last executing test programs: 7m57.02038355s ago: executing program 1 (id=161): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() syz_pidfd_open(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) pipe2$watch_queue(&(0x7f0000000040), 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 7m54.440371237s ago: executing program 1 (id=165): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x6, 0x30}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r5 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r5, 0x29, 0x50, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 7m51.268085898s ago: executing program 1 (id=172): r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r5, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xa}) 7m49.969423138s ago: executing program 1 (id=174): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000080)=0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x0, 0x3, 0xa, 0x0, 0x20}, {0x20000000, 0x7fffffffffffffff, 0x0, 0xffffffffffff0dac, 0x0, 0x14d, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffff7, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010) socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x3ff) close_range(r2, r2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x48, 0x9, 0x80, 0x8}, {0x28, 0x9, 0x52, 0xfffff038}, {0x6, 0xfd, 0x0, 0x57c}]}, 0x10) write$binfmt_aout(r4, 0x0, 0x9ffc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(0x0, 0x20, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001380)="630eff19f6dc2123b9f4d0c4f469a97633bceef428f912663b594717cfefa97d03fd516b9106b55ecb546777777cdd3aa3212cb6602b", 0x36}, {&(0x7f0000001440)}, {&(0x7f00000014c0)="981a328ad36bb056a56665645a5ac379c0968229080b693e80c1f71990400b1b5affaf9a125eb043a92a6d3b42bc30ec0ffd7be37713d015783d1981edbaa0521c6e14c1786fdbcf78c1700f4a863194ade9758e6455d665ddd6e55ae7b18689aaba3a7d14fb611eca69a2592d197857af8b8e8a1340e84a4cc1108e7d6065b557", 0x81}], 0x3, &(0x7f0000001600)=[{0x10, 0x29, 0x5}, {0x60, 0x104, 0x2, "264c0ce2cbe2385f67c9dda1e29e53bbe94b47d55d0b1e9a0f4e69d2c4f492eee2af51f2b5ba43d4cc5ed3a8d9218a0d35704e65c3976550edd10a0e7d4e78ec9339f7b11b0800b2cd74c9aaf6"}, {0x68, 0x6, 0x240000, "83dd632caab1cbbf54bf06312363a9e84bec079cd88198bcbb13097566dff694de64aff349d57eb15c09e26f20dcc1e923ccc1923741ee9b2a504b167d276722619d763acacefdcbbf3a1aa6713c74a14c14e0a5bb"}], 0xd8}, 0x8080) 7m49.612185703s ago: executing program 1 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2d, 0x25dfdbfd, 0x7, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x4000000) 7m43.785621404s ago: executing program 1 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(&(0x7f0000000340)=""/243, 0xf3) setreuid(0xee01, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) fallocate(0xffffffffffffffff, 0x3, 0x29c00000000000, 0x20000) 7m27.842979277s ago: executing program 32 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(&(0x7f0000000340)=""/243, 0xf3) setreuid(0xee01, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) fallocate(0xffffffffffffffff, 0x3, 0x29c00000000000, 0x20000) 2m31.310455233s ago: executing program 2 (id=1842): socket$alg(0x26, 0x5, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x7765, 0x0, 0x2, 0x158}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) 2m30.061907829s ago: executing program 2 (id=1861): ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="40011e0000004d61501d01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m28.00894115s ago: executing program 2 (id=1887): socket(0x1, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x51f2, 0x20, 0x1000000, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10b0, 0x2, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x8, 0x3, 0x2e5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) 2m27.059532373s ago: executing program 2 (id=1898): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x1, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m26.012830288s ago: executing program 2 (id=1911): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000940), &(0x7f00000002c0)=@tcp6=r2}, 0x20) recvmmsg$unix(r2, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 2m25.433718226s ago: executing program 2 (id=1921): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sync() sync() sync() ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000001c0)={0x30}) 2m10.331164899s ago: executing program 33 (id=1921): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sync() sync() sync() ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000001c0)={0x30}) 1m2.327999707s ago: executing program 5 (id=2502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x6, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) setpriority(0x1, r4, 0xaf) 1m0.112873987s ago: executing program 5 (id=2506): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="6dc0a8fa5e02e6632bf12c28fb862798d0ab0d9d6b4411511d6a0f92d48c946dcc7543ddfc1448f210108717384f82f72b000a6e306c12807e9f0097587df66d788fe3006a55d31dad596e78e492ab768e32f06f3a2c40106ac9bb", 0x5b}], 0x1, 0x0, 0x0, 0x40084}, 0x8891) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000300), 0x7) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) 57.032183244s ago: executing program 5 (id=2508): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='dummy_udc.0', 0xb) pselect6(0x40, &(0x7f0000000000)={0x8, 0x2, 0x1, 0x1a4d994a, 0x8, 0xfffffffffffffe00, 0xfffffffffffffffe, 0x8}, &(0x7f0000000040)={0xc000, 0x0, 0xbc, 0x8, 0x7, 0x5, 0x4, 0x1}, &(0x7f0000000080)={0x2, 0x8, 0x7, 0x4, 0x3, 0x9, 0x4, 0xfffffffffffffff7}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) 55.562925896s ago: executing program 5 (id=2514): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x14) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7d) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) ioprio_get$pid(0x2, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 54.462852078s ago: executing program 5 (id=2521): munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x109) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() msgctl$MSG_INFO(0x0, 0xc, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0}}, 0x30) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x1f0112, r5, 0x0) socket(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 53.302547493s ago: executing program 5 (id=2526): mkdirat(0xffffffffffffff9c, 0x0, 0x777) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x6, 0x7ffc0001}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000080)=0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x0, 0x3, 0xa, 0x0, 0x20}, {0x20000000, 0x7fffffffffffffff, 0x0, 0xffffffffffff0dac, 0x0, 0x14d, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffff7, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010) readv(r3, &(0x7f0000003740)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r0}) r4 = socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x3ff) close_range(r2, r2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x48, 0x9, 0x80, 0x8}, {0x28, 0x9, 0x52, 0xfffff038}, {0x6, 0xfd, 0x0, 0x57c}]}, 0x10) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0x9ffc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(0x0, 0x20, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) sendmsg$kcm(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)="aa28d2c7b1", 0x5}, {&(0x7f0000001380)="630eff19f6dc2123b9f4d0c4f469a97633bceef428f912663b594717cfefa97d03fd516b9106b55ecb546777777cdd3aa3212cb6602bf80f9804a7b730599547e79b01094ca901627185069d1233fe5851d5dd2ffc02ec30046e03fd7d409e8a1f6e57e8a3d282dc3b606d24644efa307b981f0dc2c9465ef96c912f82c73fd66db175be01f54004ddeab342ccf310ce053686deb69473a40f079f8461d25ee4b32b53ed0c09bbbb6bec554d", 0xac}, {&(0x7f0000001440)="e172074bf303403e68ea46e68cfc63002c4c7311bd86a5dfa9d82e2c050509dee26d897856248bb2af3c5e61b5879e1a63c148b3f69b125c2b011e644fc38d30894eebfb116cd5aa0141dec5c114cc09cc1f6cc1927607f1a326e2d7f96a6431af8c6933a6e989846903041e0304a223aea274358df09df8", 0x78}, {&(0x7f00000014c0)="981a328ad36bb056a56665645a5ac379c0968229080b693e80c1f71990400b1b5affaf9a125eb043a92a6d3b42bc30ec0ffd7be37713d015783d1981edbaa0521c6e14c1786fdbcf78c1700f4a863194ade9758e6455d665ddd6e55ae7b18689aaba3a7d14fb611eca69a2592d197857af8b8e8a1340e84a4cc1108e7d6065b557767b77ac", 0x85}], 0x4, &(0x7f0000001600)}, 0x8080) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x3, {{0x2, 0x4e23, @loopback}}}, 0x88) 37.689881978s ago: executing program 34 (id=2526): mkdirat(0xffffffffffffff9c, 0x0, 0x777) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x6, 0x7ffc0001}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000080)=0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x0, 0x3, 0xa, 0x0, 0x20}, {0x20000000, 0x7fffffffffffffff, 0x0, 0xffffffffffff0dac, 0x0, 0x14d, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffff7, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010) readv(r3, &(0x7f0000003740)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r0}) r4 = socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x3ff) close_range(r2, r2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x48, 0x9, 0x80, 0x8}, {0x28, 0x9, 0x52, 0xfffff038}, {0x6, 0xfd, 0x0, 0x57c}]}, 0x10) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0x9ffc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(0x0, 0x20, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) sendmsg$kcm(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)="aa28d2c7b1", 0x5}, {&(0x7f0000001380)="630eff19f6dc2123b9f4d0c4f469a97633bceef428f912663b594717cfefa97d03fd516b9106b55ecb546777777cdd3aa3212cb6602bf80f9804a7b730599547e79b01094ca901627185069d1233fe5851d5dd2ffc02ec30046e03fd7d409e8a1f6e57e8a3d282dc3b606d24644efa307b981f0dc2c9465ef96c912f82c73fd66db175be01f54004ddeab342ccf310ce053686deb69473a40f079f8461d25ee4b32b53ed0c09bbbb6bec554d", 0xac}, {&(0x7f0000001440)="e172074bf303403e68ea46e68cfc63002c4c7311bd86a5dfa9d82e2c050509dee26d897856248bb2af3c5e61b5879e1a63c148b3f69b125c2b011e644fc38d30894eebfb116cd5aa0141dec5c114cc09cc1f6cc1927607f1a326e2d7f96a6431af8c6933a6e989846903041e0304a223aea274358df09df8", 0x78}, {&(0x7f00000014c0)="981a328ad36bb056a56665645a5ac379c0968229080b693e80c1f71990400b1b5affaf9a125eb043a92a6d3b42bc30ec0ffd7be37713d015783d1981edbaa0521c6e14c1786fdbcf78c1700f4a863194ade9758e6455d665ddd6e55ae7b18689aaba3a7d14fb611eca69a2592d197857af8b8e8a1340e84a4cc1108e7d6065b557767b77ac", 0x85}], 0x4, &(0x7f0000001600)}, 0x8080) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x3, {{0x2, 0x4e23, @loopback}}}, 0x88) 9.497648775s ago: executing program 6 (id=2719): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x2, 0x1, 0x1a4d994a, 0x8, 0xfffffffffffffe00, 0xfffffffffffffffe, 0x8}, 0x0, &(0x7f0000000080)={0x2, 0x8, 0x7, 0x4, 0x3, 0x9, 0x4, 0xfffffffffffffff7}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) 8.144875211s ago: executing program 6 (id=2722): iopl(0x3) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x3e42, 0x407ff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) 7.916516793s ago: executing program 4 (id=2725): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x68420, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r1 = fsopen(&(0x7f0000000340)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7b) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x9, 0x7, 0x66e7, 0xfff, 0x7, "8c0dc77e87de5ff6eb07c5109a38666f222caf", 0x5988, 0x1}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 