][ T5887] usb 5-1: config 0 descriptor?? [ 915.751940][T15714] syz.3.2774 (15714): drop_caches: 2 [ 915.776885][T15725] tipc: Failed to remove unknown binding: 66,1,1/32767:144325251/144325253 [ 915.778065][T15726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.778295][T15726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.556217][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2780'. [ 916.795391][T15732] kvm: user requested TSC rate below hardware speed [ 916.985590][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 916.985612][ T30] audit: type=1326 audit(1742931554.229:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc38d169 code=0x7ffc0000 [ 917.021524][ T30] audit: type=1326 audit(1742931554.229:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc38d169 code=0x7ffc0000 [ 917.075964][T15741] fuse: Bad value for 'fd' [ 917.086299][T15741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.106139][T15741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.120972][ T30] audit: type=1326 audit(1742931554.229:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f14fc38d169 code=0x7ffc0000 [ 917.181074][ T30] audit: type=1326 audit(1742931554.229:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc38d169 code=0x7ffc0000 [ 917.203497][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.260509][ T30] audit: type=1326 audit(1742931554.229:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc38d169 code=0x7ffc0000 [ 917.306881][T15743] fuse: Bad value for 'fd' [ 917.322156][T15743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.333317][ T30] audit: type=1326 audit(1742931554.239:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f14fc38d169 code=0x7ffc0000 [ 917.372011][T15744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.399372][ T30] audit: type=1326 audit(1742931554.239:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc38d169 code=0x7ffc0000 [ 917.421748][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.452710][ T5887] usb 5-1: string descriptor 0 read error: -71 [ 917.492604][ T30] audit: type=1326 audit(1742931554.239:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc38d169 code=0x7ffc0000 [ 917.502465][ T5887] usb 5-1: USB disconnect, device number 73 [ 917.576667][ T30] audit: type=1326 audit(1742931554.239:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f14fc38d169 code=0x7ffc0000 [ 917.635363][ T30] audit: type=1326 audit(1742931554.239:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fc38d169 code=0x7ffc0000 [ 917.739513][T15755] FAULT_INJECTION: forcing a failure. [ 917.739513][T15755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.792349][T15755] CPU: 0 UID: 0 PID: 15755 Comm: syz.4.2790 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 917.792383][T15755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 917.792406][T15755] Call Trace: [ 917.792414][T15755] [ 917.792423][T15755] dump_stack_lvl+0x241/0x360 [ 917.792458][T15755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 917.792485][T15755] ? __pfx__printk+0x10/0x10 [ 917.792518][T15755] should_fail_ex+0x424/0x570 [ 917.792549][T15755] _copy_from_user+0x2d/0xb0 [ 917.792573][T15755] video_usercopy+0x3dc/0x1390 [ 917.792602][T15755] ? __pfx___video_do_ioctl+0x10/0x10 [ 917.792622][T15755] ? __pfx_video_usercopy+0x10/0x10 [ 917.792652][T15755] ? ksys_write+0x266/0x2d0 [ 917.792676][T15755] v4l2_ioctl+0x189/0x1e0 [ 917.792706][T15755] ? __pfx_v4l2_ioctl+0x10/0x10 [ 917.792738][T15755] __se_sys_ioctl+0xf1/0x160 [ 917.792762][T15755] do_syscall_64+0xf3/0x230 [ 917.792793][T15755] ? clear_bhb_loop+0x45/0xa0 [ 917.792818][T15755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.792839][T15755] RIP: 0033:0x7f42ab18d169 [ 917.792859][T15755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.792877][T15755] RSP: 002b:00007f42ac021038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.792899][T15755] RAX: ffffffffffffffda RBX: 00007f42ab3a5fa0 RCX: 00007f42ab18d169 [ 917.792925][T15755] RDX: 0000200000000000 RSI: 00000000c02c564a RDI: 0000000000000003 [ 917.792940][T15755] RBP: 00007f42ac021090 R08: 0000000000000000 R09: 0000000000000000 [ 917.792953][T15755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.792966][T15755] R13: 0000000000000000 R14: 00007f42ab3a5fa0 R15: 00007f42ab4cfa28 [ 917.792992][T15755] [ 917.824741][T15759] tipc: Enabling not permitted [ 917.825416][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.835415][T15759] tipc: Enabling of bearer rejected, failed to enable media [ 918.072360][T15766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.111144][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 918.127378][ T5888] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 918.142189][T15766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.173612][T15766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.194885][T15766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.288928][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.306610][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.312635][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 918.337479][ T5888] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 918.346985][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 918.355236][ T5888] usb 4-1: SerialNumber: syz [ 918.357251][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.403481][ T9] usb 1-1: config 0 descriptor?? [ 918.413150][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 918.422406][T15775] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2798'. [ 918.556924][T15777] tipc: Failed to remove unknown binding: 66,1,1/0:3386540362/3386540364 [ 918.600248][ T5888] usb 4-1: 0:2 : does not exist [ 918.605743][ T5888] usb 4-1: unit 5 not found! [ 918.612534][ T9] gspca_spca508: reg_read err -32 [ 918.628408][ T5888] usb 4-1: USB disconnect, device number 80 [ 918.808185][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.820293][ T9] gspca_spca508: reg_read err -71 [ 918.835401][ T9] gspca_spca508: reg_read err -71 [ 918.844390][ T9] gspca_spca508: reg_read err -71 [ 918.853381][ T9] gspca_spca508: reg write: error -71 [ 918.865340][ T9] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 918.884243][ T9] usb 1-1: USB disconnect, device number 72 [ 918.967408][ T5887] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 919.107255][ T5887] usb 3-1: device descriptor read/64, error -71 [ 919.309385][T15790] FAULT_INJECTION: forcing a failure. [ 919.309385][T15790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.322739][T15790] CPU: 0 UID: 0 PID: 15790 Comm: syz.3.2805 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 919.322761][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 919.322771][T15790] Call Trace: [ 919.322779][T15790] [ 919.322786][T15790] dump_stack_lvl+0x241/0x360 [ 919.322812][T15790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 919.322831][T15790] ? __pfx__printk+0x10/0x10 [ 919.322855][T15790] should_fail_ex+0x424/0x570 [ 919.322877][T15790] _copy_from_iter+0x211/0x1c70 [ 919.322896][T15790] ? alloc_pages_mpol+0x4e6/0x690 [ 919.322919][T15790] ? __pfx__copy_from_iter+0x10/0x10 [ 919.322935][T15790] ? set_page_refcounted+0xa1/0x1e0 [ 919.322955][T15790] ? alloc_pages_noprof+0x136/0x190 [ 919.322972][T15790] ? page_copy_sane+0x46/0x260 [ 919.322987][T15790] copy_page_from_iter+0x7a/0x100 [ 919.323003][T15790] tun_get_user+0x206e/0x48d0 [ 919.323019][T15790] ? tun_get_user+0x83d/0x48d0 [ 919.323040][T15790] ? aa_file_perm+0x139/0xf60 [ 919.323061][T15790] ? aa_file_perm+0x3f1/0xf60 [ 919.323080][T15790] ? __pfx_tun_get_user+0x10/0x10 [ 919.323102][T15790] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 919.323131][T15790] ? tun_get+0x1e/0x2f0 [ 919.323144][T15790] ? tun_get+0x1e/0x2f0 [ 919.323156][T15790] ? tun_get+0x27d/0x2f0 [ 919.323169][T15790] tun_chr_write_iter+0x10d/0x1f0 [ 919.323194][T15790] vfs_write+0x70f/0xd10 [ 919.323213][T15790] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 919.323236][T15790] ? __pfx_vfs_write+0x10/0x10 [ 919.323253][T15790] ? __fget_files+0x2a/0x420 [ 919.323275][T15790] ? __fget_files+0x2a/0x420 [ 919.323307][T15790] ksys_write+0x19d/0x2d0 [ 919.323324][T15790] ? __pfx_ksys_write+0x10/0x10 [ 919.323342][T15790] ? do_syscall_64+0xb6/0x230 [ 919.323365][T15790] do_syscall_64+0xf3/0x230 [ 919.323385][T15790] ? clear_bhb_loop+0x45/0xa0 [ 919.323402][T15790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.323416][T15790] RIP: 0033:0x7f4dd8b8bc1f [ 919.323435][T15790] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 919.323453][T15790] RSP: 002b:00007f4dd69f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 919.323475][T15790] RAX: ffffffffffffffda RBX: 00007f4dd8da5fa0 RCX: 00007f4dd8b8bc1f [ 919.323491][T15790] RDX: 0000000000000011 RSI: 0000200000000140 RDI: 00000000000000c8 [ 919.323504][T15790] RBP: 00007f4dd69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 919.323517][T15790] R10: 0000000000000011 R11: 0000000000000293 R12: 0000000000000001 [ 919.323530][T15790] R13: 0000000000000000 R14: 00007f4dd8da5fa0 R15: 00007f4dd8ecfa28 [ 919.323555][T15790] [ 919.347656][ T5887] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 919.495571][T15795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2807'. [ 919.627317][ T5887] usb 3-1: device descriptor read/64, error -71 [ 920.032160][ T5887] usb usb3-port1: attempt power cycle [ 920.637279][ T5887] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 920.829352][ T5887] usb 3-1: device descriptor read/8, error -71 [ 921.101744][ T5887] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 921.136602][ T5887] usb 3-1: device descriptor read/8, error -71 [ 921.258943][ T5887] usb usb3-port1: unable to enumerate USB device [ 921.267203][ T5888] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 921.496165][ T5888] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 921.510274][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.518878][ T5888] usb 1-1: Product: syz [ 921.523094][ T5888] usb 1-1: Manufacturer: syz [ 921.529520][ T5888] usb 1-1: SerialNumber: syz [ 921.544394][ T5888] usb 1-1: config 0 descriptor?? [ 921.770177][T15822] netlink: 'syz.1.2817': attribute type 9 has an invalid length. [ 921.782088][T15822] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2817'. [ 921.784816][T15823] xt_socket: unknown flags 0x8 [ 921.949246][T15827] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 922.056777][T15823] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 922.117880][T15823] fuse: Unknown parameter 'fd" osr' [ 922.138309][T15836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2822'. [ 922.166418][T15811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.185713][T15811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.198885][ T5888] usb 1-1: Firmware version (0.0) predates our first public release. [ 922.220447][ T5888] usb 1-1: Please update to version 0.2 or newer [ 922.311063][T15839] vlan2: entered allmulticast mode [ 922.316256][T15839] vlan0: entered allmulticast mode [ 922.334674][T15839] vlan0: left allmulticast mode [ 922.345015][T15843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.361171][T15843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.415228][ T5888] usb 1-1: Firmware: build Ÿ‡EŸ¦îº“8„<ë×ÉÉHônÆ]° üa.—ÆJÜXm¥Ûˆ(Æ.