last executing test programs: 14.902818427s ago: executing program 1 (id=1064): socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x59, 0xf1, 0x10, 0x582, 0xe6, 0x4e06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe2, 0xb2}}]}}]}}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES64=r0], 0x40}}, 0x0) 13.516403444s ago: executing program 2 (id=1068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x39a8c90d50e49153, 0x0, 0x0, 0x0, {[@timestamp={0xfe, 0xa}]}}}}}}}}, 0x0) 13.342719708s ago: executing program 2 (id=1069): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{r1, 0x4047}, {r1}], 0x2, 0x0, 0x0, 0x0) close(r1) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f0000000280)) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000300)=ANY=[], 0xff, 0x5dcf, &(0x7f0000006940)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae03, 0x2f) ioperm(0x61, 0x8, 0x5) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=@shmem={0xc}, 0x0) 12.01683244s ago: executing program 1 (id=1072): r0 = io_uring_setup(0x30d7, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f00000001c0), 0xc) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0x28) read(r2, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='limits\x00') read$FUSE(r7, &(0x7f00000061c0)={0x2020}, 0x2035) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000200)=ANY=[], 0x10132) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KDFONTOP_COPY(r10, 0x4b72, &(0x7f0000000200)={0x3, 0x0, 0x10, 0x6, 0x82, &(0x7f00000004c0)}) 10.829583771s ago: executing program 1 (id=1074): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="5501000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc40806d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb775505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d36c62785f32ecc294a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fcd097728955cf04fec692b01fadfc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab61a19"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 10.775345156s ago: executing program 2 (id=1075): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) socket$kcm(0x29, 0x0, 0x0) close(0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10) 9.669504172s ago: executing program 1 (id=1076): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{r1, 0x4047}, {r1}], 0x2, 0x0, 0x0, 0x0) close(r1) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f0000000280)) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000300)=ANY=[], 0xff, 0x5dcf, &(0x7f0000006940)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae03, 0x2f) ioperm(0x61, 0x8, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.100904186s ago: executing program 3 (id=1078): r0 = syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000140)={[{@grpid}, {@filestreams}, {@uqnoenforce}, {@largeio}, {}, {@quota}]}, 0xfe, 0x97d9, &(0x7f000001c700)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 8.451826406s ago: executing program 2 (id=1079): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000500), 0x0, 0x559e, &(0x7f0000005680)="$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") socket(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$dri(0x0, 0x20, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, {0xa, @pix_mp}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"000300000000de0f00000000001500", 0x0, 0x0, {}, {}, 0x0, [0x0, 0x0, 0x0, 0x68]}) 8.451377166s ago: executing program 0 (id=1080): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x8c}}, 0x0) 7.996163801s ago: executing program 4 (id=1081): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r0, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) 7.775562878s ago: executing program 1 (id=1082): socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x59, 0xf1, 0x10, 0x582, 0xe6, 0x4e06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe2, 0xb2}}]}}]}}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES64=r0], 0x40}}, 0x0) 7.548185836s ago: executing program 0 (id=1083): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="5501000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc40806d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb775505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d36c62785f32ecc294a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fcd097728955cf04fec692b01fadfc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab61a19"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 6.646695905s ago: executing program 4 (id=1084): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0x4, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_io_uring_setup(0x9cb, &(0x7f0000000500)={0x0, 0x3c1, 0x800, 0x0, 0x303, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x6}, @noop, @timestamp={0x44, 0x4}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) sigaltstack(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x22, 0x2, 0x4) getpeername$inet(r5, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x4020940d, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x25, 0x0, "67d401136a26f0e201537ab118c4aab19a0ea93185087ed1128770039bdeda45de723fb17a76a2b9e404fff84d36c7e40044956b12258f3c61799f79b1c06b4a0433dae1ad3b8ea0d9fc8cd629ba56e3"}, 0xd8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xd1, 0x2, 0x40, 0x7e}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x4, 0x3f, 0x401, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "89042ec390675ef9409c659b9aa56173"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x3, 0x907e}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xc0, 0x7, 0x895}]}, 0x2, [{0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "2f8b629134e41ba55736933fde75a4add741356fbe07419ff709aa0fd0a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.495768227s ago: executing program 0 (id=1085): r0 = io_uring_setup(0x30d7, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f00000001c0), 0xc) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0x28) read(r2, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='limits\x00') read$FUSE(r7, &(0x7f00000061c0)={0x2020}, 0x2035) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000200)=ANY=[], 0x10132) creat(&(0x7f0000000000)='./file0\x00', 0x0) 6.233873737s ago: executing program 3 (id=1086): syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') writev(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x8}]) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 5.623618824s ago: executing program 2 (id=1087): socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1) io_uring_setup(0x7d5, &(0x7f0000000300)) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x40, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}]}, 0x40}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000000010108000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x54}}, 0x0) 5.438487759s ago: executing program 0 (id=1088): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{r1, 0x4047}, {r1}], 0x2, 0x0, 0x0, 0x0) close(r1) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f0000000280)) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000300)=ANY=[], 0xff, 0x5dcf, &(0x7f0000006940)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae03, 0x2f) ioperm(0x61, 0x8, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="189500"/12], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.933944038s ago: executing program 3 (id=1089): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) socket$kcm(0x29, 0x0, 0x0) close(0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10) 4.604820194s ago: executing program 2 (id=1090): socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) 4.1334359s ago: executing program 0 (id=1091): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8}]}, 0x24}}, 0x0) r2 = dup(r0) ptrace(0x10, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000180)=""/33, &(0x7f0000000080)=0x71) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0xffff8000, "22b494936403000000061099817f5159ff6bfafc0000040000000000002800"}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff0102030109021210010000000009"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0xb, 0x2, "7ae1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r5, 0x890b, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x2, "6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0xb, 0x2, "1576"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT(r2, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b39f99cfbf4c087f71e9b3c0963ff7fc6e5539b9b3b098b9b711b5d52101b080d29308f0e1ac6e7049b3468959b189a242a9b64f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000436d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a521903e2c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89820a7a0b67803b093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 3.912938597s ago: executing program 1 (id=1092): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$rfkill(r0, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x50, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @void, @val={0x9}}}, [@NL80211_ATTR_SOCKET_OWNER, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x0, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3da8ecac89dfba73251e9d9fe18d309ff4f293ce7baac8f7"}]]}, 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000000)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast}, 0x0, @val={0x8c, 0x10, {0x0, '\x00', @short="981fa725d0e22002"}}}}]}, 0x4c}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @loopback={0x11}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00&\x00l\t\x00\x00\b\x00\'\x00U'], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[], 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) 3.867210021s ago: executing program 3 (id=1093): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'lc\x00', 0x1}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0x0) poll(&(0x7f0000000900), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) 3.196784532s ago: executing program 4 (id=1094): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r0, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) 2.856091299s ago: executing program 3 (id=1095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2.644143875s ago: executing program 3 (id=1096): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$rfkill(r0, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x50, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @void, @val={0x9}}}, [@NL80211_ATTR_SOCKET_OWNER, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x0, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3da8ecac89dfba73251e9d9fe18d309ff4f293ce7baac8f7"}]]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000000)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast}, 0x0, @val={0x8c, 0x10, {0x0, '\x00', @short="981fa725d0e22002"}}}}]}, 0x4c}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @loopback={0x11}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00&\x00l\t\x00\x00\b\x00\'\x00U'], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[], 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) 2.206816029s ago: executing program 4 (id=1097): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 1.176654168s ago: executing program 4 (id=1098): r0 = io_uring_setup(0x30d7, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f00000001c0), 0xc) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0x28) read(r2, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='limits\x00') read$FUSE(r7, &(0x7f00000061c0)={0x2020}, 0x2035) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000200)=ANY=[], 0x10132) creat(&(0x7f0000000000)='./file0\x00', 0x0) 116.542781ms ago: executing program 4 (id=1099): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) write$nci(r3, 0x0, 0x0) r8 = dup2(r0, r2) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r9 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000280)={0x9, @raw_data="4c5d3e144f8b7cd57053474f0efec924dee607941d590db41c2cfb356281d23e9f3fceb2023d7033052cedd690a4d38cb9480b3e7a25903197017aafb6a837ea72165335c6586d60d50b9ac7b055ae8b9d9f23db423d5839c30a601adddbcf2156b3d4cb747766d2ca6180c0272a2661cb0d8c41e5f123d80f73f10e57b16253b676f4a04e288ef167ca5dfa22726dc00468c2b90f9161e1c6d9c8e2ad31bfaa7a8ab944d671feeecdb89827a56b82ca4c87e65ec3a6af8ca3ee954b397fd953521a547984731de3"}) write$P9_RCLUNK(r8, &(0x7f0000000180)={0x7}, 0xfffffe1c) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000880)={{0x3, @netrom}, [@rose, @netrom, @bcast, @rose, @null, @bcast, @rose]}, &(0x7f0000000900)=0x48) syz_usb_connect(0x0, 0xfc, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x72, 0x4f, 0x81, 0x40, 0x1b3d, 0x1a4, 0x2aa1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x1, 0xf, 0x7, 0x50, 0x7, [{{0x9, 0x4, 0x9c, 0xf, 0x2, 0x5f, 0x3e, 0x5, 0x3, [@generic={0x60, 0x9, "9aaf49bf7f431195db9b60ad18d0bdc2b9ec75d8458b1ecaf678d30d9a490c91c01867ea6433d4e5214138d75dd7479b3c2f131808c9201b862dcdea0f9d530374f5c25a9f4a269756e59c3d11b59df89dc9aa53cf9c5b8ca11072544a74"}, @hid_hid={0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x31f}}], [{{0x9, 0x5, 0xc, 0x10, 0x400, 0xe, 0x5, 0xa8}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0xb, 0x2, 0x10, [@generic={0x5d, 0x3, "fa1a21e15abb648b5c81438df3692d1278a3affb9a6572b46a666b20c98b5c4e019068c996dbc09fd2886d0764a12a848f7197cf44a10c9e2c1262c1fc0b75857999a2ff487fd95494d53adbdaa864ab5d94e884ad0b59d92bbd9f"}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x7a, 0xa, 0x81, 0x10, 0x10}, 0x2c, &(0x7f0000000d00)=ANY=[@ANYBLOB="050fe1e03d1a35f62c000203100b24100a02260000000fffffffff000000c00000000000000000000e3f000016c8a712246c3ae97899c1b3afa7d3dc4e8f28bfe1196e9e72e8a6fc75c006cdf483b7cebd1dcbde086a312aa8c7fc4c7259ccd1554d6d6ffafd1f960c2e4acdbef1181e4d12e86a1d25cdcac8363a50b98f6c8f57e4dfc03450", @ANYRES64=r1, @ANYBLOB="f38d64001ce4b3f3402925ff1b33a7f44dbe8c73dc4c2e82acdd20775413e1b30b1130a9723277a2f215527e9344fffee543150d4a864d501893c10147270388ae6ad18731f612868d5f3c43089cd6cdbbcdd097cdd68a014be79b8b34da6f0631f876d069fca2d09435eef3f9f24621e0e7dee55dd8479e588fab8819c01f46616648db58b8d5c80b19c2f4ab69d376c1bfeec84da6f78ce2bde38c2b181212d900265655c5ae4f063d41014d3b30b8c24247ba71c8abb7be5d7afb19ea6916aafbc55377f3ebcf136f9a90adfe7fc3e9aa39e97db11333bb52bd72e72c586baafc55bd650eda2fa1df80400e4ae9aa1f2860"], 0x6, [{0x52, &(0x7f00000004c0)=@string={0x52, 0x3, "62ef6129134c18a8421d8380ff06b762fe9b56a36b2266406774859c03a23c81f2fd1c7bbc3c7233aa93319fb06fbdca8365f105af24c1cdd5cad2428942a73c75e70afdda1f34a100601bb6c659a87f"}}, {0x8c, &(0x7f00000005c0)=@string={0x8c, 0x3, "821b62eae64cef600edb11a041c2c15dbf31944409820f93e69bd23957886e364e6459cfd71dd15ddb954ccb788e9eb4ee4833423610253af066e7d852b5b8671095c456f1b5e247d03bf03819761b1b0c7382e828122b850251812d4232af7bab9dbb6ee494b50f7eab8f06927ec143426e10143beb2b9cf8c55eb8809010e628220e8296b45dc11f5a"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42a}}, {0xda, &(0x7f0000000a00)=@string={0xda, 0x3, "880be26918adc38ed5465a668a96b81b9a2d72f3ab7dfc2bb19e988086bd7f4cad8758a28679dd12a566f007de64230e0884aa91ec529c2525bbcc339dd8537f46295c72b11d9893360c1e90887574efddc3953f2a9e6e8d3c38bcd621bc479949eab54b6dea6fbdd5727826cf76685dc549ab0876fbad4c4643a3cfe8cabca917f3991b24f17f3dcac17ee500599ea604a4299c36efd3d4e5840f2b50e7d1e09bd09f8e65053515bb38f5aade33cd9edc6a5f94f673dd27f4a439965ac6c5a932ecd2adbb3080f32f5f906a8f3f94d39b08ef4ded1b94bf"}}, {0x20, &(0x7f00000006c0)=@string={0x20, 0x3, "36cf532ee860fef9068b430f042e6087abffe595ee23f82958d794e28d5d"}}, {0xec, &(0x7f0000000700)=ANY=[@ANYRES16=r4]}]}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000080)=0x8, 0x4) read(r0, &(0x7f00000002c0)=""/69, 0x40) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000004000"/24]) 0s ago: executing program 0 (id=1100): socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1) io_uring_setup(0x7d5, &(0x7f0000000300)) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x40, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}]}, 0x40}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000000010108000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): 96 [ 342.640273][ T7009] loop0: detected capacity change from 0 to 32768 [ 342.781975][ T7009] XFS (loop0): Mounting V5 Filesystem [ 342.918129][ T7009] XFS (loop0): Ending clean mount [ 342.944706][ T7009] XFS (loop0): Quotacheck needed: Please wait. [ 343.038957][ T7009] XFS (loop0): Quotacheck: Done. [ 343.249489][ T7009] overlayfs: failed to resolve './file0': -2 [ 343.300337][ T5121] EXT4-fs (loop3): unmounting filesystem. [ 343.403153][ T7016] loop4: detected capacity change from 0 to 32768 [ 343.485197][ T3940] XFS (loop0): Unmounting Filesystem [ 345.519007][ T7039] loop3: detected capacity change from 0 to 32768 [ 346.292786][ T155] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 346.532861][ T155] usb 2-1: Using ep0 maxpacket: 16 [ 346.732772][ T3596] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 346.814495][ T155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 346.852894][ T155] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 346.862527][ T155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.894592][ T155] usb 2-1: config 0 descriptor?? [ 347.012896][ T3596] usb 4-1: Using ep0 maxpacket: 16 [ 347.138405][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.774'. [ 347.216069][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 347.216117][ T26] audit: type=1326 audit(1720334615.010:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 347.261578][ T26] audit: type=1326 audit(1720334615.050:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 347.293432][ T26] audit: type=1326 audit(1720334615.050:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 347.398681][ T3596] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 347.413509][ T3596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.432061][ T26] audit: type=1326 audit(1720334615.050:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 347.473184][ T7074] loop2: detected capacity change from 0 to 512 [ 347.481413][ T3596] usb 4-1: Product: syz [ 347.494024][ T3596] usb 4-1: Manufacturer: syz [ 347.508952][ T3596] usb 4-1: SerialNumber: syz [ 347.520467][ T3596] usb 4-1: config 0 descriptor?? [ 347.547424][ T7074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 347.551370][ T26] audit: type=1326 audit(1720334615.050:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 347.570234][ T7074] ext4 filesystem being mounted at /164/bus supports timestamps until 2038 (0x7fffffff) [ 347.593870][ T7071] loop0: detected capacity change from 0 to 4096 [ 347.601524][ T26] audit: type=1326 audit(1720334615.050:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 347.667119][ T26] audit: type=1326 audit(1720334615.050:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 347.704633][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.754839][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.784522][ T3717] udevd[3717]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.804731][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.823170][ T26] audit: type=1326 audit(1720334615.050:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 347.870339][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.913914][ T26] audit: type=1326 audit(1720334615.050:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 347.913978][ T155] hid (null): invalid report_size 53675 [ 347.984126][ T26] audit: type=1326 audit(1720334615.050:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 348.029789][ T155] hid-generic 0003:0158:0100.0027: unknown main item tag 0x1 [ 348.055034][ T155] hid-generic 0003:0158:0100.0027: unexpected long global item [ 348.083723][ T155] hid-generic: probe of 0003:0158:0100.0027 failed with error -22 [ 348.250719][ T3597] usb 2-1: USB disconnect, device number 34 [ 351.888709][ T4594] usb 4-1: USB disconnect, device number 30 [ 352.091305][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 352.253487][ T3561] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 353.040344][ T7103] loop0: detected capacity change from 0 to 32768 [ 353.213630][ T3596] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 353.241557][ T7103] XFS (loop0): Mounting V5 Filesystem [ 353.297470][ T155] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 353.336256][ T7103] XFS (loop0): Ending clean mount [ 353.346135][ T7103] XFS (loop0): Quotacheck needed: Please wait. [ 353.433815][ T7127] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 353.497976][ T7103] XFS (loop0): Quotacheck: Done. [ 353.503402][ T3596] usb 4-1: Using ep0 maxpacket: 16 [ 354.056667][ T7127] syz.4.792 (7127) used greatest stack depth: 18968 bytes left [ 354.173012][ T155] usb 3-1: Using ep0 maxpacket: 16 [ 354.258144][ T3940] XFS (loop0): Unmounting Filesystem [ 354.289542][ T3561] Bluetooth: hci3: command 0x0406 tx timeout [ 354.295313][ T155] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 354.295846][ T3596] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 354.318274][ T3596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.326409][ T3596] usb 4-1: Product: syz [ 354.330607][ T3596] usb 4-1: Manufacturer: syz [ 354.341091][ T3596] usb 4-1: SerialNumber: syz [ 354.362001][ T3596] usb 4-1: config 0 descriptor?? [ 354.365959][ T155] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 354.387848][ T155] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 355.340209][ T3650] udevd[3650]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.373054][ T3596] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 355.663061][ T3596] usb 5-1: Using ep0 maxpacket: 16 [ 355.993669][ T3596] usb 5-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 356.021327][ T3596] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.110700][ T3596] usb 5-1: Product: syz [ 356.149478][ T3596] usb 5-1: Manufacturer: syz [ 356.205420][ T3596] usb 5-1: SerialNumber: syz [ 356.266260][ T3596] usb 5-1: config 0 descriptor?? [ 356.466547][ T3650] udevd[3650]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.483141][ T155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.505263][ T155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.535829][ T155] usb 3-1: Product:  [ 356.576927][ T155] usb 3-1: can't set config #1, error -71 [ 356.605433][ T155] usb 3-1: USB disconnect, device number 32 [ 357.600875][ T7139] device team0 entered promiscuous mode [ 357.623845][ T7139] device team_slave_0 entered promiscuous mode [ 357.642025][ T7139] device team_slave_1 entered promiscuous mode [ 357.673864][ T7139] device dummy0 entered promiscuous mode [ 357.690727][ T155] usb 4-1: USB disconnect, device number 31 [ 357.728268][ T7139] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 357.747485][ T7139] Cannot create hsr debugfs directory [ 357.811305][ T4367] usb 5-1: USB disconnect, device number 30 [ 357.841748][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 358.033723][ T3596] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 358.140521][ T155] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 358.168414][ T7162] loop0: detected capacity change from 0 to 2048 [ 358.258661][ T7162] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 358.353400][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 358.353420][ T26] audit: type=1800 audit(1720334626.110:1307): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.795" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 358.382820][ T26] audit: type=1804 audit(1720334626.140:1308): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.795" name="/newroot/150/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 358.405190][ T155] usb 4-1: Using ep0 maxpacket: 8 [ 358.422226][ T3940] EXT4-fs (loop0): unmounting filesystem. [ 358.502941][ T3596] usb 3-1: Using ep0 maxpacket: 16 [ 358.522942][ T155] usb 4-1: config 137 has an invalid interface number: 211 but max is 0 [ 358.546655][ T155] usb 4-1: config 137 has no interface number 0 [ 358.560776][ T155] usb 4-1: config 137 interface 211 altsetting 233 has an invalid endpoint with address 0x0, skipping [ 358.584693][ T155] usb 4-1: config 137 interface 211 altsetting 233 endpoint 0x8E has an invalid bInterval 127, changing to 10 [ 358.604327][ T155] usb 4-1: config 137 interface 211 altsetting 233 has an invalid endpoint with address 0x0, skipping [ 358.623158][ T155] usb 4-1: config 137 interface 211 altsetting 233 endpoint 0x9 has an invalid bInterval 72, changing to 7 [ 358.640052][ T155] usb 4-1: config 137 interface 211 has no altsetting 0 [ 358.783259][ T3596] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 358.813128][ T3596] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 358.904143][ T3596] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 359.593169][ T3596] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 359.602440][ T3596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.613675][ T155] usb 4-1: string descriptor 0 read error: -22 [ 359.619960][ T155] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 359.641246][ T155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.659620][ T3596] usb 3-1: Product:  [ 359.672024][ T3596] usb 3-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 359.673263][ T7158] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 359.733848][ T155] ums_eneub6250 4-1:137.211: USB Mass Storage device detected [ 359.740732][ T3596] usb 3-1: SerialNumber: syz [ 360.082810][ T6574] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 361.866825][ T3595] usb 4-1: USB disconnect, device number 32 [ 361.987458][ T3596] cdc_ncm 3-1:1.0: bind() failure [ 362.000250][ T3596] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 362.015721][ T3596] cdc_ncm 3-1:1.1: bind() failure [ 362.283728][ T3596] usb 3-1: USB disconnect, device number 33 [ 362.463496][ T6574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.642279][ T6574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.655439][ T3595] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 363.042780][ T3595] usb 1-1: Using ep0 maxpacket: 16 [ 363.064425][ T6574] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 363.083383][ T6574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.095640][ T6574] usb 2-1: config 0 descriptor?? [ 363.172887][ T6574] usb 2-1: can't set config #0, error -71 [ 363.186351][ T6574] usb 2-1: USB disconnect, device number 35 [ 363.277641][ T7205] loop2: detected capacity change from 0 to 4096 [ 363.373152][ T3595] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 363.413127][ T3595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.456698][ T3595] usb 1-1: Product: syz [ 363.466697][ T3595] usb 1-1: Manufacturer: syz [ 363.483812][ T3595] usb 1-1: SerialNumber: syz [ 363.521729][ T3595] usb 1-1: config 0 descriptor?? [ 363.551507][ T7207] loop3: detected capacity change from 0 to 8192 [ 363.613462][ T7207] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 363.661943][ T3650] udevd[3650]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.733269][ T155] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 364.429889][ T7220] loop2: detected capacity change from 0 to 256 [ 364.882866][ T155] usb 2-1: Using ep0 maxpacket: 16 [ 365.289909][ T7192] device team0 entered promiscuous mode [ 365.351134][ T7192] device team_slave_0 entered promiscuous mode [ 365.439715][ T7192] device team_slave_1 entered promiscuous mode [ 365.541135][ T7192] device dummy0 entered promiscuous mode [ 365.618809][ T7192] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 365.684833][ T7192] Cannot create hsr debugfs directory [ 365.777630][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 365.993267][ T41] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 366.215838][ T3596] usb 1-1: USB disconnect, device number 30 [ 366.283739][ T41] usb 3-1: Using ep0 maxpacket: 8 [ 366.443337][ T41] usb 3-1: config 137 has an invalid interface number: 211 but max is 0 [ 366.477980][ T41] usb 3-1: config 137 has no interface number 0 [ 366.542526][ T41] usb 3-1: config 137 interface 211 altsetting 233 has an invalid endpoint with address 0x0, skipping [ 366.694431][ T41] usb 3-1: config 137 interface 211 altsetting 233 endpoint 0x8E has an invalid bInterval 127, changing to 10 [ 366.800412][ T41] usb 3-1: config 137 interface 211 altsetting 233 has an invalid endpoint with address 0x0, skipping [ 366.917357][ T41] usb 3-1: config 137 interface 211 altsetting 233 endpoint 0x9 has an invalid bInterval 72, changing to 7 [ 367.012154][ T41] usb 3-1: config 137 interface 211 has no altsetting 0 [ 367.267961][ T7232] loop3: detected capacity change from 0 to 2048 [ 367.333157][ T41] usb 3-1: string descriptor 0 read error: -22 [ 367.344077][ T41] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 367.441494][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.500716][ T7232] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 367.585502][ T7230] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 367.636457][ T41] ums_eneub6250 3-1:137.211: USB Mass Storage device detected [ 367.659131][ T26] audit: type=1800 audit(1720334635.450:1309): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.823" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 368.211275][ T155] usb 2-1: device descriptor read/all, error -71 [ 368.367353][ T7245] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 369.027337][ T41] usb 3-1: USB disconnect, device number 34 [ 369.083025][ T26] audit: type=1804 audit(1720334636.650:1310): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.823" name="/newroot/105/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 369.138819][ T5121] EXT4-fs (loop3): unmounting filesystem. [ 369.213004][ T155] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 369.234502][ T7254] loop0: detected capacity change from 0 to 256 [ 369.462803][ T41] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 369.631358][ T7261] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 369.863325][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.000197][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.261757][ T41] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 370.352845][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.374495][ T41] usb 5-1: config 0 descriptor?? [ 370.542774][ T155] usb 2-1: device not accepting address 37, error -71 [ 370.560178][ T155] usb usb2-port1: attempt power cycle [ 371.252540][ T7250] program syz.4.827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.333594][ T7250] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 371.506011][ T7269] loop3: detected capacity change from 0 to 2048 [ 371.575048][ T7269] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 371.657820][ T26] audit: type=1800 audit(1720334639.450:1311): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.833" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 371.772877][ T26] audit: type=1804 audit(1720334639.510:1312): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.833" name="/newroot/107/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 371.788946][ T7248] loop2: detected capacity change from 0 to 32768 [ 371.815815][ T155] usb 5-1: USB disconnect, device number 31 [ 371.861970][ T5121] EXT4-fs (loop3): unmounting filesystem. [ 371.896810][ T7258] loop0: detected capacity change from 0 to 32768 [ 371.955249][ T7271] loop1: detected capacity change from 0 to 8192 [ 371.973488][ T7271] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "" [ 372.406911][ T7286] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 377.023365][ T7310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.843'. [ 377.076893][ T155] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 377.137383][ T3559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.147357][ T3559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.156531][ T3559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.166113][ T7310] x_tables: duplicate underflow at hook 1 [ 377.190692][ T3559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.206116][ T3559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 377.213838][ T3559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.255326][ T7312] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 377.322860][ T155] usb 3-1: Using ep0 maxpacket: 8 [ 377.522963][ T155] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 377.531262][ T155] usb 3-1: can't read configurations, error -71 [ 377.668232][ T7323] syz.2.847 uses obsolete (PF_INET,SOCK_PACKET) [ 378.292512][ T7313] chnl_net:caif_netlink_parms(): no params data found [ 378.543359][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.549798][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.770260][ T7336] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 379.323078][ T3561] Bluetooth: hci3: command tx timeout [ 379.493461][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.500602][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.513246][ T7313] device bridge_slave_0 entered promiscuous mode [ 379.521510][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.529571][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.548090][ T7313] device bridge_slave_1 entered promiscuous mode [ 379.654857][ T7313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.698352][ T7313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.785502][ T7319] loop1: detected capacity change from 0 to 32768 [ 379.819823][ T7319] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.846 (7319) [ 379.907976][ T7319] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 379.950465][ T7313] team0: Port device team_slave_0 added [ 379.954543][ T7319] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 379.983963][ T7313] team0: Port device team_slave_1 added [ 380.047270][ T7319] BTRFS info (device loop1): using free space tree [ 380.180802][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.382901][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.141004][ T7313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.333204][ T7319] BTRFS error (device loop1): open_ctree failed [ 381.442880][ T3559] Bluetooth: hci3: command tx timeout [ 381.449053][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.542899][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.610188][ T7313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.852107][ T7313] device hsr_slave_0 entered promiscuous mode [ 382.915348][ T7313] device hsr_slave_1 entered promiscuous mode [ 382.928794][ T7313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.949925][ T7313] Cannot create hsr debugfs directory [ 383.192841][ T4474] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 383.988438][ T7373] loop2: detected capacity change from 0 to 32768 [ 384.072947][ T3561] Bluetooth: hci3: command tx timeout [ 384.107358][ T7373] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.855 (7373) [ 384.241585][ T7373] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 384.273354][ T7373] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 384.284316][ T4474] usb 1-1: Using ep0 maxpacket: 8 [ 384.302998][ T7373] BTRFS info (device loop2): using free space tree [ 384.403214][ T4474] usb 1-1: config 137 has an invalid interface number: 211 but max is 0 [ 384.422805][ T4474] usb 1-1: config 137 has no interface number 0 [ 384.453133][ T4474] usb 1-1: config 137 interface 211 altsetting 233 has an invalid endpoint with address 0x0, skipping [ 384.478667][ T4474] usb 1-1: config 137 interface 211 altsetting 233 endpoint 0x8E has an invalid bInterval 127, changing to 10 [ 384.498271][ T4474] usb 1-1: config 137 interface 211 altsetting 233 endpoint 0x9 has an invalid bInterval 72, changing to 7 [ 384.559093][ T4474] usb 1-1: config 137 interface 211 has no altsetting 0 [ 384.563220][ T7373] BTRFS info (device loop2): enabling ssd optimizations [ 384.610241][ T7405] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 384.679852][ T3844] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.831118][ T4474] usb 1-1: string descriptor 0 read error: -22 [ 384.847768][ T4474] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 384.878385][ T4474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.901130][ T3555] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 384.933895][ T3844] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.966162][ T4474] ums_eneub6250 1-1:137.211: USB Mass Storage device detected [ 385.547798][ T3844] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.642112][ T4367] usb 1-1: USB disconnect, device number 31 [ 385.799769][ T3844] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.904424][ T7426] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 386.114104][ T3559] Bluetooth: hci3: command tx timeout [ 387.992969][ T7] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 388.252896][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 388.373252][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 388.404844][ T7] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 388.449700][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.483258][ T7] usb 2-1: config 0 descriptor?? [ 388.636794][ T7435] loop2: detected capacity change from 0 to 32768 [ 388.756407][ T7435] XFS (loop2): Mounting V5 Filesystem [ 388.773692][ T7433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.866'. [ 388.841875][ T26] audit: type=1326 audit(1720334656.630:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 388.853929][ T7435] XFS (loop2): Ending clean mount [ 388.871842][ T7435] XFS (loop2): Quotacheck needed: Please wait. [ 388.894866][ T26] audit: type=1326 audit(1720334656.660:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 388.928149][ T7435] XFS (loop2): Quotacheck: Done. [ 389.019164][ T26] audit: type=1326 audit(1720334656.660:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 389.077925][ T7435] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 