last executing test programs: 23m40.63972244s ago: executing program 4 (id=7): socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_io_uring_setup(0x4a9, 0x0, &(0x7f0000000000), 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=@newqdisc={0x124, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xa, 0xffff}, {0x0, 0xffe0}}, [@TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x39, 0x3, 0xfff7, 0x1, 0x1, 0x4, 0x5, 0x1}}, {0x6, 0x2, [0x400]}}, {{0x1c, 0x1, {0x8, 0x7, 0x7, 0x5, 0x0, 0x8, 0x6, 0x2}}, {0x8, 0x2, [0x7fff, 0x0]}}, {{0x1c, 0x1, {0x5, 0xa, 0x1d, 0x8, 0x0, 0x0, 0x9, 0x9}}, {0x16, 0x2, [0x9, 0x0, 0x9, 0x2, 0x7ff, 0x5, 0xb12e, 0x100, 0x6b30]}}, {{0x1c, 0x1, {0xf, 0x1, 0xfc4, 0xe5b9, 0x0, 0xfff, 0x9, 0x4}}, {0xc, 0x2, [0x4, 0x959, 0x7, 0x0]}}, {{0x1c, 0x1, {0xfe, 0x3, 0xd1, 0x6, 0x0, 0x7, 0xa, 0x3}}, {0xa, 0x2, [0x3, 0x9, 0x7]}}, {{0x1c, 0x1, {0xff, 0x2, 0xad5e, 0x0, 0x0, 0x4, 0x4, 0x8}}, {0x14, 0x2, [0xf, 0x7, 0x3, 0x3, 0xb128, 0x8000, 0x9, 0x1]}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) keyctl$clear(0x7, r4) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa0500"/269], 0x610) r6 = socket(0x9, 0x800, 0x2) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 23m38.948876525s ago: executing program 4 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000006b0000000800", @ANYRES32=r2], 0x28}}, 0x0) 23m37.863450206s ago: executing program 4 (id=14): mkdir(&(0x7f0000000080)='./file0\x00', 0x115) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi4\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x40000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000040)) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 23m36.208072453s ago: executing program 4 (id=23): connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 23m35.782748217s ago: executing program 4 (id=24): openat(0xffffffffffffffff, 0x0, 0x711301, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) 23m34.65701654s ago: executing program 4 (id=26): ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000a00)={0x1, 0x1, {0x57, 0x6, 0x4800, {0x1000, 0x7f}, {0x774c, 0x4}, @ramp={0x2, 0x400, {0xe26c, 0x80, 0x7, 0x9}}}, {0x55, 0x9, 0x5, {0xc}, {0x101, 0x6}, @rumble={0x4, 0xa89}}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000002}, 0x90) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000d00)={0x0, 0x2, 0x0, 0x0, 0x9}) dup(0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4c004) setrlimit(0x1, &(0x7f0000000040)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x18, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 23m34.25839587s ago: executing program 32 (id=26): ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000a00)={0x1, 0x1, {0x57, 0x6, 0x4800, {0x1000, 0x7f}, {0x774c, 0x4}, @ramp={0x2, 0x400, {0xe26c, 0x80, 0x7, 0x9}}}, {0x55, 0x9, 0x5, {0xc}, {0x101, 0x6}, @rumble={0x4, 0xa89}}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000002}, 0x90) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000d00)={0x0, 0x2, 0x0, 0x0, 0x9}) dup(0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4c004) setrlimit(0x1, &(0x7f0000000040)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x18, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m42.261081766s ago: executing program 3 (id=5300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r2, @ANYBLOB="44000280400001002400010071756575655f69640000000000"], 0x60}}, 0x40000) 2m42.220145205s ago: executing program 3 (id=5302): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="380000001a0001000000", @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m42.10765093s ago: executing program 3 (id=5306): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r1}, 0x10) 2m42.012499364s ago: executing program 3 (id=5308): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x807f}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m41.940296701s ago: executing program 3 (id=5311): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380), 0x40000000000006f, 0x34000, 0x0) 2m41.72914602s ago: executing program 3 (id=5316): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) sync() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2m26.726823442s ago: executing program 33 (id=5316): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@none}}}, 0x9) sync() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 6.478611422s ago: executing program 5 (id=6452): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f1"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="401201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.412986576s ago: executing program 0 (id=6475): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) close(r2) 4.345973006s ago: executing program 0 (id=6476): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x4b49, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) 4.33875138s ago: executing program 1 (id=6477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0xfffffffffffffeda, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0) 4.237749083s ago: executing program 1 (id=6479): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r0, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 4.232392354s ago: executing program 0 (id=6480): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x5b, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x40, 0xb, 0x2, "6594"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.194353259s ago: executing program 1 (id=6481): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4.149125354s ago: executing program 1 (id=6482): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e00)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.232779871s ago: executing program 5 (id=6484): syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904000000ff"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) timer_delete(0x0) 2.105096604s ago: executing program 2 (id=6489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x12, 0xffffffffffffffff, 0x10000000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000080)={r4, r5+10000000}, 0x1, 0x40, 0x1}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x34, r1, 0x205, 0xfffffffc, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x0) 2.056944987s ago: executing program 2 (id=6490): mknod(0x0, 0x8001420, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0xa13ca8e5839881ac, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) 1.889348626s ago: executing program 2 (id=6491): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC]) 1.49629868s ago: executing program 5 (id=6501): recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40000100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x871a15abc695f91d, 0x0, 0x80000}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[]) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000100)) r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69, 0x3}}, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) 1.426785978s ago: executing program 5 (id=6502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f00000004c0)}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xff}, 'port0\x00', 0x62, 0x20c1b, 0x6a81, 0x8000007, 0x3, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810dd}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.311934891s ago: executing program 2 (id=6503): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x28, r2, 0x3e3da1bd6725296d, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) 1.287885648s ago: executing program 2 (id=6504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x18}}, {{&(0x7f0000000580)={0xa, 0x4e22, 0x4, @loopback, 0x9}, 0x1c, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x5c, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast1}, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x7d, 0x6, [0x10000, 0x10001]}}]}}}], 0x48}}], 0x2, 0x810) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138ef"]) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000640)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 826.16587ms ago: executing program 0 (id=6505): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 825.867498ms ago: executing program 1 (id=6506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f00000004c0)}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xff}, 'port0\x00', 0x62, 0x20c1b, 0x6a81, 0x8000007, 0x3, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810dd}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (fail_nth: 1) 825.610747ms ago: executing program 2 (id=6507): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800001, r0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = inotify_init() chdir(&(0x7f0000000340)='./cgroup\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0x1}}, 0x20) memfd_create(0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540100001000010000001000ffdbdf25fe"], 0x154}}, 0x0) 825.368675ms ago: executing program 6 (id=6508): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xfffe}}}}}}, 0x0) 606.784797ms ago: executing program 0 (id=6509): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setgroups(0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000b080500010000000000f23661319b88b92ca8b3504092a7af270b401a98fe3878d6a385365a1ef905728fc9d80ccc6272ee1aa3f64a7f7446e0e244141d9a4e3ba2029826a6d7fdcb739903be2ae917cb1fb58883f4f59ebd08b23805395ec45e7c371d1cb50b7477557013ac5a1155a766a4458c53b146ffc9e4b15091cd5dc7fd883c0434e02b08e57c06666581a73666cf685702a60a8537c5c6d6b962e0590296bcfc95388428e92b25a67db5cd06cd6b1b3ae0dcbc45d3c06a41281c3f67955f42f4f10d4b972991051c315130d600"/227], 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) 605.435253ms ago: executing program 6 (id=6510): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(nhpoly1305-sse2)\x00'}, 0x58) (fail_nth: 1) 181.188797ms ago: executing program 0 (id=6511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 180.787233ms ago: executing program 1 (id=6512): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x8000, &(0x7f00000024c0)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0xee00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 180.670308ms ago: executing program 6 (id=6513): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x2, 0x0, 0x80000001, 0x6, 0x0, "7f1227f7adf97affe4ffff7d1800"}) r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{r2, r1, 0x1, [0x0, 0xf7df]}, {r2, r3, 0x7, [0x6]}, 0x1, [0x8, 0x3df]}) (fail_nth: 1) 174.532279ms ago: executing program 5 (id=6514): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x28, r2, 0x3e3da1bd6725296d, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) 108.547077ms ago: executing program 6 (id=6515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fb", @ANYBLOB=',roo']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 29.151301ms ago: executing program 6 (id=6516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 26.578591ms ago: executing program 6 (id=6517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x180, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socket(0x2, 0x80805, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000640)=0x800002) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x7) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xfff9}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x6, 0x5, 0x6979, 0x4, 0x5, 0x0, r5}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd, 0x14920}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x94b, 0x17, 0xfffffff7}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24048004}, 0x40) 0s ago: executing program 5 (id=6518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x18}}, {{&(0x7f0000000580)={0xa, 0x4e22, 0x4, @loopback, 0x9}, 0x1c, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x5c, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast1}, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x7d, 0x6, [0x10000, 0x10001]}}]}}}], 0x48}}], 0x2, 0x810) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138ef"]) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000640)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 5.526:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23999 comm="syz.0.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4eb8efc9 code=0x7ffc0000 [ 1330.807747][ T30] audit: type=1326 audit(1760806685.526:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23999 comm="syz.0.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4eb8efc9 code=0x7ffc0000 [ 1331.239415][T24016] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5327'. [ 1331.248554][T24016] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5327'. [ 1331.442619][T24030] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 1331.817891][T24045] fuse: Unknown parameter 'user_id00000000000000000000' [ 1331.879148][T24049] mmap: syz.2.5343 (24049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1332.736477][T24097] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 1332.909757][T18033] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1333.080148][T18033] usb 2-1: Using ep0 maxpacket: 8 [ 1333.086757][T18033] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.096602][T18033] usb 2-1: New USB device found, idVendor=056a, idProduct=ff83, bcdDevice= 0.e1 [ 1333.105646][T18033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.114988][T18033] usb 2-1: config 0 descriptor?? [ 1333.121654][T18033] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1333.189691][T20658] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1333.360600][T20658] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1333.371336][T20658] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.376088][T24107] fuse: Unknown parameter 'fd00000000000000000003' [ 1333.379384][T20658] usb 6-1: Product: syz [ 1333.392196][T20658] usb 6-1: Manufacturer: syz [ 1333.396840][T20658] usb 6-1: SerialNumber: syz [ 1334.150473][T24128] __nla_validate_parse: 3 callbacks suppressed [ 1334.150491][T24128] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5379'. [ 1334.167623][T24128] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5379'. [ 1334.193843][T24130] fuse: Unknown parameter 'fd00000000000000000003' [ 1334.562196][T24158] fuse: Unknown parameter 'fd00000000000000000003' [ 1334.819125][T20658] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1334.831058][T20658] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1334.840884][T20658] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1334.851672][T20658] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1335.486875][T24193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5409'. [ 1335.496103][T24193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5409'. [ 1335.697821][T13896] usb 2-1: USB disconnect, device number 50 [ 1335.954622][T13894] usb 6-1: USB disconnect, device number 41 [ 1336.011210][T24223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5422'. [ 1336.021452][T24223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5422'. [ 1336.317758][T24235] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5428'. [ 1336.328497][T24235] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5428'. [ 1336.409739][T13894] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1336.562160][T13894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.572526][T13894] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1336.581636][T13894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.598437][T13894] usb 6-1: config 0 descriptor?? [ 1336.605449][T13894] pwc: Askey VC010 type 2 USB webcam detected. [ 1336.689786][T24245] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1336.819908][ T11] block nbd5: Possible stuck request ffff8880269f7000: control (read@0,1024B). Runtime 900 seconds [ 1336.830790][ T11] block nbd5: Possible stuck request ffff8880269f71c0: control (read@1024,1024B). Runtime 900 seconds [ 1336.841767][ T11] block nbd5: Possible stuck request ffff8880269f7380: control (read@2048,1024B). Runtime 900 seconds [ 1336.849632][T20658] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1336.852733][ T11] block nbd5: Possible stuck request ffff8880269f7540: control (read@3072,1024B). Runtime 900 seconds [ 1337.007683][T13894] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1337.014777][T13894] pwc: recv_control_msg error -32 req 02 val 2700 [ 