last executing test programs: 12m46.980119812s ago: executing program 32 (id=79): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 9m8.136458389s ago: executing program 33 (id=723): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lstat(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62"], 0x10b8}, 0x8000) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010020641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e220064"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x3e}, 0x28) 7m24.677100977s ago: executing program 0 (id=1024): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) openat(r1, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x400, 0x114) close_range(r0, 0xffffffffffffffff, 0x0) 7m22.589448878s ago: executing program 0 (id=1034): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x2b, 0x80801, 0x1) statx(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000002480)) geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000008f00), &(0x7f0000008f40)=0xc) statx(0xffffffffffffff9c, &(0x7f00000098c0)='./file0\x00', 0x100, 0x40, &(0x7f0000009900)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) 7m20.588809136s ago: executing program 0 (id=1040): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000040), 0x43000002) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x1, 0x4}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r3, &(0x7f0000000000)="5a0003", 0x3) listen(0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) landlock_create_ruleset(0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)}], 0x2) 7m18.283801884s ago: executing program 0 (id=1042): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet(0x2, 0x2, 0x1) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') semtimedop(0x0, &(0x7f0000000080)=[{0x1, 0x9130, 0x1000}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='3', 0x1}], 0x1) 7m8.139732418s ago: executing program 3 (id=1069): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000040), 0x43000002) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x1, 0x4}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r3, &(0x7f0000000000)="5a0003", 0x3) listen(0xffffffffffffffff, 0x0) r4 = getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x0, 0x5002) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) landlock_create_ruleset(0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)}], 0x2) 7m6.54433416s ago: executing program 3 (id=1071): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) write$P9_RSTATFS(r1, &(0x7f0000000200)={0x43, 0x9, 0x1, {0x25, 0x0, 0x6, 0xfffffffffffffffa, 0x1, 0xfffffffbffff8000, 0x8, 0x0, 0x9}}, 0x43) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xade, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) dup3(r2, r0, 0x80000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x80000000, 0x100005, 0x5, 0x9, 0x7, "73893a000062f0fd00000000000000710de6eb", 0x10000000, 0xda9c}) read(r0, 0x0, 0x0) 7m6.128042624s ago: executing program 3 (id=1073): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x2}, 0x8) 7m5.716001289s ago: executing program 3 (id=1075): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) close(r1) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) 7m3.448771909s ago: executing program 3 (id=1079): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x8804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}, 0x40000100) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0xc, 0xffffffffffffffff, 0xffffffff}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 7m1.850133459s ago: executing program 34 (id=1042): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet(0x2, 0x2, 0x1) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') semtimedop(0x0, &(0x7f0000000080)=[{0x1, 0x9130, 0x1000}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='3', 0x1}], 0x1) 7m1.475923322s ago: executing program 3 (id=1084): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES64=0x0, @ANYRES16, @ANYRES64=r0], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe97d}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000440)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) 6m45.357963901s ago: executing program 35 (id=1084): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES64=0x0, @ANYRES16, @ANYRES64=r0], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe97d}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000440)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) 4m57.709652637s ago: executing program 9 (id=1442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x48002) 4m55.995777821s ago: executing program 9 (id=1448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 4m53.69881658s ago: executing program 9 (id=1453): msgrcv(0x0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000100"], 0x8, 0x800) 4m53.197877208s ago: executing program 9 (id=1456): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m48.674835737s ago: executing program 9 (id=1465): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.size\x00', &(0x7f00000003c0)='./cgroup/syz0\x00', 0xe, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x40000, 0x0) readv(r3, &(0x7f0000000740)=[{&(0x7f0000000340)=""/122, 0x7a}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) rt_sigqueueinfo(r1, 0x1b, &(0x7f0000000400)={0x26, 0x9, 0xb}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffee9, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x800}, 0x8) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x69, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa08004500005b006400000402907800000000ac1414bb000090780067000558c6b5b268286a564d5eef0002fbdf08f9ede617c104f0a3eadb08b87f54f3df2be766f9ad6e15ede93fa1d5d284bcf46a4bad2c4ef594ae909cdd8d76997e0000"], 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000180)=0x4, 0x4) 4m46.925779043s ago: executing program 9 (id=1469): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) setns(0xc9, 0x0) memfd_create(0x0, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}}, 0x1c) write(r4, &(0x7f0000000300), 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 4m31.261327471s ago: executing program 36 (id=1469): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) setns(0xc9, 0x0) memfd_create(0x0, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}}, 0x1c) write(r4, &(0x7f0000000300), 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 4m24.660783084s ago: executing program 6 (id=1514): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) io_setup(0x9, &(0x7f0000000000)=0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r4, 0xa) accept4$bt_l2cap(r4, 0x0, 0x0, 0x80000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x24101, 0x0) io_submit(r2, 0x0, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, 0x0, 0x0) r7 = dup(r5) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000480)={r5, &(0x7f00000001c0)='\'[\x00', 0x10080, &(0x7f0000000380)={@align=0x2, {0x80, 0x1, 0x0, 0x179}}, 0x8baf, &(0x7f0000000400), &(0x7f0000000440)=0x40}) sendmsg$nl_route(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="900000001300040928bd7000e1dbdf250000000045aeb81897c528faa16f8aa061511c5ee29f", @ANYRES32, @ANYBLOB="00000200008500004c001980170002005c283a24232825282f272e7d2840255c2f2b0000080001000700000014000500b890b1946c27cc9bcb717b07505d1931140005000581e093d3410493e8cdde5d449b7a280a0002000180c200000e000008000f000d000000080029004de400000800250003000000"], 0x90}}, 0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 4m24.013491084s ago: executing program 6 (id=1518): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0xfc, 0x7f}, 0x2) 4m23.659757281s ago: executing program 6 (id=1520): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r0, 0x0, 0x0, 0xc040) 4m23.318559675s ago: executing program 6 (id=1522): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @remote}, {0x1, @remote}, 0x4a, {0x2, 0x80fe, @local}, 'veth1_to_bridge\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1a, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000020000085000000ae000000950000000000ea00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x101201) 4m21.951713386s ago: executing program 6 (id=1527): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4m18.483461048s ago: executing program 6 (id=1532): futex(&(0x7f0000000580), 0x189, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x2) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x8) unshare(0x40000000) 4m3.248017582s ago: executing program 37 (id=1532): futex(&(0x7f0000000580), 0x189, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x2) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x8) unshare(0x40000000) 2m28.847863507s ago: executing program 7 (id=1864): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(r2, 0x0, 0x0, 0x80000) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x5437, 0x0) 2m25.81239913s ago: executing program 7 (id=1867): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000300)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r1, 0x3b90, &(0x7f0000000600)="2800000000000000efbeadde0300000005") close_range(r0, 0xffffffffffffffff, 0x0) 2m25.203818916s ago: executing program 7 (id=1872): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2m23.82197117s ago: executing program 7 (id=1876): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 2m22.352462652s ago: executing program 7 (id=1880): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x71, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xb2, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000001, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x83b00, 0x800, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m17.527214807s ago: executing program 7 (id=1897): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x64000600) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) accept$nfc_llcp(r0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000006c0)="3138c4", 0x3) 2m2.370051459s ago: executing program 38 (id=1897): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x64000600) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) accept$nfc_llcp(r0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000006c0)="3138c4", 0x3) 19.232319013s ago: executing program 2 (id=2199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 17.972125551s ago: executing program 2 (id=2203): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = dup(0xffffffffffffffff) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/bus/usb/devices/usb1/bNumInterfaces\x00', 0x0, 0x0) read(r5, &(0x7f0000000500)=""/16, 0x10) 16.14749922s ago: executing program 8 (id=2204): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x64000600) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) accept$nfc_llcp(r0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000006c0)="3138c4", 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.272372302s ago: executing program 2 (id=2206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 10.909897278s ago: executing program 4 (id=2214): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 10.893085983s ago: executing program 2 (id=2215): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) 10.542647078s ago: executing program 8 (id=2217): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) 9.451589073s ago: executing program 4 (id=2220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345afd327b", 0xd}, {&(0x7f00000008c0)="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", 0xcf3}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 9.392695091s ago: executing program 5 (id=2221): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sg(0x0, 0xe000000000000000, 0x324182) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x278) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './bus/file0\x00'}) syz_emit_ethernet(0xb2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, 0x0, 0x0, 0x4, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) acct(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x104}, 0x50) syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000480)=ANY=[@ANYBLOB="696f636861727365743d63703733372c6e6f696e746567726974792c696f636861727365743d69736f383835392d322c6572726f72733d636f6e74696e75652c646973636172642c6572726f72733d72656d6f756e742d726f2c696e746567726974792c6e6f71756f74612c696f636861727365743d63703836392c6572726f72733d636f6e74696e75652c67727071756f74612c00b7b5c85fd673808550e32e51a59133ec4f5f689edcb4070f7bcbd738e05986111cdb11c1ab6afe0f4b610d8aa9ffe540c2f97fbf970bda40883f0c7f627763a62d54a62be0c00d48"], 0x24, 0x628f, &(0x7f00000065c0)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000000)='./bus\x00', 0x12840c, 0x0, 0x0, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000001180)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) 7.407073078s ago: executing program 8 (id=2222): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xb2, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000001, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x83b00, 0x800, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6.520291744s ago: executing program 1 (id=2223): syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a", @ANYRES64], 0x0) 6.111897444s ago: executing program 4 (id=2224): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200103, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x80) dup3(r2, r1, 0x80000) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)={0x20000013}) 5.826788875s ago: executing program 5 (id=2225): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 5.354378914s ago: executing program 1 (id=2226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 5.015819337s ago: executing program 4 (id=2227): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000340)="58ad85599879e0139456904e05214a97c9183fd6fe318d37c43bf590ca95e429569e80459c7aecc5db7a99374eaf9c7305aadd56674dd42f63639da6000000ce8f84437d0dfcc5abd37c99a93bd0f819532a856c07f6361e2e04e09592db05071dc2631592fd19eb45faf515b2cf9339eed1327d210bfd33115524c92a1296801f163520a103fee7fbdf01c6f8ff84054adf3912599bd655460a45ce3641829f3f000000000000000000004c4f8f0f342440859de7c03a9e82", &(0x7f0000000840)="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"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="2b6e65745f636c73202b696f202d637075200068756765746c62202b726c696d697420e32156a46032d6b5453a943cac9fa48808e2cd7061fbf2c698b6d32150dfcc7e31574c45facb1ab6ce461bb42fe53a33640d273d34fe21ff2fd593fd84f40cd4c7f2887437a9c0f719f75dd65c3e67cd6e791abc2117450c09530600000000000000ae8b10ff74729fb6d8a26815a36b52b4d2abc3a3eb08e7311417e90f2520fe86745f406f34f231c740473167a0bacd0458cd8f5921a610559aa1a2504759f7eb4c9982bb5c2f0f2883c3212178b2b9cef9a9c1c6f68d9da885ab03ba7e9021ed51"], 0x23) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b0005de"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x80000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) sendmmsg$alg(r7, 0x0, 0x0, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1}, 0x0) 5.015331247s ago: executing program 1 (id=2228): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@xino_on}]}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d637034332c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00"], 0x1, 0x5dd, &(0x7f0000001f80)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4087, 0xff7) 4.706341734s ago: executing program 1 (id=2229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r0, 0x0, 0x0) 4.617649815s ago: executing program 5 (id=2230): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0xa) accept4$bt_l2cap(r3, 0x0, 0x0, 0x80000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x24101, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) r5 = dup(r4) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000480)={r4, &(0x7f00000001c0)='\'[\x00', 0x10080, &(0x7f0000000380)={@align=0x2, {0x80, 0x1, 0x0, 0x179}}, 0x8baf, &(0x7f0000000400), &(0x7f0000000440)=0x40}) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="900000001300040928bd7000e1dbdf250000000045aeb81897c528faa16f8aa061511c5ee29f", @ANYRES32, @ANYBLOB="00000200008500004c001980170002005c283a24232825282f272e7d2840255c2f2b0000080001000700000014000500b890b1946c27cc9bcb717b07505d1931140005000581e093d3410493e8cdde5d449b7a280a0002000180c200000e000008000f000d000000080029004de400000800250003000000"], 0x90}}, 0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 4.583214295s ago: executing program 8 (id=2231): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$cont(0x18, r0, 0x40, 0x0) ptrace$cont(0x20, r0, 0x200, 0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="9e7eafc0e8f2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xf, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xff80, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4.363964563s ago: executing program 1 (id=2232): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='logon\x00', 0x0, &(0x7f0000000500), 0x0, r0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x14, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) listen(r2, 0x9) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc1a81, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xff00, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.124595495s ago: executing program 5 (id=2233): add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x1, @loopback, @private2, [@hopopts]}}}}}}}, 0x0) 4.047083613s ago: executing program 2 (id=2234): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000054c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000040)="e1", 0x1}], 0x1}}], 0x1, 0x20040804) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011) 3.007824781s ago: executing program 4 (id=2235): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345afd327b", 0xd}, {&(0x7f00000008c0)="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", 0xcf3}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 2.879765382s ago: executing program 1 (id=2236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', 0x0, 0x0, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)) 2.599451387s ago: executing program 0 (id=1942): r0 = memfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.495269175s ago: executing program 8 (id=2237): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$pptp(0x18, 0x1, 0x2) socket(0x11, 0x80a, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x8d0) 2.437011714s ago: executing program 2 (id=2238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSWINSZ(r4, 0x5414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000700)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x4000000, &(0x7f0000001040)=ANY=[@ANYBLOB="696f636861727365743d6d6163677265656b2c0075b26038ff1837c965f9b83e349c9ce965cdec5a1dfcf07fa09e1d6da48000b8"], 0x1, 0x5d32, &(0x7f000000bac0)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000001f80)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x50) 2.376123468s ago: executing program 5 (id=2239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.259900815s ago: executing program 0 (id=2240): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x2000040) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x132a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 660.977358ms