last executing test programs: 26.793507015s ago: executing program 0 (id=2484): socket(0x40000000015, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 25.651018025s ago: executing program 3 (id=2489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x100800) bind$vsock_stream(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) removexattr(0x0, &(0x7f0000000300)=@known='security.selinux\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0xfffffffffaa08a7d) r5 = io_uring_setup(0x5e69, &(0x7f0000000100)={0x0, 0x1084, 0x40, 0x10000003, 0x2c3}) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) 24.658235937s ago: executing program 3 (id=2493): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r4 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000800)=ANY=[@ANYRES8=r0, @ANYRESOCT=r3, @ANYBLOB="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", @ANYRES16=r0], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r4], 0x0}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}], 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000005740)={0x0, 0xea60}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r6, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet(r6, &(0x7f0000000780)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x8c37c2b979564e6e) recvmsg(r0, 0x0, 0x0) 23.522427891s ago: executing program 0 (id=2504): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0xd, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a00000000000000", @ANYRES32, @ANYBLOB="00000132ae57"], 0x34}}, 0x0) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d2901"], 0xdd12}], 0x1}, 0x0) 22.45435451s ago: executing program 0 (id=2510): socket(0x40000000015, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 22.22354486s ago: executing program 4 (id=2512): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 21.480712168s ago: executing program 0 (id=2513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x0, 0x1, 0x5, {0x9, 0x0, 0x401, 0xfffb, 0x8000}, {0x9, 0x0, 0x4, 0x2, 0x66f, 0x5}, 0x6, 0x4, 0x3c2}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x7c}}, 0x0) 21.203134066s ago: executing program 4 (id=2516): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="5802009400140091d491323b473ac7050878b15418753629257f278925458db45602117fffefd7ff81000e226c1add024bf752e31ad096339c5e74a48d52a42b3ecbad9c50ff11", 0x47}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 20.486225411s ago: executing program 2 (id=2518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000003c0)={r2}) 20.267837226s ago: executing program 4 (id=2519): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r6, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000017cedf82cf279cf75650eb4239196ec762ffee0462ecfc54550fb8166d784541fd4b3d499f4a0bdd13f152d18d2303f242cd482244277a3b0b4d8d71bacecdc9e8e82ca5373fb8fe62feb817d863fbdfe68410c9d045816cceb5222fe45adfe3b0953235f5928ff1b74be1aa6a056f5563c232dc2ca3fa16c2531d34a35ba29fbe266852b0"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='io_uring_complete\x00'}, 0x18) r7 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0xe501, 0x3, 0x538, 0x0, 0x6affffff, 0x3403000b, 0x3a0, 0x7, 0x4a0, 0x230, 0x230, 0x4a0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x358, 0x3a0, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x1}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x338}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x7, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0xa1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffff, 0x1000100, 0xffffffff, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff], @ipv6=@mcast1, [0xffffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0xff, 0xffffffff, 0xff0000ff], 0x75, 0x10, 0x2f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}, 0xc1, 0xd2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x598) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 19.604240718s ago: executing program 0 (id=2520): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r6, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000017cedf82cf279cf75650eb4239196ec762ffee0462ecfc54550fb8166d784541fd4b3d499f4a0bdd13f152d18d2303f242cd482244277a3b0b4d8d71bacecdc9e8e82ca5373fb8fe62feb817d863fbdfe68410c9d045816cceb5222fe45adfe3b0953235f5928ff1b74be1aa6a056f5563c232dc2ca3fa16c2531d34a35ba29fbe266852b0"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='io_uring_complete\x00'}, 0x18) r7 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0xe501, 0x3, 0x538, 0x0, 0x6affffff, 0x3403000b, 0x3a0, 0x7, 0x4a0, 0x230, 0x230, 0x4a0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x358, 0x3a0, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x1}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x338}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x7, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0xa1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffff, 0x1000100, 0xffffffff, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff], @ipv6=@mcast1, [0xffffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0xff, 0xffffffff, 0xff0000ff], 0x75, 0x10, 0x2f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}, 0xc1, 0xd2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x598) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 19.370284276s ago: executing program 2 (id=2522): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 18.817599456s ago: executing program 3 (id=2523): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x7ffffffc, 0x7) 18.769710744s ago: executing program 1 (id=2524): getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 18.65447284s ago: executing program 2 (id=2525): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 18.587313019s ago: executing program 2 (id=2526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) mknodat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x50) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2, 0x0, 0x20000000}, 0x18) setfsuid(0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 18.037964759s ago: executing program 2 (id=2527): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x4000) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=0x0, @ANYBLOB="7f10a06879833a784eb143effb115d773230c19c5b4f4bdf4934f7dfe839888d2ca8e1acb0a09e25f1ecbc087359fbb14b6611482b56295a4411a38d6bf06891159c10180c49606c0d7dc2ddac9b19ac02e103a12700292aec7023dcc3e401807e112fcd975bb8b90e539d7bb86e7f581979fa0717d077ded8e165bab8958c"], 0x1c}}, 0x0) 17.879232825s ago: executing program 3 (id=2528): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {0x1}, @result={0xffffffe0, 0xfffff001}}], 0x1c) write$sndseq(r0, 0x0, 0x0) 17.401873116s ago: executing program 3 (id=2529): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) 17.355607408s ago: executing program 4 (id=2530): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x7f}, 0x1c, 0x0, 0x0, 0x0, 0x40}, 0x40) writev(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="1197d7a424adaf47b8a3b9e7eb017d30213ce4f8", 0x14}, {&(0x7f00000006c0)="5aa26dbffa011b088471e404bb6bb9b3808fe6b03480f5bb5aa9e4c427970774859058de119bef4c8b77be048efc133ccc3cf4e88be5ca48b7534af13ef227c3699b0057996e4bd0887823ecc79230d41a1dd22f7c294ce6e698977c91ae614689f38389b34a239f0cedd84d41eecb4eed4d9cb2ae6b6cc32ce5aa9e05ccc74e6807c3927598bdc5627f720bd97e10fabcb719c5e9153b931af1c0ef1e0bfad7cad5593f4cd1abf75e235e2dc373e1258f65feedf367c5e8cb2666362e394e80e109830412d7f2ffb519d8a3884d32f4", 0xd0}], 0x5) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}}}, 0x24}}, 0x0) 17.103172519s ago: executing program 0 (id=2531): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0, 0x0, 0x5}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x6, 0xa6, 0xff, 0x8}, {0x7fff, 0x9, 0x5, 0x4}, {0x81, 0x2, 0x0, 0x2}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) clock_settime(0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x200, 0x0, 0x3, 0x3}, 0x8) 17.036615169s ago: executing program 3 (id=2532): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0, 0x0, 0x5}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x6, 0xa6, 0xff, 0x8}, {0x7fff, 0x9, 0x5, 0x4}, {0x81, 0x2, 0x0, 0x2}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8003, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) clock_settime(0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x200, 0x0, 0x3, 0x3}, 0x8) 17.008812483s ago: executing program 2 (id=2533): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup(0x4080, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="2ff385c8e37018ac47d3820d9b16a395f1bdd6d340ccc87c8e161792f79d4309cf0c3cbd272e6891fcf6546f8054e08ae44018b2bb9172b71d7407dc22b51f5957dbe1d045032b1788e7f943fdd8c67d13d0a3b72442a90214e32a3f183d7ce52f54164903435fa7a6f4ea9931771c1455dbd0205afc02"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 16.958623413s ago: executing program 1 (id=2534): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r6, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000017cedf82cf279cf75650eb4239196ec762ffee0462ecfc54550fb8166d784541fd4b3d499f4a0bdd13f152d18d2303f242cd482244277a3b0b4d8d71bacecdc9e8e82ca5373fb8fe62feb817d863fbdfe68410c9d045816cceb5222fe45adfe3b0953235f5928ff1b74be1aa6a056f5563c232dc2ca3fa16c2531d34a35ba29fbe266852b0"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='io_uring_complete\x00'}, 0x18) r7 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0xe501, 0x3, 0x538, 0x0, 0x6affffff, 0x3403000b, 0x3a0, 0x7, 0x4a0, 0x230, 0x230, 0x4a0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x358, 0x3a0, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x1}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x338}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x7, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0xa1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffff, 0x1000100, 0xffffffff, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff], @ipv6=@mcast1, [0xffffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0xff, 0xffffffff, 0xff0000ff], 0x75, 0x10, 0x2f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}, 0xc1, 0xd2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x598) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16.45393087s ago: executing program 1 (id=2535): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 16.394348538s ago: executing program 1 (id=2536): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/86, 0x56}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d", 0xd3}, {&(0x7f0000000e80)="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", 0x1c2}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 16.32720335s ago: executing program 4 (id=2537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) mknodat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x50) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2, 0x0, 0x20000000}, 0x18) setfsuid(0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 15.77532394s ago: executing program 4 (id=2538): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000380)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.528105392s ago: executing program 1 (id=2539): writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000140)="139776ff030370", 0x7}], 0x1) 15.451218493s ago: executing program 1 (id=2540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 2.001728103s ago: executing program 32 (id=2531): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0, 0x0, 0x5}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x6, 0xa6, 0xff, 0x8}, {0x7fff, 0x9, 0x5, 0x4}, {0x81, 0x2, 0x0, 0x2}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) clock_settime(0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x200, 0x0, 0x3, 0x3}, 0x8) 1.967880814s ago: executing program 33 (id=2532): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0, 0x0, 0x5}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x6, 0xa6, 0xff, 0x8}, {0x7fff, 0x9, 0x5, 0x4}, {0x81, 0x2, 0x0, 0x2}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8003, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) clock_settime(0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x200, 0x0, 0x3, 0x3}, 0x8) 1.503768963s ago: executing program 34 (id=2533): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup(0x4080, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="2ff385c8e37018ac47d3820d9b16a395f1bdd6d340ccc87c8e161792f79d4309cf0c3cbd272e6891fcf6546f8054e08ae44018b2bb9172b71d7407dc22b51f5957dbe1d045032b1788e7f943fdd8c67d13d0a3b72442a90214e32a3f183d7ce52f54164903435fa7a6f4ea9931771c1455dbd0205afc02"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 502.184669ms ago: executing program 35 (id=2538): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000380)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 36 (id=2540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) kernel console output (not intermixed with test programs): new high-speed USB device number 16 using dummy_hcd [ 549.642849][ T24] usb 3-1: device descriptor read/64, error -71 [ 549.930924][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 550.088394][ T24] usb 3-1: device descriptor read/64, error -71 [ 550.149415][T10104] tipc: Disabling bearer [ 550.218760][ T24] usb usb3-port1: attempt power cycle [ 550.640892][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 550.941486][T10161] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 551.001474][ T5899] vhci_hcd: vhci_device speed not set [ 551.473318][ T24] usb 3-1: device descriptor read/8, error -71 [ 551.653062][T10161] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.663445][T10161] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.673991][T10161] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 551.685178][T10161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 551.693343][T10161] usb 4-1: SerialNumber: syz [ 551.791483][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 551.830091][ T24] usb 3-1: device descriptor read/8, error -71 [ 551.941677][ T24] usb usb3-port1: unable to enumerate USB device [ 551.961854][T10161] usb 4-1: 0:2 : does not exist [ 551.973718][T10161] usb 4-1: unit 5 not found! [ 551.996274][T10161] usb 4-1: USB disconnect, device number 18 [ 552.500545][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.100945][ T5878] usb usb38-port1: attempt power cycle [ 554.545489][ T5878] usb usb38-port1: unable to enumerate USB device [ 556.802401][T10224] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1130'. [ 557.243133][ T5885] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 557.575338][ T5885] usb 1-1: device descriptor read/64, error -71 [ 557.744678][T10240] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 557.751249][T10240] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 557.761232][T10240] vhci_hcd vhci_hcd.0: Device attached [ 557.900936][ T5885] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 557.923622][T10245] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 557.932047][T10247] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 557.938670][T10247] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 557.946231][ T24] vhci_hcd: vhci_device speed not set [ 557.951647][T10240] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 557.958178][T10240] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 558.530043][T10247] vhci_hcd vhci_hcd.0: Device attached [ 558.641037][ T5885] usb 1-1: device descriptor read/64, error -71 [ 558.679516][T10254] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 558.686150][T10254] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 558.717649][ T24] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 558.759756][ T5885] usb usb1-port1: attempt power cycle [ 558.776226][T10254] vhci_hcd vhci_hcd.0: Device attached [ 558.808863][T10240] vhci_hcd vhci_hcd.0: Device attached [ 558.823152][T10245] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 558.829750][T10245] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 558.867197][T10245] vhci_hcd vhci_hcd.0: Device attached [ 558.924827][T10240] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 559.000215][T10240] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 559.030718][T10240] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(25) [ 559.037415][T10240] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 559.056772][T10240] vhci_hcd vhci_hcd.0: Device attached [ 559.092718][T10265] tipc: Enabled bearer , priority 10 [ 559.110876][ T5899] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 559.131163][ T5885] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 559.141141][T10256] vhci_hcd: connection closed [ 559.141475][ T6963] vhci_hcd: stop threads [ 559.143373][T10260] vhci_hcd: connection closed [ 559.146212][T10244] vhci_hcd: connection closed [ 559.146447][ T6963] vhci_hcd: release socket [ 559.150858][T10248] vhci_hcd: connection closed [ 559.156321][T10242] vhci_hcd: connection reset by peer [ 559.196148][ T5885] usb 1-1: device descriptor read/8, error -71 [ 559.197837][T10263] vhci_hcd: connection closed [ 559.204080][ T6963] vhci_hcd: disconnect device [ 559.222864][ T6963] vhci_hcd: stop threads [ 559.227289][ T6963] vhci_hcd: release socket [ 559.234358][ T6963] vhci_hcd: disconnect device [ 559.241865][ T6963] vhci_hcd: stop threads [ 559.246318][ T6963] vhci_hcd: release socket [ 559.252056][ T6963] vhci_hcd: disconnect device [ 559.259195][ T6963] vhci_hcd: stop threads [ 559.268792][ T6963] vhci_hcd: release socket [ 559.276867][ T6963] vhci_hcd: disconnect device [ 559.282622][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 559.292079][ T5899] usb 2-1: config 89 has an invalid interface number: 1 but max is 0 [ 559.302466][ T5899] usb 2-1: config 89 has no interface number 0 [ 559.315839][ T6963] vhci_hcd: stop threads [ 559.325050][ T5899] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 559.338378][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.342038][ T6963] vhci_hcd: release socket [ 559.356989][ T5899] usb 2-1: Product: syz [ 559.365879][ T5899] usb 2-1: Manufacturer: syz [ 559.378467][ T6963] vhci_hcd: disconnect device [ 559.379465][ T5899] usb 2-1: SerialNumber: syz [ 559.392862][T10265] tipc: Resetting bearer [ 559.396020][ T6963] vhci_hcd: stop threads [ 559.412225][ T6963] vhci_hcd: release socket [ 559.429070][ T6963] vhci_hcd: disconnect device [ 559.442005][T10262] tipc: Resetting bearer [ 559.461414][ T5885] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 559.491930][ T5885] usb 1-1: device descriptor read/8, error -71 [ 559.604513][ T5885] usb usb1-port1: unable to enumerate USB device [ 559.668847][T10267] netlink: 'syz.1.1137': attribute type 21 has an invalid length. [ 559.677749][T10267] IPv6: NLM_F_CREATE should be specified when creating new route [ 560.488292][T10272] netlink: 'syz.0.1139': attribute type 4 has an invalid length. [ 560.496161][T10272] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1139'. [ 562.308475][T10283] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1142'. [ 562.768451][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.777252][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.902259][ T24] vhci_hcd: vhci_device speed not set [ 564.293438][T10262] tipc: Disabling bearer [ 564.441479][ T5899] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 564.493221][ T5899] usb 2-1: selecting invalid altsetting 1 [ 564.498971][ T5899] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 564.543181][ T5899] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 564.754043][ T5899] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 564.763031][ T5899] usb 2-1: media controller created [ 564.784795][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.774500][ T5878] usb usb42-port1: attempt power cycle [ 566.208540][ T5899] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 566.283014][ T5899] zl10353_read_register: readreg error (reg=127, ret==-71) [ 566.637320][ T5878] usb usb42-port1: unable to enumerate USB device [ 567.292234][ T5899] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 567.344079][ T5899] usb 2-1: USB disconnect, device number 15 [ 567.472395][ T5885] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 567.623667][T10316] lo: entered allmulticast mode [ 567.628769][T10316] tunl0: entered allmulticast mode [ 567.634841][T10316] gre0: entered allmulticast mode [ 567.640076][T10316] gretap0: entered allmulticast mode [ 567.646074][T10316] erspan0: entered allmulticast mode [ 567.651825][T10316] ip_vti0: entered allmulticast mode [ 567.657462][T10316] ip6_vti0: entered allmulticast mode [ 567.666077][T10316] sit0: entered allmulticast mode [ 567.760866][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 567.785976][T10316] ip6tnl0: entered allmulticast mode [ 567.807836][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.965955][T10316] ip6gre0: entered allmulticast mode [ 567.986530][T10316] syz_tun: entered allmulticast mode [ 568.007209][T10316] ip6gretap0: entered allmulticast mode [ 568.049990][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.342657][T10316] bridge0: entered allmulticast