1337.023006][T13894] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1337.030334][T20658] usb 2-1: Using ep0 maxpacket: 8 [ 1337.036345][T13894] pwc: recv_control_msg error -32 req 04 val 1000 [ 1337.036846][T20658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1337.043448][T13894] pwc: recv_control_msg error -32 req 04 val 1300 [ 1337.053138][T20658] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1337.065170][T13894] pwc: recv_control_msg error -32 req 04 val 1400 [ 1337.070772][T20658] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1337.076256][T13894] pwc: recv_control_msg error -32 req 02 val 2000 [ 1337.088796][T20658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.091396][T13894] pwc: recv_control_msg error -32 req 02 val 2100 [ 1337.098573][T20658] usb 2-1: Product: syz [ 1337.098590][T20658] usb 2-1: Manufacturer: syz [ 1337.109763][T13894] pwc: recv_control_msg error -32 req 04 val 1500 [ 1337.116568][T20658] usb 2-1: SerialNumber: syz [ 1337.125609][T13894] pwc: recv_control_msg error -32 req 02 val 2500 [ 1337.127159][T20658] usb 2-1: config 0 descriptor?? [ 1337.132720][T13894] pwc: recv_control_msg error -32 req 02 val 2400 [ 1337.144292][T13894] pwc: recv_control_msg error -32 req 02 val 2600 [ 1337.347723][T20658] usb 2-1: USB disconnect, device number 51 [ 1337.356870][T13894] pwc: recv_control_msg error -71 req 02 val 2800 [ 1337.365010][T13894] pwc: recv_control_msg error -71 req 04 val 1100 [ 1337.372296][T13894] pwc: recv_control_msg error -71 req 04 val 1200 [ 1337.389919][T13894] pwc: Registered as video103. [ 1337.396178][T13894] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 1337.412208][T13894] usb 6-1: USB disconnect, device number 42 [ 1337.904590][T24269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5444'. [ 1337.960585][T24275] binder: 24273:24275 ioctl c0306201 200000000640 returned -14 [ 1338.189651][T13894] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1338.300113][T24281] 9pnet_fd: Insufficient options for proto=fd [ 1338.346697][T13894] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1338.355949][T13894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.364294][T13894] usb 2-1: Product: syz [ 1338.369025][T13894] usb 2-1: Manufacturer: syz [ 1338.375331][T13894] usb 2-1: SerialNumber: syz [ 1338.425672][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 1338.425686][ T30] audit: type=1400 audit(1760806693.486:529): avc: denied { setopt } for pid=24286 comm="syz.0.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1338.670546][T24302] overlayfs: failed to clone upperpath [ 1338.961620][ T30] audit: type=1400 audit(1760806694.026:530): avc: denied { firmware_load } for pid=24311 comm="syz.5.5465" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1339.029407][T24312] syz.5.5465 (24312) used greatest stack depth: 19720 bytes left [ 1339.251188][T24326] overlayfs: failed to clone upperpath [ 1339.329813][T20691] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1339.519747][T20691] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.529897][T20691] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1339.542631][T20691] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1339.555358][T20691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1339.563377][T20691] usb 6-1: SerialNumber: syz [ 1339.589201][T24348] overlayfs: failed to clone upperpath [ 1339.779111][T20691] usb 6-1: 0:2 : does not exist [ 1339.784055][T20691] usb 6-1: unit 255 not found! [ 1339.795228][T20691] usb 6-1: USB disconnect, device number 43 [ 1339.807216][T13894] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1339.819376][T13894] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1339.828880][T13894] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1339.838406][T13894] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1340.619736][T13894] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1340.769649][T13894] usb 6-1: Using ep0 maxpacket: 8 [ 1340.775912][T13894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1340.785660][T13894] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1340.797687][T13894] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1340.806768][T13894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.814838][T13894] usb 6-1: Product: syz [ 1340.818984][T13894] usb 6-1: Manufacturer: syz [ 1340.823718][T13894] usb 6-1: SerialNumber: syz [ 1340.829498][T13894] usb 6-1: config 0 descriptor?? [ 1340.987103][T20691] usb 2-1: USB disconnect, device number 52 [ 1341.060461][T13894] usb 6-1: USB disconnect, device number 44 [ 1341.133453][T24392] netlink: 'syz.1.5503': attribute type 1 has an invalid length. [ 1341.146857][T24392] __nla_validate_parse: 4 callbacks suppressed [ 1341.146872][T24392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5503'. [ 1341.226655][ T30] audit: type=1400 audit(1760806696.286:531): avc: denied { read } for pid=24398 comm="syz.1.5507" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1341.300666][ T30] audit: type=1400 audit(1760806696.286:532): avc: denied { open } for pid=24398 comm="syz.1.5507" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1341.338604][ T30] audit: type=1400 audit(1760806696.326:533): avc: denied { ioctl } for pid=24398 comm="syz.1.5507" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1341.394653][ T30] audit: type=1326 audit(1760806696.456:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24409 comm="syz.2.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e3d8efc9 code=0x7ffc0000 [ 1341.429042][ T30] audit: type=1326 audit(1760806696.456:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24409 comm="syz.2.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e3d8efc9 code=0x7ffc0000 [ 1341.453119][ T30] audit: type=1326 audit(1760806696.456:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24409 comm="syz.2.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43e3d8efc9 code=0x7ffc0000 [ 1341.482026][ T30] audit: type=1326 audit(1760806696.456:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24409 comm="syz.2.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e3d8efc9 code=0x7ffc0000 [ 1341.507016][ T30] audit: type=1326 audit(1760806696.456:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24409 comm="syz.2.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e3d8efc9 code=0x7ffc0000 [ 1341.603957][T24420] bridge0: entered promiscuous mode [ 1341.829697][T20691] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1341.869678][T20658] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1342.002795][T20691] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1342.011872][T20691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.020040][T20658] usb 6-1: Using ep0 maxpacket: 32 [ 1342.025189][T20691] usb 2-1: Product: syz [ 1342.029356][T20691] usb 2-1: Manufacturer: syz [ 1342.034207][T20691] usb 2-1: SerialNumber: syz [ 1342.039422][T20658] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1342.048382][T20658] usb 6-1: config 0 has no interface number 0 [ 1342.055386][T20658] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1342.067845][T20658] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1342.083276][T24424] fuse: Bad value for 'fd' [ 1342.089629][T20658] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.097636][T20658] usb 6-1: Product: syz [ 1342.101869][T20658] usb 6-1: Manufacturer: syz [ 1342.106475][T20658] usb 6-1: SerialNumber: syz [ 1342.116699][T20658] usb 6-1: config 0 descriptor?? [ 1342.123466][T20658] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1342.132957][T20658] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1342.469438][T20691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1342.481459][T20691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1342.491173][T20691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1342.501064][T20691] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1342.725790][T20658] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1343.339805][T20658] em28xx 6-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1343.349471][T20658] em28xx 6-1:0.89: board has no eeprom [ 1343.419712][T20658] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1343.426982][T20658] em28xx 6-1:0.89: analog set to bulk mode. [ 1343.433148][T20691] em28xx 6-1:0.89: Registering V4L2 extension [ 1343.444869][T20658] usb 6-1: USB disconnect, device number 45 [ 1343.452333][T20658] em28xx 6-1:0.89: Disconnecting em28xx [ 1343.464588][T20691] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1343.471692][T20691] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1343.478688][T20691] em28xx 6-1:0.89: No AC97 audio processor [ 1343.487064][T20691] usb 6-1: Decoder not found [ 1343.491952][T20691] em28xx 6-1:0.89: failed to create media graph [ 1343.498193][T20691] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1343.513029][T20691] em28xx 6-1:0.89: Registering snapshot button... [ 1343.531219][T20691] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input25 [ 1343.548255][T20691] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1343.559718][T20658] em28xx 6-1:0.89: Closing input extension [ 1343.566063][T20658] em28xx 6-1:0.89: Deregistering snapshot button [ 1343.591053][T20658] em28xx 6-1:0.89: Freeing device [ 1344.119655][T13894] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1344.250171][T13894] usb 6-1: device descriptor read/64, error -71 [ 1344.489647][T13894] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1344.595185][T20658] usb 2-1: USB disconnect, device number 53 [ 1344.618100][T24479] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 1344.625402][T13894] usb 6-1: device descriptor read/64, error -71 [ 1344.739999][T13894] usb usb6-port1: attempt power cycle [ 1344.989240][T24483] overlayfs: failed to clone upperpath [ 1345.080137][T13894] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1345.110443][T13894] usb 6-1: device descriptor read/8, error -71 [ 1345.350456][T13894] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1345.385968][T13894] usb 6-1: device descriptor read/8, error -71 [ 1345.389529][T24502] netlink: 'syz.2.5554': attribute type 39 has an invalid length. [ 1345.463750][T17061] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1345.473816][T17061] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1345.481493][T17061] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1345.494641][T17061] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1345.506972][T17061] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1345.510193][T13894] usb usb6-port1: unable to enumerate USB device [ 1345.552230][T24503] virt_wifi0 speed is unknown, defaulting to 1000 [ 1345.706217][T24515] netlink: 'syz.2.5557': attribute type 4 has an invalid length. [ 1345.734504][T24515] netlink: 'syz.2.5557': attribute type 4 has an invalid length. [ 1345.759262][T24503] chnl_net:caif_netlink_parms(): no params data found [ 1345.844721][T24503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.852468][T24503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.859682][T24503] bridge_slave_0: entered allmulticast mode [ 1345.866360][T24503] bridge_slave_0: entered promiscuous mode [ 1345.874012][T24503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.881194][T24503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.888378][T24503] bridge_slave_1: entered allmulticast mode [ 1345.895877][T24503] bridge_slave_1: entered promiscuous mode [ 1345.917391][T24503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.928603][T24503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1345.965924][T24503] team0: Port device team_slave_0 added [ 1345.974055][T24503] team0: Port device team_slave_1 added [ 1345.997573][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 1345.997586][ T30] audit: type=1326 audit(1760806701.056:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.0.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4eb8efc9 code=0x7ffc0000 [ 1346.037213][ T5925] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1346.040576][ T30] audit: type=1326 audit(1760806701.056:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.0.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4eb8efc9 code=0x7ffc0000 [ 1346.068087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.074577][ T30] audit: type=1326 audit(1760806701.056:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.0.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4eb8efc9 code=0x7ffc0000 [ 1346.098871][ T30] audit: type=1326 audit(1760806701.056:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.0.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4eb8efc9 code=0x7ffc0000 [ 1346.101856][T24503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.122218][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.122478][ T30] audit: type=1326 audit(1760806701.056:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.0.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4eb8efc9 code=0x7ffc0000 [ 1346.129186][T24503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.135975][ T30] audit: type=1326 audit(1760806701.056:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.0.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4eb8efc9 code=0x7ffc0000 [ 1346.159111][T24503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.184664][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.184978][ T30] audit: type=1326 audit(1760806701.056:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.0.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4eb8efc9 code=0x7ffc0000 [ 1346.185021][ T30] audit: type=1326 audit(1760806701.056:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.0.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4eb8efc9 code=0x7ffc0000 [ 1346.185064][ T30] audit: type=1326 audit(1760806701.056:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.0.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4eb8efc9 code=0x7ffc0000 [ 1346.185104][ T30] audit: type=1326 audit(1760806701.056:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.0.