389.093357][ T7435] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 389.147067][ T7444] loop4: detected capacity change from 0 to 32768 [ 389.167981][ T26] audit: type=1326 audit(1720334656.660:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 389.184396][ T7444] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.871 (7444) [ 389.234089][ T7313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 389.248296][ T3555] XFS (loop2): Unmounting Filesystem [ 389.277847][ T7313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 389.325353][ T26] audit: type=1326 audit(1720334656.760:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 389.334561][ T7444] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 389.358025][ T7441] loop0: detected capacity change from 0 to 32768 [ 389.433967][ T26] audit: type=1326 audit(1720334657.010:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 389.449175][ T7444] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 389.457057][ T26] audit: type=1326 audit(1720334657.010:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ef75bd9 code=0x7ffc0000 [ 389.524211][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.540229][ T7444] BTRFS info (device loop4): using free space tree [ 389.573201][ T7313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 389.581961][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.608773][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.619266][ T7441] XFS (loop0): Mounting V5 Filesystem [ 389.632042][ T7313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.664583][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.683992][ T7] hid (null): invalid report_size 53675 [ 389.690336][ T7] hid (null): unknown global tag 0xd [ 389.704302][ T7441] XFS (loop0): Ending clean mount [ 389.709184][ T7] hid-generic 0003:0158:0100.0029: unknown main item tag 0x1 [ 389.714184][ T7441] XFS (loop0): Quotacheck needed: Please wait. [ 389.725689][ T7] hid-generic 0003:0158:0100.0029: unexpected long global item [ 389.771691][ T7] hid-generic: probe of 0003:0158:0100.0029 failed with error -22 [ 389.847710][ T7444] BTRFS info (device loop4): enabling ssd optimizations [ 389.863584][ T7441] XFS (loop0): Quotacheck: Done. [ 389.900537][ T3540] usb 2-1: USB disconnect, device number 39 [ 389.931046][ T3844] device team0 left promiscuous mode [ 389.942911][ T3844] device team_slave_0 left promiscuous mode [ 389.949685][ T3844] device team_slave_1 left promiscuous mode [ 389.982999][ T7441] overlayfs: missing 'lowerdir' [ 390.043073][ T5890] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.058241][ T3844] device dummy0 left promiscuous mode [ 390.087278][ T3844] device hsr_slave_0 left promiscuous mode [ 390.102367][ T3844] device hsr_slave_1 left promiscuous mode [ 390.157193][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.167773][ T3940] XFS (loop0): Unmounting Filesystem [ 390.178359][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.343509][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.351431][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.386576][ T3844] device bridge_slave_1 left promiscuous mode [ 390.408359][ T3844] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.448950][ T3844] device bridge_slave_0 left promiscuous mode [ 390.467351][ T3844] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.621508][ T3844] device veth1_macvtap left promiscuous mode [ 390.652892][ T3844] device veth0_macvtap left promiscuous mode [ 390.690941][ T7498] loop2: detected capacity change from 0 to 32768 [ 390.739509][ T7498] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.873 (7498) [ 390.802101][ T7498] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.824487][ T7498] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 390.842920][ T7] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 390.843206][ T7498] BTRFS info (device loop2): using free space tree [ 390.933872][ T7507] loop0: detected capacity change from 0 to 4096 [ 390.994888][ T7498] BTRFS info (device loop2): enabling ssd optimizations [ 391.082868][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 391.145241][ T3555] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 391.205263][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 391.223529][ T7] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 391.239830][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.287258][ T7] usb 5-1: config 0 descriptor?? [ 391.531613][ T7502] netlink: 16 bytes leftover after parsing attributes in process `syz.4.874'. [ 391.571595][ T26] audit: type=1326 audit(1720334659.360:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 391.610094][ T26] audit: type=1326 audit(1720334659.360:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 391.643355][ T26] audit: type=1326 audit(1720334659.360:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 391.770711][ T3844] team0 (unregistering): Port device team_slave_1 removed [ 391.847937][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.857226][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.868354][ T3844] team0 (unregistering): Port device team_slave_0 removed [ 391.874755][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.895676][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.948092][ T3844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.964854][ T7534] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 392.320507][ T3844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.604099][ T7] hid (null): invalid report_size 53675 [ 392.614654][ T7] hid-generic 0003:0158:0100.002A: unknown main item tag 0x1 [ 392.624715][ T7] hid-generic 0003:0158:0100.002A: unexpected long global item [ 392.632946][ T7] hid-generic: probe of 0003:0158:0100.002A failed with error -22 [ 392.645164][ T7] usb 5-1: USB disconnect, device number 32 [ 393.260120][ T7543] loop2: detected capacity change from 0 to 4096 [ 393.387438][ T7543] ntfs3: loop2: Failed to load $AttrDef -> 0 [ 393.476462][ T3844] bond0 (unregistering): Released all slaves [ 393.744680][ T7313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.801021][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 393.819752][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 393.871385][ T7313] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.940319][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 393.949997][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.979240][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.986475][ T3627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.069284][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.092631][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 394.103664][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 394.112260][ T4594] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.119486][ T4594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.178381][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 394.222787][ T3627] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 394.423683][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 394.432636][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 394.444280][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 394.492811][ T3627] usb 1-1: Using ep0 maxpacket: 16 [ 394.814163][ T3627] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 394.898524][ T3627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.059980][ T3627] usb 1-1: Product: syz [ 395.077425][ T3627] usb 1-1: Manufacturer: syz [ 395.082070][ T3627] usb 1-1: SerialNumber: syz [ 395.132897][ T3627] usb 1-1: config 0 descriptor?? [ 395.197298][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 395.207504][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 395.216546][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 395.225403][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.309361][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 395.327617][ T3650] udevd[3650]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.350913][ T7313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.386556][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 395.394656][ T3906] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 395.415614][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.637601][ T7556] loop1: detected capacity change from 0 to 32768 [ 395.640341][ T3594] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 395.722216][ T7556] XFS (loop1): Mounting V5 Filesystem [ 395.791864][ T7556] XFS (loop1): Ending clean mount [ 395.817168][ T7556] XFS (loop1): Quotacheck needed: Please wait. [ 395.830140][ T3627] usb 1-1: USB disconnect, device number 32 [ 395.911431][ T7556] XFS (loop1): Quotacheck: Done. [ 395.913241][ T3906] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 395.936657][ T3906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.952531][ T3906] usb 5-1: Product: syz [ 395.957117][ T3906] usb 5-1: Manufacturer: syz [ 395.961754][ T3906] usb 5-1: SerialNumber: syz [ 395.980667][ T3906] usb 5-1: config 0 descriptor?? [ 395.987127][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 395.997219][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 396.010338][ T7313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.037571][ T7556] overlayfs: missing 'lowerdir' [ 396.043008][ T3594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.056294][ T3906] gspca_main: pac207-2.14.0 probing 093a:2476 [ 396.072873][ T3594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.089922][ T3550] XFS (loop1): Unmounting Filesystem [ 396.102796][ T3594] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 396.105217][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 396.111864][ T3594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.125213][ T3594] usb 3-1: config 0 descriptor?? [ 396.139858][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 396.179591][ T3906] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 396.180440][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 396.209108][ T3906] usb 5-1: Found UVC 0.00 device syz (093a:2476) [ 396.212396][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 396.222830][ T3906] usb 5-1: No valid video chain found. [ 396.233900][ T7313] device veth0_vlan entered promiscuous mode [ 396.260853][ T7561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.263216][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 396.283051][ T7561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.298893][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 396.339330][ T3627] usb 5-1: USB disconnect, device number 33 [ 396.350692][ T7313] device veth1_vlan entered promiscuous mode [ 396.390226][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 396.451642][ T7573] program syz.2.887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.463937][ T7573] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 396.504983][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.514614][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.585575][ T7313] device veth0_macvtap entered promiscuous mode [ 396.616010][ T7313] device veth1_macvtap entered promiscuous mode [ 396.668563][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.689681][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.711053][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.747566][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.778504][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.809743][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.830685][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.854487][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.900221][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.922870][ T6574] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 396.932578][ T4594] usb 3-1: USB disconnect, device number 37 [ 396.966160][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 396.982511][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 397.005654][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 397.049450][ T3904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.081622][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.102529][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.113306][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.132957][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.143146][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.162795][ T6574] usb 1-1: Using ep0 maxpacket: 16 [ 397.168474][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.185486][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.206953][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.222145][ T7601] loop4: detected capacity change from 0 to 4096 [ 397.230861][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.256689][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 397.283164][ T6574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 397.296378][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.310333][ T6574] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 397.323794][ T7313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.332907][ T6574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.341964][ T7313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.358803][ T7313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.368570][ T6574] usb 1-1: config 0 descriptor?? [ 397.387810][ T7313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.616080][ T3842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.634288][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 397.634305][ T26] audit: type=1326 audit(1720334665.430:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 397.643136][ T3842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.744976][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.763470][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.776802][ T26] audit: type=1326 audit(1720334665.470:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 397.779410][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 397.851475][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 397.876172][ T26] audit: type=1326 audit(1720334665.470:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 397.898976][ T26] audit: type=1326 audit(1720334665.470:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 397.921180][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.988535][ T26] audit: type=1326 audit(1720334665.470:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 398.028391][ T26] audit: type=1326 audit(1720334665.470:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 398.074303][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.112822][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.122592][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.142829][ T3627] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 398.156711][ T26] audit: type=1326 audit(1720334665.470:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 398.206349][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.233969][ T6574] hid (null): invalid report_size 53675 [ 398.267696][ T6574] hid-generic 0003:0158:0100.002C: unknown main item tag 0x1 [ 398.451436][ T26] audit: type=1326 audit(1720334665.470:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 398.474112][ T6574] hid-generic 0003:0158:0100.002C: unexpected long global item [ 398.483623][ T6574] hid-generic: probe of 0003:0158:0100.002C failed with error -22 [ 398.497991][ T6574] usb 1-1: USB disconnect, device number 33 [ 398.553452][ T26] audit: type=1326 audit(1720334665.470:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 398.894071][ T3627] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 398.956420][ T3627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.030897][ T26] audit: type=1326 audit(1720334665.470:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.0.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 399.053247][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.170148][ T3627] usb 5-1: Product: syz [ 399.201785][ T3627] usb 5-1: Manufacturer: syz [ 399.227891][ T3627] usb 5-1: SerialNumber: syz [ 399.306893][ T3627] usb 5-1: config 0 descriptor?? [ 399.415017][ T3627] gspca_main: pac207-2.14.0 probing 093a:2476 [ 399.506037][ T7621] loop3: detected capacity change from 0 to 4096 [ 399.532896][ T3627] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 399.547379][ T3627] usb 5-1: Found UVC 0.00 device syz (093a:2476) [ 399.581961][ T3627] usb 5-1: No valid video chain found. [ 399.598059][ T7625] loop2: detected capacity change from 0 to 4096 [ 399.616576][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.637400][ T7621] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 399.667465][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.784540][ T4594] usb 5-1: USB disconnect, device number 34 [ 400.533044][ T6574] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 400.875427][ T7643] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 401.518163][ T3559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 401.528750][ T3559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 401.543025][ T3559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 401.551171][ T3559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 401.560734][ T3559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 401.568836][ T3559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 401.982982][ T6574] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 402.022841][ T6574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.030898][ T6574] usb 3-1: Product: syz [ 402.043357][ T7651] loop4: detected capacity change from 0 to 4096 [ 402.070278][ T7644] chnl_net:caif_netlink_parms(): no params data found [ 402.093139][ T6574] usb 3-1: Manufacturer: syz [ 402.097805][ T6574] usb 3-1: SerialNumber: syz [ 402.106788][ T7633] loop0: detected capacity change from 0 to 32768 [ 402.144259][ T6574] usb 3-1: config 0 descriptor?? [ 402.225399][ T6574] gspca_main: pac207-2.14.0 probing 093a:2476 [ 402.444780][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.515403][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.544635][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.554031][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.563183][ T7644] device bridge_slave_0 entered promiscuous mode [ 402.606150][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.655596][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.691728][ T7644] device bridge_slave_1 entered promiscuous mode [ 402.769709][ T6574] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 402.778789][ T6574] usb 3-1: Found UVC 0.00 device syz (093a:2476) [ 402.785677][ T6574] usb 3-1: No valid video chain found. [ 402.794220][ T6574] usb 3-1: USB disconnect, device number 38 [ 402.950711][ T7644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.970005][ T7644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.982261][ T7666] netlink: 52 bytes leftover after parsing attributes in process `syz.1.909'. [ 403.028927][ T7644] team0: Port device team_slave_0 added [ 403.038064][ T7644] team0: Port device team_slave_1 added [ 403.069930][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.077238][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.103312][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.119643][ T7644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.146808][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.157271][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.202862][ T4594] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 403.266106][ T7644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.341442][ T7644] device hsr_slave_0 entered promiscuous mode [ 403.365874][ T7644] device hsr_slave_1 entered promiscuous mode [ 403.473224][ T4594] usb 5-1: Using ep0 maxpacket: 16 [ 403.542761][ T3627] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 403.603100][ T4594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 403.621416][ T4594] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 403.641311][ T4594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.649962][ T3561] Bluetooth: hci3: command tx timeout [ 403.687459][ T4594] usb 5-1: config 0 descriptor?? [ 403.811433][ T7644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.968372][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 403.968390][ T26] audit: type=1326 audit(1720334671.760:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 404.004290][ T7644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.059885][ T26] audit: type=1326 audit(1720334671.760:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 404.109612][ T26] audit: type=1326 audit(1720334671.760:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 404.135905][ T3627] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 404.148544][ T7676] loop0: detected capacity change from 0 to 4096 [ 404.157608][ T26] audit: type=1326 audit(1720334671.760:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 404.163112][ T3627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.182577][ T26] audit: type=1326 audit(1720334671.760:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 404.213255][ T6574] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 404.232006][ T26] audit: type=1326 audit(1720334671.760:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 404.252736][ T3627] usb 3-1: Product: syz [ 404.255840][ T26] audit: type=1326 audit(1720334671.760:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 404.258691][ T3627] usb 3-1: Manufacturer: syz [ 404.282576][ T26] audit: type=1326 audit(1720334671.760:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 404.310661][ T26] audit: type=1326 audit(1720334671.760:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 404.333886][ T7676] ntfs3: loop0: Failed to load $AttrDef -> 0 [ 404.342655][ T26] audit: type=1326 audit(1720334671.760:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 404.343367][ T3627] usb 3-1: SerialNumber: syz [ 404.384471][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.403174][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.430890][ T3627] usb 3-1: config 0 descriptor?? [ 404.437405][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.459338][ T7644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.473738][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.500672][ T4594] hid (null): invalid report_size 53675 [ 404.508659][ T3627] gspca_main: pac207-2.14.0 probing 093a:2476 [ 404.512961][ T6574] usb 2-1: Using ep0 maxpacket: 8 [ 404.519991][ T4594] hid-generic 0003:0158:0100.002D: unknown main item tag 0x1 [ 404.542938][ T4594] hid-generic 0003:0158:0100.002D: unexpected long global item [ 404.551175][ T4594] hid-generic: probe of 0003:0158:0100.002D failed with error -22 [ 404.614698][ T7644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.642983][ T6574] usb 2-1: config 137 has an invalid interface number: 211 but max is 0 [ 404.651373][ T6574] usb 2-1: config 137 has no interface number 0 [ 404.658399][ T6574] usb 2-1: config 137 interface 211 altsetting 233 has an invalid endpoint with address 0x0, skipping [ 404.663116][ T3627] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 404.686874][ T3627] usb 3-1: Found UVC 0.00 device syz (093a:2476) [ 404.695856][ T3627] usb 3-1: No valid video chain found. [ 404.705337][ T6574] usb 2-1: config 137 interface 211 altsetting 233 endpoint 0x8E has an invalid bInterval 127, changing to 10 [ 404.729996][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.741537][ T6574] usb 2-1: config 137 interface 211 altsetting 233 has an invalid endpoint with address 0x0, skipping [ 404.746592][ T3627] usb 5-1: USB disconnect, device number 35 [ 404.755613][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.766746][ T6574] usb 2-1: config 137 interface 211 altsetting 233 endpoint 0x9 has an invalid bInterval 72, changing to 7 [ 404.845486][ T4366] usb 3-1: USB disconnect, device number 39 [ 404.956223][ T6574] usb 2-1: config 137 interface 211 has no altsetting 0 [ 405.140256][ T7644] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 405.161962][ T7644] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 405.189696][ T7644] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 405.202858][ T6574] usb 2-1: string descriptor 0 read error: -22 [ 405.209175][ T6574] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 405.396593][ T6574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.419015][ T7644] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 405.453892][ T6574] ums_eneub6250 2-1:137.211: USB Mass Storage device detected [ 405.517026][ T7690] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 405.722822][ T3561] Bluetooth: hci3: command tx timeout [ 406.284138][ T6574] usb 2-1: USB disconnect, device number 40 [ 406.426813][ T7700] 9pnet_fd: Insufficient options for proto=fd [ 406.732187][ T7702] loop2: detected capacity change from 0 to 4096 [ 406.831222][ T7644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.945013][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 406.961699][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.065364][ T7644] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.121023][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.134677][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.158947][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.166236][ T6574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.253794][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.262064][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.280482][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.306004][ T3906] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.313236][ T3906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.423224][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.699434][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.708763][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.719924][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.729493][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 407.743997][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.763078][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 407.802958][ T3561] Bluetooth: hci3: command tx timeout [ 407.838338][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 407.847270][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.879896][ T7644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.903058][ T3627] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 407.922187][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 407.947149][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 407.976659][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.292853][ T3627] usb 3-1: Using ep0 maxpacket: 16 [ 408.400594][ T7712] loop1: detected capacity change from 0 to 32768 [ 408.433145][ T3627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 408.449161][ T3627] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 408.471771][ T3627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.508058][ T3627] usb 3-1: config 0 descriptor?? [ 408.582619][ T3844] device hsr_slave_0 left promiscuous mode [ 408.594043][ T3844] device hsr_slave_1 left promiscuous mode [ 408.604361][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.622119][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.646102][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.660167][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.710903][ T3844] device bridge_slave_1 left promiscuous mode [ 408.741414][ T3844] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.757201][ T7721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.773146][ T7721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.787587][ T3844] device bridge_slave_0 left promiscuous mode [ 408.806565][ T3844] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.856813][ T7721] syz.2.926 (7721): drop_caches: 2 [ 409.017232][ T3844] device veth1_macvtap left promiscuous mode [ 409.031710][ T3844] device veth0_macvtap left promiscuous mode [ 409.039314][ T3844] device veth1_vlan left promiscuous mode [ 409.067219][ T3844] device veth0_vlan left promiscuous mode [ 409.154265][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.174661][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.205410][ T3627] hid-generic 0003:0158:0100.002E: unexpected long global item [ 409.216349][ T3627] hid-generic: probe of 0003:0158:0100.002E failed with error -22 [ 409.323001][ T4366] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 409.340436][ T7732] loop0: detected capacity change from 0 to 32768 [ 409.347454][ T7] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 409.417405][ T7732] XFS (loop0): Mounting V5 Filesystem [ 409.458029][ T7732] XFS (loop0): Ending clean mount [ 409.468271][ T7732] XFS (loop0): Quotacheck needed: Please wait. [ 409.537653][ T7732] XFS (loop0): Quotacheck: Done. [ 409.583965][ T4366] usb 5-1: Using ep0 maxpacket: 16 [ 409.724225][ T4366] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 409.735833][ T4366] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 409.746497][ T4366] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 409.778366][ T3940] XFS (loop0): Unmounting Filesystem [ 409.879364][ T3561] Bluetooth: hci3: command tx timeout [ 409.886923][ T7] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 409.900301][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.909152][ T7] usb 2-1: Product: syz [ 409.913509][ T7] usb 2-1: Manufacturer: syz [ 409.918217][ T7] usb 2-1: SerialNumber: syz [ 409.925400][ T7] usb 2-1: config 0 descriptor?? [ 409.956199][ T4366] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.965195][ T7] gspca_main: pac207-2.14.0 probing 093a:2476 [ 409.966047][ T4366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.980559][ T4366] usb 5-1: Product:  [ 409.985300][ T4366] usb 5-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 410.009187][ T4366] usb 5-1: SerialNumber: syz [ 410.092761][ T3844] team0 (unregistering): Port device team_slave_1 removed [ 410.123129][ T7] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 410.131568][ T7] usb 2-1: Found UVC 0.00 device syz (093a:2476) [ 410.146683][ T7] usb 2-1: No valid video chain found. [ 410.198342][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.223261][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.259832][ T7] usb 2-1: USB disconnect, device number 41 [ 410.270206][ T3844] team0 (unregistering): Port device team_slave_0 removed [ 410.343828][ T3844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.397004][ T3844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.496722][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.507583][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.572918][ T4366] cdc_ncm 5-1:1.0: bind() failure [ 410.590925][ T4366] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 410.600516][ T3817] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 410.602147][ T4366] cdc_ncm 5-1:1.1: bind() failure [ 410.631173][ T4366] usb 5-1: USB disconnect, device number 36 [ 410.967064][ T3817] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 410.975971][ T3817] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 411.023506][ T3844] bond0 (unregistering): Released all slaves [ 411.142932][ T3817] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 411.152307][ T3817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.178710][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.193588][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.212487][ T3817] usb 1-1: Product: syz [ 411.229278][ T3817] usb 1-1: Manufacturer: syz [ 411.240429][ T7644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.262141][ T3817] usb 1-1: SerialNumber: syz [ 411.284225][ T7] usb 3-1: USB disconnect, device number 40 [ 411.299278][ T3817] usb 1-1: config 0 descriptor?? [ 411.363992][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 411.373579][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 411.429229][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 411.442165][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 411.461825][ T7644] device veth0_vlan entered promiscuous mode [ 411.470804][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 411.471398][ T7758] netlink: 52 bytes leftover after parsing attributes in process `syz.2.933'. [ 411.479521][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 411.519203][ T7644] device veth1_vlan entered promiscuous mode [ 411.598498][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 411.607518][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 411.623625][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 411.643317][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 411.665952][ T7644] device veth0_macvtap entered promiscuous mode [ 411.706157][ T7644] device veth1_macvtap entered promiscuous mode [ 411.763075][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.778658][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.799970][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.820068][ T7750] loop1: detected capacity change from 0 to 32768 [ 411.827564][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.852363][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.869255][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.880205][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.891300][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.903713][ T7644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.911572][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 411.922223][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 411.953357][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 411.962485][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.982190][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.008069][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.024185][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.038698][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.051284][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.076390][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.091407][ T7644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.105034][ T7644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.120922][ T7644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.132869][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 412.148033][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 412.165355][ T7644] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.181724][ T7644] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.191348][ T7644] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.216846][ T7644] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.427797][ T3842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.453433][ T3842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.496193][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 412.533520][ T3842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.549104][ T3842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.590270][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 412.652935][ T4594] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 413.057310][ T7772] loop3: detected capacity change from 0 to 4096 [ 413.082938][ T4594] usb 3-1: Using ep0 maxpacket: 16 [ 413.372991][ T4594] usb 3-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 413.394517][ T4594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.416169][ T4594] usb 3-1: Product: syz [ 413.427063][ T4594] usb 3-1: Manufacturer: syz [ 413.438425][ T4594] usb 3-1: SerialNumber: syz [ 413.462031][ T4594] usb 3-1: config 0 descriptor?? [ 413.596629][ T3650] udevd[3650]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.929213][ T3817] usb 1-1: USB disconnect, device number 34 [ 414.870728][ T7767] device team0 entered promiscuous mode [ 414.902802][ T7767] device team_slave_0 entered promiscuous mode [ 414.972988][ T7767] device team_slave_1 entered promiscuous mode [ 415.009423][ T7767] device dummy0 entered promiscuous mode [ 415.035330][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 415.104027][ T3906] usb 3-1: USB disconnect, device number 41 [ 415.332796][ T3627] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 415.383235][ T7779] loop3: detected capacity change from 0 to 32768 [ 415.503864][ T7779] XFS (loop3): Mounting V5 Filesystem [ 415.573011][ T3627] usb 5-1: Using ep0 maxpacket: 16 [ 415.654757][ T7779] XFS (loop3): Ending clean mount [ 415.848332][ T7779] process 'syz.3.939' launched '/dev/fd/5/./file0' with NULL argv: empty string added [ 415.858442][ T3627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 415.879963][ T3627] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 415.903818][ T3627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.932477][ T3627] usb 5-1: config 0 descriptor?? [ 416.019736][ T7811] netlink: 52 bytes leftover after parsing attributes in process `syz.2.946'. [ 416.073447][ T7644] XFS (loop3): Unmounting Filesystem [ 416.202738][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.225387][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.317101][ T7792] syz.4.943 (7792): drop_caches: 2 [ 416.565248][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.593229][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.628694][ T3627] hid-generic 0003:0158:0100.002F: unexpected long global item [ 416.649620][ T3627] hid-generic: probe of 0003:0158:0100.002F failed with error -22 [ 416.899332][ T3627] usb 5-1: USB disconnect, device number 37 [ 417.036604][ T7818] loop0: detected capacity change from 0 to 4096 [ 417.842798][ T3627] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 418.123025][ T3627] usb 3-1: Using ep0 