5.963209406s ago: executing program 6 (id=2732): syz_open_dev$sndctrl(0x0, 0x4, 0x70be42) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000006800), 0x0, 0x141, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x100) socket(0x10, 0x3, 0x0) 5.898778872s ago: executing program 4 (id=2733): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r2, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)}, 0x20) 4.289421626s ago: executing program 0 (id=2735): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x68420, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r2 = fsopen(&(0x7f0000000340)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7b) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000040)={0x9, 0x7, 0x66e7, 0xfff, 0x7, "8c0dc77e87de5ff6eb07c5109a38666f222caf", 0x5988, 0x1}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 4.032430025s ago: executing program 4 (id=2736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r1, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)}, 0x20) 3.957949764s ago: executing program 6 (id=2738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000380)=r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711858000000000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) read(r6, &(0x7f00000044c0)=""/22, 0x16) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000d060103000000000000000002000003050001"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c090}, 0x4) 3.939035774s ago: executing program 0 (id=2739): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x2, 0x1, 0x1a4d994a, 0x8, 0xfffffffffffffe00, 0xfffffffffffffffe, 0x8}, 0x0, &(0x7f0000000080)={0x2, 0x8, 0x7, 0x4, 0x3, 0x9, 0x4, 0xfffffffffffffff7}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_udc.0', 0xb) 3.810774364s ago: executing program 0 (id=2740): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r1, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)}, 0x20) 3.809464633s ago: executing program 4 (id=2741): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r2, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)}, 0x20) 3.644696346s ago: executing program 0 (id=2744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r2, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)}, 0x20) 3.528450419s ago: executing program 4 (id=2746): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x2, 0x1, 0x1a4d994a, 0x8, 0xfffffffffffffe00, 0xfffffffffffffffe, 0x8}, 0x0, &(0x7f0000000080)={0x2, 0x8, 0x7, 0x4, 0x3, 0x9, 0x4, 0xfffffffffffffff7}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) 2.329716949s ago: executing program 4 (id=2749): syz_usb_connect$uac1(0x2, 0x7b, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x404, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x5, 0xfd, {0x7, 0x25, 0x1, 0x0, 0xf0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x3, 0x1, {0x7, 0x25, 0x1, 0x4, 0x7, 0x9}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x4, 0x4, 0xa5, 0x20, 0x4}, 0x0, 0x0, 0x2, [{0x8a, &(0x7f0000000340)=@string={0x8a, 0x3, "bb3c5129a7d6aaeea801f4a889e5d2d2dc5563dabbb27fe8bf2597a6d13a01b120f7675d67e5a7824b8e228bb746a800000000000000007c0ca9f85a8c4595f3b25cc4f03f3f0e530b90cd6dfb6ce3124b244c31add573bc804670196d6558299378fdca4ac7d6c27d328113dd60c43fd621c25bc221631f1d7a4d27bd715ff0d61882395ae4c852"}}, {0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e0328f5edf7d7cd6a95dd048aee5f1c2c5e31aabfe27e930707936d915ca58a32eb4e44431e4e9fd0dc64005a73e1fa731d1b961ee5f0430500cbc8592ed732b97ef2ab8efa688cdff23ebad6bbbaa28e5afd18a93d085ff8b363db2b5e135c5e552b891719fda4"]}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000fc0)=0xfffffff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x35) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = shmget(0x1, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r9, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r11, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) write(r10, &(0x7f0000000080)='4', 0x1) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @local, {[@routing={0x84}], "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"}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x154, r8, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x12d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0xc4, {0x5, 0x97, 0x5, "840713d363c6724d98bf35001c09bfc3ef576ef4cbdedd44f1719d86e7202598ad5ab2b4e5dff62ed61751909b8422ef7be7fa9aeee03cce1881434df3bc53402458604b55890de2298e22ae5eb55d3e14358d8172d3caffea4c3165a9936a26aa4560071601df38cfb687a86ed61c704879c02c575dcc5f792ca84bd70fc9a24035370ffe3e5d14541c8831eed97732a996891591391a05b51387596e4634cf9ec3255fc6c4d68b86c2b73f110f4dc0b014af75ddf00689ee90b8c538f8b8c339"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) 2.186727399s ago: executing program 0 (id=2751): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x100004, 0xdf18, 0xe2a4, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x2042, 0x19d) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000040)) 1.952477018s ago: executing program 3 (id=2752): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5a}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) getrlimit(0x7, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000440)="66baa10066edc4837960a756ee00000766ba420066ed6426420f2318c744240028000000c744240221d30000ff1c240fc79d000000000f01b20300000067440f22c5c4a22dbad0f345a7", 0x4a}], 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 1.756396552s ago: executing program 3 (id=2753): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000380)=r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711858000000000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) read(r4, &(0x7f00000044c0)=""/22, 0x16) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 1.712350884s ago: executing program 0 (id=2754): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_dev$vcsn(0x0, 0xb, 0x46240) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000280)={"396c2458b6ad6431a545cf477f693f3c0055879efe0d3059f5638f6c932c", 0xff800000, 0x0, 0x1, 0x0, 0x7, 0x2, 0x7, 0x0, [0x9e, 0xd42, 0xff, 0x5, 0xfffffff9, 0x10000, 0x1, 0x2, 0xc8d, 0x2, 0x5, 0x73, 0xb61, 0x1ff, 0x4, 0x9, 0x6, 0x6, 0x6]}) 1.568589456s ago: executing program 3 (id=2755): iopl(0x3) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3e42, 0x407ff) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 1.526470176s ago: executing program 6 (id=2756): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340)='team_slave_0\x00', 0x10) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040), &(0x7f0000000300)=0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x14) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x20, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="0000000000000000b702000014800000b700000083000000bf090000000000005509010000000000950000000000000018110000000000000000000080787550f19fd0a752eda30c529c4bf5afc56263db8b5fcfa48736dba11133c47a82fd831c0b48541915132357d465731edcbeac1a0723385163530846406376b783bc9dc5a132a3a8efec90056ea1bfb6392a62437b75be8309b31fd0e84f93b676cd5ea54bb27e60e969ccf92c0af255702abed73547bf45dd57a5500e78dc62f295a900", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000088b9ef788500000082000000182300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b71e0000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r7, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x38}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x21, 0x2, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) open_by_handle_at(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000040000000000000600a7a0ed6987dd3d4affffffe7d286a7e5cf2b691b0509e4ae0ca20533e613ccbc78c6f56aaf0e8949ea636b3b7b74443b3906dce4191040f98bc110f7c24bafc0dd7858da75b9960e4e952a98c9934e0b22534405bc4cef62cefc8737b029b2cd3af9ffffffffffffffbbff"], 0x24181) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x2000001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 1.251874632s ago: executing program 3 (id=2757): iopl(0x3) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x3e42, 0x407ff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 203.915075ms ago: executing program 6 (id=2758): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x2, 0x1, 0x1a4d994a, 0x8, 0xfffffffffffffe00, 0xfffffffffffffffe, 0x8}, 0x0, &(0x7f0000000080)={0x2, 0x8, 0x7, 0x4, 0x3, 0x9, 0x4, 0xfffffffffffffff7}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_udc.0', 0xb) 102.544324ms ago: executing program 3 (id=2759): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x68420, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r2 = fsopen(&(0x7f0000000340)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7b) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x9, 0x7, 0x66e7, 0xfff, 0x7, "8c0dc77e87de5ff6eb07c5109a38666f222caf", 0x5988, 0x1}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 0s ago: executing program 3 (id=2760): syz_open_dev$sndctrl(0x0, 0x4, 0x70be42) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000006800), 0x0, 0x141, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x100) socket(0x10, 0x3, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) kernel console output (not intermixed with test programs): -71) [ 346.993557][ T5934] gud 1-1:1.0: probe with driver gud failed with error -71 [ 347.143111][ T5934] usb 1-1: USB disconnect, device number 8 [ 347.183223][ T7737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.036061][ T7737] veth0_vlan: entered promiscuous mode [ 349.125136][ T7737] veth1_vlan: entered promiscuous mode [ 349.271547][ T7737] veth0_macvtap: entered promiscuous mode [ 349.352976][ T7737] veth1_macvtap: entered promiscuous mode [ 349.492158][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.545090][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.919191][ T111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.149406][ T1022] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.155853][ T1164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.156231][ T1164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.389558][ T7225] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 350.604576][ T7225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 350.604606][ T7225] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 350.604645][ T7225] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 350.604669][ T7225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.636923][ T7225] usb 4-1: config 0 descriptor?? [ 350.641220][ T8625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.039076][ T6211] block nbd1: Possible stuck request ffff888026c05080: control (read@0,1024B). Runtime 60 seconds [ 351.039117][ T6211] block nbd1: Possible stuck request ffff888026c05240: control (read@1024,1024B). Runtime 60 seconds [ 351.039145][ T6211] block nbd1: Possible stuck request ffff888026c05400: control (read@2048,1024B). Runtime 60 seconds [ 351.039171][ T6211] block nbd1: Possible stuck request ffff888026c055c0: control (read@3072,1024B). Runtime 60 seconds [ 351.218985][ T5719] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 351.314052][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.314071][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.320175][ T7225] waltop 0003:172F:0501.0007: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.3-1/input0 [ 351.375454][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.375510][ T5719] usb 3-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00 [ 351.375534][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.487623][ T7225] usb 4-1: USB disconnect, device number 7 [ 351.788466][ T8639] fido_id[8639]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:172F:0501.0007/report_descriptor': No such device [ 351.910630][ T5719] mxuport 3-1:1.