ago: executing program 4 (id=2241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/78, 0x4e, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002a80)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 567.559344ms ago: executing program 8 (id=2242): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xb2, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000001, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x83b00, 0x800, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 0s ago: executing program 5 (id=2243): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) kernel console output (not intermixed with test programs): no altsetting 0 [ 408.365034][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.440181][ T10] usb 5-1: Product: syz [ 408.465438][ T10] usb 5-1: Manufacturer: syz [ 408.484327][ T10] usb 5-1: SerialNumber: syz [ 408.785000][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 408.824484][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 408.841886][ T10] usb 5-1: selecting invalid altsetting 0 [ 408.906601][ T10] usb 5-1: selecting invalid altsetting 0 [ 408.930262][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 409.640905][ T10] usb 5-1: USB disconnect, device number 11 [ 412.719254][ T8888] jffs2: notice: (8888) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 412.849919][ T8888] netlink: 72 bytes leftover after parsing attributes in process `syz.7.963'. [ 413.612714][ T8896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.966'. [ 413.624223][ T8896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.966'. [ 413.633543][ T8896] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 413.642573][ T8896] iwpm_hello_cb: Unable to parse nlmsg [ 414.501389][ T8903] netlink: 'syz.6.968': attribute type 13 has an invalid length. [ 420.772815][ T8947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.983'. [ 420.782029][ T8947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.983'. [ 420.793960][ T8947] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 420.802854][ T8947] iwpm_hello_cb: Unable to parse nlmsg [ 421.772357][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 180 seconds [ 421.783297][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 180 seconds [ 421.794745][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 180 seconds [ 427.724704][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 240 seconds [ 428.860442][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 240 seconds [ 428.860462][ T1365] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 180 seconds [ 428.871771][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 240 seconds [ 431.602487][ C1] nvme nvme0: long keepalive RTT (1340 ms) [ 434.465292][ T9050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.987888][ T5736] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 435.183195][ T5736] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 435.228758][ T5736] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 435.251977][ T5736] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 435.289907][ T5736] usb 4-1: config 220 has no interface number 2 [ 435.360990][ T5736] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 435.545766][ T5736] usb 4-1: config 220 interface 0 has no altsetting 0 [ 435.644695][ T5736] usb 4-1: config 220 interface 76 has no altsetting 0 [ 435.728566][ T5736] usb 4-1: config 220 interface 1 has no altsetting 0 [ 435.886669][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.986863][ T5736] usb 4-1: Product: syz [ 436.054781][ T5736] usb 4-1: Manufacturer: syz [ 436.130837][ T5736] usb 4-1: SerialNumber: syz [ 437.341148][ T5736] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 437.360434][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 330 seconds [ 437.371352][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 330 seconds [ 437.387284][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 330 seconds [ 437.390923][ T5736] uvcvideo 4-1:220.0: No valid video chain found. [ 437.448508][ T5736] usb 4-1: selecting invalid altsetting 0 [ 437.638132][ T9077] futex_wake_op: syz.6.1027 tries to shift op by 144; fix this program [ 438.518862][ T5736] usb 4-1: selecting invalid altsetting 0 [ 438.524641][ T5736] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 438.550736][ T5736] usb 4-1: USB disconnect, device number 8 [ 439.414984][ T9089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.938412][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.948932][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.399310][ T9106] futex_wake_op: syz.0.1040 tries to shift op by 144; fix this program [ 443.331248][ T9123] binder: 9122:9123 ioctl c0306201 200000000540 returned -22 [ 443.743221][ T9132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.690508][ T9175] binder: 9173:9175 ioctl c0306201 200000000540 returned -22 [ 452.184314][ T1365] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 210 seconds [ 452.195356][ T1365] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 210 seconds [ 452.245323][ T1365] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 210 seconds [ 457.348568][ T5613] Bluetooth: hci6: command 0x0406 tx timeout [ 459.171783][ T5903] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 210 seconds [ 459.172316][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 270 seconds [ 459.221370][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 270 seconds [ 459.232405][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 270 seconds [ 460.399715][ T2352] pvrusb2: request_firmware fatal error with code=-110 [ 460.431173][ T9264] netlink: 'syz.7.1085': attribute type 2 has an invalid length. [ 460.469996][ T2352] pvrusb2: Failure uploading firmware1 [ 460.484602][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 460.496883][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 460.513963][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 460.574578][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 460.588560][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.633775][ T2352] pvrusb2: Device initialization was not successful. [ 460.642445][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 460.652625][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 461.328042][ T1210] pvrusb2: Device being rendered inoperable [ 462.714121][ T5621] Bluetooth: hci5: command tx timeout [ 464.804455][ T5621] Bluetooth: hci5: command tx timeout [ 465.671588][ T9263] lo speed is unknown, defaulting to 1000 [ 466.878560][ T5621] Bluetooth: hci5: command tx timeout [ 467.360052][ T9328] netlink: 'syz.6.1098': attribute type 2 has an invalid length. [ 467.698381][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 360 seconds [ 467.712456][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 360 seconds [ 467.724265][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 360 seconds [ 468.948273][ T5621] Bluetooth: hci5: command tx timeout [ 471.312849][ T9263] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.343407][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.378952][ T9263] bridge_slave_0: entered allmulticast mode [ 471.416466][ T9263] bridge_slave_0: entered promiscuous mode [ 471.467704][ T9263] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.519398][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.528828][ T9263] bridge_slave_1: entered allmulticast mode [ 471.560527][ T9263] bridge_slave_1: entered promiscuous mode [ 471.588253][ T1210] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 472.151836][ T9263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.709947][ T9263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.729794][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.811968][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.472698][ T9392] pim6reg: entered allmulticast mode [ 473.521129][ T9263] team0: Port device team_slave_0 added [ 473.600390][ T9263] team0: Port device team_slave_1 added [ 474.003860][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.030330][ T1210] usb 8-1: unable to get BOS descriptor or descriptor too short [ 474.052053][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.082862][ T1210] usb 8-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 474.099632][ T1210] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 474.107434][ T1210] usb 8-1: can't read configurations, error -71 [ 474.121819][ T9263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.374230][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.130950][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.474657][ T9263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.697911][ T45] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 475.810220][ T9263] hsr_slave_0: entered promiscuous mode [ 475.825146][ T9263] hsr_slave_1: entered promiscuous mode [ 475.967645][ T45] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 475.973759][ T9263] debugfs: 'hsr0' already exists in 'hsr' [ 476.005162][ T5757] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 476.134526][ T9263] Cannot create hsr debugfs directory [ 476.169454][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.182072][ T45] usb 7-1: Product: syz [ 476.184544][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 476.187348][ T45] usb 7-1: Manufacturer: syz [ 476.187371][ T45] usb 7-1: SerialNumber: syz [ 476.192865][ T45] usb 7-1: config 0 descriptor?? [ 476.215113][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 476.223582][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 476.243839][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 476.253690][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 476.310464][ T5757] usb 5-1: Using ep0 maxpacket: 8 [ 476.331731][ T5757] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 476.375195][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.417252][ T5757] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 476.472071][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 476.533575][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 476.575033][ T5757] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 476.646119][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 476.657541][ T45] mos7840 7-1:0.0: required endpoints missing [ 476.664580][ T5757] usb 5-1: Product: syz [ 476.686166][ T5757] usb 5-1: Manufacturer: syz [ 476.713393][ T5757] usb 5-1: SerialNumber: syz [ 476.755085][ T5757] usb 5-1: config 0 descriptor?? [ 476.785158][ T45] usb 7-1: USB disconnect, device number 3 [ 476.989702][ T5757] radio-si470x 5-1:0.0: DeviceID=0xc8f2 ChipID=0x0000 [ 477.027329][ T5757] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 477.196870][ T5757] radio-si470x 5-1:0.0: software version 200, hardware version 242 [ 477.232524][ T5757] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 477.409782][ T5757] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 478.109448][ T5757] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 478.155062][ T5757] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 478.212637][ T9263] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 478.236861][ T5757] usb 5-1: USB disconnect, device number 12 [ 478.308184][ T5621] Bluetooth: hci0: command tx timeout [ 478.323903][ T9263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 478.394040][ T9263] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 478.421952][ T9263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.445461][ T9263] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.507336][ T9263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.545702][ T9263] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 479.838878][ T9263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.017381][ T6000] syz_tun (unregistering): left allmulticast mode [ 480.192292][ T9460] siw: device registration error -23 [ 480.389017][ T5621] Bluetooth: hci0: command tx timeout [ 481.059438][ T9417] lo speed is unknown, defaulting to 1000 [ 481.873840][ T29] audit: type=1800 audit(1787823160.264:3): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1139" name="p_chmask" dev="configfs" ino=21871 res=0 errno=0 [ 482.312590][ T6567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.497980][ T5621] Bluetooth: hci0: command tx timeout [ 482.703301][ T9263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.841571][ T6567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.902017][ T9263] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.016989][ T6567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.081285][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.088520][ T6884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.153806][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.161097][ T6884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.273519][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 240 seconds [ 483.286682][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 240 seconds [ 483.299121][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 240 seconds [ 483.302913][ T6567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.582036][ T9263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.617460][ T9263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.603432][ T5621] Bluetooth: hci0: command tx timeout [ 486.128280][ T9417] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.135617][ T9417] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.143602][ T9417] bridge_slave_0: entered allmulticast mode [ 486.152054][ T9417] bridge_slave_0: entered promiscuous mode [ 486.219890][ T9417] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.244336][ T9417] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.259037][ T9417] bridge_slave_1: entered allmulticast mode [ 486.288622][ T9417] bridge_slave_1: entered promiscuous mode [ 486.429619][ T9512] siw: device registration error -23 [ 487.491407][ T9417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.539714][ T9417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.274324][ T9522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.530551][ T9417] team0: Port device team_slave_0 added [ 488.546525][ T9417] team0: Port device team_slave_1 added [ 488.692426][ T9417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.715665][ T9417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.792828][ T9417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.780748][ T5903] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 240 seconds [ 489.816754][ T6567] bridge_slave_1: left allmulticast mode [ 489.836677][ T6567] bridge_slave_1: left promiscuous mode [ 489.841429][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 300 seconds [ 489.846109][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.853035][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 300 seconds [ 489.871014][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 300 seconds [ 489.901621][ T6567] bridge_slave_0: left allmulticast mode [ 489.933869][ T6567] bridge_slave_0: left promiscuous mode [ 489.964619][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.014398][ T9555] siw: device registration error -23 [ 491.989284][ T9558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1163'. [ 491.998461][ T9558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1163'. [ 492.007414][ T9558] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 492.016513][ T9558] iwpm_hello_cb: Unable to parse nlmsg [ 493.209488][ T6567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.209813][ T9577] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1166'. [ 493.238194][ T6567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.245904][ T9580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.260320][ T6567] bond0 (unregistering): Released all slaves [ 493.290521][ T9417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.313008][ T9417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.341291][ T9417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.507164][ T9578] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1147'. [ 493.544422][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 493.857058][ T9589] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 495.614535][ T9417] hsr_slave_0: entered promiscuous mode [ 495.684430][ T9417] hsr_slave_1: entered promiscuous mode [ 495.788929][ T9417] debugfs: 'hsr0' already exists in 'hsr' [ 495.841475][ T9417] Cannot create hsr debugfs directory [ 496.061804][ T9606] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1175'. [ 496.071006][ T9606] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1175'. [ 496.080245][ T9606] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 496.091481][ T9606] iwpm_hello_cb: Unable to parse nlmsg [ 497.495122][ T9614] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 497.508398][ T9614] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 498.287378][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 390 seconds [ 498.303365][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 390 seconds [ 498.323879][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 390 seconds [ 498.734172][ T6567] hsr_slave_0: left promiscuous mode [ 498.980703][ T6567] hsr_slave_1: left promiscuous mode [ 498.997346][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.019719][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.640902][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.693384][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.742959][ T6567] veth1_macvtap: left promiscuous mode [ 499.769739][ T6567] veth0_macvtap: left promiscuous mode [ 499.794702][ T6567] veth1_vlan: left promiscuous mode [ 499.824909][ T6567] veth0_vlan: left promiscuous mode [ 499.861530][ T9638] siw: device registration error -23 [ 501.428507][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.436209][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.771551][ T6567] team0 (unregistering): Port device team_slave_1 removed [ 504.810321][ T6567] team0 (unregistering): Port device team_slave_0 removed [ 505.145027][ T5268] 8021q: adding VLAN 0 to HW filter on device eth6 [ 505.238637][ T9666] dummy0: entered promiscuous mode [ 505.250806][ T5776] lo speed is unknown, defaulting to 1000 [ 505.279996][ T5776] syz2: Port: 1 Link DOWN [ 505.288986][ T9666] dummy0: entered allmulticast mode [ 505.301068][ T58] smbdirect: ib_dev[syz2] removed [ 505.554396][ T9263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.827482][ T9690] 9p: Bad value for 'wfdno' [ 506.940611][ T9698] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.1200'. [ 507.740350][ T9417] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 508.590269][ T9417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 508.602724][ T9417] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 508.848785][ T9417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.912128][ T9417] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 508.975285][ T9417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 508.991982][ T9417] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 509.009798][ T9743] 9p: Bad value for 'wfdno' [ 