last executing test programs: 15m32.460948627s ago: executing program 3 (id=8): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 15m31.433858789s ago: executing program 3 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) timerfd_create(0x1, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) 15m30.031071804s ago: executing program 3 (id=11): syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x20, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, 0xffffffffffffffff, 0x0, 0x0, 0xffffeffffffffffe}]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 15m25.210262618s ago: executing program 3 (id=15): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340), 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newqdisc={0x60, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xc1}}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x4, 0x4, 0x14, 0x1, 0x9, 0x5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15m20.694619349s ago: executing program 3 (id=22): ioctl$EVIOCGABS20(0xffffffffffffffff, 0x40044591, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) dup(r2) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)={'a', ' *:* ', 'rm\x00'}, 0x9) 15m15.757016294s ago: executing program 3 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sched_setparam(r0, &(0x7f00000006c0)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001080)={{0x5, 0x6, 0x6, 0x4, 'syz0\x00', 0x4}, 0x6, 0x40, 0x100, r0, 0x0, 0x9, 'syz0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001a300)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946817591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b502b7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c98e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdcabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c145f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x800) 14m59.14540564s ago: executing program 32 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sched_setparam(r0, &(0x7f00000006c0)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001080)={{0x5, 0x6, 0x6, 0x4, 'syz0\x00', 0x4}, 0x6, 0x40, 0x100, r0, 0x0, 0x9, 'syz0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001a300)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x800) 14m50.513483156s ago: executing program 2 (id=60): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001100)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x290, 0x1a0, 0x1a0, 0x380, 0xd0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff, 0xffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'tunl0\x00', 'vcan0\x00', {}, {}, 0x87, 0x3, 0x2, 0x60}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc8}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@empty, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x290}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x40000, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x100, 0x4152, 0xff, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffffa, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x3c, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) 14m43.687090283s ago: executing program 2 (id=65): syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x20, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, 0xffffffffffffffff, 0x0, 0x0, 0xffffeffffffffffe}]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 14m40.35382996s ago: executing program 2 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) 14m38.473564641s ago: executing program 2 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x40}, 0x40008d0) 14m34.444991536s ago: executing program 2 (id=76): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 14m33.637143735s ago: executing program 2 (id=78): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0x8000, 0x1, 0x800000c1}) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x162281) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 14m18.275159157s ago: executing program 33 (id=78): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0x8000, 0x1, 0x800000c1}) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x162281) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 11m49.542861671s ago: executing program 6 (id=371): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 11m43.986925953s ago: executing program 6 (id=386): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x10001, 0xc5fb, @value=0x3}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f0000000180)=[{0x7, 0x4, 0x20, 0x1000}]}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffba83) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc020000"], 0x10c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 11m42.5026275s ago: executing program 6 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000022c0)={{{@in6=@mcast1, @in=@empty}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000023c0)=0xe8) r6 = geteuid() socket(0x10, 0x3, 0x0) r7 = getgid() r8 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r8, 0x0, 0x0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r9, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r9, &(0x7f0000000100)={0x78, 0x0, r10, {0x2000000007, 0x0, 0x0, {0x10000, 0xffffffffffffffff, 0x58, 0xbbf7, 0x400, 0x3, 0x2, 0x0, 0x8000, 0xa000, 0x9fffffff, r11, r12, 0x0, 0x200, 0x1000000}}}, 0x78) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002400)={0x150, 0x0, r5, [{{0x6, 0x1, 0x6, 0x9, 0x5, 0x9, {0x1, 0x9, 0x1, 0xffffffffffffff2d, 0x80, 0xd20f, 0x0, 0x8, 0x6, 0x8000, 0x5, r6, r7, 0x2000000, 0x8}}, {0x6, 0x5, 0x0, 0x7}}, {{0x4, 0x1, 0xeb, 0x7ff, 0x7, 0x10, {0x0, 0x9, 0x3, 0x4aee560c, 0x9, 0xac1, 0x8000, 0x1, 0xf, 0x6000, 0x3, 0x0, r12, 0x10000, 0x9}}, {0x6, 0x0, 0xd, 0x2, 'security.ima\x00'}}]}, 0x150) lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000180)=@v2={0x6, 0x3, 0xc, 0x4, 0x81, "b253ec84fe55c20c3bd07a0e7fa3fed03ca01d7a2408205baf3f67c2eeacda73d1f7f4b24bfb93784a9b563bf265201fe62afdd0696cb3fb0dab5b7477c2074dcb9a58ba36044b5522a084663a6d1cf1bb2aed009b23cd81e9f436457b079c836142516fc53d0a14edab8b60c5e2f731668cbb0c8b8296c6a28cfc9fceefcabdca"}, 0x8a, 0x0) 11m32.911667787s ago: executing program 6 (id=408): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) 11m31.576259772s ago: executing program 6 (id=412): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000340)=""/88) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0xa0000000}) 11m29.919833501s ago: executing program 6 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, 0x1000f) 11m14.099966728s ago: executing program 34 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, 0x1000f) 9m40.657514253s ago: executing program 1 (id=612): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='tunl0\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x9, 0x0, &(0x7f0000000400)=0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f00000002c0)) ioctl$FITHAW(r5, 0xc0045878) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x8003}, 0xff97, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00000012c0)={{0x0, 0x3938700}}, &(0x7f0000001300)) ioctl$FIONCLEX(r4, 0x5450) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) timer_gettime(0x0, 0x0) io_submit(r8, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r7, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 9m27.160661394s ago: executing program 1 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x4}, 0xb1}}}, 0x7) sendmsg(r3, &(0x7f0000000cc0)={&(0x7f0000000900)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @remote}, 0x0, 0x2, 0x1, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x48, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'sha224-avx2\x00'}}, &(0x7f0000000e40), 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x1fffffd}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) 9m26.174076795s ago: executing program 1 (id=643): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) 9m23.100976739s ago: executing program 1 (id=650): ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @none={0x0, 0xffff}}, 0x14) 9m15.744282712s ago: executing program 1 (id=661): socket$inet6(0xa, 0x805, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, 0x0, 0x0, 0x0) r5 = dup2(r1, r2) fcntl$setown(r5, 0x8, r0) tkill(r0, 0x13) socket$inet_mptcp(0x2, 0x1, 0x106) 9m11.344932681s ago: executing program 1 (id=667): syz_open_dev$sg(0x0, 0x6f5e, 0x103243) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="8995b3c271ba", 0x6, 0x4044880, 0x0, 0x0) 8m54.309198681s ago: executing program 35 (id=667): syz_open_dev$sg(0x0, 0x6f5e, 0x103243) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="8995b3c271ba", 0x6, 0x4044880, 0x0, 0x0) 6m53.428995664s ago: executing program 8 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) read$FUSE(r2, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000022c0)={{{@in6=@mcast1, @in=@empty}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000023c0)=0xe8) r5 = geteuid() r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="1b0000001a005f0014f9f507000909008100030000000000", 0x18) r7 = getgid() r8 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r8, 0x0, 0x0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r9, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r9, &(0x7f0000000100)={0x78, 0x0, r10, {0x2000000007, 0x0, 0x0, {0x10000, 0xffffffffffffffff, 0x58, 0xbbf7, 0x400, 0x3, 0x2, 0x0, 0x8000, 0xa000, 0x9fffffff, r11, r12, 0x0, 0x200, 0x1000000}}}, 0x78) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002400)={0x150, 0x0, r4, [{{0x6, 0x1, 0x6, 0x9, 0x5, 0x9, {0x1, 0x9, 0x1, 0xffffffffffffff2d, 0x80, 0xd20f, 0x0, 0x8, 0x6, 0x8000, 0x5, r5, r7, 0x2000000, 0x8}}, {0x6, 0x5, 0x0, 0x7}}, {{0x4, 0x1, 0xeb, 0x7ff, 0x7, 0x10, {0x0, 0x9, 0x3, 0x4aee560c, 0x9, 0xac1, 0x8000, 0x1, 0xf, 0x6000, 0x3, 0x0, r12, 0x10000, 0x9}}, {0x6, 0x0, 0xd, 0x2, 'security.ima\x00'}}]}, 0x150) lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000180)=@v2={0x6, 0x3, 0xc, 0x4, 0x81, "b253ec84fe55c20c3bd07a0e7fa3fed03ca01d7a2408205baf3f67c2eeacda73d1f7f4b24bfb93784a9b563bf265201fe62afdd0696cb3fb0dab5b7477c2074dcb9a58ba36044b5522a084663a6d1cf1bb2aed009b23cd81e9f436457b079c836142516fc53d0a14edab8b60c5e2f731668cbb0c8b8296c6a28cfc9fceefcabdca"}, 0x8a, 0x0) 6m47.48483692s ago: executing program 8 (id=926): dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x10, 0xd, 0x200, &(0x7f0000000040)="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"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 6m41.888311513s ago: executing program 8 (id=938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chmod(&(0x7f0000000040)='.\x00', 0x35e) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 6m40.021377194s ago: executing program 8 (id=943): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r5}) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000500)}], 0x1) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) 6m35.407704926s ago: executing program 8 (id=953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chmod(&(0x7f0000000040)='.\x00', 0x35e) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 6m33.621491646s ago: executing program 8 (id=956): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0x4, 0x1, 0xfffffffe, 0x1000000, 0x3, 0x1, 0x20000004, 0x4, 0xa, 0xfffffffd, 0x6, 0x6, 0x43, 0x9, 0xffffffff, 0x8, 0x10009, 0xfe9, 0x401, 0x8000, 0xffff5dc8, 0x0, 0xaaa, 0x48, 0xffffffff, 0x80, 0xfffffffd, 0x481, 0x3, 0x5]}) sendmsg$nl_xfrm(r0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 6m18.253791058s ago: executing program 36 (id=956): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0x4, 0x1, 0xfffffffe, 0x1000000, 0x3, 0x1, 0x20000004, 0x4, 0xa, 0xfffffffd, 0x6, 0x6, 0x43, 0x9, 0xffffffff, 0x8, 0x10009, 0xfe9, 0x401, 0x8000, 0xffff5dc8, 0x0, 0xaaa, 0x48, 0xffffffff, 0x80, 0xfffffffd, 0x481, 0x3, 0x5]}) sendmsg$nl_xfrm(r0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 58.567291874s ago: executing program 4 (id=1576): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x20, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0xc, 0xe, 0x0, 0x1, [@nested={0x1c, 0x151, 0x0, 0x1, [@nested={0x4, 0xde}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) 58.139824969s ago: executing program 4 (id=1578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, 0x0) open(0x0, 0x551083, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, 0x0, 0x4) 55.305471521s ago: executing program 5 (id=1582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000022c0)={{{@in6=@mcast1, @in=@empty}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000023c0)=0xe8) r6 = geteuid() socket(0x10, 0x3, 0x0) r7 = getgid() r8 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r8, 0x0, 0x0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r9, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r9, &(0x7f0000000100)={0x78, 0x0, r10, {0x2000000007, 0x0, 0x0, {0x10000, 0xffffffffffffffff, 0x58, 0xbbf7, 0x400, 0x3, 0x2, 0x0, 0x8000, 0xa000, 0x9fffffff, r11, r12, 0x0, 0x200, 0x1000000}}}, 0x78) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002400)={0x150, 0x0, r5, [{{0x6, 0x1, 0x6, 0x9, 0x5, 0x9, {0x1, 0x9, 0x1, 0xffffffffffffff2d, 0x80, 0xd20f, 0x0, 0x8, 0x6, 0x8000, 0x5, r6, r7, 0x2000000, 0x8}}, {0x6, 0x5, 0x0, 0x7}}, {{0x4, 0x1, 0xeb, 0x7ff, 0x7, 0x10, {0x0, 0x9, 0x3, 0x4aee560c, 0x9, 0xac1, 0x8000, 0x1, 0xf, 0x6000, 0x3, 0x0, r12, 0x10000, 0x9}}, {0x6, 0x0, 0xd, 0x2, 'security.ima\x00'}}]}, 0x150) lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000180)=@v2={0x6, 0x3, 0xc, 0x4, 0x81, "b253ec84fe55c20c3bd07a0e7fa3fed03ca01d7a2408205baf3f67c2eeacda73d1f7f4b24bfb93784a9b563bf265201fe62afdd0696cb3fb0dab5b7477c2074dcb9a58ba36044b5522a084663a6d1cf1bb2aed009b23cd81e9f436457b079c836142516fc53d0a14edab8b60c5e2f731668cbb0c8b8296c6a28cfc9fceefcabdca"}, 0x8a, 0x0) 55.188638262s ago: executing program 4 (id=1583): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) 53.54487386s ago: executing program 4 (id=1584): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f2", 0x30}, {&(0x7f0000000900)}], 0x3}}], 0x1, 0x20000044) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x30) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x40000029) fcntl$notify(r3, 0x402, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r6) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xffffffff}}) 50.630783373s ago: executing program 5 (id=1589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) r6 = geteuid() r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="1b0000001a005f0014f9f507000909008100030000000000", 0x18) r8 = getgid() r9 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r9, 0x0, 0x0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r10, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r10, &(0x7f0000000100)={0x78, 0x0, r11, {0x2000000007, 0x0, 0x0, {0x10000, 0xffffffffffffffff, 0x58, 0xbbf7, 0x400, 0x3, 0x2, 0x0, 0x8000, 0xa000, 0x9fffffff, r12, r13, 0x0, 0x200, 0x1000000}}}, 0x78) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002400)={0x150, 0x0, r5, [{{0x6, 0x1, 0x6, 0x9, 0x5, 0x9, {0x1, 0x9, 0x1, 0xffffffffffffff2d, 0x80, 0xd20f, 0x0, 0x8, 0x6, 0x8000, 0x5, r6, r8, 0x2000000, 0x8}}, {0x6, 0x5, 0x0, 0x7}}, {{0x4, 0x1, 0xeb, 0x7ff, 0x7, 0x10, {0x0, 0x9, 0x3, 0x4aee560c, 0x9, 0xac1, 0x8000, 0x1, 0xf, 0x6000, 0x3, 0x0, r13, 0x10000, 0x9}}, {0x6, 0x0, 0xd, 0x2, 'security.ima\x00'}}]}, 0x150) lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000180)=@v2={0x6, 0x3, 0xc, 0x4, 0x81, "b253ec84fe55c20c3bd07a0e7fa3fed03ca01d7a2408205baf3f67c2eeacda73d1f7f4b24bfb93784a9b563bf265201fe62afdd0696cb3fb0dab5b7477c2074dcb9a58ba36044b5522a084663a6d1cf1bb2aed009b23cd81e9f436457b079c836142516fc53d0a14edab8b60c5e2f731668cbb0c8b8296c6a28cfc9fceefcabdca"}, 0x8a, 0x0) 49.184911929s ago: executing program 5 (id=1591): syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x20, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, 0xffffffffffffffff, 0x0, 0x0, 0xffffeffffffffffe}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 47.026030124s ago: executing program 4 (id=1595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chmod(&(0x7f0000000040)='.\x00', 0x35e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}}}}}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 45.293046603s ago: executing program 4 (id=1596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10004, 0x2, 0xfec46000, 0x1000, &(0x7f0000fe9000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.481573873s ago: executing program 5 (id=1598): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000680)={0x0, &(0x7f0000000540)=[{}], 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) 40.792769743s ago: executing program 7 (id=1602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000022c0)={{{@in6=@mcast1, @in=@empty}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000023c0)=0xe8) r6 = geteuid() r7 = socket(0x10, 0x3, 0x0) write(r7, 0x0, 0x0) r8 = getgid() r9 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r9, 0x0, 0x0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r10, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r10, &(0x7f0000000100)={0x78, 0x0, r11, {0x2000000007, 0x0, 0x0, {0x10000, 0xffffffffffffffff, 0x58, 0xbbf7, 0x400, 0x3, 0x2, 0x0, 0x8000, 0xa000, 0x9fffffff, r12, r13, 0x0, 0x200, 0x1000000}}}, 0x78) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002400)={0x150, 0x0, r5, [{{0x6, 0x1, 0x6, 0x9, 0x5, 0x9, {0x1, 0x9, 0x1, 0xffffffffffffff2d, 0x80, 0xd20f, 0x0, 0x8, 0x6, 0x8000, 0x5, r6, r8, 0x2000000, 0x8}}, {0x6, 0x5, 0x0, 0x7}}, {{0x4, 0x1, 0xeb, 0x7ff, 0x7, 0x10, {0x0, 0x9, 0x3, 0x4aee560c, 0x9, 0xac1, 0x8000, 0x1, 0xf, 0x6000, 0x3, 0x0, r13, 0x10000, 0x9}}, {0x6, 0x0, 0xd, 0x2, 'security.ima\x00'}}]}, 0x150) lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000180)=@v2={0x6, 0x3, 0xc, 0x4, 0x81, "b253ec84fe55c20c3bd07a0e7fa3fed03ca01d7a2408205baf3f67c2eeacda73d1f7f4b24bfb93784a9b563bf265201fe62afdd0696cb3fb0dab5b7477c2074dcb9a58ba36044b5522a084663a6d1cf1bb2aed009b23cd81e9f436457b079c836142516fc53d0a14edab8b60c5e2f731668cbb0c8b8296c6a28cfc9fceefcabdca"}, 0x8a, 0x0) 39.775890835s ago: executing program 7 (id=1603): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffba83) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 39.599816327s ago: executing program 5 (id=1604): syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x20, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, 0xffffffffffffffff, 0x0, 0x0, 0xffffeffffffffffe}]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 37.001668116s ago: executing program 7 (id=1606): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chmod(&(0x7f0000000040)='.\x00', 0x35e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}}}}}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 35.783153869s ago: executing program 5 (id=1607): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="f2ab670f01c90f20e035200000000f22e06466400f213926660f65d166baa100b800000100efc74424002c000000c7442402bde689f7c7442406000000000f011c24400f0866baf80cb8f0f7488bef66bafc0cedf3470fa7e8", 0x59}], 0x1, 0x48, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x7}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x7f}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001800", 0x6}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4001) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x40002042) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x2d0, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 35.084157477s ago: executing program 7 (id=1608): syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x20, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, 0xffffffffffffffff, 0x0, 0x0, 0xffffeffffffffffe}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 31.552576437s ago: executing program 7 (id=1611): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0xa2043, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000340)={0xe939, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r4}) 30.230593151s ago: executing program 7 (id=1613): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 29.230493463s ago: executing program 37 (id=1596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10004, 0x2, 0xfec46000, 0x1000, &(0x7f0000fe9000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.212365233s ago: executing program 9 (id=1615): unshare(0x20000400) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585"], 0x0) 25.561345944s ago: executing program 9 (id=1618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chmod(&(0x7f0000000040)='.