ÆY [ 922.417109][T15845] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2827'. [ 922.458513][T15845] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 922.724867][ T5888] usb 1-1: USB disconnect, device number 73 [ 922.837389][T12935] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 922.998848][T12935] usb 3-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 923.013528][T12935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 923.066671][T12935] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 923.079896][T12935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 923.108739][T12935] usb 3-1: SerialNumber: syz [ 923.192938][T15860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.243689][T15860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.477257][ T5888] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 923.744730][T15845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.774474][T15845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.930198][T15849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.979881][ T5888] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 923.985778][T12935] usb 3-1: 0:2 : does not exist [ 923.990540][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.005566][T12935] usb 3-1: USB disconnect, device number 90 [ 924.019185][ T5888] usb 5-1: config 0 descriptor?? [ 924.377162][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 924.513692][ T5888] [drm:udl_init] *ERROR* Selecting channel failed [ 924.535847][ T5888] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 924.620880][ T5888] [drm] Initialized udl on minor 2 [ 925.107447][ T5888] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 925.166495][ T5888] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 925.176499][T14916] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 925.240405][T15878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2836'. [ 925.360610][T14916] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 925.369876][ T5888] usb 5-1: USB disconnect, device number 74 [ 925.407381][T14916] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 926.047263][ T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 926.247571][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 926.316024][T15914] sctp_transport_update_pmtu: 46 callbacks suppressed [ 926.316049][T15914] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 926.372881][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 926.384517][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.400140][T15914] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 926.412970][ T9] usb 5-1: Product: syz [ 926.429485][T15914] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 926.441463][T15914] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 926.452468][ T9] usb 5-1: Manufacturer: syz [ 926.458734][T15914] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 926.470019][T15914] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 926.480849][T15914] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 926.492184][T15914] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 926.504029][T15914] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 926.515040][T15914] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 926.527523][ T5888] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 926.534879][ T9] usb 5-1: SerialNumber: syz [ 926.548425][ T9] usb 5-1: config 0 descriptor?? [ 926.740134][ T5888] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 926.760287][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 926.812468][ T5888] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 926.921816][T15906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.966501][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.118954][ T5888] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 927.370756][T15908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.379754][T15908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.117305][T14916] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 928.211985][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 928.286666][ T5888] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 928.328352][T14916] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 928.342358][T14916] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 928.387305][T14916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.461737][T14916] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 928.759157][T15945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.769700][T15945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.857400][ T5888] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 928.895620][ T5888] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 929.239388][ T9] usb 5-1: USB disconnect, device number 75 [ 929.899744][ T976] usb 4-1: USB disconnect, device number 81 [ 929.980747][T15988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.002007][T15988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.040745][T14916] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 930.064100][T14916] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 930.073866][T14916] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 930.110028][T14916] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 930.295149][T15992] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 930.865585][ T5888] usb 3-1: USB disconnect, device number 91 [ 931.059670][T16004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.142221][T16006] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 931.167433][T16004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.187382][ T976] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 931.442484][ T976] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 931.453264][ T976] usb 4-1: config 0 has no interface number 0 [ 931.461335][ T976] usb 4-1: config 0 interface 128 has no altsetting 0 [ 931.474097][ T976] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 931.486239][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.495868][ T976] usb 4-1: Product: syz [ 931.502160][ T976] usb 4-1: Manufacturer: syz [ 931.507714][ T976] usb 4-1: SerialNumber: syz [ 931.522915][ T976] usb 4-1: config 0 descriptor?? [ 931.532932][ T976] radio-si470x 4-1:0.128: could not find interrupt in endpoint [ 931.545667][ T976] radio-si470x 4-1:0.128: probe with driver radio-si470x failed with error -5 [ 931.559237][ T976] usbhid 4-1:0.128: couldn't find an input interrupt endpoint [ 931.680217][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.686718][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.777283][ T976] usb 4-1: USB disconnect, device number 82 [ 932.127855][T16023] fuse: Bad value for 'fd' [ 932.146124][T16023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.178575][T16023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.972648][ T5887] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 933.181724][ T5887] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 933.191479][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.210535][ T5887] usb 4-1: Product: syz [ 933.220981][ T5887] usb 4-1: Manufacturer: syz [ 933.227969][ T5887] usb 4-1: SerialNumber: syz [ 933.252076][ T5887] usb 4-1: config 0 descriptor?? [ 933.268386][T16036] xt_socket: unknown flags 0x8 [ 933.537377][ T5888] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 933.698563][ T5888] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 933.743727][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 933.792316][ T5888] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 933.811545][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 933.826479][ T5888] usb 1-1: SerialNumber: syz [ 933.886409][T16031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.898007][T16031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.920206][ T5887] usb 4-1: Firmware version (0.0) predates our first public release. [ 933.933070][ T5887] usb 4-1: Please update to version 0.2 or newer [ 934.055639][ T5888] usb 1-1: 0:2 : does not exist [ 934.067487][ T5889] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 934.078351][ T5888] usb 1-1: unit 5 not found! [ 934.093563][ T5888] usb 1-1: USB disconnect, device number 74 [ 934.130134][ T5887] usb 4-1: Firmware: build Ÿ‡EŸ¦îº“8„<ë×ÉÉHônÆ]° üa.—ÆJÜXm¥Ûˆ(Æ.ÆY [ 934.135243][T16047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.151410][T16047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.231672][ T5889] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 934.241249][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.257931][ T5889] usb 3-1: config 0 descriptor?? [ 934.268195][ T7056] udevd[7056]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 934.284619][T14916] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 934.361837][ T5887] usb 4-1: USB disconnect, device number 83 [ 934.447252][T14916] usb 5-1: Using ep0 maxpacket: 8 [ 934.455786][T14916] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 934.465565][T14916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.474326][T14916] usb 5-1: Product: syz [ 934.480714][T14916] usb 5-1: Manufacturer: syz [ 934.485757][T14916] usb 5-1: SerialNumber: syz [ 934.494241][T14916] usb 5-1: config 0 descriptor?? [ 934.697296][ T5889] [drm:udl_init] *ERROR* Selecting channel failed [ 934.717415][T14916] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 934.739056][ T5889] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 934.756083][ T5889] [drm] Initialized udl on minor 2 [ 934.779610][T16055] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 934.792132][ T5889] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 934.805655][ T5889] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 934.817300][ T5888] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 934.830323][ T5889] usb 3-1: USB disconnect, device number 92 [ 934.839381][ T5888] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 934.870490][ T5888] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 935.037358][ T5887] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 935.199073][ T5887] usb 1-1: config 0 has no interfaces? [ 935.209947][ T5887] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 935.380050][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.404126][ T5887] usb 1-1: Product: syz [ 935.408793][ T5887] usb 1-1: Manufacturer: syz [ 935.413606][ T5887] usb 1-1: SerialNumber: syz [ 935.427258][T12935] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 935.911575][ T5887] usb 1-1: config 0 descriptor?? [ 935.969042][T12935] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 935.982805][T12935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.028518][T12935] usb 4-1: Product: syz [ 936.032750][T12935] usb 4-1: Manufacturer: syz [ 936.142901][T12935] usb 4-1: SerialNumber: syz [ 936.171416][T12935] usb 4-1: config 0 descriptor?? [ 936.329326][T14916] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 936.521998][T16069] tipc: Failed to remove unknown binding: 66,1,1/0:3765026057/3765026059 [ 936.817929][T16059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.831382][T16059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.890419][T12935] usb 4-1: Firmware version (0.0) predates our first public release. [ 936.903869][T12935] usb 4-1: Please update to version 0.2 or newer [ 937.086722][T12935] usb 4-1: Firmware: build Ÿ‡EŸ¦îº“8„<ë×ÉÉHônÆ]° üa.—ÆJÜXm¥Ûˆ(Æ.ÆY [ 937.313951][T12935] usb 4-1: USB disconnect, device number 84 [ 937.437841][ T9] usb 5-1: USB disconnect, device number 76 [ 937.589974][T16089] tipc: Enabling not permitted [ 937.601543][T16089] tipc: Enabling of bearer rejected, failed to enable media [ 937.894497][T16092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2895'. [ 937.965366][T16092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 938.049136][T16092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 938.230328][ T5889] usb 1-1: USB disconnect, device number 75 [ 938.287397][ T5888] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 938.307555][T14916] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 938.311443][T16104] netlink: 'syz.0.2900': attribute type 9 has an invalid length. [ 938.345064][T16104] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2900'. [ 938.439722][ T5888] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 938.454289][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.475077][T14916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 938.498333][ T5888] usb 4-1: config 0 descriptor?? [ 938.503622][T14916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.516323][T14916] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 938.527731][T14916] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 938.536082][T14916] usb 5-1: Manufacturer: syz [ 938.547883][T14916] usb 5-1: config 0 descriptor?? [ 938.673713][T16118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2906'. [ 938.732981][ T5888] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 938.772871][T14916] usbhid 5-1:0.0: can't add hid device: -71 [ 938.780700][T14916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 938.807237][T14916] usb 5-1: USB disconnect, device number 77 [ 938.878145][T12935] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 938.887431][T16125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.896730][T16125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.037503][T12935] usb 1-1: Using ep0 maxpacket: 32 [ 939.046669][T12935] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 939.055286][T12935] usb 1-1: config 0 has no interface number 0 [ 939.061693][T12935] usb 1-1: config 0 interface 105 has no altsetting 0 [ 939.070675][T12935] usb 1-1: New USB device found, idVendor=2fb9, idProduct=97fd, bcdDevice=45.72 [ 939.080130][T12935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.088644][T12935] usb 1-1: Product: syz [ 939.093024][T12935] usb 1-1: Manufacturer: syz [ 939.101438][T12935] usb 1-1: SerialNumber: syz [ 939.115164][T16125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.115360][T12935] usb 1-1: config 0 descriptor?? [ 939.125780][T16125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.148723][ T5888] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 939.173867][ T5888] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 939.342071][T12935] usb 1-1: bad CDC descriptors [ 939.355856][T12935] usb 1-1: USB disconnect, device number 76 [ 939.358050][ T5888] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 939.372873][ T5888] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 939.549808][ T5888] asix 4-1:0.0 eth1: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, 02:12:6f:2f:29:31 [ 939.578420][ T5888] usb 4-1: USB disconnect, device number 85 [ 939.607515][ T5888] asix 4-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 939.820958][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 939.821016][ T30] audit: type=1326 audit(1742931577.069:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16134 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8b8d169 code=0x7ffc0000 [ 940.155233][ T5888] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 