last executing test programs: 2m44.592376698s ago: executing program 3 (id=4675): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) 2m43.88064583s ago: executing program 3 (id=4677): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) syz_emit_ethernet(0x68, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x32, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [], "fb36"}}}}}}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m43.719085831s ago: executing program 1 (id=4680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) listen(r4, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(r5, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = memfd_secret(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1b, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000100010018110000", @ANYRES32, @ANYBLOB="0000000000a4d500b707020014000000b703000000bf09000000000000550901200000000095000000006c90a632000c001812000000000000000000d6488f9fd1ffa0cbd9dd8a5acef146", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000700000072632000f0ffffffbf91000000000000b702000001000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xf, 0xba, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x3, 0x3, 0x2, 0x5}, {0x4, 0x4, 0xc, 0xb}, {0x3, 0x5, 0xb, 0x7}], 0x10, 0x5}, 0x90) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x58, 0x0}}], 0x6c00, 0x0) 2m43.708168099s ago: executing program 3 (id=4681): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}}, 0x0) 2m40.431185607s ago: executing program 3 (id=4685): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x5]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @noop, @rr={0x7, 0x17, 0xca, [@dev, @remote, @multicast1, @private=0xa010102, @local]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_setup(0x4, &(0x7f00000004c0)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000900)="21d46c4b2acdc4844555e1c5da463d7a8f97ff6f05bfc40c905444c3f684c41ecdb491b92f20e146c3c5bfa9d0c9aefecf0c7139c2230e09404205c83564a680ee", 0x41}], 0x1, 0x0, 0x0, 0x40005}}, {{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000a00)="f7e0a10dcb2e34af115859dbdd8d2228c8bb80cc67c20483772f6faf216ee4f9df033ac2ec8014", 0x27}, {&(0x7f0000000a40)="fcbaba1f", 0x4}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="58da86e7482ecc0fcd5d154f3376fa0c3d360903e63691d5f07af03f4df7427d7303cf1d448759bded04be01c375a9088a437dc07689b03cb2869afe3d33a7430b2fb2c1af51b99acf6d975ccada2d35654cf1a158446482a4c91ad73b6786e635324572eddef074b2dbfeb3e16d5954355778399b3393c4d7a182cd6c7a7e29ba991a2e7773662a75bd1d15f0f29cd0fb73e99aa8577599074d9acf3c8d13bbbc7384bd1a67587a638b42954dafd7b2b605a56cb0f1433bee73c02ae5a4525e05fc80257cddec0bcd808872d257a7a058a74940755f6c68da2fbe"], 0x18}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000b80)="f64bcb487aabe5957488147e2494af443fcd0f306c7336ed31871b9bbf787530f955803f05b7859576744e43a6ab87e989159fc487ca828a6ba181df762ce03908c91873fda2729820fd27a5320ee3958442d5ea82a861aafb60b0fc7140ba5cf05d099d36e3a8ac995d9d25270c384109375ca3f5efdbd26de1f1b1d0516f7f81c85ed9c4de2db17adcc6df8dd5aca6c953dbc0dbc96767670b2ea4c254e1937800aeb995905364f4f501d2b1e3cedd", 0xb0}, {&(0x7f0000000c40)="0f147bcc3b461d9d9fcdc2fa256d0af9cff67d66cfd7ad9aaa9712580b2c37b554853641fb5ba478fdc7a11cff8a50a8a549f3de4a4246bd2fd987105a9ed5ac832ffc7927b990faedfa19aeab3b030ac1e4f7bba36da73cc684911a4598bf9d2f4928ed391e6a49654a1451c45007bee0042b3533940585682fa3523fca598bc63c08ae741cca07d03e16c2fbdbf9a003d864034ba215f9404b3a112a95df110292ac8b0c4c2a6a1ae84a6549815ed8a1131aedeedcf0729fe116922b3566f41a014bb636d96aed5fac194a4d", 0xcd}, {&(0x7f0000000d40)="ce641c0f4c9bad8ea8a9085248df9b27d570f921ea9754a79cfcd78e27eeb67c48cb3c8ca9893c777ace8f1865d9cee17394dbcdcdf48bf470d771a8db6d5d7e9005983fea08fbaf56ceeea441e833c9a39fbf2c659ee41ed46cbb21624b6f3c7d89eadcc1e968d91e45a3357af2506bbd414e9cd610b15f67a41c027b4dec8cc26c780e36ec1c999a7a482d1ff627bc32b8c498c96e", 0x96}, {&(0x7f0000000e00)="d8ddeaf62325e1c6f705a8b9a1e06ecddc7a8401e5bfebb8c00766f72014190a9534a00df9e919e7e92bc66c39063383122ba4984a78172946ecaf3ff332603eae73eb087660278bad7742ff9561a88eae988fa417918e45144a081f75f88c311856478c81b6a5f9d186e12cab28ae930b3302d4620f351e99e7a67aee1c8d04d58a415b11f80e2478e39242e8bffadaabe06d1369c4a0fff12de788093939e9ba89eb09c3e26c18573d88672b91b11c7c0fb3b212ca017380e16aadcbfaad7fa73e6d2509470c8e81cc71a64165c3aca91861eab5262f1847f15244cc180c9b722637ae7aa00a014d95b390", 0xec}, {&(0x7f0000000f00)="114b73f90cb51bfba03e39b4555389bb675d746e9b29f0f6b3af1e937076094573ff31e8172ed87967fc3800035e19dd356ff9790f528e6434ac9e52a93dde44f292a68f3ee2a66d48e3625280fd34f32d9cc0d7df9b5539fb2102901ce730f9e4cfc9b983c7138f71b49bb06169dfc7f3a3ff5ce0abd67293714a7e9c24fb60bcd56b", 0x83}, {&(0x7f0000000fc0)="0c7de20280fafdf6b3f9eca9ce2edecd02120d829c324990e75cd83fe7b4d63b23faa1d103f0df6c52d9e225102aee714265b319de1bc3797bd91a004db4206fb7fd6e640d7362d118f15d35c75c2322a999668f902e055b59a35787fa864dc1301d7d88a3b609fbe901c08437404fa0316ffb55d39adb814492da2a8b8c107c5c149edd1b63a71cc0825a82f34e676a34ac01387e23bd5102df8a5502b557cef3939672db84325595ddb12f209333876a560251d9f9ea6b373823d9a4736c5fbd4ba6834975635a9d46e80e9522dd2b6f69dac1f2983f9c97cf6e76cae0ce075887f2bfba", 0xe5}, {&(0x7f00000010c0)="c31cd1c1babfdca9a9da87765d555141d8aca36e270042a0978f329ad8419eb03d06f5f175788ffbfff4660dc8ed34042a360b184d677956e52c58fa31db257cf0250a4b2aef2a3663afa8181403854014e1877ab5b4418000887afe22fe91bb05adf27147da35d715b1cff4453a1e8a7fabfd91379cbf3257c7324d360b1c22e85e79e1c9569845d05495611ae59ec9f6c3aca0f14ba914413060293c5ca414ba2d4d6316954ff3e9746cdc65828e39cddcff6a36a560", 0xb7}, {&(0x7f0000001180)="2de3a32befb8fe8187c8c328bf9eda821462e482c597184187ca900a485ab6839df4a31ec60378d3ab491052ee0d6abe983b36d94175ddae915b08a1d8f8260fa7137648ecc858ff2ce2e46509befd0b3711532a4108fd371b03aad1edb52310d7bf7760b36b1f0d1b9de73752d004cc3bd1ed817f7cf530999b80b45b356948d8c86048eb68f858d2ccf02d02ce90e04d5b8a4ec25675d4f5d404aeb73ec6d46343c8756d640708", 0xa8}, {&(0x7f0000001240)="966018f293fac47cbe228c1bc2835d0759bf4254f8b350ef4331d1836c55cbc0166ac2446549ce7f809b037ec09d6095a091bb3f71269851f951f1a2d8e8bccae0bcec79f54a3f4400d51feed42d9b18360407f157d87a4fc753a72b2b12c7c75ac809cbd237bd11a986495c5609824f10e9efbb580bb719ee7eae99d9c5bf0ae0ab7ac9b2d8718e7f9f0a9552fe36d621cf4b21099bb49edef601f7383185aa6f0b0ca5284825373399eea8e2552e983b33fd51937d13958680d6e6af663b96dd59580b2662b0b962cceba342e7c0105496101cab4f84", 0xd7}], 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="2c000000000000000100000809cc764d9601000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x88, 0x800}}], 0x3, 0x20000010) 2m40.164913454s ago: executing program 1 (id=4686): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) write(r3, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f00000001c0)=0xd0) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f00000001c0)=0xd0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000100)) 2m39.075817208s ago: executing program 4 (id=4690): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) 2m39.004467975s ago: executing program 1 (id=4691): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) syz_emit_ethernet(0x69, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x33, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [], "fb36ee"}}}}}}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m38.943723093s ago: executing program 4 (id=4692): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) syz_emit_ethernet(0x85, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x4f, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x32}]}], "fb36eeca6fad50b375a22a584d16ca"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m38.897124461s ago: executing program 3 (id=4693): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x0, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x112, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x6, 0x12f, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 2m38.761907218s ago: executing program 4 (id=4696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) listen(r4, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(r5, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = memfd_secret(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1b, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000100010018110000", @ANYRES32, @ANYBLOB="0000000000a4d500b707020014000000b703000000bf09000000000000550901200000000095000000006c90a632000c001812000000000000000000d6488f9fd1ffa0cbd9dd8a5acef146", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000700000072632000f0ffffffbf91000000000000b702000001000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xf, 0xba, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x3, 0x3, 0x2, 0x5}, {0x4, 0x4, 0xc, 0xb}, {0x3, 0x5, 0xb, 0x7}], 0x10, 0x5}, 0x90) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x58, 0x0}}], 0x6c00, 0x0) 2m38.624299419s ago: executing program 3 (id=4697): syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="186e649ce5000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(r0, 0xe, &(0x7f0000000140)={0x20c, 0x81}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffb) sendfile(r5, r6, 0x0, 0x1000000201005) r7 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0) r8 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) sendfile(r7, r8, 0x0, 0x1000000201005) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m37.535212523s ago: executing program 4 (id=4700): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x8d}, {0xa, [{@none, 0x9, 0x0, 0x7c, "8628bc", 0x200}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x48, 0xc5, 0x3f, "d81fa6", 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x7f, 0x1, "9409fa", 0x9}, {@none, 0x8, 0x9, 0x3f, "c61a96", 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0xc3, 0x20, "a78da6", 0x1000}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x2, 0xd5, "a75106", 0x7}, {@any, 0x8f, 0x8, 0x2, "03616d", 0x1000}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4f, 0x40, 0xfa, "9914e0", 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x3, 0x80, "b3064a", 0x401}, {@any, 0xfa, 0x8, 0x2, "c6c5a6", 0x7}]}}}, 0x90) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x2d, 0x8}, {0x9, 0xff81, 0x1, 0x6}}]}}, 0x15) r0 = syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000a40)={0x0, 'macsec0\x00'}) brk(0x6) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10, r0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040b0b01c9004bddfc525399"], 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) 2m37.496345498s ago: executing program 1 (id=4701): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f00000001c0)=0xd0) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f00000001c0)=0xd0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000100)) 2m36.421481891s ago: executing program 4 (id=4702): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x2}}}, 0x7) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x8d}, {0xa, [{@none, 0x9, 0x0, 0x7c, "8628bc", 0x200}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x48, 0xc5, 0x3f, "d81fa6", 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x7f, 0x1, "9409fa", 0x9}, {@none, 0x8, 0x9, 0x3f, "c61a96", 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0xc3, 0x20, "a78da6", 0x1000}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x2, 0xd5, "a75106", 0x7}, {@any, 0x8f, 0x8, 0x2, "03616d", 0x1000}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4f, 0x40, 0xfa, "9914e0", 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x3, 0x80, "b3064a", 0x401}, {@any, 0xfa, 0x8, 0x2, "c6c5a6", 0x7}]}}}, 0x90) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x2d, 0x8}, {0x9, 0xff81, 0x1, 0x6}}]}}, 0x15) r0 = syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000a40)={0x0, 'macsec0\x00'}) brk(0x6) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10, r0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x22}, @l2cap_cid_signaling={{0x1e}, [@l2cap_conf_req={{0x4, 0x2, 0x1a}, {0x800, 0x0, [@l2cap_conf_efs={0x6, 0x10, {0x4, 0x1, 0x7, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0xb}]}}]}}, 0x27) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) 2m36.279971536s ago: executing program 1 (id=4704): syz_io_uring_setup(0xfa, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2}, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff0f, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5b2b4293}], 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x10]}}, &(0x7f0000000180)=""/129, 0x3d, 0x81, 0x1}, 0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) unshare(0x400) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x100000004, 0x0) socket$netlink(0x10, 0x3, 0xf) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0xf400) socket$netlink(0x10, 0x3, 0x0) 2m34.939227898s ago: executing program 4 (id=4705): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r2, 0x0, 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}], [], 0x6b}}) lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) 2m34.686062102s ago: executing program 1 (id=4708): socket(0x25, 0x2, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01ee00000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="2e003300d00000000802110000010802110000005050505050500000000425030000003e", @ANYRES8, @ANYRES16=r1, @ANYRESHEX=r2], 0x4c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0xffffffffffffffe8}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090248000101000000090400000202020000052406000005240000000d240f0100000000feffffffff042401"], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = add_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000002b40)='n', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f0000002b80)=""/4100, 0x1004) keyctl$update(0x2, r6, &(0x7f0000000000)='p', 0x1) r7 = io_uring_setup(0x7e7, &(0x7f0000000500)={0x0, 0x40, 0x0, 0xfffffffd, 0x4, 0x0, r5}) close(r7) mkdir(&(0x7f0000000180)='./file1\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 5.071783536s ago: executing program 2 (id=5059): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) 4.952058663s ago: executing program 2 (id=5060): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x86, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x2, 0x0, 0x0, 0x0, 0x597], [0x1]], '\x00', [{0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {0xfffffffe, 0x1000}, {}, {0x0, 0x4000}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x45e, 0x71d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x50, 0xe2, [{{0x9, 0x4, 0x0, 0xff, 0x0, 0x3, 0x1, 0x1, 0xa7, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x73d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xeb, 0x6, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0x0, 0x7}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x7f, 0x0, 0x1f, 0x8, 0x5}, 0xf, &(0x7f0000000740)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x20, 0x3, 0x1}]}, 0x2, [{0x2, &(0x7f0000000780)=@string={0x2}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x458}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x21, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd4}]}, {0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x44}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x4001}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_getaddr={0x20, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x3}, [@IFA_RT_PRIORITY={0x6}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.928663825s ago: executing program 2 (id=5065): r0 = socket$rds(0x15, 0x5, 0x0) accept(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 1.725729263s ago: executing program 0 (id=5066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000996000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/111) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 686.563189ms ago: executing program 0 (id=5067): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) 600.141447ms ago: executing program 0 (id=5068): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x0, 0x5, 0x0, 0x5]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @noop, @rr={0x7, 0x17, 0xca, [@dev, @remote, @multicast1, @private=0xa010102, @local]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_setup(0x4, &(0x7f00000004c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000900)="21d46c4b2acdc4844555e1c5da463d7a8f97ff6f05bfc40c905444c3f684c41ecdb491b92f20e146c3c5bfa9d0c9aefecf0c7139c2230e09404205c83564a680ee", 0x41}], 0x1, 0x0, 0x0, 0x40005}}, {{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000a00)="f7e0a10dcb2e34af115859dbdd8d2228c8bb80cc67c20483772f6faf216ee4f9df033ac2ec8014", 0x27}, {&(0x7f0000000a40)="fcbaba1f", 0x4}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="58da86e7482ecc0fcd5d154f3376fa0c3d360903e63691d5f07af03f4df7427d7303cf1d448759bded04be01c375a9088a437dc07689b03cb2869afe3d33a7430b2fb2c1af51b99acf6d975ccada2d35654cf1a158446482a4c91ad73b6786e635324572eddef074b2dbfeb3e16d5954355778399b3393c4d7a182cd6c7a7e29ba991a2e7773662a75bd1d15f0f29cd0fb73e99aa8577599074d9acf3c8d13bbbc7384bd1a67587a638b42954dafd7b2b605a56cb0f1433bee73c02ae5a4525e05fc80257cddec0bcd808872d257a7a058a74940755f6c68da2fbe"], 0x18}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000b80)="f64bcb487aabe5957488147e2494af443fcd0f306c7336ed31871b9bbf787530f955803f05b7859576744e43a6ab87e989159fc487ca828a6ba181df762ce03908c91873fda2729820fd27a5320ee3958442d5ea82a861aafb60b0fc7140ba5cf05d099d36e3a8ac995d9d25270c384109375ca3f5efdbd26de1f1b1d0516f7f81c85ed9c4de2db17adcc6df8dd5aca6c953dbc0dbc96767670b2ea4c254e1937800aeb995905364f4f501d2b1e3cedd", 0xb0}, {&(0x7f0000000c40)="0f147bcc3b461d9d9fcdc2fa256d0af9cff67d66cfd7ad9aaa9712580b2c37b554853641fb5ba478fdc7a11cff8a50a8a549f3de4a4246bd2fd987105a9ed5ac832ffc7927b990faedfa19aeab3b030ac1e4f7bba36da73cc684911a4598bf9d2f4928ed391e6a49654a1451c45007bee0042b3533940585682fa3523fca598bc63c08ae741cca07d03e16c2fbdbf9a003d864034ba215f9404b3a112a95df110292ac8b0c4c2a6a1ae84a6549815ed8a1131aedeedcf0729fe116922b3566f41a014bb636d96aed5fac194a4d", 0xcd}, {&(0x7f0000000d40)="ce641c0f4c9bad8ea8a9085248df9b27d570f921ea9754a79cfcd78e27eeb67c48cb3c8ca9893c777ace8f1865d9cee17394dbcdcdf48bf470d771a8db6d5d7e9005983fea08fbaf56ceeea441e833c9a39fbf2c659ee41ed46cbb21624b6f3c7d89eadcc1e968d91e45a3357af2506bbd414e9cd610b15f67a41c027b4dec8cc26c780e36ec1c999a7a482d1ff627bc32b8c498c96e", 0x96}, {&(0x7f0000000e00)="d8ddeaf62325e1c6f705a8b9a1e06ecddc7a8401e5bfebb8c00766f72014190a9534a00df9e919e7e92bc66c39063383122ba4984a78172946ecaf3ff332603eae73eb087660278bad7742ff9561a88eae988fa417918e45144a081f75f88c311856478c81b6a5f9d186e12cab28ae930b3302d4620f351e99e7a67aee1c8d04d58a415b11f80e2478e39242e8bffadaabe06d1369c4a0fff12de788093939e9ba89eb09c3e26c18573d88672b91b11c7c0fb3b212ca017380e16aadcbfaad7fa73e6d2509470c8e81cc71a64165c3aca91861eab5262f1847f15244cc180c9b722637ae7aa00a014d95b390", 0xec}, {&(0x7f0000000f00)="114b73f90cb51bfba03e39b4555389bb675d746e9b29f0f6b3af1e937076094573ff31e8172ed87967fc3800035e19dd356ff9790f528e6434ac9e52a93dde44f292a68f3ee2a66d48e3625280fd34f32d9cc0d7df9b5539fb2102901ce730f9e4cfc9b983c7138f71b49bb06169dfc7f3a3ff5ce0abd67293714a7e9c24fb60bcd56b", 