509.033724][ T9417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.334547][ T9263] veth0_vlan: entered promiscuous mode [ 510.463071][ T9263] veth1_vlan: entered promiscuous mode [ 510.566334][ T5268] 8021q: adding VLAN 0 to HW filter on device eth7 [ 510.758210][ T9263] veth0_macvtap: entered promiscuous mode [ 511.029607][ T9417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.057298][ T9263] veth1_macvtap: entered promiscuous mode [ 511.175784][ T9787] 9p: Bad value for 'rfdno' [ 512.022895][ T9417] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.712303][ T9263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.777833][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.785074][ T6884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.915537][ T9263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.972885][ T3255] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.980109][ T3255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.158705][ T6567] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.410172][ T3255] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.509836][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 270 seconds [ 513.520869][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 270 seconds [ 513.532451][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 270 seconds [ 513.791043][ T5268] 8021q: adding VLAN 0 to HW filter on device eth8 [ 514.558084][ T6884] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.673645][ T8775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.702891][ T6567] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.704829][ T8775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.963387][ T9834] 9p: Bad value for 'rfdno' [ 514.986253][ T6884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.016723][ T6884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.218325][ T9882] nbd: must specify a size in bytes for the device [ 519.064572][ T9417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.984725][ T5903] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 270 seconds [ 520.062670][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 330 seconds [ 520.081343][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 330 seconds [ 520.094936][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 330 seconds [ 520.432829][ T9417] veth0_vlan: entered promiscuous mode [ 520.484771][ T9417] veth1_vlan: entered promiscuous mode [ 520.591655][ T9417] veth0_macvtap: entered promiscuous mode [ 520.653293][ T9417] veth1_macvtap: entered promiscuous mode [ 520.760137][ T9417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.831549][ T9417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.921657][ T9052] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.983373][ T1319] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.024139][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.063000][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.206335][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.237000][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.392821][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.423570][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.191721][ T9934] nbd: must specify a size in bytes for the device [ 523.658678][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1268'. [ 523.741317][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1268'. [ 524.488198][ T13] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.552308][ T13] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.605306][ T13] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.685658][ T13] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.330179][ T9980] tmpfs: Bad value for 'nr_inodes' [ 526.548423][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1280'. [ 527.776550][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1285'. [ 529.556279][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 420 seconds [ 529.571050][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 420 seconds [ 529.582098][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 420 seconds [ 532.104966][T10059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.310531][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1311'. [ 533.574388][T10089] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1314'. [ 533.583473][T10089] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1314'. [ 533.592475][T10089] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 533.601352][T10089] iwpm_hello_cb: Unable to parse nlmsg [ 537.055165][T10105] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 538.608634][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068b39c00: rx timeout, send abort [ 539.109862][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a372000: rx timeout, send abort [ 539.618283][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a372000: abort rx timeout. Force session deactivation [ 541.738476][T10170] futex_wake_op: syz.8.1336 tries to shift op by 144; fix this program [ 543.403566][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1339'. [ 543.619015][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 300 seconds [ 543.635602][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 300 seconds [ 543.781610][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 300 seconds [ 545.830230][T10200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.682645][T10203] loop2: detected capacity change from 0 to 7 [ 546.898361][T10203] Dev loop2: unable to read RDB block 7 [ 546.917932][T10203] loop2: AHDI p1 p2 p3 [ 546.938053][T10203] loop2: partition table partially beyond EOD, truncated [ 546.983226][T10203] loop2: p1 start 1601398130 is beyond EOD, truncated [ 547.001733][T10203] loop2: p2 start 1702059890 is beyond EOD, truncated [ 550.649843][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 360 seconds [ 550.661308][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 360 seconds [ 550.672919][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 360 seconds [ 551.282392][ T5903] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 300 seconds [ 552.868237][ T45] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 553.764447][ T45] usb 10-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 553.864552][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.913497][ T45] usb 10-1: Product: syz [ 553.933774][ T45] usb 10-1: Manufacturer: syz [ 553.961654][ T45] usb 10-1: SerialNumber: syz [ 553.998737][ T45] usb 10-1: config 0 descriptor?? [ 554.037700][ T45] hub 10-1:0.0: bad descriptor, ignoring hub [ 554.068030][ T45] hub 10-1:0.0: probe with driver hub failed with error -5 [ 554.095798][ T45] f81232 10-1:0.0: f81534a converter detected [ 554.096086][T10265] loop2: detected capacity change from 0 to 7 [ 554.199149][T10265] Dev loop2: unable to read RDB block 7 [ 554.265678][T10265] loop2: AHDI p1 p2 p3 [ 554.309703][T10254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.328353][T10265] loop2: partition table partially beyond EOD, truncated [ 554.371929][T10265] loop2: p1 start 1601398130 is beyond EOD, truncated [ 554.450369][T10265] loop2: p2 start 1702059890 is beyond EOD, truncated [ 554.494766][T10254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.593367][ T45] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 554.635184][ T45] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 554.795043][ T45] usb 10-1: USB disconnect, device number 2 [ 554.990475][ T45] f81232 10-1:0.0: device disconnected [ 556.139144][ T1210] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 556.437893][ T1210] usb 6-1: Using ep0 maxpacket: 8 [ 556.450304][ T1210] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 556.478076][ T5738] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 556.530581][T10293] CIFS mount error: No usable UNC path provided in device string! [ 556.530581][T10293] [ 556.541074][T10293] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 557.206925][ T1210] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.243679][ T1210] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 557.304956][ T1210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 557.338051][ T1210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 557.380818][ T1210] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 557.456121][ T5738] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 557.497317][ T5738] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 557.522093][ T5738] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 557.543843][ T1210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 557.767971][ T5738] usb 7-1: config 220 has no interface number 2 [ 557.777263][ T1210] usb 6-1: Product: syz [ 558.537617][ T5738] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 558.698267][ T1210] usb 6-1: Manufacturer: syz [ 558.701667][ T5738] usb 7-1: config 220 interface 0 has no altsetting 0 [ 558.744002][ T1210] usb 6-1: SerialNumber: syz [ 558.758949][ T5738] usb 7-1: config 220 interface 76 has no altsetting 0 [ 558.808111][ T5738] usb 7-1: config 220 interface 1 has no altsetting 0 [ 558.849830][ T1210] usb 6-1: config 0 descriptor?? [ 558.875423][ T5738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.108553][ T5738] usb 7-1: Product: syz [ 559.118575][ T5738] usb 7-1: Manufacturer: syz [ 559.123649][ T5738] usb 7-1: SerialNumber: syz [ 559.896788][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 450 seconds [ 559.909770][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 450 seconds [ 559.921263][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 450 seconds [ 559.983283][ T1210] usb 6-1: can't set config #0, error -71 [ 562.017698][ T1210] usb 6-1: USB disconnect, device number 5 [ 562.136286][ T5738] usb 7-1: can't set config #220, error -71 [ 562.208067][ T5738] usb 7-1: USB disconnect, device number 4 [ 562.791880][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.798454][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.930259][T10325] program syz.7.1382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.751991][T10333] Invalid option length (1048139) for dns_resolver key [ 566.685723][T10348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.306677][ T5738] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 568.570645][ T5609] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 568.889863][ T5609] usb 10-1: unable to get BOS descriptor or descriptor too short [ 568.909572][ T5738] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 568.931352][ T5609] usb 10-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 568.981049][ T5609] usb 10-1: config 63 has an invalid interface number: 66 but max is 0 [ 569.001495][ T5738] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 569.017904][ T5609] usb 10-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 569.065621][ T5738] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 569.102333][ T5609] usb 10-1: config 63 has no interface number 0 [ 569.137456][ T5738] usb 5-1: config 220 has no interface number 2 [ 569.147394][ T5609] usb 10-1: config 63 interface 66 has no altsetting 0 [ 569.179283][ T5609] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.180533][ T5738] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 569.308420][ T5609] usb 10-1: Product: syz [ 569.333360][ T5609] usb 10-1: Manufacturer: syz [ 569.356220][ T5609] usb 10-1: SerialNumber: syz [ 569.393052][ T5738] usb 5-1: config 220 interface 0 has no altsetting 0 [ 569.456084][ T5738] usb 5-1: config 220 interface 76 has no altsetting 0 [ 569.497153][ T5738] usb 5-1: config 220 interface 1 has no altsetting 0 [ 569.551568][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.629306][ T5738] usb 5-1: Product: syz [ 569.664719][ T5738] usb 5-1: Manufacturer: syz [ 569.694352][ T5738] usb 5-1: SerialNumber: syz [ 570.032896][ T5738] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 570.075277][ T5738] uvcvideo 5-1:220.0: No valid video chain found. [ 570.126122][ T5738] usb 5-1: selecting invalid altsetting 0 [ 570.346482][ T5738] usb 5-1: selecting invalid altsetting 0 [ 570.816321][ T5738] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 570.934482][ T5738] usb 5-1: USB disconnect, device number 13 [ 571.184291][ T5609] uvcvideo 10-1:63.66: probe with driver uvcvideo failed with error -22 [ 572.146184][ T5609] usb 10-1: USB disconnect, device number 3 [ 572.507185][T10399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.878237][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 330 seconds [ 573.889099][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 330 seconds [ 573.910025][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 330 seconds [ 576.336984][T10436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.714442][T10442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.703356][T10449] tipc: Started in network mode [ 578.765936][T10449] tipc: Node identity 1000001, cluster identity 4369 [ 578.810867][T10449] tipc: Node number set to 16777217 [ 578.990838][T10452] tipc: New replicast peer: 127.0.0.1 [ 579.165048][T10452] tipc: Enabled bearer , priority 10 [ 580.749616][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 390 seconds [ 580.763585][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 390 seconds [ 580.782069][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 390 seconds [ 582.072727][ T1365] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 330 seconds [ 583.038280][T10481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.377994][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 586.334886][ T29] audit: type=1326 audit(1787823264.674:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.7.1444" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45b479e0d9 code=0x0 [ 587.379310][ T5757] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 587.582194][ T5757] usb 9-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 587.655275][ T5757] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.715953][ T5757] usb 9-1: Product: syz [ 587.742965][ T5757] usb 9-1: Manufacturer: syz [ 587.786723][ T5757] usb 9-1: SerialNumber: syz [ 587.896732][T10529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.466927][ T5757] usb 9-1: config 0 descriptor?? [ 588.497736][ T5757] hub 9-1:0.0: bad descriptor, ignoring hub [ 588.548038][T10393] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 588.558143][ T5757] hub 9-1:0.0: probe with driver hub failed with error -5 [ 588.594950][ T5757] f81232 9-1:0.0: f81534a converter detected [ 588.648545][ T5738] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 588.734146][ T5757] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 588.752940][T10393] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 588.789268][ T5757] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 588.811243][T10393] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.858459][ T5738] usb 7-1: not running at top speed; connect to a high speed hub [ 588.920264][ T5738] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 589.086325][ T5738] usb 7-1: config index 0 descriptor too short (expected 43, got 25) [ 589.209056][ T5738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 589.317208][ T5738] usb 7-1: Product: syz [ 589.383867][ T5738] usb 7-1: Manufacturer: syz [ 590.170684][T10393] usb 10-1: config 0 descriptor?? [ 590.218636][ T5757] usb 9-1: USB disconnect, device number 2 [ 590.257338][ T5757] f81232 9-1:0.0: device disconnected [ 590.311705][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 480 seconds [ 590.324648][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 480 seconds [ 590.335837][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 480 seconds [ 590.787757][T10546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.348140][T10547] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 591.383729][T10393] usb 10-1: Cannot set autoneg [ 591.666141][T10393] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 591.713085][T10393] usb 10-1: USB disconnect, device number 4 [ 592.191510][ T5738] msi2500 7-1:1.0: Registered as swradio24 [ 592.213615][ T5738] msi2500 7-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 593.182418][ T5776] usb 7-1: USB disconnect, device number 5 [ 600.084302][T10588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.733726][T10594] Bluetooth: MGMT ver 1.23 [ 600.884723][T10594] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1478'. [ 604.509907][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 360 seconds [ 604.520813][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 360 seconds [ 604.533672][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 360 seconds [ 607.406676][T10636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.793658][T10660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.550704][T10658] binder: 10648:10658 ioctl c0306201 200000000080 returned -14 [ 610.644452][T10651] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1496'. [ 610.895153][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 420 seconds [ 610.906677][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 420 seconds [ 610.917912][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 420 seconds [ 613.219004][ T5903] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 360 seconds [ 613.282254][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 613.296076][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 613.432633][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 613.446208][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 613.454319][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 613.856804][T10693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.368093][T10708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.509440][ T5613] Bluetooth: hci2: command tx timeout [ 616.461141][ T5616] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 616.640195][ T5616] usb 8-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 616.701611][ T5616] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.716875][ T5616] usb 8-1: Product: syz [ 616.727952][ T5616] usb 8-1: Manufacturer: syz [ 616.750382][ T5616] usb 8-1: SerialNumber: syz [ 616.793667][ T5616] ums-karma 8-1:1.0: USB Mass Storage device detected [ 616.817910][ T5738] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 616.856497][ T5616] ums-karma 8-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 616.856497][ T5616] Please send a copy of this message to and [ 616.957492][ T3255] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.006230][ T5738] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 617.036683][ T3255] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.037925][ T5738] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.063936][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.086431][ T5738] usb 5-1: Product: syz [ 617.110808][ T5738] usb 5-1: Manufacturer: syz [ 617.122240][ T5738] usb 5-1: SerialNumber: syz [ 617.171468][ T5738] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 617.321570][ T5616] ums-karma 8-1:1.0: probe with driver ums-karma failed with error -5 [ 