\x00', 0x35e) syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "00186371"}}}}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 24.019949341s ago: executing program 9 (id=1619): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0x0, 0xee01, 0x0) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 23.16481436s ago: executing program 0 (id=1621): syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x20, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, 0xffffffffffffffff, 0x0, 0x0, 0xffffeffffffffffe}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 21.716476967s ago: executing program 9 (id=1622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, 0x0) open(0x0, 0x551083, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, 0x0, 0x4) 20.712590998s ago: executing program 9 (id=1623): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0xa2043, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000340)={0xe939, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r4}) 20.50055305s ago: executing program 38 (id=1607): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="f2ab670f01c90f20e035200000000f22e06466400f213926660f65d166baa100b800000100efc74424002c000000c7442402bde689f7c7442406000000000f011c24400f0866baf80cb8f0f7488bef66bafc0cedf3470fa7e8", 0x59}], 0x1, 0x48, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x7}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x7f}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001800", 0x6}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4001) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x40002042) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x2d0, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 19.906305387s ago: executing program 9 (id=1625): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendto$packet(r1, 0x0, 0x0, 0x4, 0x0, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x12, 0xffffffffffffffff, 0xd22d5000) preadv(r5, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x10, 0x20, 0x1, 0x3, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) 19.557457941s ago: executing program 0 (id=1626): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) unshare(0x20000400) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) socket$kcm(0xa, 0x5, 0x0) 19.315224704s ago: executing program 0 (id=1627): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000003040), 0x8040, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 19.033533607s ago: executing program 0 (id=1628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chmod(&(0x7f0000000040)='.\x00', 0x35e) syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "00186371"}}}}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 17.436863775s ago: executing program 0 (id=1629): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='tunl0\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x9, 0x0, &(0x7f0000000400)=0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f00000002c0)) ioctl$FITHAW(r5, 0xc0045878) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x8003}, 0xff97, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00000012c0)={{0x0, 0x3938700}}, &(0x7f0000001300)) ioctl$FIONCLEX(r4, 0x5450) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) timer_gettime(0x0, 0x0) io_submit(r7, 0x0, 0x0) 15.506677066s ago: executing program 0 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xc0=\x8f\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xde\xc3\x1e\xb8\xd6w\xb0\"~\x15G\xe6\xe5U\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#S\xd9\xe3~Sj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j\x15U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\x11\xe7\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.445574648s ago: executing program 39 (id=1613): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 4.506196819s ago: executing program 40 (id=1625): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendto$packet(r1, 0x0, 0x0, 0x4, 0x0, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x12, 0xffffffffffffffff, 0xd22d5000) preadv(r5, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x10, 0x20, 0x1, 0x3, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 41 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xc0=\x8f\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xde\xc3\x1e\xb8\xd6w\xb0\"~\x15G\xe6\xe5U\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#S\xd9\xe3~Sj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j\x15U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\x11\xe7\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): z.5.1050" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 680.624726][ T26] audit: type=1326 audit(1778513982.248:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.5.1050" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 680.770858][ T26] audit: type=1326 audit(1778513982.248:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.5.1050" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 681.957096][ T4455] bond0 (unregistering): Released all slaves [ 682.093595][ T9226] UBIFS error (pid: 9226): cannot open "c:::", error -22 [ 682.457024][ T9191] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.474020][ T9191] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.482818][ T9191] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.491614][ T9191] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.751663][ T9233] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 682.759255][ T9233] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 682.773170][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 682.773184][ T26] audit: type=1326 audit(1778513984.508:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.0.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 683.140421][ T26] audit: type=1326 audit(1778513984.508:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.0.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 683.168704][ T26] audit: type=1326 audit(1778513984.508:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.0.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 683.209502][ T26] audit: type=1326 audit(1778513984.508:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.0.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 683.251307][ T26] audit: type=1326 audit(1778513984.508:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.0.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 683.734284][ T9242] autofs4:pid:9242:autofs_fill_super: called with bogus options [ 684.057799][ T26] audit: type=1326 audit(1778513984.508:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.0.1056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 684.575352][ T9254] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1060'. [ 684.757837][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 685.112812][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 685.210876][ T8918] device veth0_vlan entered promiscuous mode [ 685.255868][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 685.444099][ T9259] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 685.452283][ T9259] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 685.462487][ T26] audit: type=1326 audit(1778513987.198:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.7.1063" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 685.500989][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 685.525791][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 685.526624][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 685.564513][ T8918] device veth1_vlan entered promiscuous mode [ 685.588558][ T26] audit: type=1326 audit(1778513987.198:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.7.1063" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 685.588596][ T26] audit: type=1326 audit(1778513987.198:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.7.1063" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 685.588628][ T26] audit: type=1326 audit(1778513987.198:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.7.1063" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 685.644220][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 685.644889][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 685.645549][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 685.646208][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 685.717866][ T8918] device veth0_macvtap entered promiscuous mode [ 685.732955][ T8918] device veth1_macvtap entered promiscuous mode [ 685.771728][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.771825][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.821648][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 685.824610][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 686.159204][ T9266] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1064'. [ 686.238351][ T9275] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 686.246054][ T9275] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 686.405616][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.416586][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.426698][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.466070][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.503602][ T9277] UBIFS error (pid: 9277): cannot open "c:::", error -22 [ 686.533119][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.627725][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.683290][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.721489][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.774239][ T8918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.098695][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 687.323939][ T6428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 687.547044][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.718480][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.728444][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.739133][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.770011][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.807119][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.008755][ T4316] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 688.021800][ T8918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.042168][ T8918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.058683][ T8918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.077648][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 688.088214][ T9289] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 688.095725][ T9289] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 688.107699][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 688.107713][ T26] audit: type=1326 audit(1778513989.838:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.7.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 688.125661][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 688.154779][ T26] audit: type=1326 audit(1778513989.838:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.7.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 688.168560][ T8918] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.205846][ T8918] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.219266][ T26] audit: type=1326 audit(1778513989.838:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.7.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 688.244120][ T8918] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.248755][ T4316] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 688.270528][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.272279][ T8918] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.302162][ T4316] usb 5-1: config 0 descriptor?? [ 688.313827][ T26] audit: type=1326 audit(1778513989.838:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.7.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 688.474242][ T26] audit: type=1326 audit(1778513989.838:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.7.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 688.553894][ T26] audit: type=1326 audit(1778513989.878:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.7.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 688.587948][ T26] audit: type=1326 audit(1778513989.878:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.7.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 688.614412][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.656581][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.766352][ T4316] ath6kl: Failed to submit usb control message: -71 [ 688.773837][ T4316] ath6kl: unable to send the bmi data to the device: -71 [ 688.788175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 688.829765][ T4639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.839363][ T4639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.868786][ T26] audit: type=1326 audit(1778513989.878:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.7.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 688.894843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 688.902992][ T4316] ath6kl: Unable to send get target info: -71 [ 688.939059][ T4316] ath6kl: Failed to init ath6kl core: -71 [ 689.075866][ T4316] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 691.440411][ T4316] usb 5-1: USB disconnect, device number 19 [ 693.526342][ T9323] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 693.533918][ T9323] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 693.544143][ T26] audit: type=1326 audit(1778513995.278:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.0.1075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 693.681598][ T26] audit: type=1326 audit(1778513995.278:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.0.1075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 693.904354][ T26] audit: type=1326 audit(1778513995.278:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.0.1075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 693.935238][ T26] audit: type=1326 audit(1778513995.278:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.0.1075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 694.779155][ T9341] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 694.786702][ T9341] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 695.634925][ T26] audit: type=1326 audit(1778513995.278:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.0.1075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 695.759583][ T26] audit: type=1326 audit(1778513995.308:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.0.1075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 695.846182][ T26] audit: type=1326 audit(1778513995.308:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.0.1075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 695.969378][ T26] audit: type=1326 audit(1778513995.308:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9322 comm="syz.0.1075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 696.190169][ T26] audit: type=1326 audit(1778513997.288:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 696.229195][ T26] audit: type=1326 audit(1778513997.288:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 696.256894][ T9355] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 696.264497][ T9355] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 696.903136][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1083'. [ 697.029003][ T3730] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 697.043456][ T9376] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 698.651018][ T7] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 698.702785][ T3730] usb 6-1: Using ep0 maxpacket: 32 [ 698.713863][ T3730] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 698.728972][ T3730] usb 6-1: config 0 has no interface number 0 [ 698.747605][ T3730] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 698.747633][ T3730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.747652][ T3730] usb 6-1: Product: syz [ 698.747666][ T3730] usb 6-1: Manufacturer: syz [ 698.747680][ T3730] usb 6-1: SerialNumber: syz [ 698.767364][ T3730] usb 6-1: config 0 descriptor?? [ 698.771596][ T3730] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 698.771625][ T3730] usb 6-1: selecting invalid altsetting 1 [ 698.771642][ T3730] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 698.794198][ T3730] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 698.794427][ T3730] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 698.794543][ T3730] usb 6-1: media controller created [ 698.817706][ T3730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 698.872960][ T7] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 698.873025][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.875272][ T7] usb 8-1: config 0 descriptor?? [ 699.301392][ T7] ath6kl: Failed to submit usb control message: -71 [ 699.308571][ T7] ath6kl: unable to send the bmi data to the device: -71 [ 699.343025][ T7] ath6kl: Unable to send get target info: -71 [ 699.365947][ T7] ath6kl: Failed to init ath6kl core: -71 [ 699.435579][ T7] ath6kl_usb: probe of 8-1:0.0 failed with error -71 [ 699.463280][ T7] usb 8-1: USB disconnect, device number 7 [ 699.756932][ T9404] netlink: 'syz.9.1091': attribute type 12 has an invalid length. [ 699.765373][ T9404] netlink: 'syz.9.1091': attribute type 29 has an invalid length. [ 699.789722][ T9404] netlink: 'syz.9.1091': attribute type 4 has an invalid length. [ 699.797538][ T9404] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1091'. [ 699.929851][ T3730] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 699.947747][ T3730] zl10353_read_register: readreg error (reg=127, ret==-110) [ 700.022851][ T3730] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 700.110268][ T9409] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 700.117741][ T9409] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 700.127889][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 700.128018][ T26] audit: type=1326 audit(1778514001.858:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.0.1092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 700.230907][ T3730] usb 6-1: USB disconnect, device number 10 [ 701.252799][ T26] audit: type=1326 audit(1778514001.858:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.0.1092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 701.637812][ T26] audit: type=1326 audit(1778514001.858:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.0.1092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 701.820889][ T26] audit: type=1326 audit(1778514001.858:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.0.1092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 701.939217][ T26] audit: type=1326 audit(1778514001.858:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.0.1092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 702.127407][ T26] audit: type=1326 audit(1778514001.888:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.0.1092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 702.151510][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.169074][ T26] audit: type=1326 audit(1778514001.898:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.0.1092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 702.195782][ T9432] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 702.203367][ T9432] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 703.564397][ T26] audit: type=1326 audit(1778514001.898:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.0.1092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 703.588440][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.140869][ T26] audit: type=1326 audit(1778514003.948:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.0.1095" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 704.680677][ T26] audit: type=1326 audit(1778514003.948:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.0.1095" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 706.476367][ T9293] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 707.289126][ T9293] usb 8-1: unable to get BOS descriptor or descriptor too short [ 707.322740][ T9293] usb 8-1: not running at top speed; connect to a high speed hub [ 707.361551][ T9293] usb 8-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 707.391244][ T9293] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.449270][ T9293] usb 8-1: Product: syz [ 707.453607][ T9293] usb 8-1: Manufacturer: syz [ 708.895719][ T9293] usb 8-1: SerialNumber: syz [ 708.936499][ T9293] usb 8-1: can't set config #61, error -71 [ 708.971746][ T9293] usb 8-1: USB disconnect, device number 8 [ 709.307171][ T9488] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.1112'. [ 709.803318][ T9489] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 709.811727][ T9489] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 709.823927][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 709.824735][ T26] audit: type=1326 audit(1778514011.558:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.7.1114" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 710.353529][ T26] audit: type=1326 audit(1778514011.558:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.7.1114" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 710.885371][ T26] audit: type=1326 