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d4eb8efc9 code=0x7ffc0000 [ 1346.322219][T24503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.329621][T24503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.358945][T24503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.389295][T24503] hsr_slave_0: entered promiscuous mode [ 1346.395483][T24503] hsr_slave_1: entered promiscuous mode [ 1346.401767][T24503] debugfs: 'hsr0' already exists in 'hsr' [ 1346.407597][T24503] Cannot create hsr debugfs directory [ 1346.490929][T24531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5564'. [ 1346.501661][T24531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5564'. [ 1346.511057][T24531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5564'. [ 1346.520339][T24531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5564'. [ 1346.588687][T24503] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1346.599443][T24503] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1346.609910][T24503] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1346.618723][T24503] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1346.652504][T24503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.659675][T24503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.668125][T24503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.675261][T24503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.735695][T24503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.753904][T16691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.765266][T16691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.809972][T24503] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.821743][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.828837][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.843590][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.850745][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.192639][T24503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.229986][ T5925] usb 2-1: device descriptor read/64, error -71 [ 1347.276057][T24576] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5580'. [ 1347.473302][ T5925] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1347.482342][T24503] veth0_vlan: entered promiscuous mode [ 1347.492322][T24503] veth1_vlan: entered promiscuous mode [ 1347.522126][T24503] veth0_macvtap: entered promiscuous mode [ 1347.532580][T24503] veth1_macvtap: entered promiscuous mode [ 1347.541278][T17061] Bluetooth: hci4: command tx timeout [ 1347.548276][T24503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.578270][T24503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1347.594158][T16691] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.615940][T16691] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.626155][T16691] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.640340][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 1347.648202][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.665187][ T5925] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1347.674853][ T5925] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1347.695153][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1347.705048][ T5925] usb 2-1: config 1 has no interface number 0 [ 1347.711788][ T5925] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1347.722437][ T5925] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1347.735941][ T5925] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1347.746336][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.760472][T16691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.768456][T16691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.781929][ T5925] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1347.839984][T16691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.861907][T16691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.972994][ T5925] snd_usb_pod 2-1:1.1: invalid control EP [ 1347.978742][ T5925] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 1348.010019][ T5925] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1348.030069][ T5925] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1348.191380][ T5925] usb 2-1: USB disconnect, device number 55 [ 1348.371812][T24605] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1348.480882][T21932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1348.489867][T21932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1348.497644][T21932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1348.516051][T21932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1348.523600][T21932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1348.539768][T18033] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1348.599930][T17290] syz_tun (unregistering): left allmulticast mode [ 1348.620643][T24611] virt_wifi0 speed is unknown, defaulting to 1000 [ 1348.700340][T18033] usb 6-1: Using ep0 maxpacket: 32 [ 1348.712150][T18033] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1348.730278][T18033] usb 6-1: config 0 has no interface number 0 [ 1348.736689][T18033] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1348.754773][T18033] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1348.764295][T18033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.772970][T18033] usb 6-1: Product: syz [ 1348.779348][T18033] usb 6-1: Manufacturer: syz [ 1348.790611][T18033] usb 6-1: SerialNumber: syz [ 1348.819360][T18033] usb 6-1: config 0 descriptor?? [ 1348.822032][T16691] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.834655][T16691] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.849647][T20658] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1348.873781][T24622] virt_wifi0 speed is unknown, defaulting to 1000 [ 1348.906153][T16691] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.916460][T16691] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.939064][T24611] chnl_net:caif_netlink_parms(): no params data found [ 1348.970637][T16691] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1348.980891][T16691] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.005511][T20658] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1349.014780][T20658] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1349.023014][T20658] usb 7-1: Product: syz [ 1349.029732][T20658] usb 7-1: Manufacturer: syz [ 1349.038123][T20658] usb 7-1: SerialNumber: syz [ 1349.042790][T20691] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1349.056247][T20658] usb 7-1: config 0 descriptor?? [ 1349.063066][T16691] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1349.073821][T20658] ch341 7-1:0.0: ch341-uart converter detected [ 1349.075799][T16691] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.116438][T24611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.124501][T24611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.131799][T24611] bridge_slave_0: entered allmulticast mode [ 1349.138918][T24611] bridge_slave_0: entered promiscuous mode [ 1349.147452][T24611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.154746][T24611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.163124][T24611] bridge_slave_1: entered allmulticast mode [ 1349.170340][T24611] bridge_slave_1: entered promiscuous mode [ 1349.199733][T20691] usb 2-1: Using ep0 maxpacket: 8 [ 1349.211549][T24611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.222862][T20691] usb 2-1: no configurations [ 1349.227905][T20691] usb 2-1: can't read configurations, error -22 [ 1349.232412][T24611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.248013][T18033] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1349.256173][T18033] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1349.264761][T18033] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1349.273057][T18033] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1349.284915][T18033] usb 6-1: USB disconnect, device number 50 [ 1349.305130][T24611] team0: Port device team_slave_0 added [ 1349.319417][T24611] team0: Port device team_slave_1 added [ 1349.353244][T16691] bridge_slave_1: left allmulticast mode [ 1349.358910][T16691] bridge_slave_1: left promiscuous mode [ 1349.359759][T20691] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1349.365186][T16691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.381467][T16691] bridge_slave_0: left allmulticast mode [ 1349.387092][T16691] bridge_slave_0: left promiscuous mode [ 1349.392777][T16691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.458056][T16691] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1349.521450][T20691] usb 2-1: Using ep0 maxpacket: 8 [ 1349.527249][T20691] usb 2-1: no configurations [ 1349.533664][T20691] usb 2-1: can't read configurations, error -22 [ 1349.542364][T20691] usb usb2-port1: attempt power cycle [ 1349.611809][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5599'. [ 1349.621893][T21932] Bluetooth: hci4: command tx timeout [ 1349.639032][T16691] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1349.663137][T24636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5599'. [ 1349.773759][T16691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.786166][T16691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.796582][T16691] bond0 (unregistering): Released all slaves [ 1349.811405][T16691] bond1 (unregistering): Released all slaves [ 1349.826360][T16691] bond2 (unregistering): Released all slaves [ 1349.845070][T24611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.854549][T24611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.864173][T24641] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5601'. [ 1349.881382][T20691] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1349.899764][T24611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.914376][T24611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.921529][T24611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.949522][T24611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.970512][T20691] usb 2-1: Using ep0 maxpacket: 8 [ 1349.976866][T20691] usb 2-1: no configurations [ 1349.984305][T20691] usb 2-1: can't read configurations, error -22 [ 1350.090807][T24611] hsr_slave_0: entered promiscuous mode [ 1350.107164][T24611] hsr_slave_1: entered promiscuous mode [ 1350.116799][T20658] ch341-uart ttyUSB0: failed to read break control: -71 [ 1350.123965][T20691] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1350.126607][T24611] debugfs: 'hsr0' already exists in 'hsr' [ 1350.131831][T20658] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1350.133636][T20658] usb 7-1: USB disconnect, device number 2 [ 1350.149031][T24611] Cannot create hsr debugfs directory [ 1350.153355][T20658] ch341 7-1:0.0: device disconnected [ 1350.170778][T20691] usb 2-1: Using ep0 maxpacket: 8 [ 1350.177736][T20691] usb 2-1: no configurations [ 1350.185980][T20691] usb 2-1: can't read configurations, error -22 [ 1350.204809][T20691] usb usb2-port1: unable to enumerate USB device [ 1350.251118][T16691] hsr_slave_0: left promiscuous mode [ 1350.256785][T16691] hsr_slave_1: left promiscuous mode [ 1350.263246][T16691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1350.270646][T16691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.279413][T16691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1350.286934][T16691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.303285][T16691] team0: left promiscuous mode [ 1350.308037][T16691] team_slave_0: left promiscuous mode [ 1350.313478][T16691] team_slave_1: left promiscuous mode [ 1350.319016][T16691] veth1_macvtap: left promiscuous mode [ 1350.324546][T16691] veth0_macvtap: left promiscuous mode [ 1350.330353][T16691] veth1_vlan: left promiscuous mode [ 1350.335650][T16691] veth0_vlan: left promiscuous mode [ 1350.582797][T21932] Bluetooth: hci6: command tx timeout [ 1350.597299][T16691] team0 (unregistering): Port device team_slave_1 removed [ 1350.627467][T16691] team0 (unregistering): Port device team_slave_0 removed [ 1351.039725][ T5925] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1351.047247][T13884] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1351.131864][ T30] kauditd_printk_skb: 480 callbacks suppressed [ 1351.131879][ T30] audit: type=1400 audit(1760806706.196:1140): avc: denied { ioctl } for pid=24666 comm="syz.0.5614" path="socket:[125105]" dev="sockfs" ino=125105 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1351.209689][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 1351.214983][T13884] usb 6-1: Using ep0 maxpacket: 16 [ 1351.222387][ T5925] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1351.231128][ T5925] usb 7-1: config 0 has no interface number 0 [ 1351.237752][ T5925] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1351.249833][T13884] usb 6-1: config 127 has an invalid interface number: 116 but max is 0 [ 1351.258881][T13884] usb 6-1: config 127 has no interface number 0 [ 1351.269223][T13884] usb 6-1: New USB device found, idVendor=0421, idProduct=0481, bcdDevice=e6.07 [ 1351.280470][T24673] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5617'. [ 1351.280693][ T5925] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1351.298718][T13884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.307475][T13884] usb 6-1: Product: syz [ 1351.312096][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.320437][T13884] usb 6-1: Manufacturer: syz [ 1351.325581][T13884] usb 6-1: SerialNumber: syz [ 1351.330243][ T5925] usb 7-1: Product: syz [ 1351.335531][ T5925] usb 7-1: Manufacturer: syz [ 1351.340477][ T5925] usb 7-1: SerialNumber: syz [ 1351.349490][ T5925] usb 7-1: config 0 descriptor?? [ 1351.512438][T24611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1351.519552][ T30] audit: type=1800 audit(1760806706.576:1141): pid=24683 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.5622" name="nullb0" dev="tmpfs" ino=3194 res=0 errno=0 [ 1351.528843][T24611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1351.578564][T13884] rndis_host 6-1:127.116: invalid descriptor buffer length [ 1351.602632][T13884] usb 6-1: bad CDC descriptors [ 1351.609290][T24611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1351.618966][T13884] cdc_acm 6-1:127.116: invalid descriptor buffer length [ 1351.635019][T24611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1351.647725][T13884] usb 6-1: USB disconnect, device number 51 [ 1351.649868][ T30] audit: type=1800 audit(1760806706.706:1142): pid=24685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.5623" name="nullb0" dev="tmpfs" ino=3194 res=0 errno=0 [ 1351.709867][T21932] Bluetooth: hci4: command tx timeout [ 1351.789163][T24611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.827184][T24611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.844854][T16574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.851994][T16574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.883596][T24700] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5627'. [ 1351.885897][T16574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.899702][T16574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.927133][T24611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1351.938112][T24611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1351.987345][T24707] netlink: 'syz.0.5630': attribute type 39 has an invalid length. [ 1352.206077][T24611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.283105][T24721] QAT: Stopping all acceleration devices. [ 1352.423185][T24611] veth0_vlan: entered promiscuous mode [ 1352.444796][T24611] veth1_vlan: entered promiscuous mode [ 1352.506017][T24611] veth0_macvtap: entered promiscuous mode [ 1352.544834][T24611] veth1_macvtap: entered promiscuous mode [ 1352.584384][ T5925] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1352.587231][T24611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1352.594340][ T5925] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1352.608381][T24611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1352.629852][ T5925] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1352.644807][T16654] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.657595][T16654] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.664626][T21932] Bluetooth: hci6: command tx timeout [ 1352.675324][ T5925] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1352.698325][T16654] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.716293][ T5925] usb 7-1: USB disconnect, device number 3 [ 1352.722535][T16654] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.845206][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.869332][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.891414][ T30] audit: type=1800 audit(1760806707.956:1143): pid=24740 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.5641" name="nullb0" dev="tmpfs" ino=3194 res=0 errno=0 [ 1352.942355][T16574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.960151][T16574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.012903][T24746] netlink: 'syz.1.5643': attribute type 39 has an invalid length. [ 1353.780062][T21932] Bluetooth: hci4: command tx timeout [ 1353.826568][T17061] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1353.835868][T17061] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1353.843763][T17061] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1353.871639][T17061] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1353.879463][T17061] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1353.938305][T24772] virt_wifi0 speed is unknown, defaulting to 1000 [ 1354.161474][ T5861] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1354.235975][T22668] syz_tun (unregistering): left allmulticast mode [ 1354.330427][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 1354.435282][ T5861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.540749][ T5861] usb 3-1: config 0 has no interfaces? [ 1354.619756][ T5861] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1354.637208][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.655293][ T5861] usb 3-1: Product: syz [ 1354.664656][ T5861] usb 3-1: Manufacturer: syz [ 1354.676651][ T5861] usb 3-1: SerialNumber: syz [ 1354.684196][T24772] chnl_net:caif_netlink_parms(): no params data found [ 1354.701820][ T5861] usb 3-1: config 0 descriptor?? [ 1354.761933][T17061] Bluetooth: hci6: command tx timeout [ 