last executing test programs: 5.530952418s ago: executing program 0 (id=758): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff20000020ff00010000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1}, 0x28) 5.381118741s ago: executing program 4 (id=763): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(0x0, 0x301f00, 0x393) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) 5.292147301s ago: executing program 0 (id=764): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000180)=@random={'trusted.', 't\x00'}, &(0x7f0000000300)=""/131, 0x83) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000a80)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x7, 0xff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x1}}) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) 4.213834091s ago: executing program 3 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r5, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x2, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r6}], &(0x7f0000000280)='GPL\x00', 0x8, 0xde, &(0x7f0000000580)=""/222, 0x100, 0x41, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x5, 0x8, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000a80)=[r6, 0xffffffffffffffff, r4, r6, r6, r7], &(0x7f0000000ac0)=[{0x3, 0x4, 0x2}, {0x4, 0x2, 0x3, 0x2}, {0x4, 0x1, 0xb, 0x4}, {0x3, 0x4, 0x3, 0x3}], 0x10, 0xb7aa}, 0x94) 3.552824576s ago: executing program 2 (id=773): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@assoc={0x0, 0x117, 0x4, 0x6}], 0xf}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/89, 0x7ffff061}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.360297429s ago: executing program 0 (id=774): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 3.359878796s ago: executing program 4 (id=775): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@in6={0xa, 0x4e22, 0x4, @private1, 0x6}, 0x80, 0x0}, 0x0) 3.301072647s ago: executing program 2 (id=776): syz_socket_connect_nvme_tcp() symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 3.172185552s ago: executing program 4 (id=778): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x40000) recvmmsg$unix(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x22, 0x0) 3.162875227s ago: executing program 0 (id=779): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)}, 0x40012100) 2.564315313s ago: executing program 3 (id=780): r0 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000680)={0x0, 0x0, {0x0, 0x0, 0x3013, 0x3}}) memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000340)=0x200, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) 2.267080085s ago: executing program 2 (id=782): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55", 0x1b}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) 2.203607718s ago: executing program 4 (id=783): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) 2.13248026s ago: executing program 0 (id=784): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000180)=@random={'trusted.', 't\x00'}, &(0x7f0000000300)=""/131, 0x83) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000a80)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x7, 0xff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x1}}) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) 2.030558048s ago: executing program 2 (id=785): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000880)=""/108, 0x6c}], 0x4}, 0x12100) 1.708018534s ago: executing program 3 (id=789): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.653580195s ago: executing program 2 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) 1.472551301s ago: executing program 3 (id=793): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x40000) recvmmsg$unix(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x22, 0x0) 1.099635163s ago: executing program 0 (id=796): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000380)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0xac0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r2, 0x742f, 0x77ae, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r8, &(0x7f0000000300)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) r9 = memfd_secret(0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r12, 0xc0286405, &(0x7f0000003c80)={0x3, 0x7f, {r10}, {r13}, 0x8000, 0x8004}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x4000000000010001, {0x3ffffffffffffffc, 0xfffffff7, 0x0, '\x00', {0x2fff, 0xfffffffd, 0x8000000000010000, 0x906, 0x0, 0x0, 0xc000, '\x00', 0x6, 0x27efc00800000, 0xc, 0x9, {0xa, 0x3fe}, {0x6, 0x3}, {0x5, 0x4}, {0xffffffffe, 0xa03}, 0x80008001, 0x800d, 0xfffffffe, 0x5}}}}) fchown(r7, r13, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000d00)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) flock(r7, 0x9) 996.083211ms ago: executing program 1 (id=797): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@assoc={0x0, 0x117, 0x4, 0x6}], 0xf}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/89, 0x7ffff061}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 992.526998ms ago: executing program 1 (id=798): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x940080}, 0xc) write(r0, &(0x7f0000000140), 0x0) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 876.699535ms ago: executing program 1 (id=799): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x3, 0x0, 0x0, 0x4, 0x1, 0x5}]}, {0x0, [0x61, 0x2e, 0x2e, 0x61, 0x30]}}, &(0x7f0000000580)=""/252, 0x2b, 0xfc, 0x1, 0xfff}, 0x28) 692.14481ms ago: executing program 1 (id=800): bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 329.937674ms ago: executing program 3 (id=801): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 259.646307ms ago: executing program 1 (id=802): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = syz_usb_connect(0x0, 0x24, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) 152.829327ms ago: executing program 4 (id=803): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90324fc600d000200090001", 0x1b}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 151.934025ms ago: executing program 3 (id=804): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36", 0xb7}, {0x0}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d2", 0x61}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4c", 0x5}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 104.542083ms ago: executing program 1 (id=805): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 67.766935ms ago: executing program 2 (id=806): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000180)=@random={'trusted.', 't\x00'}, &(0x7f0000000300)=""/131, 0x83) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000a80)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x7, 0xff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x1}}) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) 0s ago: executing program 4 (id=807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. [ 73.046498][ T5789] cgroup: Unknown subsys name 'net' [ 73.296369][ T5789] cgroup: Unknown subsys name 'cpuset' [ 73.361518][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.954286][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.427172][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.457806][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.458879][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.461713][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.461752][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.462854][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.464581][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.468294][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.468367][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.469383][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.487126][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.509638][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.513454][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.515167][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.515915][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.587972][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.608724][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.610252][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.616728][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.621088][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.742310][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.769056][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.773382][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.797497][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.800476][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.732551][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 79.738692][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 79.757637][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 79.764340][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 79.834407][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 80.127591][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.128681][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.128815][ T5803] bridge_slave_0: entered allmulticast mode [ 80.130266][ T5803] bridge_slave_0: entered promiscuous mode [ 80.143350][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.143458][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.143920][ T5804] bridge_slave_0: entered allmulticast mode [ 80.146999][ T5804] bridge_slave_0: entered promiscuous mode [ 80.195007][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.195109][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.195212][ T5806] bridge_slave_0: entered allmulticast mode [ 80.196582][ T5806] bridge_slave_0: entered promiscuous mode [ 80.201076][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.201171][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.201331][ T5807] bridge_slave_0: entered allmulticast mode [ 80.209278][ T5807] bridge_slave_0: entered promiscuous mode [ 80.211746][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.211895][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.212046][ T5803] bridge_slave_1: entered allmulticast mode [ 80.215757][ T5803] bridge_slave_1: entered promiscuous mode [ 80.223150][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.223260][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.223905][ T5804] bridge_slave_1: entered allmulticast mode [ 80.226225][ T5804] bridge_slave_1: entered promiscuous mode [ 80.249444][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.249557][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.249997][ T5806] bridge_slave_1: entered allmulticast mode [ 80.254000][ T5806] bridge_slave_1: entered promiscuous