617.322800][ T3255] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.366982][ T3255] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.372650][ T5738] gspca_mr97310a: reg read [21] error -71 [ 617.394163][ T5616] usb 8-1: USB disconnect, device number 4 [ 617.420207][ T5738] mr97310a 5-1:1.0: probe with driver mr97310a failed with error -71 [ 617.485521][ T5738] usb 5-1: USB disconnect, device number 14 [ 617.587870][ T5613] Bluetooth: hci2: command tx timeout [ 617.661109][ T3255] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.673456][ T3255] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.413208][ T3255] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.571073][ T3255] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.235854][ T5613] Bluetooth: hci2: command tx timeout [ 620.389653][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 510 seconds [ 622.083481][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 510 seconds [ 622.094928][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 510 seconds [ 622.329164][ T5613] Bluetooth: hci2: command tx timeout [ 622.874094][T10770] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1533'. [ 623.472731][T10768] lo speed is unknown, defaulting to 1000 [ 623.573191][T10768] lo speed is unknown, defaulting to 1000 [ 623.581409][T10768] lo speed is unknown, defaulting to 1000 [ 623.599307][T10768] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 623.658264][T10768] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 623.713452][T10768] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 623.731762][T10772] lo speed is unknown, defaulting to 1000 [ 624.177275][T10768] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 625.424384][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.445524][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.105091][ T3255] bridge_slave_1: left allmulticast mode [ 626.140463][ T3255] bridge_slave_1: left promiscuous mode [ 626.194777][ T3255] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.273185][ T3255] bridge_slave_0: left allmulticast mode [ 626.295634][ T3255] bridge_slave_0: left promiscuous mode [ 626.392263][ T3255] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.738531][ T5738] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 626.838485][ T3255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.851491][ T3255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.872460][ T3255] bond0 (unregistering): Released all slaves [ 626.915159][ T5738] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 626.939424][T10768] lo speed is unknown, defaulting to 1000 [ 626.960260][ T5738] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.982604][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.991565][ T5738] usb 5-1: Product: syz [ 626.995957][ T5738] usb 5-1: Manufacturer: syz [ 627.002778][ T5738] usb 5-1: SerialNumber: syz [ 627.048098][ T5738] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 627.121566][T10768] lo speed is unknown, defaulting to 1000 [ 627.243052][ T5738] gspca_mr97310a: reg read [21] error -71 [ 627.273101][ T5738] mr97310a 5-1:1.0: probe with driver mr97310a failed with error -71 [ 627.321511][ T5738] usb 5-1: USB disconnect, device number 15 [ 628.314637][T10768] lo speed is unknown, defaulting to 1000 [ 628.409330][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 628.448017][T10768] lo speed is unknown, defaulting to 1000 [ 628.532354][T10768] lo speed is unknown, defaulting to 1000 [ 628.575668][T10682] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.583500][T10682] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.592275][T10682] bridge_slave_0: entered allmulticast mode [ 628.601236][T10682] bridge_slave_0: entered promiscuous mode [ 628.630191][T10768] lo speed is unknown, defaulting to 1000 [ 628.636830][T10682] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.671882][T10682] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.688720][T10682] bridge_slave_1: entered allmulticast mode [ 629.571023][T10682] bridge_slave_1: entered promiscuous mode [ 629.690967][T10682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.707102][T10682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.763540][T10768] lo speed is unknown, defaulting to 1000 [ 629.974863][T10768] lo speed is unknown, defaulting to 1000 [ 630.013753][T10682] team0: Port device team_slave_0 added [ 630.063018][T10682] team0: Port device team_slave_1 added [ 630.079638][T10768] lo speed is unknown, defaulting to 1000 [ 630.311024][T10839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.551066][ T3255] hsr_slave_0: left promiscuous mode [ 630.594310][ T3255] hsr_slave_1: left promiscuous mode [ 630.644125][ T3255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.682879][ T3255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.778093][ T3255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.796083][T10852] No source specified [ 631.009937][ T3255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.051883][ T3255] veth1_macvtap: left promiscuous mode [ 631.120018][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 631.760952][ T3255] veth0_macvtap: left promiscuous mode [ 631.788047][ T3255] veth1_vlan: left promiscuous mode [ 631.866572][ T3255] veth0_vlan: left promiscuous mode [ 632.128566][ T10] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 632.155992][ T10] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 632.172602][ T10] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 632.191988][ T10] usb 9-1: config 220 has no interface number 2 [ 632.199805][ T10] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 632.215530][ T10] usb 9-1: config 220 interface 0 has no altsetting 0 [ 632.228038][ T10] usb 9-1: config 220 interface 76 has no altsetting 0 [ 632.247847][ T10] usb 9-1: config 220 interface 1 has no altsetting 0 [ 632.263036][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.283479][ T10] usb 9-1: Product: syz [ 632.298651][ T10] usb 9-1: Manufacturer: syz [ 632.318099][ T10] usb 9-1: SerialNumber: syz [ 632.542403][T10866] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 632.555485][T10866] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 632.623173][ T10] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 632.660501][ T10] uvcvideo 9-1:220.0: No valid video chain found. [ 632.689781][ T10] usb 9-1: selecting invalid altsetting 0 [ 633.858283][ T10] usb 9-1: selecting invalid altsetting 0 [ 633.889234][ T10] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 633.926661][ T10] usb 9-1: USB disconnect, device number 3 [ 634.543666][ T3255] team0 (unregistering): Port device team_slave_1 removed [ 635.308085][ T3255] team0 (unregistering): Port device team_slave_0 removed [ 635.444408][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 390 seconds [ 635.458538][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 390 seconds [ 635.469701][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 390 seconds [ 637.023581][T10891] loop2: detected capacity change from 0 to 7 [ 637.049241][T10891] Dev loop2: unable to read RDB block 7 [ 637.063854][T10891] loop2: AHDI p1 p2 p3 [ 637.076759][T10891] loop2: partition table partially beyond EOD, truncated [ 637.085135][T10891] loop2: p1 start 1601398130 is beyond EOD, truncated [ 637.094399][T10891] loop2: p2 start 1702059890 is beyond EOD, truncated [ 637.198894][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 637.243102][T10682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.265016][T10682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.360671][T10682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.427033][T10682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.468487][T10682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.527935][T10682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.923942][T10682] hsr_slave_0: entered promiscuous mode [ 637.951372][T10682] hsr_slave_1: entered promiscuous mode [ 640.178188][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 640.188611][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 640.201125][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 640.215893][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 640.232881][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 641.155972][T10935] Bluetooth: MGMT ver 1.23 [ 642.493054][ T5613] Bluetooth: hci0: command tx timeout [ 642.534140][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 450 seconds [ 642.546661][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 450 seconds [ 642.558098][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 450 seconds [ 643.514798][ T5903] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 390 seconds [ 644.596344][ T5613] Bluetooth: hci0: command tx timeout [ 644.705105][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 644.752181][T10915] lo speed is unknown, defaulting to 1000 [ 644.981031][T10966] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 644.993368][T10966] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 646.628237][ T5613] Bluetooth: hci0: command tx timeout [ 648.709463][ T5621] Bluetooth: hci0: command tx timeout [ 649.733563][T10682] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 649.784573][T10682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 649.821054][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1591'. [ 650.001599][T10682] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 650.210723][T10682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.940277][T11021] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 650.948726][T11021] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 651.049543][T10682] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 651.219632][T10682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 651.276338][T10682] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 651.320199][T11026] input: syz0 as /devices/virtual/input/input5 [ 651.346768][T10682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.710746][ T5268] 8021q: adding VLAN 0 to HW filter on device eth12 [ 652.184743][T10915] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.206720][T10915] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.217781][T10915] bridge_slave_0: entered allmulticast mode [ 652.246745][T10915] bridge_slave_0: entered promiscuous mode [ 652.258187][T10915] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.279318][T10915] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.298851][T10915] bridge_slave_1: entered allmulticast mode [ 652.320463][T10915] bridge_slave_1: entered promiscuous mode [ 652.712953][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 540 seconds [ 652.728279][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 540 seconds [ 652.739787][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 540 seconds [ 652.746125][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1603'. [ 653.429599][T10915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.478602][T10915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.515653][T11069] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 654.686462][T11074] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 654.704018][T10915] team0: Port device team_slave_0 added [ 654.753747][T10915] team0: Port device team_slave_1 added [ 654.894584][T10915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.915320][T10915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.991459][T10915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.050494][T10915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.057676][T10915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.101380][T10915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.451706][T10915] hsr_slave_0: entered promiscuous mode [ 655.482616][T10915] hsr_slave_1: entered promiscuous mode [ 656.313136][T10915] debugfs: 'hsr0' already exists in 'hsr' [ 656.319093][T10915] Cannot create hsr debugfs directory [ 657.446020][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1616'. [ 657.672829][T10682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.892205][T11116] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 657.900421][T11116] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 658.030720][T10915] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.227401][T10682] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.326688][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.334018][ T9052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.346289][T11128] 9pnet_fd: Insufficient options for proto=fd [ 658.515627][T10915] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.616887][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.624125][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.776722][T10915] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.937560][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 660.043662][T11151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.159813][T10915] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.638800][T11163] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 660.647054][T11163] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 660.973773][T10915] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 661.055997][T10915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.093970][T10915] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 661.195934][T10915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.230189][T10915] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 661.294321][T10915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 661.334595][T10915] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 661.393557][T10915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 662.903042][T10915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.956501][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1640'. [ 663.053925][T10915] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.323059][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.330328][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.822777][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1640'. [ 663.973224][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.980485][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.266823][T11213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.731096][T11225] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 664.740228][T11225] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 664.845859][T10682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.988903][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1645'. [ 665.436602][T10682] veth0_vlan: entered promiscuous mode [ 666.242794][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 420 seconds [ 666.256069][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 420 seconds [ 666.271961][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 420 seconds [ 666.298606][T10682] veth1_vlan: entered promiscuous mode [ 666.596811][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1653'. [ 666.691368][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1653'. [ 666.900554][T10682] veth0_macvtap: entered promiscuous mode [ 667.006154][T10682] veth1_macvtap: entered promiscuous mode [ 667.197254][T11259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.245381][T10682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.282609][T10682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.299070][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.518639][ T6884] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.556885][ T6884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.584311][ T6884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.514633][T10638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.545051][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1659'. [ 669.562771][T10638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.854153][T11277] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 669.914874][T11277] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 670.372658][T10915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.623467][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1666'. [ 670.671853][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1666'. [ 671.307632][T11315] jffs2: notice: (11315) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 671.317749][T10915] veth0_vlan: entered promiscuous mode [ 671.355338][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 671.407916][ T1210] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 671.423747][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 671.432177][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 671.440846][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 671.449315][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 671.621614][T10915] veth1_vlan: entered promiscuous mode [ 671.666610][T11323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.699125][ T1210] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 671.733668][ T1210] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 671.776766][ T1210] usb 5-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 672.122781][T10915] veth0_macvtap: entered promiscuous mode [ 672.270351][ T1210] usb 5-1: config 220 has no interface number 2 [ 672.594438][ T1210] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 672.607234][T10915] veth1_macvtap: entered promiscuous mode [ 672.607785][ T1210] usb 5-1: config 220 interface 0 has no altsetting 0 [ 672.622382][ T1210] usb 5-1: config 220 interface 76 has no altsetting 0 [ 672.629665][ T1210] usb 5-1: config 220 interface 1 has no altsetting 0 [ 672.639030][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.647306][ T1210] usb 5-1: Product: syz [ 672.651641][ T1210] usb 5-1: Manufacturer: syz [ 672.656281][ T1210] usb 5-1: SerialNumber: syz [ 672.930454][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 480 seconds [ 672.941516][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 480 seconds [ 672.953015][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 480 seconds [ 673.595074][ T5613] Bluetooth: hci4: command tx timeout [ 673.659126][ T1210] usb 5-1: selecting invalid altsetting 0 [ 673.705103][ T1210] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 673.736226][T11334] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 673.745207][ T1210] uvcvideo 5-1:220.0: No valid video chain found. [ 673.797778][ T1210] usb 5-1: selecting invalid altsetting 0 [ 673.853213][ T1210] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 673.914000][ T1210] usb 5-1: USB disconnect, device number 16 [ 673.936520][T10915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.122354][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1672'. [ 674.133916][T10915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.157392][ T5903] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 420 seconds [ 674.198443][ T5896] nvmet: Created nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:22a30017-9f5b-4d8b-8530-d086a08bd281. [ 674.231009][ T5895] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.312252][T11334] nvme nvme3: creating 2 I/O queues. [ 674.324454][ T5895] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.395673][T11334] nvme nvme3: new ctrl: "testsubsys" [ 674.582684][T11352] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 674.591038][T11352] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 674.610762][ T134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.939447][ T6884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.163763][T11368] futex_wake_op: syz.4.1678 tries to shift op by 144; fix this program [ 675.717982][ T5613] Bluetooth: hci4: command tx timeout [ 676.194742][ T134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.678306][T11370] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1679'. [ 676.753170][ T9052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.792400][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 676.854423][T11372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1680'. [ 676.941407][T11310] lo speed is unknown, defaulting to 1000 [ 677.111617][T11374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.767687][ T5613] Bluetooth: hci4: command tx timeout [ 678.480093][ T134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.604878][T11393] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 678.754699][T11399] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 679.129589][T11396] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 679.343608][ T134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.357564][ T9052] nvmet: Created nvm controller 5 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:22a30017-9f5b-4d8b-8530-d086a08bd281. [ 679.392735][T11393] nvme nvme4: creating 2 I/O queues. [ 679.425475][T11393] nvme nvme4: new ctrl: "testsubsys" [ 679.447117][ T9052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.487423][ T9052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.623027][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.691679][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.830011][ T5613] Bluetooth: hci4: command tx timeout [ 679.936158][T11413] futex_wake_op: syz.4.1690 tries to shift op by 144; fix this program [ 682.824101][ T134] bridge_slave_1: left allmulticast mode [ 682.844546][ T134] bridge_slave_1: left promiscuous mode [ 682.873309][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.881892][T11434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.929446][ T134] bridge_slave_0: left allmulticast mode [ 682.967936][ T134] bridge_slave_0: left promiscuous mode [ 683.004487][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.123709][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 570 seconds [ 683.138242][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 570 seconds [ 683.152628][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 570 seconds [ 683.193805][T11441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.266306][T11445] netlink: 'syz.7.1698': attribute type 2 has an invalid length. [ 683.377734][T11446] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 683.637760][ T5896] nvmet: Created nvm controller 6 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:22a30017-9f5b-4d8b-8530-d086a08bd281. [ 683.744324][T11446] nvme nvme5: creating 2 I/O queues. [ 683.847084][T11446] nvme nvme5: new ctrl: "testsubsys" [ 683.933459][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.976663][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.997073][ T134] bond0 (unregistering): Released all slaves [ 684.296616][T11469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1692'. [ 685.505965][T11495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1708'. [ 685.677238][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.685275][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.770463][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1709'. [ 685.819809][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1709'. [ 685.942461][T11501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 688.815627][T11522] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 688.970518][T11529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1718'. [ 689.268109][ T134] hsr_slave_0: left promiscuous mode [ 689.305874][ T134] hsr_slave_1: left promiscuous mode [ 689.397655][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.607146][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.046634][ T1319] nvmet: Created nvm controller 7 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:22a30017-9f5b-4d8b-8530-d086a08bd281. [ 690.080341][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.160293][T11522] nvme nvme6: creating 2 I/O queues. [ 690.172044][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.326732][T11522] nvme nvme6: new ctrl: "testsubsys" [ 690.349212][ T134] veth1_macvtap: left promiscuous mode [ 690.364578][ T134] veth0_macvtap: left promiscuous mode [ 690.372237][ T134] veth1_vlan: left promiscuous mode [ 690.379054][ T134] veth0_vlan: left promiscuous mode [ 691.398095][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1728'. [ 691.605312][T11567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.620419][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1728'. [ 691.760227][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1727'. [ 696.171566][ T134] team0 (unregistering): Port device team_slave_1 removed [ 696.220164][ T134] team0 (unregistering): Port device team_slave_0 removed [ 696.549989][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 450 seconds [ 696.563028][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 450 seconds [ 696.574115][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 450 seconds [ 696.845918][T11586] lo speed is unknown, defaulting to 1000 [ 697.060258][T11310] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.109764][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.131106][T11310] bridge_slave_0: entered allmulticast mode [ 697.192937][T11310] bridge_slave_0: entered promiscuous mode [ 697.281862][T11310] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.332481][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.360000][T11310] bridge_slave_1: entered allmulticast mode [ 697.412563][T11310] bridge_slave_1: entered promiscuous mode [ 699.683994][T11310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.811744][T11310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.245303][T11310] team0: Port device team_slave_0 added [ 700.258790][T11310] team0: Port device team_slave_1 added [ 701.160085][ T5750] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 701.342662][T11644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.372527][T11644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.459898][T11310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.214260][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.324937][T11310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.366427][T11310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.370335][ T5750] usb 9-1: unable to get BOS descriptor or descriptor too short [ 702.399549][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.435167][ T5750] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 702.453148][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1750'. [ 702.479510][T11310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.488265][ T5750] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 702.502931][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1750'. [ 702.531230][ T5750] usb 9-1: can't read configurations, error -71 [ 702.741087][T11310] hsr_slave_0: entered promiscuous mode [ 702.763507][T11310] hsr_slave_1: entered promiscuous mode [ 702.961682][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 510 seconds [ 702.972896][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 510 seconds [ 702.988138][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 510 seconds [ 704.439144][ T5903] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 450 seconds [ 705.130989][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1761'. [ 705.510992][T11701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.714015][T11310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 708.734260][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.752107][T11310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 708.802047][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.837614][T11310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 708.946576][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.974840][T11310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 709.043199][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 709.084114][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1779'. [ 709.115196][T11758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.493023][T11310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.586411][T11310] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.643351][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.650622][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.731248][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.738483][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.894303][T11781] netlink: 'syz.2.1784': attribute type 2 has an invalid length. [ 712.472947][T11791] Can't find ip_set type hash:ip,po [ 713.613417][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 600 seconds [ 713.624766][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 600 seconds [ 713.639244][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 600 seconds [ 715.219524][T11840] netlink: 'syz.5.1796': attribute type 2 has an invalid length. [ 715.266836][T11310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.589888][T11842] Can't find ip_set type hash:ip,po [ 717.358155][T11310] veth0_vlan: entered promiscuous mode [ 717.451059][T11310] veth1_vlan: entered promiscuous mode [ 717.610089][T11310] veth0_macvtap: entered promiscuous mode [ 717.936890][T11310] veth1_macvtap: entered promiscuous mode [ 718.216607][T11310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.422473][T11310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.665311][ T1034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.729353][ T1034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.944559][T11874] loop2: detected capacity change from 0 to 7 [ 718.984023][ T6884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.997477][T11874] Dev loop2: unable to read RDB block 7 [ 719.040264][T11874] loop2: AHDI p1 p2 p3 [ 719.041811][ T6884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.068700][T11874] loop2: partition table partially beyond EOD, truncated [ 719.137066][T11874] loop2: p1 start 1601398130 is beyond EOD, truncated [ 719.192978][T11874] loop2: p2 start 1702059890 is beyond EOD, truncated [ 719.232047][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.275171][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.422409][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.481394][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.107405][T11903] netlink: 'syz.2.1812': attribute type 2 has an invalid length. [ 721.871795][T11918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.341004][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'. [ 722.606880][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1823'. [ 725.199131][T11974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.790882][T11990] overlayfs: missing 'workdir' [ 726.595669][T11994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 726.994313][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 480 seconds [ 727.010558][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 480 seconds [ 727.028023][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 480 seconds [ 730.511195][ T5776] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 731.020897][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.112633][T12050] overlayfs: missing 'workdir' [ 731.972535][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.067477][ T5776] usb 2-1: unable to get BOS descriptor or descriptor too short [ 732.123380][ T5776] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 733.272082][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 540 seconds [ 733.282917][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 540 seconds [ 733.293566][ T5776] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 733.293939][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 540 seconds [ 733.375134][ T5776] usb 2-1: can't read configurations, error -71 [ 735.115243][ T4973] udevd[4973]: worker [6781] /devices/virtual/block/nbd3 timeout; kill it [ 735.199824][ T5903] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 480 seconds [ 735.270459][ T4973] udevd[4973]: seq 12232 '/devices/virtual/block/nbd3' killed [ 735.309524][ T4973] udevd[4973]: worker [5853] /devices/virtual/block/nbd2 timeout; kill it [ 735.383990][ T4973] udevd[4973]: seq 11785 '/devices/virtual/block/nbd2' killed [ 735.412984][ T4973] udevd[4973]: worker [6054] /devices/virtual/block/nbd4 timeout; kill it [ 735.456624][ T4973] udevd[4973]: seq 12276 '/devices/virtual/block/nbd4' killed [ 735.486124][ T4973] udevd[4973]: worker [5729] /devices/virtual/block/nbd0 timeout; kill it [ 735.727032][ T4973] udevd[4973]: seq 10970 '/devices/virtual/block/nbd0' killed [ 738.560764][T12113] overlayfs: missing 'workdir' [ 738.620855][T12114] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 740.467961][ T5776] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 740.641180][T12121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.962008][T12121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.606430][ T5776] usb 8-1: unable to get BOS descriptor or descriptor too short [ 742.154237][ T5776] usb 8-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 742.204921][ T5776] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 742.249652][ T5776] usb 8-1: can't read configurations, error -71 [ 742.462167][T12157] loop2: detected capacity change from 0 to 7 [ 742.487650][T12157] Dev loop2: unable to read RDB block 7 [ 742.496421][T12157] loop2: AHDI p1 p2 p3 [ 742.501347][T12157] loop2: partition table partially beyond EOD, truncated [ 742.512545][T12157] loop2: p1 start 1601398130 is beyond EOD, truncated [ 742.521958][T12157] loop2: p2 start 1702059890 is beyond EOD, truncated [ 742.593741][T12165] overlayfs: missing 'workdir' [ 743.941055][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 630 seconds [ 743.952342][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 630 seconds [ 743.966065][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 630 seconds [ 744.521834][T12184] lo speed is unknown, defaulting to 1000 [ 745.042117][T12189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 747.138599][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.825007][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.888048][ T1210] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 747.896344][ T5750] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 748.129275][ T1210] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 748.152355][T12221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.182432][ T1210] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 748.215756][ T1210] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 748.239592][T12239] jffs2: notice: (12239) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 748.259768][ T1210] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.307114][T12221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.461691][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 748.520179][ T1210] usb 2-1: Product: syz [ 748.565252][ T1210] usb 2-1: Manufacturer: syz [ 748.610157][ T1210] usb 2-1: SerialNumber: syz [ 748.740154][ T1210] usb 2-1: can't set config #1, error -71 [ 748.796735][ T1210] usb 2-1: USB disconnect, device number 4 [ 749.894156][T12248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.130509][ T5750] usb 9-1: unable to get BOS descriptor or descriptor too short [ 750.152355][ T5750] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 750.382452][ T5750] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 750.390438][ T5750] usb 9-1: can't read configurations, error -71 [ 753.719861][T12288] futex_wake_op: syz.8.1928 tries to shift op by 144; fix this program [ 754.134824][T12298] loop5: detected capacity change from 0 to 32768 [ 754.292416][T12298] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 757.464712][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 510 seconds [ 757.476289][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 510 seconds [ 757.821800][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 510 seconds [ 758.695257][ T5606] ocfs2: Unmounting device (7,5) on (node local) [ 759.183033][T12356] futex_wake_op: syz.1.1943 tries to shift op by 144; fix this program [ 760.424856][T12368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 762.290300][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 762.305616][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 762.318199][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 762.524634][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 762.647714][T12390] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 763.782516][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 570 seconds [ 763.799476][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 570 seconds [ 763.818720][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 570 seconds [ 764.665855][T12413] fuse: Bad value for 'fd' [ 764.711156][T12386] Bluetooth: hci0: command 0x0406 tx timeout [ 765.188547][T12386] Bluetooth: hci2: command tx timeout [ 765.683949][T12407] futex_wake_op: syz.4.1959 tries to shift op by 144; fix this program [ 765.812155][ T5903] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 510 seconds [ 766.551527][T12438] loop5: detected capacity change from 0 to 512 [ 766.630089][T12438] EXT4-fs (loop5): 1 truncate cleaned up [ 766.704816][T12438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.031693][T12377] lo speed is unknown, defaulting to 1000 [ 767.060209][ T29] audit: type=1800 audit(1787823445.504:5): pid=12443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1965" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 767.225547][ T5606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.275983][ T5621] Bluetooth: hci2: command tx timeout [ 768.570349][ T6593] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.044996][T12466] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 769.342529][ T6593] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.359523][ T5621] Bluetooth: hci2: command tx timeout [ 769.368888][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 769.446587][T12475] loop2: detected capacity change from 0 to 7 [ 769.633001][ T6593] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.682730][T12475] Dev loop2: unable to read RDB block 7 [ 769.773083][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1974'. [ 769.845997][T12475] loop2: AHDI p1 p2 p3 [ 