0x83}, {&(0x7f0000000fc0)="0c7de20280fafdf6b3f9eca9ce2edecd02120d829c324990e75cd83fe7b4d63b23faa1d103f0df6c52d9e225102aee714265b319de1bc3797bd91a004db4206fb7fd6e640d7362d118f15d35c75c2322a999668f902e055b59a35787fa864dc1301d7d88a3b609fbe901c08437404fa0316ffb55d39adb814492da2a8b8c107c5c149edd1b63a71cc0825a82f34e676a34ac01387e23bd5102df8a5502b557cef3939672db84325595ddb12f209333876a560251d9f9ea6b373823d9a4736c5fbd4ba6834975635a9d46e80e9522dd2b6f69dac1f2983f9c97cf6e76cae0ce075887f2bfba", 0xe5}, {&(0x7f00000010c0)="c31cd1c1babfdca9a9da87765d555141d8aca36e270042a0978f329ad8419eb03d06f5f175788ffbfff4660dc8ed34042a360b184d677956e52c58fa31db257cf0250a4b2aef2a3663afa8181403854014e1877ab5b4418000887afe22fe91bb05adf27147da35d715b1cff4453a1e8a7fabfd91379cbf3257c7324d360b1c22e85e79e1c9569845d05495611ae59ec9f6c3aca0f14ba914413060293c5ca414ba2d4d6316954ff3e9746cdc65828e39cddcff6a36a560", 0xb7}, {&(0x7f0000001180)="2de3a32befb8fe8187c8c328bf9eda821462e482c597184187ca900a485ab6839df4a31ec60378d3ab491052ee0d6abe983b36d94175ddae915b08a1d8f8260fa7137648ecc858ff2ce2e46509befd0b3711532a4108fd371b03aad1edb52310d7bf7760b36b1f0d1b9de73752d004cc3bd1ed817f7cf530999b80b45b356948d8c86048eb68f858d2ccf02d02ce90e04d5b8a4ec25675d4f5d404aeb73ec6d46343c8756d640708", 0xa8}, {&(0x7f0000001240)="966018f293fac47cbe228c1bc2835d0759bf4254f8b350ef4331d1836c55cbc0166ac2446549ce7f809b037ec09d6095a091bb3f71269851f951f1a2d8e8bccae0bcec79f54a3f4400d51feed42d9b18360407f157d87a4fc753a72b2b12c7c75ac809cbd237bd11a986495c5609824f10e9efbb580bb719ee7eae99d9c5bf0ae0ab7ac9b2d8718e7f9f0a9552fe36d621cf4b21099bb49edef601f7383185aa6f0b0ca5284825373399eea8e2552e983b33fd51937d13958680d6e6af663b96dd59580b2662b0b962cceba342e7c0105496101cab4f84", 0xd7}], 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="2c000000000000000100000809cc764d9601000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x88, 0x800}}], 0x3, 0x20000010) 531.771306ms ago: executing program 2 (id=5069): socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x20084054) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00', 0xffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) write$sndseq(r0, &(0x7f0000000300)=[{0x0, 0x93, 0x0, 0x0, @time={0xfffffffe, 0x1}, {}, {}, @result}], 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f0000000080)={0x0, 0x3, 0x0, "b800020000000000000000110fd3f1000000000000000000b700"}) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x400, 0x0, @loopback}, 0x1c) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 362.333489ms ago: executing program 2 (id=5070): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x0, 0x0, 0x9, [0x401, 0x5, 0x5]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @noop, @rr={0x7, 0x17, 0xca, [@dev, @remote, @multicast1, @private=0xa010102, @local]}]}}}}}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = dup(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000900)="21d46c4b2acdc4844555e1c5da463d7a8f97ff6f05bfc40c905444c3f684c41ecdb491b92f20e146c3c5bfa9d0c9aefecf0c7139c2230e09404205c83564a680ee", 0x41}], 0x1, 0x0, 0x0, 0x40005}}, {{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000a00)="f7e0a10dcb2e34af115859dbdd8d2228c8bb80cc67c20483772f6faf216ee4f9df033ac2ec8014", 0x27}, {&(0x7f0000000a40)="fcbaba1f", 0x4}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="58da86e7482ecc0fcd5d154f3376fa0c3d360903e63691d5f07af03f4df7427d7303cf1d448759bded04be01c375a9088a437dc07689b03cb2869afe3d33a7430b2fb2c1af51b99acf6d975ccada2d35654cf1a158446482a4c91ad73b6786e635324572eddef074b2dbfeb3e16d5954355778399b3393c4d7a182cd6c7a7e29ba991a2e7773662a75bd1d15f0f29cd0fb73e99aa8577599074d9acf3c8d13bbbc7384bd1a67587a638b42954dafd7b2b605a56cb0f1433bee73c02ae5a4525e05fc80257cddec0bcd808872d257a7a058a74940755f6c68da2fbe"], 0x18}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000b80)="f64bcb487aabe5957488147e2494af443fcd0f306c7336ed31871b9bbf787530f955803f05b7859576744e43a6ab87e989159fc487ca828a6ba181df762ce03908c91873fda2729820fd27a5320ee3958442d5ea82a861aafb60b0fc7140ba5cf05d099d36e3a8ac995d9d25270c384109375ca3f5efdbd26de1f1b1d0516f7f81c85ed9c4de2db17adcc6df8dd5aca6c953dbc0dbc96767670b2ea4c254e1937800aeb995905364f4f501d2b1e3cedd", 0xb0}, {&(0x7f0000000c40)="0f147bcc3b461d9d9fcdc2fa256d0af9cff67d66cfd7ad9aaa9712580b2c37b554853641fb5ba478fdc7a11cff8a50a8a549f3de4a4246bd2fd987105a9ed5ac832ffc7927b990faedfa19aeab3b030ac1e4f7bba36da73cc684911a4598bf9d2f4928ed391e6a49654a1451c45007bee0042b3533940585682fa3523fca598bc63c08ae741cca07d03e16c2fbdbf9a003d864034ba215f9404b3a112a95df110292ac8b0c4c2a6a1ae84a6549815ed8a1131aedeedcf0729fe116922b3566f41a014bb636d96aed5fac194a4d", 0xcd}, {&(0x7f0000000d40)="ce641c0f4c9bad8ea8a9085248df9b27d570f921ea9754a79cfcd78e27eeb67c48cb3c8ca9893c777ace8f1865d9cee17394dbcdcdf48bf470d771a8db6d5d7e9005983fea08fbaf56ceeea441e833c9a39fbf2c659ee41ed46cbb21624b6f3c7d89eadcc1e968d91e45a3357af2506bbd414e9cd610b15f67a41c027b4dec8cc26c780e36ec1c999a7a482d1ff627bc32b8c498c96e", 0x96}, {&(0x7f0000000e00)="d8ddeaf62325e1c6f705a8b9a1e06ecddc7a8401e5bfebb8c00766f72014190a9534a00df9e919e7e92bc66c39063383122ba4984a78172946ecaf3ff332603eae73eb087660278bad7742ff9561a88eae988fa417918e45144a081f75f88c311856478c81b6a5f9d186e12cab28ae930b3302d4620f351e99e7a67aee1c8d04d58a415b11f80e2478e39242e8bffadaabe06d1369c4a0fff12de788093939e9ba89eb09c3e26c18573d88672b91b11c7c0fb3b212ca017380e16aadcbfaad7fa73e6d2509470c8e81cc71a64165c3aca91861eab5262f1847f15244cc180c9b722637ae7aa00a014d95b390", 0xec}, {&(0x7f0000000f00)="114b73f90cb51bfba03e39b4555389bb675d746e9b29f0f6b3af1e937076094573ff31e8172ed87967fc3800035e19dd356ff9790f528e6434ac9e52a93dde44f292a68f3ee2a66d48e3625280fd34f32d9cc0d7df9b5539fb2102901ce730f9e4cfc9b983c7138f71b49bb06169dfc7f3a3ff5ce0abd67293714a7e9c24fb60bcd56b", 0x83}, {&(0x7f0000000fc0)="0c7de20280fafdf6b3f9eca9ce2edecd02120d829c324990e75cd83fe7b4d63b23faa1d103f0df6c52d9e225102aee714265b319de1bc3797bd91a004db4206fb7fd6e640d7362d118f15d35c75c2322a999668f902e055b59a35787fa864dc1301d7d88a3b609fbe901c08437404fa0316ffb55d39adb814492da2a8b8c107c5c149edd1b63a71cc0825a82f34e676a34ac01387e23bd5102df8a5502b557cef3939672db84325595ddb12f209333876a560251d9f9ea6b373823d9a4736c5fbd4ba6834975635a9d46e80e9522dd2b6f69dac1f2983f9c97cf6e76cae0ce075887f2bfba", 0xe5}, {&(0x7f00000010c0)="c31cd1c1babfdca9a9da87765d555141d8aca36e270042a0978f329ad8419eb03d06f5f175788ffbfff4660dc8ed34042a360b184d677956e52c58fa31db257cf0250a4b2aef2a3663afa8181403854014e1877ab5b4418000887afe22fe91bb05adf27147da35d715b1cff4453a1e8a7fabfd91379cbf3257c7324d360b1c22e85e79e1c9569845d05495611ae59ec9f6c3aca0f14ba914413060293c5ca414ba2d4d6316954ff3e9746cdc65828e39cddcff6a36a560", 0xb7}, {&(0x7f0000001180)="2de3a32befb8fe8187c8c328bf9eda821462e482c597184187ca900a485ab6839df4a31ec60378d3ab491052ee0d6abe983b36d94175ddae915b08a1d8f8260fa7137648ecc858ff2ce2e46509befd0b3711532a4108fd371b03aad1edb52310d7bf7760b36b1f0d1b9de73752d004cc3bd1ed817f7cf530999b80b45b356948d8c86048eb68f858d2ccf02d02ce90e04d5b8a4ec25675d4f5d404aeb73ec6d46343c8756d640708", 0xa8}, {&(0x7f0000001240)="966018f293fac47cbe228c1bc2835d0759bf4254f8b350ef4331d1836c55cbc0166ac2446549ce7f809b037ec09d6095a091bb3f71269851f951f1a2d8e8bccae0bcec79f54a3f4400d51feed42d9b18360407f157d87a4fc753a72b2b12c7c75ac809cbd237bd11a986495c5609824f10e9efbb580bb719ee7eae99d9c5bf0ae0ab7ac9b2d8718e7f9f0a9552fe36d621cf4b21099bb49edef601f7383185aa6f0b0ca5284825373399eea8e2552e983b33fd51937d13958680d6e6af663b96dd59580b2662b0b962cceba342e7c0105496101cab4f84", 0xd7}], 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="2c000000000000000100000809cc764d9601000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x88, 0x800}}], 0x3, 0x20000010) 286.414149ms ago: executing program 0 (id=5071): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @noop, @rr={0x7, 0x17, 0xca, [@dev, @remote, @multicast1, @private=0xa010102, @local]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 164.089116ms ago: executing program 2 (id=5072): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x86, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x2, 0x0, 0x0, 0x0, 0x597], [0x1]], '\x00', [{0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {0xfffffffe, 0x1000}, {}, {0x0, 0x4000}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000880)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x7f, 0x0, 0x1f, 0x8, 0x5}, 0xf, &(0x7f0000000740)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x20, 0x3, 0x1}]}, 0x2, [{0x2, &(0x7f0000000780)=@string={0x2}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x458}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x21, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd4}]}, {0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x44}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x4001}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_getaddr={0x20, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x3}, [@IFA_RT_PRIORITY={0x6}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 83.804716ms ago: executing program 0 (id=5073): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x112, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x6, 0x12f, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=5074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000996000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/111) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) kernel console output (not intermixed with test programs): 414][T18935] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 955.867058][T18758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.894082][T18758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.973475][T18758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.999266][T18758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.006753][T18758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.069974][T18758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.201724][T18758] hsr_slave_0: entered promiscuous mode [ 957.266476][T18758] hsr_slave_1: entered promiscuous mode [ 957.297165][T18758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 957.337230][T18758] Cannot create hsr debugfs directory [ 959.042452][T18987] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 961.844944][T18758] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 961.912261][T18758] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 961.962576][T18758] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 962.013479][T18758] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 963.968442][ T29] audit: type=1800 audit(1719901224.547:1024): pid=19026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4197" name="bus" dev="sda1" ino=2004 res=0 errno=0 [ 964.025586][ T29] audit: type=1800 audit(1719901224.557:1025): pid=19026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4197" name="bus" dev="sda1" ino=2004 res=0 errno=0 [ 964.057642][ T29] audit: type=1800 audit(1719901224.617:1026): pid=19028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4197" name="bus" dev="sda1" ino=2004 res=0 errno=0 [ 964.087431][ T29] audit: type=1800 audit(1719901224.617:1027): pid=19028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4197" name="bus" dev="sda1" ino=2004 res=0 errno=0 [ 964.279570][T11265] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 964.393780][T19034] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 964.608740][T11265] usb 4-1: Using ep0 maxpacket: 8 [ 964.620300][T11265] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.621946][T18758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.638850][T11265] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 964.843475][T11265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.897254][T11265] usb 4-1: config 0 descriptor?? [ 964.968689][T11265] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 964.994575][T11265] usb 4-1: No valid video chain found. [ 965.344634][T18758] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.431232][T11265] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.438565][T11265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.582180][T11265] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.589466][T11265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.632035][ T29] audit: type=1800 audit(1719901226.217:1028): pid=19046 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4204" name="bus" dev="sda1" ino=2000 res=0 errno=0 [ 965.680429][T19040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4198'. [ 965.728807][T19046] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4204'. [ 965.797454][ T29] audit: type=1800 audit(1719901226.377:1029): pid=19055 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4203" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 965.880567][T19058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.930580][T19040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4198'. [ 965.946383][ T29] audit: type=1800 audit(1719901226.377:1030): pid=19055 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4203" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 965.973065][T19058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.073069][ T29] audit: type=1800 audit(1719901226.437:1031): pid=19057 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4203" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 966.178407][T19040] netlink: 'syz.3.4198': attribute type 3 has an invalid length. [ 966.204993][ T29] audit: type=1800 audit(1719901226.437:1032): pid=19057 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4203" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 966.240209][T19040] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4198'. [ 966.917798][T18758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.497804][ T45] usb 4-1: USB disconnect, device number 66 [ 967.827096][T19103] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 968.062419][T18758] veth0_vlan: entered promiscuous mode [ 968.246656][T18758] veth1_vlan: entered promiscuous mode [ 968.426263][T18758] veth0_macvtap: entered promiscuous mode [ 968.477340][T18758] veth1_macvtap: entered promiscuous mode [ 968.523825][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.537605][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.550088][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.563281][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.574027][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.585192][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.596848][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.607754][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.618222][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.629987][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.643577][T18758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.665552][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.678033][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.689265][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.701613][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.712451][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.731934][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.769759][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.818502][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.838415][T18758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.858412][T18758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.892626][T18758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.946025][T18758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.978125][T18758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.113553][T18758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.124977][T18758] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.382615][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.423008][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.534579][ T5570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.558636][ T5570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.848507][ T45] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 970.068965][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 970.095365][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.143828][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 970.213084][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.332074][ T45] usb 4-1: config 0 descriptor?? [ 970.365323][ T45] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 970.411217][ T45] usb 4-1: No valid video chain found. [ 970.615925][T19166] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 970.889202][T19173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4221'. [ 970.934068][ T29] audit: type=1800 audit(1719901231.517:1033): pid=19183 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4225" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 971.045163][T19173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4221'. [ 971.117917][ T29] audit: type=1800 audit(1719901231.537:1034): pid=19183 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4225" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 971.235373][T19189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.261859][ T29] audit: type=1800 audit(1719901231.597:1035): pid=19186 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4225" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 971.282966][T19189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.301463][ T29] audit: type=1800 audit(1719901231.597:1036): pid=19186 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4225" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 971.477234][T19173] netlink: 'syz.3.4221': attribute type 3 has an invalid length. [ 971.498438][T19173] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4221'. [ 972.645316][ T5138] usb 4-1: USB disconnect, device number 67 [ 973.150729][T19236] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 974.138614][T12973] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 974.369901][T12973] usb 3-1: Using ep0 maxpacket: 8 [ 974.397738][T12973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.423209][T12973] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 974.442928][T12973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.465383][T12973] usb 3-1: config 0 descriptor?? [ 974.522064][T12973] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 974.529395][T12973] usb 3-1: No valid video chain found. [ 974.759280][ T45] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 974.879156][T19266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4238'. [ 974.918521][T19266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4238'. [ 974.943435][T19266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.968847][T19266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.017803][T19266] netlink: 'syz.2.4238': attribute type 3 has an invalid length. [ 975.043542][T19266] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4238'. [ 975.088451][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 975.100337][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.127728][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 