mode [ 80.257517][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.257648][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.257813][ T5807] bridge_slave_1: entered allmulticast mode [ 80.264724][ T5807] bridge_slave_1: entered promiscuous mode [ 80.305122][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.305234][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.305668][ T5805] bridge_slave_0: entered allmulticast mode [ 80.308326][ T5805] bridge_slave_0: entered promiscuous mode [ 80.394782][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.394931][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.395081][ T5805] bridge_slave_1: entered allmulticast mode [ 80.396804][ T5805] bridge_slave_1: entered promiscuous mode [ 80.435480][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.438310][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.462101][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.464975][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.469799][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.502151][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.519018][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.523999][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.558393][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.562622][ T5813] Bluetooth: hci2: command tx timeout [ 80.562628][ T5815] Bluetooth: hci0: command tx timeout [ 80.615664][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.721152][ T5815] Bluetooth: hci1: command tx timeout [ 80.802421][ T5815] Bluetooth: hci4: command tx timeout [ 80.854142][ T5803] team0: Port device team_slave_0 added [ 80.855917][ T5804] team0: Port device team_slave_0 added [ 80.875123][ T5807] team0: Port device team_slave_0 added [ 80.877836][ T5806] team0: Port device team_slave_0 added [ 80.879658][ T5803] team0: Port device team_slave_1 added [ 80.880947][ T5815] Bluetooth: hci3: command tx timeout [ 80.883130][ T5804] team0: Port device team_slave_1 added [ 80.906185][ T5807] team0: Port device team_slave_1 added [ 80.909203][ T5806] team0: Port device team_slave_1 added [ 80.938329][ T5805] team0: Port device team_slave_0 added [ 81.010269][ T5805] team0: Port device team_slave_1 added [ 81.042604][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.042617][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.042631][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.044616][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.044631][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.044653][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.066751][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.066767][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.066792][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.069079][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.069092][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.069115][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.073846][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.073860][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.073884][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.076824][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.076837][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.076860][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.099180][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.099196][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.099219][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.104279][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.104294][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.104317][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.137642][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.137659][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.137682][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.173454][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.173470][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.173493][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.386975][ T5803] hsr_slave_0: entered promiscuous mode [ 81.388529][ T5803] hsr_slave_1: entered promiscuous mode [ 81.422972][ T5806] hsr_slave_0: entered promiscuous mode [ 81.424535][ T5806] hsr_slave_1: entered promiscuous mode [ 81.425469][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 81.425571][ T5806] Cannot create hsr debugfs directory [ 81.435848][ T5804] hsr_slave_0: entered promiscuous mode [ 81.437049][ T5804] hsr_slave_1: entered promiscuous mode [ 81.437867][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 81.437887][ T5804] Cannot create hsr debugfs directory [ 81.448671][ T5807] hsr_slave_0: entered promiscuous mode [ 81.449841][ T5807] hsr_slave_1: entered promiscuous mode [ 81.451879][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 81.451902][ T5807] Cannot create hsr debugfs directory [ 81.491580][ T5805] hsr_slave_0: entered promiscuous mode [ 81.492865][ T5805] hsr_slave_1: entered promiscuous mode [ 81.496745][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 81.496769][ T5805] Cannot create hsr debugfs directory [ 82.549559][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.597677][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.609362][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.627925][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.629141][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.641837][ T5815] Bluetooth: hci2: command tx timeout [ 82.641869][ T5815] Bluetooth: hci0: command tx timeout [ 82.666315][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.684512][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.725532][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.800844][ T5813] Bluetooth: hci1: command tx timeout [ 82.873561][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.882672][ T5813] Bluetooth: hci4: command tx timeout [ 82.907445][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.910176][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.935227][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.937088][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.961051][ T5813] Bluetooth: hci3: command tx timeout [ 82.978342][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.997978][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.033675][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.181393][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.214853][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.229908][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.254372][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.257349][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.275678][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.300083][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.323257][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.490574][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.514919][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.531747][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.578470][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.589283][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.614818][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.620483][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.644898][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.685743][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.807296][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.807523][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.843657][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.856236][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.873776][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.877714][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.914551][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.919858][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.954884][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.966607][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.966812][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.016920][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.017105][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.086797][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.179550][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.204722][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.222072][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.222187][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.277239][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.277376][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.357347][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.416521][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.416714][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.455502][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.482883][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.483009][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.588079][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.620567][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.620688][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.642291][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.688462][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.688648][ T1404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.720997][ T5815] Bluetooth: hci2: command tx timeout [ 84.721072][ T5813] Bluetooth: hci0: command tx timeout [ 84.793546][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.826162][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.848871][ T1533] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.849049][ T1533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.882270][ T5813] Bluetooth: hci1: command tx timeout [ 84.922415][ T1533] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.922561][ T1533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.964345][ T5813] Bluetooth: hci4: command tx timeout [ 85.043172][ T5813] Bluetooth: hci3: command tx timeout [ 85.273627][ T5803] veth0_vlan: entered promiscuous mode [ 85.315742][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.363540][ T5803] veth1_vlan: entered promiscuous mode [ 85.385276][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.569883][ T5803] veth0_macvtap: entered promiscuous mode [ 85.635857][ T5803] veth1_macvtap: entered promiscuous mode [ 85.645602][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.646749][ T5807] veth0_vlan: entered promiscuous mode [ 85.702721][ T5805] veth0_vlan: entered promiscuous mode [ 85.709858][ T5807] veth1_vlan: entered promiscuous mode [ 85.735013][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.758418][ T5805] veth1_vlan: entered promiscuous mode [ 85.772874][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.821713][ T1483] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.826855][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.842551][ T1483] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.862671][ T1483] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.869600][ T1483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.045498][ T5807] veth0_macvtap: entered promiscuous mode [ 86.109027][ T5804] veth0_vlan: entered promiscuous mode [ 86.174482][ T5807] veth1_macvtap: entered promiscuous mode [ 86.235019][ T5805] veth0_macvtap: entered promiscuous mode [ 86.312682][ T5805] veth1_macvtap: entered promiscuous mode [ 86.317408][ T5804] veth1_vlan: entered promiscuous mode [ 86.467308][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.500471][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.508234][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.524925][ T1533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.524949][ T1533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.578502][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.598727][ T1397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.623874][ T1397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.632196][ T1397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.669097][ T1397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.688525][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.702488][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.702502][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.748339][ T1404] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.774056][ T5804] veth0_macvtap: entered promiscuous mode [ 86.784293][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.798860][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.800908][ T5813] Bluetooth: hci0: command tx timeout [ 86.800934][ T5813] Bluetooth: hci2: command tx timeout [ 86.842719][ T1236] cfg80211: failed to load regulatory.db [ 86.913352][ T5806] veth0_vlan: entered promiscuous mode [ 86.961875][ T5815] Bluetooth: hci1: command tx timeout [ 86.967602][ T5804] veth1_macvtap: entered promiscuous mode [ 87.042111][ T5815] Bluetooth: hci4: command tx timeout [ 87.122663][ T5815] Bluetooth: hci3: command tx timeout [ 87.391696][ T5806] veth1_vlan: entered promiscuous mode [ 87.584634][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.584654][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.609759][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.638786][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.762268][ T1404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.854373][ T1404] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.871385][ T1404] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.878133][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.878153][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.881811][ T1533] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.032884][ T5806] veth0_macvtap: entered promiscuous mode [ 88.044260][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.044279][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.134029][ T5806] veth1_macvtap: entered promiscuous mode [ 88.157967][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.157987][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.150369][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.281149][ T5936] Can't find ip_set type [ 89.317983][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.422209][ T1404] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.425947][ T1404] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.590203][ T1404] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.603303][ T1404] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.822171][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.822191][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.357604][ T1404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.357624][ T1404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.506763][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.506785][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.688476][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.688499][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.174571][ T5977] syz.3.15 uses obsolete (PF_INET,SOCK_PACKET) [ 94.394690][ T5980] nbd: must specify at least one socket [ 94.794339][ T5808] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 96.391356][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.391392][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.391432][ T5808] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 96.391455][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.685549][ T5808] usb 5-1: config 0 descriptor?? [ 96.872946][ T5997] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.317838][ T5808] elan 0003:04F3:0755.0001: item fetching failed at offset 0/5 [ 97.335641][ T5808] elan 0003:04F3:0755.0001: Hid Parse failed [ 97.340706][ T5808] elan 0003:04F3:0755.0001: probe with driver elan failed with error -22 [ 97.725590][ T5808] usb 5-1: USB disconnect, device number 2 [ 98.707937][ T6014] syz.0.24 (6014) used greatest stack depth: 17592 bytes left [ 99.676866][ T6026] nbd: must specify at least one socket [ 101.756092][ T6048] process 'syz.1.34' launched './file1' with NULL argv: empty string added [ 102.914668][ T6067] nbd: must specify at least one socket [ 104.468238][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 104.525998][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 104.738344][ T6102] team1: entered promiscuous mode [ 104.738373][ T6102] team1: entered allmulticast mode [ 104.740707][ T6102] 8021q: adding VLAN 0 to HW filter on device team1 [ 105.299044][ T6104] team2: entered promiscuous mode [ 105.299072][ T6104] team2: entered allmulticast mode [ 105.299585][ T6104] 8021q: adding VLAN 0 to HW filter on device team2 [ 105.309376][ T6104] Zero length message leads to an empty skb [ 108.341198][ T6152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.966506][ T6253] libceph: resolve '0..' (ret=-3): failed [ 118.605434][ T5815] block nbd0: Receive control failed (result -32) [ 118.825525][ T6261] nbd0: detected capacity change from 0 to 128 [ 119.693984][ T5856] block nbd0: Dead connection, failed to find a fallback [ 119.694604][ T5856] block nbd0: shutting down sockets [ 119.697753][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.732128][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.880086][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.880115][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.880246][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.880264][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.880383][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.880410][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.880535][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.880554][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.880804][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.880828][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.881041][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.881055][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.881139][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.888149][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.888228][ T5856] ldm_validate_partition_table(): Disk read failed. [ 119.888303][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.888316][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.888400][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.888412][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.888740][ T5856] Dev nbd0: unable to read RDB block 0 [ 119.889143][ T5856] nbd0: unable to read partition table [ 120.753135][ T5856] ldm_validate_partition_table(): Disk read failed. [ 120.779607][ T5856] Dev nbd0: unable to read RDB block 0 [ 120.795335][ T5856] nbd0: unable to read partition table [ 120.972858][ T5856] ldm_validate_partition_table(): Disk read failed. [ 120.973182][ T5856] Dev nbd0: unable to read RDB block 0 [ 120.974819][ T5856] nbd0: unable to read partition table [ 121.048837][ T5856] ldm_validate_partition_table(): Disk read failed. [ 121.049458][ T5856] Dev nbd0: unable to read RDB block 0 [ 121.050157][ T5856] nbd0: unable to read partition table [ 123.853991][ T6306] nbd1: detected capacity change from 0 to 128 [ 124.846037][ T5815] block nbd1: Receive control failed (result -104) [ 124.933752][ T6317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.116'. [ 124.933774][ T6317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.116'. [ 125.270045][ T6325] program syz.2.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.350897][ T5811] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 127.623875][ T5811] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 127.623911][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.697358][ T5811] usb 4-1: config 0 descriptor?? [ 128.814071][ T5811] cp210x 4-1:0.0: cp210x converter detected [ 129.197447][ T6365] nbd2: detected capacity change from 0 to 128 [ 129.270069][ T5811] usb 4-1: cp210x converter now attached to ttyUSB0 [ 129.356439][ T5815] block nbd2: Receive control failed (result -104) [ 129.453765][ T5811] usb 4-1: USB disconnect, device number 2 [ 130.674607][ T5811] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 130.921426][ T5811] cp210x 4-1:0.0: device disconnected [ 132.039882][ T814] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.704196][ T814] usb 1-1: Using ep0 maxpacket: 32 [ 132.893604][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.893694][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.949961][ T814] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.949992][ T814] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 132.950015][ T814] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.036760][ T814] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 133.036799][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.036819][ T814] usb 1-1: Product: syz [ 133.036834][ T814] usb 1-1: Manufacturer: syz [ 133.036848][ T814] usb 1-1: SerialNumber: syz [ 133.233919][ T814] usb 1-1: config 0 descriptor?? [ 133.625754][ T6416] 9p: Could not find request transport: fd0x0000000000000003 [ 133.674795][ T814] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 133.899145][ T6430] netlink: 'syz.3.145': attribute type 29 has an invalid length. [ 133.913206][ T6430] netlink: 'syz.3.145': attribute type 29 has an invalid length. [ 134.403687][ T814] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 134.443310][ T814] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 134.515672][ T814] usb 1-1: USB disconnect, device number 2 [ 134.853034][ T6438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.146'. [ 137.534376][ T6476] 9p: Could not find request transport: fd0x0000000000000003 [ 140.520968][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.159'. [ 140.520997][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 140.521015][ T6493] netlink: 31 bytes leftover after parsing attributes in process `syz.3.159'. [ 140.521030][ T6493] netlink: 'syz.3.159': attribute type 3 has an invalid length. [ 140.521042][ T6493] netlink: 'syz.3.159': attribute type 2 has an invalid length. [ 140.521053][ T6493] netlink: 31 bytes leftover after parsing attributes in process `syz.3.159'. [ 140.521067][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.159'. [ 141.655241][ T36] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.891247][ T1236] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.920923][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 141.928390][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 141.928422][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.966536][ T36] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 141.966566][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.966586][ T36] usb 4-1: Product: syz [ 141.966600][ T36] usb 4-1: Manufacturer: syz [ 141.966614][ T36] usb 4-1: SerialNumber: syz [ 142.051513][ T36] usb 4-1: config 0 descriptor?? [ 142.091521][ T1236] usb 5-1: no configurations [ 142.091541][ T1236] usb 5-1: can't read configurations, error -22 [ 142.174802][ T36] kobil_sct 4-1:0.0: KOBIL USB smart card terminal converter detected [ 142.227752][ T36] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 142.250838][ T1236] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.478622][ T1236] usb 5-1: no configurations [ 142.478642][ T1236] usb 5-1: can't read configurations, error -22 [ 142.548175][ T1236] usb usb5-port1: attempt power cycle [ 142.560855][ T814] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 143.700814][ T814] usb 2-1: Using ep0 maxpacket: 32 [ 143.718842][ T814] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.718870][ T814] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 143.830890][ T814] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 143.830921][ T814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.830941][ T814] usb 2-1: Product: syz [ 143.830954][ T814] usb 2-1: Manufacturer: syz [ 143.830967][ T814] usb 2-1: SerialNumber: syz [ 143.953318][ T5924] usb 4-1: USB disconnect, device number 3 [ 144.012490][ T1236] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.023729][ T6534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.169'. [ 144.037638][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 144.038210][ T1236] usb 5-1: device descriptor read/8, error -32 [ 145.575140][ T6541] libceph: resolve '0..' (ret=-3): failed [ 145.699084][ T5924] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 145.699528][ T5924] kobil_sct 4-1:0.0: device disconnected [ 146.103316][ T814] usb 2-1: interface 2 not found [ 146.225359][ T814] usb 2-1: USB disconnect, device number 2 [ 146.988148][ T37] audit: type=1326 audit(1776624492.579:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6564 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774e1bc819 code=0x7ffc0000 [ 146.988202][ T37] audit: type=1326 audit(1776624492.579:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6564 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774e1bc819 code=0x7ffc0000 [ 147.029276][ T37] audit: type=1326 audit(1776624492.579:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6564 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f774e1bc819 code=0x7ffc0000 [ 147.038949][ T37] audit: type=1326 audit(1776624492.629:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6564 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774e1bc819 code=0x7ffc0000 [ 152.430751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.518111][ T6594] libceph: resolve '0..' (ret=-3): failed [ 154.350905][ T6257] block nbd1: Possible stuck request ffff888026f55080: control (read@0,4096B). Runtime 30 seconds [ 154.873014][ T1236] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.750832][ T1236] usb 2-1: Using ep0 maxpacket: 32 [ 155.753249][ T1236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.753275][ T1236] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.763285][ T1236] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 155.763323][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.763342][ T1236] usb 2-1: Product: syz [ 155.763355][ T1236] usb 2-1: Manufacturer: syz [ 155.763369][ T1236] usb 2-1: SerialNumber: syz [ 155.840149][ T1236] usb 2-1: interface 2 not found [ 156.086745][ T1236] usb 2-1: USB disconnect, device number 3 [ 159.860909][ T104] block nbd2: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 30 seconds [ 160.004188][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.199'. [ 160.098838][ T6657] libceph: resolve '0..' (ret=-3): failed [ 163.598641][ T6675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.203'. [ 165.231572][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 165.991241][ T6693] nbd0: detected capacity change from 128 to 0 [ 166.021305][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 166.335112][ T6699] libceph: resolve '0..' (ret=-3): failed [ 167.930758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 170.542671][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.216'. [ 172.383616][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 172.668995][ T6736] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 174.086354][ T6756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'. [ 174.086383][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 174.086400][ T6756] netlink: 31 bytes leftover after parsing attributes in process `syz.1.228'. [ 174.086415][ T6756] netlink: 'syz.1.228': attribute type 3 has an invalid length. [ 174.086427][ T6756] netlink: 'syz.1.228': attribute type 2 has an invalid length. [ 174.086439][ T6756] netlink: 31 bytes leftover after parsing attributes in process `syz.1.228'. [ 174.086454][ T6756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'. [ 174.265117][ T6754] binder: 6750:6754 ioctl c0306201 200000000680 returned -14 [ 174.722442][ T5924] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.520844][ T5924] usb 2-1: device descriptor read/64, error -71 [ 176.813152][ T5924] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 176.970858][ T5924] usb 2-1: device descriptor read/64, error -71 [ 177.082491][ T5924] usb usb2-port1: attempt power cycle [ 177.120875][ T5891] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 177.281675][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 177.284599][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 177.290002][ T5891] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 177.290031][ T5891] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 177.290051][ T5891] usb 3-1: Product: syz [ 177.290065][ T5891] usb 3-1: Manufacturer: syz [ 177.290079][ T5891] usb 3-1: SerialNumber: syz [ 178.222911][ T5891] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 178.222937][ T5891] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 178.222957][ T5891] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 178.222975][ T5891] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 178.424198][ T5891] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 178.601526][ T5891] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 179.276933][ T5891] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 179.375781][ T5891] usb 3-1: USB disconnect, device number 2 [ 179.536848][ T5891] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 179.632037][ T5891] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 179.632854][ T5891] visor 3-1:1.0: device disconnected [ 179.990206][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.240'. [ 180.940842][ T5891] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 181.008172][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 181.134196][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 181.219671][ T5891] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 181.219702][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.219722][ T5891] usb 3-1: Product: syz [ 181.219735][ T5891] usb 3-1: Manufacturer: syz [ 181.219750][ T5891] usb 3-1: SerialNumber: syz [ 181.309076][ T5891] usb 3-1: config 0 descriptor?? [ 181.364143][ T5891] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 181.496699][ T6821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.247'. [ 181.496729][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 181.496746][ T6821] netlink: 31 bytes leftover after parsing attributes in process `syz.1.247'. [ 181.496762][ T6821] netlink: 'syz.1.247': attribute type 3 has an invalid length. [ 181.496774][ T6821] netlink: 'syz.1.247': attribute type 2 has an invalid length. [ 181.496787][ T6821] netlink: 31 bytes leftover after parsing attributes in process `syz.1.247'. [ 181.496802][ T6821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.247'. [ 181.814425][ T5891] usb 3-1: USB disconnect, device number 3 [ 181.820868][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 181.951058][ T10] usb 2-1: device descriptor read/64, error -71 [ 182.190950][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.220874][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 182.320818][ T10] usb 2-1: device descriptor read/64, error -71 [ 182.374634][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.374661][ T31] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.374698][ T31] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 182.374721][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.396749][ T31] usb 4-1: config 0 descriptor?? [ 182.431987][ T10] usb usb2-port1: attempt power cycle [ 183.108690][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 183.562014][ T10] usb 2-1: device descriptor read/8, error -71 [ 183.800827][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 183.821803][ T10] usb 2-1: device descriptor read/8, error -71 [ 183.932622][ T10] usb usb2-port1: unable to enumerate USB device [ 184.953894][ T6257] block nbd1: Possible stuck request ffff888026f55080: control (read@0,4096B). Runtime 60 seconds [ 184.959315][ T814] usb 4-1: USB disconnect, device number 4 [ 187.700999][ T6855] netlink: 32 bytes leftover