769.942840][T12475] loop2: partition table partially beyond EOD, truncated [ 770.225252][T12475] loop2: p1 start 1601398130 is beyond EOD, truncated [ 770.371476][T12475] loop2: p2 start 1702059890 is beyond EOD, truncated [ 770.521612][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 770.548142][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.576719][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.588714][ T10] usb 6-1: Product: syz [ 770.592919][ T10] usb 6-1: Manufacturer: syz [ 770.597515][ T10] usb 6-1: SerialNumber: syz [ 770.682876][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 770.932241][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 771.523424][ T5621] Bluetooth: hci2: command tx timeout [ 771.560801][T10393] usb 6-1: USB disconnect, device number 6 [ 771.753325][ T6593] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.009804][T12510] jffs2: notice: (12510) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 774.103979][T12377] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.123026][T12377] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.136295][T12377] bridge_slave_0: entered allmulticast mode [ 774.157409][T12377] bridge_slave_0: entered promiscuous mode [ 774.164852][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 660 seconds [ 774.185139][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 660 seconds [ 774.198180][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 660 seconds [ 774.646704][T12377] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.660682][T12377] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.673345][T12377] bridge_slave_1: entered allmulticast mode [ 774.699100][T12377] bridge_slave_1: entered promiscuous mode [ 774.736357][T12535] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 774.755401][ T6593] bridge_slave_1: left allmulticast mode [ 774.794696][ T6593] bridge_slave_1: left promiscuous mode [ 774.827646][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.941182][ T6593] bridge_slave_0: left allmulticast mode [ 774.982209][ T6593] bridge_slave_0: left promiscuous mode [ 775.224210][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.375240][T12549] loop2: detected capacity change from 0 to 7 [ 776.390499][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1995'. [ 776.442403][T12549] Dev loop2: unable to read RDB block 7 [ 776.520144][T12549] loop2: AHDI p1 p2 p3 [ 776.567108][T12549] loop2: partition table partially beyond EOD, truncated [ 776.615946][T12549] loop2: p1 start 1601398130 is beyond EOD, truncated [ 776.667721][T12549] loop2: p2 start 1702059890 is beyond EOD, truncated [ 777.686597][T12561] fuse: fd is not a fuse device [ 778.097946][ T6593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.290114][ T6593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.395444][ T6593] bond0 (unregistering): Released all slaves [ 779.072652][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2007'. [ 779.527163][T12377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.758785][T12377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.149283][T12377] team0: Port device team_slave_0 added [ 781.395214][ C1] Unknown status report in ack skb [ 782.052297][T12377] team0: Port device team_slave_1 added [ 782.534040][T12622] lo speed is unknown, defaulting to 1000 [ 783.758702][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2020'. [ 784.143056][ T5736] lo speed is unknown, defaulting to 1000 [ 784.275454][T12377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.355031][T12377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.423902][T12377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.438643][T12377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.453209][T12377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.688754][T12377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.450855][ T6593] hsr_slave_0: left promiscuous mode [ 785.475997][ T6593] hsr_slave_1: left promiscuous mode [ 785.500402][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.545771][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.606544][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.662008][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.845585][ T6593] veth1_macvtap: left promiscuous mode [ 785.913362][ T6593] veth0_macvtap: left promiscuous mode [ 785.937644][ T6593] veth1_vlan: left promiscuous mode [ 785.960758][ T6593] veth0_vlan: left promiscuous mode [ 788.562433][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 540 seconds [ 788.573444][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 540 seconds [ 788.588081][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 540 seconds [ 788.645722][T12386] Bluetooth: hci2: command 0x0405 tx timeout [ 789.046416][T12679] loop5: detected capacity change from 0 to 32768 [ 789.079314][T12679] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 789.137305][T12679] XFS (loop5): Ending clean mount [ 789.181818][T12679] XFS (loop5): Quotacheck needed: Please wait. [ 789.441799][T12679] XFS (loop5): Quotacheck: Done. [ 790.514152][ T6593] team0 (unregistering): Port device team_slave_1 removed [ 790.533839][ T5606] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 790.563120][ T6593] team0 (unregistering): Port device team_slave_0 removed [ 791.205602][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 791.228499][ T3255] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.294438][T12377] hsr_slave_0: entered promiscuous mode [ 791.529101][T12377] hsr_slave_1: entered promiscuous mode [ 791.543284][T12377] debugfs: 'hsr0' already exists in 'hsr' [ 792.206895][T12377] Cannot create hsr debugfs directory [ 792.433980][ T1109] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.453522][ T1109] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.522826][T10304] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.905650][T12706] loop2: detected capacity change from 0 to 7 [ 793.019605][T12706] Dev loop2: unable to read RDB block 7 [ 793.046582][T12706] loop2: AHDI p1 p2 p3 [ 793.066592][T12706] loop2: partition table partially beyond EOD, truncated [ 793.139293][T12706] loop2: p1 start 1601398130 is beyond EOD, truncated [ 793.358269][T12706] loop2: p2 start 1702059890 is beyond EOD, truncated [ 794.192106][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 600 seconds [ 794.202958][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 600 seconds [ 794.214021][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 600 seconds [ 795.302160][T12386] Bluetooth: hci4: command 0x0406 tx timeout [ 795.571894][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 796.420108][T10393] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 796.681686][T10393] usb 9-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 796.789478][T10393] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.990337][ T5903] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 540 seconds [ 797.011396][T10393] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.039509][T10393] usb 9-1: Product: syz [ 797.049489][T10393] usb 9-1: Manufacturer: syz [ 797.094313][T10393] usb 9-1: SerialNumber: syz [ 797.133785][T10393] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 797.418929][T10393] gspca_mr97310a: reg read [21] error -71 [ 797.437598][T10393] mr97310a 9-1:1.0: probe with driver mr97310a failed with error -71 [ 797.474099][T10393] usb 9-1: USB disconnect, device number 8 [ 801.491809][T12750] lo speed is unknown, defaulting to 1000 [ 801.671158][T12756] lo speed is unknown, defaulting to 1000 [ 802.104384][T12774] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2049'. [ 803.685547][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 805.720666][T12785] overlayfs: missing 'workdir' [ 805.871902][ T5903] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 690 seconds [ 805.885509][ T5903] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 690 seconds [ 805.897808][ T5903] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 690 seconds [ 808.560604][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.569859][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.870599][ T5736] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 809.100066][ T5736] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 809.211616][ T5736] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.417405][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.448378][ T5736] usb 2-1: Product: syz [ 809.452835][ T5736] usb 2-1: Manufacturer: syz [ 809.457467][ T5736] usb 2-1: SerialNumber: syz [ 809.533156][ T5736] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 809.627933][T12254] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.659783][T12254] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.743727][ T5736] gspca_mr97310a: reg read [21] error -71 [ 809.759454][T12254] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.786778][ T5736] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -71 [ 809.802698][T12254] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.851287][ T5736] usb 2-1: USB disconnect, device number 5 [ 809.859159][T12377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 809.947381][T12377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 809.982643][T12377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 810.062914][T12377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 810.097494][T12825] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2062'. [ 810.118176][T12377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 810.181594][T12377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 810.213556][T12377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 810.254209][T12377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 811.292025][T12848] lo speed is unknown, defaulting to 1000 [ 814.423486][T12377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.470819][T12377] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.515028][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.522295][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.719267][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.726492][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.205785][T12878] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2074'. [ 815.922551][T12882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2075'. [ 816.140616][T12887] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2078'. [ 816.197960][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 816.272621][T12892] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2078'. [ 816.438340][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 816.880062][ T45] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 817.955919][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.097973][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.152891][ T45] usb 2-1: Product: syz [ 818.181564][ T45] usb 2-1: Manufacturer: syz [ 818.201329][ T45] usb 2-1: SerialNumber: syz [ 818.271902][ T45] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 818.757996][ T45] gspca_mr97310a: reg read [21] error -71 [ 818.818721][T12907] lo speed is unknown, defaulting to 1000 [ 819.025403][ T45] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -71 [ 819.193264][ T8775] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.363391][T10638] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.525836][ T5903] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 570 seconds [ 819.541441][ T5903] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 570 seconds [ 819.554001][ T5903] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 570 seconds [ 819.586231][ T45] usb 2-1: USB disconnect, device number 6 [ 819.607074][T12254] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.798518][ T6750] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.156491][T12924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 820.267427][T12925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2087'. [ 821.731120][T12386] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 821.757117][T12386] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 821.769214][T12386] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 821.795158][T12386] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 821.805587][T12386] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 822.005041][T12949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2093'. [ 822.114282][T12954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2093'. [ 822.736104][T12967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 823.279756][T12981] lo speed is unknown, defaulting to 1000 [ 823.915719][T12386] Bluetooth: hci6: command tx timeout [ 824.572945][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 630 seconds [ 824.584182][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 630 seconds [ 824.595688][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 630 seconds [ 824.731375][T12985] sctp: [Deprecated]: syz.2.2100 (pid 12985) Use of int in maxseg socket option. [ 824.731375][T12985] Use struct sctp_assoc_value instead [ 824.969729][T12989] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2101'. [ 825.758727][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 825.989220][T12386] Bluetooth: hci6: command tx timeout [ 827.193385][T12877] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 570 seconds [ 828.068123][T12386] Bluetooth: hci6: command tx timeout [ 828.293181][T13025] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2109'. [ 829.117284][T12942] lo speed is unknown, defaulting to 1000 [ 830.150472][T12386] Bluetooth: hci6: command tx timeout [ 830.569707][T10393] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 830.778662][T10393] usb 9-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 831.135182][T10393] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.983299][T10393] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.991928][T10393] usb 9-1: Product: syz [ 832.016390][T10393] usb 9-1: Manufacturer: syz [ 832.028852][T10393] usb 9-1: SerialNumber: syz [ 832.069840][ T5736] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 832.184160][T10393] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 832.301009][ T5736] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 832.382280][ T5736] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 832.403840][T10393] gspca_mr97310a: reg read [21] error -71 [ 832.422463][T10393] mr97310a 9-1:1.0: probe with driver mr97310a failed with error -71 [ 832.439687][ T5736] usb 3-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 832.473769][T10393] usb 9-1: USB disconnect, device number 9 [ 832.528963][ T5736] usb 3-1: config 220 has no interface number 2 [ 832.563656][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 832.568442][ T5736] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 832.670246][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 832.700071][ T5736] usb 3-1: config 220 interface 0 has no altsetting 0 [ 832.727216][ T5736] usb 3-1: config 220 interface 76 has no altsetting 0 [ 832.735155][ T5736] usb 3-1: config 220 interface 1 has no altsetting 0 [ 832.751245][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.761796][ T5736] usb 3-1: Product: syz [ 832.768515][ T5736] usb 3-1: Manufacturer: syz [ 832.781557][ T5736] usb 3-1: SerialNumber: syz [ 832.802114][T13077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 832.927116][T13082] loop2: detected capacity change from 0 to 7 [ 832.987760][T13082] Dev loop2: unable to read RDB block 7 [ 833.055858][T13082] loop2: AHDI p1 p2 p3 [ 833.082309][T13082] loop2: partition table partially beyond EOD, truncated [ 833.140100][ T5736] usb 3-1: selecting invalid altsetting 0 [ 833.148396][T13082] loop2: p1 start 1601398130 is beyond EOD, truncated [ 833.199149][ T5736] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 833.219534][T13082] loop2: p2 start 1702059890 is beyond EOD, truncated [ 833.241428][ T5736] uvcvideo 3-1:220.0: No valid video chain found. [ 833.308665][ T5736] usb 3-1: selecting invalid altsetting 0 [ 833.337807][ T5736] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 833.411136][ T5736] usb 3-1: USB disconnect, device number 6 [ 833.703048][T13093] loop8: detected capacity change from 0 to 256 [ 833.718509][T13093] exfat: Deprecated parameter 'utf8' [ 834.713899][T13093] exfat: Deprecated parameter 'namecase' [ 834.781717][T13093] exfat: Deprecated parameter 'namecase' [ 834.972693][T13098] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 835.275556][T13093] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 835.530501][T13106] loop1: detected capacity change from 0 to 8192 [ 835.784612][T13106] syz.1.2133: attempt to access beyond end of device [ 835.784612][T13106] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 836.461187][T12877] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 720 seconds [ 836.473796][T12877] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 720 seconds [ 836.485172][T12877] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 720 seconds [ 836.513328][T13106] buffer_io_error: 141 callbacks suppressed [ 836.513352][T13106] Buffer I/O error on dev loop1, logical block 57847, async page read [ 836.624587][T13106] syz.1.2133: attempt to access beyond end of device [ 836.624587][T13106] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 836.760582][T13106] Buffer I/O error on dev loop1, logical block 57847, async page read [ 836.823658][ T29] audit: type=1800 audit(1787823515.264:6): pid=13106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2133" name="file2" dev="loop1" ino=1048643 res=0 errno=0 [ 837.046301][T13129] loop2: detected capacity change from 0 to 512 [ 837.157560][T13129] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 837.196269][ T5895] bridge_slave_1: left allmulticast mode [ 837.215527][ T5895] bridge_slave_1: left promiscuous mode [ 837.241046][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.286717][T13129] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #17: comm syz.2.2139: inode has both inline data and extents flags [ 837.311308][ T5895] bridge_slave_0: left allmulticast mode [ 837.343247][T13129] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 837.346828][T13129] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.2139: couldn't read orphan inode 17 (err -117) [ 837.352806][ T5895] bridge_slave_0: left promiscuous mode [ 837.356882][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 837.386983][ C0] EXT4-fs (loop2): initial error at time 1787823515: ext4_orphan_get:1403: inode 17 [ 837.396474][ C0] EXT4-fs (loop2): last error at time 1787823515: ext4_orphan_get:1403: inode 17 [ 837.430696][T13129] loop2: lost filesystem error report for type 5 error -117 [ 837.442646][T13129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.463757][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.050494][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.082266][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.113800][ T5895] bond0 (unregistering): Released all slaves [ 840.144608][T13177] Device name cannot be null; rc = [-22] [ 