maxpacket: 16 [ 418.263468][ T3627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 418.293053][ T4594] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 418.360473][ T3627] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 418.487305][ T3627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.681262][ T3627] usb 3-1: config 0 descriptor?? [ 418.733190][ T4594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.781820][ T4594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.850770][ T4594] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 418.912829][ T4594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.953727][ T4594] usb 1-1: config 0 descriptor?? [ 419.000781][ T7826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.951'. [ 419.041710][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 419.041726][ T26] audit: type=1326 audit(1720334686.830:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1399375bd9 code=0x7ffc0000 [ 419.101326][ T26] audit: type=1326 audit(1720334686.870:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f1399375bd9 code=0x7ffc0000 [ 419.149476][ T26] audit: type=1326 audit(1720334686.870:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1399375bd9 code=0x7ffc0000 [ 419.180585][ T26] audit: type=1326 audit(1720334686.870:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1399375bd9 code=0x7ffc0000 [ 419.213318][ T26] audit: type=1326 audit(1720334686.870:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1399375bd9 code=0x7ffc0000 [ 419.243207][ T26] audit: type=1326 audit(1720334686.870:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1399375bd9 code=0x7ffc0000 [ 419.265612][ T7834] program syz.0.952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.265659][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.288156][ T26] audit: type=1326 audit(1720334686.870:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1399375bd9 code=0x7ffc0000 [ 419.292830][ T7834] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 419.320267][ T26] audit: type=1326 audit(1720334686.870:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f1399375bd9 code=0x7ffc0000 [ 419.351393][ T26] audit: type=1326 audit(1720334686.870:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1399375bd9 code=0x7ffc0000 [ 419.380789][ T26] audit: type=1326 audit(1720334686.870:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1399375bd9 code=0x7ffc0000 [ 419.442809][ T3906] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 419.542933][ T3627] usbhid 3-1:0.0: can't add hid device: -71 [ 419.548997][ T3627] usbhid: probe of 3-1:0.0 failed with error -71 [ 419.582350][ T3627] usb 3-1: USB disconnect, device number 42 [ 419.649322][ T7847] loop3: detected capacity change from 0 to 32768 [ 419.696375][ T3906] usb 5-1: Using ep0 maxpacket: 16 [ 419.818801][ T7] usb 1-1: USB disconnect, device number 35 [ 419.973316][ T3906] usb 5-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 420.040125][ T3906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.090362][ T3906] usb 5-1: Product: syz [ 420.121270][ T3906] usb 5-1: Manufacturer: syz [ 420.137912][ T7856] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 420.169459][ T3906] usb 5-1: SerialNumber: syz [ 420.466589][ T3906] usb 5-1: config 0 descriptor?? [ 420.969955][ T3650] udevd[3650]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.102061][ T7867] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 421.554366][ T3906] usb 5-1: USB disconnect, device number 38 [ 423.460326][ T7873] loop0: detected capacity change from 0 to 32768 [ 424.073483][ T7870] loop2: detected capacity change from 0 to 32768 [ 424.144673][ T7873] XFS (loop0): Mounting V5 Filesystem [ 424.221605][ T7870] XFS (loop2): Mounting V5 Filesystem [ 424.264681][ T7873] XFS (loop0): Ending clean mount [ 424.331308][ T7873] XFS (loop0): Quotacheck needed: Please wait. [ 424.352314][ T7870] XFS (loop2): Ending clean mount [ 424.633714][ T7873] XFS (loop0): Quotacheck: Done. [ 424.684079][ T7870] XFS (loop2): Quotacheck needed: Please wait. [ 424.695964][ T7920] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 425.143882][ T7889] loop3: detected capacity change from 0 to 8192 [ 425.217177][ T7870] XFS (loop2): Quotacheck: Done. [ 425.285343][ T3940] XFS (loop0): Unmounting Filesystem [ 425.304344][ T7889] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 425.336549][ T3555] XFS (loop2): Unmounting Filesystem [ 425.908998][ T7930] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 428.412969][ T7] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 428.462461][ T7950] loop4: detected capacity change from 0 to 32768 [ 428.553835][ T7950] XFS (loop4): Mounting V5 Filesystem [ 428.619192][ T7950] XFS (loop4): Ending clean mount [ 428.632417][ T7947] loop1: detected capacity change from 0 to 32768 [ 428.658411][ T7950] XFS (loop4): Quotacheck needed: Please wait. [ 428.727383][ T7947] XFS (loop1): Mounting V5 Filesystem [ 428.752601][ T7950] XFS (loop4): Quotacheck: Done. [ 428.783006][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.794505][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.904680][ T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 428.914684][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.934689][ T7] usb 3-1: config 0 descriptor?? [ 428.946062][ T7947] XFS (loop1): Ending clean mount [ 429.214086][ T3550] XFS (loop1): Unmounting Filesystem [ 429.265772][ T7954] program syz.2.974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.285772][ T7954] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 429.652302][ T5890] XFS (loop4): Unmounting Filesystem [ 430.180815][ T3627] usb 3-1: USB disconnect, device number 43 [ 430.382856][ T4366] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 430.423418][ T7968] loop3: detected capacity change from 0 to 32768 [ 430.518502][ T7968] XFS (loop3): Mounting V5 Filesystem [ 430.561306][ T7968] XFS (loop3): Ending clean mount [ 430.568469][ T7968] XFS (loop3): Quotacheck needed: Please wait. [ 430.833132][ T4366] usb 1-1: Using ep0 maxpacket: 16 [ 430.852107][ T7968] XFS (loop3): Quotacheck: Done. [ 430.970845][ T8004] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 430.989570][ T8005] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 431.963427][ T4366] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 432.084180][ T4366] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 432.232734][ T4366] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 432.299199][ T7644] XFS (loop3): Unmounting Filesystem [ 432.424099][ T4366] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.448933][ T4366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.468638][ T4366] usb 1-1: Product:  [ 432.482180][ T4366] usb 1-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 432.553860][ T4366] usb 1-1: SerialNumber: syz [ 433.028211][ T8007] loop1: detected capacity change from 0 to 32768 [ 433.047982][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.053591][ T8007] XFS: noikeep mount option is deprecated. [ 433.101904][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.123047][ T4594] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 433.201770][ T8007] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 433.212957][ T4366] cdc_ncm 1-1:1.0: bind() failure [ 433.221502][ T4366] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 433.229472][ T8007] XFS (loop1): Mounting V5 Filesystem [ 433.229904][ T4366] cdc_ncm 1-1:1.1: bind() failure [ 433.244291][ T4366] usb 1-1: USB disconnect, device number 36 [ 433.344410][ T8015] loop2: detected capacity change from 0 to 32768 [ 433.372834][ T8015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.994 (8015) [ 433.437732][ T8015] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 433.477740][ T8015] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 433.489100][ T8007] XFS (loop1): Ending clean mount [ 433.536398][ T8015] BTRFS info (device loop2): using free space tree [ 433.668815][ T3550] XFS (loop1): Unmounting Filesystem [ 433.693085][ T4594] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 433.721053][ T4594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.751567][ T4594] usb 5-1: Product: syz [ 433.792496][ T4594] usb 5-1: Manufacturer: syz [ 433.809501][ T4594] usb 5-1: SerialNumber: syz [ 433.874027][ T4594] usb 5-1: config 0 descriptor?? [ 433.903356][ T8015] BTRFS info (device loop2): enabling ssd optimizations [ 433.934858][ T4594] gspca_main: pac207-2.14.0 probing 093a:2476 [ 434.249460][ T4594] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 434.259671][ T4594] usb 5-1: Found UVC 0.00 device syz (093a:2476) [ 434.267713][ T4594] usb 5-1: No valid video chain found. [ 434.278849][ T4594] usb 5-1: USB disconnect, device number 39 [ 434.392963][ T8050] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 434.425598][ T8050] CIFS mount error: No usable UNC path provided in device string! [ 434.425598][ T8050] [ 434.438419][ T8050] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 434.853545][ T8024] loop3: detected capacity change from 0 to 8192 [ 434.918626][ T3555] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 434.959302][ T8024] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 435.280053][ T8049] loop0: detected capacity change from 0 to 32768 [ 435.413595][ T8049] XFS (loop0): Mounting V5 Filesystem [ 435.536971][ T8049] XFS (loop0): Ending clean mount [ 435.556104][ T8049] XFS (loop0): Quotacheck needed: Please wait. [ 435.689983][ T8049] XFS (loop0): Quotacheck: Done. [ 436.018157][ T3940] XFS (loop0): Unmounting Filesystem [ 436.066424][ T8071] loop2: detected capacity change from 0 to 4096 [ 436.774928][ T8083] program syz.0.1002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.923079][ T14] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 437.091880][ T8074] loop1: detected capacity change from 0 to 32768 [ 437.222463][ T8074] XFS (loop1): Mounting V5 Filesystem [ 437.452982][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.984078][ T8074] XFS (loop1): Ending clean mount [ 438.001480][ T8074] XFS (loop1): Quotacheck needed: Please wait. [ 438.090893][ T8074] XFS (loop1): Quotacheck: Done. [ 438.193193][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.203749][ T14] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 438.212907][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.222894][ T14] usb 3-1: config 0 descriptor?? [ 438.322909][ T8074] overlayfs: './file0' not a directory [ 438.412858][ T3550] XFS (loop1): Unmounting Filesystem [ 438.597139][ T8081] program syz.2.1003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.629419][ T8081] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 438.722858][ T4474] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 439.156990][ T3561] Bluetooth: hci3: command tx timeout [ 439.472907][ T8105] loop3: detected capacity change from 0 to 32768 [ 439.526555][ T8105] XFS (loop3): Mounting V5 Filesystem [ 439.602272][ T4594] usb 3-1: USB disconnect, device number 44 [ 439.625506][ T8105] XFS (loop3): Ending clean mount [ 439.635366][ T8105] XFS (loop3): Quotacheck needed: Please wait. [ 439.739343][ T8105] XFS (loop3): Quotacheck: Done. [ 439.923152][ T4474] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 439.932259][ T4474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.964268][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.970617][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.999503][ T4474] usb 5-1: Product: syz [ 440.028786][ T4474] usb 5-1: Manufacturer: syz [ 440.049936][ T4474] usb 5-1: SerialNumber: syz [ 440.406696][ T8131] loop0: detected capacity change from 0 to 40427 [ 440.416253][ T4474] usb 5-1: config 0 descriptor?? [ 440.464046][ T7644] XFS (loop3): Unmounting Filesystem [ 440.471240][ T4474] gspca_main: pac207-2.14.0 probing 093a:2476 [ 440.518264][ T8131] F2FS-fs (loop0): Found nat_bits in checkpoint [ 440.583721][ T8131] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 440.593273][ T4474] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 440.603560][ T4474] usb 5-1: Found UVC 0.00 device syz (093a:2476) [ 440.610050][ T4474] usb 5-1: No valid video chain found. [ 440.625042][ T8142] program syz.2.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.651182][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 440.651198][ T26] audit: type=1804 audit(1720334708.450:1497): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1012" name="/newroot/196/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 440.706463][ T3817] usb 5-1: USB disconnect, device number 40 [ 441.474401][ T8151] loop3: detected capacity change from 0 to 4096 [ 441.502860][ T3940] syz-executor: attempt to access beyond end of device [ 441.502860][ T3940] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 441.906219][ T3817] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 442.153026][ T3817] usb 5-1: Using ep0 maxpacket: 16 [ 442.188467][ T3904] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 442.282990][ T3817] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 442.305138][ T3817] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 442.326659][ T3817] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 442.362793][ T4474] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 442.442861][ T3904] usb 4-1: Using ep0 maxpacket: 16 [ 442.493066][ T3817] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.502345][ T3817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.522885][ T3817] usb 5-1: Product:  [ 442.527110][ T3817] usb 5-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 442.578361][ T3817] usb 5-1: SerialNumber: syz [ 442.583467][ T3904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 442.620450][ T3904] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 442.629901][ T4474] usb 1-1: Using ep0 maxpacket: 16 [ 442.659107][ T3904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.683467][ T3904] usb 4-1: config 0 descriptor?? [ 442.753117][ T4474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 442.772818][ T4474] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 442.772839][ T153] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 442.782310][ T4474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.804931][ T4474] usb 1-1: config 0 descriptor?? [ 442.929441][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.954609][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.965890][ T8166] loop1: detected capacity change from 0 to 32768 [ 443.020117][ T8159] syz.3.1021 (8159): drop_caches: 2 [ 443.029620][ T8166] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1023 (8166) [ 443.050636][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.066822][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.092792][ T153] usb 3-1: Using ep0 maxpacket: 16 [ 443.099785][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.113155][ T8166] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 443.121530][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.153964][ T8166] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 443.172884][ T3817] cdc_ncm 5-1:1.0: bind() failure [ 443.193088][ T8166] BTRFS info (device loop1): using free space tree [ 443.206843][ T3817] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 443.224118][ T8161] syz.0.1019 (8161): drop_caches: 2 [ 443.238278][ T3817] cdc_ncm 5-1:1.1: bind() failure [ 443.250568][ T3817] usb 5-1: USB disconnect, device number 41 [ 443.253191][ T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 443.299352][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.311791][ T153] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 443.332868][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.342927][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.366496][ T3904] hid-generic 0003:0158:0100.0033: unexpected long global item [ 443.375034][ T8166] BTRFS info (device loop1): enabling ssd optimizations [ 443.383251][ T3904] hid-generic: probe of 0003:0158:0100.0033 failed with error -22 [ 443.390640][ T153] usb 3-1: config 0 descriptor?? [ 443.425531][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.473489][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.584937][ T22] usb 4-1: USB disconnect, device number 33 [ 443.674994][ T4474] hid-generic 0003:0158:0100.0034: unexpected long global item [ 443.683244][ T4474] hid-generic: probe of 0003:0158:0100.0034 failed with error -22 [ 443.720845][ T8168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.796757][ T8191] CIFS mount error: No usable UNC path provided in device string! [ 443.796757][ T8191] [ 443.808524][ T8191] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 444.009976][ T22] usb 1-1: USB disconnect, device number 37 [ 444.039307][ T8168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.201774][ T8168] syz.2.1024 (8168): drop_caches: 2 [ 444.330637][ T3550] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 444.487266][ T8168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.528227][ T8168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.591475][ T153] hid-generic 0003:0158:0100.0035: unexpected long global item [ 444.610159][ T153] hid-generic: probe of 0003:0158:0100.0035 failed with error -22 [ 444.828295][ T3904] usb 3-1: USB disconnect, device number 45 [ 445.170947][ T8205] program syz.1.1026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.236860][ T8193] loop4: detected capacity change from 0 to 32768 [ 445.516046][ T8193] XFS (loop4): Mounting V5 Filesystem [ 445.556603][ T8204] loop3: detected capacity change from 0 to 40427 [ 445.651005][ T8204] F2FS-fs (loop3): Found nat_bits in checkpoint [ 445.663964][ T8193] XFS (loop4): Ending clean mount [ 445.699631][ T8193] XFS (loop4): Quotacheck needed: Please wait. [ 445.732782][ T3817] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 445.757735][ T8204] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 445.815447][ T26] audit: type=1804 audit(1720334713.610:1498): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1029" name="/newroot/17/file0/bus" dev="loop3" ino=10 res=1 errno=0 [ 445.856504][ T8193] XFS (loop4): Quotacheck: Done. [ 445.985770][ T8217] loop0: detected capacity change from 0 to 4096 [ 446.088879][ T8225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1032'. [ 446.090124][ T8193] overlayfs: failed to resolve './file0': -2 [ 446.254906][ T5890] XFS (loop4): Unmounting Filesystem [ 446.313757][ T3817] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 446.336223][ T3817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.381206][ T3817] usb 2-1: Product: syz [ 446.396077][ T3817] usb 2-1: Manufacturer: syz [ 446.400749][ T3817] usb 2-1: SerialNumber: syz [ 446.432541][ T3817] usb 2-1: config 0 descriptor?? [ 446.516364][ T3817] gspca_main: pac207-2.14.0 probing 093a:2476 [ 446.652882][ T3817] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 446.666416][ T3817] usb 2-1: Found