mode [ 568.348746][T10316] vcan0: entered allmulticast mode [ 568.387130][ T5885] usb 4-1: New USB device found, idVendor=0dac, idProduct=024b, bcdDevice= 0.04 [ 568.396324][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.411225][T10316] bond0: entered allmulticast mode [ 568.432477][ T5885] usb 4-1: config 0 descriptor?? [ 568.437668][T10316] bond_slave_0: entered allmulticast mode [ 568.444730][T10316] bond_slave_1: entered allmulticast mode [ 568.448153][ T5885] usb 4-1: can't set config #0, error -71 [ 568.451477][T10316] dummy0: entered allmulticast mode [ 568.465117][ T5885] usb 4-1: USB disconnect, device number 19 [ 568.473173][T10316] nlmon0: entered allmulticast mode [ 568.478845][T10316] caif0: entered allmulticast mode [ 568.484790][T10316] vxcan0: entered allmulticast mode [ 568.490174][T10316] vxcan1: entered allmulticast mode [ 568.495890][T10316] veth0: entered allmulticast mode [ 568.501890][T10316] veth1: entered allmulticast mode [ 568.514665][T10316] wg0: entered allmulticast mode [ 568.521049][T10316] wg1: entered allmulticast mode [ 568.527490][T10316] wg2: entered allmulticast mode [ 568.540930][T10316] veth0_to_bridge: entered allmulticast mode [ 568.547288][T10316] veth1_to_bridge: entered allmulticast mode [ 568.553877][T10316] veth0_to_bond: entered allmulticast mode [ 568.560931][T10316] veth1_to_bond: entered allmulticast mode [ 568.573406][T10316] veth0_to_team: entered allmulticast mode [ 568.579679][T10316] veth1_to_team: entered allmulticast mode [ 568.586185][T10316] veth0_to_batadv: entered allmulticast mode [ 568.617460][T10316] batadv_slave_0: entered allmulticast mode [ 568.623673][T10316] veth1_to_batadv: entered allmulticast mode [ 568.630974][T10316] batadv_slave_1: entered allmulticast mode [ 568.637133][T10316] xfrm0: entered allmulticast mode [ 568.645498][T10316] veth0_to_hsr: entered allmulticast mode [ 568.651616][T10316] hsr_slave_0: entered allmulticast mode [ 568.657596][T10316] veth1_to_hsr: entered allmulticast mode [ 568.663657][T10316] hsr_slave_1: entered allmulticast mode [ 568.713223][T10316] hsr0: entered allmulticast mode [ 568.741983][T10316] veth1_virt_wifi: entered allmulticast mode [ 568.804163][T10316] veth0_virt_wifi: entered allmulticast mode [ 568.817508][T10316] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 568.848947][T10316] veth1_vlan: entered allmulticast mode [ 568.856027][T10316] veth0_vlan: entered allmulticast mode [ 568.863995][T10316] vlan0: entered allmulticast mode [ 568.870472][T10316] vlan1: entered allmulticast mode [ 568.878389][T10316] macvlan0: entered allmulticast mode [ 568.885918][T10316] macvlan1: entered allmulticast mode [ 568.899735][T10316] ipvlan0: entered allmulticast mode [ 568.983380][T10316] ipvlan1: entered allmulticast mode [ 569.144095][T10316] veth1_macvtap: entered allmulticast mode [ 569.153156][T10316] veth0_macvtap: entered allmulticast mode [ 569.161127][T10316] macvtap0: entered allmulticast mode [ 569.169170][T10316] macsec0: entered allmulticast mode [ 569.179896][T10316] geneve0: entered allmulticast mode [ 569.804219][T10316] geneve1: entered allmulticast mode [ 569.877854][T10316] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 569.964413][T10316] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 570.070364][T10316] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 570.080466][T10316] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 570.088099][T10316] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 570.106248][T10316] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 570.114281][T10316] gtp0: left promiscuous mode [ 570.121175][T10316] bridge1: entered allmulticast mode [ 570.127248][T10316] gtp1: left promiscuous mode [ 570.138440][T10316] erspan0.1: entered allmulticast mode [ 570.149299][T10316] bridge2: entered allmulticast mode [ 572.177887][T10358] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1160'. [ 572.235122][T10367] netlink: 'syz.0.1163': attribute type 1 has an invalid length. [ 572.283414][T10367] 8021q: adding VLAN 0 to HW filter on device bond4 [ 572.350031][T10371] 8021q: adding VLAN 0 to HW filter on device bond4 [ 572.473167][T10371] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 572.484351][T10371] bond4: (slave vti0): Error -95 calling set_mac_address [ 572.541579][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 575.700844][ T5899] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 576.810904][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 576.818143][ T5899] usb 3-1: config 89 has an invalid interface number: 1 but max is 0 [ 576.826460][ T5899] usb 3-1: config 89 has no interface number 0 [ 576.839637][ T5899] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 576.848896][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.856970][ T5899] usb 3-1: Product: syz [ 576.883140][ T5899] usb 3-1: Manufacturer: syz [ 576.887786][ T5899] usb 3-1: SerialNumber: syz [ 577.017963][T10424] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 577.145180][T10424] 8021q: adding VLAN 0 to HW filter on device bond4 [ 578.770378][T10439] netlink: 'syz.2.1173': attribute type 21 has an invalid length. [ 579.018226][T10424] 8021q: adding VLAN 0 to HW filter on device bond4 [ 579.255072][T10424] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 579.369833][T10424] bond4: (slave vti0): Error -95 calling set_mac_address [ 579.761448][T10446] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1183'. [ 580.664334][ T5899] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 581.383024][ T5899] usb 3-1: selecting invalid altsetting 1 [ 581.528555][ T5899] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 581.931262][ T5899] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 581.943485][ T5899] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 581.965562][ T5899] usb 3-1: media controller created [ 582.156409][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.754027][ T5899] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 583.761121][ T5899] zl10353_read_register: readreg error (reg=127, ret==-71) [ 583.770378][ T5899] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 584.331281][ T5899] usb 3-1: USB disconnect, device number 20 [ 585.408549][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 586.216964][ T5899] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 586.548174][T10507] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 586.554834][T10507] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 586.564264][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.577509][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 586.579073][T10507] vhci_hcd vhci_hcd.0: Device attached [ 586.592515][T10511] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 586.599145][T10511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 586.756751][T10511] vhci_hcd vhci_hcd.0: Device attached [ 586.804269][T10515] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 587.076154][ T5899] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 587.497817][T10507] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 587.504490][T10507] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 587.512164][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 587.520792][ T5899] usb 2-1: SerialNumber: syz [ 587.583483][T10507] vhci_hcd vhci_hcd.0: Device attached [ 587.592205][T10515] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19) [ 587.598840][T10515] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 587.627707][ T5885] vhci_hcd: vhci_device speed not set [ 587.640951][T10515] vhci_hcd vhci_hcd.0: Device attached [ 587.693862][ T5885] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 587.721602][T10511] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 587.725661][T10507] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 587.728226][T10511] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 587.728460][T10511] vhci_hcd vhci_hcd.0: Device attached [ 588.120880][ T5899] usb 2-1: 0:2 : does not exist [ 588.143077][T10507] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 588.143873][ T5899] usb 2-1: unit 5 not found! [ 588.156926][T10526] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 588.208851][T10507] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 588.231306][ T5899] usb 2-1: USB disconnect, device number 16 [ 588.267413][T10507] vhci_hcd vhci_hcd.0: port 0 already used [ 588.287960][T10526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 588.362827][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.371313][T10528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 588.392382][T10516] vhci_hcd: connection closed [ 588.392763][T10512] vhci_hcd: connection closed [ 588.398191][T10519] vhci_hcd: connection closed [ 588.403492][ T49] vhci_hcd: stop threads [ 588.412508][T10518] vhci_hcd: connection closed [ 588.413530][T10508] vhci_hcd: connection reset by peer [ 588.430141][ T49] vhci_hcd: release socket [ 588.435287][ T49] vhci_hcd: disconnect device [ 588.436367][T10528] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 588.441448][ T49] vhci_hcd: stop threads [ 588.456167][ T49] vhci_hcd: release socket [ 588.462359][ T49] vhci_hcd: disconnect device [ 588.467468][ T49] vhci_hcd: stop threads [ 588.473373][ T49] vhci_hcd: release socket [ 588.475912][T10528] bond5: (slave vti0): Error -95 calling set_mac_address [ 588.478077][ T49] vhci_hcd: disconnect device [ 588.490425][ T49] vhci_hcd: stop threads [ 588.496818][ T49] vhci_hcd: release socket [ 588.502544][ T49] vhci_hcd: disconnect device [ 588.507468][ T49] vhci_hcd: stop threads [ 588.512833][ T49] vhci_hcd: release socket [ 588.517466][ T49] vhci_hcd: disconnect device [ 590.879988][T10544] syz.4.1209 (10544): drop_caches: 2 [ 592.918811][ T5885] vhci_hcd: vhci_device speed not set [ 592.934295][T10576] lo: entered allmulticast mode [ 592.943711][T10576] tunl0: entered allmulticast mode [ 592.955649][T10576] gre0: entered allmulticast mode [ 592.992993][T10576] gretap0: entered allmulticast mode [ 593.018153][T10576] erspan0: entered allmulticast mode [ 593.028560][T10576] ip_vti0: entered allmulticast mode [ 593.037468][T10576] ip6_vti0: entered allmulticast mode [ 593.047773][T10576] sit0: entered allmulticast mode [ 593.067494][T10576] ip6tnl0: entered allmulticast mode [ 593.076480][T10576] ip6gre0: entered allmulticast mode [ 593.085931][T10576] syz_tun: entered allmulticast mode [ 593.093983][T10576] ip6gretap0: entered allmulticast mode [ 593.104658][T10576] bridge0: port 3(team0) entered disabled state [ 593.111445][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.118771][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.127399][T10576] bridge0: entered allmulticast mode [ 593.135819][T10576] vcan0: entered allmulticast mode [ 593.145796][T10576] bond0: entered allmulticast mode [ 593.152155][T10576] bond_slave_0: entered allmulticast mode [ 593.157984][T10576] bond_slave_1: entered allmulticast mode [ 593.174547][T10576] dummy0: entered allmulticast mode [ 593.184281][T10576] nlmon0: entered allmulticast mode [ 593.191894][T10576] caif0: entered allmulticast mode [ 593.197557][T10576] vxcan0: entered allmulticast mode [ 593.236205][ T5892] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 593.270860][T10576] vxcan1: entered allmulticast mode [ 593.277538][T10576] veth0: entered allmulticast mode [ 593.287160][T10576] veth1: entered allmulticast mode [ 593.296350][T10576] wg0: entered allmulticast mode [ 593.308953][T10576] wg1: entered allmulticast mode [ 593.321885][T10576] wg2: entered allmulticast mode [ 593.382704][ T5892] usb 5-1: device descriptor read/64, error -71 [ 593.457876][T10576] veth0_to_bridge: entered allmulticast mode [ 593.608932][T10576] veth1_to_bridge: entered allmulticast mode [ 593.763798][T10576] veth0_to_bond: entered allmulticast mode [ 593.770795][ T5892] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 593.856767][T10576] veth1_to_bond: entered allmulticast mode [ 593.877941][T10576] veth0_to_team: entered allmulticast mode [ 593.905583][T10576] veth1_to_team: entered allmulticast mode [ 593.922248][T10576] veth0_to_batadv: entered allmulticast mode [ 593.931643][T10576] batadv_slave_0: entered allmulticast mode [ 593.942689][T10576] veth1_to_batadv: entered allmulticast mode [ 593.955909][ T5892] usb 5-1: device descriptor read/64, error -71 [ 593.964315][T10576] batadv_slave_1: entered allmulticast mode [ 593.973541][T10576] xfrm0: entered allmulticast mode [ 594.074425][ T5892] usb usb5-port1: attempt power cycle [ 594.111711][T10576] veth0_to_hsr: entered allmulticast mode [ 594.120142][T10576] hsr_slave_0: entered allmulticast mode [ 594.128355][T10576] veth1_to_hsr: entered allmulticast mode [ 594.136626][T10576] hsr_slave_1: entered allmulticast mode [ 594.145789][T10576] hsr0: entered allmulticast mode [ 594.153571][T10576] veth1_virt_wifi: entered allmulticast mode [ 594.170149][T10576] veth0_virt_wifi: entered allmulticast mode [ 594.191124][T10576] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 594.200602][T10576] veth1_vlan: entered allmulticast mode [ 594.219571][T10576] veth0_vlan: entered allmulticast mode [ 594.267855][T10576] vlan0: entered allmulticast mode [ 594.274570][T10576] vlan1: entered allmulticast mode [ 594.283151][T10576] macvlan0: entered allmulticast mode [ 594.294333][T10576] macvlan1: entered allmulticast mode [ 594.304755][T10576] ipvlan0: entered allmulticast mode [ 594.313194][T10576] ipvlan1: entered allmulticast mode [ 594.321666][T10576] veth1_macvtap: entered allmulticast mode [ 594.337524][T10576] veth0_macvtap: entered allmulticast mode [ 594.357883][T10576] macvtap0: entered allmulticast mode [ 594.378430][T10576] macsec0: entered allmulticast mode [ 594.405185][T10576] geneve0: entered allmulticast mode [ 594.423878][T10576] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.434546][T10576] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.443761][T10576] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.457261][ T5892] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 594.466466][T10576] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.486150][ T5892] usb 5-1: device descriptor read/8, error -71 [ 594.494844][T10576] geneve1: entered allmulticast mode [ 594.514271][T10576] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 594.534441][T10576] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 594.555889][T10576] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 594.577884][T10576] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 594.634577][ T24] usb usb40-port1: attempt power cycle [ 594.642521][T10576] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 594.659254][T10576] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 594.668518][T10576] gtp0: left promiscuous mode [ 594.674609][T10576] erspan0.1: entered allmulticast mode [ 594.680424][T10576] bridge1: entered allmulticast mode [ 594.686062][T10576] bridge2: entered allmulticast mode [ 594.751726][ T5892] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 594.801998][ T5892] usb 5-1: device descriptor read/8, error -71 [ 595.830909][T10598] syz!: rxe_newlink: already configured on team_slave_0 [ 595.940901][ T5892] usb usb5-port1: unable to enumerate USB device [ 596.695132][ T24] usb usb40-port1: unable to enumerate USB device [ 597.457816][ T9209] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 599.554319][T10626] tipc: Started in network mode [ 599.559330][T10626] tipc: Node identity 8eb6cebb9709, cluster identity 4711 [ 599.709491][T10627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1229'. [ 599.729988][T10626] tipc: Enabled bearer , priority 10 [ 600.461798][T10626] tipc: Resetting bearer [ 600.521005][T10621] tipc: Resetting bearer [ 600.552586][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 600.576744][T10636] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 600.583270][T10636] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 600.629090][T10636] vhci_hcd vhci_hcd.0: Device attached [ 600.855543][ T5892] tipc: Node number set to 432000699 [ 601.070994][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 601.097064][T10638] vhci_hcd: connection closed [ 601.128944][ T24] usb 3-1: config 89 has an invalid interface number: 1 but max is 0 [ 601.129285][ T36] vhci_hcd: stop threads [ 601.156362][ T36] vhci_hcd: release socket [ 601.156369][ T24] usb 3-1: config 89 has no interface number 0 [ 601.173463][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 601.189959][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.189988][ T36] vhci_hcd: disconnect device [ 601.210985][ T24] usb 3-1: Product: syz [ 601.215256][ T24] usb 3-1: Manufacturer: syz [ 601.230056][ T24] usb 3-1: SerialNumber: syz [ 601.247341][ T5892] usb 36-1: enqueue for inactive port 0 [ 601.271691][T10646] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 601.526227][T10649] netlink: 'syz.2.1232': attribute type 21 has an invalid length. [ 601.967817][ T5892] usb usb36-port1: attempt power cycle [ 602.576327][ T5892] usb usb36-port1: unable to enumerate USB device [ 603.842332][T10621] tipc: Disabling bearer [ 603.885722][T10646] 8021q: adding VLAN 0 to HW filter on device bond6 [ 604.016357][ T24] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 604.040871][ T24] usb 3-1: selecting invalid altsetting 1 [ 604.614034][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 604.694520][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 604.705341][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 604.714205][ T24] usb 3-1: media controller created [ 604.730316][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.948128][ T24] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 604.978273][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 605.033472][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 605.455877][ T24] usb 3-1: USB disconnect, device number 21 [ 607.104138][T10697] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 607.450686][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 607.900005][T10697] 8021q: adding VLAN 0 to HW filter on device bond5 [ 608.181076][T10700] 8021q: adding VLAN 0 to HW filter on device bond5 [ 608.711528][T10700] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 608.742114][T10700] bond5: (slave vti0): Error -95 calling set_mac_address [ 608.863404][T10717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1255'. [ 610.142795][ T5892] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 611.565885][T10744] syz.3.1263 (10744): drop_caches: 2 [ 611.644494][ T5892] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 611.852310][ T5892] usb 3-1: config 0 has no interface number 0 [ 611.860555][ T5892] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 611.884417][ T5892] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 611.947036][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.974653][ T5892] usb 3-1: config 0 descriptor?? [ 611.994121][ T5892] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input5 [ 612.299570][ T24] usb 3-1: USB disconnect, device number 22 [ 612.320212][T10752] netlink: 'syz.1.1267': attribute type 1 has an invalid length. [ 612.443590][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [ 612.493866][T10752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.548644][T10756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.563706][T10756] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 612.581931][T10756] bond1: (slave vti0): Error -95 calling set_mac_address [ 616.397339][T10804] bond1: entered allmulticast mode [ 617.095028][ T5892] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 617.416835][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 618.249765][T10819] syz.3.1288 (10819): drop_caches: 2 [ 618.309735][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.380782][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.410101][ T5892] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.439410][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.611647][ T5892] usb 5-1: Product: syz [ 618.617049][ T5892] usb 5-1: Manufacturer: syz [ 618.622176][ T5892] usb 5-1: SerialNumber: syz [ 618.900960][T10840] netlink: 'syz.3.1293': attribute type 4 has an invalid length. [ 618.908733][T10840] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1293'. [ 620.119482][ T5892] usb 5-1: skipping empty audio interface (v1) [ 621.284450][ T5892] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 621.303961][ T5892] usb 5-1: USB disconnect, device number 15 [ 622.674778][T10603] udevd[10603]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.421522][T10869] tipc: Enabled bearer , priority 10 [ 624.194651][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.208071][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.278330][T10865] tipc: Disabling bearer [ 625.041098][ T5892] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 625.237279][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 625.244432][ T5892] usb 5-1: config 89 has an invalid interface number: 1 but max is 