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 351.910730][ T5719] mxuport 3-1:1.0: probe with driver mxuport failed with error -5 [ 351.945136][ T5719] usb 3-1: USB disconnect, device number 8 [ 352.099992][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.100011][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.810205][ T37] audit: type=1800 audit(1786035434.081:84): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.209" name="attr_allow_any_host" dev="configfs" ino=20002 res=0 errno=0 [ 352.849280][ T37] audit: type=1800 audit(1786035434.121:85): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.209" name="addr_trtype" dev="configfs" ino=20003 res=0 errno=0 [ 352.851931][ T37] audit: type=1800 audit(1786035434.121:86): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.209" name="addr_adrfam" dev="configfs" ino=20004 res=0 errno=0 [ 353.315788][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.858'. [ 353.315802][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.858'. [ 353.668831][ T876] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 353.839287][ T876] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 353.839316][ T876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.839335][ T876] usb 1-1: Product: syz [ 353.839440][ T876] usb 1-1: Manufacturer: syz [ 353.839455][ T876] usb 1-1: SerialNumber: syz [ 354.518375][ T876] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 354.518443][ T876] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 354.570907][ T876] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 354.602535][ T876] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 354.639835][ T876] usb 1-1: USB disconnect, device number 9 [ 354.866496][ T8722] loop5: detected capacity change from 0 to 7 [ 355.664010][ T37] audit: type=1326 audit(1786035436.931:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8736 comm="syz.2.887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02860fe0d9 code=0x0 [ 355.889828][ T8722] Dev loop5: unable to read RDB block 7 [ 355.889878][ T8722] loop5: unable to read partition table [ 355.890073][ T8722] loop5: partition table beyond EOD, truncated [ 355.894582][ T8722] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 356.008041][ T8747] kAFS: bad VL server IP address [ 356.565232][ T8765] netlink: 'syz.3.898': attribute type 29 has an invalid length. [ 356.566867][ T8765] netlink: 'syz.3.898': attribute type 29 has an invalid length. [ 356.575815][ T8765] netlink: 'syz.3.898': attribute type 29 has an invalid length. [ 356.728317][ T8772] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 356.898464][ T8780] C: renamed from veth1_to_team (while UP) [ 356.946845][ T8780] netlink: 'syz.3.904': attribute type 2 has an invalid length. [ 356.946864][ T8780] netlink: 116 bytes leftover after parsing attributes in process `syz.3.904'. [ 356.946879][ T8780] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 357.308998][ T876] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 357.469012][ T876] usb 3-1: Using ep0 maxpacket: 8 [ 357.471128][ T876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.471172][ T876] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 357.471196][ T876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.514021][ T876] usb 3-1: config 0 descriptor?? [ 358.237977][ T876] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 358.649578][ T6981] usb 3-1: USB disconnect, device number 9 [ 358.854317][ T8815] mmap: syz.4.922 (8815) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 358.878917][ T7225] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 358.917261][ T8817] program syz.4.924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.030006][ T7225] usb 6-1: Using ep0 maxpacket: 8 [ 359.033403][ T7225] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.033425][ T7225] usb 6-1: config 0 has no interfaces? [ 359.035652][ T7225] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 359.035678][ T7225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.035697][ T7225] usb 6-1: Product: syz [ 359.035710][ T7225] usb 6-1: Manufacturer: syz [ 359.035724][ T7225] usb 6-1: SerialNumber: syz [ 359.064404][ T7225] usb 6-1: config 0 descriptor?? [ 359.298838][ T5934] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 359.431922][ T8805] netlink: 136 bytes leftover after parsing attributes in process `syz.5.917'. [ 359.431943][ T8805] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 359.450742][ T5934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.450792][ T5934] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.450830][ T5934] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 359.450852][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.548193][ T6981] usb 6-1: USB disconnect, device number 2 [ 359.840385][ T2931] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.840429][ T2931] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.840463][ T2931] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.840496][ T2931] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.936705][ T5934] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 360.066080][ T8845] zero sized request [ 360.100577][ T5934] lg-g15 0003:046D:C222.0008: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 360.123407][ T5934] usb 4-1: USB disconnect, device number 8 [ 360.174817][ T8847] fido_id[8847]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 360.572770][ T8857] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.832590][ T8865] netlink: 72 bytes leftover after parsing attributes in process `syz.5.944'. [ 361.259263][ T5934] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 361.409082][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 361.411739][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.411770][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.411806][ T5934] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 361.411842][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.437710][ T5934] usb 4-1: config 0 descriptor?? [ 362.867778][ T5934] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 362.867814][ T5934] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 363.073094][ T5934] ft260 0003:0403:6030.0009: failed to retrieve chip version [ 363.074208][ T5934] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -32 [ 363.083579][ T5934] usb 4-1: USB disconnect, device number 9 [ 364.157532][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.956'. [ 366.706470][ T5858] kernel write not supported for file [eventfd] (pid: 5858 comm: kworker/0:8) [ 366.915103][ T8960] netlink: 108 bytes leftover after parsing attributes in process `syz.4.979'. [ 369.689196][ T9015] kAFS: Invalid Command on /proc/fs/afs/cells file [ 370.039087][ T876] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 370.948934][ T876] usb 1-1: Using ep0 maxpacket: 32 [ 370.951233][ T876] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.951259][ T876] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 370.951283][ T876] usb 1-1: config 0 interface 0 has no altsetting 0 [ 370.958082][ T876] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 370.958109][ T876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.958129][ T876] usb 1-1: Product: syz [ 370.958143][ T876] usb 1-1: Manufacturer: syz [ 370.958157][ T876] usb 1-1: SerialNumber: syz [ 371.091700][ T876] usb 1-1: config 0 descriptor?? [ 371.523421][ T876] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 372.613431][ T9062] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1022'. [ 372.635209][ T876] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 372.635629][ T876] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 372.734428][ T876] usb 1-1: USB disconnect, device number 10 [ 372.870534][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1024'. [ 373.682049][ T9098] ip6gre1: entered promiscuous mode [ 373.682074][ T9098] ip6gre1: entered allmulticast mode [ 373.723149][ T3425] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.723506][ T3425] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.738974][ T960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.798206][ T9103] kvm: kvm [9102]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008c) = 0x52f [ 373.860656][ T960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.882760][ T960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.973692][ T4900] Bluetooth: hci3: unexpected event for opcode 0x204e [ 375.866951][ T9153] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 376.074130][ T5858] IPVS: starting estimator thread 0... [ 376.298901][ T9158] IPVS: using max 8 ests per chain, 19200 per kthread [ 377.158938][ T9182] program syz.0.1071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.332632][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.674957][ T9204] zero sized request [ 379.031508][ T9219] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 380.443656][ T9242] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1093'. [ 381.089667][ T6211] block nbd1: Possible stuck request ffff888026c05080: control (read@0,1024B). Runtime 90 seconds [ 381.089710][ T6211] block nbd1: Possible stuck request ffff888026c05240: control (read@1024,1024B). Runtime 90 seconds [ 381.089738][ T6211] block nbd1: Possible stuck request ffff888026c05400: control (read@2048,1024B). Runtime 90 seconds [ 381.089764][ T6211] block nbd1: Possible stuck request ffff888026c055c0: control (read@3072,1024B). Runtime 90 seconds [ 381.741493][ T9282] autofs4:pid:9282:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(8.0), cmd(0xc018937b) [ 381.741524][ T9282] autofs4:pid:9282:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937b) [ 382.026493][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1118'. [ 382.410874][ T9301] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 384.178267][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.178342][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.505525][ T876] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 384.534334][ T9333] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 384.658806][ T876] usb 1-1: Using ep0 maxpacket: 16 [ 384.661406][ T876] usb 1-1: unable to get BOS descriptor or descriptor too short [ 384.662713][ T876] usb 1-1: config 254 has an invalid interface number: 254 but max is 2 [ 384.662737][ T876] usb 1-1: config 254 has an invalid interface number: 47 but max is 2 [ 384.662757][ T876] usb 1-1: config 254 has an invalid interface number: 203 but max is 2 [ 384.662777][ T876] usb 1-1: config 254 has no interface number 0 [ 384.662793][ T876] usb 1-1: config 254 has no interface number 1 [ 384.662809][ T876] usb 1-1: config 254 has no interface number 2 [ 384.662889][ T876] usb 1-1: config 254 interface 254 has no altsetting 0 [ 384.662908][ T876] usb 1-1: config 254 interface 47 has no altsetting 0 [ 384.662927][ T876] usb 1-1: config 254 interface 203 has no altsetting 0 [ 384.664294][ T876] usb 1-1: language