after parsing attributes in process `syz.3.258'. [ 187.770255][ T6855] netlink: 32 bytes leftover after parsing attributes in process `syz.3.258'. [ 188.180836][ T814] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 189.198182][ T814] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 189.198234][ T814] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.198261][ T814] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.198303][ T814] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.198326][ T814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.817922][ T814] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.851676][ T814] usb 2-1: invalid MIDI out EP 0 [ 190.037741][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 190.204750][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.204796][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 190.204819][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.310039][ T10] usb 4-1: config 0 descriptor?? [ 190.521678][ T104] block nbd2: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 60 seconds [ 190.736028][ T36] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 190.927884][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.927923][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.927962][ T36] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 190.927997][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.995564][ T814] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 191.024079][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.275'. [ 191.024102][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 191.024111][ T6904] netlink: 31 bytes leftover after parsing attributes in process `syz.0.275'. [ 191.024120][ T6904] netlink: 'syz.0.275': attribute type 3 has an invalid length. [ 191.024126][ T6904] netlink: 'syz.0.275': attribute type 2 has an invalid length. [ 191.024133][ T6904] netlink: 31 bytes leftover after parsing attributes in process `syz.0.275'. [ 191.024141][ T6904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.275'. [ 191.042392][ T36] usb 5-1: config 0 descriptor?? [ 191.144025][ T814] usb 2-1: USB disconnect, device number 11 [ 192.576530][ T5891] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 192.717257][ T36] elan 0003:04F3:0755.0002: item fetching failed at offset 0/5 [ 192.718018][ T36] elan 0003:04F3:0755.0002: Hid Parse failed [ 192.718121][ T36] elan 0003:04F3:0755.0002: probe with driver elan failed with error -22 [ 192.954916][ T36] usb 5-1: USB disconnect, device number 7 [ 193.080918][ T5891] usb 1-1: device descriptor read/64, error -71 [ 193.257108][ T814] usb 4-1: USB disconnect, device number 5 [ 193.364769][ T5891] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 193.490916][ T5891] usb 1-1: device descriptor read/64, error -71 [ 193.602509][ T5891] usb usb1-port1: attempt power cycle [ 194.500869][ T5891] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 194.575091][ T5891] usb 1-1: device descriptor read/8, error -71 [ 194.620046][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.620112][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.408229][ T6975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.300'. [ 197.408259][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 197.408275][ T6975] netlink: 31 bytes leftover after parsing attributes in process `syz.2.300'. [ 197.408289][ T6975] netlink: 'syz.2.300': attribute type 3 has an invalid length. [ 197.408301][ T6975] netlink: 'syz.2.300': attribute type 2 has an invalid length. [ 197.408314][ T6975] netlink: 31 bytes leftover after parsing attributes in process `syz.2.300'. [ 197.408328][ T6975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 197.749826][ T31] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 198.633106][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.633142][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.633179][ T31] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 198.633210][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.638618][ T31] usb 1-1: config 0 descriptor?? [ 198.680857][ T5808] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 199.390993][ T5808] usb 3-1: device descriptor read/64, error -71 [ 199.615861][ T6970] syz.1.298 (6970) used greatest stack depth: 14744 bytes left [ 199.707472][ T5808] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 199.825968][ T31] elan 0003:04F3:0755.0003: item fetching failed at offset 0/5 [ 199.826629][ T31] elan 0003:04F3:0755.0003: Hid Parse failed [ 199.826717][ T31] elan 0003:04F3:0755.0003: probe with driver elan failed with error -22 [ 199.940897][ T5808] usb 3-1: device descriptor read/64, error -71 [ 199.970920][ T31] usb 1-1: USB disconnect, device number 7 [ 200.057503][ T5808] usb usb3-port1: attempt power cycle [ 200.310913][ T1236] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 200.411480][ T5808] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 200.480846][ T1236] usb 2-1: Using ep0 maxpacket: 8 [ 200.483532][ T1236] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.487281][ T1236] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 200.487307][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.487331][ T1236] usb 2-1: Product: syz [ 200.487342][ T1236] usb 2-1: Manufacturer: syz [ 200.487354][ T1236] usb 2-1: SerialNumber: syz [ 200.557019][ T1236] usb 2-1: config 0 descriptor?? [ 200.641700][ T5808] usb 3-1: device not accepting address 6, error -71 [ 201.594365][ T6995] ptrace attach of "./syz-executor exec"[5807] was attempted by "./syz-executor exec"[6995] [ 201.598279][ T6995] netlink: 32 bytes leftover after parsing attributes in process `syz.1.306'. [ 201.602562][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 201.820913][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 201.903480][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 201.903516][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 202.938146][ T7012] warning: `syz.3.314' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 204.744654][ T1236] msi2500 2-1:0.0: Registered as swradio24 [ 204.744677][ T1236] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 204.763430][ T1236] usb 2-1: USB disconnect, device number 12 [ 204.783767][ T5808] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 205.718931][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.718968][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.719004][ T5808] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 205.719028][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.740835][ T814] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 205.801897][ T5808] usb 1-1: config 0 descriptor?? [ 205.898559][ T814] usb 4-1: Using ep0 maxpacket: 8 [ 205.905406][ T814] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.934927][ T814] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 205.934955][ T814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.934972][ T814] usb 4-1: Product: syz [ 205.934984][ T814] usb 4-1: Manufacturer: syz [ 205.934996][ T814] usb 4-1: SerialNumber: syz [ 205.945207][ T7044] netlink: 'syz.2.322': attribute type 10 has an invalid length. [ 206.188326][ T814] usb 4-1: config 0 descriptor?? [ 206.341037][ T5808] elan 0003:04F3:0755.0004: item fetching failed at offset 0/5 [ 206.341695][ T5808] elan 0003:04F3:0755.0004: Hid Parse failed [ 206.341780][ T5808] elan 0003:04F3:0755.0004: probe with driver elan failed with error -22 [ 206.405429][ T7035] ptrace attach of "./syz-executor exec"[5804] was attempted by "./syz-executor exec"[7035] [ 206.415879][ T7035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.321'. [ 206.477333][ T5808] usb 1-1: USB disconnect, device number 8 [ 206.526073][ T7044] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.782068][ T7044] bond0: (slave team0): Enslaving as an active interface with an up link [ 207.234059][ T814] msi2500 4-1:0.0: Registered as swradio24 [ 207.234083][ T814] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 207.342500][ T814] usb 4-1: USB disconnect, device number 6 [ 209.245391][ T5995] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 209.410139][ T5995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.410179][ T5995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.410217][ T5995] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 209.410240][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.536146][ T5995] usb 3-1: config 0 descriptor?? [ 209.614477][ T7086] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 209.975442][ T5995] elan 0003:04F3:0755.0005: item fetching failed at offset 0/5 [ 209.997393][ T7092] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.340'. [ 209.997884][ T7092] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 210.034290][ T5995] elan 0003:04F3:0755.0005: Hid Parse failed [ 210.034402][ T5995] elan 0003:04F3:0755.0005: probe with driver elan failed with error -22 [ 210.164951][ T5995] usb 3-1: USB disconnect, device number 8 [ 211.204255][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 213.091156][ T7126] netlink: 248 bytes leftover after parsing attributes in process `syz.4.352'. [ 213.482721][ T7136] netlink: 36 bytes leftover after parsing attributes in process `syz.2.355'. [ 213.482747][ T7136] netlink: 40 bytes leftover after parsing attributes in process `syz.2.355'. [ 214.692328][ T5808] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 215.531673][ T6257] block nbd1: Possible stuck request ffff888026f55080: control (read@0,4096B). Runtime 90 seconds [ 215.558012][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.558045][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.558079][ T5808] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 215.558101][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.635319][ T5808] usb 3-1: config 0 descriptor?? [ 216.282732][ T7166] netlink: 36 bytes leftover after parsing attributes in process `syz.0.366'. [ 216.671174][ T5808] elan 0003:04F3:0755.0006: item fetching failed at offset 0/5 [ 216.674240][ T5808] elan 0003:04F3:0755.0006: Hid Parse failed [ 216.674353][ T5808] elan 0003:04F3:0755.0006: probe with driver elan failed with error -22 [ 216.863956][ T5808] usb 3-1: USB disconnect, device number 9 [ 217.370818][ T5924] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.520778][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 217.528954][ T5924] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 217.528984][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.529003][ T5924] usb 4-1: Product: syz [ 217.529018][ T5924] usb 4-1: Manufacturer: syz [ 217.529031][ T5924] usb 4-1: SerialNumber: syz [ 217.740844][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 