1354.869638][T24772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.876822][T24772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.886028][T24772] bridge_slave_0: entered allmulticast mode [ 1354.898235][T24772] bridge_slave_0: entered promiscuous mode [ 1354.907243][T24772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.923503][T24805] netlink: 'syz.6.5661': attribute type 1 has an invalid length. [ 1354.931402][T24772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.931551][T24772] bridge_slave_1: entered allmulticast mode [ 1354.939692][T24772] bridge_slave_1: entered promiscuous mode [ 1354.984518][T24772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1354.997817][T24772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.031827][T24772] team0: Port device team_slave_0 added [ 1355.039946][T24772] team0: Port device team_slave_1 added [ 1355.078794][T24772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1355.095396][T24772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.121814][T24738] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1355.130729][T24772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1355.143167][T24772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1355.151009][T24772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.177327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1355.183975][T24772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.265831][T24815] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5664'. [ 1355.281705][T24738] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1355.290397][T24738] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1355.302980][T24738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1355.303091][T24772] hsr_slave_0: entered promiscuous mode [ 1355.306286][T24772] hsr_slave_1: entered promiscuous mode [ 1355.314820][T24738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1355.337910][T24738] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1355.352937][T24772] debugfs: 'hsr0' already exists in 'hsr' [ 1355.355732][T24738] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1355.361737][T24772] Cannot create hsr debugfs directory [ 1355.367781][T24738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.404900][T24738] usb 6-1: config 0 descriptor?? [ 1355.429075][T24801] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1355.582089][T24772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1355.594055][T24772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.664765][T24772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1355.675212][T24772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.738225][T24772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1355.748611][T24772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.039700][T21932] Bluetooth: hci5: command tx timeout [ 1356.064212][T24738] usbhid 6-1:0.0: can't add hid device: -71 [ 1356.163710][T24738] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1356.177127][T24738] usb 6-1: USB disconnect, device number 52 [ 1356.234797][T24772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1356.249311][T24772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.366211][T24772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1356.374966][T24772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1356.391537][T24772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1356.400319][T24772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1356.447844][T24772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.463380][T24772] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.473282][T16574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.480351][T16574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.489848][T13883] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1356.501823][T16654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.508889][T16654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.652956][T13883] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1356.680368][T13883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.701325][T13883] usb 7-1: Product: syz [ 1356.708776][T24772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.709601][T13883] usb 7-1: Manufacturer: syz [ 1356.730484][T13883] usb 7-1: SerialNumber: syz [ 1356.820251][T21932] Bluetooth: hci6: command tx timeout [ 1356.939170][T20658] usb 3-1: USB disconnect, device number 42 [ 1357.314777][T13883] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1357.327244][T13883] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1357.355505][T13883] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1357.391219][T24772] veth0_vlan: entered promiscuous mode [ 1357.510623][T24871] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5676'. [ 1358.082050][T13883] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1358.100739][T21932] Bluetooth: hci5: command tx timeout [ 1358.115237][T24772] veth1_vlan: entered promiscuous mode [ 1358.526609][T24772] veth0_macvtap: entered promiscuous mode [ 1358.658509][T24772] veth1_macvtap: entered promiscuous mode [ 1359.193679][T24772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1359.205427][T24772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1359.223537][T16660] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.237521][T16660] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.260123][T16660] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.276278][T13896] usb 7-1: USB disconnect, device number 4 [ 1359.298465][T16660] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.456767][T24894] netlink: 'syz.2.5685': attribute type 1 has an invalid length. [ 1359.535350][T16653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.543431][T16653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.606052][T16574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.627407][T16574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.897640][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1360.201591][T24913] hub 2-0:1.0: USB hub found [ 1360.207157][T24913] hub 2-0:1.0: 1 port detected [ 1360.564437][T21932] Bluetooth: hci5: command tx timeout [ 1360.671848][T24919] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5690'. [ 1360.682244][T24919] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5690'. [ 1360.693848][T24919] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5690'. [ 1360.704079][T24919] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5690'. [ 1360.838249][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.849842][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1360.863740][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1360.873184][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1360.881748][ T24] usb 3-1: SerialNumber: syz [ 1361.145520][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.151895][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.769203][ T24] usb 3-1: 0:2 : does not exist [ 1361.781823][ T24] usb 3-1: unit 255 not found! [ 1361.798155][ T24] usb 3-1: USB disconnect, device number 43 [ 1362.227933][T24950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5703'. [ 1362.579788][T21932] Bluetooth: hci5: command tx timeout [ 1362.798240][T24962] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5707'. [ 1362.807575][T24962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5707'. [ 1362.817425][T24962] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5707'. [ 1362.843518][T24962] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5707'. [ 1364.749749][T13887] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1364.909645][T13887] usb 6-1: device descriptor read/64, error -71 [ 1365.159628][T13887] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1365.289764][T13887] usb 6-1: device descriptor read/64, error -71 [ 1365.424783][T13887] usb usb6-port1: attempt power cycle [ 1365.725105][T25014] QAT: Stopping all acceleration devices. [ 1365.769702][T13887] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1365.791963][T13887] usb 6-1: device descriptor read/8, error -71 [ 1365.919844][T13883] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1366.039638][T13887] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1366.070326][T13887] usb 6-1: device descriptor read/8, error -71 [ 1366.085770][T13883] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1366.095189][T13883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.106521][T13883] usb 7-1: Product: syz [ 1366.112793][T13883] usb 7-1: Manufacturer: syz [ 1366.117427][T13883] usb 7-1: SerialNumber: syz [ 1366.126662][T13883] usb 7-1: config 0 descriptor?? [ 1366.181613][T13887] usb usb6-port1: unable to enumerate USB device [ 1366.360289][T13883] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1366.908668][ T11] block nbd5: Possible stuck request ffff8880269f7000: control (read@0,1024B). Runtime 930 seconds [ 1366.920471][ T11] block nbd5: Possible stuck request ffff8880269f71c0: control (read@1024,1024B). Runtime 930 seconds [ 1366.931468][ T11] block nbd5: Possible stuck request ffff8880269f7380: control (read@2048,1024B). Runtime 930 seconds [ 1366.942450][ T11] block nbd5: Possible stuck request ffff8880269f7540: control (read@3072,1024B). Runtime 930 seconds [ 1367.100175][T13887] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1367.436543][T13883] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1367.836287][T13887] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1368.226633][T13887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.235284][T13887] usb 2-1: Product: syz [ 1368.239472][T13887] usb 2-1: Manufacturer: syz [ 1368.244154][T13887] usb 2-1: SerialNumber: syz [ 1368.507774][T13887] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1368.576854][T13887] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1368.659672][T13887] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1368.685335][T13887] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1368.706594][T24738] usb 7-1: USB disconnect, device number 5 [ 1368.987542][T25074] usb 2-1: USB disconnect, device number 60 [ 1370.679651][ T5861] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1370.839107][ T5861] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1370.849227][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.857466][ T5861] usb 3-1: Product: syz [ 1370.861786][ T5861] usb 3-1: Manufacturer: syz [ 1370.867241][ T5861] usb 3-1: SerialNumber: syz [ 1370.873914][ T5861] usb 3-1: config 0 descriptor?? [ 1371.082878][ T5861] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1371.869634][T13887] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1372.032947][T13887] usb 7-1: Using ep0 maxpacket: 8 [ 1372.039308][T13887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1372.049049][T13887] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1372.061483][T13887] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1372.070576][T13887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.078561][T13887] usb 7-1: Product: syz [ 1372.082751][T13887] usb 7-1: Manufacturer: syz [ 1372.087365][T13887] usb 7-1: SerialNumber: syz [ 1372.094193][ T5861] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1372.103857][T13887] usb 7-1: config 0 descriptor?? [ 1372.515405][ T5861] usb 7-1: USB disconnect, device number 6 [ 1373.496696][ T5861] usb 3-1: USB disconnect, device number 44 [ 1373.572124][T25147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1373.951345][T25154] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5773'. [ 1374.917980][T25154] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5773'. [ 1374.926973][T25154] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5773'. [ 1374.940729][T25154] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5773'. [ 1375.906818][T13887] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1376.112417][T13887] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1376.139613][T13887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.157796][T13887] usb 3-1: Product: syz [ 1376.167904][T13887] usb 3-1: Manufacturer: syz [ 1376.178021][T13887] usb 3-1: SerialNumber: syz [ 1376.549787][T13883] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1376.603479][T13887] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1376.655238][T13887] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1376.686215][T13887] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1376.719323][T13887] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1376.748972][T13883] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1376.821986][T13883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.873500][T13883] usb 6-1: Product: syz [ 1376.914741][T13883] usb 6-1: Manufacturer: syz [ 1376.940339][T13883] usb 6-1: SerialNumber: syz [ 1376.954081][T13883] usb 6-1: config 0 descriptor?? [ 1377.206190][T13883] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1378.013639][ T24] usb 3-1: USB disconnect, device number 45 [ 1378.223674][T13883] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1379.109336][T25217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5793'. [ 1379.399065][T13887] usb 6-1: USB disconnect, device number 57 [ 1379.571556][T13883] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1379.734337][T13883] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1379.743719][T13883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.752165][T13883] usb 3-1: Product: syz [ 1379.757807][T13883] usb 3-1: Manufacturer: syz [ 1379.763003][T13883] usb 3-1: SerialNumber: syz [ 1380.183777][T13883] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1380.195874][T13883] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1380.205581][T13883] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1380.218780][T13883] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1380.289670][T13887] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1380.474172][T13887] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1380.483912][T13887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.495559][T13887] usb 7-1: Product: syz [ 1380.500064][T13887] usb 7-1: Manufacturer: syz [ 1380.504694][T13887] usb 7-1: SerialNumber: syz [ 1380.532878][T13887] usb 7-1: config 0 descriptor?? [ 1380.755751][ T30] audit: type=1326 audit(1760806735.816:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25233 comm="syz.6.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb261f8efc9 code=0x7ffc0000 [ 1380.783218][ T30] audit: type=1326 audit(1760806735.816:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25233 comm="syz.6.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb261f8efc9 code=0x7ffc0000 [ 1380.807896][ T30] audit: type=1326 audit(1760806735.816:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25233 comm="syz.6.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb261f8efc9 code=0x7ffc0000 [ 1380.831742][ T30] audit: type=1326 audit(1760806735.816:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25233 comm="syz.6.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb261f8efc9 code=0x7ffc0000 [ 1380.867383][ T30] audit: type=1326 audit(1760806735.816:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25233 comm="syz.6.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb261f8efc9 code=0x7ffc0000 [ 1380.893225][ T30] audit: type=1326 audit(1760806735.816:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25233 comm="syz.6.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb261f8efc9 code=0x7ffc0000 [ 1380.908475][T25247] kvm: pic: non byte write [ 1380.929435][ T30] audit: type=1326 audit(1760806735.816:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25233 comm="syz.6.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb261f8efc9 code=0x7ffc0000 [ 1380.952998][ T30] audit: type=1326 audit(1760806735.816:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25233 comm="syz.6.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb261f8efc9 code=0x7ffc0000 [ 1380.976552][ T30] audit: type=1326 audit(1760806735.816:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25233 comm="syz.6.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb261f8efc9 code=0x7ffc0000 [ 1381.005854][ T30] audit: type=1326 audit(1760806735.816:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25233 comm="syz.6.