id specifier not provided by device, defaulting to English [ 384.680655][ T876] usb 1-1: New USB device found, idVendor=04e8, idProduct=5f03, bcdDevice=29.72 [ 384.680681][ T876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.963081][ T9325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.963529][ T9325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.048828][ T876] uvcvideo 1-1:254.254: Found UVC 0.00 device (04e8:5f03) [ 385.048870][ T876] uvcvideo 1-1:254.254: No valid video chain found. [ 385.206379][ T876] usb 1-1: USB disconnect, device number 11 [ 386.273114][ T9357] binder: 9355:9357 ioctl 4018620d 0 returned -22 [ 386.808925][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.908819][ T5858] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 388.062733][ T5858] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.062786][ T5858] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 388.062808][ T5858] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 388.062831][ T5858] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.062883][ T5858] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 388.062906][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.278370][ T5858] gud 4-1:1.0: Failed to get connectors (error=-71) [ 389.278399][ T5858] gud 4-1:1.0: probe with driver gud failed with error -71 [ 389.378080][ T5858] usb 4-1: USB disconnect, device number 10 [ 389.631952][ T9406] Failed to get privilege flags for destination (handle=0x2:0x4) [ 389.688842][ T7225] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 389.839004][ T7225] usb 5-1: Using ep0 maxpacket: 32 [ 389.841580][ T7225] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 389.841609][ T7225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.875285][ T7225] usb 5-1: config 0 descriptor?? [ 391.148048][ T7225] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 391.241662][ T7225] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 391.242779][ T7225] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 391.242866][ T7225] usb 5-1: media controller created [ 391.333321][ T7225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.486525][ T7225] az6027: usb out operation failed. (-71) [ 391.495720][ T7225] az6027: usb out operation failed. (-71) [ 391.495735][ T7225] stb0899_attach: Driver disabled by Kconfig [ 391.495746][ T7225] az6027: no front-end attached [ 391.495746][ T7225] [ 391.538576][ T7225] az6027: usb out operation failed. (-71) [ 391.538606][ T7225] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 391.572504][ T7225] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 392.134183][ T7225] dvb-usb: schedule remote query interval to 400 msecs. [ 392.134203][ T7225] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 392.143178][ T7225] usb 5-1: USB disconnect, device number 15 [ 392.282213][ T9451] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1180'. [ 392.284702][ T9451] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1180'. [ 392.288519][ T9451] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1180'. [ 392.666333][ T9466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1186'. [ 392.727653][ T9468] device-mapper: ioctl: Invalid ioctl structure: name o, dev 6f70796d00000000 [ 392.850883][ T9472] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.153493][ T7225] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 393.649696][ T9498] [U]  [ 396.738855][ T876] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 396.844724][ T7225] kernel read not supported for file /video9 (pid: 7225 comm: kworker/1:7) [ 396.908853][ T876] usb 6-1: Using ep0 maxpacket: 32 [ 396.911044][ T876] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.911069][ T876] usb 6-1: config 0 has no interface number 0 [ 396.911112][ T876] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.911138][ T876] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.911173][ T876] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 396.911196][ T876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.978563][ T876] usb 6-1: config 0 descriptor?? [ 398.336573][ T876] uclogic 0003:28BD:0094.000A: failed retrieving string descriptor #100: -71 [ 398.336633][ T876] uclogic 0003:28BD:0094.000A: failed retrieving pen parameters: -71 [ 398.336656][ T876] uclogic 0003:28BD:0094.000A: pen probing failed: -71 [ 398.336677][ T876] uclogic 0003:28BD:0094.000A: failed probing parameters: -71 [ 398.336766][ T876] uclogic 0003:28BD:0094.000A: probe with driver uclogic failed with error -71 [ 398.415005][ T876] usb 6-1: USB disconnect, device number 3 [ 398.600868][ T9596] macvlan0: entered promiscuous mode [ 398.601400][ T9596] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 398.601411][ T9596] netlink: 'syz.0.1240': attribute type 2 has an invalid length. [ 398.758871][ T5858] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 398.829471][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 398.908839][ T876] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 398.911734][ T5858] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.911785][ T5858] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 398.911816][ T5858] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 398.917814][ T5858] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 398.917841][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.917860][ T5858] usb 5-1: Product: syz [ 398.917873][ T5858] usb 5-1: Manufacturer: syz [ 398.917888][ T5858] usb 5-1: SerialNumber: syz [ 399.082112][ T876] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 399.082140][ T876] usb 4-1: config 0 has no interface number 0 [ 399.082225][ T876] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 399.083904][ T876] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 399.083929][ T876] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 399.083939][ T876] usb 4-1: Manufacturer: syz [ 399.083947][ T876] usb 4-1: SerialNumber: syz [ 399.153753][ T876] usb 4-1: config 0 descriptor?? [ 399.215264][ T5858] ttusb_dec_send_command: result bulk message failed: error -90 [ 399.215485][ T5858] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -90 [ 399.395198][ T960] usb 4-1: USB disconnect, device number 11 [ 399.522713][ T5934] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 399.670667][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.670790][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.670830][ T5934] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 399.670854][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.677757][ T5934] usb 6-1: config 0 descriptor?? [ 400.299580][ T5934] hid-led 0003:1D34:000A.000B: probe with driver hid-led failed with error -71 [ 400.321575][ T5934] usb 6-1: USB disconnect, device number 4 [ 400.540681][ T9648] af_packet: tpacket_rcv: packet too big, clamped from 7 to 4294967272. macoff=96 [ 400.681462][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 400.712507][ T9652] netlink: 'syz.3.1265': attribute type 1 has an invalid length. [ 400.712521][ T9652] netlink: 'syz.3.1265': attribute type 2 has an invalid length. [ 400.804558][ T9656] syz.3.1267 (9656) used obsolete PPPIOCDETACH ioctl [ 401.210823][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1272'. [ 401.547562][ T5934] usb 5-1: USB disconnect, device number 16 [ 401.895541][ T9682] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 402.929402][ T9714] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1292'. [ 403.875258][ T9725] loop8: detected capacity change from 0 to 7 [ 403.911910][ T9725] Dev loop8: unable to read RDB block 7 [ 403.911962][ T9725] loop8: unable to read partition table [ 403.912159][ T9725] loop8: partition table beyond EOD, truncated [ 403.912191][ T9725] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 404.071982][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.264234][ T9733] lo: entered allmulticast mode [ 404.273695][ T9732] lo: left allmulticast mode [ 404.341454][ T9738] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1302'. [ 404.620455][ T7225] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 404.791526][ T7225] usb 4-1: unable to get BOS descriptor or descriptor too short [ 404.792929][ T7225] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 404.796614][ T7225] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 404.796642][ T7225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.796661][ T7225] usb 4-1: Product: syz [ 404.796676][ T7225] usb 4-1: Manufacturer: syz [ 404.796690][ T7225] usb 4-1: SerialNumber: syz [ 405.844767][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1321'. [ 405.844888][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1321'. [ 405.869584][ T7225] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 405.942730][ T7225] usb 4-1: USB disconnect, device number 12 [ 406.488930][ T876] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 406.497871][ T9802] netlink: 'syz.2.1329': attribute type 83 has an invalid length. [ 406.640729][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 406.646343][ T876] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 406.646372][ T876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.646392][ T876] usb 6-1: Product: syz [ 406.646407][ T876] usb 6-1: Manufacturer: syz [ 406.646421][ T876] usb 6-1: SerialNumber: syz [ 406.827533][ T9809] netlink: 'syz.2.1331': attribute type 1 has an invalid length. [ 406.827548][ T9809] netlink: 'syz.2.1331': attribute type 2 has an invalid length. [ 407.363318][ T9831] netlink: 'syz.2.1342': attribute type 3 has an invalid length. [ 407.402604][ T5858] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 408.250582][ T9846] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 408.250582][ T9846] The task syz.0.1346 (9846) triggered the difference, watch for misbehavior. [ 408.510876][ T960] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 408.517926][ T5934] usb 6-1: USB disconnect, device number 5 [ 408.715904][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 408.721386][ T960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 408.721413][ T960] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 408.721436][ T960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 25977, setting to 1024 [ 408.721461][ T960] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 408.723818][ T960] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 408.723844][ T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.723863][ T960] usb 5-1: Product: syz [ 408.723877][ T960] usb 5-1: Manufacturer: syz [ 408.723891][ T960] usb 5-1: SerialNumber: syz [ 408.735571][ T960] usb 5-1: config 0 descriptor?? [ 408.761365][ T9843] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 409.681742][ T9843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.682337][ T9843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.686017][ T960] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 409.720987][ T960] scsi host1: usb-storage 5-1:0.0 [ 409.748469][ T5858] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 409.790823][ T9848] macvlan0: left promiscuous mode [ 409.795660][ T9848] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 409.795677][ T9848] netlink: 'syz.0.1348': attribute type 2 has an invalid length. [ 409.900467][ T960] usb 5-1: USB disconnect, device number 17 [ 409.960993][ T5858] ath9k_htc: Failed to initialize the device [ 409.996020][ T5934] usb 6-1: ath9k_htc: USB layer deinitialized [ 410.348864][ T876] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 410.358843][ T5934] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 410.510098][ T5934] usb 6-1: not running at top speed; connect to a high speed hub [ 410.511231][ T5934] usb 6-1: config 0 has no interfaces? [ 410.513204][ T5934] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 410.513231][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 410.513251][ T5934] usb 6-1: Product: syz [ 410.513266][ T5934] usb 6-1: Manufacturer: syz [ 410.523064][ T5934] usb 6-1: config 0 descriptor?? [ 410.541732][ T876] usb 4-1: Using ep0 maxpacket: 32 [ 410.570122][ T876] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 410.570147][ T876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.600468][ T876] usb 4-1: config 0 descriptor?? [ 410.622295][ T876] as10x_usb: device has been detected [ 410.623640][ T876] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 410.745734][ T876] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 410.814536][ T960] kernel write not supported for file bpf-prog (pid: 960 comm: kworker/1:2) [ 411.020769][ T876] as10x_usb: error during firmware upload part1 [ 411.021353][ T876] Registered device nBox DVB-T Dongle [ 411.041029][ T876] usb 4-1: USB disconnect, device number 13 [ 411.042526][ T960] usb 6-1: USB disconnect, device number 6 [ 411.303628][ T876] Unregistered device nBox DVB-T Dongle [ 411.309402][ T876] as10x_usb: device has been disconnected [ 411.318871][ T6211] block nbd1: Possible stuck request ffff888026c05080: control (read@0,1024B). Runtime 120 seconds [ 411.318925][ T6211] block nbd1: Possible stuck request ffff888026c05240: control (read@1024,1024B). Runtime 120 seconds [ 411.318955][ T6211] block nbd1: Possible stuck request ffff888026c05400: control (read@2048,1024B). Runtime 120 seconds [ 411.318983][ T6211] block nbd1: Possible stuck request ffff888026c055c0: control (read@3072,1024B). Runtime 120 seconds [ 413.595100][ T9915] mtrr: base(0x20000) is not aligned on a size(0xbe10000) boundary [ 416.355758][ T9968] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 416.851273][ T876] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 417.002556][ T876] usb 5-1: unable to get BOS descriptor or descriptor too short [ 417.003941][ T876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.003971][ T876] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 417.004014][ T876] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 417.004048][ T876] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 417.004085][ T876] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 417.004108][ T876] usb 5-1: config 1 interface 1 has no altsetting 0 [ 417.058848][ T876] usb 5-1: string descriptor 0 read error: -22 [ 417.058986][ T876] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 417.059009][ T876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.729435][ T876] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 417.729464][ T876] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 417.729483][ T876] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 418.175943][T10002] jffs2: notice: (10002) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 418.775939][ T876] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 418.898840][T10018] bridge0: port 3(syz_tun) entered blocking state [ 418.899003][T10018] bridge0: port 3(syz_tun) entered disabled state [ 418.906805][T10018] syz_tun: entered allmulticast mode [ 418.915739][ T876] usb 5-1: USB disconnect, device number 18 [ 419.012871][T10018] syz_tun: entered promiscuous mode [ 419.047842][T10018] bridge0: port 3(syz_tun) entered blocking state [ 419.047996][T10018] bridge0: port 3(syz_tun) entered forwarding state [ 421.538823][ T960] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 421.791001][ T960] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 421.791033][ T960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.853054][ T960] usb 1-1: config 0 descriptor?? [ 421.906061][T10080] jffs2: notice: (10080) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 422.067523][ T960] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 422.423076][ T960] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 422.423106][ T960] [drm] Initialized udl on minor 1 [ 422.722766][ T960] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 422.768333][ T960] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 422.877495][ T7225] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 422.878254][ T7225] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 422.895057][ T960] usb 1-1: USB disconnect, device number 12 [ 423.062044][ T5604] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 423.299919][ T5604] usb 3-1: Using ep0 maxpacket: 32 [ 423.312310][ T5604] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 423.312344][ T5604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.334731][ T5604] usb 3-1: config 0 descriptor?? [ 423.416049][ T37] audit: type=1326 audit(1786035760.677:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.0.1450" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a268e0d9 code=0x7ffc0000 [ 423.416092][ T37] audit: type=1326 audit(1786035760.687:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.0.1450" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a268e0d9 code=0x7ffc0000 [ 423.451426][ T37] audit: type=1326 audit(1786035760.717:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.0.1450" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a268e0d9 code=0x7ffc0000 [ 423.451470][ T37] audit: type=1326 audit(1786035760.717:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.0.1450" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a268e0d9 code=0x7ffc0000 [ 423.451509][ T37] audit: type=1326 audit(1786035760.717:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.0.1450" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fa8a268e0d9 code=0x7ffc0000 [ 423.451548][ T37] audit: type=1326 audit(1786035760.717:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.0.1450" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a268e0d9 code=0x7ffc0000 [ 423.451584][ T37] audit: type=1326 audit(1786035760.717:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.0.1450" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a268e0d9 code=0x7ffc0000 [ 423.451623][ T37] audit: type=1326 audit(1786035760.717:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.0.1450" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a268e0d9 code=0x7ffc0000 [ 423.478902][ T37] audit: type=1326 audit(1786035760.727:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.0.1450" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8a268e0d9 code=0x7ffc0000 [ 423.498951][ T37] audit: type=1326 audit(1786035760.757:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10110 comm="syz.0.1450" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a268e0d9 code=0x7ffc0000 [ 423.587877][ T5604] as10x_usb: device has been detected [ 423.588688][ T5604] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 423.846610][ T5604] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 423.928875][ T5604] as10x_usb: error during firmware upload part1 [ 423.929486][ T5604] Registered device nBox DVB-T Dongle [ 423.933116][T10119] vivid-000: disconnect [ 423.948575][ T5604] usb 3-1: USB disconnect, device number 10 [ 423.968866][ T5719] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 423.991573][T10116] vivid-000: reconnect [ 424.119766][ T5719] usb 5-1: Using ep0 maxpacket: 32 [ 424.122152][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.122197][ T5719] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 424.122220][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.178370][ T5719] usb 5-1: config 0 descriptor?? [ 424.252473][ T5604] Unregistered device nBox DVB-T Dongle [ 424.281114][ T5604] as10x_usb: device has been disconnected [ 424.424902][ T876] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 424.574325][ T876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 424.574356][ T876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 424.581238][ T876] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 424.581266][ T876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.581285][ T876] usb 6-1: Product: syz [ 424.581299][ T876] usb 6-1: Manufacturer: syz [ 424.581313][ T876] usb 6-1: SerialNumber: syz [ 424.640865][ T876] usb 6-1: config 0 descriptor?? [ 424.643255][ T876] hub 6-1:0.0: bad descriptor, ignoring hub [ 424.643288][ T876] hub 6-1:0.0: probe with driver hub failed with error -5 [ 424.702159][ T876] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 424.707464][ T5719] logitech-hidpp-device 0003:046D:C086.000C: unknown main item tag 0x0 [ 424.707498][ T5719] logitech-hidpp-device 0003:046D:C086.000C: unknown main item tag 0x0 [ 424.707524][ T5719] logitech-hidpp-device 0003:046D:C086.000C: unknown main item tag 0x0 [ 424.707551][ T5719] logitech-hidpp-device 0003:046D:C086.000C: unknown main item tag 0x0 [ 424.707577][ T5719] logitech-hidpp-device 0003:046D:C086.000C: unknown main item tag 0x0 [ 424.707603][ T5719] logitech-hidpp-device 0003:046D:C086.000C: unknown main item tag 0x0 [ 424.707628][ T5719] logitech-hidpp-device 0003:046D:C086.000C: unknown main item tag 0x0 [ 424.707654][ T5719] logitech-hidpp-device 0003:046D:C086.000C: unknown main item tag 0x0 [ 424.707680][ T5719] logitech-hidpp-device 0003:046D:C086.000C: unknown main item tag 0x0 [ 424.707705][ T5719] logitech-hidpp-device 0003:046D:C086.000C: unknown main item tag 0x0 [ 424.809204][ T5719] logitech-hidpp-device 0003:046D:C086.000C: unexpected long global item [ 424.809924][ T5719] logitech-hidpp-device 0003:046D:C086.000C: hidpp_probe:parse failed [ 424.810030][ T5719] logitech-hidpp-device 0003:046D:C086.000C: probe with driver logitech-hidpp-device failed with error -22 [ 424.817042][ T5719] usb 5-1: USB disconnect, device number 19 [ 426.783378][T10163] netlink: 'syz.4.1472': attribute type 1 has an invalid length. [ 426.783400][T10163] netlink: 'syz.4.1472': attribute type 2 has an invalid length. [ 427.128924][ T7225] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 427.244246][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 427.244267][T10181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1480'. [ 427.295906][ T7225] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.301334][ T7225] usb 1-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 427.301361][ T7225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.301380][ T7225] usb 1-1: Product: syz [ 427.301394][ T7225] usb 1-1: Manufacturer: syz [ 427.301408][ T7225] usb 1-1: SerialNumber: syz [ 427.431361][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 427.431381][T10181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1480'. [ 427.569867][ T66] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.570306][ T7047] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.570346][ T7047] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.570379][ T7047] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.080451][T10233] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 429.080486][T10233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.182403][ T960] usb 1-1: USB