0 [ 625.253074][ T5892] usb 5-1: config 89 has no interface number 0 [ 625.267906][ T5892] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 625.351180][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.361568][ T5892] usb 5-1: Product: syz [ 625.365763][ T5892] usb 5-1: Manufacturer: syz [ 625.370433][ T5892] usb 5-1: SerialNumber: syz [ 625.500859][ T5899] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 625.689508][T10902] netlink: 'syz.4.1304': attribute type 21 has an invalid length. [ 625.697634][T10902] IPv6: NLM_F_CREATE should be specified when creating new route [ 626.221973][ T5899] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 626.236862][ T5899] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 626.309456][ T5899] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 626.328719][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.342325][T10897] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 626.353345][ T5899] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.445234][ T5892] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 626.488338][ T5892] usb 5-1: selecting invalid altsetting 1 [ 626.494638][ T5892] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 626.517954][ T5892] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 626.529509][ T5892] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 626.538324][ T5892] usb 5-1: media controller created [ 626.596571][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 626.708480][ T5892] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 626.718897][ T5892] zl10353_read_register: readreg error (reg=127, ret==-71) [ 626.730902][ T5892] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 626.824676][ T5892] usb 5-1: USB disconnect, device number 16 [ 626.940921][ T5899] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 627.093180][ T5892] usb 4-1: USB disconnect, device number 20 [ 627.130872][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 627.143930][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.168176][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 627.194305][ T5899] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 627.203813][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.218350][ T5899] usb 1-1: Product: syz [ 627.226284][ T5899] usb 1-1: Manufacturer: syz [ 627.231473][ T5899] usb 1-1: SerialNumber: syz [ 627.842235][T10920] tipc: Enabled bearer , priority 10 [ 627.858050][T10919] tipc: Disabling bearer [ 628.184022][ T5899] usb 1-1: skipping empty audio interface (v1) [ 628.588087][ T5899] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 628.750350][ T5899] usb 1-1: USB disconnect, device number 24 [ 629.452259][T10905] udevd[10905]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.621627][T10924] syz.2.1315 (10924): drop_caches: 2 [ 629.627228][T10924] syz.2.1315 (10924): drop_caches: 2 [ 629.856635][T10945] loop7: detected capacity change from 0 to 16384 [ 630.030835][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 630.122024][ T9209] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 630.341007][ T9209] usb 3-1: Using ep0 maxpacket: 8 [ 630.347467][ T24] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 630.365010][ T9209] usb 3-1: config 0 has no interfaces? [ 630.386616][ T24] usb 1-1: config 0 has no interface number 0 [ 630.398499][ T9209] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 630.414840][ T24] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 630.429837][ T9209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.444542][ T24] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 630.454889][ T9209] usb 3-1: Product: syz [ 630.462774][ T9209] usb 3-1: Manufacturer: syz [ 630.470409][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.479762][ T9209] usb 3-1: SerialNumber: syz [ 630.498720][ T9209] usb 3-1: config 0 descriptor?? [ 630.515528][ T24] usb 1-1: config 0 descriptor?? [ 630.574256][ T24] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input6 [ 630.845860][ T24] usb 1-1: USB disconnect, device number 25 [ 630.868464][T10945] I/O error, dev loop7, sector 4136 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 630.887086][ T5899] usb 3-1: USB disconnect, device number 23 [ 630.895659][T10945] I/O error, dev loop7, sector 4392 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 630.908968][T10945] I/O error, dev loop7, sector 4136 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 630.927217][T10945] buffer_io_error: 446 callbacks suppressed [ 630.927261][T10945] Buffer I/O error on dev loop7, logical block 517, async page read [ 630.951121][T10945] I/O error, dev loop7, sector 4136 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 630.990812][T10945] Buffer I/O error on dev loop7, logical block 517, async page read [ 631.034174][T10945] I/O error, dev loop7, sector 4136 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.044457][T10945] Buffer I/O error on dev loop7, logical block 517, async page read [ 631.068834][T10945] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 631.238675][T10945] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 631.827294][T10945] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 631.837512][T10945] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 631.854303][T10945] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 631.874256][T10945] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 631.905471][T10945] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 631.941192][T10945] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 632.098536][T10945] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 632.119411][T10945] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 632.143475][T10945] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 632.158237][T10945] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 0 [ 632.625659][ T5899] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 632.872653][ T5899] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 632.888022][ T5899] usb 4-1: config 0 has no interface number 0 [ 633.331649][ T5899] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 633.343125][ T5899] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 633.355939][ T5899] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 633.365329][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.412225][ T5899] usb 4-1: config 0 descriptor?? [ 633.473711][ T5899] usb 4-1: can't set config #0, error -71 [ 633.491043][ T5899] usb 4-1: USB disconnect, device number 21 [ 634.347913][ T5892] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 634.663664][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 634.689680][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.702823][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.736914][ T5892] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.766876][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.799735][ T5892] usb 5-1: Product: syz [ 634.820271][ T5892] usb 5-1: Manufacturer: syz [ 634.831304][ T5892] usb 5-1: SerialNumber: syz [ 635.549711][T11005] loop7: detected capacity change from 0 to 16384 [ 636.114041][ T5892] usb 5-1: cannot find UAC_HEADER [ 636.225096][ T5892] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 636.278176][ T5892] usb 5-1: USB disconnect, device number 17 [ 636.350801][ T5899] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 637.223003][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 637.242809][ T5899] usb 3-1: config 0 has no interfaces? [ 637.253519][ T5899] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 637.271021][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.279246][ T5899] usb 3-1: Product: syz [ 637.283761][ T5899] usb 3-1: Manufacturer: syz [ 637.288865][ T5899] usb 3-1: SerialNumber: syz [ 637.323792][ T5899] usb 3-1: config 0 descriptor?? [ 637.919702][ T5899] usb 3-1: USB disconnect, device number 24 [ 637.943801][T11005] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 638.021910][T11005] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 638.033305][T11005] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 638.044588][T11005] buffer_io_error: 510 callbacks suppressed [ 638.044600][T11005] Buffer I/O error on dev loop7, logical block 384, async page read [ 638.131929][T11005] I/O error, dev loop7, sector 3080 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 638.144935][T11005] Buffer I/O error on dev loop7, logical block 385, async page read [ 638.160034][T11005] I/O error, dev loop7, sector 3088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 638.218436][T11005] Buffer I/O error on dev loop7, logical block 386, async page read [ 638.227583][T11005] I/O error, dev loop7, sector 3096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 638.241086][T11005] Buffer I/O error on dev loop7, logical block 387, async page read [ 638.257860][T11005] I/O error, dev loop7, sector 3104 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 638.268150][T11005] Buffer I/O error on dev loop7, logical block 388, async page read [ 638.288289][T11005] I/O error, dev loop7, sector 3112 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 638.298596][T11005] Buffer I/O error on dev loop7, logical block 389, async page read [ 638.309775][T11005] I/O error, dev loop7, sector 3120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 638.322080][T11005] Buffer I/O error on dev loop7, logical block 390, async page read [ 638.330901][T11005] I/O error, dev loop7, sector 3128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 638.340548][T11005] Buffer I/O error on dev loop7, logical block 391, async page read [ 638.349262][T11005] Buffer I/O error on dev loop7, logical block 392, async page read [ 638.366001][T11005] Buffer I/O error on dev loop7, logical block 393, async page read [ 639.731188][T11036] netlink: 'syz.0.1344': attribute type 4 has an invalid length. [ 639.733828][T11040] tipc: New replicast peer: 255.255.255.255 [ 639.738956][T11036] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1344'. [ 639.745557][T11040] tipc: Enabled bearer , priority 10 [ 643.721275][T11075] tipc: Enabling of bearer rejected, already enabled [ 646.831748][T11096] tipc: Enabling of bearer rejected, already enabled [ 648.673485][T11117] netlink: 'syz.0.1364': attribute type 1 has an invalid length. [ 649.074882][T11117] 8021q: adding VLAN 0 to HW filter on device bond6 [ 649.099431][ T5899] IPVS: starting estimator thread 0... [ 649.111128][T11120] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 649.321336][T11123] IPVS: using max 32 ests per chain, 76800 per kthread [ 657.450520][T11173] syz.3.1379 (11173): drop_caches: 2 [ 657.456291][T11173] syz.3.1379 (11173): drop_caches: 2 [ 658.609016][T11202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1386'. [ 660.300856][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 660.460792][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 660.468402][ T24] usb 3-1: config 89 has an invalid interface number: 1 but max is 0 [ 660.476965][ T24] usb 3-1: config 89 has no interface number 0 [ 660.487860][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 660.498819][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.507016][ T24] usb 3-1: Product: syz [ 660.511658][ T24] usb 3-1: Manufacturer: syz [ 660.516449][ T24] usb 3-1: SerialNumber: syz [ 660.832801][T11217] netlink: 'syz.2.1390': attribute type 21 has an invalid length. [ 661.497304][ T24] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 661.511362][ T24] usb 3-1: selecting invalid altsetting 1 [ 661.518085][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 661.549644][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 661.562836][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 661.573092][ T24] usb 3-1: media controller created [ 661.711408][ T9209] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 662.106429][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 662.221808][ T24] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 662.229263][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 662.239995][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 662.250126][ T9209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 662.271778][ T9209] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 662.315112][ T9209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 662.367842][ T9209] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 662.383931][ T24] usb 3-1: USB disconnect, device number 25 [ 662.389939][ T9209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.404860][ T9209] usb 4-1: Product: syz [ 662.409060][ T9209] usb 4-1: Manufacturer: syz [ 662.416418][ T9209] usb 4-1: SerialNumber: syz [ 663.285451][ T9209] usb 4-1: config 0 descriptor?? [ 663.293570][T11219] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 663.365900][T11219] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 663.406182][ T9209] usb 4-1: ucan: probing device on interface #0 [ 663.635868][ T9209] usb 4-1: ucan: device protocol version 0 is not supported [ 663.846633][T11243] netlink: 'syz.2.1400': attribute type 4 has an invalid length. [ 663.854546][T11243] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1400'. [ 663.880257][ T9209] usb 4-1: ucan: probe failed; try to update the device firmware [ 665.807904][ T5899] usb 4-1: USB disconnect, device number 22 [ 667.231530][T11272] loop7: detected capacity change from 0 to 16384 [ 667.513103][ T5899] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 667.670900][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 667.700899][ T5899] usb 1-1: config 0 has no interfaces? [ 667.713755][ T5899] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 667.741434][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.759792][ T5899] usb 1-1: Product: syz [ 667.769902][ T5899] usb 1-1: Manufacturer: syz [ 667.787904][ T5899] usb 1-1: SerialNumber: syz [ 667.805026][ T5899] usb 1-1: config 0 descriptor?? [ 668.547181][T11272] blk_print_req_error: 27 callbacks suppressed [ 668.547224][T11272] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 669.032276][T11272] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 669.152665][T11272] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 669.168885][ T5899] usb 1-1: USB disconnect, device number 26 [ 669.286844][T11272] buffer_io_error: 406 callbacks suppressed [ 669.286864][T11272] Buffer I/O error on dev loop7, logical block 512, async page read [ 669.489280][T11272] I/O error, dev loop7, sector 4104 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 669.511283][T11272] Buffer I/O error on dev loop7, logical block 513, async page read [ 669.519812][T11272] I/O error, dev loop7, sector 4112 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 669.529834][T11272] Buffer I/O error on dev loop7, logical block 514, async page read [ 669.538647][T11272] I/O error, dev loop7, sector 4120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 669.548561][T11272] Buffer I/O error on dev loop7, logical block 515, async page read [ 669.563537][T11272] I/O error, dev loop7, sector 4128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 669.573671][T11272] Buffer I/O error on dev loop7, logical block 516, async page read [ 669.582196][T11272] I/O error, dev loop7, sector 4136 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 669.591881][T11272] Buffer I/O error on dev loop7, logical block 517, async page read [ 669.600080][T11272] I/O error, dev loop7, sector 4144 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 670.653552][T11272] Buffer I/O error on dev loop7, logical block 518, async page read [ 670.680278][T11272] I/O error, dev loop7, sector 4152 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 670.830412][T11272] Buffer I/O error on dev loop7, logical block 519, async page read [ 670.843746][T11272] Buffer I/O error on dev loop7, logical block 520, async page read [ 670.860971][T11272] Buffer I/O error on dev loop7, logical block 521, async page read [ 672.357104][T11321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1420'. [ 676.309117][ T30] audit: type=1326 audit(1750372400.076:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11349 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0d8e929 code=0x7ffc0000 [ 676.493054][ T30] audit: type=1326 audit(1750372400.076:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11349 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0d8e929 code=0x7ffc0000 [ 676.540806][ T30] audit: type=1326 audit(1750372400.076:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11349 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f18d0d8e929 code=0x7ffc0000 [ 677.205181][ T30] audit: type=1326 audit(1750372400.136:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11351 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f18d0dc11e5 code=0x7ffc0000 [ 677.251711][ T30] audit: type=1326 audit(1750372400.136:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11349 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0d8e929 code=0x7ffc0000 [ 677.305771][ T30] audit: type=1326 audit(1750372400.136:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11349 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0d8e929 code=0x7ffc0000 [ 677.347109][ T30] audit: type=1326 audit(1750372400.286:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11351 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f18d0d8e929 code=0x7ffc0000 [ 677.407080][ T30] audit: type=1326 audit(1750372401.056:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11349 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f18d0d2ab19 code=0x7ffc0000 [ 677.652826][ T30] audit: type=1326 audit(1750372401.056:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11349 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0d8e929 code=0x7ffc0000 [ 677.919124][ T30] audit: type=1326 audit(1750372401.076:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11349 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f18d0d8e929 code=0x7ffc0000 [ 681.510357][T11388] siw: device registration error -23 [ 685.858824][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.865308][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.684398][T11442] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 686.691064][T11442] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 686.729499][T11442] vhci_hcd vhci_hcd.0: Device attached [ 686.962914][T11446] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 686.969578][T11446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 686.977551][T11446] vhci_hcd vhci_hcd.0: Device attached [ 687.012069][ T9209] vhci_hcd: vhci_device speed not set [ 687.018505][T11442] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 687.601009][ T9209] usb 39-1: new full-speed USB device number 6 using vhci_hcd [ 687.622315][T11446] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(15) [ 687.629034][T11446] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 687.636608][T11442] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 687.643222][T11442] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 687.779046][T11446] vhci_hcd vhci_hcd.0: Device attached [ 687.798997][T11456] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18) [ 687.805731][T11456] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 687.876571][T11442] vhci_hcd vhci_hcd.0: Device attached [ 687.930161][T11442] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 688.411096][T11456] vhci_hcd vhci_hcd.0: Device attached [ 688.411606][T11446] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 688.444081][T11442] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 688.509170][T11442] vhci_hcd vhci_hcd.0: port 0 already used [ 689.006831][T11452] vhci_hcd: connection closed [ 689.007117][ T49] vhci_hcd: stop threads [ 689.016609][ T49] vhci_hcd: release socket [ 689.021176][T11458] vhci_hcd: connection closed [ 689.021355][T11455] vhci_hcd: connection closed [ 689.026881][T11448] vhci_hcd: connection closed [ 689.031874][T11443] vhci_hcd: connection reset by peer [ 689.049784][ T49] vhci_hcd: disconnect device [ 689.067800][T11474] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 689.077231][ T49] vhci_hcd: stop threads [ 689.091269][ T49] vhci_hcd: release socket [ 689.100843][ T49] vhci_hcd: disconnect device [ 689.147016][ T49] vhci_hcd: stop threads [ 689.155854][ T49] vhci_hcd: release socket [ 689.162657][ T49] vhci_hcd: disconnect device [ 689.168869][ T49] vhci_hcd: stop threads [ 689.173848][ T49] vhci_hcd: release socket [ 689.179595][ T49] vhci_hcd: disconnect device [ 689.188899][ T49] vhci_hcd: stop threads [ 689.195097][ T49] vhci_hcd: release socket [ 689.201868][ T49] vhci_hcd: disconnect device [ 689.920864][ T5892] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 690.130778][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 690.144032][ T5892] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.159626][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.183099][ T5892] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 