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb261f8efc9 code=0x7ffc0000 [ 1381.035217][T13887] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1381.128349][T13887] usb 7-1: USB disconnect, device number 7 [ 1382.586747][ T24] usb 3-1: USB disconnect, device number 46 [ 1383.519684][T24738] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1383.810046][T24738] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.825479][T24738] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1383.850370][T24738] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1383.899641][T24738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1383.933367][T24738] usb 7-1: SerialNumber: syz [ 1384.071362][T25317] fuse: Unknown parameter 'fd0x0000000000000004' [ 1384.169403][T24738] usb 7-1: 0:2 : does not exist [ 1384.192377][T24738] usb 7-1: unit 255 not found! [ 1384.207386][T24738] usb 7-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1384.252230][T25323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5832'. [ 1384.265783][T24738] usb 7-1: USB disconnect, device number 8 [ 1386.302596][T25357] netlink: 'syz.2.5844': attribute type 39 has an invalid length. [ 1386.559978][T13887] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1386.784296][T13887] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1386.805306][T13887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.869708][T13887] usb 6-1: Product: syz [ 1386.881373][T13887] usb 6-1: Manufacturer: syz [ 1386.904317][T13887] usb 6-1: SerialNumber: syz [ 1387.340757][T13887] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1387.355042][T13887] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1387.376255][T13887] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1387.423563][T13887] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1388.963950][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1388.963968][ T30] audit: type=1800 audit(1760806744.026:1221): pid=25413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5864" name="nullb0" dev="tmpfs" ino=224 res=0 errno=0 [ 1389.783814][ T5925] usb 6-1: USB disconnect, device number 58 [ 1390.180018][ T5925] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1390.284043][T25435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5870'. [ 1390.746417][ T5925] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1390.796582][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.808341][ T5925] usb 6-1: Product: syz [ 1390.812632][ T5925] usb 6-1: Manufacturer: syz [ 1390.817925][ T5925] usb 6-1: SerialNumber: syz [ 1390.833908][ T5925] usb 6-1: config 0 descriptor?? [ 1391.218136][ T30] audit: type=1326 audit(1760806746.276:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.5.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1391.282202][ T30] audit: type=1326 audit(1760806746.276:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.5.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1391.317760][ T30] audit: type=1326 audit(1760806746.316:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.5.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1391.348192][ T5925] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1391.442519][ T5925] usb 6-1: USB disconnect, device number 59 [ 1391.484906][ T30] audit: type=1326 audit(1760806746.316:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.5.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1391.588266][ T30] audit: type=1326 audit(1760806746.316:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.5.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1391.612156][ T30] audit: type=1326 audit(1760806746.316:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.5.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1391.677288][ T30] audit: type=1326 audit(1760806746.316:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.5.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1391.883313][ T30] audit: type=1326 audit(1760806746.316:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.5.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1391.996966][ T30] audit: type=1326 audit(1760806746.316:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.5.5867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1392.789616][T13887] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1392.989919][T13887] usb 7-1: Using ep0 maxpacket: 32 [ 1393.020305][T13887] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1393.083858][T13887] usb 7-1: config 0 has no interface number 0 [ 1393.111239][T13887] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1393.173864][T13887] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1393.226284][T13887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.235025][T13887] usb 7-1: Product: syz [ 1393.239229][T13887] usb 7-1: Manufacturer: syz [ 1393.243877][T13887] usb 7-1: SerialNumber: syz [ 1393.267524][T13887] usb 7-1: config 0 descriptor?? [ 1394.796555][T13887] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1394.810087][T13887] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1394.825297][T13887] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1394.842504][T13887] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1394.872292][T13887] usb 7-1: USB disconnect, device number 9 [ 1394.940119][T13883] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1395.116285][T13883] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1395.136577][T13883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.153503][T13883] usb 6-1: Product: syz [ 1395.162191][T13883] usb 6-1: Manufacturer: syz [ 1395.172333][T13883] usb 6-1: SerialNumber: syz [ 1396.227368][T13883] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1396.258272][T13883] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1397.193371][T25388] block nbd5: Possible stuck request ffff8880269f7000: control (read@0,1024B). Runtime 960 seconds [ 1397.204393][T25388] block nbd5: Possible stuck request ffff8880269f71c0: control (read@1024,1024B). Runtime 960 seconds [ 1397.215570][T25388] block nbd5: Possible stuck request ffff8880269f7380: control (read@2048,1024B). Runtime 960 seconds [ 1397.226889][T25388] block nbd5: Possible stuck request ffff8880269f7540: control (read@3072,1024B). Runtime 960 seconds [ 1397.239855][T13883] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1397.271114][T13883] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1397.497673][T25511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5893'. [ 1397.509187][T25511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5893'. [ 1397.518602][T25511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5893'. [ 1397.536791][T25511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5893'. [ 1397.698855][T13883] usb 6-1: USB disconnect, device number 60 [ 1397.989680][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1397.989720][ T30] audit: type=1800 audit(1760806753.036:1236): pid=25522 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5897" name="nullb0" dev="tmpfs" ino=224 res=0 errno=0 [ 1403.527642][ T30] audit: type=1800 audit(1760806758.586:1237): pid=25616 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5930" name="nullb0" dev="tmpfs" ino=224 res=0 errno=0 [ 1403.625498][T25617] hub 2-0:1.0: USB hub found [ 1403.631120][T25617] hub 2-0:1.0: 1 port detected [ 1405.489398][T25634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5935'. [ 1405.572043][ T30] audit: type=1800 audit(1760806760.636:1238): pid=25638 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5938" name="nullb0" dev="tmpfs" ino=224 res=0 errno=0 [ 1406.461985][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1406.621403][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.651838][ T24] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1406.706209][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.731815][ T24] usb 7-1: config 0 descriptor?? [ 1406.745020][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 1407.078410][T25677] hub 2-0:1.0: USB hub found [ 1407.084169][T25677] hub 2-0:1.0: 1 port detected [ 1407.162566][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1407.199609][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 1407.222794][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1407.232669][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 1407.267399][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 1407.276963][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 1407.291672][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 1407.301256][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 1407.311482][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 1407.339815][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 1407.347872][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 1407.355240][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 1407.409841][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 1407.509655][T13887] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1407.663223][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 1407.764843][T13887] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1407.776495][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 1407.788599][T13887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.809747][ T24] pwc: Registered as video103. [ 1407.822750][T13887] usb 2-1: Product: syz [ 1407.832961][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26 [ 1407.844672][T13887] usb 2-1: Manufacturer: syz [ 1407.849682][T13887] usb 2-1: SerialNumber: syz [ 1407.945162][ T30] audit: type=1800 audit(1760806763.006:1239): pid=25684 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5956" name="nullb0" dev="tmpfs" ino=224 res=0 errno=0 [ 1407.968132][ T24] usb 7-1: USB disconnect, device number 10 [ 1408.989409][T13887] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1409.017351][T13887] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1409.043349][T13887] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1409.056544][T13887] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1409.387354][T25707] netlink: 'syz.5.5963': attribute type 1 has an invalid length. [ 1409.456861][T25711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1409.801276][T25724] fuse: Unknown parameter 'grou00000000000000000000' [ 1410.923359][ T24] usb 2-1: USB disconnect, device number 61 [ 1411.349627][ T24] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 1411.487951][T25743] netlink: 'syz.0.5975': attribute type 1 has an invalid length. [ 1411.701087][T25745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1411.834254][T13887] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1411.924589][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1411.935086][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.955260][ T24] usb 2-1: config 0 descriptor?? [ 1412.009622][T13887] usb 6-1: Using ep0 maxpacket: 32 [ 1412.019084][T13887] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1412.028306][T13887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.127921][T13887] usb 6-1: config 0 descriptor?? [ 1412.153699][T13887] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1412.307582][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1412.319243][ T24] asix 2-1:0.0: probe with driver asix failed with error -32 [ 1412.766987][T13887] gspca_vc032x: reg_r err -110 [ 1412.784143][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.798948][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.810037][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.815414][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.834738][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.853033][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.864445][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.869904][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.875236][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.880602][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.885905][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.891246][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.896575][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.902004][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.907325][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.912648][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.917965][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.923307][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1412.928628][T13887] gspca_vc032x: Unknown sensor... [ 1412.934067][T13887] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1414.287226][T13887] usb 6-1: USB disconnect, device number 61 [ 1414.308648][ T5925] usb 2-1: USB disconnect, device number 62 [ 1417.126330][T25817] netlink: 'syz.1.5998': attribute type 3 has an invalid length. [ 1417.134630][T25817] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5998'. [ 1417.821519][T13887] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1417.835162][T16574] bridge_slave_1: left allmulticast mode [ 1417.861728][T16574] bridge_slave_1: left promiscuous mode [ 1417.878339][T16574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.891169][T16574] bridge_slave_0: left allmulticast mode [ 1417.898266][T16574] bridge_slave_0: left promiscuous mode [ 1417.904055][T16574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.999657][T13887] usb 7-1: Using ep0 maxpacket: 32 [ 1418.091663][T13887] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1418.109739][T13887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.173632][T13887] usb 7-1: config 0 descriptor?? [ 1418.201576][T13887] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1418.948455][T16574] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1420.055732][T13887] gspca_vc032x: reg_r err -32 [ 1420.079328][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.123257][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.174499][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.218783][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.266095][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.306345][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.349917][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.387574][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.417979][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.445881][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.488036][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.614348][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.625112][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.636467][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.820276][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.825642][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.831067][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.836933][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1420.844092][T13887] gspca_vc032x: Unknown sensor... [ 1420.849484][T13887] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 1421.313739][T13887] usb 7-1: USB disconnect, device number 11 [ 1421.567944][T16574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.602919][T16574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.625087][T16574] bond0 (unregistering): Released all slaves [ 1421.964266][T16574] bond1 (unregistering): Released all slaves [ 1422.584080][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.590451][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.611757][T16574] bond2 (unregistering): Released all slaves [ 1422.903480][ T5861] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1423.177591][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.188291][ T5861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1423.235870][ T5861] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1423.258820][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1423.295521][ T5861] usb 2-1: SerialNumber: syz [ 1423.565263][ T5861] usb 2-1: 0:2 : does not exist [ 1423.577452][ T5861] usb 2-1: unit 8 not found! [ 1423.583565][T16574] bond3 (unregistering): Released all slaves [ 1423.588879][ T5861] usb 2-1: USB disconnect, device number 63 [ 1423.749632][T13887] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1424.621770][T16574] bond4 (unregistering): Released all slaves [ 1424.712672][T13887] usb 6-1: Using ep0 maxpacket: 32 [ 1424.764269][T13887] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1424.799952][T13887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.870906][T13887] usb 6-1: config 0 descriptor?? [ 1424.896993][T13887] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1424.972093][T16574] bond5 (unregistering): Released all slaves [ 1425.849102][T13887] gspca_vc032x: reg_w err -110 [ 1425.888931][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.914418][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.993377][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.047285][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.078768][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.108232][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.137457][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.182054][T25926] virt_wifi0 speed is unknown, defaulting to 1000 [ 1426.192072][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.463590][ T30] audit: type=1800 audit(1760806781.496:1240): pid=25922 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.6031" name="nullb0" dev="tmpfs" ino=224 res=0 errno=0 [ 1426.498159][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.518575][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.547222][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.583971][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.604173][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.605922][T25934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6033'. [ 1426.609459][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.609472][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.609480][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.609490][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.650540][T13887] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.655831][T13887] gspca_vc032x: Unknown sensor... [ 1426.681690][T13887] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1426.703571][T25931] virt_wifi0 speed is unknown, defaulting to 1000 [ 1426.828559][T16574] hsr_slave_0: left promiscuous mode [ 1426.835372][T16574] hsr_slave_1: left promiscuous mode [ 1426.850245][T16574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.862212][T16574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.873744][T16574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.884390][T16574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.885365][ T24] usb 6-1: USB disconnect, device number 62 [ 1426.917383][T16574] team0: left promiscuous mode [ 1426.922301][T16574] team_slave_0: left promiscuous mode [ 1426.927805][T16574] team_slave_1: left promiscuous mode [ 1426.936552][T16574] veth1_macvtap: left promiscuous mode [ 1426.942095][T16574] veth0_macvtap: left promiscuous mode [ 1426.947968][T16574] veth1_vlan: left promiscuous mode [ 1426.953316][T16574] veth0_vlan: left promiscuous mode [ 1427.229632][T13887] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1427.338314][T25953] hub 2-0:1.0: USB hub found [ 1427.344196][T25953] hub 2-0:1.0: 1 port detected [ 1427.565279][T13887] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.589104][T13887] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1427.614556][T13887] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1427.625204][T13887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1427.633756][T13887] usb 7-1: SerialNumber: syz [ 1427.704476][T16574] team0 (unregistering): Port device team_slave_1 removed [ 1427.715088][T25388] block nbd5: Possible stuck request ffff8880269f7000: control (read@0,1024B). Runtime 990 seconds [ 1427.726072][T25388] block nbd5: Possible stuck request ffff8880269f71c0: control (read@1024,1024B). Runtime 990 seconds [ 1427.737133][T25388] block nbd5: Possible stuck request ffff8880269f7380: control (read@2048,1024B). Runtime 990 seconds [ 1427.748261][T25388] block nbd5: Possible stuck request ffff8880269f7540: control (read@3072,1024B). Runtime 990 seconds [ 1427.761158][T16574] team0 (unregistering): Port device team_slave_0 removed [ 1427.915394][T13887] usb 7-1: 0:2 : does not exist [ 1427.931026][T13887] usb 7-1: USB disconnect, device number 12 [ 1430.445422][T25963] virt_wifi0 speed is unknown, defaulting to 1000 [ 1430.517124][T25965] virt_wifi0 speed is unknown, defaulting to 1000 [ 1431.386305][T25992] netlink: 'syz.2.6054': attribute type 1 has an invalid length. [ 1431.418893][T25992] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6054'. [ 1431.432999][T25992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1431.508999][T25996] openvswitch: netlink: Flow key attr not present in new flow. [ 1431.522299][T13896] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1431.749759][T13896] usb 2-1: Using ep0 maxpacket: 32 [ 1432.020929][T13896] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1432.038405][T13896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.056109][T13896] usb 2-1: config 0 descriptor?? [ 1432.063292][T13896] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1432.809603][ T5925] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1432.962765][ T5925] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1432.972065][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.980138][ T5925] usb 6-1: Product: syz [ 1432.984299][ T5925] usb 6-1: Manufacturer: syz [ 1432.988884][ T5925] usb 6-1: SerialNumber: syz [ 1433.916315][T13896] gspca_vc032x: reg_r err -32 [ 1434.245345][T26025] netlink: 'syz.2.6066': attribute type 1 has an invalid length. [ 1434.333293][T26028] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6066'. [ 1434.426596][ T5925] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1434.498889][ T5925] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1434.538749][ T5925] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1434.665375][ T5925] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1434.680809][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.683739][T26029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1434.686101][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.686113][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.686123][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.686132][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.723101][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.728393][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.753529][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.758822][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.768381][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.776024][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.781337][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.786611][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.791977][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.797532][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.802861][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.810145][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.819686][T13896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1434.824980][T13896] gspca_vc032x: Unknown sensor... [ 1434.838751][T26035] virt_wifi0 speed is unknown, defaulting to 1000 [ 1434.845245][T13896] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1434.927183][T26036] virt_wifi0 speed is unknown, defaulting to 1000 [ 1434.964745][T13896] usb 2-1: USB disconnect, device number 64 [ 1435.875963][ T5925] usb 6-1: USB disconnect, device number 63 [ 1436.653804][T26076] hub 2-0:1.0: USB hub found [ 1436.658805][T26076] hub 2-0:1.0: 1 port detected [ 1437.350232][T26083] openvswitch: netlink: IP tunnel dst address not specified [ 1437.579639][T20691] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1437.769627][T20691] usb 7-1: Using ep0 maxpacket: 32 [ 1437.796685][T20691] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1437.834466][T20691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.862616][T26100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6085'. [ 1437.870694][T20691] usb 7-1: config 0 descriptor?? [ 1437.902970][T20691] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1438.608295][T26115] hub 2-0:1.0: USB hub found [ 1438.614047][T26115] hub 2-0:1.0: 1 port detected [ 1439.314147][T26126] hub 2-0:1.0: USB hub found [ 1439.319020][T26126] hub 2-0:1.0: 1 port detected [ 1439.971413][T26125] hub 2-0:1.0: USB hub found [ 1439.976252][T26125] hub 2-0:1.0: 1 port detected [ 1440.344937][T20691] gspca_vc032x: reg_r err -32 [ 1440.351807][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.357171][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.372867][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.381099][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.386445][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.403660][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.409066][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.418445][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.453051][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.458460][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.467827][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.479876][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.485717][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.491144][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.524498][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.540760][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.546243][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.558574][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1440.564058][T20691] gspca_vc032x: Unknown sensor... [ 1440.569991][T20691] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 1440.880414][T26152] virt_wifi0 speed is unknown, defaulting to 1000 [ 1440.985296][T26156] virt_wifi0 speed is unknown, defaulting to 1000 [ 1441.110063][ T5925] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1441.293398][ T5925] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1441.372479][ T5925] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1441.481955][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.628237][ T5925] usb 6-1: Product: syz [ 1441.700363][ T5925] usb 6-1: Manufacturer: syz [ 1441.776327][ T5925] usb 6-1: SerialNumber: syz [ 1441.993244][ T5925] usb 6-1: config 0 descriptor?? [ 1442.259180][T13883] usb 7-1: USB disconnect, device number 13 [ 1442.531554][T26178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6107'. [ 1442.963869][T26191] virt_wifi0 speed is unknown, defaulting to 1000 [ 1443.024663][T26192] virt_wifi0 speed is unknown, defaulting to 1000 [ 1443.350993][T13883] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1443.536293][T13883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.570022][T13883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1443.598252][T13883] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1443.649766][T13883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1443.657777][T13883] usb 2-1: SerialNumber: syz [ 1443.847146][T26212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6117'. [ 1444.078606][T13883] usb 2-1: 0:2 : does not exist [ 1444.128364][T13883] usb 2-1: unit 5 not found! [ 1444.473069][T13883] usb 2-1: USB disconnect, device number 65 [ 1444.718469][ T5925] usb 6-1: USB disconnect, device number 64 [ 1445.941448][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6123'. [ 1446.061714][T26248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6124'. [ 1446.969016][T20691] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1447.309787][T20691] usb 7-1: Using ep0 maxpacket: 32 [ 1447.312396][T20691] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1447.325367][T20691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.353187][T20691] usb 7-1: config 0 descriptor?? [ 1447.371302][T20691] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1447.635100][T20691] gspca_vc032x: reg_r err -32 [ 1447.641996][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1447.648561][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1447.654199][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1447.660256][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1447.674434][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1447.679972][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.244277][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.268834][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.322094][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.431770][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.437951][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.464090][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.469723][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.475064][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.481166][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.487817][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.493410][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.498745][T20691] gspca_vc032x: I2c Bus Busy Wait 00 [ 1448.504488][T20691] gspca_vc032x: Unknown sensor... [ 1448.515969][T20691] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 1449.773070][T20691] usb 7-1: USB disconnect, device number 14 [ 1450.030359][T26332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6149'. [ 1450.052317][T26332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6149'. [ 1450.065721][T26332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6149'. [ 1450.079855][T26332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6149'. [ 1450.479653][T13887] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 1450.677034][T13887] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1450.687556][T13887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.716105][T13887] usb 6-1: config 0 descriptor?? [ 1452.334273][T13887] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1452.388667][T13887] asix 6-1:0.0: probe with driver asix failed with error -32 [ 1452.739740][T26375] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6163'. [ 1453.369026][T13887] usb 6-1: USB disconnect, device number 65 [ 1453.443673][ T30] audit: type=1326 audit(1760806808.506:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26398 comm="syz.5.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1453.482549][ T30] audit: type=1326 audit(1760806808.506:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26398 comm="syz.5.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1453.509651][ T30] audit: type=1326 audit(1760806808.506:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26398 comm="syz.5.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1453.536587][ T30] audit: type=1326 audit(1760806808.506:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26398 comm="syz.5.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1453.578086][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6173'. [ 1453.620807][ T30] audit: type=1326 audit(1760806808.506:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26398 comm="syz.5.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1453.683579][ T30] audit: type=1326 audit(1760806808.506:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26398 comm="syz.5.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1453.736121][ T30] audit: type=1326 audit(1760806808.506:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26398 comm="syz.5.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1453.766627][ T30] audit: type=1326 audit(1760806808.506:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26398 comm="syz.5.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1453.790926][ T30] audit: type=1326 audit(1760806808.506:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26398 comm="syz.5.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1453.815636][ T30] audit: type=1326 audit(1760806808.506:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26398 comm="syz.5.