940.219279][T16133] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2912'. [ 940.247295][ T30] audit: type=1326 audit(1742931577.069:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16134 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8b8d169 code=0x7ffc0000 [ 940.381839][ T30] audit: type=1326 audit(1742931577.089:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16134 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f4dd8b8d169 code=0x7ffc0000 [ 940.477602][ T30] audit: type=1326 audit(1742931577.089:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16134 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8b8d169 code=0x7ffc0000 [ 940.610736][ T5888] usb 3-1: config 0 has no interfaces? [ 940.620219][T16147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 940.637283][ T30] audit: type=1326 audit(1742931577.089:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16134 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8b8d169 code=0x7ffc0000 [ 940.659695][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.695069][ T5888] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 940.714571][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.801771][ T30] audit: type=1326 audit(1742931577.089:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16134 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4dd8b8d169 code=0x7ffc0000 [ 940.844544][ T5888] usb 3-1: Product: syz [ 940.875049][ T5888] usb 3-1: Manufacturer: syz [ 940.885173][ T5888] usb 3-1: SerialNumber: syz [ 940.926042][ T5888] usb 3-1: config 0 descriptor?? [ 941.026182][ T30] audit: type=1326 audit(1742931577.089:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16134 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8b8d169 code=0x7ffc0000 [ 941.467275][ T30] audit: type=1326 audit(1742931577.089:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16134 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4dd8b8d169 code=0x7ffc0000 [ 941.554905][T16155] netlink: 'syz.0.2916': attribute type 9 has an invalid length. [ 941.603606][T16155] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2916'. [ 942.040573][T16150] syz.1.2914 (16150): drop_caches: 2 [ 942.277284][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 942.378414][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2918'. [ 942.487312][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 942.520884][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 942.578087][T16166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.586959][T16166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.722159][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 942.744834][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 942.768254][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.777695][ T9] usb 5-1: Product: syz [ 942.782163][ T9] usb 5-1: Manufacturer: syz [ 942.793850][ T9] usb 5-1: SerialNumber: syz [ 942.814291][ T9] usb 5-1: config 0 descriptor?? [ 943.054358][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 943.097165][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 943.247386][ T5889] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 943.285728][T12935] usb 3-1: USB disconnect, device number 93 [ 943.397217][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 943.409598][ T5889] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 943.421919][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.433129][ T5889] usb 4-1: Product: syz [ 943.442772][ T5889] usb 4-1: Manufacturer: syz [ 943.451493][ T5889] usb 4-1: SerialNumber: syz [ 943.463489][ T5889] usb 4-1: config 0 descriptor?? [ 943.478168][T16157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.705554][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 943.713078][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 943.728027][ T5889] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 943.939716][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 943.951388][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 943.978081][ T9] usb 5-1: USB disconnect, device number 78 [ 943.992963][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 944.026841][ T9] em28xx 5-1:0.0: Freeing device [ 944.607966][T16199] IPVS: Unknown mcast interface: pimreg [ 945.379131][ T5889] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 945.552817][T16206] netlink: 'syz.0.2932': attribute type 9 has an invalid length. [ 945.552847][T16206] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2932'. [ 946.339333][T16231] tipc: Failed to remove unknown binding: 66,1,1/32767:1218843436/1218843438 [ 946.722884][T14916] usb 4-1: USB disconnect, device number 86 [ 947.037204][ T5889] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 947.238099][ T5889] usb 5-1: device descriptor read/64, error -71 [ 947.338234][T16225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 947.509987][ T5889] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 947.537199][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 947.657478][ T5889] usb 5-1: device descriptor read/64, error -71 [ 947.697181][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 947.704189][ T9] usb 4-1: config 0 has an invalid interface number: 43 but max is 0 [ 947.712750][ T9] usb 4-1: config 0 has no interface number 0 [ 947.767836][ T5889] usb usb5-port1: attempt power cycle [ 947.777321][ T9] usb 4-1: config 0 interface 43 has no altsetting 0 [ 947.807230][ T976] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 947.837326][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 947.846488][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.936443][ T9] usb 4-1: config 0 descriptor?? [ 948.017221][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 948.024060][ T976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.045684][ T976] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 948.117276][ T5889] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 948.127340][ T976] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 948.137936][ T5889] usb 5-1: device descriptor read/8, error -71 [ 948.151281][ T976] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 948.164446][T16241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.173261][T16241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.244438][ T976] usb 3-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1A, changing to 0xA [ 948.256603][ T9] usb 4-1: string descriptor 0 read error: -71 [ 948.316132][ T976] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0xA has invalid maxpacket 239, setting to 64 [ 948.329336][ T9] usb 4-1: USB disconnect, device number 87 [ 948.353084][ T976] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 948.362488][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.387292][ T5889] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 948.417416][ T976] usb 3-1: Product: syz [ 948.421665][ T976] usb 3-1: Manufacturer: syz [ 948.426311][ T976] usb 3-1: SerialNumber: syz [ 948.442803][ T5889] usb 5-1: device descriptor read/8, error -71 [ 948.567915][ T5889] usb usb5-port1: unable to enumerate USB device [ 948.589020][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 948.762326][ T976] usb 3-1: USB disconnect, device number 94 [ 948.874109][T16251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2946'. [ 948.884334][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 948.896567][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 949.317263][ T976] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 949.508965][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 949.528562][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.544618][ T976] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 949.640759][ T976] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 949.677121][ T976] usb 3-1: Manufacturer: syz [ 949.696425][ T976] usb 3-1: config 0 descriptor?? [ 949.727281][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 949.867542][ T9] usb 1-1: device descriptor read/64, error -71 [ 949.988752][ T976] usbhid 3-1:0.0: can't add hid device: -71 [ 949.994845][ T976] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 950.070165][ T976] usb 3-1: USB disconnect, device number 95 [ 950.127617][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 950.180590][T16277] tipc: Enabling not permitted [ 950.237674][T16277] tipc: Enabling of bearer rejected, failed to enable media [ 950.277185][ T9] usb 1-1: device descriptor read/64, error -71 [ 950.398815][ T9] usb usb1-port1: attempt power cycle [ 950.747269][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 950.789899][T16291] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2959'. [ 950.802432][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2959'. [ 950.811794][ T9] usb 1-1: device descriptor read/8, error -71 [ 950.822899][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2959'. [ 951.077291][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 951.121418][ T9] usb 1-1: device descriptor read/8, error -71 [ 951.177221][ T5888] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 951.185001][T14916] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 951.247858][ T9] usb usb1-port1: unable to enumerate USB device [ 951.401292][T14916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 951.416740][ T5888] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 951.427383][T14916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.444931][ T5888] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 951.455701][T14916] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 951.468893][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.477308][T14916] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 951.485348][T14916] usb 4-1: Manufacturer: syz [ 951.501680][ T5888] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 951.513922][T14916] usb 4-1: config 0 descriptor?? [ 951.785393][T16300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.794365][T16300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.847949][T14916] usbhid 4-1:0.0: can't add hid device: -71 [ 951.854794][T14916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 951.904552][T14916] usb 4-1: USB disconnect, device number 88 [ 951.978033][T16302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.989651][T16302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.533817][T16310] loop9: detected capacity change from 0 to 7 [ 952.542911][T16310] Dev loop9: unable to read RDB block 7 [ 952.550506][T16310] loop9: unable to read partition table [ 952.561730][ T5888] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 952.568745][T16310] loop9: partition table beyond EOD, truncated [ 952.575361][T16310] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 953.077246][ T5888] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 953.085570][ T5888] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 953.311379][T16318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.343245][T16318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.830977][T16326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2969'. [ 953.841567][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'. [ 953.878610][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'. [ 953.947195][ T5888] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 954.102896][ T5888] usb 4-1: config 0 has no interfaces? [ 954.113881][ T5888] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 954.127213][ T976] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 954.127587][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.146852][ T5888] usb 4-1: Product: syz [ 954.153400][ T5888] usb 4-1: Manufacturer: syz [ 954.159960][ T5888] usb 4-1: SerialNumber: syz [ 954.168474][ T5888] usb 4-1: config 0 descriptor?? [ 954.292509][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 954.304196][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.318727][ T976] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 954.330857][ T976] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 954.392457][ T9] usb 3-1: USB disconnect, device number 96 [ 954.413087][ T976] usb 1-1: Manufacturer: syz [ 954.439327][ T976] usb 1-1: config 0 descriptor?? [ 954.663056][ T976] usbhid 1-1:0.0: can't add hid device: -71 [ 954.669414][ T976] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 954.683822][ T976] usb 1-1: USB disconnect, device number 81 [ 955.542484][T16343] fuse: Bad value for 'group_id' [ 955.563001][T16343] fuse: Bad value for 'group_id' [ 955.698747][ T5889] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 955.735580][T16351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.745241][T16351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.858991][ T5889] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 955.868411][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.877353][ T976] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 955.878118][ T5889] usb 1-1: config 0 descriptor?? [ 956.045756][ T976] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 956.055901][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.065278][ T976] usb 5-1: Product: syz [ 956.070480][ T976] usb 5-1: Manufacturer: syz [ 