975.143667][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.194004][ T45] usb 5-1: config 0 descriptor?? [ 975.222508][ T45] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 975.241250][ T45] usb 5-1: No valid video chain found. [ 975.627459][T19283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4246'. [ 975.692663][T19283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4246'. [ 975.758655][T19283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.802577][T19283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.891321][T19283] netlink: 'syz.4.4246': attribute type 3 has an invalid length. [ 975.938402][T19283] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4246'. [ 977.971575][ T5138] usb 3-1: USB disconnect, device number 31 [ 978.421252][ T5137] usb 5-1: USB disconnect, device number 61 [ 979.469546][ T45] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 979.618662][T10473] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 979.680681][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 979.691095][T19339] 9pnet_fd: Insufficient options for proto=fd [ 979.695693][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.171791][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 980.235842][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.320017][T10473] usb 3-1: Using ep0 maxpacket: 16 [ 980.327608][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 980.358185][T10473] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.378659][ T45] usb 2-1: SerialNumber: syz [ 980.391001][T10473] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 980.425325][ T45] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 980.452043][ T45] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 980.479439][T10473] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.490266][ T45] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 980.511120][T10473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 980.551050][T10473] usb 3-1: SerialNumber: syz [ 980.566028][T10473] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 980.698665][T10473] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 980.809908][T10473] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 980.857438][ T29] audit: type=1800 audit(1719901241.327:1037): pid=19351 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4274" name="bus" dev="sda1" ino=2008 res=0 errno=0 [ 981.015436][T19327] overlayfs: workdir and upperdir must reside under the same mount [ 981.284463][ T29] audit: type=1800 audit(1719901241.337:1038): pid=19351 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4274" name="bus" dev="sda1" ino=2008 res=0 errno=0 [ 981.453664][ T29] audit: type=1800 audit(1719901241.337:1039): pid=19351 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4274" name="bus" dev="sda1" ino=2008 res=0 errno=0 [ 981.623934][ T29] audit: type=1800 audit(1719901242.197:1040): pid=19356 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4278" name="bus" dev="sda1" ino=2004 res=0 errno=0 [ 982.144387][T19320] overlayfs: workdir and upperdir must reside under the same mount [ 983.841774][ T29] audit: type=1800 audit(1719901242.937:1041): pid=19368 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4280" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 983.870776][ T29] audit: type=1800 audit(1719901242.947:1042): pid=19368 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4280" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 983.896242][ T29] audit: type=1800 audit(1719901244.387:1043): pid=19366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4280" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 983.921975][ T29] audit: type=1800 audit(1719901244.387:1044): pid=19366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4280" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 984.077580][ T5138] usb 2-1: USB disconnect, device number 59 [ 984.146350][ T5137] usb 3-1: USB disconnect, device number 32 [ 984.359179][T19378] 9pnet_fd: Insufficient options for proto=fd [ 984.839756][ T29] audit: type=1800 audit(1719901245.407:1045): pid=19389 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4286" name="bus" dev="sda1" ino=2004 res=0 errno=0 [ 984.840008][ T29] audit: type=1800 audit(1719901245.407:1046): pid=19389 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4286" name="bus" dev="sda1" ino=2004 res=0 errno=0 [ 986.094572][T19409] 9pnet_fd: Insufficient options for proto=fd [ 986.508699][T12973] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 986.699541][T12973] usb 1-1: Using ep0 maxpacket: 8 [ 988.421018][T12973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.460296][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 988.460319][ T29] audit: type=1800 audit(1719901249.037:1049): pid=19424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4298" name="bus" dev="sda1" ino=1995 res=0 errno=0 [ 988.490217][T12973] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 988.513898][T12973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.554178][ T29] audit: type=1800 audit(1719901249.037:1050): pid=19424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4298" name="bus" dev="sda1" ino=1995 res=0 errno=0 [ 988.589197][T12973] usb 1-1: config 0 descriptor?? [ 988.598110][ T29] audit: type=1800 audit(1719901249.037:1051): pid=19424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4298" name="bus" dev="sda1" ino=1995 res=0 errno=0 [ 988.633490][T12973] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 988.633536][T12973] usb 1-1: No valid video chain found. [ 988.668035][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.728619][ T29] audit: type=1800 audit(1719901249.277:1052): pid=19430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4300" name="bus" dev="sda1" ino=1982 res=0 errno=0 [ 989.060695][ T29] audit: type=1800 audit(1719901249.597:1053): pid=19442 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4302" name="bus" dev="sda1" ino=2004 res=0 errno=0 [ 989.060868][ T29] audit: type=1800 audit(1719901249.607:1054): pid=19442 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4302" name="bus" dev="sda1" ino=2004 res=0 errno=0 [ 989.060992][ T29] audit: type=1800 audit(1719901249.617:1055): pid=19442 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4302" name="bus" dev="sda1" ino=2004 res=0 errno=0 [ 989.061136][ T29] audit: type=1800 audit(1719901249.627:1056): pid=19442 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4302" name="bus" dev="sda1" ino=2004 res=0 errno=0 [ 989.918587][T19444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4295'. [ 990.039886][T19450] 9pnet_fd: Insufficient options for proto=fd [ 990.048699][T19415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4295'. [ 990.083604][T19444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.130490][T19444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.951395][T19444] netlink: 'syz.0.4295': attribute type 3 has an invalid length. [ 990.965914][T19444] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4295'. [ 991.344588][T10473] usb 1-1: USB disconnect, device number 67 [ 993.670333][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.677118][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.786310][ T29] audit: type=1800 audit(1719901254.307:1057): pid=19473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4311" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 993.842508][ T29] audit: type=1800 audit(1719901254.307:1058): pid=19473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4311" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 993.891940][ T29] audit: type=1800 audit(1719901254.397:1059): pid=19474 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4311" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 993.928932][ T29] audit: type=1800 audit(1719901254.397:1060): pid=19474 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4311" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 993.966165][ T29] audit: type=1800 audit(1719901254.537:1061): pid=19481 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4313" name="bus" dev="sda1" ino=2006 res=0 errno=0 [ 994.069478][T19482] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4314'. [ 997.441941][T19496] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 997.509682][T19497] 9pnet_fd: Insufficient options for proto=fd [ 997.594882][T19502] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 998.908625][T12973] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 999.108603][T12973] usb 3-1: Using ep0 maxpacket: 8 [ 999.123333][T12973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.145206][T12973] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 999.164855][T12973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.184830][T12973] usb 3-1: config 0 descriptor?? [ 999.196697][T12973] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 999.207188][T12973] usb 3-1: No valid video chain found. [ 999.571860][ T29] audit: type=1800 audit(1719901260.147:1062): pid=19537 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4330" name="bus" dev="sda1" ino=2012 res=0 errno=0 [ 1000.425146][ T29] audit: type=1800 audit(1719901260.147:1063): pid=19537 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4330" name="bus" dev="sda1" ino=2012 res=0 errno=0 [ 1000.457127][ T53] Bluetooth: hci2: unexpected event for opcode 0x080f [ 1000.689956][ T29] audit: type=1800 audit(1719901260.237:1064): pid=19539 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4330" name="bus" dev="sda1" ino=2012 res=0 errno=0 [ 1000.835952][ T5095] Bluetooth: hci2: ACL packet for unknown connection handle 2248 [ 1000.844458][ T5095] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 1000.924530][ T29] audit: type=1800 audit(1719901260.247:1065): pid=19539 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4330" name="bus" dev="sda1" ino=2012 res=0 errno=0 [ 1001.297553][T19549] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1001.498901][T19547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4326'. [ 1003.470299][T19558] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1003.602728][T12973] usb 3-1: USB disconnect, device number 33 [ 1003.804675][T19569] 9pnet_fd: Insufficient options for proto=fd [ 1004.478487][ T5095] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1004.487404][ T5095] Bluetooth: hci2: Injecting HCI hardware error event [ 1004.497477][ T5095] Bluetooth: hci2: hardware error 0x00 [ 1006.004626][ T952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.049643][ T952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.058135][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1006.073165][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1006.084516][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1006.098423][ T5139] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1006.143798][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1006.151970][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1006.160338][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1006.285195][T19605] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1006.294620][ T5139] usb 4-1: Using ep0 maxpacket: 16 [ 1006.304890][ T5139] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.316485][ T5139] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1006.337037][ T5139] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1006.346623][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1006.355125][ T5139] usb 4-1: SerialNumber: syz [ 1006.371652][ T5139] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1006.381452][ T5139] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1006.415996][ T5139] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1006.427945][ T952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.449364][ T952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.676034][ T952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.703298][ T952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.720464][T19616] 9pnet_fd: Insufficient options for proto=fd [ 1006.966220][ T952] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1007.166490][ T952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1007.186770][ T952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.572612][T19590] overlayfs: workdir and upperdir must reside under the same mount [ 1008.228795][ T5095] Bluetooth: hci2: command tx timeout [ 1008.368626][ T5138] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1008.429176][T19606] chnl_net:caif_netlink_parms(): no params data found [ 1008.582987][ T5138] usb 2-1: Using ep0 maxpacket: 8 [ 1008.600974][ T5138] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.632148][ T5138] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1008.676058][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.749737][ T5138] usb 2-1: config 0 descriptor?? [ 1009.093442][ T5138] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 1009.199983][ T5138] usb 2-1: No valid video chain found. [ 1009.786878][ T5139] usb 4-1: USB disconnect, device number 68 [ 1009.834107][T19646] 9pnet_fd: Insufficient options for proto=fd [ 1010.310602][ T5095] Bluetooth: hci2: command tx timeout [ 1010.744602][T19666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.769393][T19666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.253226][ T952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.368471][ T952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.388547][ T5095] Bluetooth: hci2: command tx timeout [ 1012.422548][ T952] bond0 (unregistering): Released all slaves [ 1013.218613][T19687] 9pnet_fd: Insufficient options for proto=fd [ 1013.242709][ T952] bond1 (unregistering): Released all slaves [ 1013.445105][T19659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4355'. [ 1013.485174][T19660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4355'. [ 1013.520110][T19666] netlink: 'syz.1.4355': attribute type 3 has an invalid length. [ 1013.544140][T19666] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4355'. [ 1013.684157][T19606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.692922][T19606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.708714][T19606] bridge_slave_0: entered allmulticast mode [ 1013.731205][T10473] usb 2-1: USB disconnect, device number 60 [ 1013.741353][T19606] bridge_slave_0: entered promiscuous mode [ 1013.867004][T19606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.896753][T19606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.928612][T19606] bridge_slave_1: entered allmulticast mode [ 1013.958960][T19606] bridge_slave_1: entered promiscuous mode [ 1014.022692][T19700] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1014.214671][T19606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.233982][T19606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.409150][T19606] team0: Port device team_slave_0 added [ 1014.470113][ T5095] Bluetooth: hci2: command tx timeout [ 1014.478572][T11265] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1014.581768][T19606] team0: Port device team_slave_1 added [ 1014.688432][T11265] usb 5-1: Using ep0 maxpacket: 16 [ 1014.698693][T11265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1014.740952][T11265] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1014.780347][T11265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.822732][T11265] usb 5-1: config 0 descriptor?? [ 1014.869677][ T952] hsr_slave_0: left promiscuous mode [ 1014.886864][ T952] hsr_slave_1: left promiscuous mode [ 1014.900644][ T952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.921878][ T952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.179696][T19731] 9pnet_fd: Insufficient options for proto=fd [ 1015.191868][ T952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.385198][T19700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.439729][ T952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.504477][T19700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.020725][T11265] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1 [ 1016.039283][ T952] veth1_macvtap: left promiscuous mode [ 1016.055386][ T952] veth0_macvtap: left promiscuous mode [ 1016.065531][T11265] hid-generic 0003:0158:0100.0013: unexpected long global item [ 1016.081203][ T952] veth1_vlan: left promiscuous mode [ 1016.090553][T11265] hid-generic 0003:0158:0100.0013: probe with driver hid-generic failed with error -22 [ 1016.106557][ T952] veth0_vlan: left promiscuous mode [ 1016.184825][T11265] usb 5-1: USB disconnect, device number 62 [ 1020.511168][T19775] 9pnet_fd: Insufficient options for proto=fd [ 1020.540055][ T29] audit: type=1800 audit(1719901281.117:1066): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4389" name="bus" dev="sda1" ino=2007 res=0 errno=0 [ 1020.565087][ T29] audit: type=1800 audit(1719901281.117:1067): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4389" name="bus" dev="sda1" ino=2007 res=0 errno=0 [ 1020.605223][ T29] audit: type=1800 audit(1719901281.187:1068): pid=19777 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4389" name="bus" dev="sda1" ino=2007 res=0 errno=0 [ 1020.657974][ T29] audit: type=1800 audit(1719901281.217:1069): pid=19777 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4389" name="bus" dev="sda1" ino=2007 res=0 errno=0 [ 1020.947146][T19788] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1021.168860][ T952] team0 (unregistering): Port device team_slave_1 removed [ 1021.491993][ T952] team0 (unregistering): Port device team_slave_0 removed [ 1022.604683][T19810] 9pnet_fd: Insufficient options for proto=fd [ 1024.380588][T19606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.387831][T19606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.788846][ T29] audit: type=1800 audit(1719901286.217:1070): pid=19819 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4411" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 1026.343589][ T29] audit: type=1800 audit(1719901286.227:1071): pid=19819 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4411" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 1026.385077][ T29] audit: type=1800 audit(1719901286.317:1072): pid=19820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4411" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 1026.408376][T19606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.434038][T19606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.462022][ T29] audit: type=1800 audit(1719901286.337:1073): pid=19820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4411" name="bus" dev="sda1" ino=2005 res=0 errno=0 [ 1026.483609][T19606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.510721][T19606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.814776][T19606] hsr_slave_0: entered promiscuous mode [ 1026.837833][T19606] hsr_slave_1: entered promiscuous mode [ 1027.219216][T10473] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1027.448488][T10473] usb 4-1: Using ep0 maxpacket: 16 [ 