audit(1778514011.558:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.7.1114" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 712.546298][ T26] audit: type=1326 audit(1778514011.558:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.7.1114" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 712.932342][ T26] audit: type=1326 audit(1778514011.558:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.7.1114" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 713.029408][ T26] audit: type=1326 audit(1778514011.558:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.7.1114" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 713.149949][ T26] audit: type=1326 audit(1778514011.558:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.7.1114" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 713.255398][ T26] audit: type=1326 audit(1778514011.558:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.7.1114" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 713.489040][ T9293] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 713.667127][ T9579] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1116'. [ 713.876732][ T9293] usb 10-1: too many configurations: 25, using maximum allowed: 8 [ 713.887000][ T9293] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.091020][ T9293] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 716.609294][ T9293] usb 10-1: unable to read config index 1 descriptor/start: -71 [ 716.617030][ T9293] usb 10-1: can't read configurations, error -71 [ 717.836831][ T9605] Unsupported ieee802154 address type: 0 [ 717.939273][ T9606] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 717.946860][ T9606] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 717.974181][ T26] audit: type=1326 audit(1778514019.698:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.0.1125" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 718.292746][ T26] audit: type=1326 audit(1778514019.698:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.0.1125" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 718.409655][ T26] audit: type=1326 audit(1778514019.698:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.0.1125" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 718.527425][ T26] audit: type=1326 audit(1778514019.698:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.0.1125" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 718.643499][ T26] audit: type=1326 audit(1778514019.708:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.0.1125" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 718.715054][ T26] audit: type=1326 audit(1778514019.708:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.0.1125" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 726.491168][ T9665] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 726.499282][ T9665] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 726.538995][ T26] audit: type=1326 audit(1778514028.248:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.9.1139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 726.577565][ T26] audit: type=1326 audit(1778514028.248:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.9.1139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 726.616167][ T9666] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1136'. [ 726.717317][ T26] audit: type=1326 audit(1778514028.248:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.9.1139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 726.782559][ T26] audit: type=1326 audit(1778514028.248:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.9.1139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 726.968991][ T26] audit: type=1326 audit(1778514028.248:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.9.1139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 727.052166][ T26] audit: type=1326 audit(1778514028.248:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.9.1139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 733.490130][ T9728] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1153'. [ 739.659035][ T4275] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 739.850692][ T4275] usb 8-1: too many configurations: 25, using maximum allowed: 8 [ 739.865059][ T4275] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 739.935255][ T4275] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 739.989475][ T4275] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 740.101658][ T4275] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 740.131275][ T4275] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 740.163161][ T4275] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 740.188977][ T5529] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 740.363275][ T4275] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 740.374492][ T4275] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 740.384081][ T4275] usb 8-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 740.393488][ T4275] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.410968][ T5529] usb 10-1: Using ep0 maxpacket: 16 [ 740.435475][ T5529] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 740.437496][ T4275] usb 8-1: config 0 descriptor?? [ 740.469060][ T5529] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.498727][ T5529] usb 10-1: Product: syz [ 740.503497][ T5529] usb 10-1: Manufacturer: syz [ 740.508285][ T5529] usb 10-1: SerialNumber: syz [ 740.517893][ T5529] usb 10-1: config 0 descriptor?? [ 740.526744][ T5529] visor 10-1:0.0: Sony Clie 3.5 converter detected [ 740.707804][ T4275] usb 8-1: USB disconnect, device number 9 [ 740.729748][ T5529] usb 10-1: clie_3_5_startup: get config number failed: -71 [ 740.740794][ T5529] visor: probe of 10-1:0.0 failed with error -71 [ 740.760446][ T5529] usb 10-1: USB disconnect, device number 4 [ 742.967240][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1173'. [ 743.068515][ T9814] device bond1 entered promiscuous mode [ 743.137389][ T9814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 743.159150][ T9817] device erspan1 entered promiscuous mode [ 743.165756][ T9817] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 743.212426][ T9312] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 743.305343][ T9830] Bluetooth: MGMT ver 1.22 [ 745.299324][ T4287] Bluetooth: hci0: command 0x0401 tx timeout [ 745.306955][ T4288] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 745.319138][ T5529] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 745.409165][ T4275] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 745.530754][ T5529] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 745.558989][ T5529] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.589107][ T5529] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.614376][ T4275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 745.635738][ T4275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 745.658039][ T4275] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 745.668737][ T5529] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 745.677907][ T4275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.716008][ T4275] usb 1-1: Product: syz [ 745.742916][ T4275] usb 1-1: Manufacturer: syz [ 745.751914][ T5529] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 745.759276][ T4275] usb 1-1: SerialNumber: syz [ 745.783245][ T4275] usb 1-1: config 0 descriptor?? [ 745.788781][ T9847] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 745.805850][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 745.837647][ T5529] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 745.853748][ T5529] usb 8-1: Manufacturer: syz [ 745.867674][ T5529] usb 8-1: config 0 descriptor?? [ 747.211887][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.218272][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.369006][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout [ 747.836539][ T4275] port100 1-1:0.0: NFC: Could not get supported command types [ 748.280236][ T4275] usb 1-1: USB disconnect, device number 19 [ 748.672478][ T5529] usb 8-1: can't set config #0, error -71 [ 748.699328][ T5529] usb 8-1: USB disconnect, device number 10 [ 750.489084][ T4275] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 752.213606][ T4275] usb 1-1: device descriptor read/all, error -71 [ 752.787275][ T9893] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 754.159062][ T1170] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 755.243021][ T1170] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 755.319675][ T1170] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.388681][ T1170] usb 1-1: Product: syz [ 755.415112][ T1170] usb 1-1: Manufacturer: syz [ 755.455324][ T1170] usb 1-1: SerialNumber: syz [ 755.496480][ T1170] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 755.627615][ T1170] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 756.291184][ T4321] usb 1-1: USB disconnect, device number 22 [ 757.737181][ T1170] usb 1-1: Service connection timeout for: 256 [ 757.748480][ T1170] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 757.805121][ T1170] ath9k_htc: Failed to initialize the device [ 757.830995][ T4321] usb 1-1: ath9k_htc: USB layer deinitialized [ 758.471317][ T9933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 758.479188][ T9933] IPv6: NLM_F_CREATE should be set when creating new route [ 758.609062][ T3730] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 758.839413][ T3730] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 758.860390][ T3730] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.930732][ T3730] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.941087][ T3730] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.960096][ T3730] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 759.025381][ T3730] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 759.099790][ T3730] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 759.169209][ T3730] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 759.206146][ T3730] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 759.248985][ T3730] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 759.258249][ T3730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.299942][ T3730] usb 5-1: config 0 descriptor?? [ 759.523114][ T3730] usb 5-1: USB disconnect, device number 20 [ 760.762490][ T9973] CUSE: info not properly terminated [ 762.762697][ T4321] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 762.974288][ T4321] usb 5-1: Using ep0 maxpacket: 8 [ 762.981720][ T4321] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 763.030742][ T4321] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 763.074206][ T4321] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 763.125255][ T4321] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.184718][ T4321] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 763.216001][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.496782][ T4321] usb 5-1: GET_CAPABILITIES returned 0 [ 763.508960][ T4321] usbtmc 5-1:16.0: can't read capabilities [ 763.642809][ T9992] CUSE: info not properly terminated [ 763.739398][ T4321] usb 5-1: USB disconnect, device number 21 [ 764.099289][ T9999] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 764.106843][ T9999] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 764.131191][ T26] audit: type=1326 audit(1778514065.858:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.5.1215" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 764.788954][ T26] audit: type=1326 audit(1778514065.858:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.5.1215" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 765.024398][ T26] audit: type=1326 audit(1778514065.858:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.5.1215" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 765.144368][ T26] audit: type=1326 audit(1778514065.858:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.5.1215" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 766.639694][ T26] audit: type=1326 audit(1778514065.868:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.5.1215" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 766.809016][ T26] audit: type=1326 audit(1778514065.868:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.5.1215" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 766.839322][ T1170] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 767.055630][ T1170] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 767.085693][ T1170] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.126425][ T1170] usb 1-1: Product: syz [ 767.155373][ T1170] usb 1-1: Manufacturer: syz [ 767.170792][ T1170] usb 1-1: SerialNumber: syz [ 767.209814][ T1170] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 767.294556][ T1170] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 767.928799][ T33] usb 1-1: USB disconnect, device number 23 [ 769.640455][ T1170] usb 1-1: Service connection timeout for: 256 [ 769.646710][ T1170] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 769.696189][ T1170] ath9k_htc: Failed to initialize the device [ 769.719967][ T33] usb 1-1: ath9k_htc: USB layer deinitialized [ 769.769427][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 771.407258][T10073] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 771.414840][T10073] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 771.737034][ T26] audit: type=1326 audit(1778514073.168:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.4.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 773.227994][ T26] audit: type=1326 audit(1778514073.168:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.4.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 774.501013][ T26] audit: type=1326 audit(1778514073.168:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.4.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 774.774470][ T26] audit: type=1326 audit(1778514073.168:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.4.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 774.851254][ T26] audit: type=1326 audit(1778514073.168:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.4.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 774.906460][ T26] audit: type=1326 audit(1778514073.168:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.4.1227" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 774.985921][T10085] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 774.993555][T10085] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 778.119992][T10113] CUSE: info not properly terminated [ 778.762872][ T26] audit: type=1326 audit(1778514080.488:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.4.1241" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 779.165656][ T26] audit: type=1326 audit(1778514080.488:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.4.1241" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 779.303765][ T26] audit: type=1326 audit(1778514080.488:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.4.1241" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 779.327999][ T26] audit: type=1326 audit(1778514080.488:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.4.1241" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 779.398989][ T26] audit: type=1326 audit(1778514080.498:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.4.1241" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 779.588949][ T26] audit: type=1326 audit(1778514080.498:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.4.1241" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 783.780142][T10177] capability: warning: `syz.7.1246' uses deprecated v2 capabilities in a way that may be insecure [ 783.972527][ T4318] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 785.519139][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 785.534536][ T4318] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 785.564375][ T4318] usb 1-1: config 0 has no interface number 0 [ 785.586256][ T4318] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 785.638703][ T4318] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 785.671358][ T4318] usb 1-1: config 0 interface 85 has no altsetting 0 [ 785.693159][ T4318] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 785.723803][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.747831][ T4318] usb 1-1: Product: syz [ 785.763446][ T4318] usb 1-1: Manufacturer: syz [ 785.788595][ T4318] usb 1-1: SerialNumber: syz [ 785.810340][ T4318] usb 1-1: config 0 descriptor?? [ 786.136290][T10194] CUSE: info not properly terminated [ 786.359733][ T4318] appletouch 1-1:0.85: Geyser mode initialized. [ 786.373430][ T4318] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input12 [ 786.568043][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1254'. [ 786.832321][ T4318] usb 1-1: USB disconnect, device number 24 [ 787.112057][ T4318] appletouch 1-1:0.85: input: appletouch disconnected [ 787.738513][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'. [ 787.808729][ T26] audit: type=1326 audit(1778514089.538:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.7.1252" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f658619cdd9 code=0x0 [ 788.059251][ T4318] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 788.293799][ T4318] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 788.340936][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.396495][ T4318] usb 1-1: Product: syz [ 788.427651][ T4318] usb 1-1: Manufacturer: syz [ 788.463597][ T4318] usb 1-1: SerialNumber: syz [ 788.518528][ T4318] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 788.618302][ T4318] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 789.216976][T10224] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1259'. [ 789.319437][ T7846] usb 1-1: USB disconnect, device number 25 [ 791.002688][ T4318] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 791.035616][ T4318] ath9k_htc: Failed to initialize the device [ 791.084316][ T7846] usb 1-1: ath9k_htc: USB layer deinitialized [ 793.036663][ T26] audit: type=1326 audit(1778514094.768:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10248 comm="syz.4.1269" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe82b39cdd9 code=0x0 [ 795.084007][T10266] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1272'. [ 795.115869][ T4318] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 795.289256][ T4318] usb 1-1: device descriptor read/64, error -71 [ 795.445056][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1273'. [ 797.078974][ T9293] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 797.283337][ T9293] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 797.304150][ T4318] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 797.319093][ T9293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.327215][ T9293] usb 6-1: Product: syz [ 797.358935][ T9293] usb 6-1: Manufacturer: syz [ 797.363618][ T9293] usb 6-1: SerialNumber: syz [ 797.705045][ T9293] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 798.044742][ T9293] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 798.260574][ T1170] usb 6-1: USB disconnect, device number 11 [ 798.464601][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 799.936309][ T9293] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 799.954032][ T9293] ath9k_htc: Failed to initialize the device [ 799.972606][ T1170] usb 6-1: ath9k_htc: USB layer deinitialized [ 800.150380][T10304] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 800.389753][ T26] audit: type=1326 audit(1778514102.128:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.9.1282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd5519cdd9 code=0x0 [ 805.229097][ T7] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 805.409083][ T7] usb 10-1: device descriptor read/64, error -71 [ 805.679158][ T7] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 805.839079][ T7] usb 10-1: device descriptor read/64, error -71 [ 805.984795][ T7] usb usb10-port1: attempt power cycle [ 806.179297][ T8503] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 806.379405][ T8503] usb 1-1: device descriptor read/64, error -71 [ 806.699060][ T8503] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 806.865862][ T8503] usb 1-1: device descriptor read/64, error -71 [ 806.963484][ T7] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 806.999189][ T8503] usb usb1-port1: attempt power cycle [ 807.009725][ T7] usb 10-1: device descriptor read/8, error -71 [ 807.343469][T10361] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1287'. [ 807.371135][ T7] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 807.409475][ T7] usb 10-1: device descriptor read/8, error -71 [ 807.419239][ T8503] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 807.459859][ T8503] usb 1-1: device descriptor read/8, error -71 [ 807.529370][ T7] usb usb10-port1: unable to enumerate USB device [ 807.748993][ T8503] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 807.789972][ T8503] usb 1-1: device descriptor read/8, error -71 [ 807.824566][T10374] tipc: Started in network mode [ 807.868818][T10374] tipc: Node identity ac14140f, cluster identity 4711 [ 807.896296][T10374] tipc: New replicast peer: 255.255.255.255 [ 807.919250][ T8503] usb usb1-port1: unable to enumerate USB device [ 807.943232][T10374] tipc: Enabled bearer , priority 10 [ 808.282005][T10382] QAT: Invalid ioctl 62724 [ 809.830114][ T7] tipc: Node number set to 2886997007 [ 809.830858][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.851076][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.450782][T10422] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1305'. [ 814.539101][ T8503] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 814.758965][ T8503] usb 6-1: device descriptor read/64, error -71 [ 815.039169][ T8503] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 815.258969][ T8503] usb 6-1: device descriptor read/64, error -71 [ 815.471916][ T8503] usb usb6-port1: attempt power cycle [ 815.863034][T10436] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 815.870539][T10436] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 817.388634][T10445] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 817.395213][T10445] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 817.409521][ T8503] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 817.550068][T10445] vhci_hcd vhci_hcd.0: Device attached [ 817.569140][ T8503] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 818.052417][ T8503] usb 6-1: device descriptor read/8, error -71 [ 819.168971][ T7] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 819.179558][ T8503] usb usb6-port1: unable to enumerate USB device [ 819.190270][T10447] vhci_hcd: connection reset by peer [ 819.207794][ T4303] vhci_hcd: stop threads [ 819.213750][ T4303] vhci_hcd: release socket [ 819.233867][ T4303] vhci_hcd: disconnect device [ 822.346454][T10492] CUSE: info not properly terminated [ 824.799572][ T7] vhci_hcd: vhci_device speed not set [ 826.618967][ T4320] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 827.039048][ T4320] usb 6-1: device descriptor read/64, error -71 [ 827.309085][ T4320] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 828.838923][ T4320] usb 6-1: device descriptor read/64, error -71 [ 830.369027][ T4320] usb usb6-port1: attempt power cycle [ 832.212587][T10541] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 832.220170][T10541] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 832.789556][ T26] audit: type=1326 audit(1778514133.968:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.0.