956.075143][ T976] usb 5-1: SerialNumber: syz [ 956.087739][ T976] usb 5-1: config 0 descriptor?? [ 956.301088][ T976] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 956.319287][ T976] asix 5-1:0.0: probe with driver asix failed with error -71 [ 956.335445][ T5889] [drm:udl_init] *ERROR* Selecting channel failed [ 956.338509][ T976] usb 5-1: USB disconnect, device number 83 [ 956.363929][ T5889] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 956.372812][T16353] netlink: 'syz.1.2978': attribute type 9 has an invalid length. [ 956.373775][ T5889] [drm] Initialized udl on minor 2 [ 956.392256][ T5889] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 956.392869][T16353] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2978'. [ 956.403626][ T5889] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 956.418375][T14916] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 956.426404][T14916] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 956.455171][ T5889] usb 1-1: USB disconnect, device number 82 [ 956.557243][T10157] usb 4-1: USB disconnect, device number 89 [ 956.686565][T16361] fuse: Bad value for 'fd' [ 956.694030][T16361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.709880][T16361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.148980][ T5841] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 957.357291][ T5889] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 957.502704][ T5888] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 957.669128][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.681221][ T5888] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 957.697190][T14916] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 957.705485][ T5889] usb 5-1: config 0 has no interfaces? [ 957.754573][ T5888] usb 3-1: config 0 has no interface number 0 [ 957.778898][T16383] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 957.795866][ T5889] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 957.807163][ T5888] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 957.832891][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.859986][ T5889] usb 5-1: config 0 descriptor?? [ 957.866293][ T5888] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 957.877723][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.900286][ T5888] usb 3-1: Product: syz [ 957.904515][ T5888] usb 3-1: Manufacturer: syz [ 957.918654][ T5888] usb 3-1: SerialNumber: syz [ 957.923917][T14916] usb 4-1: config 0 has no interfaces? [ 957.934115][T14916] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 957.943386][T14916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.958925][ T5888] usb 3-1: config 0 descriptor?? [ 957.965167][T14916] usb 4-1: Product: syz [ 957.974823][T14916] usb 4-1: Manufacturer: syz [ 957.980784][T16363] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 957.990753][T14916] usb 4-1: SerialNumber: syz [ 958.009837][ T5888] usb-storage 3-1:0.20: USB Mass Storage device detected [ 958.018392][T14916] usb 4-1: config 0 descriptor?? [ 958.031343][T16370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 958.062015][ T5888] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 958.100360][T16374] netlink: 'syz.4.2986': attribute type 10 has an invalid length. [ 958.109551][T16374] veth1_vlan: entered allmulticast mode [ 958.125879][T16374] team0: Device veth1_vlan failed to register rx_handler [ 958.164805][ T5889] usb 5-1: USB disconnect, device number 84 [ 958.484399][ T5888] scsi host1: usb-storage 3-1:0.20 [ 958.514877][ T5888] usb 3-1: USB disconnect, device number 97 [ 958.669237][T16392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.715815][T16392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.749855][T16395] netlink: 'syz.0.2991': attribute type 9 has an invalid length. [ 958.769283][T16395] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2991'. [ 959.097372][ T5888] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 959.247270][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 959.261813][ T5888] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 959.270240][ T5888] usb 5-1: config 0 has no interface number 0 [ 959.286544][ T5888] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 959.303125][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.354769][ T5888] usb 5-1: Product: syz [ 959.398925][ T5888] usb 5-1: Manufacturer: syz [ 959.420294][ T5888] usb 5-1: SerialNumber: syz [ 959.465644][ T5888] usb 5-1: config 0 descriptor?? [ 959.485402][ T5888] redrat3 5-1:0.31: Couldn't find all endpoints [ 959.963937][T16405] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 960.112562][T16414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2998'. [ 960.132991][T16414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2998'. [ 960.411730][T16421] lo: MTU too low for tipc bearer [ 960.418602][T16421] tipc: Enabling of bearer rejected, failed to enable media [ 960.507153][T14916] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 960.570177][T16424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3002'. [ 960.663560][T14916] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 960.672871][T14916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.688092][T14916] usb 3-1: config 0 descriptor?? [ 960.794740][T16429] veth0_to_team: entered promiscuous mode [ 960.803186][T16429] veth0_to_team: entered allmulticast mode [ 960.889630][ T5889] usb 5-1: USB disconnect, device number 85 [ 960.965337][T16431] netlink: 'syz.1.3005': attribute type 9 has an invalid length. [ 960.986693][T16431] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3005'. [ 961.061398][T10157] usb 4-1: USB disconnect, device number 90 [ 961.346287][T14916] [drm:udl_init] *ERROR* Selecting channel failed [ 961.362014][T14916] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 961.370633][T14916] [drm] Initialized udl on minor 2 [ 961.376207][T14916] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 961.385680][T14916] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 961.400167][T16445] tipc: Failed to remove unknown binding: 66,1,1/0:2858054998/2858055000 [ 961.451017][ T5889] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 961.467655][T14916] usb 3-1: USB disconnect, device number 98 [ 961.472312][T16448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3011'. [ 961.476853][ T5889] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 961.577163][T10157] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 961.762296][T10157] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.777843][T10157] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 961.795136][T16453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.810337][T16453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.925831][T10157] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 961.928352][T16453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.937277][T10157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 961.970204][T16453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.979250][T10157] usb 1-1: SerialNumber: syz [ 962.190741][T16456] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 962.278961][T10157] usb 1-1: 0:2 : does not exist [ 962.299723][T10157] usb 1-1: USB disconnect, device number 83 [ 962.366698][T16460] fuse: Bad value for 'fd' [ 962.423530][T16460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.441668][T16460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.508003][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.687384][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 963.041251][ T9] usb 4-1: config 0 has no interfaces? [ 963.055814][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 963.072328][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.132546][ T9] usb 4-1: Product: syz [ 963.142142][ T9] usb 4-1: Manufacturer: syz [ 963.155936][ T9] usb 4-1: SerialNumber: syz [ 963.179066][ T9] usb 4-1: config 0 descriptor?? [ 963.417414][ T976] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 963.638121][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 963.697872][ T976] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 963.710045][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.729991][ T976] usb 3-1: Product: syz [ 963.742547][ T976] usb 3-1: Manufacturer: syz [ 963.756953][ T976] usb 3-1: SerialNumber: syz [ 963.795162][ T976] usb 3-1: config 0 descriptor?? [ 963.805518][ T9] usb 1-1: config 0 has no interfaces? [ 963.817302][ T5888] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 963.817573][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 963.904978][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.920585][ T9] usb 1-1: Product: syz [ 963.929684][ T9] usb 1-1: Manufacturer: syz [ 963.943039][ T9] usb 1-1: SerialNumber: syz [ 963.970400][ T9] usb 1-1: config 0 descriptor?? [ 963.983207][ T5888] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 963.992942][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.059746][ T5888] usb 5-1: Product: syz [ 964.067559][ T5888] usb 5-1: Manufacturer: syz [ 964.073816][ T5888] usb 5-1: SerialNumber: syz [ 964.110949][ T5888] usb 5-1: config 0 descriptor?? [ 964.452076][T16471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.471472][T16471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.495092][ T976] usb 3-1: Firmware: major: 159, minor: 135, hardware type: UNKNOWN (69) [ 964.727296][ T976] usb 3-1: failed to fetch extended address, random address set [ 964.770762][ T976] usb 3-1: atusb_probe: initialization failed, error = -524 [ 964.798440][ T976] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 964.819868][ T976] usb 3-1: USB disconnect, device number 99 [ 964.827877][T16476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.840732][T16476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.855961][ T5888] usb 5-1: Firmware version (0.0) predates our first public release. [ 964.866398][ T5888] usb 5-1: Please update to version 0.2 or newer [ 965.068680][ T5888] usb 5-1: Firmware: build Ÿ‡EŸ¦îº“8„<ë×ÉÉHônÆ]° üa.—ÆJÜXm¥Ûˆ(Æ.ÆY [ 965.293634][ T5888] usb 5-1: USB disconnect, device number 86 [ 966.151408][ T5888] usb 4-1: USB disconnect, device number 91 [ 966.280895][ T5841] Bluetooth: hci4: unexpected event for opcode 0x14e2 [ 966.406508][ T976] usb 1-1: USB disconnect, device number 84 [ 966.867345][ T976] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 967.180058][T16510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.189045][T16510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.202032][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.229031][ T976] usb 1-1: config 0 has no interfaces? [ 967.290966][ T976] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 967.320998][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.358835][ T976] usb 1-1: config 0 descriptor?? [ 967.630196][T16499] fuse: Invalid uid '00000000000000035264' [ 967.648259][T12935] usb 1-1: USB disconnect, device number 85 [ 968.277157][ T5889] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 968.430220][ T5889] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.440898][ T5889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 968.622364][ T5889] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 968.646968][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 968.668974][ T5889] usb 4-1: SerialNumber: syz [ 968.765539][T16512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.996658][ T5889] usb 4-1: 0:2 : does not exist [ 969.106564][ T5889] usb 4-1: USB disconnect, device number 92 [ 969.237287][T12935] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 969.358840][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.401206][T12935] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.412099][T12935] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 969.512625][T12935] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 969.522698][T12935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 969.533295][T12935] usb 5-1: SerialNumber: syz [ 969.791361][T12935] usb 5-1: 0:2 : does not exist [ 969.815987][T12935] usb 5-1: USB disconnect, device number 87 [ 970.020628][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 970.094089][T16532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3037'. [ 970.163940][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3037'. [ 970.343364][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'. [ 970.593395][T16549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3042'. [ 970.606406][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3042'. [ 970.635913][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3042'. [ 970.687831][T12935] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 970.847246][T14916] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 970.877301][ T5889] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 970.893763][T12935] usb 1-1: config 0 has no interfaces? [ 970.952728][T12935] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 970.962411][T12935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.970712][T12935] usb 1-1: Product: syz [ 971.001427][T14916] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 971.016087][T14916] usb 5-1: config 0 has no interface