1027.480534][T10473] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.518917][T10473] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1027.543774][T10473] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1027.563117][T10473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1027.590736][T10473] usb 4-1: SerialNumber: syz [ 1027.634254][ T952] IPVS: stop unused estimator thread 0... [ 1027.634277][T10473] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1027.739578][T10473] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1027.746121][T10473] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1027.897797][T19854] 9pnet_fd: Insufficient options for proto=fd [ 1028.144796][ T29] audit: type=1800 audit(1719901288.707:1074): pid=19861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4420" name="bus" dev="sda1" ino=2013 res=0 errno=0 [ 1028.989485][ T29] audit: type=1800 audit(1719901288.717:1075): pid=19861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4420" name="bus" dev="sda1" ino=2013 res=0 errno=0 [ 1029.018771][ T29] audit: type=1800 audit(1719901288.797:1076): pid=19862 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4420" name="bus" dev="sda1" ino=2013 res=0 errno=0 [ 1029.040028][T19832] overlayfs: workdir and upperdir must reside under the same mount [ 1029.041209][ T29] audit: type=1800 audit(1719901288.807:1077): pid=19862 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4420" name="bus" dev="sda1" ino=2013 res=0 errno=0 [ 1030.252420][T19606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1030.323531][T19606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1030.366462][T19606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1030.373698][ T5138] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1030.411134][T19606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1030.479166][ T5139] usb 4-1: USB disconnect, device number 69 [ 1030.548895][ T5138] usb 3-1: Using ep0 maxpacket: 8 [ 1030.599804][ T5138] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.686857][ T5138] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1030.718482][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.748175][ T5138] usb 3-1: config 0 descriptor?? [ 1030.772165][ T5138] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1030.798473][ T5138] usb 3-1: No valid video chain found. [ 1030.809271][T19606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.914410][T19606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.970237][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.977438][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.059815][T19901] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1031.095586][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.102877][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.284709][T19904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1031.371358][T19904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1031.414529][T19904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.461061][T19904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.538617][T19904] netlink: 'syz.2.4422': attribute type 3 has an invalid length. [ 1031.546455][T19904] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1031.877623][T19606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.970891][T19925] 9pnet_fd: Insufficient options for proto=fd [ 1032.054102][T19606] veth0_vlan: entered promiscuous mode [ 1032.093777][T19606] veth1_vlan: entered promiscuous mode [ 1032.214446][T19606] veth0_macvtap: entered promiscuous mode [ 1032.266503][T19606] veth1_macvtap: entered promiscuous mode [ 1032.385202][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.434285][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.492464][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.551051][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.608626][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.651023][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.645788][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.883873][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.100563][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.161785][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.191588][T19606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.213931][T12973] usb 3-1: USB disconnect, device number 34 [ 1034.383812][ T29] audit: type=1326 audit(1719901294.967:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19946 comm="syz.1.4435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3350575b99 code=0x0 [ 1034.433048][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.468119][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.481532][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.492937][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.503492][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.515788][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.527924][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.539370][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.562382][T19961] fuse: Unknown parameter 'user_id' [ 1034.568375][T19606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.617271][T19606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.666152][T19606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.710713][T19606] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.767362][T19606] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.786775][T19606] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.806937][T19606] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.848848][T12973] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1035.052554][T12973] usb 3-1: Using ep0 maxpacket: 16 [ 1035.067065][T12973] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.110063][T12973] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1035.123136][ T2398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.123166][ T2398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.194826][T12973] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1035.222199][T12973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1035.236450][T16681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.245230][T16681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.253272][T12973] usb 3-1: SerialNumber: syz [ 1035.296083][T12973] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1035.319343][T12973] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 1035.333242][T12973] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1035.625506][T19983] 9pnet_fd: Insufficient options for proto=fd [ 1035.710209][T19954] overlayfs: workdir and upperdir must reside under the same mount [ 1036.638662][ T5138] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1036.869276][ T5138] usb 5-1: Using ep0 maxpacket: 8 [ 1036.906575][ T5138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.131987][ T5138] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1037.215962][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.313441][ T5138] usb 5-1: config 0 descriptor?? [ 1037.340813][T10473] usb 3-1: USB disconnect, device number 35 [ 1037.387802][ T5138] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 1037.462068][ T5138] usb 5-1: No valid video chain found. [ 1037.784363][T20028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4447'. [ 1037.817469][T20028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4447'. [ 1037.862651][T20028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.886484][T20028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.934571][T20028] netlink: 'syz.4.4447': attribute type 3 has an invalid length. [ 1037.944621][T20028] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4447'. [ 1037.971072][T20032] 9pnet_fd: Insufficient options for proto=fd [ 1038.466721][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1038.529928][ T29] audit: type=1326 audit(1719901299.107:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20042 comm="syz.0.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1038.596045][ T29] audit: type=1326 audit(1719901299.107:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20042 comm="syz.0.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1038.617888][ C0] vkms_vblank_simulate: vblank timer overrun [ 1038.673467][ T29] audit: type=1326 audit(1719901299.107:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20042 comm="syz.0.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1038.742717][ T29] audit: type=1326 audit(1719901299.107:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20042 comm="syz.0.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1038.766992][ T29] audit: type=1326 audit(1719901299.107:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20042 comm="syz.0.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1038.911632][ T29] audit: type=1326 audit(1719901299.107:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20042 comm="syz.0.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1038.996056][ T29] audit: type=1326 audit(1719901299.117:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20042 comm="syz.0.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1039.076465][ T29] audit: type=1326 audit(1719901299.117:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20042 comm="syz.0.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1039.569267][ T29] audit: type=1326 audit(1719901299.117:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20042 comm="syz.0.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1039.695755][ T29] audit: type=1326 audit(1719901299.117:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20042 comm="syz.0.4459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1039.763604][ T5138] usb 5-1: USB disconnect, device number 63 [ 1039.912887][T20061] 9pnet_fd: Insufficient options for proto=fd [ 1039.938528][T11265] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1040.153191][T11265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.177270][T11265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.203145][T11265] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1040.227342][T11265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.239673][T11265] usb 4-1: config 0 descriptor?? [ 1040.285083][T20072] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4468'. [ 1040.311172][T20072] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4468'. [ 1040.668805][T12973] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1040.745115][T20052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.770677][T20052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.785449][T11265] usbhid 4-1:0.0: can't add hid device: -71 [ 1040.802679][T11265] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1040.815856][T11265] usb 4-1: USB disconnect, device number 70 [ 1040.900266][T12973] usb 5-1: Using ep0 maxpacket: 16 [ 1040.922154][T12973] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.938045][T12973] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1040.967667][T12973] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1040.977521][T12973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1040.986013][T12973] usb 5-1: SerialNumber: syz [ 1040.992814][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1041.007753][T12973] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1041.016823][T12973] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 1041.023858][T12973] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 1041.204493][ T29] audit: type=1326 audit(1719901301.787:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1041.283848][ T29] audit: type=1326 audit(1719901301.787:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1041.329195][T20073] overlayfs: workdir and upperdir must reside under the same mount [ 1041.422378][ T29] audit: type=1326 audit(1719901301.797:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1042.050900][ T29] audit: type=1326 audit(1719901301.807:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1042.708157][ T29] audit: type=1326 audit(1719901301.807:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1042.861287][ T29] audit: type=1326 audit(1719901301.817:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1042.953794][ T29] audit: type=1326 audit(1719901301.817:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1042.978535][T12973] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1043.016718][ T29] audit: type=1326 audit(1719901301.817:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20083 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1043.208409][T12973] usb 4-1: Using ep0 maxpacket: 8 [ 1043.228183][T12973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.258465][T12973] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1043.288041][T12973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.319519][T12973] usb 4-1: config 0 descriptor?? [ 1043.349342][T12973] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 1043.356387][T12973] usb 4-1: No valid video chain found. [ 1043.408145][T12973] usb 5-1: USB disconnect, device number 64 [ 1043.769761][T20110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4475'. [ 1043.852780][T20110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4475'. [ 1043.950405][T20110] netlink: 'syz.3.4475': attribute type 3 has an invalid length. [ 1044.125101][T20110] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4475'. [ 1045.030407][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1045.189031][T20125] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4483'. [ 1045.213756][T20125] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4483'. [ 1045.775488][ T5139] usb 4-1: USB disconnect, device number 71 [ 1046.025686][T20135] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4487'. [ 1046.735027][T20148] input: syz1 as /devices/virtual/input/input39 [ 1047.342680][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1047.342703][ T29] audit: type=1326 audit(1719901307.917:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20154 comm="syz.3.4493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f458ef75b99 code=0x0 [ 1047.469853][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1047.898536][ T5139] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1048.088482][ T5139] usb 1-1: Using ep0 maxpacket: 8 [ 1048.111065][ T5139] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.144028][ T5139] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1048.166277][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.192801][ T5139] usb 1-1: config 0 descriptor?? [ 1048.206035][ T5139] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 1048.219925][ T5139] usb 1-1: No valid video chain found. [ 1048.606711][T20171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4497'. [ 1048.714640][T20171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4497'. [ 1048.869827][T20171] netlink: 'syz.0.4497': attribute type 3 has an invalid length. [ 1048.901299][T20171] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4497'. [ 1049.996037][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1051.448187][T12973] usb 1-1: USB disconnect, device number 68 [ 1052.798516][ T29] audit: type=1800 audit(1719901312.567:1104): pid=20231 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4514" name="bus" dev="sda1" ino=2010 res=0 errno=0 [ 1052.929929][ T29] audit: type=1800 audit(1719901312.577:1105): pid=20231 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4514" name="bus" dev="sda1" ino=2010 res=0 errno=0 [ 1052.954742][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1052.985102][ T29] audit: type=1800 audit(1719901312.647:1106): pid=20232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4514" name="bus" dev="sda1" ino=2010 res=0 errno=0 [ 1052.985326][ T29] audit: type=1800 audit(1719901312.657:1107): pid=20232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4514" name="bus" dev="sda1" ino=2010 res=0 errno=0 [ 1052.985580][ T29] audit: type=1326 audit(1719901313.547:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20223 comm="syz.1.4515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3350575b99 code=0x0 [ 1053.070493][ T29] audit: type=1326 audit(1719901313.627:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20237 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1053.070562][ T29] audit: type=1326 audit(1719901313.627:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20237 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1053.114140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.125175][ T29] audit: type=1326 audit(1719901313.627:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20237 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1053.146947][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.154127][ T29] audit: type=1326 audit(1719901313.627:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20237 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1053.176418][ T29] audit: type=1326 audit(1719901313.627:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20237 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f458ef75b99 code=0x7ffc0000 [ 1053.198327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.862456][T20248] overlayfs: workdir and upperdir must reside under the same mount [ 1054.879046][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.245076][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.857647][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1055.908572][T11265] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1056.108998][T11265] usb 4-1: Using ep0 maxpacket: 16 [ 1056.125231][T11265] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.146515][T11265] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1056.191129][T11265] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1056.208349][T11265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1056.236854][T11265] usb 4-1: SerialNumber: syz [ 1056.276172][T11265] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1056.371604][T11265] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1056.383416][T11265] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1056.973598][T20260] overlayfs: workdir and upperdir must reside under the same mount [ 1058.231497][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1058.256023][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1058.256042][ T29] audit: type=1326 audit(1719901318.837:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.4.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1058.335393][ T29] audit: type=1326 audit(1719901318.837:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.4.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1058.378554][ T29] audit: type=1326 audit(1719901318.837:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.4.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1058.402454][ T29] audit: type=1326 audit(1719901318.837:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.4.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1058.436006][ T5137] usb 4-1: USB disconnect, device number 72 [ 1058.474335][ T29] audit: type=1326 audit(1719901318.837:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.4.