UVC 0.00 device syz (093a:2476) [ 446.679472][ T3817] usb 2-1: No valid video chain found. [ 446.704197][ T7644] syz-executor: attempt to access beyond end of device [ 446.704197][ T7644] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 446.753700][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.762360][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.892999][ T8194] usb 2-1: USB disconnect, device number 42 [ 447.666324][ T8194] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 447.823551][ T8257] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 447.952962][ T8194] usb 1-1: Using ep0 maxpacket: 16 [ 448.103076][ T8194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 448.224728][ T8194] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 448.343014][ T8194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.475614][ T8194] usb 1-1: config 0 descriptor?? [ 448.627020][ T3904] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 448.688589][ T3933] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 448.788675][ T8244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1037'. [ 448.820550][ T26] audit: type=1326 audit(1720334716.610:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 448.873884][ T26] audit: type=1326 audit(1720334716.610:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 448.896582][ T3904] usb 4-1: Using ep0 maxpacket: 16 [ 448.926212][ T26] audit: type=1326 audit(1720334716.610:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 448.982995][ T26] audit: type=1326 audit(1720334716.610:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 449.038913][ T26] audit: type=1326 audit(1720334716.610:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 449.081411][ T8251] loop2: detected capacity change from 0 to 32768 [ 449.097451][ T26] audit: type=1326 audit(1720334716.610:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 449.142938][ T3933] usb 2-1: config 15 has an invalid interface number: 156 but max is 0 [ 449.166325][ T3933] usb 2-1: config 15 has no interface number 0 [ 449.179203][ T26] audit: type=1326 audit(1720334716.610:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 449.191683][ T3933] usb 2-1: config 15 interface 156 altsetting 15 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 449.202504][ T3904] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 449.230725][ T3904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.239448][ T26] audit: type=1326 audit(1720334716.610:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 449.240021][ T3933] usb 2-1: config 15 interface 156 altsetting 15 bulk endpoint 0x8 has invalid maxpacket 8 [ 449.272478][ T3904] usb 4-1: Product: syz [ 449.272504][ T3904] usb 4-1: Manufacturer: syz [ 449.272521][ T3904] usb 4-1: SerialNumber: syz [ 449.286264][ T26] audit: type=1326 audit(1720334716.610:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba1f75bd9 code=0x7ffc0000 [ 449.310601][ T3904] usb 4-1: config 0 descriptor?? [ 449.318689][ T3933] usb 2-1: config 15 interface 156 has no altsetting 0 [ 449.420299][ T3717] udevd[3717]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.433125][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.455480][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.493355][ T3933] usb 2-1: Dual-Role OTG device on HNP port [ 449.511007][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.522796][ T3933] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01a4, bcdDevice=2a.a1 [ 449.548342][ T3933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.551081][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.567620][ T3933] usb 2-1: Product: Ъ [ 449.571770][ T3933] usb 2-1: Manufacturer: ᮂ䳦惯ꀑ쉁巁ㆿ䒔舉錏鯦㧒街㙮摎콙ᷗ巑闛쭌蹸뒞䣮䈳ံ㨥曰땒枸锐囄뗱䟢㯐㣰瘙ᬛ猌ረ蔫儂ⶁ㉂箯鶫溻铤ྵꭾڏ纒䏁湂ᐐ鰫엸롞邀∨舎뒖셝娟 [ 449.644038][ T8194] hid (null): unknown global tag 0xd [ 449.651728][ T8194] hid-generic 0003:0158:0100.0036: unknown main item tag 0x1 [ 449.672205][ T3933] usb 2-1: SerialNumber: ஈ槢괘軃䛕晚隊᮸⶚綫⯼麱肘붆䱿螭ꉘ禆ዝ暥߰擞ร萈醪勬▜묥㏌罓⥆牜ᶱ鎘శ逞疈쏝㾕鸪赮㠼횼밡饇䮵뵯狕♸盏嵨䧅ࢫﭶ䲭䍆쾣쫨ꦼᮙ㵿쇊夀ꚞꐄ鰩퓓蓥⬏킛躟եᔵ㢻ꫵ㏞黍櫜鑟珶⟝ꓴ阹왚꧅귒セ弯檐㾏펔࢛䷯ᯭ뾔 [ 449.728522][ T8194] hid-generic 0003:0158:0100.0036: unexpected long global item [ 449.739384][ T8194] hid-generic: probe of 0003:0158:0100.0036 failed with error -22 [ 449.803522][ T8259] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 449.848304][ T3599] usb 1-1: USB disconnect, device number 38 [ 450.022298][ T8194] usb 4-1: USB disconnect, device number 34 [ 450.275214][ T8267] loop2: detected capacity change from 0 to 8192 [ 450.301001][ T8267] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "" [ 451.081496][ T8249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.098446][ T8275] loop3: detected capacity change from 0 to 4096 [ 451.374224][ T3933] ftdi_sio 2-1:15.156: FTDI USB Serial Device converter detected [ 451.412094][ T3933] ftdi_sio ttyUSB0: unknown device type: 0x2aa1 [ 451.459763][ T3933] usb 2-1: USB disconnect, device number 43 [ 451.497165][ T3933] ftdi_sio 2-1:15.156: device disconnected [ 451.558351][ T8277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1045'. [ 451.751206][ T8273] loop0: detected capacity change from 0 to 32768 [ 451.782632][ T8273] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1043 (8273) [ 451.829498][ T8273] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 451.848040][ T8273] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 451.863672][ T8273] BTRFS info (device loop0): using free space tree [ 451.912902][ T3933] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 452.027430][ T8273] BTRFS info (device loop0): enabling ssd optimizations [ 452.037432][ T3904] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 452.163020][ T3933] usb 2-1: Using ep0 maxpacket: 16 [ 452.423942][ T8311] CIFS mount error: No usable UNC path provided in device string! [ 452.423942][ T8311] [ 452.434987][ T8311] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 452.543490][ T3933] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 452.644363][ T3933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.652507][ T3933] usb 2-1: Product: syz [ 452.706279][ T3933] usb 2-1: Manufacturer: syz [ 452.749848][ T3933] usb 2-1: SerialNumber: syz [ 452.783517][ T3933] usb 2-1: config 0 descriptor?? [ 452.949073][ T3717] udevd[3717]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.977237][ T3940] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 453.223068][ T3904] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 453.255384][ T3904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.259985][ T8293] loop4: detected capacity change from 0 to 32768 [ 453.295236][ T3904] usb 4-1: Product: syz [ 453.306658][ T3904] usb 4-1: Manufacturer: syz [ 453.330103][ T8293] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1049 (8293) [ 453.342021][ T3904] usb 4-1: SerialNumber: syz [ 453.359523][ T3904] usb 4-1: config 0 descriptor?? [ 453.394504][ T8293] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 453.425482][ T3904] gspca_main: pac207-2.14.0 probing 093a:2476 [ 453.442772][ T8293] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 453.471914][ T8293] BTRFS info (device loop4): using free space tree [ 453.562882][ T3904] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 453.581860][ T3904] usb 4-1: Found UVC 0.00 device syz (093a:2476) [ 453.590164][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 453.624538][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.652103][ T3904] usb 4-1: No valid video chain found. [ 453.665440][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.718308][ T3904] usb 4-1: USB disconnect, device number 35 [ 453.737995][ T4368] usb 2-1: USB disconnect, device number 44 [ 453.782876][ T8293] BTRFS info (device loop4): enabling ssd optimizations [ 454.116426][ T8313] loop2: detected capacity change from 0 to 32768 [ 454.637575][ T8313] XFS (loop2): Mounting V5 Filesystem [ 454.764833][ T8313] XFS (loop2): Ending clean mount [ 454.781633][ T8313] XFS (loop2): Quotacheck needed: Please wait. [ 454.892581][ T5890] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 454.929279][ T8313] XFS (loop2): Quotacheck: Done. [ 455.293683][ T8313] overlayfs: './file0' not a directory [ 455.644378][ T3555] XFS (loop2): Unmounting Filesystem [ 457.088245][ T8367] loop4: detected capacity change from 0 to 32768 [ 457.112750][ T8194] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 457.173446][ T8365] loop1: detected capacity change from 0 to 32768 [ 457.213845][ T8365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1056 (8365) [ 457.256784][ T8365] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 457.285379][ T8365] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 457.326860][ T8365] BTRFS info (device loop1): using free space tree [ 457.522910][ T8194] usb 3-1: config 15 has an invalid interface number: 156 but max is 0 [ 457.540066][ T8194] usb 3-1: config 15 has no interface number 0 [ 457.547058][ T8194] usb 3-1: config 15 interface 156 altsetting 15 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 457.570476][ T8194] usb 3-1: config 15 interface 156 altsetting 15 bulk endpoint 0x8 has invalid maxpacket 8 [ 457.590788][ T8194] usb 3-1: config 15 interface 156 has no altsetting 0 [ 457.733306][ T8365] BTRFS info (device loop1): enabling ssd optimizations [ 457.772944][ T8194] usb 3-1: Dual-Role OTG device on HNP port [ 457.802808][ T8194] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01a4, bcdDevice=2a.a1 [ 457.811995][ T8194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.865583][ T8194] usb 3-1: Product: Ъ [ 457.869718][ T8194] usb 3-1: Manufacturer: ᮂ䳦惯ꀑ쉁巁ㆿ䒔舉錏鯦㧒街㙮摎콙ᷗ巑闛쭌蹸뒞䣮䈳ံ㨥曰땒枸锐囄뗱䟢㯐㣰瘙ᬛ猌ረ蔫儂ⶁ㉂箯鶫溻铤ྵꭾڏ纒䏁湂ᐐ鰫엸롞邀∨舎뒖셝娟 [ 457.922313][ T8194] usb 3-1: SerialNumber: ஈ槢괘軃䛕晚隊᮸⶚綫⯼麱肘붆䱿螭ꉘ禆ዝ暥߰擞ร萈醪勬▜묥㏌罓⥆牜ᶱ鎘శ逞疈쏝㾕鸪赮㠼횼밡饇䮵뵯狕♸盏嵨䧅ࢫﭶ䲭䍆쾣쫨ꦼᮙ㵿쇊夀ꚞꐄ鰩퓓蓥⬏킛躟եᔵ㢻ꫵ㏞黍櫜鑟珶⟝ꓴ阹왚꧅귒セ弯檐㾏펔࢛䷯ᯭ뾔 [ 458.043354][ T8375] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 458.406548][ T8410] CIFS mount error: No usable UNC path provided in device string! [ 458.406548][ T8410] [ 458.416647][ T8410] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 458.924327][ T3550] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 458.957144][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1059'. [ 459.500143][ T8419] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1061'. [ 459.822739][ T3906] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 459.994296][ T8417] loop3: detected capacity change from 0 to 32768 [ 460.082713][ T7] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 460.295976][ T8417] XFS (loop3): Mounting V5 Filesystem [ 460.573170][ T8417] XFS (loop3): Ending clean mount [ 460.590687][ T8417] XFS (loop3): Quotacheck needed: Please wait. [ 460.680666][ T8417] XFS (loop3): Quotacheck: Done. [ 460.862762][ T3906] usb 5-1: Using ep0 maxpacket: 16 [ 460.983930][ T8194] ftdi_sio 3-1:15.156: FTDI USB Serial Device converter detected [ 460.993002][ T3906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 461.004751][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 461.014864][ T8194] ftdi_sio ttyUSB0: unknown device type: 0x2aa1 [ 461.030544][ T3906] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 461.055363][ T3906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.062959][ T8194] usb 3-1: USB disconnect, device number 46 [ 461.088426][ T3906] usb 5-1: config 0 descriptor?? [ 461.089916][ T8194] ftdi_sio 3-1:15.156: device disconnected [ 461.175284][ T7644] XFS (loop3): Unmounting Filesystem [ 461.313672][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 461.333997][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.352284][ T7] usb 2-1: Product: syz [ 461.363642][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1063'. [ 461.382947][ T7] usb 2-1: Manufacturer: syz [ 461.387604][ T7] usb 2-1: SerialNumber: syz [ 461.405434][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 461.405451][ T26] audit: type=1326 audit(1720334729.200:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 461.452049][ T7] usb 2-1: config 0 descriptor?? [ 461.501999][ T26] audit: type=1326 audit(1720334729.230:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 461.583587][ T3717] udevd[3717]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.609977][ T26] audit: type=1326 audit(1720334729.230:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 461.812436][ T26] audit: type=1326 audit(1720334729.230:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 461.886765][ T26] audit: type=1326 audit(1720334729.230:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 461.911050][ T3594] usb 2-1: USB disconnect, device number 45 [ 461.992758][ T26] audit: type=1326 audit(1720334729.230:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 462.036817][ T26] audit: type=1326 audit(1720334729.230:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 462.045378][ T8421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.083389][ T8421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.111556][ T26] audit: type=1326 audit(1720334729.230:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 462.151848][ T8421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.173168][ T8421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.193638][ T26] audit: type=1326 audit(1720334729.230:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 462.224968][ T3906] hid (null): unknown global tag 0xd [ 462.252965][ T26] audit: type=1326 audit(1720334729.230:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.4.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 462.260215][ T3906] hid-generic 0003:0158:0100.0037: unknown main item tag 0x1 [ 462.329630][ T3906] hid-generic 0003:0158:0100.0037: unexpected long global item [ 462.349424][ T3906] hid-generic: probe of 0003:0158:0100.0037 failed with error -22 [ 462.470575][ T41] usb 5-1: USB disconnect, device number 42 [ 462.638381][ T8444] loop2: detected capacity change from 0 to 32768 [ 462.645374][ T3906] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 463.702932][ T3906] usb 4-1: Using ep0 maxpacket: 16 [ 464.029672][ T8469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1073'. [ 464.040192][ T8455] loop0: detected capacity change from 0 to 32768 [ 464.132173][ T8455] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1071 (8455) [ 464.864769][ T8455] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 464.890789][ T8455] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 464.904273][ T3906] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 464.907958][ T8455] BTRFS info (device loop0): using free space tree [ 464.943140][ T3906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.972406][ T3906] usb 4-1: Product: syz [ 464.990733][ T3906] usb 4-1: Manufacturer: syz [ 465.012452][ T3906] usb 4-1: SerialNumber: syz [ 465.043096][ T3906] usb 4-1: config 0 descriptor?? [ 465.161815][ T3717] udevd[3717]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.180306][ T8455] BTRFS info (device loop0): enabling ssd optimizations [ 465.252377][ T3906] usb 4-1: USB disconnect, device number 36 [ 465.547519][ T8500] CIFS mount error: No usable UNC path provided in device string! [ 465.547519][ T8500] [ 465.557817][ T8500] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 465.643656][ T8496] loop4: detected capacity change from 0 to 4096 [ 466.041341][ T3940] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 466.322834][ T8475] loop1: detected capacity change from 0 to 32768 [ 466.915289][ T8499] loop3: detected capacity change from 0 to 32768 [ 467.042384][ T8499] XFS (loop3): Mounting V5 Filesystem [ 467.319832][ T8499] XFS (loop3): Ending clean mount [ 467.348808][ T8499] XFS (loop3): Quotacheck needed: Please wait. [ 467.835099][ T8499] XFS (loop3): Quotacheck: Done. [ 468.038798][ T8503] loop2: detected capacity change from 0 to 32768 [ 468.055656][ T8503] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1079 (8503) [ 468.094248][ T8499] overlayfs: failed to resolve './file0': -2 [ 468.116331][ T8503] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 468.128690][ T8503] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 468.140413][ T8503] BTRFS info (device loop2): using free space tree [ 468.257032][ T7644] XFS (loop3): Unmounting Filesystem [ 468.348216][ T8503] BTRFS info (device loop2): enabling ssd optimizations [ 468.850908][ T7] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 468.887741][ T3555] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 468.933196][ T3594] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 469.108536][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 469.192830][ T3594] usb 2-1: Using ep0 maxpacket: 16 [ 469.243013][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 469.282738][ T7] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 469.312297][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.355585][ T7] usb 5-1: config 0 descriptor?? [ 469.363795][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1087'. [ 469.483583][ T3594] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 469.500767][ T3594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.519702][ T3594] usb 2-1: Product: syz [ 469.549730][ T3594] usb 2-1: Manufacturer: syz [ 469.570691][ T3594] usb 2-1: SerialNumber: syz [ 469.587969][ T3594] usb 2-1: config 0 descriptor?? [ 469.610247][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1084'. [ 469.739622][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 469.739643][ T26] audit: type=1326 audit(1720334737.450:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 469.817386][ T3650] udevd[3650]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.861676][ T26] audit: type=1326 audit(1720334737.450:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 469.907260][ T26] audit: type=1326 audit(1720334737.450:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 469.958617][ T4363] usb 2-1: USB disconnect, device number 46 [ 469.991469][ T26] audit: type=1326 audit(1720334737.450:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 470.054755][ T26] audit: type=1326 audit(1720334737.450:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 470.097399][ T26] audit: type=1326 audit(1720334737.460:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 470.126794][ T8553] loop0: detected capacity change from 0 to 32768 [ 470.136188][ T26] audit: type=1326 audit(1720334737.460:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 470.168735][ T26] audit: type=1326 audit(1720334737.460:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 470.194566][ T26] audit: type=1326 audit(1720334737.460:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 470.220600][ T26] audit: type=1326 audit(1720334737.460:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb3cf75bd9 code=0x7ffc0000 [ 470.295998][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.312969][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.334161][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.344501][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.375439][ T7] hid (null): unknown global tag 0xd [ 470.388171][ T7] hid-generic 0003:0158:0100.0038: unknown main item tag 0x1 [ 470.399346][ T7] hid-generic 0003:0158:0100.0038: unexpected long global item [ 470.411751][ T7] hid-generic: probe of 0003:0158:0100.0038 failed with error -22 [ 470.602157][ T4363] usb 5-1: USB disconnect, device number 43 [ 470.904614][ T8579] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 471.002986][ T7] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 471.388325][ T7] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 471.408242][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 471.683353][ T7] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 471.708499][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.747251][ T7] usb 1-1: Product: syz [ 471.766721][ T7] usb 1-1: Manufacturer: syz [ 471.788501][ T7] usb 1-1: SerialNumber: syz [ 471.823794][ T7] usb 1-1: config 0 descriptor?? [ 471.996892][ T8601] 9pnet_fd: Insufficient options for proto=fd [ 474.439422][ T3816] usb 1-1: USB disconnect, device number 39 [ 474.618441][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1100'. [ 501.396515][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.402938][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.834849][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.841217][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.274249][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.280631][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.395810][ T27] INFO: task kworker/1:1:41 blocked for more than 143 seconds. [ 629.412620][ T27] Not tainted 6.1.97-syzkaller #0 [ 629.418213][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 629.427277][ T27] task:kworker/1:1 state:D stack:22328 pid:41 ppid:2 flags:0x00004000 [ 629.437940][ T27] Workqueue: events rfkill_global_led_trigger_worker SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 629.449136][ T27] Call Trace: [ 629.471957][ T27] [ 629.475004][ T27] __schedule+0x142d/0x4550 [ 629.479572][ T27] ? print_irqtrace_events+0x210/0x210 [ 629.508152][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 629.520046][ T27] ? __sched_text_start+0x8/0x8 [ 629.566089][ T27] ? mark_lock+0x9a/0x340 [ 629.570515][ T27] schedule+0xbf/0x180 [ 629.585788][ T27] schedule_preempt_disabled+0xf/0x20 [ 629.591358][ T27] __mutex_lock+0x6b9/0xd80 [ 629.596074][ T27] ? __mutex_lock+0x53c/0xd80 [ 629.601105][ T27] ? rfkill_global_led_trigger_worker+0x23/0xd0 [ 629.607741][ T27] ? mutex_lock_nested+0x10/0x10 [ 629.613029][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 629.619055][ T27] ? print_irqtrace_events+0x210/0x210 [ 629.628098][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 629.634378][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 629.639640][ T27] ? process_one_work+0x7a9/0x11d0 [ 629.645248][ T27] rfkill_global_led_trigger_worker+0x23/0xd0 [ 629.651450][ T27] ? process_one_work+0x7a9/0x11d0 [ 629.656980][ T27] process_one_work+0x8a9/0x11d0 [ 629.662453][ T27] ? worker_detach_from_pool+0x260/0x260 [ 629.668573][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 629.674463][ T27] ? kthread_data+0x4e/0xc0 [ 629.679280][ T27] ? wq_worker_running+0x97/0x190 [ 629.684873][ T27] worker_thread+0xa47/0x1200 [ 629.689632][ T27] ? _raw_spin_unlock+0x40/0x40 [ 629.695064][ T27] kthread+0x28d/0x320 [ 629.699190][ T27] ? worker_clr_flags+0x190/0x190 [ 629.704867][ T27] ? kthread_blkcg+0xd0/0xd0 [ 629.709520][ T27] ret_from_fork+0x1f/0x30 [ 629.714530][ T27] [ 629.717762][ T27] INFO: task syz.2.1090:8565 blocked for more than 143 seconds. [ 629.725973][ T27] Not tainted 6.1.97-syzkaller #0 [ 629.731577][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 629.745254][ T27] task:syz.2.1090 state:D stack:25832 pid:8565 ppid:3555 flags:0x00004004 [ 629.755758][ T27] Call Trace: [ 629.759167][ T27] [ 629.762133][ T27] __schedule+0x142d/0x4550 [ 629.767311][ T27] ? __mutex_lock+0x6b4/0xd80 [ 629.772052][ T27] ? __sched_text_start+0x8/0x8 [ 629.777584][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 629.783623][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 629.788934][ T27] schedule+0xbf/0x180 [ 629.793654][ T27] schedule_preempt_disabled+0xf/0x20 [ 629.799093][ T27] __mutex_lock+0x6b9/0xd80 [ 629.804052][ T27] ? kobject_put+0x422/0x460 [ 629.808687][ T27] ? __mutex_lock+0x53c/0xd80 [ 629.813812][ T27] ? rfkill_unregister+0xcc/0x220 [ 629.820375][ T27] ? mutex_lock_nested+0x10/0x10 [ 629.825925][ T27] ? kill_device+0x160/0x160 [ 629.831212][ T27] ? nfc_genl_device_removed+0x251/0x370 [ 629.837567][ T27] ? nfc_genl_setup_device_added+0x3f0/0x3f0 [ 629.845375][ T27] rfkill_unregister+0xcc/0x220 [ 629.850293][ T27] nfc_unregister_device+0x92/0x290 [ 629.857606][ T27] virtual_ncidev_close+0x55/0x90 [ 629.863170][ T27] ? virtual_ncidev_open+0xc0/0xc0 [ 629.868334][ T27] __fput+0x3b7/0x890 [ 629.872357][ T27] task_work_run+0x246/0x300 [ 629.877531][ T27] ? task_work_cancel+0x2b0/0x2b0 [ 629.882922][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 629.888691][ T27] exit_to_user_mode_loop+0xde/0x100 [ 629.894521][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 629.900128][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 629.906956][ T27] do_syscall_64+0x47/0xb0 [ 629.911471][ T27] ? clear_bhb_loop+0x45/0xa0 [ 629.916778][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 629.923032][ T27] RIP: 0033:0x7f1399375bd9 [ 629.927494][ T27] RSP: 002b:00007ffda4a91028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 629.936520][ T27] RAX: 0000000000000000 RBX: 00007f1399505a60 RCX: 00007f1399375bd9 [ 629.945415][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 629.956001][ T27] RBP: 00007f1399505a60 R08: 0000000000000006 R09: 0000000ca4a9135f [ 629.966610][ T27] R10: 00000000003ffa0c R11: 0000000000000246 R12: 0000000000072efd [ 629.974990][ T27] R13: 0000000000000032 R14: 00007f1399505a60 R15: 00007ffda4a91110 [ 629.983401][ T27] [ 629.986617][ T27] INFO: task syz.1.1092:8571 blocked for more than 143 seconds. [ 629.994826][ T27] Not tainted 6.1.97-syzkaller #0 [ 630.000426][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 630.011745][ T27] task:syz.1.1092 state:D stack:25832 pid:8571 ppid:3550 flags:0x00004004 [ 630.027474][ T27] Call Trace: [ 630.030813][ T27] [ 630.038912][ T27] __schedule+0x142d/0x4550 [ 630.044490][ T27] ? __mutex_lock+0x6b4/0xd80 [ 630.049234][ T27] ? __sched_text_start+0x8/0x8 [ 630.054647][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 630.060387][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 630.067757][ T27] schedule+0xbf/0x180 [ 630.072097][ T27] schedule_preempt_disabled+0xf/0x20 [ 630.079979][ T27] __mutex_lock+0x6b9/0xd80 [ 630.085206][ T27] ? __mutex_lock+0x53c/0xd80 [ 630.090785][ T27] ? rfkill_fop_release+0x49/0x220 [ 630.096757][ T27] ? mutex_lock_nested+0x10/0x10 [ 630.101917][ T27] rfkill_fop_release+0x49/0x220 [ 630.107774][ T27] ? rfkill_fop_open+0x680/0x680 [ 630.113998][ T27] __fput+0x3b7/0x890 [ 630.118578][ T27] task_work_run+0x246/0x300 [ 630.123865][ T27] ? task_work_cancel+0x2b0/0x2b0 [ 630.128978][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 630.135073][ T27] exit_to_user_mode_loop+0xde/0x100 [ 630.140910][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 630.147080][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 630.153424][ T27] do_syscall_64+0x47/0xb0 [ 630.158305][ T27] ? clear_bhb_loop+0x45/0xa0 [ 630.163297][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.169707][ T27] RIP: 0033:0x7fb99ef75bd9 [ 630.175086][ T27] RSP: 002b:00007ffd39fe14a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 630.184315][ T27] RAX: 0000000000000000 RBX: 00007fb99f105a60 RCX: 00007fb99ef75bd9 [ 630.192904][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 630.201257][ T27] RBP: 00007fb99f105a60 R08: 0000000000000006 R09: 0000001639fe17df [ 630.209496][ T27] R10: 00000000005eecd0 R11: 0000000000000246 R12: 0000000000073160 [ 630.217599][ T27] R13: 0000000000000032 R14: 00007fb99f105a60 R15: 00007fb99f103f60 [ 630.225848][ T27] [ 630.228975][ T27] INFO: task syz.1.1092:8577 blocked for more than 144 seconds. [ 630.236716][ T27] Not tainted 6.1.97-syzkaller #0 [ 630.242296][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 630.251095][ T27] task:syz.1.1092 state:D stack:24752 pid:8577 ppid:3550 flags:0x00004004 [ 630.260718][ T27] Call Trace: [ 630.264125][ T27] [ 630.267108][ T27] __schedule+0x142d/0x4550 [ 630.271739][ T27] ? __mutex_lock+0x6b4/0xd80 [ 630.276498][ T27] ? __sched_text_start+0x8/0x8 [ 630.281665][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 630.287570][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 630.294171][ T27] schedule+0xbf/0x180 [ 630.298711][ T27] schedule_preempt_disabled+0xf/0x20 [ 630.304229][ T27] __mutex_lock+0x6b9/0xd80 [ 630.308765][ T27] ? __mutex_lock+0x53c/0xd80 [ 630.313501][ T27] ? nfc_rfkill_set_block+0x4c/0x2f0 [ 630.319081][ T27] ? mutex_lock_nested+0x10/0x10 [ 630.324140][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 630.329506][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 630.334804][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 630.340800][ T27] ? _raw_spin_unlock+0x40/0x40 [ 630.346205][ T27] nfc_rfkill_set_block+0x4c/0x2f0 [ 630.351458][ T27] ? nfc_unregister_device+0x290/0x290 [ 630.357451][ T27] rfkill_set_block+0x1e7/0x430 [ 630.362539][ T27] rfkill_fop_write+0x5b7/0x790 [ 630.367530][ T27] ? rfkill_fop_read+0x470/0x470 [ 630.372652][ T27] ? fsnotify_perm+0x67/0x590 [ 630.377389][ T27] ? bpf_lsm_file_permission+0x5/0x10 [ 630.383112][ T27] ? rfkill_fop_read+0x470/0x470 [ 630.388433][ T27] vfs_write+0x2d9/0xba0 [ 630.394299][ T27] ? file_end_write+0x250/0x250 [ 630.399376][ T27] ? __fget_files+0x28/0x4a0 [ 630.405393][ T27] ? __fget_files+0x435/0x4a0 [ 630.410223][ T27] ? __fget_files+0x28/0x4a0 [ 630.414900][ T27] ? __fdget_pos+0x1db/0x360 [ 630.419557][ T27] ? ksys_write+0x77/0x2c0 [ 630.424094][ T27] ksys_write+0x19c/0x2c0 [ 630.428453][ T27] ? print_irqtrace_events+0x210/0x210 [ 630.441419][ T27] ? __ia32_sys_read+0x80/0x80 [ 630.446612][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 630.452724][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 630.457965][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 630.464051][ T27] do_syscall_64+0x3b/0xb0 [ 630.468541][ T27] ? clear_bhb_loop+0x45/0xa0 [ 630.473388][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.479314][ T27] RIP: 0033:0x7fb99ef75bd9 [ 630.483904][ T27] RSP: 002b:00007fb99edff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 630.492428][ T27] RAX: ffffffffffffffda RBX: 00007fb99f104038 RCX: 00007fb99ef75bd9 [ 630.500470][ T27] RDX: 0000000000000008 RSI: 00000000200004c0 RDI: 0000000000000003 [ 630.509979][ T27] RBP: 00007fb99efe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 630.519604][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.527959][ T27] R13: 000000000000006e R14: 00007fb99f104038 R15: 00007ffd39fe13c8 [ 630.536486][ T27] [ 630.539535][ T27] INFO: task syz.3.1096:8598 blocked for more than 144 seconds. [ 630.547275][ T27] Not tainted 6.1.97-syzkaller #0 [ 630.553054][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 630.561752][ T27] task:syz.3.1096 state:D stack:27328 pid:8598 ppid:7644 flags:0x00004004 [ 630.571390][ T27] Call Trace: [ 630.574744][ T27] [ 630.577744][ T27] __schedule+0x142d/0x4550 [ 630.582474][ T27] ? __mutex_lock+0x6b4/0xd80 [ 630.587695][ T27] ? __sched_text_start+0x8/0x8 [ 630.592792][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 630.598392][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 630.603694][ T27] schedule+0xbf/0x180 [ 630.608238][ T27] schedule_preempt_disabled+0xf/0x20 [ 630.615147][ T27] __mutex_lock+0x6b9/0xd80 [ 630.620140][ T27] ? __mutex_lock+0x53c/0xd80 [ 630.626184][ T27] ? rfkill_fop_open+0x130/0x680 [ 630.631175][ T27] ? mutex_lock_nested+0x10/0x10 [ 630.636819][ T27] ? __init_waitqueue_head+0xaa/0x140 [ 630.642248][ T27] rfkill_fop_open+0x130/0x680 [ 630.647579][ T27] ? module_put+0x15a/0x350 [ 630.652119][ T27] ? rfkill_fop_ioctl+0x230/0x230 [ 630.657255][ T27] misc_open+0x304/0x380 [ 630.661556][ T27] chrdev_open+0x54a/0x630 [ 630.666182][ T27] ? cd_forget+0x160/0x160 [ 630.670691][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 630.676324][ T27] ? fsnotify_perm+0x471/0x590 [ 630.681145][ T27] ? cd_forget+0x160/0x160 [ 630.685681][ T27] do_dentry_open+0x7f9/0x10f0 [ 630.690679][ T27] path_openat+0x2644/0x2e60 [ 630.695356][ T27] ? mark_lock+0x9a/0x340 [ 630.699787][ T27] ? do_filp_open+0x480/0x480 [ 630.704586][ T27] do_filp_open+0x230/0x480 [ 630.709122][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 630.713842][ T27] ? _raw_spin_unlock+0x24/0x40 [ 630.718816][ T27] ? alloc_fd+0x59c/0x640 [ 630.724586][ T27] do_sys_openat2+0x13b/0x500 [ 630.729341][ T27] ? do_sys_open+0x220/0x220 [ 630.734996][ T27] ? strncpy_from_user+0x33c/0x360 [ 630.740247][ T27] __x64_sys_openat+0x243/0x290 [ 630.745590][ T27] ? __ia32_sys_open+0x270/0x270 [ 630.750583][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 630.757291][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 630.762662][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 630.768728][ T27] do_syscall_64+0x3b/0xb0 [ 630.773249][ T27] ? clear_bhb_loop+0x45/0xa0 [ 630.777989][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.783972][ T27] RIP: 0033:0x7f5723b75bd9 [ 630.788847][ T27] RSP: 002b:00007f572496d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 630.797362][ T27] RAX: ffffffffffffffda RBX: 00007f5723d03f60 RCX: 00007f5723b75bd9 [ 630.805513][ T27] RDX: 0000000000000602 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 630.814028][ T27] RBP: 00007f5723be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 630.822024][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.830076][ T27] R13: 000000000000000b R14: 00007f5723d03f60 R15: 00007fffa5557be8 [ 630.839203][ T27] [ 630.842260][ T27] INFO: task syz.4.1099:8641 blocked for more than 144 seconds. [ 630.850973][ T27] Not tainted 6.1.97-syzkaller #0 [ 630.856905][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 630.865997][ T27] task:syz.4.1099 state:D stack:27560 pid:8641 ppid:5890 flags:0x00004004 [ 630.875324][ T27] Call Trace: [ 630.878628][ T27] [ 630.881582][ T27] __schedule+0x142d/0x4550 [ 630.886209][ T27] ? __mutex_lock+0x6b4/0xd80 [ 630.891009][ T27] ? __sched_text_start+0x8/0x8 [ 630.895951][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 630.901461][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 630.906932][ T27] schedule+0xbf/0x180 [ 630.911038][ T27] schedule_preempt_disabled+0xf/0x20 [ 630.916485][ T27] __mutex_lock+0x6b9/0xd80 [ 630.921026][ T27] ? __mutex_lock+0x53c/0xd80 [ 630.925802][ T27] ? misc_open+0x58/0x380 [ 630.930152][ T27] ? mutex_lock_nested+0x10/0x10 [ 630.935171][ T27] ? kobject_get_unless_zero+0x229/0x320 [ 630.940842][ T27] misc_open+0x58/0x380 [ 630.945367][ T27] chrdev_open+0x54a/0x630 [ 630.949863][ T27] ? cd_forget+0x160/0x160 [ 630.955195][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 630.960447][ T27] ? fsnotify_perm+0x471/0x590 [ 630.965489][ T27] ? cd_forget+0x160/0x160 [ 630.969954][ T27] do_dentry_open+0x7f9/0x10f0 [ 630.974814][ T27] path_openat+0x2644/0x2e60 [ 630.979444][ T27] ? mark_lock+0x9a/0x340 [ 630.984002][ T27] ? do_filp_open+0x480/0x480 [ 630.988744][ T27] do_filp_open+0x230/0x480 [ 630.993432][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 630.998063][ T27] ? _raw_spin_unlock+0x24/0x40 [ 631.003004][ T27] ? alloc_fd+0x59c/0x640 [ 631.007466][ T27] do_sys_openat2+0x13b/0x500 [ 631.012158][ T27] ? do_sys_open+0x220/0x220 [ 631.016849][ T27] __x64_sys_openat+0x243/0x290 [ 631.021745][ T27] ? __ia32_sys_open+0x270/0x270 [ 631.026817][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 631.032914][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 631.038154][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 631.044343][ T27] do_syscall_64+0x3b/0xb0 [ 631.048796][ T27] ? clear_bhb_loop+0x45/0xa0 [ 631.053810][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.059869][ T27] RIP: 0033:0x7fdb3cf75bd9 [ 631.064716][ T27] RSP: 002b:00007fdb3dd60048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 631.073442][ T27] RAX: ffffffffffffffda RBX: 00007fdb3d103f60 RCX: 00007fdb3cf75bd9 [ 631.081552][ T27] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 631.089718][ T27] RBP: 00007fdb3cfe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 631.097773][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.105840][ T27] R13: 000000000000000b R14: 00007fdb3d103f60 R15: 00007ffe2c1c6348 [ 631.113878][ T27] [ 631.116936][ T27] INFO: task syz.4.1099:8650 blocked for more than 145 seconds. [ 631.124671][ T27] Not tainted 6.1.97-syzkaller #0 [ 631.130937][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.139934][ T27] task:syz.4.1099 state:D stack:27560 pid:8650 ppid:5890 flags:0x00004004 [ 631.149675][ T27] Call Trace: [ 631.153052][ T27] [ 631.156021][ T27] __schedule+0x142d/0x4550 [ 631.160617][ T27] ? __mutex_lock+0x6b4/0xd80 [ 631.165810][ T27] ? __sched_text_start+0x8/0x8 [ 631.171066][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 631.177798][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 631.183411][ T27] schedule+0xbf/0x180 [ 631.187545][ T27] schedule_preempt_disabled+0xf/0x20 [ 631.193319][ T27] __mutex_lock+0x6b9/0xd80 [ 631.197881][ T27] ? __mutex_lock+0x53c/0xd80 [ 631.202686][ T27] ? misc_open+0x58/0x380 [ 631.207081][ T27] ? mutex_lock_nested+0x10/0x10 [ 631.212223][ T27] ? kobject_get_unless_zero+0x229/0x320 [ 631.217953][ T27] misc_open+0x58/0x380 [ 631.222145][ T27] chrdev_open+0x54a/0x630 [ 631.226692][ T27] ? cd_forget+0x160/0x160 [ 631.231152][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 631.236420][ T27] ? fsnotify_perm+0x471/0x590 [ 631.241314][ T27] ? cd_forget+0x160/0x160 [ 631.245837][ T27] do_dentry_open+0x7f9/0x10f0 [ 631.250647][ T27] path_openat+0x2644/0x2e60 [ 631.255338][ T27] ? mark_lock+0x9a/0x340 [ 631.259755][ T27] ? do_filp_open+0x480/0x480 [ 631.264548][ T27] do_filp_open+0x230/0x480 [ 631.269107][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 631.275328][ T27] ? _raw_spin_unlock+0x24/0x40 [ 631.280232][ T27] ? alloc_fd+0x59c/0x640 [ 631.285191][ T27] do_sys_openat2+0x13b/0x500 [ 631.290031][ T27] ? do_sys_open+0x220/0x220 [ 631.295134][ T27] __x64_sys_openat+0x243/0x290 [ 631.300046][ T27] ? __ia32_sys_open+0x270/0x270 [ 631.305284][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 631.311300][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 631.316943][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 631.323340][ T27] do_syscall_64+0x3b/0xb0 [ 631.327822][ T27] ? clear_bhb_loop+0x45/0xa0 [ 631.332839][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.338796][ T27] RIP: 0033:0x7fdb3cf74610 [ 631.343306][ T27] RSP: 002b:00007fdb3dd1bf00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 