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fe72e78efc9 code=0x7ffc0000 [ 1453.910019][T26409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6176'. [ 1455.426852][T26434] fuse: Invalid rootmode [ 1455.529780][T13896] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 1455.658110][T26446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6190'. [ 1455.691700][T13896] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1455.700944][T13896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.717916][T13896] usb 7-1: config 0 descriptor?? [ 1456.347721][T13896] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1456.475958][T13896] asix 7-1:0.0: probe with driver asix failed with error -32 [ 1457.684077][T13883] usb 7-1: USB disconnect, device number 15 [ 1457.783753][T25388] block nbd5: Possible stuck request ffff8880269f7000: control (read@0,1024B). Runtime 1020 seconds [ 1457.794887][T25388] block nbd5: Possible stuck request ffff8880269f71c0: control (read@1024,1024B). Runtime 1020 seconds [ 1457.806975][T25388] block nbd5: Possible stuck request ffff8880269f7380: control (read@2048,1024B). Runtime 1020 seconds [ 1457.822816][T25388] block nbd5: Possible stuck request ffff8880269f7540: control (read@3072,1024B). Runtime 1020 seconds [ 1459.275690][T26522] openvswitch: netlink: Flow key attr not present in new flow. [ 1459.529634][T13896] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1460.443590][T13896] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1460.459398][T13896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.469965][T13896] usb 7-1: Product: syz [ 1460.474127][T13896] usb 7-1: Manufacturer: syz [ 1460.480278][T13896] usb 7-1: SerialNumber: syz [ 1460.490063][T13896] usb 7-1: config 0 descriptor?? [ 1460.710463][T13896] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1462.381713][T13896] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1462.403030][T13896] usb 7-1: USB disconnect, device number 16 [ 1467.169760][T20691] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1467.353405][T20691] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1467.365282][T20691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.373538][T20691] usb 7-1: Product: syz [ 1467.377695][T20691] usb 7-1: Manufacturer: syz [ 1467.382851][T20691] usb 7-1: SerialNumber: syz [ 1467.393035][T20691] usb 7-1: config 0 descriptor?? [ 1467.397776][T26670] fuse: Unknown parameter 'use00000000000000000000' [ 1467.603065][T20691] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1469.207664][T20691] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1469.235438][T20691] usb 7-1: USB disconnect, device number 17 [ 1470.615069][T26708] syz_tun: entered allmulticast mode [ 1470.667812][T26707] syz_tun: left allmulticast mode [ 1470.741692][T26683] Bluetooth: hci4: command 0x0406 tx timeout [ 1470.747747][T26683] Bluetooth: hci6: command 0x0406 tx timeout [ 1470.801969][T26719] netlink: 'syz.6.6285': attribute type 39 has an invalid length. [ 1470.913922][T26725] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1470.960067][T26732] fuse: Unknown parameter 'use00000000000000000000' [ 1471.141825][T26736] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1472.352906][T17061] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1472.363149][T17061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1472.373131][T17061] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1472.391870][T17061] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1472.399931][T17061] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1472.437310][T16653] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.489098][T26756] virt_wifi0 speed is unknown, defaulting to 1000 [ 1472.510140][T26768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1472.527521][T26768] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1472.528301][T16653] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.545227][T13896] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1472.686276][T26770] QAT: Stopping all acceleration devices. [ 1472.694860][T16653] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.722670][T13896] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1472.750778][T13896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.783853][T13896] usb 7-1: Product: syz [ 1472.799566][T13896] usb 7-1: Manufacturer: syz [ 1472.806293][T13896] usb 7-1: SerialNumber: syz [ 1472.862442][T13896] usb 7-1: config 0 descriptor?? [ 1472.923117][T16653] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.024728][T26786] Bluetooth: MGMT ver 1.23 [ 1473.103882][T13896] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1473.133509][T26756] chnl_net:caif_netlink_parms(): no params data found [ 1473.258084][T16653] bridge_slave_1: left allmulticast mode [ 1473.268166][T16653] bridge_slave_1: left promiscuous mode [ 1473.277588][T16653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.286570][T16653] bridge_slave_0: left allmulticast mode [ 1473.292555][T16653] bridge_slave_0: left promiscuous mode [ 1473.298416][T16653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.452209][T16653] dvmrp1 (unregistering): left allmulticast mode [ 1473.580531][T16653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1473.590950][T16653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1473.601134][T16653] bond0 (unregistering): Released all slaves [ 1473.612212][T16653] bond1 (unregistering): Released all slaves [ 1473.691715][T16653] bond2 (unregistering): Released all slaves [ 1473.715849][T26805] warning: `syz.2.6314' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1473.764162][T26756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.786314][T26756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.804280][T26756] bridge_slave_0: entered allmulticast mode [ 1473.818625][T26756] bridge_slave_0: entered promiscuous mode [ 1473.828769][T26756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.835964][T26756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.844352][T26756] bridge_slave_1: entered allmulticast mode [ 1473.851641][T26756] bridge_slave_1: entered promiscuous mode [ 1473.882186][T26810] netlink: 'syz.1.6316': attribute type 39 has an invalid length. [ 1473.893007][T26808] syz_tun: entered allmulticast mode [ 1473.954864][T26756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.967646][T26756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.993648][T26808] dvmrp1: entered allmulticast mode [ 1474.028474][T16653] hsr_slave_0: left promiscuous mode [ 1474.034558][T16653] hsr_slave_1: left promiscuous mode [ 1474.040662][T16653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.048103][T16653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.055770][T16653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.063466][T16653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.082396][T16653] veth1_macvtap: left promiscuous mode [ 1474.088147][T16653] veth0_macvtap: left promiscuous mode [ 1474.093769][T16653] veth1_vlan: left promiscuous mode [ 1474.099034][T16653] veth0_vlan: left promiscuous mode [ 1474.373624][T16653] team0 (unregistering): Port device team_slave_1 removed [ 1474.405445][T16653] team0 (unregistering): Port device team_slave_0 removed [ 1474.501525][T21932] Bluetooth: hci0: command tx timeout [ 1474.527092][T13896] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1474.538280][T13896] usb 7-1: USB disconnect, device number 18 [ 1474.687631][T26756] team0: Port device team_slave_0 added [ 1474.694552][T26807] syz_tun: left allmulticast mode [ 1474.701307][T26756] team0: Port device team_slave_1 added [ 1474.761307][T26756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.769605][T26756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.795497][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.802089][T26756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.819091][T26756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.827847][T26756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.854116][T26756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.870492][T26817] syz_tun: entered allmulticast mode [ 1474.879034][T26816] syz_tun: left allmulticast mode [ 1474.946074][T26756] hsr_slave_0: entered promiscuous mode [ 1474.953437][T26756] hsr_slave_1: entered promiscuous mode [ 1474.960357][T26756] debugfs: 'hsr0' already exists in 'hsr' [ 1474.968894][T26756] Cannot create hsr debugfs directory [ 1475.553299][T26836] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1475.655754][T26842] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6330'. [ 1475.821850][T26756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1475.852397][T26756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1475.885906][T26756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1475.932324][T26756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1475.964535][T26855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1476.092299][T26756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.120861][T26756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.139363][T16574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.146472][T16574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.181469][T26863] syz_tun: entered allmulticast mode [ 1476.190619][T16660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.197711][T16660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.240389][T26863] dvmrp1: entered allmulticast mode [ 1476.312841][T26862] syz_tun: left allmulticast mode [ 1476.581302][T21932] Bluetooth: hci0: command tx timeout [ 1476.791609][T26756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.331302][T26756] veth0_vlan: entered promiscuous mode [ 1477.485708][T26756] veth1_vlan: entered promiscuous mode [ 1477.611670][T26756] veth0_macvtap: entered promiscuous mode [ 1477.642520][T26756] veth1_macvtap: entered promiscuous mode [ 1477.692348][T26756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1477.713769][T26756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1477.747751][T16653] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.765465][T16653] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.786861][T16653] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.803049][T16653] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.840418][T16585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.855972][T16585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.891456][T16585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.900586][T16585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.270006][T26949] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1478.277125][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1478.349629][T20691] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1478.367440][T26951] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1478.445762][T26961] netlink: 'syz.1.6373': attribute type 39 has an invalid length. [ 1478.512760][T20691] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1478.529341][T20691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.541711][T20691] usb 6-1: Product: syz [ 1478.558057][T20691] usb 6-1: Manufacturer: syz [ 1478.565759][T20691] usb 6-1: SerialNumber: syz [ 1478.578229][T20691] usb 6-1: config 0 descriptor?? [ 1478.622915][T26971] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6376'. [ 1478.632159][T26971] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6376'. [ 1478.642142][T26971] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6376'. [ 1478.653739][T26971] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6376'. [ 1478.663192][T21932] Bluetooth: hci0: command tx timeout [ 1478.801467][T20691] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1478.865140][T26977] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.013328][T26977] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.087051][T26977] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.142999][T26977] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.208874][T16653] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.226946][T16585] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.241322][T16653] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.253946][T16653] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.745332][T27015] fuse: Bad value for 'fd' [ 1480.053466][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1480.070163][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1480.089810][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1480.097142][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1480.104807][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1480.111967][T20691] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1480.130138][T20691] usb 6-1: USB disconnect, device number 66 [ 1480.290047][T27037] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6408'. [ 1480.299157][T27037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6408'. [ 1480.313777][T27037] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6408'. [ 1480.323229][T27037] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6408'. [ 1480.323771][T17484] syz_tun (unregistering): left allmulticast mode [ 1480.350054][T26717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1480.357653][T26717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1480.366178][T26717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1480.374025][T26717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1480.382928][T26717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1480.405470][T27038] virt_wifi0 speed is unknown, defaulting to 1000 [ 1480.501960][T16585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.518303][T27038] chnl_net:caif_netlink_parms(): no params data found [ 1480.553484][T16585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.594140][T27038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.602220][T27038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.609308][T27038] bridge_slave_0: entered allmulticast mode [ 1480.616016][T27038] bridge_slave_0: entered promiscuous mode [ 1480.623688][T27038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.631066][T27038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.638527][T27038] bridge_slave_1: entered allmulticast mode [ 1480.645269][T27038] bridge_slave_1: entered promiscuous mode [ 1480.687879][T16585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.706123][T27038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.728326][T27038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.740300][T17061] Bluetooth: hci0: command tx timeout [ 1480.797398][T16585] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.818417][T27038] team0: Port device team_slave_0 added [ 1480.843132][T27038] team0: Port device team_slave_1 added [ 1480.896676][T27038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.907936][T27038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.934943][T27038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.948127][T27038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.955288][T27038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.981602][T27038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.981775][T17061] Bluetooth: hci5: command 0x0406 tx timeout [ 1481.095793][T27038] hsr_slave_0: entered promiscuous mode [ 1481.108310][T27038] hsr_slave_1: entered promiscuous mode [ 1481.114612][T27038] debugfs: 'hsr0' already exists in 'hsr' [ 1481.122259][T27038] Cannot create hsr debugfs directory [ 1481.261953][T16585] macvlan2: left allmulticast mode [ 1481.267098][T16585] team0: left allmulticast mode [ 1481.272206][T16585] team_slave_0: left allmulticast mode [ 1481.277651][T16585] team_slave_1: left allmulticast mode [ 1481.283211][T16585] macvlan2: left promiscuous mode [ 1481.289091][T16585] bridge0: port 3(macvlan2) entered disabled state [ 1481.297493][T16585] bridge_slave_1: left allmulticast mode [ 1481.298467][T27068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1481.303786][T16585] bridge_slave_1: left promiscuous mode [ 1481.312320][T27068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1481.317818][T16585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.327192][T27068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1481.347366][T16585] bridge_slave_0: left allmulticast mode [ 1481.349489][T27068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1481.353599][T16585] bridge_slave_0: left