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1058.557309][ T29] audit: type=1326 audit(1719901318.837:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.4.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1058.703240][ T29] audit: type=1326 audit(1719901318.837:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.4.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1058.783833][ T29] audit: type=1326 audit(1719901318.847:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.4.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1058.911807][ T29] audit: type=1326 audit(1719901318.847:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.4.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1062.728908][ T29] audit: type=1326 audit(1719901318.847:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.4.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1062.815857][T20330] 9pnet: Could not find request transport: fd0x0000000000000007 [ 1064.335768][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1064.439903][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1064.439923][ T29] audit: type=1326 audit(1719901325.027:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20356 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1064.447420][ T29] audit: type=1326 audit(1719901325.027:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20356 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1064.447582][ T29] audit: type=1326 audit(1719901325.027:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20356 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1064.450356][ T29] audit: type=1326 audit(1719901325.037:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20356 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1064.450839][ T29] audit: type=1326 audit(1719901325.037:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20356 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1064.451020][ T29] audit: type=1326 audit(1719901325.037:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20356 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1064.451823][ T29] audit: type=1326 audit(1719901325.037:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20356 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1064.452161][ T29] audit: type=1326 audit(1719901325.037:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20356 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1064.454072][ T29] audit: type=1326 audit(1719901325.037:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20356 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1064.454259][ T29] audit: type=1326 audit(1719901325.037:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20356 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1066.999100][T20379] 9pnet: Could not find request transport: fd0x0000000000000007 [ 1067.195107][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 1067.259096][ T5139] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1067.488539][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 1067.529671][ T5139] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.695982][ T5139] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1067.824112][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.836315][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4567'. [ 1067.902310][ T5139] usb 3-1: config 0 descriptor?? [ 1067.934816][ T5139] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1067.958642][ T5139] usb 3-1: No valid video chain found. [ 1068.164143][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1068.376706][T20414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4563'. [ 1068.450904][T20414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4563'. [ 1068.546459][T20414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.588103][T20414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.666832][T20414] netlink: 'syz.2.4563': attribute type 3 has an invalid length. [ 1068.723635][T20414] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4563'. [ 1070.048630][ T5139] usb 3-1: USB disconnect, device number 36 [ 1070.360418][T20440] 9pnet: Could not find request transport: fd0x0000000000000007 [ 1070.829945][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1070.848650][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1070.848672][ T29] audit: type=1326 audit(1719901331.437:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20446 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1070.876607][ C0] vkms_vblank_simulate: vblank timer overrun [ 1071.678207][ T29] audit: type=1326 audit(1719901332.227:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20446 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1074.647652][ T29] audit: type=1326 audit(1719901332.227:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20446 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1074.717657][ T29] audit: type=1326 audit(1719901332.227:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20446 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1074.819345][ T29] audit: type=1326 audit(1719901332.227:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20446 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1074.864257][ T29] audit: type=1326 audit(1719901332.227:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20446 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1074.887348][ T29] audit: type=1326 audit(1719901332.227:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20446 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1074.912483][ T29] audit: type=1326 audit(1719901332.227:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20446 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1074.953847][ T29] audit: type=1326 audit(1719901332.237:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20446 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1074.993353][ T29] audit: type=1326 audit(1719901332.237:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20446 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1075.017659][T20478] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1075.224085][T19475] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1075.299339][T20491] 9pnet_fd: Insufficient options for proto=fd [ 1075.380906][T20495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4591'. [ 1075.402559][T20495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4591'. [ 1075.420204][T19475] usb 2-1: Using ep0 maxpacket: 16 [ 1075.436873][T19475] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.655778][T19475] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1075.674080][T19475] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1075.686637][T19475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1075.695870][T19475] usb 2-1: SerialNumber: syz [ 1076.439683][T19475] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1076.508535][T19475] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 1076.529230][T19475] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1076.543417][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1076.588797][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1076.588817][ T29] audit: type=1326 audit(1719901337.167:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20500 comm="syz.4.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1076.616622][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.873507][ T29] audit: type=1326 audit(1719901337.167:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20500 comm="syz.4.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1076.963186][T20468] overlayfs: workdir and upperdir must reside under the same mount [ 1076.977380][ T29] audit: type=1326 audit(1719901337.167:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20500 comm="syz.4.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1077.058219][ T29] audit: type=1326 audit(1719901337.167:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20500 comm="syz.4.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1077.085851][T19475] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1077.087168][ T29] audit: type=1326 audit(1719901337.177:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20500 comm="syz.4.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1077.115478][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.217986][ T29] audit: type=1326 audit(1719901337.177:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20500 comm="syz.4.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1077.300788][ T29] audit: type=1326 audit(1719901337.207:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20500 comm="syz.4.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1077.314337][T19475] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1077.400057][T19475] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.408051][ T29] audit: type=1326 audit(1719901337.207:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20500 comm="syz.4.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1077.431956][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.470852][T19475] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1077.478041][ T29] audit: type=1326 audit(1719901337.207:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20500 comm="syz.4.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1077.534597][T19475] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.543027][ T29] audit: type=1326 audit(1719901337.207:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20500 comm="syz.4.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4b2d175b99 code=0x7ffc0000 [ 1077.566250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.603541][T19475] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1077.672954][T19475] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1077.711516][T19475] usb 1-1: Product: syz [ 1077.738129][T19475] usb 1-1: Manufacturer: syz [ 1077.807019][T19475] cdc_wdm 1-1:1.0: skipping garbage [ 1077.848592][T19475] cdc_wdm 1-1:1.0: skipping garbage [ 1077.875093][T19475] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1078.243083][T19475] usb 1-1: USB disconnect, device number 69 [ 1078.494509][T20533] 9pnet_fd: Insufficient options for proto=fd [ 1078.535330][ T45] usb 2-1: USB disconnect, device number 61 [ 1080.184986][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1080.292732][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1080.728587][ T5139] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1080.938354][ T5139] usb 4-1: Using ep0 maxpacket: 8 [ 1080.947876][ T5139] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.970833][ T5139] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1080.990114][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.006863][T20570] 9pnet_fd: Insufficient options for proto=fd [ 1081.008031][ T5139] usb 4-1: config 0 descriptor?? [ 1081.027529][ T5139] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 1081.052755][ T5139] usb 4-1: No valid video chain found. [ 1081.490549][T20581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4608'. [ 1081.597074][T20579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4608'. [ 1081.657135][T20581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.723360][T20581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.768044][T20582] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4617'. [ 1081.798598][T20582] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4617'. [ 1082.166524][T20579] netlink: 'syz.3.4608': attribute type 3 has an invalid length. [ 1082.313322][T20579] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4608'. [ 1083.110277][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1083.194168][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1083.194191][ T29] audit: type=1326 audit(1719901343.777:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20591 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1083.240561][ T29] audit: type=1326 audit(1719901343.817:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20591 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1083.263407][ T29] audit: type=1326 audit(1719901343.817:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20591 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1083.453411][ T29] audit: type=1326 audit(1719901343.817:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20591 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1083.598794][ T29] audit: type=1326 audit(1719901343.817:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20591 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1083.771323][ T29] audit: type=1326 audit(1719901343.817:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20591 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1083.848040][ T5139] usb 4-1: USB disconnect, device number 73 [ 1083.938729][ T29] audit: type=1326 audit(1719901343.817:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20591 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1084.080858][ T29] audit: type=1326 audit(1719901343.827:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20591 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1084.122617][T20609] 9pnet_fd: Insufficient options for proto=fd [ 1084.226727][ T29] audit: type=1326 audit(1719901343.827:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20591 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1084.250062][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.271025][ T29] audit: type=1326 audit(1719901343.827:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20591 comm="syz.0.4620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1085.957751][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1086.172933][T20643] 9pnet_fd: Insufficient options for proto=fd [ 1086.668470][ T5137] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1086.883327][ T5137] usb 5-1: Using ep0 maxpacket: 8 [ 1086.907429][ T5137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.924389][T20662] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1086.945556][ T5137] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1086.975992][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.015530][ T5137] usb 5-1: config 0 descriptor?? [ 1087.065486][ T5137] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 1087.093407][ T5137] usb 5-1: No valid video chain found. [ 1088.077291][T20676] 9pnet_fd: Insufficient options for proto=fd [ 1088.413020][T20685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4640'. [ 1088.628556][T20685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4640'. [ 1088.748889][T20685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.799508][T20685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.982113][T20685] netlink: 'syz.4.4640': attribute type 3 has an invalid length. [ 1090.018394][T20685] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4640'. [ 1091.436300][T12973] usb 5-1: USB disconnect, device number 65 [ 1093.680586][T20769] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4676'. [ 1093.697564][T20769] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4676'. [ 1094.623048][T11265] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1095.622817][T20779] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1096.641547][T11265] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1096.960809][T11265] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.050494][T11265] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1097.111924][T11265] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.198445][T11265] usb 1-1: string descriptor 0 read error: -71 [ 1097.234444][T11265] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1097.295816][T11265] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1097.372097][T11265] usb 1-1: can't set config #1, error -71 [ 1097.405906][T11265] usb 1-1: USB disconnect, device number 70 [ 1098.707181][T20826] fuse: Bad value for 'rootmode' [ 1098.718196][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1098.718216][ T29] audit: type=1804 audit(1719901359.297:1251): pid=20826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.4694" name="/root/syzkaller.npQEF8/212/file0" dev="sda1" ino=2006 res=1 errno=0 [ 1098.815014][T20831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4695'. [ 1098.824388][T20831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4695'. [ 1099.099593][ T29] audit: type=1800 audit(1719901359.687:1252): pid=20840 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4697" name="bus" dev="sda1" ino=2006 res=0 errno=0 [ 1099.256034][ T29] audit: type=1800 audit(1719901359.707:1253): pid=20840 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4697" name="bus" dev="sda1" ino=2006 res=0 errno=0 [ 1099.721999][ T29] audit: type=1800 audit(1719901360.297:1254): pid=20842 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4697" name="bus" dev="sda1" ino=2006 res=0 errno=0 [ 1099.823943][ T29] audit: type=1800 audit(1719901360.367:1255): pid=20842 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4697" name="bus" dev="sda1" ino=2006 res=0 errno=0 [ 1102.988504][T19475] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1103.065751][T20891] random: crng reseeded on system resumption [ 1103.118858][T20892] input: syz1 as /devices/virtual/input/input40 [ 1107.688591][ T45] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1107.732194][T19475] usb 1-1: Using ep0 maxpacket: 8 [ 1107.768597][T19475] usb 1-1: device descriptor read/all, error -71 [ 1110.317846][ T5095] Bluetooth: hci4: command 0x0406 tx timeout [ 1110.359778][ T5138] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1110.366604][ T5138] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1111.928527][T19475] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1112.171155][T19475] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1112.186637][T19475] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.200537][T19475] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1112.228856][T19475] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.262146][T19475] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1112.285082][T19475] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1112.297441][T19475] usb 3-1: Product: syz [ 1112.314175][T19475] usb 3-1: Manufacturer: syz [ 1112.552994][ T5095] Bluetooth: hci0: command 0x0406 tx timeout [ 1115.341271][ T5138] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1115.612236][ T5138] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1115.701990][T19475] usb 3-1: can't set config #1, error -71 [ 1115.749827][T19475] usb 3-1: USB disconnect, device number 37 [ 1116.317053][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.323739][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.857759][T20997] overlayfs: failed to clone lowerpath [ 1117.739928][ T29] audit: type=1326 audit(1719901378.327:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21023 