number 0 [ 971.032794][T12935] usb 1-1: Manufacturer: syz [ 971.033130][T14916] usb 5-1: config 0 interface 128 has no altsetting 0 [ 971.047325][T12935] usb 1-1: SerialNumber: syz [ 971.047769][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 971.072713][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.080235][T12935] usb 1-1: config 0 descriptor?? [ 971.128117][T14916] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 971.142152][ T5889] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 971.162196][T14916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.174573][ T5889] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 971.190773][T14916] usb 5-1: Product: syz [ 971.212645][T14916] usb 5-1: Manufacturer: syz [ 971.218649][ T5889] usb 3-1: Manufacturer: syz [ 971.233042][T14916] usb 5-1: SerialNumber: syz [ 971.247441][ T5889] usb 3-1: config 0 descriptor?? [ 971.304183][T14916] usb 5-1: config 0 descriptor?? [ 971.341035][T14916] radio-si470x 5-1:0.128: could not find interrupt in endpoint [ 971.349755][T14916] radio-si470x 5-1:0.128: probe with driver radio-si470x failed with error -5 [ 971.416878][T14916] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 971.541345][ T5889] usbhid 3-1:0.0: can't add hid device: -71 [ 971.549048][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 971.574887][T12935] usb 5-1: USB disconnect, device number 88 [ 971.627420][ T5889] usb 3-1: USB disconnect, device number 100 [ 972.712488][T12935] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 972.919024][T12935] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 972.930102][T12935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 972.951599][T12935] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 972.974743][T12935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 972.991924][T12935] usb 3-1: SerialNumber: syz [ 973.978282][ T9] usb 1-1: USB disconnect, device number 86 [ 974.692280][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'. [ 974.829979][ T30] audit: type=1326 audit(1742931612.079:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16591 comm="syz.1.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796dd8d169 code=0x7ffc0000 [ 975.170772][T16593] fuse: Bad value for 'fd' [ 975.175306][ T30] audit: type=1326 audit(1742931612.079:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16591 comm="syz.1.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796dd8d169 code=0x7ffc0000 [ 975.225934][T16593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.227201][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 975.249237][ T30] audit: type=1326 audit(1742931612.079:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16591 comm="syz.1.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f796dd8d169 code=0x7ffc0000 [ 975.272023][ C0] vkms_vblank_simulate: vblank timer overrun [ 975.344200][T16596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.351802][T12935] usb 3-1: 0:2 : does not exist [ 975.434617][T12935] usb 3-1: USB disconnect, device number 101 [ 975.462159][ T30] audit: type=1326 audit(1742931612.079:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16591 comm="syz.1.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796dd8d169 code=0x7ffc0000 [ 975.547288][ T30] audit: type=1326 audit(1742931612.079:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16591 comm="syz.1.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796dd8d169 code=0x7ffc0000 [ 975.617260][ T9] usb 4-1: config 0 has no interfaces? [ 975.644053][ T30] audit: type=1326 audit(1742931612.099:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16591 comm="syz.1.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f796dd8d169 code=0x7ffc0000 [ 975.668626][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 975.779566][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.783647][ T9] usb 4-1: Product: syz [ 975.783673][ T9] usb 4-1: Manufacturer: syz [ 975.783688][ T9] usb 4-1: SerialNumber: syz [ 975.802543][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 975.808843][ T9] usb 4-1: config 0 descriptor?? [ 975.868991][ T30] audit: type=1326 audit(1742931612.109:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16591 comm="syz.1.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f796dd29359 code=0x7ffc0000 [ 975.869038][ T30] audit: type=1326 audit(1742931612.109:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16591 comm="syz.1.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f796dd29359 code=0x7ffc0000 [ 975.869077][ T30] audit: type=1326 audit(1742931612.109:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16591 comm="syz.1.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f796dd29359 code=0x7ffc0000 [ 975.869115][ T30] audit: type=1326 audit(1742931612.109:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16591 comm="syz.1.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f796dd29359 code=0x7ffc0000 [ 975.907235][T16592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.907464][T16592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.561047][ T5841] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 976.657387][T16611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.657613][T16611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.211806][T16605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.287214][T12935] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 977.440877][T12935] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 977.453170][T12935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.473535][T12935] usb 1-1: config 0 descriptor?? [ 977.948089][ T5889] usb 4-1: USB disconnect, device number 93 [ 978.183962][T12935] [drm:udl_init] *ERROR* Selecting channel failed [ 978.186918][T16614] netlink: 'syz.3.3061': attribute type 9 has an invalid length. [ 978.218474][T16614] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3061'. [ 978.255731][T12935] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 978.354522][T12935] [drm] Initialized udl on minor 2 [ 978.366894][T12935] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 978.427467][T12935] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 978.437815][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 978.448560][T12935] usb 1-1: USB disconnect, device number 87 [ 978.458198][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 979.227222][T14916] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 979.376999][T16626] netlink: 'syz.2.3066': attribute type 9 has an invalid length. [ 979.435051][T16626] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3066'. [ 979.778953][T16639] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 979.937544][T14916] usb 4-1: device descriptor read/64, error -71 [ 979.949587][T16644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3072'. [ 980.004567][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3074'. [ 980.026379][T16650] ipvlan2: entered promiscuous mode [ 980.044492][T16650] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 980.123673][ T5841] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 980.243451][T14916] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 980.498845][T14916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.512201][T14916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 980.523643][T14916] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 980.533433][T14916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 980.542066][T14916] usb 4-1: SerialNumber: syz [ 980.762172][T12935] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 980.841334][T16648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 980.978714][T12935] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 981.011235][T14916] usb 4-1: 0:2 : does not exist [ 981.034231][T12935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.052768][T14916] usb 4-1: USB disconnect, device number 95 [ 981.058924][ T5888] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 981.083455][T12935] usb 5-1: config 0 descriptor?? [ 981.416990][ T5888] usb 3-1: config 0 has no interfaces? [ 981.434854][ T5888] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 981.448570][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 981.468816][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.499485][ T5888] usb 3-1: Product: syz [ 981.525732][ T5888] usb 3-1: Manufacturer: syz [ 981.582894][ T5888] usb 3-1: SerialNumber: syz [ 981.658211][ T5888] usb 3-1: config 0 descriptor?? [ 982.738282][T12935] [drm:udl_init] *ERROR* Selecting channel failed [ 982.783529][T16669] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 982.793305][T16669] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 982.801978][T16669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 982.815768][T16669] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 982.826056][T16669] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 982.833643][T16669] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 982.918744][T12935] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 982.953207][T12935] [drm] Initialized udl on minor 2 [ 983.001648][T12935] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 983.034352][T12935] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 983.054167][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 983.082031][ T288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.096861][T12935] usb 5-1: USB disconnect, device number 89 [ 983.104225][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 983.118335][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 983.372491][ T288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.612282][ T288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.634047][T16681] fuse: root generation should be zero [ 983.661871][T16678] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3082'. [ 983.734650][ T288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.875184][T16684] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3084'. [ 983.909657][T16670] chnl_net:caif_netlink_parms(): no params data found [ 983.928871][T16687] FAULT_INJECTION: forcing a failure. [ 983.928871][T16687] name failslab, interval 1, probability 0, space 0, times 0 [ 983.944424][T16684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3084'. [ 983.993657][T16687] CPU: 0 UID: 0 PID: 16687 Comm: syz.1.3085 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 983.993688][T16687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 983.993699][T16687] Call Trace: [ 983.993705][T16687] [ 983.993712][T16687] dump_stack_lvl+0x241/0x360 [ 983.993737][T16687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.993757][T16687] ? __pfx__printk+0x10/0x10 [ 983.993777][T16687] ? __pfx___might_resched+0x10/0x10 [ 983.993794][T16687] should_fail_ex+0x424/0x570 [ 983.993816][T16687] should_failslab+0xac/0x100 [ 983.993836][T16687] ? __get_vm_area_node+0x132/0x2d0 [ 983.993858][T16687] __kmalloc_cache_node_noprof+0x74/0x3c0 [ 983.993882][T16687] __get_vm_area_node+0x132/0x2d0 [ 983.993905][T16687] __vmalloc_node_range_noprof+0x349/0x1390 [ 983.993929][T16687] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 983.993952][T16687] ? kstrtoull+0x1d3/0x2f0 [ 983.993974][T16687] ? __pfx_kstrtoull+0x10/0x10 [ 983.994000][T16687] ? kstrtouint+0xfc/0x190 [ 983.994020][T16687] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 983.994048][T16687] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 983.994074][T16687] __vmalloc_noprof+0x79/0x90 [ 983.994096][T16687] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 983.994117][T16687] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 983.994137][T16687] ? bpf_prog_alloc+0x28/0x1b0 [ 983.994158][T16687] bpf_prog_alloc+0x3a/0x1b0 [ 983.994179][T16687] bpf_prog_load+0x8ac/0x2320 [ 983.994205][T16687] ? __lock_acquire+0xad5/0xd80 [ 983.994226][T16687] ? __pfx_bpf_prog_load+0x10/0x10 [ 983.994260][T16687] __sys_bpf+0x58c/0x850 [ 983.994279][T16687] ? __pfx___sys_bpf+0x10/0x10 [ 983.994305][T16687] ? ksys_write+0x275/0x2d0 [ 983.994327][T16687] __x64_sys_bpf+0x7c/0x90 [ 983.994345][T16687] do_syscall_64+0xf3/0x230 [ 983.994366][T16687] ? clear_bhb_loop+0x45/0xa0 [ 983.994383][T16687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.994398][T16687] RIP: 0033:0x7f796dd8d169 [ 983.994411][T16687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.994425][T16687] RSP: 002b:00007f796ecb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 983.994442][T16687] RAX: ffffffffffffffda RBX: 00007f796dfa5fa0 RCX: 00007f796dd8d169 [ 983.994453][T16687] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 983.994463][T16687] RBP: 00007f796ecb4090 R08: 0000000000000000 R09: 0000000000000000 [ 983.994473][T16687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.994482][T16687] R13: 0000000000000001 R14: 00007f796dfa5fa0 R15: 00007f796e0cfa28 [ 983.994500][T16687] [ 983.994658][T16687] syz.1.3085: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 984.272500][T16687] CPU: 0 UID: 0 PID: 16687 Comm: syz.1.3085 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 984.272528][T16687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 984.272541][T16687] Call Trace: [ 984.272548][T16687] [ 