promiscuous mode [ 1481.378390][T16585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.442438][T16585] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1481.659125][T16585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1481.671389][T16585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.683267][T16585] bond0 (unregistering): Released all slaves [ 1481.698848][T16585] bond1 (unregistering): Released all slaves [ 1481.779154][T16585] bond2 (unregistering): Released all slaves [ 1481.971270][T16585] hsr_slave_0: left promiscuous mode [ 1481.976952][T16585] hsr_slave_1: left promiscuous mode [ 1481.983099][T16585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1481.990810][T16585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1481.998639][T16585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.008989][T16585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.037694][T16585] team0: left promiscuous mode [ 1482.043256][T16585] team_slave_0: left promiscuous mode [ 1482.048750][T16585] team_slave_1: left promiscuous mode [ 1482.055540][T16585] veth1_macvtap: left promiscuous mode [ 1482.065048][T16585] veth0_macvtap: left promiscuous mode [ 1482.080980][T16585] veth1_vlan: left promiscuous mode [ 1482.093887][T16585] veth0_vlan: left promiscuous mode [ 1482.431857][T17061] Bluetooth: hci1: command tx timeout [ 1482.715265][T27098] netlink: 'syz.5.6431': attribute type 1 has an invalid length. [ 1482.780250][T27099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6431'. [ 1482.790485][T27099] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6431'. [ 1482.903742][T16585] team0 (unregistering): Port device team_slave_1 removed [ 1482.931053][T16585] team0 (unregistering): Port device team_slave_0 removed [ 1483.433750][T27038] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1483.443649][T27038] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1483.463367][T27038] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1483.473577][T27038] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1484.027324][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.034034][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.058072][T27038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.084109][T27038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.099981][T16691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.107081][T16691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1484.119543][T16691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.126599][T16691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1484.166558][T16585] IPVS: stop unused estimator thread 0... [ 1484.351723][T27038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.396447][T27038] veth0_vlan: entered promiscuous mode [ 1484.410088][T27038] veth1_vlan: entered promiscuous mode [ 1484.444252][T27038] veth0_macvtap: entered promiscuous mode [ 1484.457488][T27038] veth1_macvtap: entered promiscuous mode [ 1484.475410][T27038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1484.488638][T27038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1484.500049][T17061] Bluetooth: hci1: command tx timeout [ 1484.511870][T16758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.521297][T16758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.530451][T16758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.539312][T16758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.256952][T16691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.271971][T16691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.328055][T16660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.336485][T16660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.829111][T20691] usb 6-1: new low-speed USB device number 67 using dummy_hcd [ 1486.111009][T20691] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1486.129893][T20691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.150016][T20691] usb 6-1: config 0 descriptor?? [ 1486.246875][T27187] syz_tun: entered allmulticast mode [ 1486.324065][T27186] syz_tun: left allmulticast mode [ 1486.427532][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1486.427548][ T30] audit: type=1400 audit(1760806841.486:1252): avc: denied { read } for pid=27189 comm="syz.1.6463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1486.843374][T17061] Bluetooth: hci1: command tx timeout [ 1487.716625][T27225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6477'. [ 1487.874868][T25388] block nbd5: Possible stuck request ffff8880269f7000: control (read@0,1024B). Runtime 1050 seconds [ 1487.885768][T25388] block nbd5: Possible stuck request ffff8880269f71c0: control (read@1024,1024B). Runtime 1050 seconds [ 1487.896884][T25388] block nbd5: Possible stuck request ffff8880269f7380: control (read@2048,1024B). Runtime 1050 seconds [ 1487.908324][T25388] block nbd5: Possible stuck request ffff8880269f7540: control (read@3072,1024B). Runtime 1050 seconds [ 1488.521305][T20691] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1488.532886][T20691] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1488.544788][T20691] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1488.555288][T20691] usb 6-1: USB disconnect, device number 67 [ 1488.899809][T17061] Bluetooth: hci1: command tx timeout [ 1488.949596][ T30] audit: type=1400 audit(1760806844.006:1253): avc: denied { accept } for pid=27249 comm="syz.2.6487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1489.160250][T13883] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1489.633455][T13883] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1489.642747][T13883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.651196][T13883] usb 6-1: Product: syz [ 1489.655463][T13883] usb 6-1: Manufacturer: syz [ 1489.660245][T13883] usb 6-1: SerialNumber: syz [ 1489.667047][T13883] usb 6-1: config 0 descriptor?? [ 1489.889470][ T30] audit: type=1326 audit(1760806844.946:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.5.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06798efc9 code=0x7ffc0000 [ 1489.937664][ T30] audit: type=1326 audit(1760806844.976:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.5.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06798efc9 code=0x7ffc0000 [ 1489.950130][T13883] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1489.965339][ T30] audit: type=1326 audit(1760806844.976:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.5.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc06798efc9 code=0x7ffc0000 [ 1489.996326][ T30] audit: type=1326 audit(1760806844.976:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.5.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06798efc9 code=0x7ffc0000 [ 1490.020761][ T30] audit: type=1326 audit(1760806844.976:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.5.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06798efc9 code=0x7ffc0000 [ 1490.044874][ T30] audit: type=1326 audit(1760806844.976:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.5.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc06798efc9 code=0x7ffc0000 [ 1490.069024][ T30] audit: type=1326 audit(1760806844.976:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.5.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06798efc9 code=0x7ffc0000 [ 1490.092725][ T30] audit: type=1326 audit(1760806844.976:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27243 comm="syz.5.6484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06798efc9 code=0x7ffc0000 [ 1490.126815][T13883] usb 6-1: USB disconnect, device number 68 [ 1492.033242][T27324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6517'. [ 1492.052252][T27324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6517'. [ 1492.062764][T27324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6517'. [ 1492.076086][T27324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6517'. [ 1492.981010][ T31] INFO: task syz.3.5316:23990 blocked for more than 143 seconds. [ 1492.988784][ T31] Not tainted syzkaller #0 [ 1493.069699][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1493.078481][ T31] task:syz.3.5316 state:D stack:29096 pid:23990 tgid:23987 ppid:17706 task_flags:0x400040 flags:0x00080002 [ 1493.090557][ T31] Call Trace: [ 1493.093820][ T31] [ 1493.096740][ T31] __schedule+0x1190/0x5de0 [ 1493.129396][ T31] ? look_up_lock_class+0x6b/0x150 [ 1493.134788][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1493.141072][ T31] ? __lock_acquire+0x622/0x1c90 [ 1493.146027][ T31] ? __pfx___schedule+0x10/0x10 [ 1493.150906][ T31] ? find_held_lock+0x2b/0x80 [ 1493.155630][ T31] ? schedule+0x2d7/0x3a0 [ 1493.159993][ T31] ? sync_bdevs+0xfd/0x360 [ 1493.164411][ T31] schedule+0xe7/0x3a0 [ 1493.168518][ T31] schedule_preempt_disabled+0x13/0x30 [ 1493.173996][ T31] __mutex_lock+0x818/0x1060 [ 1493.178624][ T31] ? sync_bdevs+0xfd/0x360 [ 1493.183093][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1493.188127][ T31] ? iput.part.0+0x181/0xb00 [ 1493.201763][ T31] ? sync_bdevs+0xfd/0x360 [ 1493.216027][ T31] sync_bdevs+0xfd/0x360 [ 1493.220603][ T31] ksys_sync+0xb2/0x150 [ 1493.224814][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1493.229791][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1493.234882][ T31] ? rcu_is_watching+0x12/0xc0 [ 1493.247750][ T31] ? do_syscall_64+0x91/0xfa0 [ 1493.252506][ T31] __do_sys_sync+0xe/0x20 [ 1493.256898][ T31] do_syscall_64+0xcd/0xfa0 [ 1493.261443][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.267359][ T31] RIP: 0033:0x7f5c20b8efc9 [ 1493.271808][ T31] RSP: 002b:00007f5c21a92038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1493.280246][ T31] RAX: ffffffffffffffda RBX: 00007f5c20de5fa0 RCX: 00007f5c20b8efc9 [ 1493.288208][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1493.296185][ T31] RBP: 00007f5c20de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1493.304271][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1493.312249][ T31] R13: 00007f5c20de6038 R14: 00007f5c20de5fa0 R15: 00007fff2af26e58 [ 1493.320235][ T31] [ 1493.323324][ T31] [ 1493.323324][ T31] Showing all locks held in the system: [ 1493.331211][ T31] 1 lock held by khungtaskd/31: [ 1493.336521][ T31] #0: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1493.346565][ T31] 2 locks held by getty/5571: [ 1493.356124][ T31] #0: ffff88803220e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1493.365926][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1493.376014][ T31] 1 lock held by udevd/5818: [ 1493.380672][ T31] #0: ffff888142fa1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1493.390095][ T31] 1 lock held by syz.3.5316/23990: [ 1493.395184][ T31] #0: ffff888142fa1358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 1493.404507][ T31] 1 lock held by syz.5.6518/27326: [ 1493.409705][ T31] #0: ffffffff8e3cf8c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1493.419694][ T31] [ 1493.422006][ T31] ============================================= [ 1493.422006][ T31] [ 1493.432570][ T31] NMI backtrace for cpu 1 [ 1493.432584][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1493.432603][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1493.432613][ T31] Call Trace: [ 1493.432620][ T31] [ 1493.432628][ T31] dump_stack_lvl+0x116/0x1f0 [ 1493.432652][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1493.432680][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1493.432711][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1493.432740][ T31] watchdog+0xf3f/0x1170 [ 1493.432761][ T31] ? rcu_is_watching+0x12/0xc0 [ 1493.432778][ T31] ? __pfx_watchdog+0x10/0x10 [ 1493.432792][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1493.432815][ T31] ? __kthread_parkme+0x19e/0x250 [ 1493.432836][ T31] ? __pfx_watchdog+0x10/0x10 [ 1493.432851][ T31] kthread+0x3c5/0x780 [ 1493.432875][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.432899][ T31] ? rcu_is_watching+0x12/0xc0 [ 1493.432915][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.432938][ T31] ret_from_fork+0x675/0x7d0 [ 1493.432959][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.432981][ T31] ret_from_fork_asm+0x1a/0x30 [ 1493.433013][ T31] [ 1493.433033][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1493.554007][ C0] NMI backtrace for cpu 0 [ 1493.554020][ C0] CPU: 0 UID: 0 PID: 16691 Comm: kworker/u8:56 Not tainted syzkaller #0 PREEMPT(full) [ 1493.554037][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1493.554047][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1493.554070][ C0] RIP: 0010:ieee80211_rx_bss_put+0x5/0x60 [ 1493.554092][ C0] Code: f6 ff ff 4c 89 f7 e8 9a 71 4e f7 e9 f2 fa ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 <48> 89 fd 53 48 89 f3 e8 2f ea e5 f6 48 85 db 74 2d e8 25 ea e5 f6 [ 1493.554106][ C0] RSP: 0018:ffffc9000443f930 EFLAGS: 00000293 [ 1493.554117][ C0] RAX: 0000000000000000 RBX: ffff88805887edc0 RCX: ffffffff8ada99ca [ 1493.554126][ C0] RDX: ffff88802f4c4900 RSI: ffff888056e910d0 RDI: ffff888042fb0e80 [ 1493.554135][ C0] RBP: ffffc9000443fb88 R08: 0000000000000005 R09: 0000000000000000 [ 1493.554144][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888056e910d0 [ 1493.554152][ C0] R13: 0000000000000000 R14: ffff888051dc20d0 R15: ffff8880664e8d80 [ 1493.554161][ C0] FS: 0000000000000000(0000) GS:ffff8881249d6000(0000) knlGS:0000000000000000 [ 1493.554175][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1493.554184][ C0] CR2: 00007fc067bb4198 CR3: 0000000026f21000 CR4: 00000000003526f0 [ 1493.554193][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1493.554201][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1493.554210][ C0] Call Trace: [ 1493.554214][ C0] [ 1493.554220][ C0] ieee80211_ibss_rx_queued_mgmt+0x1a97/0x2fe0 [ 1493.554241][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1493.554263][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1493.554284][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1493.554301][ C0] ? rcu_is_watching+0x12/0xc0 [ 1493.554319][ C0] ? kcov_remote_start+0x3c9/0x6d0 [ 1493.554335][ C0] ieee80211_iface_work+0xe2e/0x1360 [ 1493.554349][ C0] ? rcu_is_watching+0x12/0xc0 [ 1493.554362][ C0] cfg80211_wiphy_work+0x2c7/0x580 [ 1493.554381][ C0] process_one_work+0x9cf/0x1b70 [ 1493.554404][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1493.554424][ C0] ? assign_work+0x1a0/0x250 [ 1493.554446][ C0] worker_thread+0x6c8/0xf10 [ 1493.554467][ C0] ? __kthread_parkme+0x19e/0x250 [ 1493.554483][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1493.554501][ C0] kthread+0x3c5/0x780 [ 1493.554517][ C0] ? __pfx_kthread+0x10/0x10 [ 1493.554534][ C0] ? rcu_is_watching+0x12/0xc0 [ 1493.554546][ C0] ? __pfx_kthread+0x10/0x10 [ 1493.554563][ C0] ret_from_fork+0x675/0x7d0 [ 1493.554580][ C0] ? __pfx_kthread+0x10/0x10 [ 1493.554596][ C0] ret_from_fork_asm+0x1a/0x30 [ 1493.554616][ C0] [ 1493.555029][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1493.820100][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1493.829194][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1493.839242][ T31] Call Trace: [ 1493.842508][ T31] [ 1493.845424][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1493.850006][ T31] vpanic+0x640/0x6f0 [ 1493.853977][ T31] panic+0xca/0xd0 [ 1493.857683][ T31] ? __pfx_panic+0x10/0x10 [ 1493.862083][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1493.867447][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1493.873589][ T31] ? watchdog+0xe48/0x1170 [ 1493.877986][ T31] ? watchdog+0xe3b/0x1170 [ 1493.882381][ T31] watchdog+0xe59/0x1170 [ 1493.886608][ T31] ? rcu_is_watching+0x12/0xc0 [ 1493.891356][ T31] ? __pfx_watchdog+0x10/0x10 [ 1493.896010][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1493.901193][ T31] ? __kthread_parkme+0x19e/0x250 [ 1493.906202][ T31] ? __pfx_watchdog+0x10/0x10 [ 1493.910856][ T31] kthread+0x3c5/0x780 [ 1493.914911][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.919487][ T31] ? rcu_is_watching+0x12/0xc0 [ 1493.924229][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.928804][ T31] ret_from_fork+0x675/0x7d0 [ 1493.933377][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.937966][ T31] ret_from_fork_asm+0x1a/0x30 [ 1493.942723][ T31] [ 1493.945908][ T31] Kernel Offset: disabled [ 1493.950205][ T31] Rebooting in 86400 seconds..