comm="syz.0.4735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1117.777461][ T29] audit: type=1326 audit(1719901378.327:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21023 comm="syz.0.4735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1117.814911][ T29] audit: type=1326 audit(1719901378.327:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21023 comm="syz.0.4735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1117.892150][ T29] audit: type=1326 audit(1719901378.327:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21023 comm="syz.0.4735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1117.975863][ T29] audit: type=1326 audit(1719901378.327:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21023 comm="syz.0.4735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1117.997558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.009439][ T29] audit: type=1326 audit(1719901378.327:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21023 comm="syz.0.4735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1118.031305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.043202][ T29] audit: type=1326 audit(1719901378.337:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21023 comm="syz.0.4735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1118.074934][ T29] audit: type=1326 audit(1719901378.337:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21023 comm="syz.0.4735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1118.127693][ T29] audit: type=1326 audit(1719901378.337:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21023 comm="syz.0.4735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1118.192941][ T29] audit: type=1326 audit(1719901378.337:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21023 comm="syz.0.4735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af575b99 code=0x7ffc0000 [ 1118.214634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.630837][ T5138] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1118.648611][ T5095] Bluetooth: hci5: command 0x0406 tx timeout [ 1118.706255][ T5138] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1121.348400][ T5095] Bluetooth: hci2: command 0x0c1a tx timeout [ 1121.354773][ T5138] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1121.363920][ T5138] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1122.584047][T21103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4756'. [ 1122.593930][T21103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4756'. [ 1125.809585][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1125.809606][ T29] audit: type=1800 audit(1719901386.397:1269): pid=21135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4765" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1125.866988][ T29] audit: type=1800 audit(1719901386.427:1270): pid=21135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4765" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1125.930982][ T29] audit: type=1800 audit(1719901386.517:1271): pid=21136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4765" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1125.972924][ T29] audit: type=1800 audit(1719901386.557:1272): pid=21136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4765" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1132.338620][T12973] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1134.618506][ T29] audit: type=1800 audit(1719901395.197:1273): pid=21238 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4797" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1136.303914][ T29] audit: type=1800 audit(1719901396.887:1274): pid=21255 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4802" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1136.369267][ T29] audit: type=1800 audit(1719901396.917:1275): pid=21255 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4802" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1136.429576][ T29] audit: type=1800 audit(1719901397.017:1276): pid=21256 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4802" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1136.486616][ T29] audit: type=1800 audit(1719901397.067:1277): pid=21256 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4802" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1136.802800][ T5139] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1137.008551][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 1137.020033][ T5139] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.030540][ T5139] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1137.042008][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.055561][ T5139] usb 3-1: config 0 descriptor?? [ 1137.066943][ T5139] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1137.074068][ T5139] usb 3-1: No valid video chain found. [ 1137.379680][T21264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4803'. [ 1137.413185][T21264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4803'. [ 1137.447600][T21264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.456928][T21264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.519212][T21264] netlink: 'syz.2.4803': attribute type 3 has an invalid length. [ 1137.536002][T21264] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4803'. [ 1139.557183][T20894] usb 3-1: USB disconnect, device number 39 [ 1141.828770][ T29] audit: type=1800 audit(1719901402.417:1278): pid=21298 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4814" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1141.858889][ T29] audit: type=1800 audit(1719901402.437:1279): pid=21298 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4814" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1141.967220][ T29] audit: type=1800 audit(1719901402.547:1280): pid=21299 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4814" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1142.019994][ T29] audit: type=1800 audit(1719901402.607:1281): pid=21302 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4814" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1143.224936][ T29] audit: type=1800 audit(1719901403.807:1282): pid=21320 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4820" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1143.245542][ T29] audit: type=1800 audit(1719901403.837:1283): pid=21320 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4820" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1144.446600][ T29] audit: type=1800 audit(1719901405.027:1284): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4823" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1144.487453][ T29] audit: type=1800 audit(1719901405.027:1285): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4823" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1144.585071][ T29] audit: type=1800 audit(1719901405.167:1286): pid=21331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4823" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1144.621907][ T29] audit: type=1800 audit(1719901405.207:1287): pid=21334 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4823" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1145.798575][T20894] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1145.980424][T20894] usb 1-1: Using ep0 maxpacket: 8 [ 1145.989758][T20894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.001559][T20894] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1146.018429][T20894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.036215][T20894] usb 1-1: config 0 descriptor?? [ 1146.051237][T20894] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 1146.065736][T20894] usb 1-1: No valid video chain found. [ 1146.645296][T21360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4828'. [ 1146.737460][T21360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4828'. [ 1146.773132][T21360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.785006][T21360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.971693][T21360] netlink: 'syz.0.4828': attribute type 3 has an invalid length. [ 1146.998337][T21360] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4828'. [ 1148.580810][T19475] usb 1-1: USB disconnect, device number 73 [ 1148.851479][ T29] audit: type=1800 audit(1719901409.437:1288): pid=21379 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4835" name="bus" dev="sda1" ino=2017 res=0 errno=0 [ 1148.874331][ T29] audit: type=1800 audit(1719901409.437:1289): pid=21379 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4835" name="bus" dev="sda1" ino=2017 res=0 errno=0 [ 1148.930053][ T29] audit: type=1800 audit(1719901409.517:1290): pid=21380 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4835" name="bus" dev="sda1" ino=2017 res=0 errno=0 [ 1148.958148][ T29] audit: type=1800 audit(1719901409.537:1291): pid=21380 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4835" name="bus" dev="sda1" ino=2017 res=0 errno=0 [ 1148.978142][ C0] vkms_vblank_simulate: vblank timer overrun [ 1150.588718][ T29] audit: type=1800 audit(1719901411.167:1292): pid=21396 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4840" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1150.628512][ T29] audit: type=1800 audit(1719901411.167:1293): pid=21396 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4840" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1150.702595][ T29] audit: type=1800 audit(1719901411.237:1294): pid=21397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4840" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1150.731147][ T29] audit: type=1800 audit(1719901411.247:1295): pid=21397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4840" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1153.188586][ T5139] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1153.388537][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 1153.400509][ T5139] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.412779][ T5139] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1153.423334][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.435332][ T5139] usb 3-1: config 0 descriptor?? [ 1153.447571][ T5139] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1153.455045][ T5139] usb 3-1: No valid video chain found. [ 1153.959813][T21417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4843'. [ 1154.099173][T21417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4843'. [ 1154.135234][T21419] netlink: 'syz.0.4846': attribute type 29 has an invalid length. [ 1154.158168][T21417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.170291][T21419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.179073][T21417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.353616][T21417] netlink: 'syz.2.4843': attribute type 3 has an invalid length. [ 1154.365941][T21417] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4843'. [ 1154.603446][T21425] ieee802154 phy0 wpan0: encryption failed: -22 [ 1154.611615][ T29] audit: type=1800 audit(1719901415.207:1296): pid=21424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4847" name="memory.events" dev="sda1" ino=2017 res=0 errno=0 [ 1154.650022][ T29] audit: type=1804 audit(1719901415.227:1297): pid=21426 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.4847" name="/root/syzkaller.CFlUDQ/136/memory.events" dev="sda1" ino=2017 res=1 errno=0 [ 1155.801581][T21437] can: request_module (can-proto-0) failed. [ 1155.915739][T19475] usb 3-1: USB disconnect, device number 40 [ 1156.086540][ T29] audit: type=1800 audit(1719901416.667:1298): pid=21446 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4850" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1156.109111][ T29] audit: type=1800 audit(1719901416.667:1299): pid=21446 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4850" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1156.157313][ T29] audit: type=1800 audit(1719901416.737:1300): pid=21447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4850" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1156.188703][ T29] audit: type=1800 audit(1719901416.767:1301): pid=21447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4850" name="bus" dev="sda1" ino=2015 res=0 errno=0 [ 1159.248115][T21476] netlink: 'syz.0.4859': attribute type 29 has an invalid length. [ 1161.877447][T21511] netlink: 'syz.0.4869': attribute type 29 has an invalid length. [ 1163.868439][T10473] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1164.058374][T10473] usb 3-1: Using ep0 maxpacket: 32 [ 1164.066282][T10473] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.088855][T10473] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1164.098898][T10473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.129635][T10473] usb 3-1: config 0 descriptor?? [ 1164.143608][T10473] usb 3-1: bad CDC descriptors [ 1164.396161][T21529] kvm: vcpu 0: requested 96 ns lapic timer period limited to 200000 ns [ 1165.978627][ T45] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1166.176974][ T45] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1166.195947][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.206654][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1166.226435][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.250873][ T45] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1166.260421][ T45] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1166.269139][ T45] usb 1-1: Product: syz [ 1166.273394][ T45] usb 1-1: Manufacturer: syz [ 1166.297294][ T45] cdc_wdm 1-1:1.0: skipping garbage [ 1166.304672][ T45] cdc_wdm 1-1:1.0: skipping garbage [ 1166.313676][ T45] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1166.538727][ T45] usb 3-1: USB disconnect, device number 41 [ 1166.721271][T10473] usb 1-1: USB disconnect, device number 74 [ 1169.968382][ T45] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1170.168420][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 1170.175867][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.186773][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1170.195992][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.207842][ T45] usb 1-1: config 0 descriptor?? [ 1170.216149][ T45] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 1170.223381][ T45] usb 1-1: No valid video chain found. [ 1170.394356][T21572] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1170.827190][T21579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4882'. [ 1170.903271][T21579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4882'. [ 1170.929145][T21579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.938100][T21579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.114812][T21579] netlink: 'syz.0.4882': attribute type 3 has an invalid length. [ 1171.123012][T21579] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4882'. [ 1172.039605][T19475] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1172.261738][T19475] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1172.294545][T19475] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.321504][T19475] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1172.366101][T19475] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.392471][T19475] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1172.414665][T19475] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1172.439032][T19475] usb 3-1: Product: syz [ 1172.451924][T19475] usb 3-1: Manufacturer: syz [ 1172.490779][T19475] cdc_wdm 3-1:1.0: skipping garbage [ 1172.504935][T19475] cdc_wdm 3-1:1.0: skipping garbage [ 1172.517634][T19475] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1172.835437][T19475] usb 1-1: USB disconnect, device number 75 [ 1172.919051][T10473] usb 3-1: USB disconnect, device number 42 [ 1177.755760][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.762636][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.288437][T10473] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1182.564520][T10473] usb 3-1: Using ep0 maxpacket: 8 [ 1182.574916][T10473] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.588684][T10473] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1182.597802][T10473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.621173][T10473] usb 3-1: config 0 descriptor?? [ 1182.637424][T10473] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1182.645753][T10473] usb 3-1: No valid video chain found. [ 1183.087564][T21681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4912'. [ 1183.168077][T21681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4912'. [ 1183.294894][T21682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.306058][T21682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.349294][T21681] netlink: 'syz.2.4912': attribute type 3 has an invalid length. [ 1183.357357][T21681] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4912'. [ 1185.082975][T10473] usb 3-1: USB disconnect, device number 43 [ 1185.386427][T21701] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4919'. [ 1185.396114][T21701] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4919'. [ 1186.618532][T10473] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1186.808449][T10473] usb 1-1: Using ep0 maxpacket: 8 [ 1186.820290][T10473] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.830744][T10473] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1186.839976][T10473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.852886][T10473] usb 1-1: config 0 descriptor?? [ 1186.863261][T10473] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 1186.870321][T10473] usb 1-1: No valid video chain found. [ 1187.195166][T21712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4923'. [ 1187.229666][T21712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.238709][T21712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.285937][T21712] netlink: 'syz.0.4923': attribute type 3 has an invalid length. [ 1187.294555][T21712] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4923'. [ 1188.510645][ T45] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1188.698442][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 1188.711687][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.748780][ T45] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1188.764602][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.785592][ T45] usb 3-1: config 0 descriptor?? [ 1188.832973][ T45] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1188.849691][ T45] usb 3-1: No valid video chain found. [ 1189.153789][T21718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1189.198719][T21718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1189.221255][T21718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.240649][T21718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.287053][T21718] netlink: 'syz.2.4925': attribute type 3 has an invalid length. [ 1189.302194][T21718] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1189.383794][ T45] usb 1-1: USB disconnect, device number 76 [ 1191.302721][T10473] usb 3-1: USB disconnect, device number 44 [ 