690.241349][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.110345][ T5892] usb 4-1: Product: syz [ 691.121045][ T5892] usb 4-1: Manufacturer: syz [ 691.125872][ T5892] usb 4-1: SerialNumber: syz [ 691.130850][T11489] syz!: rxe_newlink: already configured on team_slave_0 [ 691.565072][ T5892] usb 4-1: cannot find UAC_HEADER [ 691.722240][ T5892] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 691.903244][ T5892] usb 4-1: USB disconnect, device number 23 [ 693.413121][ T9209] vhci_hcd: vhci_device speed not set [ 694.581056][T11511] syz.1.1471 (11511): drop_caches: 2 [ 694.586686][T11511] syz.1.1471 (11511): drop_caches: 2 [ 694.760290][T11519] netlink: 'syz.2.1472': attribute type 4 has an invalid length. [ 694.769042][T11519] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1472'. [ 695.602281][ T5899] usb usb40-port1: attempt power cycle [ 696.061096][ T9209] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 696.252073][ T5899] usb usb40-port1: unable to enumerate USB device [ 696.410817][ T9209] usb 2-1: Using ep0 maxpacket: 32 [ 696.529288][ T9209] usb 2-1: config 89 has an invalid interface number: 1 but max is 0 [ 696.550244][ T9209] usb 2-1: config 89 has no interface number 0 [ 696.563356][ T9209] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 696.572682][ T9209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.582868][ T9209] usb 2-1: Product: syz [ 696.588384][ T9209] usb 2-1: Manufacturer: syz [ 696.596424][ T9209] usb 2-1: SerialNumber: syz [ 696.998958][T11546] netlink: 'syz.1.1478': attribute type 21 has an invalid length. [ 697.444499][ T9209] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 697.615938][ T9209] usb 2-1: selecting invalid altsetting 1 [ 697.622265][ T9209] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 697.663211][ T9209] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 697.685643][ T9209] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 697.703576][ T9209] usb 2-1: media controller created [ 698.127082][ T9209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 698.185220][ T9209] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 698.213059][ T9209] zl10353_read_register: readreg error (reg=127, ret==-71) [ 698.377244][ T9209] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 698.784445][ T9209] usb 2-1: USB disconnect, device number 18 [ 701.743138][T11587] syzkaller0: entered promiscuous mode [ 701.748747][T11587] syzkaller0: entered allmulticast mode [ 702.250792][ T5892] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 702.471810][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.485567][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 702.819036][T11600] syz.2.1498 (11600): drop_caches: 2 [ 702.838808][T11600] syz.2.1498 (11600): drop_caches: 2 [ 702.916126][ T5892] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 702.938800][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 702.961629][ T5892] usb 2-1: SerialNumber: syz [ 703.066407][T11603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 703.309628][ T5892] usb 2-1: 0:2 : does not exist [ 703.314788][ T5892] usb 2-1: unit 5 not found! [ 703.330927][ T5892] usb 2-1: USB disconnect, device number 19 [ 704.999963][T11619] syz.2.1506 (11619): drop_caches: 2 [ 705.022593][T11619] syz.2.1506 (11619): drop_caches: 2 [ 706.780863][ T5892] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 707.092556][ T5892] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 707.340452][ T5892] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 707.363641][ T5892] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 707.811111][ T5892] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 707.913443][ T5892] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 708.010753][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 708.019390][ T5892] usb 1-1: Product: syz [ 708.033749][ T5892] usb 1-1: Manufacturer: syz [ 708.244342][ T5892] cdc_wdm 1-1:1.0: skipping garbage [ 708.820444][ T5892] cdc_wdm 1-1:1.0: skipping garbage [ 708.825749][ T5892] cdc_wdm 1-1:1.0: skipping garbage [ 708.833147][ T5892] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 708.856372][ T9209] usb 1-1: USB disconnect, device number 27 [ 709.011332][T11644] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 709.428974][T11655] tipc: Enabling of bearer rejected, failed to enable media [ 710.099161][T11671] tipc: Enabled bearer , priority 10 [ 710.108746][T11670] tipc: Disabling bearer [ 710.875729][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 715.407848][T11711] syz.2.1535 (11711): drop_caches: 2 [ 715.413955][T11711] syz.2.1535 (11711): drop_caches: 2 [ 715.424913][T11713] tipc: Enabled bearer , priority 10 [ 715.436416][T11712] tipc: Disabling bearer [ 717.460772][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 717.610900][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 717.619639][ T24] usb 4-1: config 89 has an invalid interface number: 1 but max is 0 [ 717.628220][ T24] usb 4-1: config 89 has no interface number 0 [ 717.639358][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 717.866136][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.874843][ T24] usb 4-1: Product: syz [ 717.879126][ T24] usb 4-1: Manufacturer: syz [ 717.884230][ T24] usb 4-1: SerialNumber: syz [ 718.401784][T11744] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1545'. [ 718.502114][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 718.502130][ T30] audit: type=1326 audit(1750372442.276:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11746 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bfd8e929 code=0x7ffc0000 [ 718.587383][ T30] audit: type=1326 audit(1750372442.276:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11746 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bfd8e929 code=0x7ffc0000 [ 718.620754][ T30] audit: type=1326 audit(1750372442.306:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11746 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f80bfd8e929 code=0x7ffc0000 [ 718.771563][T11751] syz!: rxe_newlink: already configured on team_slave_0 [ 719.548324][T11752] netlink: 'syz.3.1538': attribute type 21 has an invalid length. [ 719.971022][ T30] audit: type=1326 audit(1750372442.306:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11746 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bfd8e929 code=0x7ffc0000 [ 719.995981][ T30] audit: type=1326 audit(1750372442.306:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11746 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bfd8e929 code=0x7ffc0000 [ 720.123316][ T30] audit: type=1326 audit(1750372442.306:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11746 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f80bfd8e929 code=0x7ffc0000 [ 720.318157][ T30] audit: type=1326 audit(1750372442.316:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11746 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bfd8e929 code=0x7ffc0000 [ 720.358969][ T30] audit: type=1326 audit(1750372442.356:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11748 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f80bfdc11e5 code=0x7ffc0000 [ 720.681861][ T30] audit: type=1326 audit(1750372442.376:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11746 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bfd8e929 code=0x7ffc0000 [ 720.703603][ T30] audit: type=1326 audit(1750372443.746:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11748 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f80bfd8e929 code=0x7ffc0000 [ 721.373337][ T24] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 721.406855][ T24] usb 4-1: selecting invalid altsetting 1 [ 721.420713][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 721.446104][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 721.471424][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 721.479744][ T24] usb 4-1: media controller created [ 721.699123][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 722.314161][ T24] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 722.321320][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 722.329634][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 722.935623][ T24] usb 4-1: USB disconnect, device number 24 [ 723.411312][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 723.454358][T11787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1556'. [ 723.572564][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 724.146974][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.188384][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.256594][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 724.726582][T11804] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 725.023030][ T24] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 725.033438][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.070826][ T24] usb 4-1: config 0 descriptor?? [ 725.116584][T11812] tipc: Enabled bearer , priority 10 [ 725.158812][T11811] tipc: Disabling bearer [ 725.542666][ T5892] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 725.574360][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 725.580594][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 725.614931][ T24] usb 4-1: USB disconnect, device number 25 [ 725.795689][ T5892] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 725.861394][ T5892] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 725.871322][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 725.871337][ T30] audit: type=1326 audit(1750372449.606:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 725.899066][ T5892] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 725.908205][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.922406][ T30] audit: type=1326 audit(1750372449.616:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 726.151891][T11816] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 726.162490][ T5892] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 726.228559][ T30] audit: type=1326 audit(1750372449.616:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 726.251324][ T30] audit: type=1326 audit(1750372449.616:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 726.284515][ T30] audit: type=1326 audit(1750372449.616:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 726.306332][ T30] audit: type=1326 audit(1750372449.616:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 726.328128][ T30] audit: type=1326 audit(1750372449.626:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 726.445583][ T30] audit: type=1326 audit(1750372449.646:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11826 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c0d5c11e5 code=0x7ffc0000 [ 726.502274][ T30] audit: type=1326 audit(1750372449.676:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 726.576723][ T30] audit: type=1326 audit(1750372449.746:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11824 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 728.568384][T11848] netlink: 'syz.4.1574': attribute type 1 has an invalid length. [ 728.603477][T11848] 8021q: adding VLAN 0 to HW filter on device bond6 [ 728.737982][ T5899] usb 2-1: USB disconnect, device number 20 [ 728.884942][T11848] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1574'. [ 728.991091][ T5892] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 729.341137][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 729.348976][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.372144][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 729.714931][ T5892] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 729.724278][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.732384][ T5892] usb 3-1: Product: syz [ 729.736812][ T5892] usb 3-1: Manufacturer: syz [ 729.741562][ T5892] usb 3-1: SerialNumber: syz [ 729.965737][ T5892] usb 3-1: cannot find UAC_HEADER [ 730.000167][ T5892] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 730.192233][ T5892] usb 3-1: USB disconnect, device number 26 [ 730.374659][ T5899] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 731.900995][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 732.237368][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 732.263750][ T5899] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 732.285837][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.486074][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 732.498200][ T5899] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 732.507434][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.515497][ T5899] usb 5-1: Product: syz [ 732.519671][ T5899] usb 5-1: Manufacturer: syz [ 732.525681][ T5899] usb 5-1: SerialNumber: syz [ 733.352202][T11897] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1591'. [ 733.797914][ T5899] usb 5-1: can't set config #1, error -71 [ 733.820418][ T5899] usb 5-1: USB disconnect, device number 18 [ 734.085426][T11895] syz.1.1590 (11895): drop_caches: 2 [ 734.092189][T11895] syz.1.1590 (11895): drop_caches: 2 [ 734.302642][T11913] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 734.309217][T11913] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 734.323973][T11913] vhci_hcd vhci_hcd.0: Device attached [ 734.335103][T11913] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 734.341649][T11913] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 734.350506][T11913] vhci_hcd vhci_hcd.0: Device attached [ 734.361759][T11913] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 734.372916][T11913] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11) [ 734.379545][T11913] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 734.387629][T11913] vhci_hcd vhci_hcd.0: Device attached [ 734.396681][T11913] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(13) [ 734.403310][T11913] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 734.412046][T11913] vhci_hcd vhci_hcd.0: Device attached [ 734.420925][T11913] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 734.427553][T11913] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 734.435976][T11913] vhci_hcd vhci_hcd.0: Device attached [ 734.444463][T11913] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 734.456325][T11913] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 734.469730][T11913] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 734.482247][T11913] vhci_hcd vhci_hcd.0: port 0 already used [ 734.514263][T11923] vhci_hcd: connection closed [ 734.514642][T11921] vhci_hcd: connection closed [ 734.520565][T11919] vhci_hcd: connection closed [ 734.527107][ T8208] vhci_hcd: stop threads [ 734.536472][ T8208] vhci_hcd: release socket [ 734.541546][ T8208] vhci_hcd: disconnect device [ 734.546783][ T8208] vhci_hcd: stop threads [ 734.551614][ T8208] vhci_hcd: release socket [ 734.556232][ T8208] vhci_hcd: disconnect device [ 734.561535][ T8208] vhci_hcd: stop threads [ 734.565908][ T8208] vhci_hcd: release socket [ 734.570493][ T8208] vhci_hcd: disconnect device [ 734.576783][T11914] vhci_hcd: connection closed [ 734.577103][T11917] vhci_hcd: connection closed [ 734.584474][ T8208] vhci_hcd: stop threads [ 734.597040][ T8208] vhci_hcd: release socket [ 734.601757][ T8208] vhci_hcd: disconnect device [ 734.607037][ T8208] vhci_hcd: stop threads [ 734.613160][ T8208] vhci_hcd: release socket [ 734.618868][ T8208] vhci_hcd: disconnect device [ 735.350077][ T5899] vhci_hcd: vhci_device speed not set [ 735.355614][ T5878] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 735.570747][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 735.613463][ T5878] usb 3-1: config 89 has an invalid interface number: 1 but max is 0 [ 735.631818][ T5878] usb 3-1: config 89 has no interface number 0 [ 735.641531][ T5878] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 735.655072][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.663733][ T5878] usb 3-1: Product: syz [ 735.667961][ T5878] usb 3-1: Manufacturer: syz [ 735.672805][ T5878] usb 3-1: SerialNumber: syz [ 737.562741][ T5878] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 737.573855][ T5878] usb 3-1: selecting invalid altsetting 1 [ 737.606632][ T5878] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 737.616175][T11956] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1605'. [ 737.633132][ T5878] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 737.655167][ T5878] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 737.681019][ T5878] usb 3-1: media controller created [ 738.476894][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 738.512227][ T5878] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 738.525816][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 738.714058][ T5878] zl10353_read_register: readreg error (reg=127, ret==-71) [ 738.721865][ T30] audit: type=1326 audit(1750372462.296:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11962 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645418e929 code=0x7ffc0000 [ 738.818893][ T5878] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 739.764274][ T30] audit: type=1326 audit(1750372462.296:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11962 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645418e929 code=0x7ffc0000 [ 740.057953][ T30] audit: type=1326 audit(1750372462.296:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11962 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f645418e929 code=0x7ffc0000 [ 740.260984][ T5878] usb 3-1: USB disconnect, device number 27 [ 740.268962][ T30] audit: type=1326 audit(1750372462.296:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11962 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645418e929 code=0x7ffc0000 [ 740.453791][ T30] audit: type=1326 audit(1750372462.296:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11962 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f645418e929 code=0x7ffc0000 [ 740.524896][ T30] audit: type=1326 audit(1750372462.586:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11973 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f64541c11e5 code=0x7ffc0000 [ 741.085737][ T30] audit: type=1326 audit(1750372462.586:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11962 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645418e929 code=0x7ffc0000 [ 741.310953][ T30] audit: type=1326 audit(1750372462.586:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11962 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645418e929 code=0x7ffc0000 [ 741.507804][ T30] audit: type=1326 audit(1750372462.786:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11973 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f645418e929 code=0x7ffc0000 [ 741.533234][ T30] audit: type=1326 audit(1750372464.266:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11962 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f645418e929 code=0x7ffc0000 [ 743.292482][T12008] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1619'. [ 747.601257][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.609392][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.454763][T12074] tipc: Enabling of bearer rejected, failed to enable media [ 750.551502][T12086] syz.4.1640 (12086): drop_caches: 2 [ 750.644402][T12086] syz.4.1640 (12086): drop_caches: 2 [ 753.940014][T12126] tipc: Enabling of bearer rejected, failed to enable media [ 754.737478][ T5878] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 754.864187][T12137] trusted_key: encrypted_key: insufficient parameters specified [ 754.877929][T12137] trusted_key: encrypted_key: keylen parameter is missing [ 754.900900][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 754.979081][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.284284][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 755.383779][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.394061][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 755.419689][ T5878] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 755.507083][T12140] veth2: entered allmulticast mode [ 755.544229][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.984161][T12140] veth3: entered allmulticast mode [ 756.075253][ T5878] usb 4-1: config 0 descriptor?? [ 757.486201][ T5878] usbhid 4-1:0.0: can't add hid device: -71 [ 757.495761][ T5878] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 757.513993][ T5878] usb 4-1: USB disconnect, device number 26 [ 759.268522][T12179] syzkaller0: entered promiscuous mode [ 759.494821][T12179] syzkaller0: entered allmulticast mode [ 767.650666][T12264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1692'. [ 769.781106][ T9209] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 770.712497][ T9209] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 770.756247][ T9209] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 770.781440][ T9209] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 770.811098][ T9209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.862498][T12276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 770.885881][ T9209] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 774.234416][ T24] usb 5-1: USB disconnect, device number 19 [ 779.176220][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 779.317734][T12376] tipc: Enabled bearer , priority 10 [ 779.970409][T12387] 9pnet_fd: Insufficient options for proto=fd [ 780.316607][ T24] IPVS: starting estimator thread 0... [ 780.325528][T12387] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 780.431406][T12390] IPVS: using max 27 ests per chain, 64800 per kthread [ 780.530624][T12376] tipc: Resetting bearer [ 780.700148][ T49] tipc: Resetting bearer [ 780.878369][T12373] tipc: Resetting bearer [ 781.598006][T12410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1738'. [ 781.843199][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 782.010269][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 782.021649][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 782.047994][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 782.073608][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.119292][T12416] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 782.144893][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 783.524967][T12373] tipc: Disabling bearer [ 783.709166][T12428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1742'. [ 786.381379][ T5899] usb 2-1: USB disconnect, device number 21 [ 788.880908][ T5878] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 788.951019][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1757'. [ 789.090860][ T5878] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 789.594235][ T5878] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 789.880769][T12493] netlink: 'syz.3.1758': attribute type 4 has an invalid length. [ 789.888602][T12493] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1758'. [ 790.241450][ T5878] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 790.262136][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.567459][ T5878] usb 2-1: can't set config #27, error -71 [ 791.578999][ T5878] usb 2-1: USB disconnect, device number 22 [ 791.684968][ T5899] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 792.008757][ T5899] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 792.622359][ T5899] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 792.741754][ T5899] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 792.752089][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.773023][T12502] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 792.783765][ T5899] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 792.885630][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 792.885648][ T30] audit: type=1326 audit(1750372516.656:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12512 comm="syz.2.