984.272557][T16687] dump_stack_lvl+0x241/0x360 [ 984.272589][T16687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.272616][T16687] ? __pfx__printk+0x10/0x10 [ 984.272638][T16687] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 984.272665][T16687] ? __rcu_read_unlock+0xa1/0x110 [ 984.272691][T16687] warn_alloc+0x27c/0x410 [ 984.272723][T16687] ? __pfx_warn_alloc+0x10/0x10 [ 984.272754][T16687] ? __get_vm_area_node+0x280/0x2d0 [ 984.272788][T16687] __vmalloc_node_range_noprof+0x36e/0x1390 [ 984.272822][T16687] ? kstrtoull+0x1d3/0x2f0 [ 984.272852][T16687] ? __pfx_kstrtoull+0x10/0x10 [ 984.272888][T16687] ? kstrtouint+0xfc/0x190 [ 984.272914][T16687] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 984.272952][T16687] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 984.272978][T16687] __vmalloc_noprof+0x79/0x90 [ 984.273008][T16687] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 984.273043][T16687] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 984.273070][T16687] ? bpf_prog_alloc+0x28/0x1b0 [ 984.273098][T16687] bpf_prog_alloc+0x3a/0x1b0 [ 984.273126][T16687] bpf_prog_load+0x8ac/0x2320 [ 984.273161][T16687] ? __lock_acquire+0xad5/0xd80 [ 984.273189][T16687] ? __pfx_bpf_prog_load+0x10/0x10 [ 984.273237][T16687] __sys_bpf+0x58c/0x850 [ 984.273265][T16687] ? __pfx___sys_bpf+0x10/0x10 [ 984.273298][T16687] ? ksys_write+0x275/0x2d0 [ 984.273328][T16687] __x64_sys_bpf+0x7c/0x90 [ 984.273352][T16687] do_syscall_64+0xf3/0x230 [ 984.273379][T16687] ? clear_bhb_loop+0x45/0xa0 [ 984.273403][T16687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.273423][T16687] RIP: 0033:0x7f796dd8d169 [ 984.273442][T16687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.273460][T16687] RSP: 002b:00007f796ecb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 984.273481][T16687] RAX: ffffffffffffffda RBX: 00007f796dfa5fa0 RCX: 00007f796dd8d169 [ 984.273497][T16687] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 984.273511][T16687] RBP: 00007f796ecb4090 R08: 0000000000000000 R09: 0000000000000000 [ 984.273528][T16687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.273541][T16687] R13: 0000000000000001 R14: 00007f796dfa5fa0 R15: 00007f796e0cfa28 [ 984.273567][T16687] [ 984.273647][T16687] Mem-Info: [ 984.537695][T10157] usb 3-1: USB disconnect, device number 102 [ 984.594775][T16687] active_anon:10126 inactive_anon:0 isolated_anon:0 [ 984.594775][T16687] active_file:6111 inactive_file:43968 isolated_file:0 [ 984.594775][T16687] unevictable:768 dirty:135 writeback:0 [ 984.594775][T16687] slab_reclaimable:6326 slab_unreclaimable:104361 [ 984.594775][T16687] mapped:30072 shmem:1416 pagetables:1720 [ 984.594775][T16687] sec_pagetables:0 bounce:0 [ 984.594775][T16687] kernel_misc_reclaimable:0 [ 984.594775][T16687] free:1306727 free_pcp:3029 free_cma:0 [ 984.644681][T16687] Node 0 active_anon:40504kB inactive_anon:0kB active_file:24444kB inactive_file:175800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120288kB dirty:540kB writeback:0kB shmem:4128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:11928kB pagetables:6880kB sec_pagetables:0kB all_unreclaimable? no [ 984.645358][T16689] tipc: Failed to remove unknown binding: 66,1,1/0:1382797968/1382797970 [ 984.695511][T16687] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 984.746655][T16687] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.815110][ T288] bridge_slave_1: left allmulticast mode [ 984.820321][T16687] lowmem_reserve[]: 0 2490 2491 2491 2491 [ 984.826653][T16687] Node 0 DMA32 free:1310504kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:40364kB inactive_anon:0kB active_file:24444kB inactive_file:175220kB unevictable:1536kB writepending:540kB present:3129332kB managed:2550752kB mlocked:0kB bounce:0kB free_pcp:2508kB local_pcp:1288kB free_cma:0kB [ 984.830524][ T288] bridge_slave_1: left promiscuous mode [ 984.858476][T16687] lowmem_reserve[]: 0 0 0 0 0 [ 984.868220][T16687] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.900849][T16687] lowmem_reserve[]: 0 0 0 0 0 [ 984.905791][T16687] Node 1 Normal free:3894808kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10572kB local_pcp:8524kB free_cma:0kB [ 984.907227][T16669] Bluetooth: hci4: command tx timeout [ 984.949303][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.978319][ T288] bridge_slave_0: left allmulticast mode [ 984.984032][ T288] bridge_slave_0: left promiscuous mode [ 984.995647][T16687] lowmem_reserve[]: 0 0 0 0 0 [ 985.000928][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.046571][T16687] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 985.081572][T16687] Node 0 DMA32: 281*4kB (UME) 540*8kB (UME) 375*16kB (UME) 352*32kB (UME) 206*64kB (UME) 133*128kB (UME) 43*256kB (UME) 13*512kB (UME) 11*1024kB (UME) 3*2048kB (UME) 299*4096kB (M) = 1312692kB [ 985.131081][T16687] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 985.152145][T16687] Node 1 Normal: 351*4kB (UME) 216*8kB (UME) 201*16kB (UME) 316*32kB (UME) 150*64kB (UME) 51*128kB (UME) 19*256kB (UME) 8*512kB (UME) 5*1024kB (UME) 5*2048kB (UME) 937*4096kB (M) = 3894860kB [ 985.178938][T16687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.193470][T16687] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 985.203336][T16687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.213491][T16687] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 985.228603][T16687] 51499 total pagecache pages [ 985.233406][T16687] 0 pages in swap cache [ 985.238411][T16687] Free swap = 124804kB [ 985.242773][T16687] Total swap = 124996kB [ 985.247016][T16687] 2097051 pages RAM [ 985.252271][T16687] 0 pages HighMem/MovableOnly [ 985.263057][T16687] 427577 pages reserved [ 985.267669][T16687] 0 pages cma reserved [ 985.541193][ T288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.551931][ T288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.562277][ T288] bond0 (unregistering): Released all slaves [ 985.610240][T16670] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.620070][T16670] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.638001][T16670] bridge_slave_0: entered allmulticast mode [ 985.645537][T16670] bridge_slave_0: entered promiscuous mode [ 985.662646][T16670] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.670020][T16670] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.682291][T16670] bridge_slave_1: entered allmulticast mode [ 985.690241][T16670] bridge_slave_1: entered promiscuous mode [ 985.699587][ T288] IPVS: stopping master sync thread 7529 ... [ 985.735306][T16670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.746958][T16670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.784221][T16670] team0: Port device team_slave_0 added [ 985.800352][T16670] team0: Port device team_slave_1 added [ 985.843701][T16670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.852659][T16670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.880899][T16670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.909168][T16670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.916187][T16670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.944096][T16670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.005347][T16670] hsr_slave_0: entered promiscuous mode [ 986.012118][T16670] hsr_slave_1: entered promiscuous mode [ 986.020365][T16670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 986.037172][T16670] Cannot create hsr debugfs directory [ 986.175483][ T288] hsr_slave_0: left promiscuous mode [ 986.189628][ T288] hsr_slave_1: left promiscuous mode [ 986.195887][ T288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.207745][ T288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.215884][ T288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.227587][ T288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.254515][ T288] veth1_macvtap: left promiscuous mode [ 986.263375][ T288] veth0_macvtap: left promiscuous mode [ 986.958553][T16669] Bluetooth: hci4: command tx timeout [ 989.049056][T16669] Bluetooth: hci4: command tx timeout [ 991.117317][T16669] Bluetooth: hci4: command tx timeout [ 993.119270][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.127159][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1026.497611][T14916] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1026.507322][T12935] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1026.557254][ T5888] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1026.668233][T14916] usb 3-1: Using ep0 maxpacket: 16 [ 1026.670500][T12935] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1026.690730][T12935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.691199][T14916] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 1026.863362][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 1026.937251][T12935] usb 1-1: Product: syz [ 1026.943387][T14916] usb 3-1: config 0 has no interface number 0 [ 1026.947103][T12935] usb 1-1: Manufacturer: syz [ 1026.954400][T12935] usb 1-1: SerialNumber: syz [ 1026.961382][T12935] usb 1-1: config 0 descriptor?? [ 1026.965410][T14916] usb 3-1: New USB device found, idVendor=0930, idProduct=0220, bcdDevice=8d.f6 [ 1026.976458][ T5888] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 1026.992173][ T5888] usb 5-1: config 0 has no interface number 0 [ 1027.002936][T14916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.016416][T14916] usb 3-1: Product: syz [ 1027.021642][T14916] usb 3-1: Manufacturer: syz [ 1027.026680][T14916] usb 3-1: SerialNumber: syz [ 1027.031791][ T5888] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0005, bcdDevice=d7.9d [ 1027.044941][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.061765][ T5888] usb 5-1: Product: syz [ 1027.066404][ T5888] usb 5-1: Manufacturer: syz [ 1027.073163][ T5888] usb 5-1: SerialNumber: syz [ 1027.084631][T14916] usb 3-1: config 0 descriptor?? [ 1027.113723][ T5888] usb 5-1: config 0 descriptor?? [ 1027.288024][ T5888] ati_remote 5-1:0.172: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1027.322106][T14916] usb 3-1: USB disconnect, device number 103 [ 1027.679578][T12935] usb 1-1: Firmware version (0.0) predates our first public release. [ 1027.688077][T12935] usb 1-1: Please update to version 0.2 or newer [ 1027.887358][T12935] usb 1-1: Firmware: build Ÿ‡EŸ¦îº“8„<ë×ÉÉHônÆ]° üa.—ÆJÜXm¥Ûˆ(Æ.ÆY [ 1028.124504][T16734] dlm: no locking on control device [ 1028.477314][ T5888] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1028.637625][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 1028.653514][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.664061][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.679745][ T5888] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1028.691134][ T5888] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 1028.708053][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.717512][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1028.725565][ T5888] usb 3-1: SerialNumber: syz [ 1028.737403][ T5888] cdc_acm 3-1:1.0: skipping garbage [ 1028.955096][ T5888] usb 3-1: USB disconnect, device number 104 [ 1029.273147][ T5888] usb 5-1: USB disconnect, device number 90 [ 1029.351746][T16743] xt_socket: unknown flags 0x8 [ 1029.907183][ T5888] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1030.037345][ T5888] usb 5-1: device descriptor read/64, error -71 [ 1030.287278][ T5888] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1030.427199][ T5888] usb 5-1: device descriptor read/64, error -71 [ 1030.548163][ T5888] usb usb5-port1: attempt power cycle [ 1030.897242][ T5888] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1031.007859][ T5888] usb 5-1: device descriptor read/8, error -71 [ 1031.247229][ T5888] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1031.268690][ T5888] usb 5-1: device descriptor read/8, error -71 [ 1031.379936][ T5888] usb usb5-port1: unable to enumerate USB device [ 1033.127284][ T5888] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1033.294995][ T5888] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1033.313032][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.331319][ T5888] usb 5-1: Product: syz [ 1033.339731][ T5888] usb 5-1: Manufacturer: syz [ 1033.347973][ T5888] usb 5-1: SerialNumber: syz [ 1033.363008][ T5888] usb 5-1: config 0 descriptor?? [ 1033.982095][ T5888] usb 5-1: Firmware version (0.0) predates our first public release. [ 1033.990344][ T5888] usb 5-1: Please update to version 0.2 or newer [ 1034.183488][ T5888] usb 5-1: Firmware: build Ÿ‡EŸ¦îº“8„<ë×ÉÉHônÆ]° üa.—ÆJÜXm¥Ûˆ(Æ.