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 832.952395][ T26] audit: type=1326 audit(1778514133.968:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.0.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 833.980264][ T26] audit: type=1326 audit(1778514133.968:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.0.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 833.984502][T10532] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1328'. [ 834.037396][ T26] audit: type=1326 audit(1778514133.968:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.0.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 834.097466][ T26] audit: type=1326 audit(1778514133.978:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.0.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 834.282786][T10532] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1328'. [ 834.292784][T10532] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1328'. [ 834.386922][T10559] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 834.394564][T10559] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 834.571724][ T26] audit: type=1326 audit(1778514133.978:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.0.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 835.058994][ T26] audit: type=1326 audit(1778514136.148:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.4.1326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 835.394605][ T26] audit: type=1326 audit(1778514136.148:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.4.1326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 835.516646][T10572] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.589834][ T26] audit: type=1326 audit(1778514136.148:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.4.1326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 837.200155][ T26] audit: type=1326 audit(1778514136.148:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.4.1326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 839.993188][T10614] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 840.000785][T10614] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 840.288656][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 840.288816][ T26] audit: type=1326 audit(1778514141.748:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.4.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 840.562393][ T26] audit: type=1326 audit(1778514141.748:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.4.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 840.609442][ T26] audit: type=1326 audit(1778514141.748:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.4.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 840.633601][ C1] vkms_vblank_simulate: vblank timer overrun [ 840.748805][ T26] audit: type=1326 audit(1778514141.748:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.4.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 840.850795][ T26] audit: type=1326 audit(1778514141.758:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.4.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 840.850839][ T26] audit: type=1326 audit(1778514141.758:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.4.1345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 842.684536][ T8503] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 845.816270][ T26] audit: type=1326 audit(1778514147.548:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10659 comm="syz.7.1354" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f658619cdd9 code=0x0 [ 846.010146][ T26] audit: type=1326 audit(1778514147.748:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.9.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 846.135526][ T26] audit: type=1326 audit(1778514147.768:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.9.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 846.344864][ T26] audit: type=1326 audit(1778514147.768:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.9.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 846.565202][ T26] audit: type=1326 audit(1778514147.768:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.9.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 847.603978][ T26] audit: type=1326 audit(1778514147.768:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.9.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 847.848270][ T26] audit: type=1326 audit(1778514147.768:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.9.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 848.069256][ T26] audit: type=1326 audit(1778514147.778:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.9.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 849.872577][ T26] audit: type=1326 audit(1778514147.778:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.9.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 849.976239][ T26] audit: type=1326 audit(1778514147.778:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.9.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 856.107468][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 856.107485][ T26] audit: type=1326 audit(1778514157.838:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.4.1367" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe82b39cdd9 code=0x0 [ 857.899241][ T4288] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 863.093929][ T26] audit: type=1326 audit(1778514164.828:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.7.1390" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f658619cdd9 code=0x0 [ 863.118890][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1385'. [ 864.978627][ T26] audit: type=1326 audit(1778514166.658:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.7.1393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 865.083132][ T26] audit: type=1326 audit(1778514166.658:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.7.1393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 865.213876][ T26] audit: type=1326 audit(1778514166.658:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.7.1393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 865.329062][ T26] audit: type=1326 audit(1778514166.658:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.7.1393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 866.492073][ T26] audit: type=1326 audit(1778514166.658:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.7.1393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 866.572830][ T26] audit: type=1326 audit(1778514166.658:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.7.1393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 866.687933][ T26] audit: type=1326 audit(1778514166.658:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.7.1393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 868.249148][ T26] audit: type=1326 audit(1778514166.658:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.7.1393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 868.308962][ T9293] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 868.499013][ T9293] usb 8-1: Using ep0 maxpacket: 16 [ 868.579005][ T9293] usb 8-1: device descriptor read/all, error -71 [ 870.092929][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.099335][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.437267][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1403'. [ 872.241451][ T26] audit: type=1326 audit(1778514173.968:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.4.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 872.242043][ T26] audit: type=1326 audit(1778514173.968:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.4.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 872.268665][ T26] audit: type=1326 audit(1778514173.968:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.4.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 872.268954][ T26] audit: type=1326 audit(1778514173.968:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.4.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 872.274112][ T26] audit: type=1326 audit(1778514173.978:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.4.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 872.275217][ T26] audit: type=1326 audit(1778514173.978:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.4.1406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 874.867572][T10928] CUSE: info not properly terminated [ 875.419810][ T9293] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 875.640730][ T9293] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 875.720819][ T9293] usb 6-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 875.806133][ T9293] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 875.870084][ T9293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.759780][ T9293] usb 6-1: string descriptor 0 read error: -71 [ 876.784064][ T9293] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 876.833974][ T9293] usb 6-1: USB disconnect, device number 19 [ 876.980383][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'. [ 879.231307][ T26] audit: type=1326 audit(1778514180.668:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.4.1417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 879.333882][ T26] audit: type=1326 audit(1778514180.668:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.4.1417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 879.389854][ T26] audit: type=1326 audit(1778514180.668:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.4.1417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 879.431245][ T26] audit: type=1326 audit(1778514180.668:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.4.1417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 879.627350][ T26] audit: type=1326 audit(1778514180.668:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.4.1417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 879.702680][T10972] kAFS: No cell specified [ 879.718982][ T26] audit: type=1326 audit(1778514180.668:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.4.1417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 880.541178][ T26] audit: type=1326 audit(1778514180.668:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.4.1417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 880.566526][ T26] audit: type=1326 audit(1778514180.668:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10959 comm="syz.4.1417" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 882.350712][T10986] ubi16: attaching mtd0 [ 882.357635][T10986] ubi16: scanning is finished [ 882.362385][T10986] ubi16: empty MTD device detected [ 882.439779][T10986] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 882.447410][T10986] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 882.455250][T10986] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 882.462344][T10986] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 882.470120][T10986] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 882.477354][T10986] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 882.485525][T10986] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 680759630 [ 882.495788][T10986] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 882.511257][T10989] ubi16: background thread "ubi_bgt16d" started, PID 10989 [ 882.821264][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 883.529029][ T7846] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 885.133693][ T7846] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 885.160804][ T7846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.202238][ T7846] usb 5-1: Product: syz [ 885.213083][ T7846] usb 5-1: Manufacturer: syz [ 885.218423][ T7846] usb 5-1: SerialNumber: syz [ 885.284536][ T7846] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 885.460696][ T7846] usb 5-1: USB disconnect, device number 22 [ 885.472147][ T4321] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 885.482868][ T7846] usb 5-1: ath9k_htc: USB layer deinitialized [ 886.092404][T11007] vivid-000: disconnect [ 886.130516][T11018] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 886.138578][T11018] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 886.163565][ T26] audit: type=1326 audit(1778514187.888:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11008 comm="syz.9.1431" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 886.575313][ T26] audit: type=1326 audit(1778514187.888:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11008 comm="syz.9.1431" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 886.959495][ T26] audit: type=1326 audit(1778514187.888:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11008 comm="syz.9.1431" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 887.104126][ T26] audit: type=1326 audit(1778514187.888:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11008 comm="syz.9.1431" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 887.334797][ T26] audit: type=1326 audit(1778514187.898:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11008 comm="syz.9.1431" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 887.393569][T11023] vivid-000: reconnect [ 887.449032][ T1170] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 887.549432][ T26] audit: type=1326 audit(1778514187.898:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11008 comm="syz.9.1431" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 887.656445][ T1170] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 888.048308][ T1170] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.056885][ T1170] usb 10-1: Product: syz [ 888.061435][ T1170] usb 10-1: Manufacturer: syz [ 888.066167][ T1170] usb 10-1: SerialNumber: syz [ 888.121732][ T1170] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 889.767983][ T4321] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 890.371337][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1428'. [ 890.566896][ T4324] usb 10-1: USB disconnect, device number 10 [ 892.489357][ T4321] usb 10-1: Service connection timeout for: 256 [ 892.495684][ T4321] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 892.642321][ T4321] ath9k_htc: Failed to initialize the device [ 892.650409][ T4324] usb 10-1: ath9k_htc: USB layer deinitialized [ 894.101382][T11103] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 894.109113][T11103] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 894.352139][ T26] audit: type=1326 audit(1778514195.858:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.9.1443" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 894.376479][ T26] audit: type=1326 audit(1778514195.858:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.9.1443" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 894.400731][ T26] audit: type=1326 audit(1778514195.858:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.9.1443" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 894.451204][ T26] audit: type=1326 audit(1778514195.858:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.9.1443" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 894.485296][ T26] audit: type=1326 audit(1778514195.858:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.9.1443" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 894.637570][ T26] audit: type=1326 audit(1778514195.858:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.9.1443" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 894.717779][ T26] audit: type=1326 audit(1778514195.858:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.9.1443" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 894.758906][ T26] audit: type=1326 audit(1778514195.858:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.9.1443" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 895.089460][T11113] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 895.097063][T11113] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 895.116707][ T26] audit: type=1326 audit(1778514196.848:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11104 comm="syz.7.