1191.435466][T21734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4930'. [ 1191.444984][T21734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4930'. [ 1194.203270][ T29] audit: type=1800 audit(1719901454.787:1302): pid=21765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4939" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1194.365437][ T29] audit: type=1800 audit(1719901454.787:1303): pid=21765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4939" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1194.543264][ T29] audit: type=1800 audit(1719901454.847:1304): pid=21766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4939" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1194.673284][ T29] audit: type=1800 audit(1719901454.857:1305): pid=21766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4939" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1198.170033][ T29] audit: type=1800 audit(1719901458.757:1306): pid=21805 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4949" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1198.194315][ T29] audit: type=1800 audit(1719901458.777:1307): pid=21805 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4949" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1198.246294][ T29] audit: type=1800 audit(1719901458.827:1308): pid=21806 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4949" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1198.267315][ T29] audit: type=1800 audit(1719901458.847:1309): pid=21806 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4949" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1199.740793][ T29] audit: type=1800 audit(1719901460.277:1310): pid=21819 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4952" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1200.021033][ T29] audit: type=1800 audit(1719901460.287:1311): pid=21819 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4952" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1200.112340][ T29] audit: type=1800 audit(1719901460.407:1312): pid=21820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4952" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1200.137009][ T29] audit: type=1800 audit(1719901460.427:1313): pid=21820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4952" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1206.088481][ T5186] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1206.290619][ T5186] usb 3-1: Using ep0 maxpacket: 8 [ 1206.298657][ T5186] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.318486][ T5186] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1206.327733][ T5186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.376664][ T5186] usb 3-1: config 0 descriptor?? [ 1206.390827][ T5186] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1206.398055][ T5186] usb 3-1: No valid video chain found. [ 1206.707531][T21872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1206.740095][T21872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1206.764946][T21872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.784331][T21872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.813963][T21872] netlink: 'syz.2.4966': attribute type 3 has an invalid length. [ 1206.822141][T21872] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1206.852641][T11265] usb 3-1: USB disconnect, device number 45 [ 1212.728584][T20894] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1213.068369][T20894] usb 3-1: Using ep0 maxpacket: 8 [ 1213.075827][T20894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.086397][T20894] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1213.095550][T20894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.909796][T20894] usb 3-1: config 0 descriptor?? [ 1213.931069][T20894] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1213.938051][T20894] usb 3-1: No valid video chain found. [ 1214.309955][T21929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4976'. [ 1214.402083][T21929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4976'. [ 1214.465732][T21929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.482324][T21929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.612243][T21929] netlink: 'syz.2.4976': attribute type 3 has an invalid length. [ 1214.633008][T21929] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4976'. [ 1215.751263][ T5139] usb 3-1: USB disconnect, device number 46 [ 1216.659220][ T29] audit: type=1800 audit(1719901477.247:1314): pid=21943 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4983" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1216.705575][ T29] audit: type=1800 audit(1719901477.267:1315): pid=21943 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4983" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1216.760670][ T29] audit: type=1800 audit(1719901477.347:1316): pid=21946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4983" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1216.784921][ T29] audit: type=1800 audit(1719901477.377:1317): pid=21946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4983" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1220.807962][ T29] audit: type=1800 audit(1719901481.387:1318): pid=21980 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4993" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1220.846282][ T29] audit: type=1800 audit(1719901481.387:1319): pid=21980 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4993" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1220.906254][ T29] audit: type=1800 audit(1719901481.457:1320): pid=21982 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4993" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1220.956032][ T29] audit: type=1800 audit(1719901481.457:1321): pid=21982 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4993" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1222.319745][ T29] audit: type=1800 audit(1719901482.877:1322): pid=21998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4997" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1222.584628][ T29] audit: type=1800 audit(1719901482.877:1323): pid=21998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4997" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1223.022239][ T29] audit: type=1800 audit(1719901482.967:1324): pid=21999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4997" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1223.085091][ T29] audit: type=1800 audit(1719901482.987:1325): pid=21999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4997" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1224.498443][ T5186] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1224.708430][ T5186] usb 1-1: Using ep0 maxpacket: 8 [ 1224.725682][ T5186] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.737600][ T5186] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1224.747523][ T5186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.788559][ T5186] usb 1-1: config 0 descriptor?? [ 1224.809354][ T5186] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 1224.816730][ T5186] usb 1-1: No valid video chain found. [ 1225.120711][T22017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5002'. [ 1225.209157][T22017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5002'. [ 1225.241404][T22017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.259858][T22017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.301458][T22017] netlink: 'syz.0.5002': attribute type 3 has an invalid length. [ 1225.315481][T22017] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5002'. [ 1227.406925][ T29] audit: type=1800 audit(1719901487.977:1326): pid=22033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5006" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1227.456983][ T29] audit: type=1800 audit(1719901487.987:1327): pid=22033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5006" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1227.528161][ T5139] usb 1-1: USB disconnect, device number 77 [ 1227.891547][ T29] audit: type=1800 audit(1719901488.087:1328): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5006" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1228.159931][ T29] audit: type=1800 audit(1719901488.097:1329): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5006" name="bus" dev="sda1" ino=2020 res=0 errno=0 [ 1228.346862][T22044] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1229.668680][T10473] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1229.848351][T10473] usb 1-1: Using ep0 maxpacket: 8 [ 1229.856167][T10473] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.867167][T10473] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1229.879081][T10473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.891701][T10473] usb 1-1: config 0 descriptor?? [ 1229.909225][T10473] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 1229.916174][T10473] usb 1-1: No valid video chain found. [ 1230.293634][T22057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5011'. [ 1230.360599][T22057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5011'. [ 1230.392951][T22057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.419948][T22057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.472468][T22057] netlink: 'syz.0.5011': attribute type 3 has an invalid length. [ 1230.492678][T22057] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5011'. [ 1231.608500][ T5186] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1231.798297][ T5186] usb 3-1: Using ep0 maxpacket: 8 [ 1231.805983][ T5186] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.827337][ T5186] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1231.837498][ T5186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.849458][ T5186] usb 3-1: config 0 descriptor?? [ 1231.866260][ T5186] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1231.877974][ T5186] usb 3-1: No valid video chain found. [ 1232.171687][T22063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5014'. [ 1232.192876][T22063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5014'. [ 1232.207515][T22063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.220182][T22063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.244257][T22063] netlink: 'syz.2.5014': attribute type 3 has an invalid length. [ 1232.252503][T22063] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5014'. [ 1232.435152][T10473] usb 1-1: USB disconnect, device number 78 [ 1232.605060][T22070] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1234.340618][ T5186] usb 3-1: USB disconnect, device number 47 [ 1236.867001][T22092] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1239.249511][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.267500][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.531636][ T29] audit: type=1800 audit(1719901500.107:1330): pid=22114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5030" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1239.584386][ T29] audit: type=1800 audit(1719901500.107:1331): pid=22114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5030" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1239.638423][ T29] audit: type=1800 audit(1719901500.197:1332): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5030" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1239.659868][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.830462][T22124] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1241.277730][ T29] audit: type=1800 audit(1719901501.847:1333): pid=22134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5036" name="bus" dev="sda1" ino=2014 res=0 errno=0 [ 1241.353061][ T29] audit: type=1800 audit(1719901501.857:1334): pid=22134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5036" name="bus" dev="sda1" ino=2014 res=0 errno=0 [ 1241.404248][ T29] audit: type=1800 audit(1719901501.917:1335): pid=22135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5036" name="bus" dev="sda1" ino=2014 res=0 errno=0 [ 1241.455423][ T29] audit: type=1800 audit(1719901501.917:1336): pid=22135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5036" name="bus" dev="sda1" ino=2014 res=0 errno=0 [ 1243.647839][T22154] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1244.152608][ T29] audit: type=1800 audit(1719901504.737:1337): pid=22164 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5043" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1244.189079][ T29] audit: type=1800 audit(1719901504.737:1338): pid=22164 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5043" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1244.211403][ T29] audit: type=1800 audit(1719901504.797:1339): pid=22166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5043" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1246.678432][ T5139] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1246.838429][ T5139] usb 1-1: device descriptor read/64, error -71 [ 1247.118955][ T5139] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1247.288600][ T5139] usb 1-1: device descriptor read/64, error -71 [ 1247.475042][ T29] audit: type=1800 audit(1719901507.997:1340): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5050" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1247.508873][ T5139] usb usb1-port1: attempt power cycle [ 1247.620712][ T29] audit: type=1800 audit(1719901508.047:1341): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5050" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1248.352177][ T29] audit: type=1800 audit(1719901508.127:1342): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5050" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1248.374953][ T29] audit: type=1800 audit(1719901508.137:1343): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5050" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1248.468656][ T5139] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1248.513040][ T5139] usb 1-1: device descriptor read/8, error -71 [ 1248.667096][ T29] audit: type=1800 audit(1719901509.247:1344): pid=22197 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5052" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1248.707072][ T29] audit: type=1800 audit(1719901509.277:1345): pid=22197 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5052" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1248.749681][ T29] audit: type=1800 audit(1719901509.337:1346): pid=22198 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5052" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1248.798698][ T5139] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1248.847174][ T5139] usb 1-1: device descriptor read/8, error -71 [ 1248.968887][ T5139] usb usb1-port1: unable to enumerate USB device [ 1250.026801][ T29] audit: type=1800 audit(1719901510.607:1347): pid=22206 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5054" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1250.247606][ T29] audit: type=1800 audit(1719901510.667:1348): pid=22206 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5054" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1250.402528][ T29] audit: type=1800 audit(1719901510.807:1349): pid=22208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5054" name="bus" dev="sda1" ino=2019 res=0 errno=0 [ 1252.788627][ T5186] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1252.931175][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1252.931197][ T29] audit: type=1800 audit(1719901513.517:1351): pid=22232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.5061" name="bus" dev="sda1" ino=2014 res=0 errno=0 [ 1252.968905][ T5186] usb 3-1: device descriptor read/64, error -71 [ 1252.976540][ T29] audit: type=1800 audit(1719901513.547:1352): pid=22232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.5061" name="bus" dev="sda1" ino=2014 res=0 errno=0 [ 1253.037073][ T29] audit: type=1800 audit(1719901513.617:1353): pid=22233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.5061" name="bus" dev="sda1" ino=2014 res=0 errno=0 [ 1253.249404][ T5186] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1253.448558][ T5186] usb 3-1: device descriptor read/64, error -71 [ 1253.593301][ T5186] usb usb3-port1: attempt power cycle [ 1254.888566][ T5186] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1254.935532][ T5186] usb 3-1: device descriptor read/8, error -71 [ 1255.222832][ T5186] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1255.265012][ T5186] usb 3-1: device descriptor read/8, error -71 [ 1255.390179][ T5186] usb usb3-port1: unable to enumerate USB device [ 1257.054824][T22258] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1257.758319][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 1257.781150][ T30] Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 1257.842367][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1257.940052][ T30] task:kworker/1:0 state:D stack:21424 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 1258.081222][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 1258.180955][ T30] Call Trace: [ 1258.216728][ T30] [ 1258.247503][ T30] __schedule+0x1796/0x49d0 [ 1258.298329][ T30] ? __pfx___schedule+0x10/0x10 [ 1258.303907][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1258.311571][ T30] ? __pfx_lock_release+0x10/0x10 [ 1258.317475][ T30] ? kick_pool+0x45c/0x620 [ 1258.322277][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1258.327562][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1258.334050][ T30] ? schedule+0x90/0x320 [ 1258.338425][ T30] schedule+0x14b/0x320 [ 1258.342860][ T30] schedule_preempt_disabled+0x13/0x30 [ 1258.348803][ T30] __mutex_lock+0x6a4/0xd70 [ 1258.353519][ T30] ? __mutex_lock+0x527/0xd70 [ 1258.358446][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1258.364792][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1258.370712][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1258.377156][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1258.384281][ T30] ? process_scheduled_works+0x945/0x1830 [ 1258.390512][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1258.397346][ T30] ? process_scheduled_works+0x945/0x1830 [ 1258.405816][ T30] process_scheduled_works+0xa2c/0x1830 [ 1258.412724][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1258.420609][ T30] ? assign_work+0x364/0x3d0 [ 1258.425623][ T30] worker_thread+0x86d/0xd50 [ 1258.430766][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1258.436373][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1258.442678][ T30] kthread+0x2f0/0x390 [ 1258.448503][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1258.453976][ T30] ? __pfx_kthread+0x10/0x10 [ 1258.459068][ T30] ret_from_fork+0x4b/0x80 [ 1258.464320][ T30] ? __pfx_kthread+0x10/0x10 [ 1258.469216][ T30] ret_from_fork_asm+0x1a/0x30 [ 1258.474304][ T30] [ 1258.477596][ T30] INFO: task syz.3.4697:20834 blocked for more than 144 seconds. [ 1258.485926][ T30] Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 1258.494034][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1258.503121][ T30] task:syz.3.4697 state:D stack:22960 pid:20834 tgid:20832 ppid:12710 flags:0x00004002 [ 1258.514434][ T30] Call Trace: [ 1258.517894][ T30] [ 1258.524636][ T30] __schedule+0x1796/0x49d0 [ 1258.529788][ T30] ? __pfx___schedule+0x10/0x10 [ 1258.534810][ T30] ? __pfx_lock_release+0x10/0x10 [ 1258.540351][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1258.546266][ T30] ? schedule+0x90/0x320 [ 1258.550864][ T30] schedule+0x14b/0x320 [ 1258.555179][ T30] schedule_preempt_disabled+0x13/0x30 [ 1258.560883][ T30] __mutex_lock+0x6a4/0xd70 [ 1258.565512][ T30] ? kobject_put+0x443/0x480 [ 1258.570367][ T30] ? __mutex_lock+0x527/0xd70 [ 1258.575238][ T30] ? rfkill_unregister+0xd0/0x230 [ 1258.580521][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1258.585707][ T30] ? __pfx_device_del+0x10/0x10 [ 1258.590717][ T30] ? hci_sock_dev_event+0x2eb/0x5f0 [ 1258.596262][ T30] rfkill_unregister+0xd0/0x230 [ 1258.601340][ T30] hci_unregister_dev+0x336/0x4e0 [ 1258.607446][ T30] vhci_release+0x83/0xd0 [ 1258.612068][ T30] ? __pfx_vhci_release+0x10/0x10 [ 1258.617360][ T30] __fput+0x24a/0x8a0 [ 1258.621814][ T30] task_work_run+0x24f/0x310 [ 1258.627024][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1258.632745][ T30] ? do_exit+0xa22/0x27e0 [ 1258.637365][ T30] ? kmem_cache_free+0x145/0x350 [ 1258.645456][ T30] do_exit+0xa27/0x27e0 [ 1258.650295][ T30] ? __pfx_do_exit+0x10/0x10 [ 1258.654958][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1258.660845][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1258.666902][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1258.674026][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1258.679302][ T30] do_group_exit+0x207/0x2c0 [ 1258.684357][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1258.689967][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1258.695617][ T30] get_signal+0x16a1/0x1740 [ 1258.700692][ T30] ? __pfx_get_signal+0x10/0x10 [ 1258.705611][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1258.711526][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1258.717917][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1258.724105][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 1258.730387][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 1258.736186][ T30] do_syscall_64+0x100/0x230 [ 1258.743110][ T30] ? clear_bhb_loop+0x35/0x90 [ 1258.747995][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.754246][ T30] RIP: 0033:0x7f458ef75b99 [ 1258.758840][ T30] RSP: 002b:00007f458fcf3048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1258.767807][ T30] RAX: 0000000000010106 RBX: 00007f458f104078 RCX: 00007f458ef75b99 [ 1258.776026][ T30] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1258.784227][ T30] RBP: 00007f458eff677e R08: 0000000000000000 R09: 0000000000000000 [ 1258.792528][ T30] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1258.800802][ T30] R13: 000000000000006e R14: 00007f458f104078 R15: 00007fffb099fbc8 [ 1258.809150][ T30] [ 1258.812339][ T30] INFO: task syz.1.4708:20879 blocked for more than 144 seconds. [ 1258.820561][ T30] Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 1258.828493][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1258.837712][ T30] task:syz.1.4708 state:D stack:24472 pid:20879 tgid:20878 ppid:5084 flags:0x00004006 [ 1258.849026][ T30] Call Trace: [ 1258.853369][ T30] [ 1258.856527][ T30] __schedule+0x1796/0x49d0 [ 1258.862622][ T30] ? __pfx___schedule+0x10/0x10 [ 1258.868849][ T30] ? __pfx_lock_release+0x10/0x10 [ 1258.874171][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1258.880481][ T30] ? schedule+0x90/0x320 [ 1258.885082][ T30] schedule+0x14b/0x320 [ 1258.889716][ T30] schedule_preempt_disabled+0x13/0x30 [ 1258.895537][ T30] __mutex_lock+0x6a4/0xd70 [ 1258.900745][ T30] ? kobject_put+0x443/0x480 [ 1258.905431][ T30] ? __mutex_lock+0x527/0xd70 [ 1258.910579][ T30] ? rfkill_unregister+0xd0/0x230 [ 1258.915920][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1258.922089][ T30] ? __pfx_device_del+0x10/0x10 [ 1258.927529][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 1258.933852][ T30] rfkill_unregister+0xd0/0x230 [ 1258.939029][ T30] nfc_unregister_device+0x96/0x2a0 [ 1258.944666][ T30] virtual_ncidev_close+0x59/0x90 [ 1258.950328][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1258.957443][ T30] __fput+0x24a/0x8a0 [ 1258.962986][ T30] task_work_run+0x24f/0x310 [ 1258.970589][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1258.976505][ T30] ? do_exit+0xa22/0x27e0 [ 1258.982452][ T30] ? kmem_cache_free+0x145/0x350 [ 1258.989752][ T30] do_exit+0xa27/0x27e0 [ 1258.995379][ T30] ? __pfx_do_exit+0x10/0x10 [ 1259.003418][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1259.009170][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1259.015571][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1259.022308][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1259.027739][ T30] do_group_exit+0x207/0x2c0 [ 1259.033936][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1259.039505][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1259.044907][ T30] get_signal+0x16a1/0x1740 [ 1259.049642][ T30] ? __pfx_get_signal+0x10/0x10 [ 1259.054911][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1259.060753][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1259.067121][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1259.073253][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 1259.079333][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 1259.084954][ T30] do_syscall_64+0x100/0x230 [ 1259.089963][ T30] ? clear_bhb_loop+0x35/0x90 [ 1259.094746][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.100865][ T30] RIP: 0033:0x7f335057579b [ 1259.105513][ T30] RSP: 002b:00007f335130df20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1259.117625][ T30] RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 00007f335057579b [ 1259.125873][ T30] RDX: 00007f335130eff0 RSI: 0000000080085502 RDI: 0000000000000007 [ 1259.134245][ T30] RBP: 00007f335130eff0 R08: 0000000000000010 R09: 00312e6364755f79 [ 1259.143036][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 1259.151716][ T30] R13: 0000000800000000 R14: 00000000200001c0 R15: 00007f33505ecc35 [ 1259.159867][ T30] [ 1259.163002][ T30] INFO: task syz-executor:20933 blocked for more than 144 seconds. [ 1259.172509][ T30] Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 1259.181160][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1259.197592][ T30] task:syz-executor state:D stack:26544 pid:20933 tgid:20933 ppid:1 flags:0x00004004 [ 1259.208013][ T30] Call Trace: [ 1259.211591][ T30] [ 1259.214582][ T30] __schedule+0x1796/0x49d0 [ 1259.219214][ T30] ? __pfx___schedule+0x10/0x10 [ 1259.224201][ T30] ? __pfx_lock_release+0x10/0x10 [ 1259.229392][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1259.235445][ T30] ? schedule+0x90/0x320 [ 1259.239880][ T30] schedule+0x14b/0x320 [ 1259.244407][ T30] schedule_preempt_disabled+0x13/0x30 [ 1259.250254][ T30] __mutex_lock+0x6a4/0xd70 [ 1259.256368][ T30] ? __mutex_lock+0x527/0xd70 [ 1259.261227][ T30] ? rfkill_register+0x34/0x8c0 [ 1259.266239][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1259.271991][ T30] ? __init_waitqueue_head+0xae/0x150 [ 1259.277703][ T30] ? device_initialize+0x266/0x460 [ 1259.283561][ T30] rfkill_register+0x34/0x8c0 [ 1259.291805][ T30] hci_register_dev+0x407/0x8b0 [ 1259.297152][ T30] vhci_create_device+0x389/0x6d0 [ 1259.303408][ T30] vhci_write+0x3cb/0x480 [ 1259.308013][ T30] vfs_write+0xa72/0xc90 [ 1259.312536][ T30] ? __pfx_vhci_write+0x10/0x10 [ 1259.317930][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1259.324406][ T30] ksys_write+0x1a0/0x2c0 [ 1259.329015][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1259.334326][ T30] ? exc_page_fault+0x590/0x8c0 [ 1259.339751][ T30] ? do_syscall_64+0xb6/0x230 [ 1259.344629][ T30] do_syscall_64+0xf3/0x230 [ 1259.350384][ T30] ? clear_bhb_loop+0x35/0x90 [ 1259.355705][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.362103][ T30] RIP: 0033:0x7f64b3b746e0 [ 1259.366706][ T30] RSP: 002b:00007ffe21ab13f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1259.375793][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f64b3b746e0 [ 1259.385254][ T30] RDX: 0000000000000002 RSI: 00007ffe21ab140a RDI: 00000000000000ca [ 1259.394652][ T30] RBP: 00007f64b3d04a58 R08: 0000000000000000 R09: 00007f64b483d6c0 [ 1259.405026][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 1259.414225][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1259.423173][ T30] [ 1259.426851][ T30] [ 1259.426851][ T30] Showing all locks held in the system: [ 1259.434911][ T30] 3 locks held by kworker/1:0/25: [ 1259.440502][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1259.453072][ T30] #1: ffffc900001f7d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1259.471051][ T30] #2: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1259.483936][ T30] 1 lock held by khungtaskd/30: [ 1259.489604][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1259.499665][ T30] 2 locks held by kworker/u8:5/952: [ 1259.505194][ T30] #0: ffff8880b953e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1259.515491][ T30] #1: ffff8880b9528948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 1259.528601][ T30] 2 locks held by kworker/u8:6/1098: [ 1259.534203][ T30] 2 locks held by getty/4840: [ 1259.539137][ T30] #0: ffff88802abd20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1259.550359][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1259.561669][ T30] 1 lock held by syz-executor/5084: [ 1259.567601][ T30] #0: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1259.578601][ T30] 4 locks held by kworker/1:6/5138: [ 1259.584283][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1259.597902][ T30] #1: ffffc900042d7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1259.609982][ T30] #2: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x4f/0x180 [ 1259.620497][ T30] #3: ffff88802a63c100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 1259.631507][ T30] 1 lock held by syz.3.4697/20834: [ 1259.636852][ T30] #0: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1259.650850][ T30] 2 locks held by syz.1.4708/20879: [ 1259.657149][ T30] #0: ffff88802a63c100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 1259.668655][ T30] #1: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1259.680244][ T30] 2 locks held by syz-executor/20933: [ 1259.686441][ T30] #0: ffff888070863918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 1259.698065][ T30] #1: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 1259.708544][ T30] 2 locks held by syz-executor/21010: [ 1259.715181][ T30] #0: ffff88802e123918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 1259.726746][ T30] #1: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 1259.737059][ T30] 2 locks held by syz-executor/21012: [ 1259.745252][ T30] #0: ffff888011237918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 1259.755718][ T30] #1: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 1259.766666][ T30] 2 locks held by syz-executor/21565: [ 1259.772886][ T30] #0: ffff88802c2bc918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 1259.783449][ T30] #1: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 1259.794240][ T30] 2 locks held by syz-executor/21615: [ 1259.800010][ T30] #0: ffff88807b9e9918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 1259.812105][ T30] #1: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 1259.822597][ T30] 2 locks held by syz-executor/21619: [ 1259.828059][ T30] #0: ffff888067e98918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 1259.838696][ T30] #1: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 1259.851492][ T30] 2 locks held by syz-executor/22058: [ 1259.857655][ T30] #0: ffff888061e15118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 1259.868761][ T30] #1: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 1259.879256][ T30] 2 locks held by syz-executor/22100: [ 1259.884783][ T30] #0: ffff88807bb43118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 1259.896889][ T30] #1: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 1259.907137][ T30] 2 locks held by syz-executor/22105: [ 1259.912853][ T30] #0: ffff8880200fe918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 1259.923317][ T30] #1: ffffffff8f8a9528 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 1259.933822][ T30] [ 1259.936240][ T30] ============================================= [ 1259.936240][ T30] [ 1259.945048][ T30] NMI backtrace for cpu 1 [ 1259.949452][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 1259.960452][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1259.971902][ T30] Call Trace: [ 1259.975465][ T30] [ 1259.978449][ T30] dump_stack_lvl+0x241/0x360 [ 1259.983331][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1259.988571][ T30] ? __pfx__printk+0x10/0x10 [ 1259.993234][ T30] ? vprintk_emit+0x631/0x770 [ 1259.997968][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1260.003040][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1260.008929][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1260.015538][ T30] ? _printk+0xd5/0x120 [ 1260.020093][ T30] ? __pfx__printk+0x10/0x10 [ 1260.024939][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1260.030852][ T30] ? __pfx__printk+0x10/0x10 [ 1260.035742][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1260.040949][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1260.047276][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1260.053459][ T30] watchdog+0xfde/0x1020 [ 1260.058067][ T30] ? watchdog+0x1ea/0x1020 [ 1260.063106][ T30] ? __pfx_watchdog+0x10/0x10 [ 1260.067914][ T30] kthread+0x2f0/0x390 [ 1260.072396][ T30] ? __pfx_watchdog+0x10/0x10 [ 1260.077165][ T30] ? __pfx_kthread+0x10/0x10 [ 1260.082193][ T30] ret_from_fork+0x4b/0x80 [ 1260.086647][ T30] ? __pfx_kthread+0x10/0x10 [ 1260.091807][ T30] ret_from_fork_asm+0x1a/0x30 [ 1260.096730][ T30] [ 1260.100634][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1260.106058][ C0] NMI backtrace for cpu 0 [ 1260.106076][ C0] CPU: 0 PID: 1098 Comm: kworker/u8:6 Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 1260.106102][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1260.106115][ C0] Workqueue: bat_events batadv_nc_worker [ 1260.106147][ C0] RIP: 0010:check_preemption_disabled+0x4d/0x120 [ 1260.106180][ C0] Code: 61 90 86 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e <41> 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 [ 1260.106197][ C0] RSP: 0018:ffffc900045e79b0 EFLAGS: 00000282 [ 1260.106212][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817266e4 [ 1260.106225][ C0] RDX: 0000000000000000 RSI: ffffffff8c1f1560 RDI: ffffffff8c1f1520 [ 1260.106238][ C0] RBP: ffffc900045e7b40 R08: ffffffff8fac21ef R09: 1ffffffff1f5843d [ 1260.106252][ C0] R10: dffffc0000000000 R11: fffffbfff1f5843e R12: 1ffff920008bcf44 [ 1260.106266][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1260.106280][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1260.106296][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1260.106309][ C0] CR2: 000000110c34fd84 CR3: 000000000e132000 CR4: 00000000003506f0 [ 1260.106326][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1260.106338][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1260.106350][ C0] Call Trace: [ 1260.106358][ C0] [ 1260.106367][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1260.106389][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1260.106411][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1260.106431][ C0] ? nmi_handle+0x2a/0x5a0 [ 1260.106468][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1260.106489][ C0] ? nmi_handle+0x14f/0x5a0 [ 1260.106516][ C0] ? nmi_handle+0x2a/0x5a0 [ 1260.106544][ C0] ? check_preemption_disabled+0x4d/0x120 [ 1260.106572][ C0] ? default_do_nmi+0x63/0x160 [ 1260.106605][ C0] ? exc_nmi+0x123/0x1f0 [ 1260.106625][ C0] ? end_repeat_nmi+0xf/0x53 [ 1260.106657][ C0] ? lock_acquire+0xd4/0x550 [ 1260.106676][ C0] ? check_preemption_disabled+0x4d/0x120 [ 1260.106705][ C0] ? check_preemption_disabled+0x4d/0x120 [ 1260.106734][ C0] ? check_preemption_disabled+0x4d/0x120 [ 1260.106764][ C0] [ 1260.106770][ C0] [ 1260.106777][ C0] rcu_is_watching+0x15/0xb0 [ 1260.106798][ C0] lock_acquire+0xe3/0x550 [ 1260.106821][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1260.106842][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1260.106866][ C0] ? __pfx_lock_release+0x10/0x10 [ 1260.106888][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1260.106913][ C0] batadv_nc_worker+0xec/0x610 [ 1260.106936][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1260.106959][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1260.106984][ C0] ? process_scheduled_works+0x945/0x1830 [ 1260.107003][ C0] process_scheduled_works+0xa2c/0x1830 [ 1260.107038][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1260.107063][ C0] ? assign_work+0x364/0x3d0 [ 1260.107104][ C0] worker_thread+0x86d/0xd50 [ 1260.107133][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1260.107156][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1260.107175][ C0] kthread+0x2f0/0x390 [ 1260.107197][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1260.107217][ C0] ? __pfx_kthread+0x10/0x10 [ 1260.107239][ C0] ret_from_fork+0x4b/0x80 [ 1260.107264][ C0] ? __pfx_kthread+0x10/0x10 [ 1260.107286][ C0] ret_from_fork_asm+0x1a/0x30 [ 1260.107327][ C0] [ 1260.110644][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1260.110668][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 1260.110696][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1260.110712][ T30] Call Trace: [ 1260.110723][ T30] [ 1260.110736][ T30] dump_stack_lvl+0x241/0x360 [ 1260.110781][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1260.110819][ T30] ? __pfx__printk+0x10/0x10 [ 1260.110857][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1260.110894][ T30] ? vscnprintf+0x5d/0x90 [ 1260.110924][ T30] panic+0x349/0x860 [ 1260.110960][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1260.110991][ T30] ? __pfx_panic+0x10/0x10 [ 1260.111021][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1260.111057][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1260.111085][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1260.111112][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1260.111140][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1260.111172][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1260.111204][ T30] watchdog+0x101d/0x1020 [ 1260.111234][ T30] ? watchdog+0x1ea/0x1020 [ 1260.111269][ T30] ? __pfx_watchdog+0x10/0x10 [ 1260.111296][ T30] kthread+0x2f0/0x390 [ 1260.111326][ T30] ? __pfx_watchdog+0x10/0x10 [ 1260.111353][ T30] ? __pfx_kthread+0x10/0x10 [ 1260.111384][ T30] ret_from_fork+0x4b/0x80 [ 1260.111416][ T30] ? __pfx_kthread+0x10/0x10 [ 1260.111447][ T30] ret_from_fork_asm+0x1a/0x30 [ 1260.111499][ T30] [ 1260.112914][ T30] Kernel Offset: disabled [ 1260.643224][ T30] Rebooting in 86400 seconds..