ÆY [ 1042.063413][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1042.073889][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1042.083282][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1042.091669][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1042.105240][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1042.122289][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1042.160151][T10157] usb 2-1: USB disconnect, device number 60 [ 1042.852533][T16669] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1042.861088][T16669] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1042.875493][T16669] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1042.886270][T16669] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1042.899345][T16669] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1042.906851][T16669] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1044.157289][T16669] Bluetooth: hci5: command tx timeout [ 1044.957573][T16669] Bluetooth: hci6: command tx timeout [ 1046.237310][T16669] Bluetooth: hci5: command tx timeout [ 1046.579403][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1046.589585][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1046.598109][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1046.611543][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1046.619499][ T5841] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1046.627174][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1047.037346][ T5841] Bluetooth: hci6: command tx timeout [ 1048.131772][T16669] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1048.145898][T16669] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1048.156568][T16669] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1048.174649][T16669] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1048.183594][T16669] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1048.191112][T16669] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1048.317229][T16669] Bluetooth: hci5: command tx timeout [ 1048.727377][T16669] Bluetooth: hci7: command tx timeout [ 1049.117323][T16669] Bluetooth: hci6: command tx timeout [ 1050.242498][T16669] Bluetooth: hci8: command tx timeout [ 1050.397225][T16669] Bluetooth: hci5: command tx timeout [ 1050.787256][ T5841] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1050.796338][ T5841] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1050.809589][ T5841] Bluetooth: hci7: command tx timeout [ 1050.815311][ T5841] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1050.824979][ T5841] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1050.833223][ T5841] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1050.844931][ T5841] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1051.207258][T16669] Bluetooth: hci6: command tx timeout [ 1052.317333][T16669] Bluetooth: hci8: command tx timeout [ 1052.877405][T16669] Bluetooth: hci7: command tx timeout [ 1052.877513][ T5841] Bluetooth: hci9: command tx timeout [ 1054.397381][ T5841] Bluetooth: hci8: command tx timeout [ 1054.559420][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.565772][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.957286][ T5841] Bluetooth: hci7: command tx timeout [ 1054.957414][T16669] Bluetooth: hci9: command tx timeout [ 1056.477353][T16669] Bluetooth: hci8: command tx timeout [ 1057.037488][T16669] Bluetooth: hci9: command tx timeout [ 1059.127381][T16669] Bluetooth: hci9: command tx timeout [ 1089.950433][ T5208] udevd[5208]: worker [16723] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 1095.976773][ T5208] udevd[5208]: worker [16731] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 1102.031179][ T5841] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1102.041314][ T5841] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1102.051825][ T5841] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1102.061668][ T5841] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1102.069815][ T5841] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1102.080908][ T5841] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1103.013968][T16669] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1103.025350][T16669] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1103.034055][T16669] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1103.045432][T16669] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1103.058402][T16669] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1103.065892][T16669] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1104.157243][T16669] Bluetooth: hci10: command tx timeout [ 1105.117318][T16669] Bluetooth: hci11: command tx timeout [ 1106.237213][T16669] Bluetooth: hci10: command tx timeout [ 1106.543248][ T5832] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1106.553673][ T5832] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1106.563921][ T5832] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1106.573383][ T5832] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1106.581455][ T5832] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1106.589061][ T5832] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1107.207308][ T5832] Bluetooth: hci11: command tx timeout [ 1107.837149][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 1108.032921][ T5832] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1108.042094][ T5832] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1108.053162][ T5832] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1108.063427][ T5832] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1108.071498][ T5832] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1108.085938][ T5832] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1108.317259][ T5832] Bluetooth: hci10: command tx timeout [ 1108.637268][ T5832] Bluetooth: hci12: command tx timeout [ 1109.277303][ T5832] Bluetooth: hci11: command tx timeout [ 1110.157243][ T5832] Bluetooth: hci13: command tx timeout [ 1110.397176][ T5832] Bluetooth: hci10: command tx timeout [ 1110.524737][ T5841] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1110.534790][ T5841] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1110.543554][ T5841] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1110.553813][ T5841] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1110.566326][ T5841] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1110.576079][ T5841] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1110.727120][ T5832] Bluetooth: hci12: command tx timeout [ 1111.357386][ T5832] Bluetooth: hci11: command tx timeout [ 1112.247326][ T5832] Bluetooth: hci13: command tx timeout [ 1112.637397][ T5832] Bluetooth: hci14: command tx timeout [ 1112.797131][ T5832] Bluetooth: hci12: command tx timeout [ 1114.317205][ T5832] Bluetooth: hci13: command tx timeout [ 1114.717508][ T5832] Bluetooth: hci14: command tx timeout [ 1114.877178][ T5832] Bluetooth: hci12: command tx timeout [ 1116.000319][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.006691][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.397217][ T5832] Bluetooth: hci13: command tx timeout [ 1116.797322][ T5832] Bluetooth: hci14: command tx timeout [ 1118.887336][ T5832] Bluetooth: hci14: command tx timeout [ 1131.998131][ T31] INFO: task dhcpcd:5502 blocked for more than 143 seconds. [ 1132.005481][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 1132.013152][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1132.021952][ T31] task:dhcpcd state:D stack:20176 pid:5502 tgid:5502 ppid:5501 task_flags:0x400140 flags:0x00000002 [ 1132.034089][ T31] Call Trace: [ 1132.038130][ T31] [ 1132.041114][ T31] __schedule+0x1b18/0x50e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1132.045689][ T31] ? __pfx___schedule+0x10/0x10 [ 1132.050761][ T31] ? schedule+0x90/0x360 [ 1132.055058][ T31] ? schedule+0x90/0x360 [ 1132.060070][ T31] schedule+0x163/0x360 [ 1132.064298][ T31] schedule_preempt_disabled+0x13/0x30 [ 1132.072309][ T31] __mutex_lock+0x7fa/0x1000 [ 1132.077153][ T31] ? __mutex_lock+0x5ed/0x1000 [ 1132.083308][ T31] ? devinet_ioctl+0x34e/0x1d80 [ 1132.090844][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1132.097075][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1132.101831][ T31] ? security_capable+0x7e/0x2d0 [ 1132.106811][ T31] devinet_ioctl+0x34e/0x1d80 [ 1132.167205][ T31] ? __pfx_devinet_ioctl+0x10/0x10 [ 1132.174041][ T31] ? get_user_ifreq+0x1bb/0x200 [ 1132.190363][ T31] inet_ioctl+0x3d9/0x4f0 [ 1132.194785][ T31] ? __pfx_inet_ioctl+0x10/0x10 [ 1132.200365][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1132.205724][ T31] ? tomoyo_path_number_perm+0x215/0x790 [ 1132.211609][ T31] sock_do_ioctl+0x15a/0x490 [ 1132.216455][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1132.221865][ T31] ? fd_install+0x9c/0x4c0 [ 1132.226345][ T31] sock_ioctl+0x64a/0x900 [ 1132.231153][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 1132.236054][ T31] ? __sys_socket+0x209/0x3c0 [ 1132.241192][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 1132.246095][ T31] __se_sys_ioctl+0xf1/0x160 [ 1132.250956][ T31] do_syscall_64+0xf3/0x230 [ 1132.255579][ T31] ? clear_bhb_loop+0x45/0xa0 [ 1132.260433][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.266384][ T31] RIP: 0033:0x7f93fee5bd49 [ 1132.271098][ T31] RSP: 002b:00007ffedb381ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1132.280246][ T31] RAX: ffffffffffffffda RBX: 00007f93fed8d6c0 RCX: 00007f93fee5bd49 [ 1132.288791][ T31] RDX: 00007ffedb391cb8 RSI: 0000000000008914 RDI: 0000000000000010 [ 1132.296815][ T31] RBP: 00007ffedb3a1e78 R08: 00007ffedb391c78 R09: 00007ffedb391c28 [ 1132.304982][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1132.313148][ T31] R13: 00007ffedb391cb8 R14: 0000000000000028 R15: 0000000000008914 [ 1132.321453][ T31] [ 1132.324574][ T31] INFO: task kworker/u8:4:9721 blocked for more than 143 seconds. [ 1132.332696][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 1132.340234][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1132.349226][ T31] task:kworker/u8:4 state:D stack:21384 pid:9721 tgid:9721 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1132.361593][ T31] Workqueue: events_unbound linkwatch_event [ 1132.367720][ T31] Call Trace: [ 1132.371038][ T31] [ 1132.374014][ T31] __schedule+0x1b18/0x50e0 [ 1132.378653][ T31] ? __pfx___schedule+0x10/0x10 [ 1132.383560][ T31] ? schedule+0x90/0x360 [ 1132.387987][ T31] ? schedule+0x90/0x360 [ 1132.392316][ T31] schedule+0x163/0x360 [ 1132.396533][ T31] schedule_preempt_disabled+0x13/0x30 [ 1132.405266][ T31] __mutex_lock+0x7fa/0x1000 [ 1132.413158][ T31] ? __mutex_lock+0x5ed/0x1000 [ 1132.418769][ T31] ? linkwatch_event+0xe/0x60 [ 1132.423491][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1132.431925][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 1132.438495][ T31] linkwatch_event+0xe/0x60 [ 1132.443064][ T31] process_scheduled_works+0xac3/0x18e0 [ 1132.452115][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1132.459121][ T31] ? assign_work+0x367/0x3d0 [ 1132.463799][ T31] worker_thread+0x870/0xd30 [ 1132.469217][ T31] ? __kthread_parkme+0x169/0x1d0 [ 1132.474344][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1132.484456][ T31] kthread+0x7a9/0x920 [ 1132.491708][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1132.496871][ T31] ? __pfx_kthread+0x10/0x10 [ 1132.501562][ T31] ? __pfx_kthread+0x10/0x10 [ 1132.506247][ T31] ? __pfx_kthread+0x10/0x10 [ 1132.511077][ T31] ? __pfx_kthread+0x10/0x10 [ 1132.515725][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1132.521031][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1132.526282][ T31] ? __pfx_kthread+0x10/0x10 [ 1132.531065][ T31] ret_from_fork+0x4b/0x80 [ 1132.535524][ T31] ? __pfx_kthread+0x10/0x10 [ 1132.540233][ T31] ret_from_fork_asm+0x1a/0x30 [ 1132.545063][ T31] [ 1132.548312][ T31] INFO: task syz-executor:16670 blocked for more than 143 seconds. [ 1132.556252][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 1132.563872][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1132.575271][ T31] task:syz-executor state:D stack:22032 pid:16670 tgid:16670 ppid:1 task_flags:0x400140 flags:0x00000004 [ 1132.589595][ T31] Call Trace: [ 1132.592936][ T31] [ 1132.595890][ T31] __schedule+0x1b18/0x50e0 [ 1132.600563][ T31] ? __pfx___schedule+0x10/0x10 [ 1132.605477][ T31] ? schedule+0x90/0x360 [ 1132.609932][ T31] ? schedule+0x90/0x360 [ 1132.614224][ T31] schedule+0x163/0x360 [ 1132.618501][ T31] schedule_preempt_disabled+0x13/0x30 [ 1132.623997][ T31] __mutex_lock+0x7fa/0x1000 [ 1132.628743][ T31] ? __lock_acquire+0xad5/0xd80 [ 1132.633660][ T31] ? __mutex_lock+0x5ed/0x1000 [ 1132.638592][ T31] ? rtnl_newlink+0xd6a/0x1f60 [ 1132.643418][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1132.649430][ T31] ? ns_capable+0x8a/0xf0 [ 1132.653819][ T31] ? rtnl_link_get_net_capable+0x168/0x340 [ 1132.659951][ T31] rtnl_newlink+0xd6a/0x1f60 [ 1132.664605][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1132.669956][ T31] ? __lock_acquire+0xad5/0xd80 [ 1132.674973][ T31] ? __lock_acquire+0xad5/0xd80 [ 1132.679995][ T31] ? is_bpf_text_address+0x26/0x2a0 [ 1132.685266][ T31] ? is_bpf_text_address+0x288/0x2a0 [ 1132.690770][ T31] ? is_bpf_text_address+0x26/0x2a0 [ 1132.696038][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1132.702371][ T31] ? kernel_text_address+0xa7/0xe0 [ 1132.707690][ T31] ? __kernel_text_address+0xd/0x40 [ 1132.712952][ T31] ? unwind_get_return_address+0x4d/0x90 [ 1132.718764][ T31] ? aa_get_newest_label+0x101/0x6f0 [ 1132.724124][ T31] ? __lock_acquire+0xad5/0xd80 [ 1132.729238][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1132.734331][ T31] rtnetlink_rcv_msg+0x80f/0xd70 [ 1132.739415][ T31] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 1132.744665][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1132.750305][ T31] ? __lock_acquire+0xad5/0xd80 [ 1132.755229][ T31] netlink_rcv_skb+0x208/0x480 [ 