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 897.198933][ T26] audit: type=1326 audit(1778514196.848:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11104 comm="syz.7.1446" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 897.703347][T11124] CUSE: info not properly terminated [ 898.352961][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 899.988954][ T4321] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 900.189156][ T4321] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 900.198273][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.219095][ T4321] usb 1-1: Product: syz [ 900.223323][ T4321] usb 1-1: Manufacturer: syz [ 900.227958][ T4321] usb 1-1: SerialNumber: syz [ 900.274665][ T4321] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 900.344544][ T4321] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 901.128999][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1450'. [ 901.173566][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1455'. [ 901.449297][ T4321] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 901.456940][ T7846] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 901.475022][ T4321] ath9k_htc: Failed to initialize the device [ 901.569853][ T4321] usb 1-1: ath9k_htc: USB layer deinitialized [ 902.118283][ T7846] usb 6-1: device descriptor read/64, error -71 [ 902.303502][ T4324] usb 1-1: USB disconnect, device number 32 [ 902.692977][ T7846] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 903.347633][T11167] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 903.355209][T11167] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 903.369082][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 903.369096][ T26] audit: type=1326 audit(1778514205.098:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 903.380491][ T7846] usb 6-1: device descriptor read/64, error -71 [ 903.405896][ T4324] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 903.417407][T11168] CUSE: info not properly terminated [ 903.445003][ T26] audit: type=1326 audit(1778514205.098:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 903.476649][ T26] audit: type=1326 audit(1778514205.098:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 903.579434][ T26] audit: type=1326 audit(1778514205.098:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 903.635375][T11176] netlink: 'syz.9.1460': attribute type 1 has an invalid length. [ 903.651269][ T7846] usb usb6-port1: attempt power cycle [ 903.659277][ T26] audit: type=1326 audit(1778514205.098:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 903.949806][ T26] audit: type=1326 audit(1778514205.098:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 903.983682][ T26] audit: type=1326 audit(1778514205.098:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 904.059032][ T4324] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 904.090406][ T26] audit: type=1326 audit(1778514205.098:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 904.128970][ T4324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.170858][ T4324] usb 8-1: Product: syz [ 904.175381][ T4324] usb 8-1: Manufacturer: syz [ 904.182125][ T4324] usb 8-1: SerialNumber: syz [ 904.195284][T11187] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 904.202844][T11187] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 904.251355][ T4324] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 904.390361][ T4324] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 904.686036][ T26] audit: type=1326 audit(1778514205.948:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11178 comm="syz.4.1461" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 904.736930][T11188] CUSE: info not properly terminated [ 904.762002][T11176] device bond1 entered promiscuous mode [ 904.782370][ T26] audit: type=1326 audit(1778514205.948:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11178 comm="syz.4.1461" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 904.809451][T11176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 905.030597][T11191] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1463'. [ 905.118642][ T7846] usb 8-1: USB disconnect, device number 13 [ 905.688973][ T4324] usb 8-1: Service connection timeout for: 256 [ 905.697394][ T4324] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 905.930576][ T4324] ath9k_htc: Failed to initialize the device [ 905.937269][ T7846] usb 8-1: ath9k_htc: USB layer deinitialized [ 907.021762][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1467'. [ 907.666210][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1468'. [ 908.029266][ T4339] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 908.291425][ T4339] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.322434][ T4339] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 908.345668][ T4339] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 908.370492][ T4339] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 908.381488][ T4339] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 908.389518][ T4324] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 908.392821][ T4339] usb 6-1: Manufacturer: syz [ 908.465851][ T4339] usb 6-1: config 0 descriptor?? [ 908.511306][ T4339] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 908.583073][ T4324] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 908.603304][ T4324] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.632639][ T4324] usb 10-1: Product: syz [ 908.653674][ T4324] usb 10-1: Manufacturer: syz [ 908.673819][ T4324] usb 10-1: SerialNumber: syz [ 908.716121][ T4324] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 908.802690][ T4324] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 908.899822][T11230] CUSE: info not properly terminated [ 909.849182][ T4324] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 909.884518][ T4324] ath9k_htc: Failed to initialize the device [ 909.975570][ T4324] usb 10-1: ath9k_htc: USB layer deinitialized [ 910.181411][T11253] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 910.189022][T11253] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 910.213124][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 910.213532][ T26] audit: type=1326 audit(1778514211.938:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.7.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 910.376115][ T4324] usb 10-1: USB disconnect, device number 11 [ 910.849018][ T26] audit: type=1326 audit(1778514211.938:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.7.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 910.879631][ T4324] usb 6-1: USB disconnect, device number 23 [ 910.948371][ T26] audit: type=1326 audit(1778514211.938:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.7.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 910.988046][ T26] audit: type=1326 audit(1778514211.938:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.7.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 911.209139][ T26] audit: type=1326 audit(1778514211.948:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.7.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 911.248015][ T26] audit: type=1326 audit(1778514211.948:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.7.1473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658619cdd9 code=0x7ffc0000 [ 911.299990][T11261] CUSE: info not properly terminated [ 911.311614][T11263] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 911.319191][T11263] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 911.684327][ T26] audit: type=1326 audit(1778514213.068:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.9.1474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 911.980149][ T26] audit: type=1326 audit(1778514213.068:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.9.1474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 912.041988][ T26] audit: type=1326 audit(1778514213.068:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.9.1474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 912.073444][ T4324] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 912.349120][ T4324] usb 8-1: Using ep0 maxpacket: 8 [ 912.379650][ T4324] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 912.412582][ T4324] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 912.440167][ T4324] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 912.490767][ T26] audit: type=1326 audit(1778514213.068:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz.9.1474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 912.528741][ T4324] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 912.629318][ T4324] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 912.699036][ T4324] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 912.708626][ T4324] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.791978][ T4324] usbtmc 8-1:16.0: bulk endpoints not found [ 913.379548][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 914.301665][T11292] CUSE: info not properly terminated [ 914.979546][ T4316] usb 8-1: USB disconnect, device number 14 [ 915.267136][ T4738] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 915.324195][T11303] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 915.331743][T11303] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 915.702432][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 915.702473][ T26] audit: type=1326 audit(1778514217.438:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.5.1487" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 915.732679][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.748964][T11306] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 915.756446][T11306] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 916.888713][ T4738] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.928898][ T4738] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 916.957826][ T4738] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 917.524295][ T4738] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 917.534647][ T4738] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 917.560900][ T26] audit: type=1326 audit(1778514217.438:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.5.1487" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 917.591707][ T4738] usb 1-1: config 0 descriptor?? [ 917.598322][ T4738] usb 1-1: can't set config #0, error -71 [ 918.459460][ T4738] usb 1-1: USB disconnect, device number 33 [ 918.600211][ T26] audit: type=1326 audit(1778514217.438:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.5.1487" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 918.907562][ T26] audit: type=1326 audit(1778514217.438:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.5.1487" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 919.768951][ T26] audit: type=1326 audit(1778514217.438:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.5.1487" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 919.938978][ T26] audit: type=1326 audit(1778514217.438:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.5.1487" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 920.094487][ T26] audit: type=1326 audit(1778514217.438:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.5.1487" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 920.253696][ T26] audit: type=1326 audit(1778514217.438:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.5.1487" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b079cdd9 code=0x7ffc0000 [ 920.269477][ T8503] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 920.357171][ T26] audit: type=1326 audit(1778514217.498:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.9.1488" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 920.393930][T11340] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1499'. [ 920.461304][ T26] audit: type=1326 audit(1778514217.498:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.9.1488" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 920.532443][ T8503] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 920.572629][ T8503] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.628199][ T8503] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 920.708960][ T8503] usb 8-1: config 0 interface 0 has no altsetting 0 [ 920.716071][ T8503] usb 8-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 920.735205][ T8503] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.750907][ T8503] usb 8-1: config 0 descriptor?? [ 921.257007][T11346] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 921.265141][T11346] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 921.283402][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 921.283437][ T26] audit: type=1326 audit(1778514223.018:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 921.510217][T11348] CUSE: info not properly terminated [ 921.581414][ T8503] holtek 0003:1241:5015.0005: unknown global tag 0xe [ 921.640752][ T8503] holtek 0003:1241:5015.0005: item 0 0 1 14 parsing failed [ 921.972015][ T8503] holtek 0003:1241:5015.0005: parse failed [ 921.978893][ T8503] holtek: probe of 0003:1241:5015.0005 failed with error -22 [ 922.078618][ T26] audit: type=1326 audit(1778514223.018:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 922.278998][ T26] audit: type=1326 audit(1778514223.018:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 922.304524][ T26] audit: type=1326 audit(1778514223.018:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 922.684662][T11353] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 922.692295][T11353] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 922.835955][ T26] audit: type=1326 audit(1778514223.018:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 922.869838][ T8995] usb 8-1: USB disconnect, device number 15 [ 922.945312][ T26] audit: type=1326 audit(1778514223.018:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1500" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 923.039726][ T26] audit: type=1326 audit(1778514224.438:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.0.1501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 923.667367][ T26] audit: type=1326 audit(1778514224.438:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.0.1501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 923.886079][ T26] audit: type=1326 audit(1778514224.438:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.0.1501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 923.910788][ T26] audit: type=1326 audit(1778514224.438:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.0.1501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 924.019374][ T8995] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 924.223109][ T8995] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.254270][ T8995] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 924.305678][ T8995] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 924.338941][ T4316] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 926.139495][ T8995] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 926.148622][ T8995] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 926.168406][T11379] netlink: 'syz.5.1509': attribute type 1 has an invalid length. [ 926.179417][ T4316] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 926.188506][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 926.199992][ T8995] usb 1-1: Manufacturer: syz [ 926.236367][ T8995] usb 1-1: config 0 descriptor?? [ 926.241501][ T4316] usb 5-1: Product: syz [ 926.245703][ T4316] usb 5-1: Manufacturer: syz [ 926.274579][T11379] device bond1 entered promiscuous mode [ 926.285006][T11379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 926.285442][ T8995] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 926.309201][T11382] bond1: (slave erspan1): making interface the new active one [ 926.316824][T11382] device erspan1 entered promiscuous mode [ 926.328139][T11382] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 926.337051][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 926.357782][ T4316] usb 5-1: SerialNumber: syz [ 926.399625][ T4316] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 926.651544][T11386] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 926.659104][T11386] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 926.799081][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 926.799150][ T26] audit: type=1326 audit(1778514228.408:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11383 comm="syz.9.1511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 927.315726][ T26] audit: type=1326 audit(1778514228.408:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11383 comm="syz.9.1511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 927.360228][ T4316] vp7045: USB control message 'out' went wrong. [ 927.366855][ T4316] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 927.423970][ T4316] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 927.439571][ T4316] usb 5-1: USB disconnect, device number 23 [ 927.447032][ T26] audit: type=1326 audit(1778514228.408:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11383 comm="syz.9.1511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 927.552159][ T26] audit: type=1326 audit(1778514228.408:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11383 comm="syz.9.1511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 928.730189][ T26] audit: type=1326 audit(1778514228.408:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11383 comm="syz.9.1511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 928.775327][ T4275] usb 1-1: USB disconnect, device number 34 [ 928.812805][ T26] audit: type=1326 audit(1778514228.408:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11383 comm="syz.9.1511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5519cdd9 code=0x7ffc0000 [ 929.388212][T11397] CUSE: info not properly terminated [ 931.533389][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.539810][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.605571][T11423] netlink: 'syz.0.1521': attribute type 1 has an invalid length. [ 932.640569][T11423] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1521'. [ 932.963328][T11428] overlayfs: missing 'lowerdir' [ 934.430491][T11439] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 934.438006][T11439] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 935.926304][T11452] CUSE: info not properly terminated [ 937.372774][ T4275] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 937.867195][ T4275] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.877974][ T4275] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 937.889823][ T4275] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 937.949114][ T4275] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 937.968910][ T4275] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 938.007583][ T4275] usb 1-1: Manufacturer: syz [ 938.015122][ T4275] usb 1-1: config 0 descriptor?? [ 938.044326][ T4275] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 938.577750][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1532'. [ 939.367864][ T14] usb 1-1: USB disconnect, device number 35 [ 939.759004][T11481] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 939.766605][T11481] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 939.810283][ T26] audit: type=1326 audit(1778514241.518:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11467 comm="syz.4.1534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 940.386560][ T26] audit: type=1326 audit(1778514241.518:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11467 comm="syz.4.1534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 940.641620][ T26] audit: type=1326 audit(1778514241.518:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11467 comm="syz.4.1534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 941.398092][ T26] audit: type=1326 audit(1778514241.518:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11467 comm="syz.4.1534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 941.424412][ T26] audit: type=1326 audit(1778514241.518:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11467 comm="syz.4.1534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 941.455463][ T26] audit: type=1326 audit(1778514241.538:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11467 comm="syz.4.1534" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82b39cdd9 code=0x7ffc0000 [ 941.875388][T11495] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 941.883024][T11495] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 943.918943][ T4324] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 944.122467][ T4324] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 944.139180][ T4324] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.150256][ T4324] usb 10-1: config 0 descriptor?? [ 944.574471][ T4324] ath6kl: Failed to submit usb control message: -71 [ 944.585632][ T4324] ath6kl: unable to send the bmi data to the device: -71 [ 944.628974][ T4324] ath6kl: Unable to send get target info: -71 [ 944.669888][ T4324] ath6kl: Failed to init ath6kl core: -71 [ 944.756105][ T128] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 944.807833][ T4324] ath6kl_usb: probe of 10-1:0.0 failed with error -71 [ 944.853700][ T4324] usb 10-1: USB disconnect, device number 12 [ 944.989778][ T128] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 945.014203][ T128] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 945.059808][ T128] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 945.073531][ T128] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 945.093530][ T128] usb 6-1: Manufacturer: syz [ 945.126209][ T128] usb 6-1: config 0 descriptor?? [ 945.163333][ T128] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 945.889308][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'. [ 947.649041][T11544] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 947.656660][T11544] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 949.529575][ T4324] usb 6-1: USB disconnect, device number 24 [ 951.053182][T11549] use of bytesused == 0 is deprecated and will be removed in the future, [ 951.089402][T11549] use the actual size instead. [ 951.749009][T11459] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 951.956096][T11459] usb 6-1: config 118 interface 0 has no altsetting 0 [ 951.967093][T11459] usb 6-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 952.095595][ T4288] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 952.672950][T11459] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.681116][T11459] usb 6-1: Product: syz [ 952.685325][T11459] usb 6-1: Manufacturer: syz [ 952.690003][T11459] usb 6-1: SerialNumber: syz [ 953.013593][T11459] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 953.043564][T11459] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 953.205074][T11459] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 953.213632][T11459] usb 6-1: media controller created [ 953.238191][T11459] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 953.273825][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1561'. [ 