disconnect, device number 13 [ 429.241256][ T876] usb 6-1: USB disconnect, device number 7 [ 429.252305][T10236] binder: 10234:10236 ioctl c0306201 200000000480 returned -14 [ 430.549152][ T876] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 430.701960][ T876] usb 3-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 430.701995][ T876] usb 3-1: config 1 interface 0 has no altsetting 0 [ 430.755290][ T876] usb 3-1: string descriptor 0 read error: -22 [ 430.755417][ T876] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 430.755440][ T876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.833785][T10270] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 431.313622][ T876] hid_parser_main: 241 callbacks suppressed [ 431.313646][ T876] cypress 0003:04B4:ED81.000D: unknown main item tag 0x0 [ 431.313676][ T876] cypress 0003:04B4:ED81.000D: unknown main item tag 0x0 [ 431.313702][ T876] cypress 0003:04B4:ED81.000D: unknown main item tag 0x0 [ 431.313726][ T876] cypress 0003:04B4:ED81.000D: unknown main item tag 0x0 [ 431.313752][ T876] cypress 0003:04B4:ED81.000D: unknown main item tag 0x0 [ 431.313778][ T876] cypress 0003:04B4:ED81.000D: unknown main item tag 0x0 [ 431.313803][ T876] cypress 0003:04B4:ED81.000D: unknown main item tag 0x0 [ 431.313827][ T876] cypress 0003:04B4:ED81.000D: unknown main item tag 0x0 [ 431.313853][ T876] cypress 0003:04B4:ED81.000D: unknown main item tag 0x0 [ 431.313877][ T876] cypress 0003:04B4:ED81.000D: unknown main item tag 0x0 [ 431.438387][T10288] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 431.438508][T10288] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 431.496210][ T876] cypress 0003:04B4:ED81.000D: hidraw0: USB HID vff.7d Device [HID 04b4:ed81] on usb-dummy_hcd.2-1/input0 [ 431.598148][ T876] usb 3-1: USB disconnect, device number 11 [ 431.723861][T10303] fido_id[10303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 431.773856][ T4900] Bluetooth: hci5: command 0x0406 tx timeout [ 431.819811][T10288] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 431.819889][T10288] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 431.980897][T10288] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 431.981041][T10288] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 432.212533][T10288] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 432.480284][T10288] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 432.480436][T10288] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 432.582669][T10288] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 432.630171][T10288] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 432.643179][T10288] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 433.219005][ T6981] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 433.229425][ T7225] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 433.408630][ T7225] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 433.408661][ T7225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.408681][ T7225] usb 1-1: Product: syz [ 433.408836][ T6981] usb 6-1: Using ep0 maxpacket: 16 [ 433.414930][ T7225] usb 1-1: Manufacturer: syz [ 433.414948][ T7225] usb 1-1: SerialNumber: syz [ 433.448849][ T5597] Bluetooth: hci2: command 0x0406 tx timeout [ 433.517526][ T6981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.517557][ T6981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.517579][ T6981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 433.517619][ T6981] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 433.517642][ T6981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.609784][ T6981] usb 6-1: config 0 descriptor?? [ 433.848922][ T5597] Bluetooth: hci3: command 0x0406 tx timeout [ 433.947014][ T7225] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 433.947074][ T7225] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 434.008821][ T5597] Bluetooth: hci4: command 0x0406 tx timeout [ 434.074255][ T6981] microsoft 0003:045E:07DA.000E: nested delimiters [ 434.074287][ T6981] microsoft 0003:045E:07DA.000E: item 0 1 2 10 parsing failed [ 434.075924][ T6981] microsoft 0003:045E:07DA.000E: parse failed [ 434.076385][ T6981] microsoft 0003:045E:07DA.000E: probe with driver microsoft failed with error -22 [ 434.767611][ T5597] Bluetooth: hci1: command 0x0406 tx timeout [ 434.792779][ T5597] Bluetooth: hci5: command 0x0406 tx timeout [ 435.075303][ T7225] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 435.075361][ T7225] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 435.139707][ T5719] usb 6-1: USB disconnect, device number 8 [ 435.208138][ T7225] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 435.238332][ T7225] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 435.317520][ T7225] usb 1-1: USB disconnect, device number 14 [ 435.573272][ T4900] Bluetooth: hci2: command 0x0406 tx timeout [ 435.929661][ T4900] Bluetooth: hci3: command 0x0406 tx timeout [ 436.031749][T10372] jffs2: notice: (10372) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 436.089083][ T4900] Bluetooth: hci4: command 0x0406 tx timeout [ 436.233882][T10381] netlink: 'syz.2.1556': attribute type 1 has an invalid length. [ 436.892281][ T4900] Bluetooth: hci5: command 0x0406 tx timeout [ 436.892318][ T4900] Bluetooth: hci1: command 0x0406 tx timeout [ 438.172460][ T4900] Bluetooth: hci4: command 0x0406 tx timeout [ 438.649189][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 438.980848][ T4900] Bluetooth: hci1: command 0x0406 tx timeout [ 439.918128][T10424] configfs-gadget.g1 gadget.0: HOST MAC e2:89:3f:c1:a7:aa [ 439.918156][T10424] configfs-gadget.g1 gadget.0: MAC f2:5e:b7:ae:8d:b6 [ 439.958864][ T5858] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 440.175948][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 440.175980][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 440.183505][ T5858] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 440.183533][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.183554][ T5858] usb 4-1: Product: syz [ 440.183569][ T5858] usb 4-1: Manufacturer: syz [ 440.183583][ T5858] usb 4-1: SerialNumber: syz [ 440.264712][ T5858] usb 4-1: config 0 descriptor?? [ 440.276019][ T5858] hub 4-1:0.0: bad descriptor, ignoring hub [ 440.276055][ T5858] hub 4-1:0.0: probe with driver hub failed with error -5 [ 440.299666][ T7225] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 440.327217][ T5858] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 440.456612][ T7225] usb 1-1: Dual-Role OTG device on HNP port [ 440.457397][ T7225] usb 1-1: New USB device found, idVendor=0004, idProduct=0000, bcdDevice= 7.02 [ 440.457412][ T7225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.566971][ T7225] usb 1-1: can't set config #1, error -71 [ 440.696708][ T7225] usb 1-1: USB disconnect, device number 15 [ 441.692323][ T5858] usb 4-1: USB disconnect, device number 14 [ 441.918889][ T6211] block nbd1: Possible stuck request ffff888026c05080: control (read@0,1024B). Runtime 150 seconds [ 441.918939][ T6211] block nbd1: Possible stuck request ffff888026c05240: control (read@1024,1024B). Runtime 150 seconds [ 441.918966][ T6211] block nbd1: Possible stuck request ffff888026c05400: control (read@2048,1024B). Runtime 150 seconds [ 441.918991][ T6211] block nbd1: Possible stuck request ffff888026c055c0: control (read@3072,1024B). Runtime 150 seconds [ 442.042027][T10512] tls_set_device_offload_rx: netdev not found [ 443.595691][T10568] netlink: 'syz.3.1614': attribute type 1 has an invalid length. [ 443.833088][T10568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.876615][T10570] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 445.058649][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.065663][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.326782][T10597] program syz.4.1625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.658882][ T960] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 446.823942][ T960] usb 4-1: Using ep0 maxpacket: 16 [ 446.835050][ T960] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.835075][ T960] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 446.837744][ T960] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 446.837772][ T960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.837792][ T960] usb 4-1: Product: syz [ 446.837806][ T960] usb 4-1: Manufacturer: syz [ 446.837820][ T960] usb 4-1: SerialNumber: syz [ 447.214254][T10627] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1637'. [ 447.257673][T10627] gretap0: entered promiscuous mode [ 447.281104][T10631] netlink: 'syz.2.1637': attribute type 16 has an invalid length. [ 447.281122][T10631] netlink: 'syz.2.1637': attribute type 17 has an invalid length. [ 447.376279][ T960] usb 4-1: USB disconnect, device number 15 [ 447.467504][T10631] gretap0: left promiscuous mode [ 447.719237][ T5934] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 448.597419][ T5934] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 448.597450][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.627227][ T5934] usb 6-1: config 0 descriptor?? [ 448.649831][ T5934] cp210x 6-1:0.0: cp210x converter detected [ 448.854422][ T5934] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 448.854462][ T5934] cp210x 6-1:0.0: querying part number failed [ 448.924314][ T5934] usb 6-1: cp210x converter now attached to ttyUSB0 [ 448.943968][ T7225] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 449.108009][ T7225] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 449.108041][ T7225] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 449.133458][ T7225] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.133485][ T7225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 449.133505][ T7225] usb 3-1: SerialNumber: syz [ 449.158924][T10649] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 449.206406][ T5858] usb 6-1: USB disconnect, device number 9 [ 449.226909][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 449.248436][ T5858] cp210x 6-1:0.0: device disconnected [ 449.385002][T10649] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 449.518817][ T6981] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 449.669900][ T6981] usb 1-1: Using ep0 maxpacket: 16 [ 449.674436][ T6981] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.674498][ T6981] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.674526][ T6981] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 449.674548][ T6981] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 449.677165][ T6981] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.677191][ T6981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 449.677210][ T6981] usb 1-1: SerialNumber: syz [ 449.775330][ T6981] hub 1-1:1.0: bad descriptor, ignoring hub [ 449.775367][ T6981] hub 1-1:1.0: probe with driver hub failed with error -5 [ 449.800855][ T6981] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 449.849534][ T7225] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 449.892569][ T7225] usb 3-1: USB disconnect, device number 12 [ 450.180085][T10659] raw-gadget.0 gadget.0: fail, usb_ep_set_wedge returned -11 [ 450.319568][ T7225] usb 1-1: USB disconnect, device number 16 [ 450.451930][ T7225] kernel write not supported for file /dsp (pid: 7225 comm: kworker/1:7) [ 451.036623][T10691] fuse: root generation should be zero [ 453.027625][T10741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1682'. [ 