1132.760121][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1132.765693][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1132.771495][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1132.776764][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1132.782637][ T31] netlink_unicast+0x7f8/0x9a0 [ 1132.787843][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1132.793187][ T31] ? __virt_addr_valid+0x45f/0x530 [ 1132.798783][ T31] ? __phys_addr_symbol+0x2f/0x70 [ 1132.803880][ T31] ? __check_object_size+0x478/0x720 [ 1132.809806][ T31] netlink_sendmsg+0x8e8/0xce0 [ 1132.814625][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1132.820376][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 1132.825380][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1132.830862][ T31] __sock_sendmsg+0x221/0x270 [ 1132.835804][ T31] __sys_sendto+0x365/0x4c0 [ 1132.840436][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1132.845525][ T31] __x64_sys_sendto+0xde/0x100 [ 1132.850619][ T31] do_syscall_64+0xf3/0x230 [ 1132.855206][ T31] ? clear_bhb_loop+0x45/0xa0 [ 1132.860382][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.866413][ T31] RIP: 0033:0x7fb5ef98effc [ 1132.871446][ T31] RSP: 002b:00007fb5efccf670 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1132.880229][ T31] RAX: ffffffffffffffda RBX: 00007fb5f06d4620 RCX: 00007fb5ef98effc [ 1132.888945][ T31] RDX: 0000000000000050 RSI: 00007fb5f06d4670 RDI: 0000000000000003 [ 1132.897355][ T31] RBP: 0000000000000000 R08: 00007fb5efccf6c4 R09: 000000000000000c [ 1132.905378][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1132.913878][ T31] R13: 0000000000000000 R14: 00007fb5f06d4670 R15: 0000000000000000 [ 1132.922226][ T31] [ 1132.925334][ T31] [ 1132.925334][ T31] Showing all locks held in the system: [ 1132.933308][ T31] 1 lock held by khungtaskd/31: [ 1132.938319][ T31] #0: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 1132.948631][ T31] 3 locks held by kworker/u8:3/52: [ 1132.953784][ T31] #0: ffff88814d472948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1132.965479][ T31] #1: ffffc90000bc7c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1132.979590][ T31] #2: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1132.989239][ T31] 3 locks held by kworker/1:1/58: [ 1132.994493][ T31] #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1133.005914][ T31] #1: ffffc9000102fc60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1133.017106][ T31] #2: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1133.031072][ T31] 5 locks held by kworker/u8:5/288: [ 1133.036320][ T31] #0: ffff88801baf6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1133.052243][ T31] #1: ffffc90002fdfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1133.062940][ T31] #2: ffffffff8fec98d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 1133.072689][ T31] #3: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 1133.082864][ T31] #4: ffff88805ecb0d28 (&dev->lock){+.+.}-{4:4}, at: napi_disable+0x4d/0x80 [ 1133.091882][ T31] 3 locks held by kworker/0:2/976: [ 1133.097125][ T31] #0: ffff88801ac81d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1133.109891][ T31] #1: ffffc90003b0fc60 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1133.121235][ T31] #2: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x9b/0xfc0 [ 1133.131242][ T31] 1 lock held by dhcpcd/5502: [ 1133.135967][ T31] #0: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34e/0x1d80 [ 1133.145294][ T31] 2 locks held by getty/5585: [ 1133.150060][ T31] #0: ffff88814d5a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1133.160974][ T31] #1: ffffc90002ff62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0 [ 1133.171500][ T31] 6 locks held by kworker/1:5/5888: [ 1133.176738][ T31] #0: ffff8880222b2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1133.188581][ T31] #1: ffffc90004447c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1133.200965][ T31] #2: ffff888144be9190 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 1133.210240][ T31] #3: ffff888011c57190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x90/0x530 [ 1133.219782][ T31] #4: ffff88807bf94160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x90/0x530 [ 1133.229196][ T31] #5: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: wpan_phy_register+0x22/0x110 [ 1133.238674][ T31] 3 locks held by kworker/u8:4/9721: [ 1133.244169][ T31] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1133.256323][ T31] #1: ffffc9000be07c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1133.267620][ T31] #2: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1133.276684][ T31] 6 locks held by kworker/0:4/12935: [ 1133.282264][ T31] #0: ffff8880222b2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1133.293871][ T31] #1: ffffc9001432fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1133.305861][ T31] #2: ffff888028acb190 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 1133.314892][ T31] #3: ffff88802979d190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x90/0x530 [ 1133.324279][ T31] #4: ffff88802979e160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x90/0x530 [ 1133.333863][ T31] #5: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: wpan_phy_register+0x22/0x110 [ 1133.343308][ T31] 2 locks held by syz-executor/16670: [ 1133.348739][ T31] #0: ffffffff8f653b40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 1133.358494][ T31] #1: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd6a/0x1f60 [ 1133.367816][ T31] 1 lock held by syz.1.3091/16727: [ 1133.372956][ T31] #0: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x11ae/0x2ba0 [ 1133.382560][ T31] 4 locks held by udevd/16723: [ 1133.387448][ T31] #0: ffff888033a82668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xda0 [ 1133.396332][ T31] #1: ffff88807cfe9488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 1133.405885][ T31] #2: ffff8880576aa788 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 1133.415504][ T31] #3: ffff88802979d190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 1133.424808][ T31] 4 locks held by udevd/16731: [ 1133.429799][ T31] #0: ffff88802bb59668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xda0 [ 1133.439047][ T31] #1: ffff8880131f9888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 1133.448669][ T31] #2: ffff888024f364b8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 1133.458365][ T31] #3: ffff888011c57190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 1133.467479][ T31] 1 lock held by syz.2.3102/16757: [ 1133.472642][ T31] #0: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x11ae/0x2ba0 [ 1133.482316][ T31] 1 lock held by syz.0.3104/16766: [ 1133.487598][ T31] #0: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x11ae/0x2ba0 [ 1133.497311][ T31] 2 locks held by syz.4.3106/16775: [ 1133.502578][ T31] #0: ffffffff8f6c6428 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0x11e/0x1d20 [ 1133.511468][ T31] #1: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0x7a3/0x1d20 [ 1133.524972][ T31] 1 lock held by syz.4.3106/16776: [ 1133.530479][ T31] #0: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: arp_ioctl+0x361/0x540 [ 1133.539575][ T31] 1 lock held by syz.4.3106/16777: [ 1133.544731][ T31] #0: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: xsk_bind+0x151/0xfe0 [ 1133.553840][ T31] 2 locks held by syz-executor/16781: [ 1133.559540][ T31] #0: ffffffff8fec98d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 1133.569328][ T31] #1: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 1133.580513][ T31] 2 locks held by syz-executor/16784: [ 1133.585925][ T31] #0: ffffffff8fec98d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 1133.595469][ T31] #1: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 1133.605597][ T31] 2 locks held by syz-executor/16787: [ 1133.611096][ T31] #0: ffffffff8fec98d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 1133.620753][ T31] #1: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 1133.630898][ T31] 2 locks held by syz-executor/16790: [ 1133.636311][ T31] #0: ffffffff8fec98d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 1133.645844][ T31] #1: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 1133.656006][ T31] 2 locks held by syz-executor/16794: [ 1133.661711][ T31] #0: ffffffff8fec98d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 1133.671304][ T31] #1: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 1133.681496][ T31] 2 locks held by syz-executor/16798: [ 1133.687229][ T31] #0: ffffffff8fec98d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 1133.696723][ T31] #1: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 1133.706875][ T31] 2 locks held by syz-executor/16801: [ 1133.712314][ T31] #0: ffffffff8fec98d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 1133.722086][ T31] #1: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 1133.732436][ T31] 2 locks held by syz-executor/16804: [ 1133.738105][ T31] #0: ffffffff8fec98d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 1133.747684][ T31] #1: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 1133.757809][ T31] 2 locks held by syz-executor/16807: [ 1133.763229][ T31] #0: ffffffff8fec98d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 1133.772928][ T31] #1: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 1133.783105][ T31] 2 locks held by syz-executor/16810: [ 1133.788583][ T31] #0: ffffffff8fec98d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 1133.798161][ T31] #1: ffffffff8fed6108 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x87/0x270 [ 1133.808903][ T31] [ 1133.811312][ T31] ============================================= [ 1133.811312][ T31] [ 1133.823669][ T31] NMI backtrace for cpu 0 [ 1133.823695][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1133.823714][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1133.823724][ T31] Call Trace: [ 1133.823732][ T31] [ 1133.823739][ T31] dump_stack_lvl+0x241/0x360 [ 1133.823766][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1133.823786][ T31] ? __pfx__printk+0x10/0x10 [ 1133.823816][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 1133.823844][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1133.823866][ T31] ? _printk+0xd5/0x120 [ 1133.823891][ T31] ? __wake_up_klogd+0xcc/0x110 [ 1133.823917][ T31] ? __pfx__printk+0x10/0x10 [ 1133.823945][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1133.823969][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1133.823988][ T31] watchdog+0x1058/0x10a0 [ 1133.824009][ T31] ? watchdog+0x1ea/0x10a0 [ 1133.824032][ T31] ? __pfx_watchdog+0x10/0x10 [ 1133.824052][ T31] kthread+0x7a9/0x920 [ 1133.824080][ T31] ? __pfx_watchdog+0x10/0x10 [ 1133.824108][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.824132][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.824154][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.824176][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.824199][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1133.824216][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1133.824234][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.824252][ T31] ret_from_fork+0x4b/0x80 [ 1133.824265][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.824289][ T31] ret_from_fork_asm+0x1a/0x30 [ 1133.824324][ T31] [ 1133.824333][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1133.985873][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 1133.995381][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1134.002272][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 1134.013765][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1134.023857][ T31] Call Trace: [ 1134.027164][ T31] [ 1134.030136][ T31] dump_stack_lvl+0x241/0x360 [ 1134.034847][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1134.040090][ T31] ? __pfx__printk+0x10/0x10 [ 1134.044717][ T31] ? vscnprintf+0x5d/0x90 [ 1134.049060][ T31] panic+0x349/0x880 [ 1134.052969][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 1134.058354][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1134.064692][ T31] ? __pfx_panic+0x10/0x10 [ 1134.069121][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1134.074506][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1134.080672][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1134.086843][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1134.093007][ T31] watchdog+0x1097/0x10a0 [ 1134.097355][ T31] ? watchdog+0x1ea/0x10a0 [ 1134.101791][ T31] ? __pfx_watchdog+0x10/0x10 [ 1134.106485][ T31] kthread+0x7a9/0x920 [ 1134.110580][ T31] ? __pfx_watchdog+0x10/0x10 [ 1134.115271][ T31] ? __pfx_kthread+0x10/0x10 [ 1134.119870][ T31] ? __pfx_kthread+0x10/0x10 [ 1134.124474][ T31] ? __pfx_kthread+0x10/0x10 [ 1134.129076][ T31] ? __pfx_kthread+0x10/0x10 [ 1134.133686][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1134.138901][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1134.144124][ T31] ? __pfx_kthread+0x10/0x10 [ 1134.148739][ T31] ret_from_fork+0x4b/0x80 [ 1134.153174][ T31] ? __pfx_kthread+0x10/0x10 [ 1134.157776][ T31] ret_from_fork_asm+0x1a/0x30 [ 1134.162568][ T31] [ 1134.165872][ T31] Kernel Offset: disabled [ 1134.170243][ T31] Rebooting in 86400 seconds..