954.160153][T11459] DVB: Unable to find symbol mt352_attach() [ 954.166098][T11459] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 954.216024][T11459] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 954.303291][T11459] dvb-usb: schedule remote query interval to 100 msecs. [ 954.337814][T11459] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 954.366251][T11459] dvb_usb_m920x: probe of 6-1:118.0 failed with error -71 [ 954.537723][T11459] usb 6-1: USB disconnect, device number 25 [ 954.619373][T11594] CUSE: info not properly terminated [ 955.327010][ T14] m920x_read = error: -19 [ 955.332947][ T14] dvb-usb: error while querying for an remote control event. [ 955.565401][T11602] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 955.572030][T11602] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 955.572701][ T7] m920x_read = error: -19 [ 955.702457][T11607] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 955.709991][T11607] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 956.325204][ T4275] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 956.359963][T11602] vhci_hcd vhci_hcd.0: Device attached [ 956.498940][ T7] dvb-usb: error while querying for an remote control event. [ 956.532160][ T4275] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 956.753720][ T4275] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 956.819051][ T4324] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 956.864440][ T4275] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 956.874617][ T4275] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 956.883078][ T4275] usb 10-1: Manufacturer: syz [ 956.960338][ T4275] usb 10-1: config 0 descriptor?? [ 957.008463][ T4275] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 957.043538][ T7] m920x_read = error: -19 [ 957.085499][ T7] dvb-usb: error while querying for an remote control event. [ 958.459044][ T7] m920x_read = error: -19 [ 958.463562][ T7] dvb-usb: error while querying for an remote control event. [ 958.473293][T11603] vhci_hcd: connection reset by peer [ 958.479620][ T4340] vhci_hcd: stop threads [ 958.484035][ T4340] vhci_hcd: release socket [ 958.499114][ T4340] vhci_hcd: disconnect device [ 958.610615][ T7] m920x_read = error: -19 [ 958.615032][ T7] dvb-usb: error while querying for an remote control event. [ 958.769477][ T7] m920x_read = error: -19 [ 958.773893][ T7] dvb-usb: error while querying for an remote control event. [ 958.939119][ T33] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 959.444145][ T4316] m920x_read = error: -19 [ 959.448591][ T4316] dvb-usb: error while querying for an remote control event. [ 959.680016][ T7] m920x_read = error: -19 [ 959.684439][ T7] dvb-usb: error while querying for an remote control event. [ 959.739083][ T33] usb 1-1: Using ep0 maxpacket: 32 [ 959.746936][ T33] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 959.765369][ T33] usb 1-1: config 0 has no interface number 0 [ 959.782838][ T33] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 959.808954][ T7] m920x_read = error: -19 [ 959.813345][ T7] dvb-usb: error while querying for an remote control event. [ 959.819144][ T33] usb 1-1: config 0 interface 85 has no altsetting 0 [ 959.856554][ T33] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 959.879102][ T4275] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 959.907702][ T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.949061][ T7] m920x_read = error: -19 [ 959.953761][ T7] dvb-usb: error while querying for an remote control event. [ 959.953916][ T33] usb 1-1: Product: syz [ 959.992242][ T33] usb 1-1: Manufacturer: syz [ 960.007325][ T33] usb 1-1: SerialNumber: syz [ 960.062926][ T33] usb 1-1: config 0 descriptor?? [ 960.077952][ T33] appletouch 1-1:0.85: Could not find int-in endpoint [ 960.085164][ T4275] usb 8-1: Using ep0 maxpacket: 32 [ 960.101010][ T4275] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 960.162639][ T33] appletouch: probe of 1-1:0.85 failed with error -5 [ 960.175924][ T4275] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 960.197139][ T7] m920x_read = error: -19 [ 960.208588][ T7] dvb-usb: error while querying for an remote control event. [ 960.224876][ T33] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 960.247515][ T4275] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 960.325525][T11639] CUSE: info not properly terminated [ 960.408343][ T4275] usb 8-1: Product: syz [ 960.471472][ T4275] usb 8-1: Manufacturer: syz [ 960.528444][ T4275] usb 8-1: SerialNumber: syz [ 960.626548][ T4275] usb 8-1: config 0 descriptor?? [ 960.969816][ T7] m920x_read = error: -19 [ 960.974407][ T7] dvb-usb: error while querying for an remote control event. [ 960.988272][ T4275] hub 8-1:0.0: bad descriptor, ignoring hub [ 960.995793][ T4275] hub: probe of 8-1:0.0 failed with error -5 [ 961.082997][ T4275] usb 10-1: USB disconnect, device number 13 [ 961.228095][ T4316] m920x_read = error: -19 [ 961.232643][ T4316] dvb-usb: error while querying for an remote control event. [ 962.043824][ T33] usb 8-1: USB disconnect, device number 16 [ 962.144126][ T4324] vhci_hcd: vhci_device speed not set [ 962.169493][ T128] m920x_read = error: -19 [ 962.173917][ T128] dvb-usb: error while querying for an remote control event. [ 962.334560][ T128] m920x_read = error: -19 [ 962.360380][ T128] dvb-usb: error while querying for an remote control event. [ 962.439047][ T4275] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 962.638346][ T128] usb 1-1: USB disconnect, device number 36 [ 962.694462][ T4275] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 962.782238][ T4275] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 962.796735][ T4275] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 962.817971][ T4275] usb 8-1: Product: syz [ 962.829024][ T4275] usb 8-1: Manufacturer: syz [ 962.833679][ T4275] usb 8-1: SerialNumber: syz [ 962.860562][ T4316] m920x_read = error: -19 [ 962.864977][ T4316] dvb-usb: error while querying for an remote control event. [ 962.887437][ T4275] usb 8-1: config 0 descriptor?? [ 962.900125][ T4275] hub 8-1:0.0: bad descriptor, ignoring hub [ 962.951013][ T4275] hub: probe of 8-1:0.0 failed with error -5 [ 962.999808][ T4316] m920x_read = error: -19 [ 963.018026][ T4316] dvb-usb: error while querying for an remote control event. [ 963.139417][ T14] m920x_read = error: -19 [ 963.147967][ T14] dvb-usb: error while querying for an remote control event. [ 964.673262][ T128] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 964.681779][ T14] m920x_read = error: -19 [ 964.686478][ T14] dvb-usb: error while querying for an remote control event. [ 964.815265][ T4316] m920x_read = error: -19 [ 964.820273][ T4316] dvb-usb: error while querying for an remote control event. [ 964.869256][ T4324] usb 8-1: USB disconnect, device number 17 [ 964.897160][ T128] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 964.923771][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.961779][ T14] m920x_read = error: -19 [ 964.966288][ T14] dvb-usb: error while querying for an remote control event. [ 964.982202][ T128] usb 1-1: config 0 descriptor?? [ 965.119079][ T14] m920x_read = error: -19 [ 965.123636][ T14] dvb-usb: error while querying for an remote control event. [ 967.249607][T11675] CUSE: info not properly terminated [ 968.440767][T11679] CUSE: info not properly terminated [ 977.097720][T11738] CUSE: info not properly terminated [ 977.819816][T11742] CUSE: info not properly terminated [ 980.141362][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1597'. [ 980.150690][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1597'. [ 980.788029][T11744] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1603'. [ 988.306213][T11789] CUSE: info not properly terminated [ 990.270214][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 990.282234][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 990.290757][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 990.299048][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 990.306963][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 990.314232][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 992.075830][T11807] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 992.083467][T11807] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 992.330735][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 994.181767][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.276504][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.419095][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 996.489113][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 998.379211][ T4287] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 998.393788][ T4289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 998.402416][ T4289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 998.412241][ T4289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 998.420038][ T4289] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 998.427436][ T4289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 998.624539][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 998.814139][ T26] audit: type=1326 audit(1778514300.548:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11837 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 998.867615][ T26] audit: type=1326 audit(1778514300.578:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11837 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 998.925568][ T26] audit: type=1326 audit(1778514300.578:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11837 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 999.015327][ T26] audit: type=1326 audit(1778514300.578:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11837 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 999.076935][ T26] audit: type=1326 audit(1778514300.578:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11837 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 999.115936][T11840] QAT: Invalid ioctl 62724 [ 999.146782][ T26] audit: type=1326 audit(1778514300.578:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11837 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 999.205957][ T26] audit: type=1326 audit(1778514300.578:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11837 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 999.286202][ T26] audit: type=1326 audit(1778514300.578:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11837 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 999.359234][ T26] audit: type=1326 audit(1778514300.578:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11837 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 999.397884][ T26] audit: type=1326 audit(1778514300.578:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11837 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46759cdd9 code=0x7ffc0000 [ 1000.822046][ T4289] Bluetooth: hci6: command 0x0409 tx timeout [ 1001.994364][T11848] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1002.001910][T11848] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1002.908992][ T4289] Bluetooth: hci6: command 0x041b tx timeout [ 1004.969196][ T4288] Bluetooth: hci6: command 0x040f tx timeout [ 1005.111218][ T4289] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1005.130372][ T4289] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1005.140214][ T4289] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1005.159694][ T4289] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1005.168191][ T4289] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1005.175648][ T4289] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1007.056265][ T4288] Bluetooth: hci6: command 0x0419 tx timeout [ 1007.219336][ T4288] Bluetooth: hci7: command 0x0409 tx timeout [ 1009.289189][ T4288] Bluetooth: hci7: command 0x041b tx timeout [ 1011.379492][ T4288] Bluetooth: hci7: command 0x040f tx timeout [ 1013.449465][ T4288] Bluetooth: hci7: command 0x0419 tx timeout [ 1014.882014][ T4287] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1014.890513][ T4287] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1014.898583][ T4287] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1014.918407][ T4287] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1014.926102][ T4287] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1014.934934][ T4287] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1016.969053][ T4288] Bluetooth: hci8: command 0x0409 tx timeout [ 1019.049138][ T4288] Bluetooth: hci8: command 0x041b tx timeout [ 1019.169950][ T4287] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1019.184917][ T4287] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1019.199955][ T4287] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1019.207688][ T4287] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1019.216564][ T4287] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1019.229258][ T4287] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1021.129046][ T4287] Bluetooth: hci8: command 0x040f tx timeout [ 1021.299056][ T4287] Bluetooth: hci9: command 0x0409 tx timeout [ 1023.219016][ T4287] Bluetooth: hci8: command 0x0419 tx timeout [ 1023.368931][ T4287] Bluetooth: hci9: command 0x041b tx timeout [ 1025.310706][ T3638] udevd[3638]: worker [10638] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 1025.459124][ T4287] Bluetooth: hci9: command 0x040f tx timeout [ 1027.538806][ T4287] Bluetooth: hci9: command 0x0419 tx timeout [ 1052.176529][ T4288] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1052.190424][ T4288] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1052.198448][ T4288] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1052.207516][ T4288] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1052.215442][ T4288] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1052.222907][ T4288] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1054.249286][ T4287] Bluetooth: hci10: command 0x0409 tx timeout [ 1054.414058][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.420568][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.335481][ T4287] Bluetooth: hci10: command 0x041b tx timeout [ 1058.418939][ T4287] Bluetooth: hci10: command 0x040f tx timeout [ 1059.121711][ T4288] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1059.133548][ T4288] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1059.142507][ T4288] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1059.150703][ T4288] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1059.159336][ T4288] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1059.166693][ T4288] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1060.498911][ T4288] Bluetooth: hci10: command 0x0419 tx timeout [ 1061.209064][ T4287] Bluetooth: hci11: command 0x0409 tx timeout [ 1063.289493][ T4287] Bluetooth: hci11: command 0x041b tx timeout [ 1065.368872][ T4287] Bluetooth: hci11: command 0x040f tx timeout [ 1065.813906][ T4288] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1065.823898][ T4288] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1065.833065][ T4288] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1065.843012][ T4288] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1065.858611][ T4288] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1065.866239][ T4288] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1067.448976][ T4288] Bluetooth: hci11: command 0x0419 tx timeout [ 1067.930105][ T4287] Bluetooth: hci12: command 0x0409 tx timeout [ 1070.018824][ T4287] Bluetooth: hci12: command 0x041b tx timeout [ 1072.088891][ T4287] Bluetooth: hci12: command 0x040f tx timeout [ 1074.179217][ T4287] Bluetooth: hci12: command 0x0419 tx timeout [ 1076.309656][ T4288] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1076.325659][ T4288] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1076.334791][ T4288] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1076.351099][ T4288] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1076.359065][ T4288] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1076.366454][ T4288] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1078.418950][ T4288] Bluetooth: hci13: command 0x0409 tx timeout [ 1080.403295][ T4287] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1080.419351][ T4287] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1080.429258][ T4287] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1080.437825][ T4289] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1080.445900][ T4289] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1080.458960][ T4289] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1080.498946][ T4288] Bluetooth: hci13: command 0x041b tx timeout [ 1082.488962][ T4288] Bluetooth: hci14: command 0x0409 tx timeout [ 1082.579081][ T4288] Bluetooth: hci13: command 0x040f tx timeout [ 1084.569204][ T4288] Bluetooth: hci14: command 0x041b tx timeout [ 1084.648969][ T4288] Bluetooth: hci13: command 0x0419 tx timeout [ 1086.648838][ T4288] Bluetooth: hci14: command 0x040f tx timeout [ 1088.729204][ T4288] Bluetooth: hci14: command 0x0419 tx timeout [ 1112.808827][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 1115.442557][ T4288] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1115.459136][ T4288] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1115.480339][ T4288] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1115.514613][ T4288] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1115.532163][ T4288] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1115.553486][ T4288] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1115.852257][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.858621][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.609171][ T4289] Bluetooth: hci15: command 0x0409 tx timeout [ 1119.270124][ T4288] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1119.286626][ T4288] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1119.295786][ T4288] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1119.311780][ T4288] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1119.321274][ T4288] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 1119.339657][ T4288] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1119.699102][ T4288] Bluetooth: hci15: command 0x041b tx timeout [ 1120.339026][ T27] INFO: task kworker/u4:29:9539 blocked for more than 143 seconds. [ 1120.347026][ T27] Not tainted syzkaller #0 [ 1120.368439][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1120.386431][ T27] task:kworker/u4:29 state:D stack:23152 pid:9539 ppid:2 flags:0x00004000 [ 1120.434784][ T27] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 1120.447396][ T27] Call Trace: [ 1120.478973][ T27] [ 1120.482006][ T27] __schedule+0x11d1/0x40e0 [ 1120.486593][ T27] ? __sched_text_start+0x8/0x8 [ 1120.588787][ T27] ? kthread_data+0x4b/0xc0 [ 1120.593433][ T27] ? wq_worker_sleeping+0x60/0x280 [ 1120.598609][ T27] schedule+0xb9/0x180 [ 1120.629269][ T27] schedule_timeout+0xbd/0x2d0 [ 1120.635670][ T27] ? console_conditional_schedule+0x40/0x40 [ 1120.647163][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1120.654353][ T27] ? lock_chain_count+0x20/0x20 [ 1120.664582][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1120.669723][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1120.675323][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1120.705237][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1120.710579][ T27] ? wait_for_completion+0x276/0x5a0 [ 1120.716339][ T27] wait_for_completion+0x2c7/0x5a0 [ 1120.728862][ T27] ? io_schedule+0xd0/0xd0 [ 1120.733354][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1120.761900][ T27] ? debug_object_active_state+0x6a/0x380 [ 1120.767807][ T27] __synchronize_srcu+0x2b9/0x350 [ 1120.797946][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 1120.805412][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 1120.818873][ T27] ? __rwlock_init+0x140/0x140 [ 1120.823799][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1120.840025][ T27] ? synchronize_srcu+0x192/0x1b0 [ 1120.845124][ T27] ? process_one_work+0x7b0/0x1160 [ 1120.858344][ T27] fsnotify_mark_destroy_workfn+0x106/0x2f0 [ 1120.867757][ T27] ? fsnotify_connector_destroy_workfn+0xa0/0xa0 [ 1120.878410][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1120.886504][ T27] ? process_one_work+0x7b0/0x1160 [ 1120.897668][ T27] process_one_work+0x8a2/0x1160 [ 1120.905729][ T27] ? worker_detach_from_pool+0x240/0x240 [ 1120.915262][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1120.923314][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1120.932350][ T27] ? kthread_data+0x4b/0xc0 [ 1120.936926][ T27] worker_thread+0xaa2/0x1270 [ 1120.950056][ T27] kthread+0x29d/0x330 [ 1120.954178][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 1120.967151][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1120.998979][ T27] ret_from_fork+0x1f/0x30 [ 1121.003498][ T27] [ 1121.011257][ T27] INFO: task kworker/u4:30:9541 blocked for more than 144 seconds. [ 1121.038930][ T27] Not tainted syzkaller #0 [ 1121.044494][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1121.088833][ T27] task:kworker/u4:30 state:D stack:26096 pid:9541 ppid:2 flags:0x00004000 [ 1121.098125][ T27] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 1121.118814][ T27] Call Trace: [ 1121.122175][ T27] [ 1121.125141][ T27] __schedule+0x11d1/0x40e0 [ 1121.136016][ T27] ? __sched_text_start+0x8/0x8 [ 1121.141905][ T27] ? kthread_data+0x4b/0xc0 [ 1121.148154][ T27] ? wq_worker_sleeping+0x60/0x280 [ 1121.159586][ T27] schedule+0xb9/0x180 [ 1121.163732][ T27] schedule_timeout+0xbd/0x2d0 [ 1121.168541][ T27] ? console_conditional_schedule+0x40/0x40 [ 1121.184346][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1121.196421][ T27] ? lock_chain_count+0x20/0x20 [ 1121.206219][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1121.214684][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1121.224257][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1121.232646][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1121.238602][ T27] ? wait_for_completion+0x276/0x5a0 [ 1121.251383][ T27] wait_for_completion+0x2c7/0x5a0 [ 1121.256592][ T27] ? io_schedule+0xd0/0xd0 [ 1121.264977][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1121.274332][ T27] ? debug_object_active_state+0x6a/0x380 [ 1121.284402][ T27] __synchronize_srcu+0x2b9/0x350 [ 1121.295696][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 1121.309126][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 1121.314751][ T27] ? __rwlock_init+0x140/0x140 [ 1121.324647][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1121.331977][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1121.337613][ T27] ? synchronize_srcu+0x192/0x1b0 [ 1121.347791][ T27] ? process_one_work+0x7b0/0x1160 [ 1121.356769][ T27] fsnotify_connector_destroy_workfn+0x40/0xa0 [ 1121.367534][ T27] ? process_one_work+0x7b0/0x1160 [ 1121.373610][ T4288] Bluetooth: hci16: command 0x0409 tx timeout [ 1121.388617][ T27] process_one_work+0x8a2/0x1160 [ 1121.395943][ T27] ? worker_detach_from_pool+0x240/0x240 [ 1121.408851][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1121.413949][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1121.428681][ T27] ? kthread_data+0x4b/0xc0 [ 1121.443397][ T27] worker_thread+0xaa2/0x1270 [ 1121.448141][ T27] kthread+0x29d/0x330 [ 1121.458949][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 1121.464044][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1121.468676][ T27] ret_from_fork+0x1f/0x30 [ 1121.473803][ T27] [ 1121.476930][ T27] INFO: task udevd:10638 blocked for more than 144 seconds. [ 1121.486665][ T27] Not tainted syzkaller #0 [ 1121.491939][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1121.501089][ T27] task:udevd state:D stack:25840 pid:10638 ppid:3638 flags:0x00004002 [ 1121.510750][ T27] Call Trace: [ 1121.514084][ T27] [ 1121.517055][ T27] __schedule+0x11d1/0x40e0 [ 1121.524148][ T27] ? __sched_text_start+0x8/0x8 [ 1121.531366][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1121.537107][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1121.546193][ T27] schedule+0xb9/0x180 [ 1121.556043][ T27] schedule_preempt_disabled+0xf/0x20 [ 1121.561802][ T27] __mutex_lock+0x562/0xaf0 [ 1121.566461][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 1121.571603][ T27] ? uevent_show+0x16c/0x320 [ 1121.576267][ T27] ? mutex_lock_nested+0x10/0x10 [ 1121.582292][ T27] uevent_show+0x16c/0x320 [ 1121.586784][ T27] dev_attr_show+0x50/0xb0 [ 1121.591615][ T27] sysfs_kf_seq_show+0x349/0x4b0 [ 1121.596623][ T27] ? device_get_ownership+0xa0/0xa0 [ 1121.607132][ T27] seq_read_iter+0x49b/0xd50 [ 1121.614051][ T27] ? common_file_perm+0x171/0x1c0 [ 1121.624680][ T27] vfs_read+0x4a7/0xa00 [ 1121.633358][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1121.638704][ T27] ? kernel_read+0x1e0/0x1e0 [ 1121.643630][ T27] ? __x64_sys_newfstat+0x19a/0x220 [ 1121.649534][ T27] ? __fdget_pos+0x2b5/0x360 [ 1121.654194][ T27] ksys_read+0x14c/0x250 [ 1121.664579][ T27] ? vfs_write+0xa30/0xa30 [ 1121.671014][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1121.676271][ T27] do_syscall_64+0x4c/0xa0 [ 1121.685317][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1121.693358][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1121.698199][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1121.709294][ T27] RIP: 0033:0x7fdcb3aa7407 [ 1121.713784][ T27] RSP: 002b:00007ffd27c9a1b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1121.727681][ T27] RAX: ffffffffffffffda RBX: 00007fdcb415e880 RCX: 00007fdcb3aa7407 [ 1121.737631][ T27] RDX: 0000000000001000 RSI: 0000558aea1393e0 RDI: 0000000000000008 [ 1121.755261][ T27] RBP: 00007fdcb3befff0 R08: 0000000000000000 R09: 0000000000000000 [ 1121.768259][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 1121.779437][ T4288] Bluetooth: hci15: command 0x040f tx timeout [ 1121.818788][ T27] R13: 00007fdcb3befea0 R14: 0000000000000000 R15: 0000558aea13d2c0 [ 1121.826949][ T27] [ 1121.848987][ T27] INFO: task dhcpcd:11716 blocked for more than 144 seconds. [ 1121.856448][ T27] Not tainted syzkaller #0 [ 1121.868904][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1121.877635][ T27] task:dhcpcd state:D stack:24944 pid:11716 ppid:3934 flags:0x00004002 [ 1121.929046][ T27] Call Trace: [ 1121.932404][ T27] [ 1121.935366][ T27] __schedule+0x11d1/0x40e0 [ 1121.968994][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1121.974988][ T27] ? queue_work_on+0x196/0x1f0 [ 1121.998912][ T27] ? __sched_text_start+0x8/0x8 [ 1122.003834][ T27] ? wq_worker_last_func+0x40/0x40 [ 1122.018819][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1122.024795][ T27] ? prepare_to_wait_event+0x430/0x470 [ 1122.037259][ T27] schedule+0xb9/0x180 [ 1122.042219][ T27] synchronize_rcu_expedited+0x6e6/0x890 [ 1122.047928][ T27] ? synchronize_rcu+0x3f0/0x3f0 [ 1122.058325][ T27] ? verify_lock_unused+0x140/0x140 [ 1122.064406][ T27] ? unwind_next_frame+0x1880/0x20b0 [ 1122.077381][ T27] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 1122.086955][ T27] ? wake_bit_function+0x200/0x200 [ 1122.099660][ T27] synchronize_rcu+0x128/0x3f0 [ 1122.104506][ T27] ? schedule_delayed_monitor_work+0x160/0x160 [ 1122.118698][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1122.128060][ T27] ? __might_sleep+0xd0/0xd0 [ 1122.137784][ T27] ? mutex_unlock+0x10/0x10 [ 1122.144205][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 1122.154218][ T27] ? _local_bh_enable+0xa0/0xa0 [ 1122.160940][ T27] packet_release+0x98f/0xc40 [ 1122.165693][ T27] sock_close+0xd5/0x240 [ 1122.178940][ T27] ? sock_mmap+0x90/0x90 [ 1122.183247][ T27] __fput+0x22c/0x920 [ 1122.187279][ T27] task_work_run+0x1d0/0x260 [ 1122.202659][ T27] ? task_work_cancel+0x220/0x220 [ 1122.207773][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 1122.217457][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 1122.232235][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 1122.237880][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 1122.247164][ T27] do_syscall_64+0x58/0xa0 [ 1122.262061][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1122.266819][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1122.276037][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1122.286028][ T27] RIP: 0033:0x7fa25d1fb407 [ 1122.293104][ T27] RSP: 002b:00007ffeed9ecdc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 1122.310776][ T27] RAX: 0000000000000000 RBX: 00007fa25d171740 RCX: 00007fa25d1fb407 [ 1122.324188][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1122.340191][ T27] RBP: 0000560e70b124b0 R08: 0000000000000000 R09: 0000000000000000 [ 1122.348286][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1122.364572][ T27] R13: 0000560e7dea8ee0 R14: 0000000000000000 R15: 0000560e70b27ac0 [ 1122.377005][ T27] [ 1122.385749][ T27] INFO: task dhcpcd:11717 blocked for more than 145 seconds. [ 1122.394521][ T27] Not tainted syzkaller #0 [ 1122.404595][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1122.418706][ T27] task:dhcpcd state:D stack:24944 pid:11717 ppid:3934 flags:0x00004002 [ 1122.428058][ T27] Call Trace: [ 1122.437463][ T27] [ 1122.444106][ T27] __schedule+0x11d1/0x40e0 [ 1122.454874][ T27] ? __sched_text_start+0x8/0x8 [ 1122.464144][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1122.479025][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1122.485281][ T27] schedule+0xb9/0x180 [ 1122.495000][ T27] schedule_preempt_disabled+0xf/0x20 [ 1122.501297][ T27] __mutex_lock+0x562/0xaf0 [ 1122.505876][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 1122.516128][ T27] ? synchronize_rcu_expedited+0x3c0/0x890 [ 1122.526118][ T27] ? mutex_lock_nested+0x10/0x10 [ 1122.537978][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 1122.544210][ T27] ? __rwlock_init+0x140/0x140 [ 1122.557051][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1122.564045][ T27] synchronize_rcu_expedited+0x3c0/0x890 [ 1122.575589][ T27] ? synchronize_rcu+0x3f0/0x3f0 [ 1122.585127][ T27] ? verify_lock_unused+0x140/0x140 [ 1122.596108][ T27] ? unwind_next_frame+0x1880/0x20b0 [ 1122.602349][ T27] synchronize_rcu+0x128/0x3f0 [ 1122.607174][ T27] ? schedule_delayed_monitor_work+0x160/0x160 [ 1122.619527][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1122.625234][ T27] ? __might_sleep+0xd0/0xd0 [ 1122.638261][ T27] ? mutex_unlock+0x10/0x10 [ 1122.644780][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 1122.655774][ T27] ? _local_bh_enable+0xa0/0xa0 [ 1122.665366][ T27] packet_release+0x98f/0xc40 [ 1122.675909][ T27] sock_close+0xd5/0x240 [ 1122.684831][ T27] ? sock_mmap+0x90/0x90 [ 1122.694206][ T27] __fput+0x22c/0x920 [ 1122.698253][ T27] task_work_run+0x1d0/0x260 [ 1122.705169][ T27] ? task_work_cancel+0x220/0x220 [ 1122.715595][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 1122.723040][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 1122.728396][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 1122.739488][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 1122.745007][ T27] do_syscall_64+0x58/0xa0 [ 1122.757876][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1122.765652][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1122.777243][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1122.786816][ T27] RIP: 0033:0x7fa25d1fb407 [ 1122.796519][ T27] RSP: 002b:00007ffeed9ecdc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 1122.807374][ T27] RAX: 0000000000000000 RBX: 00007fa25d171740 RCX: 00007fa25d1fb407 [ 1122.820965][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1122.831909][ T27] RBP: 0000560e70b124b0 R08: 0000000000000000 R09: 0000000000000000 [ 1122.843717][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1122.854568][ T27] R13: 0000560e7dea90b0 R14: 0000000000000000 R15: 0000560e70b27ac0 [ 1122.868979][ T27] [ 1122.872108][ T27] INFO: task dhcpcd:11718 blocked for more than 145 seconds. [ 1122.891136][ T27] Not tainted syzkaller #0 [ 1122.896123][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1122.914877][ T27] task:dhcpcd state:D stack:24944 pid:11718 ppid:3934 flags:0x00004002 [ 1122.925662][ T27] Call Trace: [ 1122.934368][ T27] [ 1122.937347][ T27] __schedule+0x11d1/0x40e0 [ 1122.942675][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1122.948634][ T27] ? __sched_text_start+0x8/0x8 [ 1122.959618][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 1122.964717][ T27] ? prepare_to_wait_event+0x430/0x470 [ 1122.978902][ T27] schedule+0xb9/0x180 [ 1122.983052][ T27] synchronize_rcu_expedited+0x7ad/0x890 [ 1122.995303][ T27] ? synchronize_rcu+0x3f0/0x3f0 [ 1123.004815][ T27] ? __lock_acquire+0x13cf/0x7d10 [ 1123.015425][ T27] ? wake_bit_function+0x200/0x200 [ 1123.023719][ T27] ? mark_lock+0x94/0x320 [ 1123.028149][ T27] ? verify_lock_unused+0x140/0x140 [ 1123.037988][ T27] ? verify_lock_unused+0x140/0x140 [ 1123.045290][ T27] ? verify_lock_unused+0x140/0x140 [ 1123.050865][ T4288] Bluetooth: hci6: command 0x0406 tx timeout [ 1123.061975][ T27] ? verify_lock_unused+0x140/0x140 [ 1123.067248][ T27] synchronize_rcu+0x128/0x3f0 [ 1123.074716][ T27] ? schedule_delayed_monitor_work+0x160/0x160 [ 1123.087372][ T27] ? __unregister_prot_hook+0x3f2/0x570 [ 1123.095038][ T27] ? __might_sleep+0xd0/0xd0 [ 1123.099957][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 1123.105039][ T27] ? packet_do_bind+0x96/0xce0 [ 1123.110253][ T27] __unregister_prot_hook+0x3f7/0x570 [ 1123.115681][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1123.122250][ T27] ? packet_do_bind+0x96/0xce0 [ 1123.127091][ T27] packet_do_bind+0x519/0xce0 [ 1123.132236][ T27] ? packet_do_bind+0x96/0xce0 [ 1123.137054][ T27] __sys_bind+0x2e9/0x3e0 [ 1123.142291][ T27] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1123.147662][ T27] __x64_sys_bind+0x76/0x80 [ 1123.152654][ T27] do_syscall_64+0x4c/0xa0 [ 1123.157123][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1123.162132][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1123.166871][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1123.173387][ T27] RIP: 0033:0x7fa25d2762d7 [ 1123.177861][ T27] RSP: 002b:00007ffeed9ece08 EFLAGS: 00000213 ORIG_RAX: 0000000000000031 [ 1123.186668][ T27] RAX: ffffffffffffffda RBX: 0000560e7dea5050 RCX: 00007fa25d2762d7 [ 1123.195552][ T27] RDX: 0000000000000014 RSI: 00007ffeed9ece20 RDI: 0000000000000003 [ 1123.208326][ T27] RBP: 0000560e70b124b0 R08: 00007fa25d345ac0 R09: 0000000000000000 [ 1123.218305][ T27] R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000 [ 1123.233832][ T27] R13: 0000560e7dea9280 R14: 0000000000000000 R15: 0000560e70b27ac0 [ 1123.243774][ T27] [ 1123.246886][ T27] INFO: task dhcpcd:11719 blocked for more than 146 seconds. [ 1123.258661][ T27] Not tainted syzkaller #0 [ 1123.264927][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1123.277731][ T27] task:dhcpcd state:D stack:24944 pid:11719 ppid:3934 flags:0x00004002 [ 1123.288095][ T27] Call Trace: [ 1123.298248][ T27] [ 1123.304842][ T27] __schedule+0x11d1/0x40e0 [ 1123.315292][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1123.322507][ T27] ? __sched_text_start+0x8/0x8 [ 1123.327412][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 1123.339027][ T27] ? prepare_to_wait_event+0x430/0x470 [ 1123.344550][ T27] schedule+0xb9/0x180 [ 1123.356411][ T27] synchronize_rcu_expedited+0x7ad/0x890 [ 1123.363219][ T27] ? synchronize_rcu+0x3f0/0x3f0 [ 1123.368203][ T27] ? __lock_acquire+0x13cf/0x7d10 [ 1123.378613][ T27] ? wake_bit_function+0x200/0x200 [ 1123.385095][ T27] ? mark_lock+0x94/0x320 [ 1123.394582][ T27] ? verify_lock_unused+0x140/0x140 [ 1123.403492][ T27] ? verify_lock_unused+0x140/0x140 [ 1123.414903][ T27] ? verify_lock_unused+0x140/0x140 [ 1123.423400][ T27] ? verify_lock_unused+0x140/0x140 [ 1123.428684][ T27] synchronize_rcu+0x128/0x3f0 [ 1123.442543][ T27] ? schedule_delayed_monitor_work+0x160/0x160 [ 1123.448927][ T4289] Bluetooth: hci16: command 0x041b tx timeout [ 1123.459263][ T27] ? __unregister_prot_hook+0x3f2/0x570 [ 1123.464874][ T27] ? __might_sleep+0xd0/0xd0 [ 1123.476630][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 1123.483194][ T27] ? packet_do_bind+0x96/0xce0 [ 1123.488027][ T27] __unregister_prot_hook+0x3f7/0x570 [ 1123.497795][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1123.506547][ T27] ? packet_do_bind+0x96/0xce0 [ 1123.516310][ T27] packet_do_bind+0x519/0xce0 [ 1123.524051][ T27] ? packet_do_bind+0x96/0xce0 [ 1123.530423][ T27] __sys_bind+0x2e9/0x3e0 [ 1123.534822][ T27] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1123.553129][ T27] __x64_sys_bind+0x76/0x80 [ 1123.557707][ T27] do_syscall_64+0x4c/0xa0 [ 1123.567698][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1123.573219][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1123.577971][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1123.591445][ T27] RIP: 0033:0x7fa25d2762d7 [ 1123.596008][ T27] RSP: 002b:00007ffeed9ece08 EFLAGS: 00000213 ORIG_RAX: 0000000000000031 [ 1123.612996][ T27] RAX: ffffffffffffffda RBX: 0000560e7dea5050 RCX: 00007fa25d2762d7 [ 1123.623988][ T27] RDX: 0000000000000014 RSI: 00007ffeed9ece20 RDI: 0000000000000003 [ 1123.637713][ T27] RBP: 0000560e70b124b0 R08: 00007fa25d345ac0 R09: 0000000000000000 [ 1123.648547][ T27] R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000 [ 1123.665186][ T27] R13: 0000560e7dea9450 R14: 0000000000000000 R15: 0000560e70b27ac0 [ 1123.676660][ T27] [ 1123.684099][ T27] INFO: task dhcpcd:11720 blocked for more than 146 seconds. [ 1123.696321][ T27] Not tainted syzkaller #0 [ 1123.707414][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1123.717941][ T27] task:dhcpcd state:D stack:24944 pid:11720 ppid:3934 flags:0x00004002 [ 1123.731739][ T27] Call Trace: [ 1123.735070][ T27] [ 1123.738034][ T27] __schedule+0x11d1/0x40e0 [ 1123.747855][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1123.757977][ T27] ? __sched_text_start+0x8/0x8 [ 1123.766332][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 1123.778920][ T27] ? prepare_to_wait_event+0x430/0x470 [ 1123.784536][ T27] schedule+0xb9/0x180 [ 1123.788684][ T27] synchronize_rcu_expedited+0x7ad/0x890 [ 1123.797761][ T27] ? synchronize_rcu+0x3f0/0x3f0 [ 1123.808675][ T27] ? __lock_acquire+0x13cf/0x7d10 [ 1123.817891][ T27] ? wake_bit_function+0x200/0x200 [ 1123.826134][ T27] ? mark_lock+0x94/0x320 [ 1123.834702][ T27] ? verify_lock_unused+0x140/0x140 [ 1123.842498][ T27] ? verify_lock_unused+0x140/0x140 [ 1123.847755][ T27] ? verify_lock_unused+0x140/0x140 [ 1123.853173][ T4289] Bluetooth: hci15: command 0x0419 tx timeout [ 1123.867985][ T27] ? verify_lock_unused+0x140/0x140 [ 1123.874709][ T27] synchronize_rcu+0x128/0x3f0 [ 1123.888003][ T27] ? schedule_delayed_monitor_work+0x160/0x160 [ 1123.895792][ T27] ? __unregister_prot_hook+0x3f2/0x570 [ 1123.906694][ T27] ? __might_sleep+0xd0/0xd0 [ 1123.912862][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 1123.917957][ T27] ? packet_do_bind+0x96/0xce0 [ 1123.923862][ T27] __unregister_prot_hook+0x3f7/0x570 [ 1123.929554][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1123.934814][ T27] ? packet_do_bind+0x96/0xce0 [ 1123.939948][ T27] packet_do_bind+0x519/0xce0 [ 1123.944672][ T27] ? packet_do_bind+0x96/0xce0 [ 1123.949928][ T27] __sys_bind+0x2e9/0x3e0 [ 1123.954322][ T27] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1123.961250][ T27] __x64_sys_bind+0x76/0x80 [ 1123.965818][ T27] do_syscall_64+0x4c/0xa0 [ 1123.970737][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1123.975462][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1123.980925][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1123.986882][ T27] RIP: 0033:0x7fa25d2762d7 [ 1123.992962][ T27] RSP: 002b:00007ffeed9ece08 EFLAGS: 00000213 ORIG_RAX: 0000000000000031 [ 1124.001710][ T27] RAX: ffffffffffffffda RBX: 0000560e7dea5050 RCX: 00007fa25d2762d7 [ 1124.010629][ T27] RDX: 0000000000000014 RSI: 00007ffeed9ece20 RDI: 0000000000000003 [ 1124.019859][ T27] RBP: 0000560e70b124b0 R08: 00007fa25d345ac0 R09: 0000000000000000 [ 1124.027886][ T27] R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000 [ 1124.037629][ T27] R13: 0000560e7dea9620 R14: 0000000000000000 R15: 0000560e70b27ac0 [ 1124.046365][ T27] [ 1124.049824][ T27] INFO: task syz.4.1596:11734 blocked for more than 147 seconds. [ 1124.057584][ T27] Not tainted syzkaller #0 [ 1124.063386][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1124.072317][ T27] task:syz.4.1596 state:D stack:27856 pid:11734 ppid:4273 flags:0x00004004 [ 1124.087738][ T27] Call Trace: [ 1124.092447][ T27] [ 1124.095447][ T27] __schedule+0x11d1/0x40e0 [ 1124.109713][ T27] ? __sched_text_start+0x8/0x8 [ 1124.116316][ T27] schedule+0xb9/0x180 [ 1124.126452][ T27] schedule_timeout+0xbd/0x2d0 [ 1124.132102][ T27] ? console_conditional_schedule+0x40/0x40 [ 1124.138049][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1124.152122][ T27] ? lock_chain_count+0x20/0x20 [ 1124.157044][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1124.164925][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1124.178069][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1124.186168][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1124.198781][ T27] ? wait_for_completion+0x276/0x5a0 [ 1124.204144][ T27] wait_for_completion+0x2c7/0x5a0 [ 1124.218918][ T27] ? io_schedule+0xd0/0xd0 [ 1124.223410][ T27] ? try_to_wake_up+0x67c/0x1080 [ 1124.228399][ T27] kvm_vm_create_worker_thread+0x19c/0x270 [ 1124.241611][ T27] ? kvm_mmu_post_init_vm+0x90/0x90 [ 1124.246892][ T27] ? hardware_disable_nolock+0x160/0x160 [ 1124.257261][ T27] ? kvm_create_vm_debugfs+0x898/0x980 [ 1124.266883][ T27] ? kvm_mmu_post_init_vm+0x90/0x90 [ 1124.275096][ T27] ? __raw_spin_lock_init+0x41/0x100 [ 1124.284202][ T27] kvm_mmu_post_init_vm+0x3e/0x90 [ 1124.292294][ T27] kvm_dev_ioctl+0x1444/0x1800 [ 1124.297217][ T27] ? hardware_enable_nolock+0x220/0x220 [ 1124.308292][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1124.316295][ T27] ? security_file_ioctl+0x7c/0xa0 [ 1124.331709][ T27] ? hardware_enable_nolock+0x220/0x220 [ 1124.337425][ T27] __se_sys_ioctl+0xfa/0x170 [ 1124.347132][ T27] do_syscall_64+0x4c/0xa0 [ 1124.353299][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1124.358028][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1124.370280][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1124.376245][ T27] RIP: 0033:0x7fe82b39cdd9 [ 1124.384614][ T27] RSP: 002b:00007fe82c18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.395914][ T27] RAX: ffffffffffffffda RBX: 00007fe82b615fa0 RCX: 00007fe82b39cdd9 [ 1124.407194][ T27] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1124.425017][ T27] RBP: 00007fe82b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1124.440169][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.448228][ T27] R13: 00007fe82b616038 R14: 00007fe82b615fa0 R15: 00007ffd2e624a58 [ 1124.462430][ T27] [ 1124.465542][ T27] INFO: task kvm-nx-lpage-re:11735 blocked for more than 147 seconds. [ 1124.477232][ T27] Not tainted syzkaller #0 [ 1124.488186][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1124.498969][ T27] task:kvm-nx-lpage-re state:D stack:29104 pid:11735 ppid:2 flags:0x00004000 [ 1124.508248][ T27] Call Trace: [ 1124.516280][ T27] [ 1124.523191][ T27] __schedule+0x11d1/0x40e0 [ 1124.535256][ T27] ? __sched_text_start+0x8/0x8 [ 1124.544331][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 1124.555170][ T27] ? prepare_to_wait_event+0x430/0x470 [ 1124.563257][ T27] schedule+0xb9/0x180 [ 1124.567404][ T27] synchronize_rcu_expedited+0x7ad/0x890 [ 1124.578272][ T27] ? synchronize_rcu+0x3f0/0x3f0 [ 1124.586601][ T27] ? wake_bit_function+0x200/0x200 [ 1124.596332][ T27] ? mark_lock+0x94/0x320 [ 1124.602713][ T27] ? __lock_acquire+0x13cf/0x7d10 [ 1124.607813][ T27] ? __lock_acquire+0x13cf/0x7d10 [ 1124.617184][ T27] synchronize_rcu+0x128/0x3f0 [ 1124.624185][ T27] ? schedule_delayed_monitor_work+0x160/0x160 [ 1124.638392][ T27] ? mark_lock+0x94/0x320 [ 1124.645420][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1124.658539][ T27] ? lock_chain_count+0x20/0x20 [ 1124.667371][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1124.677607][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1124.685308][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1124.696425][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1124.703938][ T27] rcu_sync_enter+0x221/0x350 [ 1124.708682][ T27] ? rcu_sync_enter_start+0x80/0x80 [ 1124.719079][ T27] ? read_lock_is_recursive+0x10/0x10 [ 1124.724527][ T27] ? rcu_is_watching+0x11/0xa0 [ 1124.737498][ T27] percpu_down_write+0x69/0x2f0 [ 1124.745282][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1124.756875][ T27] cgroup_attach_task_all+0x2c/0xe0 [ 1124.766513][ T27] kvm_vm_worker_thread+0xce/0x540 [ 1124.777985][ T27] ? kvm_mmu_post_init_vm+0x90/0x90 [ 1124.785883][ T27] kthread+0x29d/0x330 [ 1124.794289][ T27] ? kvm_vm_create_worker_thread+0x270/0x270 [ 1124.803518][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1124.808165][ T27] ret_from_fork+0x1f/0x30 [ 1124.821044][ T27] [ 1124.824217][ T27] [ 1124.824217][ T27] Showing all locks held in the system: [ 1124.838010][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1124.846820][ T27] #0: ffffffff8cb2df70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1124.865378][ T27] 1 lock held by rcu_tasks_trace/13: [ 1124.873845][ T27] #0: ffffffff8cb2e790 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1124.892461][ T27] 1 lock held by khungtaskd/27: [ 1124.897362][ T27] #0: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1124.909038][ T27] 5 locks held by kworker/0:2/128: [ 1124.914239][ T27] 2 locks held by getty/4027: [ 1124.920839][ T27] #0: ffff88814d6ad098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1124.930946][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 1124.942483][ T27] 3 locks held by kworker/1:7/4324: [ 1124.947729][ T27] #0: ffff88814d1a8138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1124.959326][ T27] #1: ffffc900045a7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1124.976007][ T27] #2: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 1124.989508][ T27] 2 locks held by kworker/u4:20/6202: [ 1124.994934][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1125.013343][ T27] #1: ffffc90003797d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1125.027353][ T27] 2 locks held by kworker/u4:29/9539: [ 1125.040083][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1125.058823][ T27] #1: ffffc90004b1fd00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1125.075371][ T27] 2 locks held by kworker/u4:30/9541: [ 1125.083021][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1125.103882][ T27] #1: ffffc90004b2fd00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1125.118694][ T27] 4 locks held by udevd/10638: [ 1125.123743][ T27] #0: ffff8880779a22f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 1125.144713][ T27] #1: ffff8880788b8088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x410 [ 1125.156348][ T27] #2: ffff888063086bd0 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0xae/0x410 [ 1125.169900][ T27] #3: ffff88807c797190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 1125.183207][ T27] 2 locks held by dhcpcd/11716: [ 1125.188116][ T27] #0: ffff8880730d2610 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1125.203390][ T27] #1: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1125.220594][ T27] 2 locks held by dhcpcd/11717: [ 1125.225492][ T27] #0: ffff888073197410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1125.243032][ T27] #1: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1125.263504][ T27] 1 lock held by dhcpcd/11718: [ 1125.268324][ T27] #0: ffff88805d494130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.281846][ T27] 1 lock held by dhcpcd/11719: [ 1125.286658][ T27] #0: ffff88807d0c6130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.302810][ T27] 1 lock held by dhcpcd/11720: [ 1125.307620][ T27] #0: ffff88803049c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.327832][ T27] 3 locks held by kvm-nx-lpage-re/11735: [ 1125.335828][ T27] #0: ffffffff8cb56068 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x22/0xe0 [ 1125.354346][ T27] #1: ffffffff8c9c9eb0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0xd/0x30 [ 1125.368164][ T27] #2: ffffffff8cb56250 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x2c/0xe0 [ 1125.387408][ T27] 1 lock held by syz.5.1607/11766: [ 1125.393488][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1125.409787][ T27] 1 lock held by kvm-nx-lpage-re/11768: [ 1125.415398][ T27] #0: ffffffff8cb56068 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x22/0xe0 [ 1125.430643][ T27] 1 lock held by dhcpcd/11788: [ 1125.435471][ T27] #0: ffff88804bcc8130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.457760][ T27] 3 locks held by syz.7.1613/11797: [ 1125.467385][ T27] #0: ffffffff8dda8310 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 1125.484509][ T27] #1: ffff88807df34698 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x6f0 [ 1125.497697][ T27] #2: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_prepare_wdev_dump+0x3d4/0x690 [ 1125.513074][ T27] 1 lock held by dhcpcd/11791: [ 1125.517892][ T27] #0: ffff88802a124130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.528831][ T4288] Bluetooth: hci16: command 0x040f tx timeout [ 1125.542046][ T27] 1 lock held by dhcpcd/11794: [ 1125.546871][ T27] #0: ffff888056524130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.588844][ T27] 1 lock held by syz-executor/11801: [ 1125.594225][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1125.648937][ T27] 1 lock held by dhcpcd/11812: [ 1125.654473][ T27] #0: ffff888063ac6130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.688953][ T27] 1 lock held by dhcpcd/11813: [ 1125.693818][ T27] #0: ffff888026afa130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.728834][ T27] 1 lock held by syz-executor/11832: [ 1125.734197][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1125.754790][ T27] 1 lock held by syz.9.1625/11834: [ 1125.763038][ T27] #0: ffff888073246e10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1125.778080][ T27] 2 locks held by syz.0.1630/11849: [ 1125.786411][ T27] #0: ffff888046136e10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1125.808257][ T27] #1: ffff8880299bf130 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1c9/0x860 [ 1125.820738][ T27] 1 lock held by syz-executor/11855: [ 1125.826082][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1125.841838][ T27] 1 lock held by dhcpcd/11857: [ 1125.846667][ T27] #0: ffff888028aee130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.865718][ T27] 1 lock held by dhcpcd/11858: [ 1125.871775][ T27] #0: ffff888066c50130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.887008][ T27] 1 lock held by dhcpcd/11859: [ 1125.893425][ T27] #0: ffff888056714130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.909259][ T27] 1 lock held by syz-executor/11861: [ 1125.914599][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1125.936375][ T27] 1 lock held by dhcpcd/11863: [ 1125.945119][ T27] #0: ffff88801a70c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.961990][ T27] 1 lock held by dhcpcd/11864: [ 1125.966808][ T27] #0: ffff8880248fe130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.980412][ T27] 1 lock held by dhcpcd/11865: [ 1125.985258][ T27] #0: ffff88802cda4130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1125.999061][ T27] 1 lock held by syz-executor/11867: [ 1126.004394][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1126.020146][ T27] 1 lock held by dhcpcd/11869: [ 1126.024958][ T27] #0: ffff8880a84aa130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1126.046033][ T27] 1 lock held by dhcpcd/11870: [ 1126.055093][ T27] #0: ffff8880781e6130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1126.072572][ T27] 1 lock held by dhcpcd/11871: [ 1126.077433][ T27] #0: ffff8881483e2130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1126.097453][ T27] 1 lock held by dhcpcd/11872: [ 1126.103242][ T27] #0: ffff8880ac86e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1126.118942][ T27] 1 lock held by dhcpcd/11873: [ 1126.123753][ T27] #0: ffff888032e92130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1126.138622][ T27] 1 lock held by dhcpcd/11874: [ 1126.147259][ T27] #0: ffff8880797a8130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1126.166353][ T27] 1 lock held by dhcpcd/11875: [ 1126.179508][ T27] #0: ffff888055d40130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1126.194475][ T27] 1 lock held by dhcpcd/11876: [ 1126.201095][ T27] #0: ffff8880797aa130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1126.215161][ T27] 1 lock held by dhcpcd/11877: [ 1126.221922][ T27] #0: ffff88807dfae130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1126.236164][ T27] 1 lock held by dhcpcd/11878: [ 1126.242806][ T27] #0: ffff8880556fa130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1126.259558][ T27] 1 lock held by syz-executor/11880: [ 1126.266689][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1126.284767][ T27] 1 lock held by syz-executor/11883: [ 1126.294808][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1126.308291][ T27] 1 lock held by syz-executor/11886: [ 1126.316870][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1126.330145][ T27] 1 lock held by syz-executor/11889: [ 1126.335473][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1126.351280][ T27] 1 lock held by syz-executor/11892: [ 1126.356623][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1126.375967][ T27] 1 lock held by syz-executor/11895: [ 1126.383495][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1126.401732][ T27] 1 lock held by syz-executor/11898: [ 1126.407240][ T27] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1126.428214][ T27] [ 1126.430981][ T27] ============================================= [ 1126.430981][ T27] [ 1126.444999][ T27] NMI backtrace for cpu 1 [ 1126.449398][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1126.456633][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1126.466724][ T27] Call Trace: [ 1126.470034][ T27] [ 1126.473000][ T27] dump_stack_lvl+0x188/0x24e [ 1126.477731][ T27] ? irq_work_queue+0xb8/0x140 [ 1126.482581][ T27] ? show_regs_print_info+0x12/0x12 [ 1126.487857][ T27] ? load_image+0x400/0x400 [ 1126.492433][ T27] ? vprintk_emit+0x59f/0x6a0 [ 1126.497172][ T27] ? printk_sprint+0x460/0x460 [ 1126.501985][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 1126.506972][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1126.513187][ T27] ? _printk+0xda/0x130 [ 1126.517401][ T27] ? load_image+0x400/0x400 [ 1126.521946][ T27] ? load_image+0x400/0x400 [ 1126.526486][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1126.532602][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1126.538729][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1126.544766][ T27] watchdog+0xeee/0xf30 [ 1126.548974][ T27] ? watchdog+0x1ed/0xf30 [ 1126.553353][ T27] kthread+0x29d/0x330 [ 1126.557459][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1126.562610][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1126.567247][ T27] ret_from_fork+0x1f/0x30 [ 1126.571735][ T27] [ 1126.575778][ T27] Sending NMI from CPU 1 to CPUs 0: [ 1126.581229][ C0] NMI backtrace for cpu 0 [ 1126.581240][ C0] CPU: 0 PID: 128 Comm: kworker/0:2 Not tainted syzkaller #0 [ 1126.581258][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1126.581269][ C0] Workqueue: usb_hub_wq hub_event [ 1126.581299][ C0] RIP: 0010:stack_trace_consume_entry+0xef/0x270 [ 1126.581326][ C0] Code: 8b 74 24 08 48 8b 1f 45 8d 79 01 0f b6 44 15 00 84 c0 0f 85 35 01 00 00 45 89 38 4e 8d 3c cb 4c 89 f8 48 c1 e8 03 80 3c 10 00 <74> 1a 4c 89 ff 48 89 f3 49 89 d4 4c 89 c5 e8 2e 5e 62 00 49 89 e8 [ 1126.581340][ C0] RSP: 0018:ffffc90002d76758 EFLAGS: 00000246 [ 1126.581354][ C0] RAX: 1ffff920005aed2b RBX: ffffc90002d768f0 RCX: 0000000080000000 [ 1126.581367][ C0] RDX: dffffc0000000000 RSI: ffffffff8511af84 RDI: ffffc90002d76860 [ 1126.581381][ C0] RBP: 1ffff920005aed0e R08: ffffc90002d76870 R09: 000000000000000d [ 1126.581393][ C0] R10: dffffc0000000000 R11: fffff520005aed01 R12: 0000000000000000 [ 1126.581405][ C0] R13: 1ffff920005aed0d R14: ffffc90002d76868 R15: ffffc90002d76958 [ 1126.581419][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1126.581434][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1126.581447][ C0] CR2: 000055aee0d3bf70 CR3: 000000000c88e000 CR4: 00000000003526f0 [ 1126.581462][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000007 [ 1126.581473][ C0] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1126.581485][ C0] Call Trace: [ 1126.581490][ C0] [ 1126.581495][ C0] ? bus_for_each_drv+0x184/0x210 [ 1126.581518][ C0] ? stack_trace_save+0xf0/0xf0 [ 1126.581540][ C0] arch_stack_walk+0x100/0x140 [ 1126.581564][ C0] ? bus_for_each_drv+0x184/0x210 [ 1126.581586][ C0] stack_trace_save+0xa6/0xf0 [ 1126.581607][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1126.581639][ C0] ? memset+0x1e/0x40 [ 1126.581656][ C0] kasan_set_track+0x4b/0x70 [ 1126.581679][ C0] ? kasan_set_track+0x4b/0x70 [ 1126.581702][ C0] ? __kasan_kmalloc+0x8e/0xa0 [ 1126.581725][ C0] ? dummy_urb_enqueue+0x78/0x770 [ 1126.581743][ C0] ? usb_hcd_submit_urb+0x30f/0x19c0 [ 1126.581769][ C0] ? ath6kl_usb_post_recv_transfers+0x3cd/0x6f0 [ 1126.581792][ C0] ? ath6kl_usb_power_on+0x66/0x280 [ 1126.581812][ C0] ? ath6kl_core_init+0x1d6/0x1090 [ 1126.581831][ C0] ? ath6kl_usb_probe+0x144a/0x1540 [ 1126.581851][ C0] ? usb_probe_interface+0x5c5/0xb20 [ 1126.581871][ C0] ? really_probe+0x2aa/0xc70 [ 1126.581894][ C0] ? __driver_probe_device+0x18c/0x330 [ 1126.581916][ C0] ? driver_probe_device+0x4f/0x420 [ 1126.581939][ C0] ? __device_attach_driver+0x2c6/0x510 [ 1126.581981][ C0] ? rcu_is_watching+0x11/0xa0 [ 1126.582008][ C0] __kasan_kmalloc+0x8e/0xa0 [ 1126.582033][ C0] dummy_urb_enqueue+0x78/0x770 [ 1126.582054][ C0] usb_hcd_submit_urb+0x30f/0x19c0 [ 1126.582086][ C0] ath6kl_usb_post_recv_transfers+0x3cd/0x6f0 [ 1126.582115][ C0] ath6kl_usb_power_on+0x66/0x280 [ 1126.582137][ C0] ath6kl_core_init+0x1d6/0x1090 [ 1126.582157][ C0] ? free_zapped_rcu+0x1f0/0x1f0 [ 1126.582187][ C0] ? ath6kl_core_rx_complete+0x70/0x70 [ 1126.582206][ C0] ? ath6kl_core_create+0x7d6/0x980 [ 1126.582225][ C0] ? memcpy+0x3c/0x60 [ 1126.582242][ C0] ? ath6kl_core_create+0x7d6/0x980 [ 1126.582263][ C0] ath6kl_usb_probe+0x144a/0x1540 [ 1126.582292][ C0] usb_probe_interface+0x5c5/0xb20 [ 1126.582317][ C0] ? usb_register_driver+0x3d0/0x3d0 [ 1126.582336][ C0] really_probe+0x2aa/0xc70 [ 1126.582360][ C0] ? pm_runtime_barrier+0x147/0x1c0 [ 1126.582384][ C0] __driver_probe_device+0x18c/0x330 [ 1126.582409][ C0] driver_probe_device+0x4f/0x420 [ 1126.582435][ C0] __device_attach_driver+0x2c6/0x510 [ 1126.582458][ C0] ? coredump_store+0x90/0x90 [ 1126.582482][ C0] bus_for_each_drv+0x184/0x210 [ 1126.582502][ C0] ? coredump_store+0x90/0x90 [ 1126.582524][ C0] ? subsys_find_device_by_id+0x360/0x360 [ 1126.582550][ C0] __device_attach+0x2a8/0x480 [ 1126.582573][ C0] ? device_attach+0x20/0x20 [ 1126.582596][ C0] ? kobject_uevent_env+0x35f/0x8a0 [ 1126.582619][ C0] bus_probe_device+0xbc/0x1e0 [ 1126.582644][ C0] ? device_add+0x97c/0xfb0 [ 1126.582661][ C0] device_add+0xa00/0xfb0 [ 1126.582682][ C0] usb_set_configuration+0x1991/0x1fd0 [ 1126.582714][ C0] usb_generic_driver_probe+0x89/0x150 [ 1126.582734][ C0] usb_probe_device+0x139/0x270 [ 1126.582755][ C0] ? usb_register_device_driver+0x230/0x230 [ 1126.582775][ C0] really_probe+0x2aa/0xc70 [ 1126.582799][ C0] ? pm_runtime_barrier+0x147/0x1c0 [ 1126.582822][ C0] __driver_probe_device+0x18c/0x330 [ 1126.582846][ C0] driver_probe_device+0x4f/0x420 [ 1126.582871][ C0] __device_attach_driver+0x2c6/0x510 [ 1126.582895][ C0] ? coredump_store+0x90/0x90 [ 1126.582919][ C0] bus_for_each_drv+0x184/0x210 [ 1126.582939][ C0] ? coredump_store+0x90/0x90 [ 1126.582961][ C0] ? subsys_find_device_by_id+0x360/0x360 [ 1126.582987][ C0] __device_attach+0x2a8/0x480 [ 1126.583011][ C0] ? device_attach+0x20/0x20 [ 1126.583032][ C0] ? __kmem_cache_free+0xb6/0x1f0 [ 1126.583054][ C0] ? kobject_uevent_env+0x35f/0x8a0 [ 1126.583076][ C0] bus_probe_device+0xbc/0x1e0 [ 1126.583095][ C0] ? device_add+0x97c/0xfb0 [ 1126.583112][ C0] device_add+0xa00/0xfb0 [ 1126.583133][ C0] usb_new_device+0xd66/0x1650 [ 1126.583171][ C0] ? lock_chain_count+0x20/0x20 [ 1126.583193][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 1126.583215][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1126.583234][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1126.583254][ C0] hub_event+0x2dcf/0x5560 [ 1126.583297][ C0] ? hub_post_resume+0x120/0x120 [ 1126.583320][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1126.583344][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 1126.583371][ C0] ? process_one_work+0x7b0/0x1160 [ 1126.583410][ C0] process_one_work+0x8a2/0x1160 [ 1126.583437][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1126.583460][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1126.583479][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1126.583498][ C0] ? kthread_data+0x4b/0xc0 [ 1126.583526][ C0] worker_thread+0xaa2/0x1270 [ 1126.583559][ C0] kthread+0x29d/0x330 [ 1126.583573][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1126.583592][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1126.583608][ C0] ret_from_fork+0x1f/0x30 [ 1126.583642][ C0] [ 1127.220008][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1127.226926][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1127.234156][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1127.244244][ T27] Call Trace: [ 1127.247551][ T27] [ 1127.250546][ T27] dump_stack_lvl+0x188/0x24e [ 1127.255280][ T27] ? memcpy+0x3c/0x60 [ 1127.259306][ T27] ? show_regs_print_info+0x12/0x12 [ 1127.264556][ T27] ? load_image+0x400/0x400 [ 1127.269099][ T27] panic+0x2e5/0x730 [ 1127.273022][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1127.278702][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1127.283243][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 1127.288836][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1127.295041][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1127.301250][ T27] watchdog+0xf2d/0xf30 [ 1127.305452][ T27] ? watchdog+0x1ed/0xf30 [ 1127.309826][ T27] kthread+0x29d/0x330 [ 1127.313933][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1127.318995][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1127.323615][ T27] ret_from_fork+0x1f/0x30 [ 1127.328083][ T27] [ 1127.331724][ T27] Kernel Offset: disabled [ 1127.336070][ T27] Rebooting in 86400 seconds..