840.393415][T13135] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 840.471014][ T5895] hsr_slave_0: left promiscuous mode [ 840.509059][ T5895] hsr_slave_1: left promiscuous mode [ 840.546607][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.584965][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.618231][T10915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.632741][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 841.685236][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 843.162608][T12942] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.595068][T12942] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.622656][T12942] bridge_slave_0: entered allmulticast mode [ 843.808341][T12942] bridge_slave_0: entered promiscuous mode [ 844.689145][T12942] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.715330][T12942] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.735612][T13213] loop2: detected capacity change from 0 to 7 [ 844.744362][T12942] bridge_slave_1: entered allmulticast mode [ 844.761017][T13213] Dev loop2: unable to read RDB block 7 [ 844.772314][T12942] bridge_slave_1: entered promiscuous mode [ 844.852153][T13213] loop2: AHDI p1 p2 p3 [ 844.883357][T13213] loop2: partition table partially beyond EOD, truncated [ 844.973731][T13213] loop2: p1 start 1601398130 is beyond EOD, truncated [ 845.011020][T13213] loop2: p2 start 1702059890 is beyond EOD, truncated [ 846.066599][T12942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.291401][T12942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.516643][T12942] team0: Port device team_slave_0 added [ 847.569678][T12942] team0: Port device team_slave_1 added [ 849.033277][T12942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.080333][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.119657][T13254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2165'. [ 849.517211][T12942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.610259][T12942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.655042][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.828785][T12942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.410302][T12877] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 600 seconds [ 850.421245][T12877] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 600 seconds [ 850.432591][T12877] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 600 seconds [ 851.209892][T13278] jffs2: notice: (13278) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 851.276196][T12942] hsr_slave_0: entered promiscuous mode [ 851.331453][T12942] hsr_slave_1: entered promiscuous mode [ 851.357537][T12942] debugfs: 'hsr0' already exists in 'hsr' [ 851.421868][T12942] Cannot create hsr debugfs directory [ 854.111246][T13321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2182'. [ 854.849710][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 660 seconds [ 854.860778][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 660 seconds [ 854.878081][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 660 seconds [ 856.369593][T13324] lo speed is unknown, defaulting to 1000 [ 858.120408][T12877] block nbd4: Possible stuck request ffff8880276e0000: control (read@0,1024B). Runtime 600 seconds [ 860.893665][T13364] loop2: detected capacity change from 0 to 7 [ 861.002944][T13364] Dev loop2: unable to read RDB block 7 [ 861.117112][T13364] loop2: AHDI p1 p2 p3 [ 861.132598][T13364] loop2: partition table partially beyond EOD, truncated [ 861.143756][T13364] loop2: p1 start 1601398130 is beyond EOD, truncated [ 861.152360][T13364] loop2: p2 start 1702059890 is beyond EOD, truncated [ 861.994077][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 862.825023][T12942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 863.049156][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 864.020457][ T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 864.038221][ T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 864.699492][ T10] usb 6-1: config 220 has no interface number 2 [ 864.721677][T12942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 864.768966][ T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 864.902405][T12942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 865.014873][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 865.186153][ T10] usb 6-1: config 220 interface 76 has no altsetting 0 [ 865.252141][T12942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.283492][ T10] usb 6-1: config 220 interface 1 has no altsetting 0 [ 865.564127][ T10] usb 6-1: string descriptor 0 read error: -71 [ 865.596877][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.656931][T12942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 865.682296][ T10] usb 6-1: can't set config #220, error -71 [ 865.799187][ T10] usb 6-1: USB disconnect, device number 7 [ 865.928934][T12942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 866.921684][T12942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 866.951109][T12877] block nbd0: Possible stuck request ffff8880275e7000: control (read@0,1024B). Runtime 750 seconds [ 866.963183][T12877] block nbd0: Possible stuck request ffff8880275e71c0: control (read@1024,2048B). Runtime 750 seconds [ 866.974888][T12877] block nbd0: Possible stuck request ffff8880275e7380: control (read@3072,1024B). Runtime 750 seconds [ 867.919923][T12942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 867.949273][T13417] lo speed is unknown, defaulting to 1000 [ 868.518728][T12942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.596853][T12942] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.725781][T12942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 868.755450][T12942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 869.542116][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.549761][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.602125][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.609894][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.816887][T13451] loop2: detected capacity change from 0 to 7 [ 869.831406][T13451] Dev loop2: unable to read RDB block 7 [ 869.837097][T13451] loop2: AHDI p1 p2 p3 [ 869.841777][T13451] loop2: partition table partially beyond EOD, truncated [ 869.849482][T13451] loop2: p1 start 1601398130 is beyond EOD, truncated [ 869.856568][T13451] loop2: p2 start 1702059890 is beyond EOD, truncated [ 869.879433][ T4973] Dev loop2: unable to read RDB block 7 [ 869.897275][ T4973] loop2: AHDI p1 p2 p3 [ 869.901839][ T4973] loop2: partition table partially beyond EOD, truncated [ 869.952565][ T4973] loop2: p1 start 1601398130 is beyond EOD, truncated [ 869.992563][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.005845][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.023038][ T4973] loop2: p2 start 1702059890 is beyond EOD, truncated [ 873.961281][T13489] loop5: detected capacity change from 0 to 32768 [ 874.818445][T13489] read_mapping_page failed! [ 874.855825][T13489] diRead: read_metapage failed [ 875.138141][T10393] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 875.286575][T12942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.493426][T12942] veth0_vlan: entered promiscuous mode [ 875.556216][T12942] veth1_vlan: entered promiscuous mode [ 875.619422][T10393] usb 9-1: unable to get BOS descriptor or descriptor too short [ 875.657251][T10393] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 875.688422][T10393] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 875.694154][T12942] veth0_macvtap: entered promiscuous mode [ 875.720759][T10393] usb 9-1: can't read configurations, error -71 [ 875.742882][T12942] veth1_macvtap: entered promiscuous mode [ 875.838750][T12942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.901464][T12942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.972175][T13515] jffs2: notice: (13515) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 876.018137][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.037418][T13515] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 876.046657][T13515] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 876.180688][T10638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.221624][T10638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.348035][ T6567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.552025][T10304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.606668][T10304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.753281][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.804204][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.691152][ T134] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.840293][T10638] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.892896][T10638] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.200990][ T134] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.535264][T13567] loop2: detected capacity change from 0 to 7 [ 879.628669][T13567] Dev loop2: unable to read RDB block 7 [ 879.691254][T13567] loop2: AHDI p1 p2 p3 [ 879.695814][T13567] loop2: partition table partially beyond EOD, truncated [ 879.789690][T13570] xt_CONNSECMARK: invalid mode: 0 [ 880.218194][T13567] loop2: p1 start 1601398130 is beyond EOD, truncated [ 880.277630][T13567] loop2: p2 start 1702059890 is beyond EOD, truncated [ 881.838513][ T30] INFO: task udevd:5729 blocked in I/O wait for more than 143 seconds. [ 881.870570][T12877] block nbd3: Possible stuck request ffff8880276b0000: control (read@0,1024B). Runtime 630 seconds [ 881.881678][T12877] block nbd3: Possible stuck request ffff8880276b01c0: control (read@1024,2048B). Runtime 630 seconds SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 881.982275][T12877] block nbd3: Possible stuck request ffff8880276b0380: control (read@3072,1024B). Runtime 630 seconds [ 882.131958][ T30] Tainted: G L syzkaller #0 [ 882.168668][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 882.188214][ T30] task:udevd state:D stack:25032 pid:5729 tgid:5729 ppid:4973 task_flags:0x400140 flags:0x00080002 [ 882.229277][ T30] Call Trace: [ 882.229613][ T5776] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 882.261948][ T30] [ 882.293606][ T30] __schedule+0x17d4/0x5820 [ 882.322866][ T30] ? __pfx___schedule+0x10/0x10 [ 882.377163][ T30] ? schedule+0x90/0x2b0 [ 882.447291][ T30] schedule+0x164/0x2b0 [ 882.543376][ T30] io_schedule+0x7f/0xd0 [ 882.599795][ T30] folio_wait_bit_common+0x836/0xbc0 [ 882.624963][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 882.655196][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 882.693426][ T30] ? filemap_read_folio+0x234/0x3a0 [ 882.727412][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 882.755758][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.809783][ T30] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 882.833779][ T30] do_read_cache_folio+0x1ac/0x590 [ 882.861192][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 882.905553][ T30] read_part_sector+0xb6/0x2b0 [ 882.940596][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 882.972331][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 883.007965][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 883.039975][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 883.067219][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 883.087459][ T30] bdev_disk_changed+0x851/0x17a0 [ 883.113739][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 883.148082][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 883.157464][ T30] blkdev_get_whole+0x372/0x510 [ 883.177936][ T30] bdev_open+0x324/0xd70 [ 883.203513][ T30] blkdev_open+0x461/0x600 [ 883.217917][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 883.235445][ T30] do_dentry_open+0x816/0x1380 [ 883.248146][ T30] vfs_open+0x3b/0x340 [ 883.257912][ T30] ? path_openat+0x1428/0x1d60 [ 883.267915][ T30] path_openat+0x1443/0x1d60 [ 883.278507][ T30] do_file_open+0x23e/0x4a0 [ 883.288138][ T30] ? __pfx_do_file_open+0x10/0x10 [ 883.298182][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 883.317983][ T30] ? _raw_spin_unlock+0x28/0x50 [ 883.322901][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 883.344826][ T30] ? alloc_fd+0x651/0x6c0 [ 883.357960][ T30] do_sys_openat2+0x115/0x200 [ 883.367917][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 883.379530][ T30] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 883.391962][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 883.409715][ T30] __x64_sys_openat+0x138/0x170 [ 883.420781][ T30] do_syscall_64+0x166/0x520 [ 883.445247][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.465155][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 883.478129][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.498304][ T30] RIP: 0033:0x7f090aea7407 [ 883.503280][ T30] RSP: 002b:00007ffc87c88760 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 883.520520][ T30] RAX: ffffffffffffffda RBX: 00007f090b611880 RCX: 00007f090aea7407 [ 883.547931][ T30] RDX: 00000000000a0800 RSI: 000056317e316570 RDI: ffffffffffffff9c [ 883.559985][ T30] RBP: 000056317e315910 R08: 0000000000000000 R09: 0000000000000000 [ 883.586878][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000056317e329ba0 [ 883.617662][ T30] R13: 000056317e323190 R14: 0000000000000000 R15: 000056317e329ba0 [ 883.637998][ T30] [ 883.646053][ T30] INFO: task udevd:5853 blocked in I/O wait for more than 145 seconds. [ 883.672834][ T30] Tainted: G L syzkaller #0 [ 883.710844][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 883.726547][ T30] task:udevd state:D stack:25480 pid:5853 tgid:5853 ppid:4973 task_flags:0x400140 flags:0x00080002 [ 883.753015][ T30] Call Trace: [ 883.768647][ T30] [ 883.771748][ T30] __schedule+0x17d4/0x5820 [ 883.776504][ T30] ? __pfx___schedule+0x10/0x10 [ 883.785416][ T30] ? schedule+0x90/0x2b0 [ 883.790578][ T30] schedule+0x164/0x2b0 [ 883.794856][ T30] io_schedule+0x7f/0xd0 [ 883.799850][ T30] folio_wait_bit_common+0x836/0xbc0 [ 883.805440][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 883.811434][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 883.817534][ T30] ? filemap_read_folio+0x234/0x3a0 [ 883.823991][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 883.831117][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 883.837248][ T30] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 883.849975][ T30] do_read_cache_folio+0x1ac/0x590 [ 883.855465][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 883.862179][ T30] read_part_sector+0xb6/0x2b0 [ 883.867255][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 883.878233][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 883.888301][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 883.898861][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 883.904334][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 883.919630][ T30] bdev_disk_changed+0x851/0x17a0 [ 883.932015][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 883.947753][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 883.968781][ T30] blkdev_get_whole+0x372/0x510 [ 883.973884][ T30] bdev_open+0x324/0xd70 [ 883.980083][ T30] blkdev_open+0x461/0x600 [ 883.984647][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 883.990217][ T30] do_dentry_open+0x816/0x1380 [ 883.995157][ T30] vfs_open+0x3b/0x340 [ 883.999425][ T30] ? path_openat+0x1428/0x1d60 [ 884.004302][ T30] path_openat+0x1443/0x1d60 [ 884.016620][ T30] do_file_open+0x23e/0x4a0 [ 884.021430][ T30] ? __pfx_do_file_open+0x10/0x10 [ 884.026593][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.032643][ T30] ? _raw_spin_unlock+0x28/0x50 [ 884.037667][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.043495][ T30] ? alloc_fd+0x651/0x6c0 [ 884.050177][ T30] do_sys_openat2+0x115/0x200 [ 884.055019][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.063109][ T30] ? lockdep_hardirqs_on+0x7b/0x110 [ 884.074145][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 884.079960][ T30] __x64_sys_openat+0x138/0x170 [ 884.085000][ T30] do_syscall_64+0x166/0x520 [ 884.092441][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.100496][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.106324][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.114045][ T30] RIP: 0033:0x7f090aea7407 [ 884.120014][ T30] RSP: 002b:00007ffc87c88760 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 884.130071][ T30] RAX: ffffffffffffffda RBX: 00007f090b611880 RCX: 00007f090aea7407 [ 884.138466][ T30] RDX: 00000000000a0800 RSI: 000056317e315d20 RDI: ffffffffffffff9c [ 884.146637][ T30] RBP: 000056317e315910 R08: 0000000000000000 R09: 0000000000000000 [ 884.160574][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000056317e328e20 [ 884.169204][ T30] R13: 000056317e323190 R14: 0000000000000000 R15: 000056317e328e20 [ 884.177367][ T30] [ 884.183780][ T30] INFO: task udevd:6054 blocked in I/O wait for more than 145 seconds. [ 884.322600][ T30] Tainted: G L syzkaller #0 [ 884.351752][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 884.391529][ T30] task:udevd state:D stack:24808 pid:6054 tgid:6054 ppid:4973 task_flags:0x400140 flags:0x00080802 [ 884.459056][ T30] Call Trace: [ 884.467022][ T30] [ 884.479734][ T30] __schedule+0x17d4/0x5820 [ 884.502468][ T30] ? __pfx___schedule+0x10/0x10 [ 884.529728][ T30] ? schedule+0x90/0x2b0 [ 884.553089][ T30] schedule+0x164/0x2b0 [ 884.588264][ T30] io_schedule+0x7f/0xd0 [ 884.592787][ T30] folio_wait_bit_common+0x836/0xbc0 [ 884.607998][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 884.615027][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 884.635403][ T30] ? filemap_read_folio+0x234/0x3a0 [ 884.647899][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 884.665136][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.685761][ T30] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 884.699642][ T30] do_read_cache_folio+0x1ac/0x590 [ 884.718249][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 884.738515][ T30] read_part_sector+0xb6/0x2b0 [ 884.751449][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 884.774786][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 884.788455][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 884.808542][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 884.813870][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 884.828286][ T30] bdev_disk_changed+0x851/0x17a0 [ 884.838178][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 884.850683][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.875926][ T30] blkdev_get_whole+0x372/0x510 [ 884.888187][ T30] bdev_open+0x324/0xd70 [ 884.899552][ T30] blkdev_open+0x461/0x600 [ 884.917583][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 884.939552][ T30] do_dentry_open+0x816/0x1380 [ 884.959241][ T30] vfs_open+0x3b/0x340 [ 884.974093][ T30] ? path_openat+0x1428/0x1d60 [ 884.991684][ T30] path_openat+0x1443/0x1d60 [ 885.003422][ T30] do_file_open+0x23e/0x4a0 [ 885.018005][ T30] ? __pfx_do_file_open+0x10/0x10 [ 885.023437][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 885.031909][ T30] ? _raw_spin_unlock+0x28/0x50 [ 885.037699][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 