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 793.011164][ T30] audit: type=1326 audit(1750372516.656:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12512 comm="syz.2.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 793.128452][ T30] audit: type=1326 audit(1750372516.666:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12512 comm="syz.2.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 793.232793][ T30] audit: type=1326 audit(1750372516.666:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12512 comm="syz.2.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 793.287645][ T30] audit: type=1326 audit(1750372516.666:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12512 comm="syz.2.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 793.362575][ T30] audit: type=1326 audit(1750372516.706:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12512 comm="syz.2.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 793.460375][ T30] audit: type=1326 audit(1750372516.726:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12512 comm="syz.2.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 793.496392][ T30] audit: type=1326 audit(1750372516.726:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12514 comm="syz.2.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c0d5c11e5 code=0x7ffc0000 [ 793.528290][ T30] audit: type=1326 audit(1750372516.786:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12512 comm="syz.2.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 793.578553][ T30] audit: type=1326 audit(1750372516.786:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12512 comm="syz.2.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 793.698001][T12531] binder: 12530:12531 ioctl c0306201 200000000700 returned -14 [ 796.176118][ T5899] usb 4-1: USB disconnect, device number 27 [ 796.232654][T12550] netlink: 'syz.2.1777': attribute type 1 has an invalid length. [ 796.305133][T12537] syzkaller0: entered promiscuous mode [ 796.320759][T12537] syzkaller0: entered allmulticast mode [ 796.406495][T12561] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1780'. [ 796.422264][T12550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 798.418153][T12574] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 800.455957][T12595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1789'. [ 802.729041][T12622] siw: device registration error -23 [ 803.680708][T12629] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 805.157034][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 805.343043][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 805.355402][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 805.366649][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 805.376613][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.560747][ T5899] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 806.120827][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 806.239231][ T5899] usb 2-1: config 89 has an invalid interface number: 1 but max is 0 [ 806.406533][ T5899] usb 2-1: config 89 has no interface number 0 [ 806.542012][ T5899] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 806.551508][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.559529][ T5899] usb 2-1: Product: syz [ 806.590754][ T5899] usb 2-1: Manufacturer: syz [ 806.600656][ T5899] usb 2-1: SerialNumber: syz [ 806.928182][ T24] usb 5-1: can't set config #27, error -71 [ 806.935949][ T24] usb 5-1: USB disconnect, device number 20 [ 807.079047][T12656] netlink: 'syz.4.1808': attribute type 4 has an invalid length. [ 807.086970][T12656] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1808'. [ 807.372465][T12658] netlink: 'syz.1.1803': attribute type 21 has an invalid length. [ 808.089545][ T5899] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 808.105811][ T5899] usb 2-1: selecting invalid altsetting 1 [ 808.125151][ T5899] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 808.212933][ T5899] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 808.258741][ T5899] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 808.267296][ T5899] usb 2-1: media controller created [ 808.289739][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.332970][ T5899] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 808.696936][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.780890][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.792634][ T5899] zl10353_read_register: readreg error (reg=127, ret==-71) [ 808.828679][ T5899] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 809.534637][ T5899] usb 2-1: USB disconnect, device number 23 [ 812.850078][T12719] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 812.856646][T12719] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 812.908919][T12725] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 812.915456][T12725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 812.935119][T12719] vhci_hcd vhci_hcd.0: Device attached [ 813.003117][T12725] vhci_hcd vhci_hcd.0: Device attached [ 813.041532][T12730] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 813.064694][T12719] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 813.071369][T12719] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 813.092239][T12719] vhci_hcd vhci_hcd.0: Device attached [ 813.101773][T12719] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14) [ 813.108415][T12719] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 813.116850][T12719] vhci_hcd vhci_hcd.0: Device attached [ 813.127109][T12719] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 813.133743][T12719] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 813.142579][T12719] vhci_hcd vhci_hcd.0: Device attached [ 813.151171][ T24] vhci_hcd: vhci_device speed not set [ 813.158931][T12719] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 813.170416][T12719] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 813.183270][T12719] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 813.196346][T12719] vhci_hcd vhci_hcd.0: port 0 already used [ 813.210760][ T24] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 813.232851][T12737] vhci_hcd: connection closed [ 813.233108][ T49] vhci_hcd: stop threads [ 813.242388][ T49] vhci_hcd: release socket [ 813.246974][ T49] vhci_hcd: disconnect device [ 813.252598][T12735] vhci_hcd: connection closed [ 813.252990][T12726] vhci_hcd: connection closed [ 813.253174][ T49] vhci_hcd: stop threads [ 813.268913][T12720] vhci_hcd: connection reset by peer [ 813.275683][T12731] vhci_hcd: connection closed [ 813.276019][ T49] vhci_hcd: release socket [ 813.286818][ T49] vhci_hcd: disconnect device [ 813.292895][ T49] vhci_hcd: stop threads [ 813.297512][ T49] vhci_hcd: release socket [ 813.302801][ T49] vhci_hcd: disconnect device [ 813.308345][ T49] vhci_hcd: stop threads [ 813.313548][ T49] vhci_hcd: release socket [ 813.318348][ T49] vhci_hcd: disconnect device [ 813.323988][ T49] vhci_hcd: stop threads [ 813.342526][ T49] vhci_hcd: release socket [ 813.347090][ T49] vhci_hcd: disconnect device [ 817.600058][T12780] syz.0.1841 (12780): drop_caches: 2 [ 817.605777][T12780] syz.0.1841 (12780): drop_caches: 2 [ 818.430741][ T24] vhci_hcd: vhci_device speed not set [ 819.891528][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 820.354151][T12812] syz.1.1849 (12812): drop_caches: 2 [ 820.364778][T12812] syz.1.1849 (12812): drop_caches: 2 [ 825.696292][T12855] syz.3.1860 (12855): drop_caches: 2 [ 825.720553][T12855] syz.3.1860 (12855): drop_caches: 2 [ 828.349268][T12808] syz.2.1848 (12808) used greatest stack depth: 19480 bytes left [ 832.859148][T12904] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 832.977068][T12904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 833.008348][T12904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1873'. [ 834.229602][T12915] syz.0.1875 (12915): drop_caches: 2 [ 834.239960][T12915] syz.0.1875 (12915): drop_caches: 2 [ 834.665715][T12922] syzkaller0: entered promiscuous mode [ 834.682186][T12922] syzkaller0: entered allmulticast mode [ 834.751287][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 834.908482][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 834.932059][ T24] usb 3-1: config 89 has an invalid interface number: 1 but max is 0 [ 834.962807][ T24] usb 3-1: config 89 has no interface number 0 [ 835.635019][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 835.668137][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.730977][ T24] usb 3-1: Product: syz [ 835.735303][ T24] usb 3-1: Manufacturer: syz [ 835.740295][ T24] usb 3-1: SerialNumber: syz [ 836.144684][T12917] netlink: 'syz.2.1877': attribute type 21 has an invalid length. [ 836.602135][T12941] netlink: 'syz.1.1885': attribute type 4 has an invalid length. [ 836.610078][T12941] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1885'. [ 836.755785][ T24] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 836.776601][ T24] usb 3-1: selecting invalid altsetting 1 [ 836.788760][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 836.815192][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 836.825910][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 837.135684][ T24] usb 3-1: media controller created [ 837.257867][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 837.279953][T12953] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 837.311109][ T24] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 837.318130][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 837.451291][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 837.510883][ T5885] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 837.681018][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 837.699879][T12955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1887'. [ 837.828757][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.894904][T12960] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 837.936780][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.967943][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 837.996818][ T5885] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 838.012581][ T24] usb 3-1: USB disconnect, device number 28 [ 838.048072][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.079842][ T5885] usb 5-1: config 0 descriptor?? [ 838.959578][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 838.969905][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 838.994007][ T5885] usb 5-1: USB disconnect, device number 21 [ 840.658217][T12973] loop7: detected capacity change from 0 to 16384 [ 841.090703][ T5878] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 841.250496][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 841.272977][ T5878] usb 3-1: config 0 has no interfaces? [ 841.285412][ T5878] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 841.358149][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.464476][ T5878] usb 3-1: Product: syz [ 841.515013][ T5878] usb 3-1: Manufacturer: syz [ 841.567471][ T5878] usb 3-1: SerialNumber: syz [ 841.688968][ T5878] usb 3-1: config 0 descriptor?? [ 842.015314][T12973] blk_print_req_error: 28 callbacks suppressed [ 842.015336][T12973] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 842.128264][T12973] I/O error, dev loop7, sector 7936 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 842.139582][T12973] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 842.149034][T12973] buffer_io_error: 534 callbacks suppressed [ 842.149046][T12973] Buffer I/O error on dev loop7, logical block 960, async page read [ 842.164865][T12973] I/O error, dev loop7, sector 7688 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 842.175299][T12973] Buffer I/O error on dev loop7, logical block 961, async page read [ 842.189442][T12973] I/O error, dev loop7, sector 7696 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 842.191054][ T5878] usb 3-1: USB disconnect, device number 29 [ 842.793547][T12973] Buffer I/O error on dev loop7, logical block 962, async page read [ 842.870815][T12973] I/O error, dev loop7, sector 7704 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 842.880413][T12973] Buffer I/O error on dev loop7, logical block 963, async page read [ 842.986454][T12973] I/O error, dev loop7, sector 7712 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 843.109565][T12973] Buffer I/O error on dev loop7, logical block 964, async page read [ 843.127791][T12973] I/O error, dev loop7, sector 7720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 843.293553][T12973] Buffer I/O error on dev loop7, logical block 965, async page read [ 843.311105][T12973] I/O error, dev loop7, sector 7728 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 843.325620][T12973] Buffer I/O error on dev loop7, logical block 966, async page read [ 843.351289][T12973] I/O error, dev loop7, sector 7736 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 843.393972][T12973] Buffer I/O error on dev loop7, logical block 967, async page read [ 843.419157][T12973] Buffer I/O error on dev loop7, logical block 968, async page read [ 843.445528][T12973] Buffer I/O error on dev loop7, logical block 969, async page read [ 843.796148][T13023] syz.0.1906 (13023): drop_caches: 2 [ 843.805924][T13023] syz.0.1906 (13023): drop_caches: 2 [ 845.070810][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 846.445176][T13043] bond1: entered allmulticast mode [ 846.477412][T13043] macvtap1: entered allmulticast mode [ 846.549734][T13043] netdevsim netdevsim2 eth0: entered allmulticast mode [ 846.600916][T13043] netdevsim netdevsim2 eth1: entered allmulticast mode [ 846.608588][T13043] netdevsim netdevsim2 eth2: entered allmulticast mode [ 846.750337][T13043] netdevsim netdevsim2 eth3: entered allmulticast mode [ 847.255861][T13058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1915'. [ 847.534969][T13048] serio: Serial port ptm0 [ 848.020457][T13060] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 849.167088][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 849.167106][ T30] audit: type=1326 audit(1750372572.936:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 849.258987][ T30] audit: type=1326 audit(1750372572.966:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 849.420922][T13073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1918'. [ 849.509024][ T30] audit: type=1326 audit(1750372572.966:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 849.534859][ T30] audit: type=1326 audit(1750372572.966:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 849.713267][ T30] audit: type=1326 audit(1750372572.986:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 849.900773][ T30] audit: type=1326 audit(1750372572.986:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 849.925419][ T30] audit: type=1326 audit(1750372572.986:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13072 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c0d5c11e5 code=0x7ffc0000 [ 850.086604][T13080] netlink: 24 bytes leftover after parsing attributes in process `wg1'. [ 850.486010][ T30] audit: type=1326 audit(1750372573.186:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13072 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 850.510738][ T30] audit: type=1326 audit(1750372573.276:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 850.586661][ T30] audit: type=1326 audit(1750372573.276:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13069 comm="syz.2.