217.854803][ T5924] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 217.970862][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 217.990177][ T10] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 217.990206][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.990226][ T10] usb 1-1: Product: syz [ 217.990240][ T10] usb 1-1: Manufacturer: syz [ 217.990254][ T10] usb 1-1: SerialNumber: syz [ 218.330129][ T7201] capability: warning: `syz.2.381' uses 32-bit capabilities (legacy support in use) [ 218.350106][ T7201] program syz.2.381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.401861][ T5924] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 218.447254][ T10] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 218.450052][ T5924] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 218.450167][ T5924] usb 4-1: media controller created [ 218.555908][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 218.733242][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.927779][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 218.927852][ T10] usb 1-1: media controller created [ 219.090133][ T37] audit: type=1326 audit(1776624564.679:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0fcc819 code=0x7ffc0000 [ 219.115091][ T37] audit: type=1326 audit(1776624564.679:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0fcc819 code=0x7ffc0000 [ 219.115146][ T37] audit: type=1326 audit(1776624564.679:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fcca0fcc819 code=0x7ffc0000 [ 219.120096][ T37] audit: type=1326 audit(1776624564.709:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0fcc819 code=0x7ffc0000 [ 219.120515][ T37] audit: type=1326 audit(1776624564.709:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0fcc819 code=0x7ffc0000 [ 219.130955][ T37] audit: type=1326 audit(1776624564.729:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0fcc819 code=0x7ffc0000 [ 219.243130][ T37] audit: type=1326 audit(1776624564.829:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcca0f8d04e code=0x7ffc0000 [ 219.243169][ T37] audit: type=1326 audit(1776624564.829:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcca0f8d04e code=0x7ffc0000 [ 219.243191][ T37] audit: type=1326 audit(1776624564.829:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcca0f8d04e code=0x7ffc0000 [ 219.243211][ T37] audit: type=1326 audit(1776624564.829:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcca0f8d04e code=0x7ffc0000 [ 219.431209][ T5924] zl10353_read_register: readreg error (reg=127, ret==-71) [ 219.444602][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.564344][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 219.652836][ T7228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.392'. [ 219.652860][ T7228] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'. [ 219.690914][ T5808] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 219.856422][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 219.871270][ T5808] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 219.871300][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.871319][ T5808] usb 5-1: Product: syz [ 219.871333][ T5808] usb 5-1: Manufacturer: syz [ 219.871345][ T5808] usb 5-1: SerialNumber: syz [ 220.109240][ T5924] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 220.152276][ T10] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 220.156102][ T5924] usb 4-1: USB disconnect, device number 7 [ 220.222586][ T5808] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 220.352695][ T10] usb 1-1: USB disconnect, device number 9 [ 220.476126][ T5808] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 220.479617][ T5808] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 220.479670][ T5808] usb 5-1: media controller created [ 220.591003][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.601869][ T104] block nbd2: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 90 seconds [ 220.646108][ T5808] zl10353_read_register: readreg error (reg=127, ret==-71) [ 220.736527][ T5808] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 220.754078][ T5808] usb 5-1: USB disconnect, device number 8 [ 221.460865][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 221.641023][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 221.649265][ T10] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 221.649295][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.649315][ T10] usb 1-1: Product: syz [ 221.649329][ T10] usb 1-1: Manufacturer: syz [ 221.649343][ T10] usb 1-1: SerialNumber: syz [ 221.727248][ T7257] netlink: 36 bytes leftover after parsing attributes in process `syz.4.404'. [ 221.727272][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.404'. [ 221.939731][ T10] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 222.102555][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 222.102926][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 222.105182][ T10] usb 1-1: media controller created [ 222.180808][ T5811] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 222.274111][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.333256][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.333291][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.333340][ T5811] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 222.333362][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.402914][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 222.524624][ T5811] usb 3-1: config 0 descriptor?? [ 222.891756][ T7040] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 223.092122][ T7040] usb 5-1: Using ep0 maxpacket: 32 [ 223.109098][ T7040] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 223.109129][ T7040] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.109150][ T7040] usb 5-1: Product: syz [ 223.109164][ T7040] usb 5-1: Manufacturer: syz [ 223.109179][ T7040] usb 5-1: SerialNumber: syz [ 223.190603][ T7040] usb 5-1: config 0 descriptor?? [ 223.355200][ T5811] elan 0003:04F3:0755.0007: item fetching failed at offset 0/5 [ 223.355786][ T5811] elan 0003:04F3:0755.0007: Hid Parse failed [ 223.355877][ T5811] elan 0003:04F3:0755.0007: probe with driver elan failed with error -22 [ 223.371480][ T10] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 223.456264][ T10] usb 1-1: USB disconnect, device number 10 [ 223.552955][ T5808] usb 3-1: USB disconnect, device number 10 [ 223.680195][ T7040] airspy 5-1:0.0: Board ID: 00 [ 223.680219][ T7040] airspy 5-1:0.0: Firmware version: [ 223.815856][ T7288] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 224.020876][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 224.170835][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 224.199462][ T10] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 224.199492][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.199512][ T10] usb 1-1: Product: syz [ 224.199525][ T10] usb 1-1: Manufacturer: syz [ 224.199536][ T10] usb 1-1: SerialNumber: syz [ 224.294659][ T7040] airspy 5-1:0.0: usb_control_msg() failed -32 request 12 [ 224.329421][ T7040] airspy 5-1:0.0: Registered as swradio24 [ 224.329443][ T7040] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 224.615989][ T10] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 225.617714][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 225.618107][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 225.618157][ T10] usb 1-1: media controller created [ 225.730119][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.896118][ T814] usb 5-1: USB disconnect, device number 9 [ 225.902472][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 226.177960][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 226.177979][ T37] audit: type=1326 audit(1776624571.769:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0fcc819 code=0x7ffc0000 [ 226.210338][ T37] audit: type=1326 audit(1776624571.769:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0fcc819 code=0x7ffc0000 [ 226.211272][ T37] audit: type=1326 audit(1776624571.799:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0fcc819 code=0x7ffc0000 [ 226.258078][ T37] audit: type=1326 audit(1776624571.849:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fcca0fcc819 code=0x7ffc0000 [ 226.258126][ T37] audit: type=1326 audit(1776624571.849:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0fcc819 code=0x7ffc0000 [ 226.258162][ T37] audit: type=1326 audit(1776624571.849:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcca0f8d04e code=0x7ffc0000 [ 226.259428][ T37] audit: type=1326 audit(1776624571.849:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca0fcc819 code=0x7ffc0000 [ 226.259469][ T37] audit: type=1326 audit(1776624571.849:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcca0f8d04e code=0x7ffc0000 [ 226.264558][ T37] audit: type=1326 audit(1776624571.859:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcca0f8d04e code=0x7ffc0000 [ 227.067489][ T37] audit: type=1326 audit(1776624571.859:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7321 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcca0f8d04e code=0x7ffc0000 [ 227.297040][ T10] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 227.324749][ T10] usb 1-1: USB disconnect, device number 11 [ 227.735181][ T7343] netlink: 36 bytes leftover after parsing attributes in process `syz.2.438'. [ 227.735208][ T7343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.438'. [ 232.050780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 232.878887][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.465'. [ 235.020842][ T814] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 235.170818][ T814] usb 4-1: Using ep0 maxpacket: 8 [ 235.173026][ T814] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 235.173052][ T814] usb 4-1: config 0 has no interface number 0 [ 235.173110][ T814] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 235.173132][ T814] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 235.173156][ T814] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.173181][ T814] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.173221][ T814] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 235.173244][ T814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.214840][ T814] usb 4-1: config 0 descriptor?? [ 235.580216][ T814] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 235.602297][ T814] usb 4-1: USB disconnect, device number 8 [ 235.823954][ T814] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 238.154475][ T814] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 238.310922][ T814] usb 3-1: Using ep0 maxpacket: 16 [ 238.314458][ T814] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 