631.351747][ T27] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdb3cf74610 [ 631.359997][ T27] RDX: 0000000000000002 RSI: 00007fdb3cfe331c RDI: 00000000ffffff9c [ 631.368047][ T27] RBP: 00007fdb3cfe331c R08: 0000000000000000 R09: 0000000000000000 [ 631.376362][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 631.385413][ T27] R13: 00000000000000fc R14: 0000000020000380 R15: 00007ffe2c1c6348 [ 631.395045][ T27] [ 631.398108][ T27] INFO: task syz.0.1100:8644 blocked for more than 145 seconds. [ 631.406090][ T27] Not tainted 6.1.97-syzkaller #0 [ 631.411859][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.420883][ T27] task:syz.0.1100 state:D stack:27560 pid:8644 ppid:3940 flags:0x00004004 [ 631.430281][ T27] Call Trace: [ 631.433629][ T27] [ 631.436626][ T27] __schedule+0x142d/0x4550 [ 631.441252][ T27] ? __mutex_lock+0x6b4/0xd80 [ 631.446031][ T27] ? __sched_text_start+0x8/0x8 [ 631.450951][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 631.456558][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 631.461809][ T27] schedule+0xbf/0x180 [ 631.466024][ T27] schedule_preempt_disabled+0xf/0x20 [ 631.471533][ T27] __mutex_lock+0x6b9/0xd80 [ 631.476541][ T27] ? __mutex_lock+0x53c/0xd80 [ 631.481637][ T27] ? misc_open+0x58/0x380 [ 631.486478][ T27] ? mutex_lock_nested+0x10/0x10 [ 631.491495][ T27] ? kobject_get_unless_zero+0x229/0x320 [ 631.497630][ T27] misc_open+0x58/0x380 [ 631.501865][ T27] chrdev_open+0x54a/0x630 [ 631.506741][ T27] ? cd_forget+0x160/0x160 [ 631.511214][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 631.516519][ T27] ? fsnotify_perm+0x471/0x590 [ 631.521332][ T27] ? cd_forget+0x160/0x160 [ 631.525849][ T27] do_dentry_open+0x7f9/0x10f0 [ 631.530687][ T27] path_openat+0x2644/0x2e60 [ 631.535400][ T27] ? mark_lock+0x9a/0x340 [ 631.539794][ T27] ? do_filp_open+0x480/0x480 [ 631.544577][ T27] do_filp_open+0x230/0x480 [ 631.549114][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 631.553837][ T27] ? _raw_spin_unlock+0x24/0x40 [ 631.558732][ T27] ? alloc_fd+0x59c/0x640 [ 631.563154][ T27] do_sys_openat2+0x13b/0x500 [ 631.567972][ T27] ? do_sys_open+0x220/0x220 [ 631.572680][ T27] ? cap_safe_nice+0x31f/0x3a0 [ 631.577482][ T27] __x64_sys_openat+0x243/0x290 [ 631.583114][ T27] ? __ia32_sys_open+0x270/0x270 [ 631.588112][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 631.594388][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 631.599633][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 631.606364][ T27] do_syscall_64+0x3b/0xb0 [ 631.610850][ T27] ? clear_bhb_loop+0x45/0xa0 [ 631.616810][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.622835][ T27] RIP: 0033:0x7f5ba1f75bd9 [ 631.627279][ T27] RSP: 002b:00007f5ba2dbc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 631.636193][ T27] RAX: ffffffffffffffda RBX: 00007f5ba2103f60 RCX: 00007f5ba1f75bd9 [ 631.644295][ T27] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: ffffffffffffff9c [ 631.652290][ T27] RBP: 00007f5ba1fe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 631.660338][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.668472][ T27] R13: 000000000000000b R14: 00007f5ba2103f60 R15: 00007ffc94681bf8 [ 631.676534][ T27] [ 631.679574][ T27] INFO: task syz-executor:8686 blocked for more than 145 seconds. [ 631.687622][ T27] Not tainted 6.1.97-syzkaller #0 [ 631.693233][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.701921][ T27] task:syz-executor state:D stack:27224 pid:8686 ppid:1 flags:0x00004004 [ 631.711263][ T27] Call Trace: [ 631.715742][ T27] [ 631.718731][ T27] __schedule+0x142d/0x4550 [ 631.724823][ T27] ? __mutex_lock+0x6b4/0xd80 [ 631.729610][ T27] ? __sched_text_start+0x8/0x8 [ 631.734560][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 631.740063][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 631.745442][ T27] schedule+0xbf/0x180 [ 631.749655][ T27] schedule_preempt_disabled+0xf/0x20 [ 631.755147][ T27] __mutex_lock+0x6b9/0xd80 [ 631.759724][ T27] ? __mutex_lock+0x53c/0xd80 [ 631.764551][ T27] ? misc_open+0x58/0x380 [ 631.769044][ T27] ? mutex_lock_nested+0x10/0x10 [ 631.774100][ T27] ? kobject_get_unless_zero+0x229/0x320 [ 631.779776][ T27] misc_open+0x58/0x380 [ 631.784205][ T27] chrdev_open+0x54a/0x630 [ 631.788656][ T27] ? cd_forget+0x160/0x160 [ 631.793262][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 631.798505][ T27] ? fsnotify_perm+0x471/0x590 [ 631.803366][ T27] ? cd_forget+0x160/0x160 [ 631.807810][ T27] do_dentry_open+0x7f9/0x10f0 [ 631.812676][ T27] path_openat+0x2644/0x2e60 [ 631.817399][ T27] ? mark_lock+0x9a/0x340 [ 631.821878][ T27] ? do_filp_open+0x480/0x480 [ 631.827087][ T27] do_filp_open+0x230/0x480 [ 631.831658][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 631.837419][ T27] ? _raw_spin_unlock+0x24/0x40 [ 631.842339][ T27] ? alloc_fd+0x59c/0x640 [ 631.846812][ T27] do_sys_openat2+0x13b/0x500 [ 631.851632][ T27] ? do_sys_open+0x220/0x220 [ 631.856355][ T27] __x64_sys_openat+0x243/0x290 [ 631.861251][ T27] ? __ia32_sys_open+0x270/0x270 [ 631.866318][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 631.872344][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 631.877633][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 631.883981][ T27] do_syscall_64+0x3b/0xb0 [ 631.888461][ T27] ? clear_bhb_loop+0x45/0xa0 [ 631.893351][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.899289][ T27] RIP: 0033:0x7f0233774591 [ 631.903801][ T27] RSP: 002b:00007fffd8d48a90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 631.912503][ T27] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0233774591 [ 631.920581][ T27] RDX: 0000000000000002 RSI: 00007f02337e3d5e RDI: 00000000ffffff9c [ 631.928786][ T27] RBP: 00007f02337e3d5e R08: 0000000000000000 R09: 00007f023443d6c0 [ 631.937168][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 631.945518][ T27] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 631.954120][ T27] [ 631.957184][ T27] INFO: task syz-executor:8688 blocked for more than 145 seconds. [ 631.965586][ T27] Not tainted 6.1.97-syzkaller #0 [ 631.971196][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.980096][ T27] task:syz-executor state:D stack:27224 pid:8688 ppid:1 flags:0x00004004 [ 631.989428][ T27] Call Trace: [ 631.993069][ T27] [ 631.996035][ T27] __schedule+0x142d/0x4550 [ 632.000607][ T27] ? __mutex_lock+0x6b4/0xd80 [ 632.005507][ T27] ? __sched_text_start+0x8/0x8 [ 632.010409][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 632.016023][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 632.021363][ T27] schedule+0xbf/0x180 [ 632.025640][ T27] schedule_preempt_disabled+0xf/0x20 [ 632.031081][ T27] __mutex_lock+0x6b9/0xd80 [ 632.036098][ T27] ? __mutex_lock+0x53c/0xd80 [ 632.040925][ T27] ? misc_open+0x58/0x380 [ 632.046038][ T27] ? mutex_lock_nested+0x10/0x10 [ 632.051039][ T27] ? kobject_get_unless_zero+0x229/0x320 [ 632.057830][ T27] misc_open+0x58/0x380 [ 632.062166][ T27] chrdev_open+0x54a/0x630 [ 632.067016][ T27] ? cd_forget+0x160/0x160 [ 632.071481][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 632.076768][ T27] ? fsnotify_perm+0x471/0x590 [ 632.081579][ T27] ? cd_forget+0x160/0x160 [ 632.086206][ T27] do_dentry_open+0x7f9/0x10f0 [ 632.091262][ T27] path_openat+0x2644/0x2e60 [ 632.095957][ T27] ? mark_lock+0x9a/0x340 [ 632.100553][ T27] ? do_filp_open+0x480/0x480 [ 632.105354][ T27] do_filp_open+0x230/0x480 [ 632.109897][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 632.114630][ T27] ? _raw_spin_unlock+0x24/0x40 [ 632.119528][ T27] ? alloc_fd+0x59c/0x640 [ 632.123981][ T27] do_sys_openat2+0x13b/0x500 [ 632.128828][ T27] ? do_sys_open+0x220/0x220 [ 632.133529][ T27] __x64_sys_openat+0x243/0x290 [ 632.138459][ T27] ? __ia32_sys_open+0x270/0x270 [ 632.143526][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 632.149600][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 632.155247][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 632.161285][ T27] do_syscall_64+0x3b/0xb0 [ 632.166176][ T27] ? clear_bhb_loop+0x45/0xa0 [ 632.170920][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.176931][ T27] RIP: 0033:0x7f7c38f74591 [ 632.181456][ T27] RSP: 002b:00007ffc294aeff0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 632.189983][ T27] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7c38f74591 [ 632.198459][ T27] RDX: 0000000000000002 RSI: 00007f7c38fe3d5e RDI: 00000000ffffff9c [ 632.206852][ T27] RBP: 00007f7c38fe3d5e R08: 0000000000000000 R09: 00007f7c39c3d6c0 [ 632.215032][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 632.223128][ T27] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 632.231131][ T27] [ 632.234221][ T27] [ 632.234221][ T27] Showing all locks held in the system: [ 632.241951][ T27] 1 lock held by rcu_tasks_kthre/12: [ 632.247380][ T27] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 632.257990][ T27] 1 lock held by rcu_tasks_trace/13: [ 632.264835][ T27] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 632.276771][ T27] 1 lock held by khungtaskd/27: [ 632.281680][ T27] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 632.292165][ T27] 3 locks held by kworker/1:1/41: [ 632.297511][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 632.308004][ T27] #1: ffffc90000b27d20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 632.321127][ T27] #2: ffffffff8e549128 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 [ 632.332629][ T27] 4 locks held by klogd/2992: [ 632.337333][ T27] #0: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 632.347415][ T27] #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 632.358911][ T27] #2: ffff88807d028a18 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xad/0x12e0 [ 632.368364][ T27] #3: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 632.379948][ T27] 2 locks held by getty/3309: [ 632.385110][ T27] #0: ffff888027936098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 632.395298][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 632.405758][ T27] 2 locks held by syz.2.1090/8565: [ 632.410890][ T27] #0: ffff88805c9d9100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 632.421299][ T27] #1: ffffffff8e549128 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 632.431594][ T27] 1 lock held by syz.1.1092/8571: [ 632.436993][ T27] #0: ffffffff8e549128 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_release+0x49/0x220 [ 632.447429][ T27] 2 locks held by syz.1.1092/8577: [ 632.452560][ T27] #0: ffffffff8e549128 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 632.462930][ T27] #1: ffff88805c9d9100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 [ 632.472722][ T27] 2 locks held by syz.3.1096/8598: [ 632.477913][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.487959][ T27] #1: ffffffff8e549128 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x130/0x680 [ 632.499478][ T27] 1 lock held by syz.4.1099/8641: [ 632.504848][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.515475][ T27] 1 lock held by syz.4.1099/8650: [ 632.520534][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.529465][ T27] 1 lock held by syz.0.1100/8644: [ 632.534906][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.543919][ T27] 1 lock held by syz-executor/8686: [ 632.549140][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.557806][ T27] 1 lock held by syz-executor/8688: [ 632.563055][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.571654][ T27] 1 lock held by syz-executor/8690: [ 632.576993][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.585563][ T27] 1 lock held by syz-executor/8695: [ 632.590865][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.600085][ T27] 1 lock held by syz-executor/8696: [ 632.605711][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.616267][ T27] 1 lock held by syz-executor/8700: [ 632.621859][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.630738][ T27] 1 lock held by syz-executor/8702: [ 632.636083][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.644827][ T27] 1 lock held by syz-executor/8704: [ 632.650080][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.659144][ T27] 1 lock held by syz-executor/8707: [ 632.664572][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.673605][ T27] 1 lock held by syz-executor/8708: [ 632.678851][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.687614][ T27] 1 lock held by syz-executor/8710: [ 632.693034][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.701810][ T27] 1 lock held by syz-executor/8712: [ 632.707649][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.717371][ T27] 1 lock held by syz-executor/8714: [ 632.724012][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.732654][ T27] 1 lock held by syz-executor/8717: [ 632.737917][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.746541][ T27] 1 lock held by syz-executor/8718: [ 632.751805][ T27] #0: ffffffff8d87b768 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 632.760528][ T27] [ 632.762931][ T27] ============================================= [ 632.762931][ T27] [ 632.771371][ T27] NMI backtrace for cpu 0 [ 632.775722][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 632.783552][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 632.793617][ T27] Call Trace: [ 632.796914][ T27] [ 632.799862][ T27] dump_stack_lvl+0x1e3/0x2cb [ 632.804557][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 632.810036][ T27] ? panic+0x764/0x764 [ 632.814119][ T27] ? vprintk_emit+0x622/0x740 [ 632.818994][ T27] ? printk_sprint+0x490/0x490 [ 632.823795][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 632.828932][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 632.833957][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 632.840283][ T27] ? _printk+0xd1/0x111 [ 632.844445][ T27] ? panic+0x764/0x764 [ 632.848517][ T27] ? __wake_up_klogd+0xcc/0x100 [ 632.853384][ T27] ? panic+0x764/0x764 [ 632.857487][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 632.863668][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 632.869934][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 632.875948][ T27] watchdog+0xf88/0xfd0 [ 632.880119][ T27] ? watchdog+0x1f8/0xfd0 [ 632.884486][ T27] kthread+0x28d/0x320 [ 632.888558][ T27] ? hungtask_pm_notify+0x50/0x50 [ 632.893602][ T27] ? kthread_blkcg+0xd0/0xd0 [ 632.898287][ T27] ret_from_fork+0x1f/0x30 [ 632.902729][ T27] [ 632.906038][ T27] Sending NMI from CPU 0 to CPUs 1: [ 632.911286][ C1] NMI backtrace for cpu 1 [ 632.911297][ C1] CPU: 1 PID: 3842 Comm: kworker/u4:8 Not tainted 6.1.97-syzkaller #0 [ 632.911316][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 632.911328][ C1] Workqueue: events_unbound toggle_allocation_gate [ 632.911355][ C1] RIP: 0010:preempt_count_add+0x9d/0x180 [ 632.911379][ C1] Code: 8b 05 6f 0d a4 7e 25 ff ff ff 7f 39 d8 75 43 4c 8b 74 24 18 4c 89 f7 e8 e1 51 0d 00 85 c0 74 0a 45 31 f6 31 ff e8 d3 51 0d 00 <65> 48 8b 1d 3b 0d a4 7e 48 81 c3 d8 14 00 00 48 89 d8 48 c1 e8 03 [ 632.911394][ C1] RSP: 0018:ffffc900031ffb00 EFLAGS: 00000246 [ 632.911408][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8a959a00 [ 632.911420][ C1] RDX: dffffc0000000000 RSI: ffffffff8aec13c0 RDI: ffffffff8152ad4c [ 632.911433][ C1] RBP: ffffc900031ffc50 R08: dffffc0000000000 R09: fffffbfff2093845 [ 632.911447][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 632.911459][ C1] R13: 1ffff9200063ff68 R14: ffffffff8152ad4c R15: dffffc0000000000 [ 632.911473][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 632.911488][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.911501][ C1] CR2: 000055988e828680 CR3: 000000000ce8e000 CR4: 00000000003506e0 [ 632.911517][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 632.911527][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 632.911538][ C1] Call Trace: [ 632.911543][ C1] [ 632.911549][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 632.911578][ C1] ? read_lock_is_recursive+0x10/0x10 [ 632.911606][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 632.911634][ C1] ? nmi_handle+0x25/0x440 [ 632.911668][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 632.911695][ C1] ? nmi_handle+0x12e/0x440 [ 632.911721][ C1] ? nmi_handle+0x25/0x440 [ 632.911747][ C1] ? preempt_count_add+0x9d/0x180 [ 632.911768][ C1] ? default_do_nmi+0x62/0x150 [ 632.911786][ C1] ? exc_nmi+0xa8/0x100 [ 632.911802][ C1] ? end_repeat_nmi+0x16/0x31 [ 632.911833][ C1] ? cpus_read_lock+0x4c/0x150 [ 632.911857][ C1] ? queued_write_lock_slowpath+0x420/0x441 [ 632.911881][ C1] ? cpus_read_lock+0x4c/0x150 [ 632.911901][ C1] ? preempt_count_add+0x9d/0x180 [ 632.911923][ C1] ? preempt_count_add+0x9d/0x180 [ 632.911945][ C1] ? preempt_count_add+0x9d/0x180 [ 632.911965][ C1] [ 632.911971][ C1] [ 632.911977][ C1] cpus_read_lock+0x4c/0x150 [ 632.911997][ C1] static_key_disable+0xe/0x20 [ 632.912018][ C1] toggle_allocation_gate+0x3e0/0x480 [ 632.912041][ C1] ? show_object+0xa0/0xa0 [ 632.912062][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 632.912090][ C1] ? print_irqtrace_events+0x210/0x210 [ 632.912114][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 632.912138][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 632.912163][ C1] ? process_one_work+0x7a9/0x11d0 [ 632.912183][ C1] process_one_work+0x8a9/0x11d0 [ 632.912212][ C1] ? worker_detach_from_pool+0x260/0x260 [ 632.912235][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 632.912256][ C1] ? kthread_data+0x4e/0xc0 [ 632.912284][ C1] ? wq_worker_running+0x97/0x190 [ 632.912312][ C1] worker_thread+0xa47/0x1200 [ 632.912347][ C1] kthread+0x28d/0x320 [ 632.912362][ C1] ? worker_clr_flags+0x190/0x190 [ 632.912381][ C1] ? kthread_blkcg+0xd0/0xd0 [ 632.912397][ C1] ret_from_fork+0x1f/0x30 [ 632.912429][ C1] [ 632.916062][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 632.916077][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 632.916100][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 632.916112][ T27] Call Trace: [ 632.916119][ T27] [ 632.916127][ T27] dump_stack_lvl+0x1e3/0x2cb [ 632.916167][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 632.916203][ T27] ? panic+0x764/0x764 [ 632.916227][ T27] ? llist_add_batch+0x160/0x1d0 [ 632.916262][ T27] ? vscnprintf+0x59/0x80 [ 632.916291][ T27] panic+0x318/0x764 [ 632.916316][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 632.916353][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 632.916384][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 632.916418][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 632.916455][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 632.916494][ T27] watchdog+0xfc7/0xfd0 [ 632.916529][ T27] ? watchdog+0x1f8/0xfd0 [ 632.916602][ T27] kthread+0x28d/0x320 [ 632.916621][ T27] ? hungtask_pm_notify+0x50/0x50 [ 632.916648][ T27] ? kthread_blkcg+0xd0/0xd0 [ 632.916670][ T27] ret_from_fork+0x1f/0x30 [ 632.916714][ T27] [ 632.917234][ T27] Kernel Offset: disabled [ 633.371884][ T27] Rebooting in 86400 seconds..