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7ffc0000 [ 852.110293][T13086] tipc: Enabled bearer , priority 10 [ 852.197253][T13086] tipc: Resetting bearer [ 852.542988][T13085] tipc: Resetting bearer [ 853.493904][T13107] fuse: Bad value for 'fd' [ 855.813384][T13085] tipc: Disabling bearer [ 856.704821][T13132] tipc: Enabling of bearer rejected, failed to enable media [ 860.799431][T13170] tipc: Enabling of bearer rejected, already enabled [ 861.690786][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 862.755327][T13186] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 864.189404][T13184] bridge0: port 3(team0) entered blocking state [ 864.196011][T13184] bridge0: port 3(team0) entered disabled state [ 864.203702][T13184] team0: entered promiscuous mode [ 864.208761][T13184] team_slave_0: entered promiscuous mode [ 864.214560][T13184] team_slave_1: entered promiscuous mode [ 866.269114][T13214] syz!: rxe_newlink: already configured on team_slave_0 [ 866.883487][T13222] serio: Serial port ptm0 [ 870.028376][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.171705][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.359349][T13270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1972'. [ 873.477978][T13274] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 876.749780][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 876.749797][ T30] audit: type=1326 audit(1750372600.516:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13295 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418e929 code=0x7ffc0000 [ 876.895412][ T30] audit: type=1326 audit(1750372600.516:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13295 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418e929 code=0x7ffc0000 [ 877.430548][ T30] audit: type=1326 audit(1750372600.516:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13295 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f88e418e929 code=0x7ffc0000 [ 877.464643][T13304] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 877.540814][ T30] audit: type=1326 audit(1750372600.516:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13295 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418e929 code=0x7ffc0000 [ 877.615004][ T30] audit: type=1326 audit(1750372600.516:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13295 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f88e418e929 code=0x7ffc0000 [ 877.732973][T13311] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 877.871600][ T30] audit: type=1326 audit(1750372600.536:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13297 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88e41c11e5 code=0x7ffc0000 [ 878.017792][T13315] fuse: Bad value for 'fd' [ 878.303100][ T30] audit: type=1326 audit(1750372600.536:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13295 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418e929 code=0x7ffc0000 [ 878.360821][ T30] audit: type=1326 audit(1750372600.536:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13295 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e418e929 code=0x7ffc0000 [ 879.047360][ T30] audit: type=1326 audit(1750372600.686:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13297 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f88e418e929 code=0x7ffc0000 [ 879.069827][ T30] audit: type=1326 audit(1750372600.736:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13295 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f88e418e929 code=0x7ffc0000 [ 880.219649][T13344] netlink: 'syz.4.1994': attribute type 4 has an invalid length. [ 880.227578][T13344] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1994'. [ 881.689976][T13352] netlink: 548 bytes leftover after parsing attributes in process `syz.0.1995'. [ 886.876931][T13387] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 887.581238][T13405] netlink: 47 bytes leftover after parsing attributes in process `syz.3.2007'. [ 887.590253][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'. [ 893.631619][T13455] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2023'. [ 898.044357][T13484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2031'. [ 898.239000][T13488] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2030'. [ 899.910759][T13495] netlink: 'syz.2.2033': attribute type 4 has an invalid length. [ 899.918562][T13495] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2033'. [ 900.947499][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2039'. [ 900.976222][T13510] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 900.991925][T13506] IPVS: Error joining to the multicast group [ 901.252688][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 902.193350][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 902.211651][ T24] usb 1-1: config 89 has an invalid interface number: 1 but max is 0 [ 902.219786][ T24] usb 1-1: config 89 has no interface number 0 [ 902.229379][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.dc [ 902.241508][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.250162][ T24] usb 1-1: Product: syz [ 902.254923][ T24] usb 1-1: Manufacturer: syz [ 902.259636][ T24] usb 1-1: SerialNumber: syz [ 903.177948][T13531] netlink: 'syz.0.2038': attribute type 21 has an invalid length. [ 903.186007][T13531] IPv6: NLM_F_CREATE should be specified when creating new route [ 903.824407][ T24] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 903.843192][ T24] usb 1-1: selecting invalid altsetting 1 [ 903.848962][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 903.874481][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 904.109893][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 904.118880][ T24] usb 1-1: media controller created [ 904.927056][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 905.024096][T13547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2050'. [ 905.033527][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 905.051070][ T24] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 905.063721][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 905.099748][T13550] netlink: 548 bytes leftover after parsing attributes in process `syz.3.2051'. [ 905.133351][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 905.338609][ T24] usb 1-1: USB disconnect, device number 28 [ 909.748100][T13616] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 909.934714][T13626] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 913.340456][T13672] netlink: 'syz.2.2085': attribute type 4 has an invalid length. [ 913.348360][T13672] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2085'. [ 916.995108][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2097'. [ 917.077211][T13708] IPVS: Error joining to the multicast group [ 917.148497][T13713] netlink: 548 bytes leftover after parsing attributes in process `syz.0.2098'. [ 917.638206][T13721] 9pnet_fd: Insufficient options for proto=fd [ 917.702035][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2102'. [ 919.114642][T13744] netlink: 'syz.2.2106': attribute type 4 has an invalid length. [ 919.122506][T13744] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2106'. [ 922.795480][T13775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2115'. [ 925.210368][T13805] syz.2.2125 uses obsolete (PF_INET,SOCK_PACKET) [ 925.440798][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 925.803460][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 925.825041][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 925.964687][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 925.974224][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.015072][T13800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 926.034700][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 926.115107][T13812] siw: device registration error -23 [ 929.600651][ T9209] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 930.385938][ T5892] usb 1-1: USB disconnect, device number 29 [ 930.514388][ T9209] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 930.526750][ T9209] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 930.537832][ T9209] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 930.553728][ T9209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.177537][T13831] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 931.189112][ T9209] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 931.395125][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.404676][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.011344][T13857] netlink: 'syz.2.2139': attribute type 21 has an invalid length. [ 932.790105][ T5892] usb 4-1: USB disconnect, device number 28 [ 937.726902][T13910] netlink: 'syz.2.2155': attribute type 21 has an invalid length. [ 938.768451][T13923] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 940.117996][T13937] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 944.473079][T13968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2172'. [ 946.607353][T13996] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 949.510438][T14011] tipc: Enabling of bearer rejected, already enabled [ 950.257570][T14018] netlink: 'syz.1.2186': attribute type 21 has an invalid length. [ 952.625387][T14037] netlink: 'syz.2.2194': attribute type 21 has an invalid length. [ 954.383586][T14059] tipc: Enabling of bearer rejected, already enabled [ 955.127502][T14072] netlink: 47 bytes leftover after parsing attributes in process `syz.3.2202'. [ 956.507022][T14078] netlink: 'syz.0.2203': attribute type 29 has an invalid length. [ 956.516891][T14078] netlink: 'syz.0.2203': attribute type 29 has an invalid length. [ 958.257489][T14100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2211'. [ 958.596322][T14106] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2213'. [ 959.603714][T14111] netlink: 'syz.0.2215': attribute type 29 has an invalid length. [ 959.671056][T14113] netlink: 'syz.0.2215': attribute type 29 has an invalid length. [ 959.779978][T14115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2214'. [ 959.810159][T14111] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2215'. [ 960.329606][T14120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2216'. [ 961.331711][T14131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2219'. [ 961.808207][T14129] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 962.663035][T14143] netlink: 'syz.4.2223': attribute type 12 has an invalid length. [ 965.322809][T14174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2234'. [ 967.098179][T14195] syzkaller1: entered promiscuous mode [ 967.145767][T14195] syzkaller1: entered allmulticast mode [ 967.907941][T14209] netlink: 47 bytes leftover after parsing attributes in process `syz.3.2244'. [ 968.795771][T14212] netlink: 'syz.2.2245': attribute type 21 has an invalid length. [ 968.840833][T14212] netlink: 'syz.2.2245': attribute type 1 has an invalid length. [ 968.852522][T14212] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2245'. [ 970.234672][T14218] syz.3.2246 (14218) used greatest stack depth: 17992 bytes left [ 970.558416][T14233] netlink: 47 bytes leftover after parsing attributes in process `syz.2.2249'. [ 972.443727][T14238] trusted_key: encrypted_key: insufficient parameters specified [ 973.509858][T14255] netlink: 'syz.2.2257': attribute type 21 has an invalid length. [ 975.448376][T14279] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 977.603856][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 977.603871][ T30] audit: type=1326 audit(1750372701.366:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14304 comm="syz.4.2271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80bfd8e929 code=0x0 [ 978.126018][T14311] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2272'. [ 980.085673][T14332] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 983.575402][T14357] netlink: 'syz.4.2287': attribute type 12 has an invalid length. [ 983.941106][T14364] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 988.565200][T14400] netlink: 'syz.4.2299': attribute type 21 has an invalid length. [ 988.608454][T14400] netlink: 'syz.4.2299': attribute type 1 has an invalid length. [ 988.636598][T14400] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2299'. [ 988.919405][T14417] siw: device registration error -23 [ 992.543028][T14437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2308'. [ 992.754208][T14442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2310'. [ 992.835772][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.842928][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.011786][T14451] tipc: Enabling of bearer rejected, already enabled [ 994.477057][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2321'. [ 995.061769][T14489] netlink: 'syz.1.2327': attribute type 21 has an invalid length. [ 995.779879][T14493] tipc: Enabling of bearer rejected, already enabled [ 999.127445][T14526] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1000.320699][T14528] syz!: rxe_newlink: already configured on team_slave_0 [ 1002.751865][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2351'. [ 1004.063359][T14600] netlink: 'syz.1.2363': attribute type 21 has an invalid length. [ 1004.638118][T14607] netlink: 'syz.1.2364': attribute type 21 has an invalid length. [ 1005.033830][T14591] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.2359'. [ 1005.103634][T14607] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 1005.112623][T14607] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2364'. [ 1006.524979][T14635] netlink: 'syz.2.2373': attribute type 21 has an invalid length. [ 1008.072063][T14652] netlink: 'syz.2.2379': attribute type 11 has an invalid length. [ 1008.080104][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2379'. [ 1008.092528][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2379'. [ 1008.170177][T14656] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1008.767847][T14655] smc: net device bond0 applied user defined pnetid SYZ2 [ 1008.926885][T14660] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1009.599962][T14662] tipc: Enabling of bearer rejected, already enabled [ 1010.207364][T14675] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1011.760862][T14697] siw: device registration error -23 [ 1012.859055][T14720] netlink: 83 bytes leftover after parsing attributes in process `syz.4.2394'. [ 1014.250483][T14741] xt_CT: No such helper "pptp" [ 1014.837486][T14758] random: crng reseeded on system resumption [ 1014.860462][T14756] ======================================================= [ 1014.860462][T14756] WARNING: The mand mount option has been deprecated and [ 1014.860462][T14756] and is ignored by this kernel. Remove the mand [ 1014.860462][T14756] option from the mount to silence this warning. [ 1014.860462][T14756] ======================================================= [ 1014.895405][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.184953][T14761] Restarting kernel threads ... [ 1015.191180][T14761] Done restarting kernel threads. [ 1015.206773][T14769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2415'. [ 1015.500508][T14779] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1015.512119][T14779] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1017.111418][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 1017.200808][T14774] netlink: 'syz.1.2417': attribute type 30 has an invalid length. [ 1017.229993][T14774] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.238740][T14774] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.247938][T14774] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.257186][T14774] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.283046][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 1017.292627][T14774] netlink: 'syz.1.2417': attribute type 30 has an invalid length. [ 1017.311616][T14799] netlink: 'syz.2.2424': attribute type 11 has an invalid length. [ 1017.330369][T14799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2424'. [ 1017.712918][T14817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2428'. [ 1020.122631][T14842] trusted_key: encrypted_key: insufficient parameters specified [ 1021.733319][T14866] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1022.192383][T14870] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1022.616254][T14870] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.704682][T14870] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.796793][T14870] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.879232][T14870] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.007850][T14870] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.084783][T14870] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.121959][T14870] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.140849][T14870] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.153849][T14899] IPVS: Error connecting to the multicast addr [ 1023.386229][T14903] trusted_key: encrypted_key: insufficient parameters specified [ 1023.721696][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 1023.850187][T14915] netlink: 83 bytes leftover after parsing attributes in process `syz.1.2459'. [ 1025.847500][T14939] trusted_key: encrypted_key: insufficient parameters specified [ 1025.880021][T14941] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1025.897671][T14941] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1026.211679][T14952] netlink: 83 bytes leftover after parsing attributes in process `syz.0.2474'. [ 1028.949664][T14986] random: crng reseeded on system resumption [ 1030.091444][T15002] Restarting kernel threads ... [ 1030.131471][T15002] Done restarting kernel threads. [ 1032.149368][T15054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2501'. [ 1032.473194][T15061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2504'. [ 1033.139346][T15066] program syz.1.2509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1033.166411][T15068] random: crng reseeded on system resumption [ 1033.445352][T15070] Restarting kernel threads ... [ 1033.450755][T15070] Done restarting kernel threads. [ 1035.131156][T15092] program syz.4.2516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1035.566234][ T30] audit: type=1326 audit(1750372759.126:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15090 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0d58e929 code=0x7fc00000 [ 1036.088612][ T30] audit: type=1326 audit(1750372759.816:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15090 comm="syz.2.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4c0d58e929 code=0x7fc00000 [ 1036.102223][T15100] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1036.110124][ C0] vkms_vblank_simulate: vblank timer overrun [ 1036.212019][T15100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.734606][T15107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2522'. [ 1036.784780][T15100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.869386][T15100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.002947][T15100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.698347][T15100] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.763806][T15100] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.836622][T15100] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.853850][T15100] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.574353][T15129] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1038.653513][T15140] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1038.655129][T15138] IPVS: stopping master sync thread 15140 ... [ 1038.671472][T15139] IPVS: Error connecting to the multicast addr [ 1038.680858][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2530'. [ 1038.687725][T15137] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1038.762488][T15137] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.864567][T15137] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.906176][T15137] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.946418][T15137] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.020781][T15137] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.038058][T15137] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.055016][T15137] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.069665][T15137] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.136351][T15149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2535'. [ 1039.723562][T15139] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1039.729910][T15139] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1039.750412][T15139] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1039.774427][T15139] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1039.783699][T15139] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1039.789630][T15139] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1039.804303][T15139] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1039.810326][T15139] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1054.275718][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.282179][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.714619][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.721062][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.153678][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.160064][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1201.471129][ T31] INFO: task syz-executor:5821 blocked for more than 143 seconds. [ 1201.479063][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1201.486849][ T31] Blocked by coredump. [ 1201.491575][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1201.500255][ T31] task:syz-executor state:D stack:21640 pid:5821 tgid:5821 ppid:1 task_flags:0x40054c flags:0x00004006 [ 1201.512379][ T31] Call Trace: [ 1201.515730][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1201.518689][ T31] __schedule+0x16a2/0x4cb0 [ 1201.523512][ T31] ? __lock_acquire+0xab9/0xd20 [ 1201.528428][ T31] ? schedule+0x165/0x360 [ 1201.532834][ T31] ? __pfx___schedule+0x10/0x10 [ 1201.537730][ T31] ? schedule+0x91/0x360 [ 1201.542219][ T31] schedule+0x165/0x360 [ 1201.546414][ T31] schedule_preempt_disabled+0x13/0x30 [ 1201.552159][ T31] __mutex_lock+0x724/0xe80 [ 1201.580564][ T31] ? kobject_put+0x43f/0x480 [ 1201.585297][ T31] ? __mutex_lock+0x51b/0xe80 [ 1201.590005][ T31] ? rfkill_unregister+0xc8/0x220 [ 1201.620167][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1201.625421][ T31] ? __pfx_device_del+0x10/0x10 [ 1201.630290][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 1201.635707][ T31] rfkill_unregister+0xc8/0x220 [ 1201.640740][ T31] hci_unregister_dev+0x360/0x500 [ 1201.645809][ T31] vhci_release+0x80/0xd0 [ 1201.650183][ T31] ? __pfx_vhci_release+0x10/0x10 [ 1201.655341][ T31] __fput+0x44c/0xa70 [ 1201.659359][ T31] task_work_run+0x1d1/0x260 [ 1201.664180][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1201.669309][ T31] do_exit+0x6ad/0x22e0 [ 1201.673499][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1201.678537][ T31] ? __pfx_do_exit+0x10/0x10 [ 1201.683194][ T31] do_group_exit+0x21c/0x2d0 [ 1201.687789][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1201.693025][ T31] get_signal+0x125e/0x1310 [ 1201.697560][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1201.703156][ T31] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1201.708444][ T31] ? fput_close_sync+0x119/0x200 [ 1201.713766][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1201.719945][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1201.725628][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1201.731056][ T31] do_syscall_64+0x2bd/0x3b0 [ 1201.735680][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1201.741086][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.747176][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1201.751894][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.757786][ T31] RIP: 0033:0x7f80bfd84b97 [ 1201.762392][ T31] RSP: 002b:00007ffe4c783b20 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 1201.770866][ T31] RAX: fffffffffffffe00 RBX: 00000000000006da RCX: 00007f80bfd84b97 [ 1201.778876][ T31] RDX: 0000000040000000 RSI: 00007ffe4c783b8c RDI: 00000000ffffffff [ 1201.786885][ T31] RBP: 00007ffe4c783b8c R08: 0000000000000000 R09: 0000000000000000 [ 1201.794912][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001fc [ 1201.802909][ T31] R13: 0000555593297590 R14: 00000000000fe0d9 R15: 00007ffe4c783be0 [ 1201.811048][ T31] [ 1201.814129][ T31] INFO: task kworker/0:3:5878 blocked for more than 143 seconds. [ 1201.822024][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1201.829678][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1201.838397][ T31] task:kworker/0:3 state:D stack:20856 pid:5878 tgid:5878 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1201.850520][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1201.857226][ T31] Call Trace: [ 1201.860542][ T31] [ 1201.863472][ T31] __schedule+0x16a2/0x4cb0 [ 1201.867985][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1201.873759][ T31] ? schedule+0x165/0x360 [ 1201.878098][ T31] ? __pfx___schedule+0x10/0x10 [ 1201.882983][ T31] ? schedule+0x91/0x360 [ 1201.887226][ T31] schedule+0x165/0x360 [ 1201.891425][ T31] schedule_preempt_disabled+0x13/0x30 [ 1201.896889][ T31] __mutex_lock+0x724/0xe80 [ 1201.901426][ T31] ? look_up_lock_class+0x74/0x170 [ 1201.906546][ T31] ? __mutex_lock+0x51b/0xe80 [ 1201.911254][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1201.917506][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1201.922559][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1201.928283][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1201.934034][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1201.940105][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1201.945858][ T31] process_scheduled_works+0xade/0x17b0 [ 1201.951472][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1201.957470][ T31] worker_thread+0x8a0/0xda0 [ 1201.962126][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1201.968491][ T31] ? __kthread_parkme+0x7b/0x200 [ 1201.973472][ T31] kthread+0x70e/0x8a0 [ 1201.977538][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1201.982681][ T31] ? __pfx_kthread+0x10/0x10 [ 1201.987275][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1201.992542][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1201.997762][ T31] ? __pfx_kthread+0x10/0x10 [ 1202.002382][ T31] ret_from_fork+0x3f9/0x770 [ 1202.006974][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1202.012146][ T31] ? __switch_to_asm+0x39/0x70 [ 1202.016918][ T31] ? __switch_to_asm+0x33/0x70 [ 1202.021702][ T31] ? __pfx_kthread+0x10/0x10 [ 1202.026297][ T31] ret_from_fork_asm+0x1a/0x30 [ 1202.031123][ T31] [ 1202.034186][ T31] INFO: task syz.0.2531:15138 blocked for more than 143 seconds. [ 1202.041978][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1202.049620][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1202.058317][ T31] task:syz.0.2531 state:D stack:25352 pid:15138 tgid:15130 ppid:5829 task_flags:0x400140 flags:0x00004004 [ 1202.070284][ T31] Call Trace: [ 1202.073593][ T31] [ 1202.076521][ T31] __schedule+0x16a2/0x4cb0 [ 1202.081086][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1202.087166][ T31] ? schedule+0x165/0x360 [ 1202.091539][ T31] ? __pfx___schedule+0x10/0x10 [ 1202.096404][ T31] ? schedule+0x91/0x360 [ 1202.100736][ T31] schedule+0x165/0x360 [ 1202.104916][ T31] schedule_preempt_disabled+0x13/0x30 [ 1202.110378][ T31] __mutex_lock+0x724/0xe80 [ 1202.115110][ T31] ? __mutex_lock+0x51b/0xe80 [ 1202.119799][ T31] ? rfkill_fop_open+0x12d/0x820 [ 1202.124835][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1202.129893][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1202.135223][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1202.140655][ T31] rfkill_fop_open+0x12d/0x820 [ 1202.145468][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1202.150883][ T31] misc_open+0x2bc/0x330 [ 1202.155127][ T31] chrdev_open+0x4c9/0x5e0 [ 1202.159544][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1202.164516][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1202.169455][ T31] do_dentry_open+0xdf0/0x1970 [ 1202.174257][ T31] vfs_open+0x3b/0x340 [ 1202.178323][ T31] ? path_openat+0x2ecd/0x3830 [ 1202.183099][ T31] path_openat+0x2ee5/0x3830 [ 1202.187683][ T31] ? arch_stack_walk+0xfc/0x150 [ 1202.192629][ T31] ? __pfx_path_openat+0x10/0x10 [ 1202.197591][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.203692][ T31] do_filp_open+0x1fa/0x410 [ 1202.208196][ T31] ? __lock_acquire+0xab9/0xd20 [ 1202.213176][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1202.218213][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1202.223112][ T31] ? alloc_fd+0x64c/0x6c0 [ 1202.227466][ T31] do_sys_openat2+0x121/0x1c0 [ 1202.232218][ T31] ? __se_sys_futex+0x36f/0x400 [ 1202.237067][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1202.242306][ T31] ? rcu_is_watching+0x15/0xb0 [ 1202.247082][ T31] __x64_sys_openat+0x138/0x170 [ 1202.251965][ T31] do_syscall_64+0xfa/0x3b0 [ 1202.256561][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1202.261795][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.267877][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1202.272843][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.278734][ T31] RIP: 0033:0x7f645418e929 [ 1202.283183][ T31] RSP: 002b:00007f6454f12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1202.291626][ T31] RAX: ffffffffffffffda RBX: 00007f64543b6080 RCX: 00007f645418e929 [ 1202.299609][ T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1202.307634][ T31] RBP: 00007f6454210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1202.315668][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1202.323678][ T31] R13: 0000000000000000 R14: 00007f64543b6080 R15: 00007fff5cc38dd8 [ 1202.331727][ T31] [ 1202.334767][ T31] INFO: task syz.3.2532:15139 blocked for more than 144 seconds. [ 1202.350051][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1202.357721][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1202.366490][ T31] task:syz.3.2532 state:D stack:24760 pid:15139 tgid:15131 ppid:5832 task_flags:0x400140 flags:0x00004006 [ 1202.378429][ T31] Call Trace: [ 1202.381735][ T31] [ 1202.384679][ T31] __schedule+0x16a2/0x4cb0 [ 1202.389205][ T31] ? __lock_acquire+0xab9/0xd20 [ 1202.394232][ T31] ? schedule+0x165/0x360 [ 1202.398573][ T31] ? __pfx___schedule+0x10/0x10 [ 1202.403479][ T31] ? schedule+0x91/0x360 [ 1202.407732][ T31] schedule+0x165/0x360 [ 1202.411942][ T31] schedule_preempt_disabled+0x13/0x30 [ 1202.417408][ T31] __mutex_lock+0x724/0xe80 [ 1202.421954][ T31] ? __lock_acquire+0xab9/0xd20 [ 1202.426811][ T31] ? __mutex_lock+0x51b/0xe80 [ 1202.431757][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1202.437071][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1202.442161][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1202.447362][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1202.453299][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1202.459625][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1202.465385][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1202.470534][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1202.476259][ T31] rfkill_set_block+0x1d2/0x440 [ 1202.481155][ T31] rfkill_fop_write+0x44b/0x570 [ 1202.486018][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1202.491418][ T31] ? __pfx_security_file_permission+0x10/0x10 [ 1202.497493][ T31] ? rw_verify_area+0x258/0x650 [ 1202.502374][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1202.507753][ T31] vfs_write+0x27e/0xa90 [ 1202.512313][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1202.517077][ T31] ? __fget_files+0x2a/0x420 [ 1202.521705][ T31] ? __fget_files+0x2a/0x420 [ 1202.526303][ T31] ? __fget_files+0x3a0/0x420 [ 1202.531036][ T31] ? __fget_files+0x2a/0x420 [ 1202.535637][ T31] ksys_write+0x145/0x250 [ 1202.539962][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1202.544845][ T31] ? rcu_is_watching+0x15/0xb0 [ 1202.549617][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1202.554374][ T31] do_syscall_64+0xfa/0x3b0 [ 1202.558903][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1202.564166][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.570230][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1202.574933][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.580840][ T31] RIP: 0033:0x7f18d0d8e929 [ 1202.585252][ T31] RSP: 002b:00007f18d1c08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1202.593708][ T31] RAX: ffffffffffffffda RBX: 00007f18d0fb6080 RCX: 00007f18d0d8e929 [ 1202.601703][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a [ 1202.609678][ T31] RBP: 00007f18d0e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1202.617687][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1202.625718][ T31] R13: 0000000000000000 R14: 00007f18d0fb6080 R15: 00007ffe86f073d8 [ 1202.633846][ T31] [ 1202.636879][ T31] INFO: task syz.2.2533:15134 blocked for more than 144 seconds. [ 1202.644691][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1202.652343][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1202.661054][ T31] task:syz.2.2533 state:D stack:25128 pid:15134 tgid:15134 ppid:5833 task_flags:0x400040 flags:0x00004004 [ 1202.673615][ T31] Call Trace: [ 1202.676930][ T31] [ 1202.680204][ T31] __schedule+0x16a2/0x4cb0 [ 1202.684843][ T31] ? __lock_acquire+0xab9/0xd20 [ 1202.689808][ T31] ? schedule+0x165/0x360 [ 1202.694196][ T31] ? __pfx___schedule+0x10/0x10 [ 1202.699072][ T31] ? schedule+0x91/0x360 [ 1202.703344][ T31] schedule+0x165/0x360 [ 1202.707502][ T31] schedule_preempt_disabled+0x13/0x30 [ 1202.712979][ T31] __mutex_lock+0x724/0xe80 [ 1202.717485][ T31] ? kobject_put+0x43f/0x480 [ 1202.722112][ T31] ? __mutex_lock+0x51b/0xe80 [ 1202.726833][ T31] ? rfkill_unregister+0xc8/0x220 [ 1202.731905][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1202.736941][ T31] ? __pfx_device_del+0x10/0x10 [ 1202.741858][ T31] rfkill_unregister+0xc8/0x220 [ 1202.746742][ T31] nfc_unregister_device+0x96/0x2a0 [ 1202.752826][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1202.758562][ T31] virtual_ncidev_close+0x56/0x90 [ 1202.764674][ T31] __fput+0x44c/0xa70 [ 1202.768749][ T31] task_work_run+0x1d1/0x260 [ 1202.773382][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1202.778499][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1202.784063][ T31] exit_to_user_mode_loop+0xec/0x110 [ 1202.789382][ T31] do_syscall_64+0x2bd/0x3b0 [ 1202.794015][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1202.799229][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.805379][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1202.810098][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.816041][ T31] RIP: 0033:0x7f4c0d58e929 [ 1202.820524][ T31] RSP: 002b:00007ffd07820768 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1202.828960][ T31] RAX: 0000000000000000 RBX: 00000000000fd900 RCX: 00007f4c0d58e929 [ 1202.836961][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1202.844958][ T31] RBP: 00007f4c0d7b7ba0 R08: 0000000000000001 R09: 0000000907820a5f [ 1202.852975][ T31] R10: 00007f4c0d400000 R11: 0000000000000246 R12: 00007f4c0d7b608c [ 1202.860986][ T31] R13: 00007f4c0d7b6080 R14: ffffffffffffffff R15: 00007ffd07820880 [ 1202.869004][ T31] [ 1202.872182][ T31] INFO: task syz.4.2538:15157 blocked for more than 144 seconds. [ 1202.879938][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1202.887633][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1202.896343][ T31] task:syz.4.2538 state:D stack:28056 pid:15157 tgid:15156 ppid:5821 task_flags:0x400140 flags:0x00004004 [ 1202.908293][ T31] Call Trace: [ 1202.912028][ T31] [ 1202.914978][ T31] __schedule+0x16a2/0x4cb0 [ 1202.919486][ T31] ? __kasan_slab_free+0x62/0x70 [ 1202.924456][ T31] ? security_file_open+0xb1/0x270 [ 1202.929606][ T31] ? __lock_acquire+0xa81/0xd20 [ 1202.934504][ T31] ? schedule+0x165/0x360 [ 1202.938838][ T31] ? __pfx___schedule+0x10/0x10 [ 1202.943724][ T31] ? schedule+0x91/0x360 [ 1202.947970][ T31] schedule+0x165/0x360 [ 1202.952159][ T31] schedule_preempt_disabled+0x13/0x30 [ 1202.957638][ T31] __mutex_lock+0x724/0xe80 [ 1202.962212][ T31] ? __mutex_lock+0x51b/0xe80 [ 1202.966899][ T31] ? misc_open+0x51/0x330 [ 1202.971267][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1202.976319][ T31] misc_open+0x51/0x330 [ 1202.980532][ T31] chrdev_open+0x4c9/0x5e0 [ 1202.984972][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1202.989942][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1202.994965][ T31] do_dentry_open+0xdf0/0x1970 [ 1202.999768][ T31] vfs_open+0x3b/0x340 [ 1203.003932][ T31] ? path_openat+0x2ecd/0x3830 [ 1203.008740][ T31] path_openat+0x2ee5/0x3830 [ 1203.013361][ T31] ? arch_stack_walk+0xfc/0x150 [ 1203.018250][ T31] ? __pfx_path_openat+0x10/0x10 [ 1203.023202][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.029280][ T31] do_filp_open+0x1fa/0x410 [ 1203.033879][ T31] ? __lock_acquire+0xab9/0xd20 [ 1203.038755][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1203.043843][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1203.048704][ T31] ? alloc_fd+0x64c/0x6c0 [ 1203.053105][ T31] do_sys_openat2+0x121/0x1c0 [ 1203.057790][ T31] ? __se_sys_futex+0x36f/0x400 [ 1203.062681][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1203.067901][ T31] ? rcu_is_watching+0x15/0xb0 [ 1203.072704][ T31] __x64_sys_openat+0x138/0x170 [ 1203.077565][ T31] do_syscall_64+0xfa/0x3b0 [ 1203.082105][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1203.087325][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.093428][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1203.098107][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.104055][ T31] RIP: 0033:0x7f80bfd8e929 [ 1203.108474][ T31] RSP: 002b:00007f80c0bf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1203.116925][ T31] RAX: ffffffffffffffda RBX: 00007f80bffb5fa0 RCX: 00007f80bfd8e929 [ 1203.124932][ T31] RDX: 0000000000000000 RSI: 0000200000001440 RDI: ffffffffffffff9c [ 1203.132950][ T31] RBP: 00007f80bfe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1203.140957][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1203.148945][ T31] R13: 0000000000000000 R14: 00007f80bffb5fa0 R15: 00007ffe4c7837c8 [ 1203.156946][ T31] [ 1203.159970][ T31] INFO: task syz.1.2540:15162 blocked for more than 145 seconds. [ 1203.167837][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1203.175484][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1203.184172][ T31] task:syz.1.2540 state:D stack:27240 pid:15162 tgid:15161 ppid:5822 task_flags:0x400140 flags:0x00004004 [ 1203.196228][ T31] Call Trace: [ 1203.199507][ T31] [ 1203.202459][ T31] __schedule+0x16a2/0x4cb0 [ 1203.206965][ T31] ? __kasan_slab_free+0x62/0x70 [ 1203.211931][ T31] ? security_file_open+0xb1/0x270 [ 1203.217054][ T31] ? do_dentry_open+0x35e/0x1970 [ 1203.222038][ T31] ? __lock_acquire+0xab9/0xd20 [ 1203.226902][ T31] ? schedule+0x165/0x360 [ 1203.231286][ T31] ? __pfx___schedule+0x10/0x10 [ 1203.236152][ T31] ? schedule+0x91/0x360 [ 1203.240390][ T31] schedule+0x165/0x360 [ 1203.244574][ T31] schedule_preempt_disabled+0x13/0x30 [ 1203.250034][ T31] __mutex_lock+0x724/0xe80 [ 1203.254568][ T31] ? __mutex_lock+0x51b/0xe80 [ 1203.259248][ T31] ? misc_open+0x51/0x330 [ 1203.263643][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1203.268678][ T31] misc_open+0x51/0x330 [ 1203.272886][ T31] chrdev_open+0x4c9/0x5e0 [ 1203.277305][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1203.282277][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1203.287212][ T31] do_dentry_open+0xdf0/0x1970 [ 1203.292055][ T31] vfs_open+0x3b/0x340 [ 1203.296166][ T31] ? path_openat+0x2ecd/0x3830 [ 1203.300964][ T31] path_openat+0x2ee5/0x3830 [ 1203.305567][ T31] ? arch_stack_walk+0xfc/0x150 [ 1203.310800][ T31] ? __pfx_path_openat+0x10/0x10 [ 1203.315768][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.321925][ T31] do_filp_open+0x1fa/0x410 [ 1203.326428][ T31] ? __lock_acquire+0xab9/0xd20 [ 1203.331329][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1203.336367][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1203.341275][ T31] ? alloc_fd+0x64c/0x6c0 [ 1203.345622][ T31] do_sys_openat2+0x121/0x1c0 [ 1203.350295][ T31] ? __se_sys_futex+0x36f/0x400 [ 1203.355169][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1203.360372][ T31] ? rcu_is_watching+0x15/0xb0 [ 1203.365156][ T31] __x64_sys_openat+0x138/0x170 [ 1203.370021][ T31] do_syscall_64+0xfa/0x3b0 [ 1203.374558][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1203.379756][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.385851][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1203.390589][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.396478][ T31] RIP: 0033:0x7f88e418e929 [ 1203.400908][ T31] RSP: 002b:00007f88e5025038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1203.409321][ T31] RAX: ffffffffffffffda RBX: 00007f88e43b5fa0 RCX: 00007f88e418e929 [ 1203.417359][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1203.425364][ T31] RBP: 00007f88e4210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1203.433361][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1203.441377][ T31] R13: 0000000000000000 R14: 00007f88e43b5fa0 R15: 00007fffc7621428 [ 1203.449361][ T31] [ 1203.452422][ T31] INFO: task syz-executor:15169 blocked for more than 145 seconds. [ 1203.460317][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1203.468110][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1203.476834][ T31] task:syz-executor state:D stack:28008 pid:15169 tgid:15169 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1203.488786][ T31] Call Trace: [ 1203.492109][ T31] [ 1203.495047][ T31] __schedule+0x16a2/0x4cb0 [ 1203.499555][ T31] ? __kasan_slab_free+0x62/0x70 [ 1203.504534][ T31] ? security_file_open+0xb1/0x270 [ 1203.509657][ T31] ? do_dentry_open+0x35e/0x1970 [ 1203.514624][ T31] ? __lock_acquire+0xab9/0xd20 [ 1203.519473][ T31] ? schedule+0x165/0x360 [ 1203.523833][ T31] ? __pfx___schedule+0x10/0x10 [ 1203.528690][ T31] ? schedule+0x91/0x360 [ 1203.532955][ T31] schedule+0x165/0x360 [ 1203.537110][ T31] schedule_preempt_disabled+0x13/0x30 [ 1203.542598][ T31] __mutex_lock+0x724/0xe80 [ 1203.547107][ T31] ? __mutex_lock+0x51b/0xe80 [ 1203.552252][ T31] ? misc_open+0x51/0x330 [ 1203.556588][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1203.561658][ T31] misc_open+0x51/0x330 [ 1203.565823][ T31] chrdev_open+0x4c9/0x5e0 [ 1203.570237][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1203.575211][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1203.580144][ T31] do_dentry_open+0xdf0/0x1970 [ 1203.584947][ T31] vfs_open+0x3b/0x340 [ 1203.589017][ T31] ? path_openat+0x2ecd/0x3830 [ 1203.593813][ T31] path_openat+0x2ee5/0x3830 [ 1203.598397][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1203.603896][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1203.609191][ T31] ? __pfx_path_openat+0x10/0x10 [ 1203.614151][ T31] ? __pfx___up_read+0x10/0x10 [ 1203.618910][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 1203.624229][ T31] do_filp_open+0x1fa/0x410 [ 1203.628732][ T31] ? __lock_acquire+0xab9/0xd20 [ 1203.633623][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1203.638655][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1203.643534][ T31] ? alloc_fd+0x64c/0x6c0 [ 1203.647868][ T31] do_sys_openat2+0x121/0x1c0 [ 1203.652570][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1203.657853][ T31] ? fd_install+0x97/0x540 [ 1203.662320][ T31] ? fd_install+0x30d/0x540 [ 1203.666828][ T31] __x64_sys_openat+0x138/0x170 [ 1203.671748][ T31] do_syscall_64+0xfa/0x3b0 [ 1203.676297][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1203.681560][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.687633][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1203.692354][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.698241][ T31] RIP: 0033:0x7f2b3338d211 [ 1203.702673][ T31] RSP: 002b:00007ffc0e3eec70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1203.711989][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2b3338d211 [ 1203.720011][ T31] RDX: 0000000000000002 RSI: 00007f2b33411506 RDI: 00000000ffffff9c [ 1203.728013][ T31] RBP: 00007f2b33411506 R08: 0000000000000000 R09: 00007f2b340ed6c0 [ 1203.736029][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1203.744055][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1203.752094][ T31] [ 1203.755130][ T31] INFO: task syz-executor:15170 blocked for more than 145 seconds. [ 1203.763163][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1203.770938][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1203.779613][ T31] task:syz-executor state:D stack:28008 pid:15170 tgid:15170 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1203.791589][ T31] Call