238.314487][ T814] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 238.314507][ T814] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 238.314526][ T814] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 238.314546][ T814] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 238.314566][ T814] usb 3-1: config 0 has no interface number 0 [ 238.314619][ T814] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 238.314646][ T814] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 238.314669][ T814] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.314703][ T814] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.314730][ T814] usb 3-1: config 0 interface 125 has no altsetting 0 [ 238.314747][ T814] usb 3-1: config 0 interface 125 has no altsetting 2 [ 238.324439][ T814] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 238.324470][ T814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.324488][ T814] usb 3-1: Product: syz [ 238.324501][ T814] usb 3-1: Manufacturer: syz [ 238.324515][ T814] usb 3-1: SerialNumber: syz [ 238.347241][ T814] usb 3-1: config 0 descriptor?? [ 238.419360][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.498'. [ 238.419386][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'. [ 238.419403][ T7496] netlink: 31 bytes leftover after parsing attributes in process `syz.4.498'. [ 238.419419][ T7496] netlink: 'syz.4.498': attribute type 3 has an invalid length. [ 238.419432][ T7496] netlink: 'syz.4.498': attribute type 2 has an invalid length. [ 238.419444][ T7496] netlink: 31 bytes leftover after parsing attributes in process `syz.4.498'. [ 238.419459][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.498'. [ 238.423965][ T814] usb 3-1: selecting invalid altsetting 2 [ 238.840927][ T5899] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 239.131211][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 239.171682][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.171790][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.265702][ T5899] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 239.265790][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.265810][ T5899] usb 5-1: Product: syz [ 239.265824][ T5899] usb 5-1: Manufacturer: syz [ 239.265839][ T5899] usb 5-1: SerialNumber: syz [ 239.301603][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.302523][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.397817][ T5899] usb 5-1: config 0 descriptor?? [ 239.437305][ T5899] kobil_sct 5-1:0.0: required endpoints missing [ 239.522906][ T814] get_1284_register timeout [ 239.539347][ C0] usb 3-1: async_complete: urb error -71 [ 239.544915][ C0] usb 3-1: async_complete: urb error -104 [ 239.545011][ C0] usb 3-1: async_complete: urb error -104 [ 239.545178][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 239.615619][ T814] usb 3-1: USB disconnect, device number 11 [ 239.718347][ T36] usb 5-1: USB disconnect, device number 10 [ 244.650718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 245.040727][ T7569] netlink: 164 bytes leftover after parsing attributes in process `syz.2.524'. [ 246.200860][ T6257] block nbd1: Possible stuck request ffff888026f55080: control (read@0,4096B). Runtime 120 seconds [ 246.780591][ T7554] syz.3.519 (7554): drop_caches: 2 [ 246.936131][ T7598] netlink: 228 bytes leftover after parsing attributes in process `syz.3.536'. [ 247.687688][ T7612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.538'. [ 249.119154][ T7641] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.552'. [ 249.630816][ T5811] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 250.340797][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 250.343326][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.343351][ T5811] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 250.344620][ T5811] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 250.344647][ T5811] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 250.344667][ T5811] usb 3-1: Manufacturer: syz [ 250.351230][ T5811] usb 3-1: config 0 descriptor?? [ 250.690797][ T104] block nbd2: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 120 seconds [ 252.362271][ T7040] usb 3-1: USB disconnect, device number 12 [ 252.530589][ T7719] program syz.0.583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.548147][ T7784] netlink: 240 bytes leftover after parsing attributes in process `syz.4.611'. [ 255.548172][ T7784] netlink: 'syz.4.611': attribute type 2 has an invalid length. [ 255.771167][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.771235][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.859258][ T7993] netlink: 248 bytes leftover after parsing attributes in process `syz.0.691'. [ 270.103514][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.694'. [ 271.234343][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 271.234379][ T8018] ksmbd: Unknown IPC event: 0, ignore. [ 271.264858][ T8020] netlink: 'syz.2.704': attribute type 12 has an invalid length. [ 271.264884][ T8020] netlink: 132 bytes leftover after parsing attributes in process `syz.2.704'. [ 272.359561][ T8031] libceph: resolve '0..' (ret=-3): failed [ 273.187262][ T8054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.712'. [ 273.314533][ T8055] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 274.093034][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 274.093057][ T8059] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 275.062057][ T8079] libceph: resolve '0..' (ret=-3): failed [ 275.774519][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 275.774540][ T8092] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 276.461163][ T36] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 277.092122][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 277.097365][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.097392][ T36] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 277.134012][ T36] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 277.134044][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.134063][ T36] usb 5-1: Product: syz [ 277.134077][ T36] usb 5-1: Manufacturer: syz [ 277.134091][ T36] usb 5-1: SerialNumber: syz [ 277.185565][ T36] usb 5-1: config 0 descriptor?? [ 277.463980][ T6257] block nbd1: Possible stuck request ffff888026f55080: control (read@0,4096B). Runtime 150 seconds [ 278.760351][ T5899] usb 5-1: USB disconnect, device number 11 [ 280.241007][ T8159] netlink: 164 bytes leftover after parsing attributes in process `syz.3.755'. [ 281.332729][ T104] block nbd2: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 150 seconds [ 281.526616][ T8167] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 281.627005][ T8167] team0: Device ipvlan1 failed to register rx_handler [ 284.582759][ T8211] netlink: 'syz.0.779': attribute type 29 has an invalid length. [ 284.639268][ T8211] netlink: 'syz.0.779': attribute type 29 has an invalid length. [ 286.079235][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 286.079253][ T37] audit: type=1326 audit(1776624631.669:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52852ac819 code=0x7ffc0000 [ 286.079805][ T37] audit: type=1326 audit(1776624631.669:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52852ac819 code=0x7ffc0000 [ 286.079847][ T37] audit: type=1326 audit(1776624631.669:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f52852ac819 code=0x7ffc0000 [ 286.080133][ T37] audit: type=1326 audit(1776624631.669:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52852ac819 code=0x7ffc0000 [ 286.080802][ T37] audit: type=1326 audit(1776624631.669:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52852ac819 code=0x7ffc0000 [ 286.081187][ T37] audit: type=1326 audit(1776624631.679:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52852ac819 code=0x7ffc0000 [ 286.081517][ T37] audit: type=1326 audit(1776624631.669:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f528526d04e code=0x7ffc0000 [ 286.082849][ T37] audit: type=1326 audit(1776624631.679:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f528526d04e code=0x7ffc0000 [ 286.084214][ T37] audit: type=1326 audit(1776624631.679:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f528526d04e code=0x7ffc0000 [ 286.085570][ T37] audit: type=1326 audit(1776624631.679:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8251 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f528526d04e code=0x7ffc0000 [ 286.798437][ T8268] netlink: 'syz.4.803': attribute type 13 has an invalid length. [ 286.798461][ T8268] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.803'. [ 286.869556][ T8251] ================================================================== [ 286.869571][ T8251] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 286.869592][ T8251] Read of size 1 at addr ffff88802bef2200 by task syz.0.796/8251 [ 286.869604][ T8251] [ 286.869623][ T8251] CPU: 1 UID: 0 PID: 8251 Comm: syz.0.796 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 286.869638][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 286.869653][ T8251] Call Trace: [ 286.869659][ T8251] [ 286.869666][ T8251] dump_stack_lvl+0xe8/0x150 [ 286.869688][ T8251] print_address_description+0x55/0x1e0 [ 286.869709][ T8251] ? rt_spin_lock+0x83/0x400 [ 286.869722][ T8251] print_report+0x58/0x70 [ 286.869740][ T8251] kasan_report+0x117/0x150 [ 286.869767][ T8251] ? rt_spin_lock+0x83/0x400 [ 286.869781][ T8251] ? __wake_up_common_lock+0x2f/0x1e0 [ 286.869796][ T8251] __kasan_check_byte+0x2a/0x40 [ 286.869815][ T8251] lock_acquire+0x84/0x350 [ 286.869834][ T8251] rt_spin_lock+0x83/0x400 [ 286.869846][ T8251] ? __wake_up_common_lock+0x2f/0x1e0 [ 286.869860][ T8251] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 286.869873][ T8251] ? __pfx_rt_spin_lock+0x10/0x10 [ 286.869885][ T8251] ? rt_spin_unlock+0x14f/0x200 [ 286.869898][ T8251] ? rt_spin_unlock+0x160/0x200 [ 286.869911][ T8251] __wake_up_common_lock+0x2f/0x1e0 [ 286.869927][ T8251] snd_pcm_stop+0x428/0x550 [ 286.869946][ T8251] loopback_trigger+0x11ff/0x1cf0 [ 286.869978][ T8251] snd_pcm_start+0x43d/0x5d0 [ 286.869995][ T8251] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 286.870019][ T8251] ? __pfx_interleaved_copy+0x10/0x10 [ 286.870038][ T8251] ? __pfx_default_write_copy+0x10/0x10 [ 286.870059][ T8251] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 286.870076][ T8251] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 286.870094][ T8251] ? rt_mutex_slowunlock+0x1cb/0x300 [ 286.870106][ T8251] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 286.870121][ T8251] ? snd_pcm_oss_write3+0x191/0x300 [ 286.870141][ T8251] snd_pcm_oss_write3+0x1ab/0x300 [ 286.870161][ T8251] snd_pcm_oss_write2+0x2c2/0x440 [ 286.870181][ T8251] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 286.870198][ T8251] ? rt_spin_unlock+0x14f/0x200 [ 286.870212][ T8251] ? rt_spin_unlock+0x160/0x200 [ 286.870225][ T8251] snd_pcm_oss_sync1+0x180/0x520 [ 286.870241][ T8251] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 286.870253][ T8251] ? __pfx_default_wake_function+0x10/0x10 [ 286.870272][ T8251] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 286.870289][ T8251] ? __asan_memset+0x22/0x50 [ 286.870306][ T8251] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 286.870321][ T8251] snd_pcm_oss_sync+0xab2/0xfc0 [ 286.870343][ T8251] snd_pcm_oss_release+0x102/0x250 [ 286.870362][ T8251] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 286.870380][ T8251] __fput+0x461/0xa70 [ 286.870399][ T8251] task_work_run+0x1d9/0x270 [ 286.870417][ T8251] ? __pfx_task_work_run+0x10/0x10 [ 286.870436][ T8251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.870450][ T8251] exit_to_user_mode_loop+0xed/0x480 [ 286.870464][ T8251] ? rcu_is_watching+0x15/0xb0 [ 286.870482][ T8251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.870495][ T8251] do_syscall_64+0x33e/0xf80 [ 286.870512][ T8251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.870525][ T8251] ? clear_bhb_loop+0x40/0x90 [ 286.870541][ T8251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.870554][ T8251] RIP: 0033:0x7f52852ac819 [ 286.870580][ T8251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d [ 286.870580][ T8251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.870592][ T8251] RSP: 002b:00007ffcf3912b28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 286.870612][ T8251] RAX: 0000000000000000 RBX: 00007f5285527da0 RCX: 00007f52852ac819 [ 286.870621][ T8251] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 286.870629][ T8251] RBP: 00007f5285527da0 R08: 0000000000000006 R09: 0000000000000000 [ 286.870638][ T8251] R10: 00007f5285527cb0 R11: 0000000000000246 R12: 0000000000045f5e [ 286.870650][ T8251] R13: 00007f528552609c R14: 0000000000045ce9 R15: 00007f5285526090 [ 286.870665][ T8251] [ 286.870670][ T8251] [ 286.870678][ T8251] Allocated by task 8252: [ 286.870686][ T8251] kasan_save_track+0x3e/0x80 [ 286.870703][ T8251] __kasan_kmalloc+0x93/0xb0 [ 286.870721][ T8251] __kmalloc_cache_noprof+0x3a6/0x690 [ 286.870741][ T8251] snd_pcm_attach_substream+0x5b7/0xb20 [ 286.870753][ T8251] snd_pcm_open_substream+0xbd/0x2420 [ 286.870769][ T8251] snd_pcm_oss_open+0xf90/0x1c20 [ 286.870785][ T8251] chrdev_open+0x4d0/0x5f0 [ 286.870796][ T8251] do_dentry_open+0x83d/0x13e0 [ 286.870810][ T8251] vfs_open+0x3b/0x350 [ 286.870822][ T8251] path_openat+0x2e43/0x38a0 [ 286.870839][ T8251] do_file_open+0x23e/0x4a0 [ 286.870856][ T8251] do_sys_openat2+0x113/0x200 [ 286.870870][ T8251] __x64_sys_openat+0x138/0x170 [ 286.870884][ T8251] do_syscall_64+0x15f/0xf80 [ 286.870899][ T8251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.870911][ T8251] [ 286.870914][ T8251] Freed by task 8252: [ 286.870921][ T8251] kasan_save_track+0x3e/0x80 [ 286.870938][ T8251] kasan_save_free_info+0x46/0x50 [ 286.870952][ T8251] __kasan_slab_free+0x5c/0x80 [ 286.870976][ T8251] kfree+0x1c5/0x6c0 [ 286.870991][ T8251] snd_pcm_detach_substream+0x1c8/0x270 [ 286.871003][ T8251] snd_pcm_oss_release+0x184/0x250 [ 286.871020][ T8251] __fput+0x461/0xa70 [ 286.871035][ T8251] task_work_run+0x1d9/0x270 [ 286.871049][ T8251] exit_to_user_mode_loop+0xed/0x480 [ 286.871062][ T8251] do_syscall_64+0x33e/0xf80 [ 286.871077][ T8251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.871089][ T8251] [ 286.871092][ T8251] The buggy address belongs to the object at ffff88802bef2000 [ 286.871092][ T8251] which belongs to the cache kmalloc-2k of size 2048 [ 286.871104][ T8251] The buggy address is located 512 bytes inside of [ 286.871104][ T8251] freed 2048-byte region [ffff88802bef2000, ffff88802bef2800) [ 286.871118][ T8251] [ 286.871122][ T8251] The buggy address belongs to the physical page: [ 286.871137][ T8251] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bef0 [ 286.871150][ T8251] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 286.871161][ T8251] flags: 0x80000000000040(head|node=0|zone=1) [ 286.871177][ T8251] page_type: f5(slab) [ 286.871190][ T8251] raw: 0080000000000040 ffff88801a024000 dead000000000100 dead000000000122 [ 286.871202][ T8251] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 286.871214][ T8251] head: 0080000000000040 ffff88801a024000 dead000000000100 dead000000000122 [ 286.871226][ T8251] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 286.871239][ T8251] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 286.871251][ T8251] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 286.871259][ T8251] page dumped because: kasan: bad access detected [ 286.871274][ T8251] page_owner tracks the page as allocated [ 286.871279][ T8251] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15128173459, free_ts 0 [ 286.871305][ T8251] post_alloc_hook+0x231/0x280 [ 286.871325][ T8251] get_page_from_freelist+0x27c8/0x2840 [ 286.871339][ T8251] __alloc_frozen_pages_noprof+0x18d/0x380 [ 286.871353][ T8251] allocate_slab+0x77/0x660 [ 286.871368][ T8251] refill_objects+0x33c/0x3d0 [ 286.871381][ T8251] __pcs_replace_empty_main+0x373/0x720 [ 286.871396][ T8251] __kmalloc_cache_noprof+0x44e/0x690 [ 286.871417][ T8251] usb_create_ep_devs+0x59/0x230 [ 286.871438][ T8251] usb_set_configuration+0x1bc7/0x2110 [ 286.871459][ T8251] usb_generic_driver_probe+0x8d/0x150 [ 286.871482][ T8251] usb_probe_device+0x1c4/0x3b0 [ 286.871499][ T8251] really_probe+0x267/0xaf0 [ 286.871514][ T8251] __driver_probe_device+0x18c/0x320 [ 286.871528][ T8251] driver_probe_device+0x4f/0x240 [ 286.871543][ T8251] __device_attach_driver+0x279/0x430 [ 286.871558][ T8251] bus_for_each_drv+0x25b/0x2f0 [ 286.871576][ T8251] page_owner free stack trace missing [ 286.871581][ T8251] [ 286.871584][ T8251] Memory state around the buggy address: [ 286.871592][ T8251] ffff88802bef2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.871601][ T8251] ffff88802bef2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.871609][ T8251] >ffff88802bef2200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.871616][ T8251] ^ [ 286.871622][ T8251] ffff88802bef2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.871630][ T8251] ffff88802bef2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.871637][ T8251] ================================================================== [ 287.220398][ T8251] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 287.220420][ T8251] CPU: 1 UID: 0 PID: 8251 Comm: syz.0.796 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 287.220443][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 287.220454][ T8251] Call Trace: [ 287.220463][ T8251] [ 287.220471][ T8251] vpanic+0x56c/0xa60 [ 287.220496][ T8251] ? __pfx_vpanic+0x10/0x10 [ 287.220512][ T8251] ? __pfx___schedule+0x10/0x10 [ 287.220537][ T8251] panic+0xc5/0xd0 [ 287.220554][ T8251] ? __pfx_panic+0x10/0x10 [ 287.220573][ T8251] ? preempt_schedule_common+0x82/0xd0 [ 287.220597][ T8251] ? rt_spin_lock+0x83/0x400 [ 287.220614][ T8251] check_panic_on_warn+0x89/0xb0 [ 287.220638][ T8251] ? rt_spin_lock+0x83/0x400 [ 287.220656][ T8251] end_report+0x73/0x170 [ 287.220679][ T8251] ? rt_spin_lock+0x83/0x400 [ 287.220693][ T8251] kasan_report+0x128/0x150 [ 287.220720][ T8251] ? rt_spin_lock+0x83/0x400 [ 287.220738][ T8251] ? __wake_up_common_lock+0x2f/0x1e0 [ 287.220757][ T8251] __kasan_check_byte+0x2a/0x40 [ 287.220780][ T8251] lock_acquire+0x84/0x350 [ 287.220804][ T8251] rt_spin_lock+0x83/0x400 [ 287.220818][ T8251] ? __wake_up_common_lock+0x2f/0x1e0 [ 287.220836][ T8251] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 287.220855][ T8251] ? __pfx_rt_spin_lock+0x10/0x10 [ 287.220871][ T8251] ? rt_spin_unlock+0x14f/0x200 [ 287.220891][ T8251] ? rt_spin_unlock+0x160/0x200 [ 287.220909][ T8251] __wake_up_common_lock+0x2f/0x1e0 [ 287.220941][ T8251] snd_pcm_stop+0x428/0x550 [ 287.220966][ T8251] loopback_trigger+0x11ff/0x1cf0 [ 287.221000][ T8251] snd_pcm_start+0x43d/0x5d0 [ 287.221025][ T8251] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 287.221058][ T8251] ? __pfx_interleaved_copy+0x10/0x10 [ 287.221085][ T8251] ? __pfx_default_write_copy+0x10/0x10 [ 287.221115][ T8251] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 287.221140][ T8251] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 287.221171][ T8251] ? rt_mutex_slowunlock+0x1cb/0x300 [ 287.221189][ T8251] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 287.221209][ T8251] ? snd_pcm_oss_write3+0x191/0x300 [ 287.221237][ T8251] snd_pcm_oss_write3+0x1ab/0x300 [ 287.221265][ T8251] snd_pcm_oss_write2+0x2c2/0x440 [ 287.221293][ T8251] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 287.221319][ T8251] ? rt_spin_unlock+0x14f/0x200 [ 287.221338][ T8251] ? rt_spin_unlock+0x160/0x200 [ 287.221356][ T8251] snd_pcm_oss_sync1+0x180/0x520 [ 287.221377][ T8251] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 287.221395][ T8251] ? __pfx_default_wake_function+0x10/0x10 [ 287.221420][ T8251] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 287.221441][ T8251] ? __asan_memset+0x22/0x50 [ 287.221462][ T8251] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 287.221481][ T8251] snd_pcm_oss_sync+0xab2/0xfc0 [ 287.221508][ T8251] snd_pcm_oss_release+0x102/0x250 [ 287.221533][ T8251] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 287.221557][ T8251] __fput+0x461/0xa70 [ 287.221584][ T8251] task_work_run+0x1d9/0x270 [ 287.221608][ T8251] ? __pfx_task_work_run+0x10/0x10 [ 287.221632][ T8251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.221651][ T8251] exit_to_user_mode_loop+0xed/0x480 [ 287.221670][ T8251] ? rcu_is_watching+0x15/0xb0 [ 287.221691][ T8251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.221708][ T8251] do_syscall_64+0x33e/0xf80 [ 287.221729][ T8251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.221746][ T8251] ? clear_bhb_loop+0x40/0x90 [ 287.221765][ T8251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.221782][ T8251] RIP: 0033:0x7f52852ac819 [ 287.221799][ T8251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.221815][ T8251] RSP: 002b:00007ffcf3912b28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 287.221834][ T8251] RAX: 0000000000000000 RBX: 00007f5285527da0 RCX: 00007f52852ac819 [ 287.221846][ T8251] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 287.221857][ T8251] RBP: 00007f5285527da0 R08: 0000000000000006 R09: 0000000000000000 [ 287.221868][ T8251] R10: 00007f5285527cb0 R11: 0000000000000246 R12: 0000000000045f5e [ 287.221878][ T8251] R13: 00007f528552609c R14: 0000000000045ce9 R15: 00007f5285526090 [ 287.221896][ T8251] [ 287.222552][ T8251] Kernel Offset: disabled