885.043743][ T30] ? alloc_fd+0x651/0x6c0 [ 885.048275][ T30] do_sys_openat2+0x115/0x200 [ 885.053098][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 885.058995][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 885.064748][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 885.071936][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 885.077812][ T30] __x64_sys_openat+0x138/0x170 [ 885.084281][ T30] do_syscall_64+0x166/0x520 [ 885.089280][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.108157][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.117933][ T30] RIP: 0033:0x7f090aea7407 [ 885.127894][ T30] RSP: 002b:00007ffc87c88760 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 885.148086][ T30] RAX: ffffffffffffffda RBX: 00007f090b611880 RCX: 00007f090aea7407 [ 885.168324][ T30] RDX: 00000000000a0800 RSI: 000056317e33d920 RDI: ffffffffffffff9c [ 885.188035][ T30] RBP: 000056317e315910 R08: 0000000000000000 R09: 0000000000000000 [ 885.208070][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000056317e328e20 [ 885.228007][ T30] R13: 000056317e323190 R14: 0000000000000000 R15: 000056317e328e20 [ 885.249173][ T30] [ 885.253904][ T30] INFO: task udevd:6781 blocked in I/O wait for more than 146 seconds. [ 885.281306][ T30] Tainted: G L syzkaller #0 [ 885.297916][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 885.312990][ T30] task:udevd state:D stack:24808 pid:6781 tgid:6781 ppid:4973 task_flags:0x400140 flags:0x00080002 [ 885.339600][ T30] Call Trace: [ 885.349249][ T30] [ 885.353432][ T30] __schedule+0x17d4/0x5820 [ 885.368530][ T30] ? __pfx___schedule+0x10/0x10 [ 885.375166][ T30] ? schedule+0x90/0x2b0 [ 885.392162][ T30] schedule+0x164/0x2b0 [ 885.397942][ T8866] block nbd2: Possible stuck request ffff888027687000: control (read@0,2048B). Runtime 690 seconds [ 885.407086][ T30] io_schedule+0x7f/0xd0 [ 885.408994][ T8866] block nbd2: Possible stuck request ffff8880276871c0: control (read@2048,1024B). Runtime 690 seconds [ 885.418071][ T30] folio_wait_bit_common+0x836/0xbc0 [ 885.424230][ T8866] block nbd2: Possible stuck request ffff888027687380: control (read@3072,1024B). Runtime 690 seconds [ 885.478260][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 885.487246][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 885.518017][ T30] ? filemap_read_folio+0x234/0x3a0 [ 885.524926][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 885.553017][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 885.593275][ T30] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 885.616571][ T30] do_read_cache_folio+0x1ac/0x590 [ 885.628037][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 885.658045][ T30] read_part_sector+0xb6/0x2b0 [ 885.664660][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 885.688513][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 885.708127][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 885.716025][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 885.728175][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 885.739880][ T30] bdev_disk_changed+0x851/0x17a0 [ 885.758057][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 885.768366][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 885.789495][ T30] blkdev_get_whole+0x372/0x510 [ 885.805125][ T30] bdev_open+0x324/0xd70 [ 885.819238][ T30] blkdev_open+0x461/0x600 [ 885.828902][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 885.839808][ T30] do_dentry_open+0x816/0x1380 [ 885.858069][ T30] vfs_open+0x3b/0x340 [ 885.862397][ T30] ? path_openat+0x1428/0x1d60 [ 885.867306][ T30] path_openat+0x1443/0x1d60 [ 885.888139][ T30] do_file_open+0x23e/0x4a0 [ 885.895147][ T30] ? __pfx_do_file_open+0x10/0x10 [ 885.908106][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 885.920724][ T30] ? _raw_spin_unlock+0x28/0x50 [ 885.937488][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 885.952651][ T30] ? alloc_fd+0x651/0x6c0 [ 885.968646][ T30] do_sys_openat2+0x115/0x200 [ 885.975427][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 886.002099][ T30] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 886.028952][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 886.035454][ T30] __x64_sys_openat+0x138/0x170 [ 886.040761][ T30] do_syscall_64+0x166/0x520 [ 886.045563][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.052260][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 886.058363][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.064554][ T30] RIP: 0033:0x7f090aea7407 [ 886.085818][ T30] RSP: 002b:00007ffc87c88760 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 886.097760][ T30] RAX: ffffffffffffffda RBX: 00007f090b611880 RCX: 00007f090aea7407 [ 886.106112][ T30] RDX: 00000000000a0800 RSI: 000056317e328a60 RDI: ffffffffffffff9c [ 886.114624][ T30] RBP: 000056317e315910 R08: 0000000000000000 R09: 0000000000000000 [ 886.122866][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000056317e32a830 [ 886.131258][ T30] R13: 000056317e323190 R14: 0000000000000000 R15: 000056317e32a830 [ 886.139956][ T30] [ 886.188203][ T30] [ 886.188203][ T30] Showing all locks held in the system: [ 886.202045][ T30] locks held by ksoftirqd/0/15: 1, last CPU#0: [ 886.248202][ T30] #0: ffff8880b863b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 886.268669][ T30] locks held by khungtaskd/30: 1, last CPU#1: [ 886.284134][ T30] #0: ffffffff8eb5a3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 886.309653][ T30] locks held by getty/5363: 2, on CPU#0: [ 886.321327][ T30] #0: ffff8880325d50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 886.358473][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 886.398495][ T30] locks held by kworker/0:3/5609: 3, last CPU#0: [ 886.413080][ T30] #0: ffff88801b02f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 886.459399][ T30] #1: ffffc900030afc40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 886.497946][ T30] #2: ffffffff8ec88ca0 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 886.517998][ T30] locks held by udevd/5729: 1, on CPU#1: [ 886.529880][ T30] #0: ffff888025815350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 886.549625][ T30] locks held by kworker/0:4/5736: 3, last CPU#0: [ 886.563538][ T30] #0: ffff8880b863b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 886.596258][ T30] #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 886.626731][ T30] #2: ffffffff9a7e3788 (&____s->seqcount#2){----}-{0:0}, at: ktime_get+0x45/0x220 [ 886.688043][ T30] locks held by kworker/1:6/5774: 2, last CPU#1: [ 886.696058][ T30] #0: ffff88805a6ae540 ((wq_completion)wg-crypt-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 886.748220][ T30] #1: ffff8880b8724408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 886.777933][ T30] locks held by kworker/1:7/5776: 5, on CPU#1: [ 886.791316][ T30] #0: ffff888022a82140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 886.837941][ T30] #1: ffffc900050d7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 886.858149][ T30] #2: ffff88802a1541d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 886.878288][ T30] #3: ffff888029bd9568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 886.902089][ T30] #4: ffff88802a336960 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 886.933341][ T30] locks held by udevd/5853: 1, on CPU#0: [ 886.947549][ T30] #0: ffff888026ba5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 886.969363][ T30] locks held by udevd/6054: 1, on CPU#0: [ 886.981104][ T30] #0: ffff888025357350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 886.990883][ T30] locks held by udevd/6781: 1, on CPU#1: [ 886.996549][ T30] #0: ffff888025353350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 887.006293][ T30] locks held by syz.4.510/7608: 1, on CPU#1: [ 887.020854][ T30] #0: ffff88807e544ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 887.034792][ T30] locks held by dhcpcd/9876: 1, on CPU#0: [ 887.040818][ T30] #0: ffff88806967aa80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 887.051918][ T30] locks held by syz.1.1937/12332: 3, on CPU#0: [ 887.058348][ T30] #0: ffff88805b41cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 887.072921][ T30] #1: ffff88805b41c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 887.083159][ T30] #2: ffffffff901c3240 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 887.093674][ T30] locks held by syz.2.1950/12374: 3, on CPU#1: [ 887.101624][ T30] #0: ffff88805b4ecea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 887.127894][ T30] #1: ffff88805b4ec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 887.151774][ T30] #2: ffffffff901c3240 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 887.162720][ T30] locks held by syz-executor/12942: 3, on CPU#0: [ 887.169831][ T30] #0: ffff888056978ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 887.200013][ T30] #1: ffff8880569780b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 887.223867][ T30] #2: ffffffff8eb606a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 887.238173][ T30] locks held by syz.0.2240/13576: 1, last CPU#1: [ 887.244669][ T30] #0: ffffffff8eb5a3a0 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x24/0x550 [ 887.261934][ T30] locks held by syz.8.2242/13583: 5, on CPU#1: [ 887.278408][ T30] #0: ffff888029dacea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 887.292313][ T30] #1: ffff888029dac0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 887.302366][ T30] #2: ffffffff901c3240 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 887.312758][ T30] #3: ffff88807f338af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 887.326616][ T30] #4: ffffffff8eb606a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 887.339924][ T30] locks held by syz.5.2243/13588: 3, on CPU#1: [ 887.346108][ T30] #0: ffff88807b208ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 887.357427][ T30] #1: ffff88807b2080b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 887.368424][ T30] #2: ffffffff901c3240 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 887.388004][ T30] locks held by rm/13628: 3, last CPU#1: [ 887.403237][ T30] #0: ffff888078dc36b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 887.429634][ T30] #1: ffffffff8eb5a3a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 887.443583][ T30] #2: ffff88802991c178 (&sig->wait_chldexit){....}-{3:3}, at: __wake_up_common_lock+0x30/0x1f0 [ 887.454642][ T30] [ 887.458170][ T30] ============================================= [ 887.458170][ T30] [ 887.524371][ T5776] usb 9-1: unable to get BOS descriptor or descriptor too short [ 887.542171][ T5776] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 887.554023][ T30] NMI backtrace for cpu 0 [ 887.554045][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 887.554080][ T30] Tainted: [L]=SOFTLOCKUP [ 887.554089][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 887.554105][ T30] Call Trace: [ 887.554114][ T30] [ 887.554125][ T30] dump_stack_lvl+0xe8/0x150 [ 887.554167][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 887.554205][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.554237][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 887.554277][ T30] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 887.554321][ T30] sys_info+0x135/0x170 [ 887.554354][ T30] watchdog+0xfd7/0x1030 [ 887.554400][ T30] ? watchdog+0x1c7/0x1030 [ 887.554445][ T30] kthread+0x38b/0x480 [ 887.554485][ T30] ? __pfx_watchdog+0x10/0x10 [ 887.554520][ T30] ? __pfx_kthread+0x10/0x10 [ 887.554561][ T30] ret_from_fork+0x514/0xb70 [ 887.554610][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 887.554648][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.554679][ T30] ? __switch_to+0xc89/0x1420 [ 887.554715][ T30] ? __pfx_kthread+0x10/0x10 [ 887.554756][ T30] ret_from_fork_asm+0x1a/0x30 [ 887.554816][ T30] [ 887.554825][ T30] Sending NMI from CPU 0 to CPUs 1: [ 887.607727][ T5776] usb 9-1: unable to read config index 0 descriptor/start: -32 [ 887.608779][ C1] NMI backtrace for cpu 1 [ 887.608799][ C1] CPU: 1 UID: 0 PID: 5776 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.608830][ C1] Tainted: [L]=SOFTLOCKUP [ 887.608838][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 887.608853][ C1] Workqueue: usb_hub_wq hub_event [ 887.608887][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 887.608918][ C1] Code: e8 1e 6f 5b fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f d1 ca fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 45 7f a4 fb cc 44 89 f9 80 e1 07 [ 887.608938][ C1] RSP: 0018:ffffc900050d6c28 EFLAGS: 00000002 [ 887.608956][ C1] RAX: 1ffffffff355eb00 RBX: 00000000000003fd RCX: 0000000000000000 [ 887.608972][ C1] RDX: 00000000000003fd RSI: 00000000000271bc RDI: 00000000000271bd [ 887.608987][ C1] RBP: dffffc0000000000 R08: ffff8880268f0237 R09: 1ffff11004d1e046 [ 887.609004][ C1] R10: dffffc0000000000 R11: ffffffff856bc140 R12: dffffc0000000000 [ 887.609022][ C1] R13: 0000000000000000 R14: ffffffff9aaf5bc0 R15: 0000000000000000 [ 887.609040][ C1] FS: 0000000000000000(0000) GS:ffff888125014000(0000) knlGS:0000000000000000 [ 887.609058][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 887.609080][ C1] CR2: 00007f92c24eee9c CR3: 0000000031c39000 CR4: 0000000000350ef0 [ 887.609099][ C1] Call Trace: [ 887.609107][ C1] [ 887.609118][ C1] wait_for_lsr+0x184/0x2f0 [ 887.609148][ C1] serial8250_console_write+0x12ef/0x1ba0 [ 887.609176][ C1] ? __pfx_printk_get_next_message+0x10/0x10 [ 887.609215][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 887.609243][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.609273][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.609302][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.609329][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 887.609362][ C1] ? console_flush_all+0x123/0xb40 [ 887.609389][ C1] console_flush_all+0x709/0xb40 [ 887.609420][ C1] ? console_flush_all+0x123/0xb40 [ 887.609451][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 887.609482][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.609508][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 887.609543][ C1] console_unlock+0xd1/0x1c0 [ 887.609566][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.609596][ C1] ? __pfx_console_unlock+0x10/0x10 [ 887.609618][ C1] ? vprintk_emit+0x200/0x560 [ 887.609643][ C1] ? vprintk_emit+0x455/0x560 [ 887.609666][ C1] ? vprintk_emit+0x2cf/0x560 [ 887.609689][ C1] ? vprintk_emit+0x2cf/0x560 [ 887.609713][ C1] vprintk_emit+0x485/0x560 [ 887.609739][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 887.609771][ C1] dev_vprintk_emit+0x338/0x400 [ 887.609809][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 887.609856][ C1] dev_printk_emit+0xee/0x140 [ 887.609896][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 887.609934][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 887.609964][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.609991][ C1] ? __dev_printk+0x131/0x190 [ 887.610024][ C1] _dev_err+0x11e/0x180 [ 887.610069][ C1] ? __pfx__dev_err+0x10/0x10 [ 887.610108][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.610135][ C1] ? usb_get_descriptor+0x275/0x3e0 [ 887.610168][ C1] ? usb_get_descriptor+0x2df/0x3e0 [ 887.610204][ C1] usb_get_configuration+0x569c/0x5990 [ 887.610235][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.610264][ C1] ? __lock_acquire+0x683/0x2cf0 [ 887.610303][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.610334][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.610361][ C1] ? rcu_is_watching+0x16/0xb0 [ 887.610385][ C1] ? trace_rpm_return_int+0x83/0x200 [ 887.610422][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.610467][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 887.610492][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 887.610521][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.610555][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 887.610594][ C1] usb_new_device+0x13c/0x1690 [ 887.610623][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.610650][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 887.610677][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 887.610704][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 887.610734][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 887.610771][ C1] hub_event+0x28e8/0x4d30 [ 887.610801][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.610828][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 887.610891][ C1] ? __pfx_hub_event+0x10/0x10 [ 887.610922][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.610955][ C1] ? rcu_is_watching+0x16/0xb0 [ 887.610977][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.611006][ C1] ? process_scheduled_works+0x97a/0x1630 [ 887.611034][ C1] process_scheduled_works+0xc3d/0x1630 [ 887.611061][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.611114][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 887.611145][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.611172][ C1] ? assign_work+0x3cf/0x5d0 [ 887.611202][ C1] worker_thread+0xa47/0xfb0 [ 887.611232][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.611267][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.611293][ C1] ? __kthread_parkme+0x71/0x1f0 [ 887.611331][ C1] kthread+0x38b/0x480 [ 887.611364][ C1] ? __pfx_worker_thread+0x10/0x10 [ 887.611391][ C1] ? __pfx_kthread+0x10/0x10 [ 887.611426][ C1] ret_from_fork+0x514/0xb70 [ 887.611461][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 887.611494][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 887.611521][ C1] ? __switch_to+0xc89/0x1420 [ 887.611551][ C1] ? __pfx_kthread+0x10/0x10 [ 887.611586][ C1] ret_from_fork_asm+0x1a/0x30 [ 887.611633][ C1] [ 887.622428][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 887.622451][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 887.622487][ T30] Tainted: [L]=SOFTLOCKUP [ 887.622498][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 887.622515][ T30] Call Trace: [ 887.622525][ T30] [ 888.278080][ T30] vpanic+0x56d/0xa60 [ 888.282081][ T30] ? __pfx___schedule+0x10/0x10 [ 888.286961][ T30] ? __pfx_vpanic+0x10/0x10 [ 888.291469][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 888.297116][ T30] panic+0xc5/0xd0 [ 888.300844][ T30] ? __pfx_panic+0x10/0x10 [ 888.305288][ T30] ? preempt_schedule_common+0x7f/0xd0 [ 888.310757][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 888.316131][ T30] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 888.322300][ T30] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 888.328467][ T30] watchdog+0x1030/0x1030 [ 888.332813][ T30] ? watchdog+0x1c7/0x1030 [ 888.337262][ T30] kthread+0x38b/0x480 [ 888.341370][ T30] ? __pfx_watchdog+0x10/0x10 [ 888.346164][ T30] ? __pfx_kthread+0x10/0x10 [ 888.350772][ T30] ret_from_fork+0x514/0xb70 [ 888.355374][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 888.360488][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 888.366120][ T30] ? __switch_to+0xc89/0x1420 [ 888.370802][ T30] ? __pfx_kthread+0x10/0x10 [ 888.375403][ T30] ret_from_fork_asm+0x1a/0x30 [ 888.380191][ T30] [ 888.383406][ T30] Kernel Offset: disabled [ 888.387713][ T30] Rebooting in 86400 seconds..