Trace: [ 1203.794873][ T31] [ 1203.797804][ T31] __schedule+0x16a2/0x4cb0 [ 1203.802337][ T31] ? __kasan_slab_free+0x62/0x70 [ 1203.807272][ T31] ? security_file_open+0xb1/0x270 [ 1203.812407][ T31] ? do_dentry_open+0x35e/0x1970 [ 1203.817347][ T31] ? __lock_acquire+0xab9/0xd20 [ 1203.822275][ T31] ? schedule+0x165/0x360 [ 1203.826615][ T31] ? __pfx___schedule+0x10/0x10 [ 1203.831570][ T31] ? schedule+0x91/0x360 [ 1203.835921][ T31] schedule+0x165/0x360 [ 1203.840090][ T31] schedule_preempt_disabled+0x13/0x30 [ 1203.845576][ T31] __mutex_lock+0x724/0xe80 [ 1203.850086][ T31] ? __mutex_lock+0x51b/0xe80 [ 1203.854795][ T31] ? misc_open+0x51/0x330 [ 1203.859125][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1203.864196][ T31] misc_open+0x51/0x330 [ 1203.868352][ T31] chrdev_open+0x4c9/0x5e0 [ 1203.872799][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1203.877737][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1203.882705][ T31] do_dentry_open+0xdf0/0x1970 [ 1203.887576][ T31] vfs_open+0x3b/0x340 [ 1203.891706][ T31] ? path_openat+0x2ecd/0x3830 [ 1203.896473][ T31] path_openat+0x2ee5/0x3830 [ 1203.901123][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1203.906595][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1203.911936][ T31] ? __pfx_path_openat+0x10/0x10 [ 1203.916872][ T31] ? __pfx___up_read+0x10/0x10 [ 1203.921657][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 1203.926967][ T31] do_filp_open+0x1fa/0x410 [ 1203.931523][ T31] ? __lock_acquire+0xab9/0xd20 [ 1203.936379][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1203.941546][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1203.946404][ T31] ? alloc_fd+0x64c/0x6c0 [ 1203.951194][ T31] do_sys_openat2+0x121/0x1c0 [ 1203.955893][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1203.961140][ T31] ? fd_install+0x97/0x540 [ 1203.965569][ T31] ? fd_install+0x30d/0x540 [ 1203.970069][ T31] __x64_sys_openat+0x138/0x170 [ 1203.974948][ T31] do_syscall_64+0xfa/0x3b0 [ 1203.979458][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1203.984700][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.990804][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1203.995476][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.001403][ T31] RIP: 0033:0x7fccacb8d211 [ 1204.005819][ T31] RSP: 002b:00007ffdf83e75f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1204.014244][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fccacb8d211 [ 1204.022240][ T31] RDX: 0000000000000002 RSI: 00007fccacc11506 RDI: 00000000ffffff9c [ 1204.030226][ T31] RBP: 00007fccacc11506 R08: 0000000000000000 R09: 00007fccad8ed6c0 [ 1204.038242][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1204.046261][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1204.054284][ T31] [ 1204.057310][ T31] INFO: task syz-executor:15172 blocked for more than 145 seconds. [ 1204.065286][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1204.072962][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1204.081683][ T31] task:syz-executor state:D stack:28008 pid:15172 tgid:15172 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1204.093640][ T31] Call Trace: [ 1204.096916][ T31] [ 1204.099844][ T31] __schedule+0x16a2/0x4cb0 [ 1204.104387][ T31] ? __kasan_slab_free+0x62/0x70 [ 1204.109325][ T31] ? security_file_open+0xb1/0x270 [ 1204.114466][ T31] ? do_dentry_open+0x35e/0x1970 [ 1204.119406][ T31] ? __lock_acquire+0xab9/0xd20 [ 1204.124305][ T31] ? schedule+0x165/0x360 [ 1204.128642][ T31] ? __pfx___schedule+0x10/0x10 [ 1204.133535][ T31] ? schedule+0x91/0x360 [ 1204.137776][ T31] schedule+0x165/0x360 [ 1204.141963][ T31] schedule_preempt_disabled+0x13/0x30 [ 1204.147429][ T31] __mutex_lock+0x724/0xe80 [ 1204.151974][ T31] ? __mutex_lock+0x51b/0xe80 [ 1204.156666][ T31] ? misc_open+0x51/0x330 [ 1204.161047][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1204.166103][ T31] misc_open+0x51/0x330 [ 1204.170257][ T31] chrdev_open+0x4c9/0x5e0 [ 1204.174714][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1204.179655][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1204.184616][ T31] do_dentry_open+0xdf0/0x1970 [ 1204.189391][ T31] vfs_open+0x3b/0x340 [ 1204.193490][ T31] ? path_openat+0x2ecd/0x3830 [ 1204.198248][ T31] path_openat+0x2ee5/0x3830 [ 1204.202868][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1204.208337][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1204.213662][ T31] ? __pfx_path_openat+0x10/0x10 [ 1204.218595][ T31] ? __pfx___up_read+0x10/0x10 [ 1204.223385][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 1204.228673][ T31] do_filp_open+0x1fa/0x410 [ 1204.233205][ T31] ? __lock_acquire+0xab9/0xd20 [ 1204.238052][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1204.243191][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1204.248045][ T31] ? alloc_fd+0x64c/0x6c0 [ 1204.252405][ T31] do_sys_openat2+0x121/0x1c0 [ 1204.257097][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1204.262316][ T31] ? fd_install+0x97/0x540 [ 1204.266837][ T31] ? fd_install+0x30d/0x540 [ 1204.271397][ T31] __x64_sys_openat+0x138/0x170 [ 1204.276257][ T31] do_syscall_64+0xfa/0x3b0 [ 1204.280787][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1204.285983][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.292077][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1204.296764][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.302678][ T31] RIP: 0033:0x7f503758d211 [ 1204.307087][ T31] RSP: 002b:00007ffc3d825c50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1204.315537][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f503758d211 [ 1204.323541][ T31] RDX: 0000000000000002 RSI: 00007f5037611506 RDI: 00000000ffffff9c [ 1204.331545][ T31] RBP: 00007f5037611506 R08: 0000000000000000 R09: 00007f50382ed6c0 [ 1204.339517][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1204.347516][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1204.355871][ T31] [ 1204.358898][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1204.367938][ T31] INFO: task syz-executor:15174 blocked for more than 146 seconds. [ 1204.375872][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1204.383615][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1204.392294][ T31] task:syz-executor state:D stack:28008 pid:15174 tgid:15174 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1204.404234][ T31] Call Trace: [ 1204.407598][ T31] [ 1204.410576][ T31] __schedule+0x16a2/0x4cb0 [ 1204.415113][ T31] ? __kasan_slab_free+0x62/0x70 [ 1204.420053][ T31] ? security_file_open+0xb1/0x270 [ 1204.425216][ T31] ? do_dentry_open+0x35e/0x1970 [ 1204.430161][ T31] ? __lock_acquire+0xab9/0xd20 [ 1204.435073][ T31] ? schedule+0x165/0x360 [ 1204.439427][ T31] ? __pfx___schedule+0x10/0x10 [ 1204.444329][ T31] ? schedule+0x91/0x360 [ 1204.448573][ T31] schedule+0x165/0x360 [ 1204.452758][ T31] schedule_preempt_disabled+0x13/0x30 [ 1204.458299][ T31] __mutex_lock+0x724/0xe80 [ 1204.462843][ T31] ? __mutex_lock+0x51b/0xe80 [ 1204.467522][ T31] ? misc_open+0x51/0x330 [ 1204.471915][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1204.476983][ T31] misc_open+0x51/0x330 [ 1204.481175][ T31] chrdev_open+0x4c9/0x5e0 [ 1204.485597][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1204.490588][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1204.495545][ T31] do_dentry_open+0xdf0/0x1970 [ 1204.500320][ T31] vfs_open+0x3b/0x340 [ 1204.504428][ T31] ? path_openat+0x2ecd/0x3830 [ 1204.509190][ T31] path_openat+0x2ee5/0x3830 [ 1204.513956][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1204.519443][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1204.524782][ T31] ? __pfx_path_openat+0x10/0x10 [ 1204.529717][ T31] ? __pfx___up_read+0x10/0x10 [ 1204.534517][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 1204.539806][ T31] do_filp_open+0x1fa/0x410 [ 1204.544339][ T31] ? __lock_acquire+0xab9/0xd20 [ 1204.549195][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1204.554263][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1204.559110][ T31] ? alloc_fd+0x64c/0x6c0 [ 1204.563471][ T31] do_sys_openat2+0x121/0x1c0 [ 1204.568147][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1204.573380][ T31] ? fd_install+0x97/0x540 [ 1204.577794][ T31] ? fd_install+0x30d/0x540 [ 1204.582317][ T31] __x64_sys_openat+0x138/0x170 [ 1204.587168][ T31] do_syscall_64+0xfa/0x3b0 [ 1204.592006][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1204.597211][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.603303][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1204.607975][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.613890][ T31] RIP: 0033:0x7fed9f38d211 [ 1204.618299][ T31] RSP: 002b:00007ffdc19f7020 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1204.626728][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fed9f38d211 [ 1204.634772][ T31] RDX: 0000000000000002 RSI: 00007fed9f411506 RDI: 00000000ffffff9c [ 1204.642791][ T31] RBP: 00007fed9f411506 R08: 0000000000000000 R09: 00007feda00ed6c0 [ 1204.650795][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1204.658769][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1204.666781][ T31] [ 1204.669795][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1204.678943][ T31] INFO: task syz-executor:15176 blocked for more than 146 seconds. [ 1204.686985][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 1204.694669][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1204.703373][ T31] task:syz-executor state:D stack:28008 pid:15176 tgid:15176 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1204.715305][ T31] Call Trace: [ 1204.718581][ T31] [ 1204.721591][ T31] __schedule+0x16a2/0x4cb0 [ 1204.726127][ T31] ? __kasan_slab_free+0x62/0x70 [ 1204.731119][ T31] ? security_file_open+0xb1/0x270 [ 1204.736235][ T31] ? do_dentry_open+0x35e/0x1970 [ 1204.741205][ T31] ? __lock_acquire+0xab9/0xd20 [ 1204.746070][ T31] ? schedule+0x165/0x360 [ 1204.750397][ T31] ? __pfx___schedule+0x10/0x10 [ 1204.755668][ T31] ? schedule+0x91/0x360 [ 1204.759918][ T31] schedule+0x165/0x360 [ 1204.764380][ T31] schedule_preempt_disabled+0x13/0x30 [ 1204.769874][ T31] __mutex_lock+0x724/0xe80 [ 1204.774405][ T31] ? __mutex_lock+0x51b/0xe80 [ 1204.779084][ T31] ? misc_open+0x51/0x330 [ 1204.783431][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1204.788489][ T31] misc_open+0x51/0x330 [ 1204.792698][ T31] chrdev_open+0x4c9/0x5e0 [ 1204.797135][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1204.802160][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1204.807107][ T31] do_dentry_open+0xdf0/0x1970 [ 1204.811933][ T31] vfs_open+0x3b/0x340 [ 1204.816014][ T31] ? path_openat+0x2ecd/0x3830 [ 1204.820791][ T31] path_openat+0x2ee5/0x3830 [ 1204.825379][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1204.830900][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1204.836323][ T31] ? __pfx_path_openat+0x10/0x10 [ 1204.841348][ T31] ? __pfx___up_read+0x10/0x10 [ 1204.846149][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 1204.851492][ T31] do_filp_open+0x1fa/0x410 [ 1204.856001][ T31] ? __lock_acquire+0xab9/0xd20 [ 1204.860900][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1204.865950][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1204.870876][ T31] ? alloc_fd+0x64c/0x6c0 [ 1204.875233][ T31] do_sys_openat2+0x121/0x1c0 [ 1204.879910][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1204.885144][ T31] ? fd_install+0x97/0x540 [ 1204.889555][ T31] ? fd_install+0x30d/0x540 [ 1204.894085][ T31] __x64_sys_openat+0x138/0x170 [ 1204.898942][ T31] do_syscall_64+0xfa/0x3b0 [ 1204.903475][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1204.908675][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.914759][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1204.919433][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.925357][ T31] RIP: 0033:0x7f1df5d8d211 [ 1204.929784][ T31] RSP: 002b:00007ffcc2b53820 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1204.938225][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1df5d8d211 [ 1204.946227][ T31] RDX: 0000000000000002 RSI: 00007f1df5e11506 RDI: 00000000ffffff9c [ 1204.954221][ T31] RBP: 00007f1df5e11506 R08: 0000000000000000 R09: 00007f1df6aed6c0 [ 1204.962223][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1204.970189][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1204.978199][ T31] [ 1204.981252][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1204.990293][ T31] [ 1204.990293][ T31] Showing all locks held in the system: [ 1204.998465][ T31] 1 lock held by khungtaskd/31: [ 1205.003346][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1205.013256][ T31] 2 locks held by getty/5585: [ 1205.017919][ T31] #0: ffff888030d130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1205.027692][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1205.037809][ T31] 1 lock held by syz-executor/5821: [ 1205.043013][ T31] #0: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1205.053134][ T31] 3 locks held by kworker/0:3/5878: [ 1205.058320][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1205.069312][ T31] #1: ffffc9000462fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1205.082839][ T31] #2: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1205.094247][ T31] 2 locks held by syz.0.2531/15138: [ 1205.099454][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.108015][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 1205.118071][ T31] 2 locks held by syz.3.2532/15139: [ 1205.123295][ T31] #0: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 1205.133426][ T31] #1: ffff888052ccc100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1205.143124][ T31] 2 locks held by syz.2.2533/15134: [ 1205.148309][ T31] #0: ffff888052ccc100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1205.158129][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1205.168260][ T31] 1 lock held by syz.4.2538/15157: [ 1205.173399][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.181896][ T31] 1 lock held by syz.1.2540/15162: [ 1205.187001][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.195464][ T31] 1 lock held by syz-executor/15169: [ 1205.200795][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.209274][ T31] 1 lock held by syz-executor/15170: [ 1205.214583][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.223052][ T31] 1 lock held by syz-executor/15172: [ 1205.228321][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.236785][ T31] 1 lock held by syz-executor/15174: [ 1205.242083][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.250570][ T31] 1 lock held by syz-executor/15176: [ 1205.255854][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.264335][ T31] 1 lock held by syz-executor/15179: [ 1205.269608][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.278078][ T31] 1 lock held by syz-executor/15180: [ 1205.283378][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.291860][ T31] 1 lock held by syz-executor/15182: [ 1205.297150][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.305622][ T31] 1 lock held by syz-executor/15184: [ 1205.310926][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.319395][ T31] 1 lock held by syz-executor/15186: [ 1205.324715][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.333217][ T31] 1 lock held by syz-executor/15190: [ 1205.338489][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.346977][ T31] 1 lock held by syz-executor/15191: [ 1205.352276][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.360742][ T31] 1 lock held by syz-executor/15193: [ 1205.366021][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.374489][ T31] 1 lock held by syz-executor/15195: [ 1205.379759][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.388256][ T31] 1 lock held by syz-executor/15197: [ 1205.393918][ T31] #0: ffffffff8e9b08c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1205.402425][ T31] [ 1205.404761][ T31] ============================================= [ 1205.404761][ T31] [ 1205.413214][ T31] NMI backtrace for cpu 1 [ 1205.413230][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 1205.413244][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1205.413252][ T31] Call Trace: [ 1205.413257][ T31] [ 1205.413263][ T31] dump_stack_lvl+0x189/0x250 [ 1205.413283][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1205.413298][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1205.413316][ T31] ? __pfx__printk+0x10/0x10 [ 1205.413336][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1205.413353][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1205.413367][ T31] ? _printk+0xcf/0x120 [ 1205.413381][ T31] ? __pfx__printk+0x10/0x10 [ 1205.413394][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1205.413411][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1205.413429][ T31] watchdog+0xfee/0x1030 [ 1205.413446][ T31] ? watchdog+0x1de/0x1030 [ 1205.413466][ T31] kthread+0x70e/0x8a0 [ 1205.413481][ T31] ? __pfx_watchdog+0x10/0x10 [ 1205.413495][ T31] ? __pfx_kthread+0x10/0x10 [ 1205.413509][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1205.413525][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1205.413542][ T31] ? __pfx_kthread+0x10/0x10 [ 1205.413555][ T31] ret_from_fork+0x3f9/0x770 [ 1205.413573][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1205.413592][ T31] ? __switch_to_asm+0x39/0x70 [ 1205.413603][ T31] ? __switch_to_asm+0x33/0x70 [ 1205.413613][ T31] ? __pfx_kthread+0x10/0x10 [ 1205.413626][ T31] ret_from_fork_asm+0x1a/0x30 [ 1205.413647][ T31] [ 1205.413651][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1205.570242][ C0] NMI backtrace for cpu 0 [ 1205.570254][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 1205.570272][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1205.570281][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1205.570305][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f6 28 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1205.570318][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 1205.570331][ C0] RAX: be6e3f85db4a6600 RBX: ffffffff81975c68 RCX: be6e3f85db4a6600 [ 1205.570342][ C0] RDX: 0000000000000001 RSI: ffffffff8d96eade RDI: ffffffff8be1b800 [ 1205.570352][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1205.570363][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9fe3f0 [ 1205.570374][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1205.570383][ C0] FS: 0000000000000000(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 1205.570395][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1205.570405][ C0] CR2: 00007efced61baed CR3: 000000000df38000 CR4: 00000000003526f0 [ 1205.570417][ C0] DR0: 00000000000000f8 DR1: 0000000000000000 DR2: 0000000000000000 [ 1205.570426][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1205.570439][ C0] Call Trace: [ 1205.570445][ C0] [ 1205.570451][ C0] default_idle+0x13/0x20 [ 1205.570467][ C0] default_idle_call+0x74/0xb0 [ 1205.570484][ C0] do_idle+0x1e8/0x510 [ 1205.570508][ C0] ? __pfx_do_idle+0x10/0x10 [ 1205.570537][ C0] cpu_startup_entry+0x44/0x60 [ 1205.570557][ C0] rest_init+0x2de/0x300 [ 1205.570572][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1205.570590][ C0] start_kernel+0x47d/0x500 [ 1205.570613][ C0] x86_64_start_reservations+0x24/0x30 [ 1205.570628][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1205.570644][ C0] common_startup_64+0x13e/0x147 [ 1205.570666][ C0] [ 1205.571292][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1205.571317][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 1205.571345][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1205.571360][ T31] Call Trace: [ 1205.571371][ T31] [ 1205.571381][ T31] dump_stack_lvl+0x99/0x250 [ 1205.571418][ T31] ? __asan_memcpy+0x40/0x70 [ 1205.571443][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1205.571478][ T31] ? __pfx__printk+0x10/0x10 [ 1205.571517][ T31] panic+0x2db/0x790 [ 1205.571558][ T31] ? __pfx_panic+0x10/0x10 [ 1205.571589][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 1205.571615][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1205.571656][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1205.571686][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1205.571724][ T31] watchdog+0x102d/0x1030 [ 1205.571758][ T31] ? watchdog+0x1de/0x1030 [ 1205.571797][ T31] kthread+0x70e/0x8a0 [ 1205.571826][ T31] ? __pfx_watchdog+0x10/0x10 [ 1205.571855][ T31] ? __pfx_kthread+0x10/0x10 [ 1205.571883][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1205.571913][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1205.571951][ T31] ? __pfx_kthread+0x10/0x10 [ 1205.571978][ T31] ret_from_fork+0x3f9/0x770 [ 1205.572013][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1205.572053][ T31] ? __switch_to_asm+0x39/0x70 [ 1205.572075][ T31] ? __switch_to_asm+0x33/0x70 [ 1205.572095][ T31] ? __pfx_kthread+0x10/0x10 [ 1205.572121][ T31] ret_from_fork_asm+0x1a/0x30 [ 1205.572187][ T31] [ 1205.920953][ T31] Kernel Offset: disabled [ 1205.925274][ T31] Rebooting in 86400 seconds..