453.619516][ T7225] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 453.689616][T10757] netlink: 'syz.0.1686': attribute type 4 has an invalid length. [ 453.812473][ T7225] usb 5-1: Using ep0 maxpacket: 8 [ 453.823413][ T7225] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 453.823436][ T7225] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.823455][ T7225] usb 5-1: config 0 has no interface number 0 [ 453.853883][ T7225] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 453.853910][ T7225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.853929][ T7225] usb 5-1: Product: syz [ 453.853944][ T7225] usb 5-1: Manufacturer: syz [ 453.853958][ T7225] usb 5-1: SerialNumber: syz [ 453.895798][ T7225] usb 5-1: config 0 descriptor?? [ 453.916146][ T7225] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 454.109421][ T6981] usb 5-1: USB disconnect, device number 20 [ 454.468041][T10778] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 454.616973][T10781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.951369][T10796] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1700'. [ 454.951392][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1700'. [ 456.353747][T10817] IPv6: addrconf: prefix option has invalid lifetime [ 456.570007][ T5934] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 456.738822][ T6981] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 456.742890][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 456.747036][ T5934] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 456.747061][ T5934] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 456.747080][ T5934] usb 3-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 456.747100][ T5934] usb 3-1: config 166 has no interface number 0 [ 456.747115][ T5934] usb 3-1: config 166 has no interface number 1 [ 456.747168][ T5934] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 456.747190][ T5934] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 456.747236][ T5934] usb 3-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 456.747263][ T5934] usb 3-1: config 166 interface 177 has no altsetting 0 [ 456.747281][ T5934] usb 3-1: config 166 interface 34 has no altsetting 0 [ 456.769125][ T5934] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 456.769151][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.769171][ T5934] usb 3-1: Product: syz [ 456.769185][ T5934] usb 3-1: Manufacturer: syz [ 456.769199][ T5934] usb 3-1: SerialNumber: syz [ 456.960841][ T6981] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 456.960896][ T6981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.962396][ T6981] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 456.962422][ T6981] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 456.962442][ T6981] usb 1-1: Manufacturer: syz [ 457.010181][ T6981] usb 1-1: config 0 descriptor?? [ 457.090126][ T5934] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 457.128848][ T6981] rc_core: IR keymap rc-hauppauge not found [ 457.128862][ T6981] Registered IR keymap rc-empty [ 457.334987][ T6981] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 457.429144][ T6981] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 457.536007][ T5934] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 457.758871][ T5934] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 457.758916][ T5934] uvcvideo 3-1:166.34: No valid video chain found. [ 457.847653][ T6981] usb 1-1: USB disconnect, device number 17 [ 457.983853][ T876] usb 3-1: USB disconnect, device number 13 [ 459.298862][ T6981] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 459.459176][ T6981] usb 1-1: Using ep0 maxpacket: 32 [ 459.461341][ T6981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.461371][ T6981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.461410][ T6981] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 459.461434][ T6981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.380006][ T6981] usb 1-1: config 0 descriptor?? [ 460.432325][ T6981] hub 1-1:0.0: USB hub found [ 460.585174][ T6981] hub 1-1:0.0: 26 ports detected [ 460.585534][ T6981] hub 1-1:0.0: insufficient power available to use all downstream ports [ 460.758939][ T5934] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 460.768920][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 460.796833][ T6981] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 460.796857][ T6981] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 460.824739][ T6981] usbhid 1-1:0.0: can't add hid device: -71 [ 460.824805][ T6981] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 460.859627][ T6981] usb 1-1: USB disconnect, device number 18 [ 460.911387][ T5934] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 460.912632][ T5934] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 460.914717][ T5934] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 460.914743][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.914763][ T5934] usb 5-1: Product: syz [ 460.914773][ T5934] usb 5-1: Manufacturer: syz [ 460.914781][ T5934] usb 5-1: SerialNumber: syz [ 460.924596][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 460.936324][ T31] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.936352][ T31] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.940564][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 460.940590][ T31] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 460.940609][ T31] usb 3-1: Product: syz [ 460.940623][ T31] usb 3-1: Manufacturer: syz [ 461.014645][ T31] hub 3-1:4.0: USB hub found [ 461.020946][ T5934] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 461.073084][ T7225] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 461.114972][ T5934] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 461.174189][ T5934] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 461.201143][ T31] hub 3-1:4.0: 2 ports detected [ 461.221921][ T7225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 461.221964][ T7225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.222197][ T7225] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.222240][ T7225] usb 6-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 461.222262][ T7225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.260820][ T7225] usb 6-1: config 0 descriptor?? [ 461.883071][ T7225] hid-generic 0003:093A:8002.000F: collection stack underflow [ 461.883103][ T7225] hid-generic 0003:093A:8002.000F: item 0 4 0 12 parsing failed [ 461.885379][ T7225] hid-generic 0003:093A:8002.000F: probe with driver hid-generic failed with error -22 [ 462.127951][ T31] usb 3-1: USB disconnect, device number 14 [ 462.128389][ T5719] usb 6-1: USB disconnect, device number 10 [ 462.210411][ T7225] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 462.449330][T10925] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1737'. [ 463.426841][T10895] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 463.863785][ T7225] usb 5-1: USB disconnect, device number 21 [ 463.936456][ T7225] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 464.077362][ T7225] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 464.115471][ T7225] ti_usb_3410_5052 5-1:2.0: device disconnected [ 465.106414][T10953] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1746'. [ 465.106438][T10953] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1746'. [ 468.028858][ T5719] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 468.196924][ T5719] usb 1-1: unable to get BOS descriptor or descriptor too short [ 468.209495][ T5719] usb 1-1: not running at top speed; connect to a high speed hub [ 468.229929][ T5719] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 468.229956][ T5719] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 468.229976][ T5719] usb 1-1: config 14 has no interface number 0 [ 468.229993][ T5719] usb 1-1: config 14 has no interface number 1 [ 468.230076][ T5719] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 468.230099][ T5719] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 468.230126][ T5719] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 468.230151][ T5719] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 468.230178][ T5719] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 468.230203][ T5719] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 468.230224][ T5719] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.230260][ T5719] usb 1-1: config 14 interface 57 has no altsetting 0 [ 468.230279][ T5719] usb 1-1: config 14 interface 228 has no altsetting 0 [ 468.233064][ T5719] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 468.233091][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.233111][ T5719] usb 1-1: Product: syz [ 468.233125][ T5719] usb 1-1: Manufacturer: syz [ 468.233139][ T5719] usb 1-1: SerialNumber: syz [ 468.842978][ T5719] legousbtower 1-1:14.57: interrupt endpoints not found [ 469.249337][ T5719] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 469.254337][ T5719] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 470.254170][ T876] usb 1-1: USB disconnect, device number 19 [ 470.442971][ T876] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 470.521205][ T5858] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 470.670316][ T5858] usb 5-1: not running at top speed; connect to a high speed hub [ 470.671767][ T5858] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 470.675610][ T5858] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 470.675636][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.675656][ T5858] usb 5-1: Product: syz [ 470.675670][ T5858] usb 5-1: Manufacturer: syz [ 470.675684][ T5858] usb 5-1: SerialNumber: syz [ 470.757596][ T5858] oti6858 5-1:1.0: oti6858 converter detected [ 470.774723][ T5858] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 470.980673][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 470.980690][ T37] audit: type=1800 audit(1786035808.237:115): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1783" name="idVendor" dev="configfs" ino=29636 res=0 errno=0 [ 470.981228][ T37] audit: type=1800 audit(1786035808.247:116): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1783" name="idProduct" dev="configfs" ino=29637 res=0 errno=0 [ 471.097358][ T37] audit: type=1800 audit(1786035808.357:117): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1783" name="ep_name" dev="configfs" ino=29638 res=0 errno=0 [ 471.118871][ T5858] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 471.259908][T11065] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1785'. [ 471.282420][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.282474][ T5858] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 471.282498][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.290904][ T7225] usb 5-1: USB disconnect, device number 22 [ 471.341332][ T5858] usb 3-1: config 0 descriptor?? [ 471.346585][ T5858] pwc: Askey VC010 type 2 USB webcam detected. [ 471.504968][ T7225] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 471.505667][ T7225] oti6858 5-1:1.0: device disconnected [ 471.766328][ T5858] pwc: recv_control_msg error -32 req 02 val 2b00 [ 471.776507][ T5858] pwc: recv_control_msg error -32 req 02 val 2700 [ 471.981282][ T6211] block nbd1: Possible stuck request ffff888026c05080: control (read@0,1024B). Runtime 180 seconds [ 471.985657][ T6211] block nbd1: Possible stuck request ffff888026c05240: control (read@1024,1024B). Runtime 180 seconds [ 471.985692][ T6211] block nbd1: Possible stuck request ffff888026c05400: control (read@2048,1024B). Runtime 180 seconds [ 471.985779][ T6211] block nbd1: Possible stuck request ffff888026c055c0: control (read@3072,1024B). Runtime 180 seconds [ 472.065096][ T5858] pwc: recv_control_msg error -71 req 04 val 1000 [ 472.065433][ T5858] pwc: recv_control_msg error -71 req 04 val 1300 [ 472.065744][ T5858] pwc: recv_control_msg error -71 req 04 val 1400 [ 472.066200][ T5858] pwc: recv_control_msg error -71 req 02 val 2000 [ 472.066556][ T5858] pwc: recv_control_msg error -71 req 02 val 2100 [ 472.067976][ T5858] pwc: recv_control_msg error -71 req 04 val 1500 [ 472.071647][ T5858] pwc: recv_control_msg error -71 req 02 val 2500 [ 472.074553][ T5858] pwc: recv_control_msg error -71 req 02 val 2400 [ 472.074997][ T5858] pwc: recv_control_msg error -71 req 02 val 2600 [ 472.075434][ T5858] pwc: recv_control_msg error -71 req 02 val 2900 [ 472.075879][ T5858] pwc: recv_control_msg error -71 req 02 val 2800 [ 472.077792][ T5858] pwc: recv_control_msg error -71 req 04 val 1100 [ 472.078227][ T5858] pwc: recv_control_msg error -71 req 04 val 1200 [ 472.218859][ T7225] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 472.278334][ T5858] pwc: Registered as video103. [ 472.284258][ T5858] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 472.290415][ T5858] usb 3-1: USB disconnect, device number 15 [ 472.378787][ T7225] usb 5-1: Using ep0 maxpacket: 32 [ 472.383765][ T7225] usb 5-1: unable to get BOS descriptor or descriptor too short [ 472.386702][ T7225] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 472.386724][ T7225] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 472.386742][ T7225] usb 5-1: config 14 has no interface number 0 [ 472.386757][ T7225] usb 5-1: config 14 has no interface number 1 [ 472.386823][ T7225] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 472.386843][ T7225] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 472.386866][ T7225] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 472.386890][ T7225] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 472.386914][ T7225] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 472.386939][ T7225] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 472.386964][ T7225] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 472.386985][ T7225] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.387010][ T7225] usb 5-1: config 14 interface 57 has no altsetting 0 [ 472.387027][ T7225] usb 5-1: config 14 interface 228 has no altsetting 0 [ 472.516384][ T7225] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 472.516403][ T7225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.516413][ T7225] usb 5-1: Product: syz [ 472.516421][ T7225] usb 5-1: Manufacturer: syz [ 472.516428][ T7225] usb 5-1: SerialNumber: syz [ 472.906156][ T6981] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 472.981973][ T876] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 473.080094][ T6981] usb 6-1: Using ep0 maxpacket: 16 [ 473.085852][ T6981] usb 6-1: config 0 has no interfaces? [ 473.101137][ T6981] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 473.101165][ T6981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.101185][ T6981] usb 6-1: Product: syz [ 473.101200][ T6981] usb 6-1: Manufacturer: syz [ 473.101214][ T6981] usb 6-1: SerialNumber: syz [ 473.172669][ T876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.173041][ T876] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 473.173066][ T876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.242264][ T876] usb 1-1: config 0 descriptor?? [ 473.258678][ T6981] usb 6-1: config 0 descriptor?? [ 473.482923][ T876] usbhid 1-1:0.0: can't add hid device: -71 [ 473.483041][ T876] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 473.521817][ T876] usb 1-1: USB disconnect, device number 20 [ 473.768663][T11091] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5587] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11091] [ 473.798290][ T4900] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 473.953964][ T7225] legousbtower 5-1:14.57: interrupt endpoints not found [ 474.074472][ T6980] usb 6-1: USB disconnect, device number 11 [ 474.188823][ T876] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 474.237286][T11099] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 474.331586][ T7225] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 474.361414][ T876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.361460][ T876] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 474.361483][ T876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.406833][ T876] usb 1-1: config 0 descriptor?? [ 474.441699][ T7225] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 475.204680][ C0] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 475.227629][ T5719] usb 5-1: USB disconnect, device number 23 [ 475.236035][ T876] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 475.249431][ T876] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 475.300055][ T5719] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 475.718884][ T7225] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 475.730952][ T6980] usb 1-1: USB disconnect, device number 21 [ 475.731053][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 475.819196][ T960] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 475.918207][ T7225] usb 6-1: string descriptor 0 read error: -22 [ 475.918353][ T7225] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 475.918376][ T7225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.970402][ T960] usb 4-1: Using ep0 maxpacket: 8 [ 475.975029][ T960] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.975056][ T960] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 475.975080][ T960] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 475.975105][ T960] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 475.975131][ T960] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 475.975154][ T960] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.975193][ T960] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 475.975215][ T960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.165148][ T7225] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.165215][ T7225] usb 6-1: MIDIStreaming interface descriptor not found [ 476.226689][T11138] netlink: 'syz.0.1810': attribute type 1 has an invalid length. [ 476.226709][T11138] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.1810'. [ 476.333736][ T960] usb 4-1: GET_CAPABILITIES returned 0 [ 476.333783][ T960] usbtmc 4-1:16.0: can't read capabilities [ 476.575266][ T5719] usb 4-1: USB disconnect, device number 16 [ 476.829156][ T7225] usb 6-1: USB disconnect, device number 12 [ 478.874923][T11188] ubi0: attaching mtd0 [ 478.920211][T11192] UBIFS error (pid: 11192): cannot open "ubi0_0", error -19 [ 479.017917][T11188] ubi0: scanning is finished [ 479.017980][T11188] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 479.615581][T11188] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 480.050965][T11234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.089986][ T7225] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 480.239617][ T7225] usb 5-1: Using ep0 maxpacket: 16 [ 480.244004][ T7225] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 480.244031][ T7225] usb 5-1: config 0 has no interface number 0 [ 480.244074][ T7225] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 480.244101][ T7225] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 480.296104][ T7225] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 480.296133][ T7225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.296152][ T7225] usb 5-1: Product: syz [ 480.296166][ T7225] usb 5-1: Manufacturer: syz [ 480.296180][ T7225] usb 5-1: SerialNumber: syz [ 480.343031][ T7225] usb 5-1: config 0 descriptor?? [ 480.347821][T11226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 480.347937][T11226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 480.579402][T11226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 480.579587][T11226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 480.783501][ T7225] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 481.318935][ T6980] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 481.503683][ T6980] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.503735][ T6980] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 481.503757][ T6980] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 481.503781][ T6980] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.503821][ T6980] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 481.503845][ T6980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.846804][ T7225] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 481.846833][ T7225] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 481.847074][ T7225] asix 5-1:0.34: probe with driver asix failed with error -71 [ 481.889883][ T7225] usb 5-1: USB disconnect, device number 24 [ 481.994619][ T6980] usb 3-1: USB disconnect, device number 16 [ 482.691258][T11317] Mass Storage Function, version: 2009/09/11 [ 482.691284][T11317] LUN: removable file: (no medium) [ 482.870182][ T37] audit: type=1800 audit(1786035820.047:118): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1883" name="file" dev="configfs" ino=31833 res=0 errno=0 [ 486.539691][ T876] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 486.689893][ T876] usb 1-1: Using ep0 maxpacket: 16 [ 486.700373][ T876] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 486.700397][ T876] usb 1-1: config 0 has no interface number 0 [ 486.700439][ T876] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 486.700464][ T876] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 486.781823][ T876] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 486.781860][ T876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.781880][ T876] usb 1-1: Product: syz [ 486.781892][ T876] usb 1-1: Manufacturer: syz [ 486.781901][ T876] usb 1-1: SerialNumber: syz [ 486.788201][ T876] usb 1-1: config 0 descriptor?? [ 486.825571][T11419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 486.825663][T11419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 486.868951][ T960] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 487.022743][ T960] usb 5-1: not running at top speed; connect to a high speed hub [ 487.024567][ T960] usb 5-1: config 1 interface 0 has no altsetting 0 [ 487.027886][ T960] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.40 [ 487.027913][ T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.027932][ T960] usb 5-1: Product: syz [ 487.027947][ T960] usb 5-1: Manufacturer: syz [ 487.027960][ T960] usb 5-1: SerialNumber: syz [ 487.042787][T11419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 487.043122][T11419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 487.245179][ T876] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 487.419312][ T960] usbhid 5-1:1.0: can't add hid device: -71 [ 487.419423][ T960] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 487.423944][ T960] usb 5-1: USB disconnect, device number 25 [ 488.083973][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1959'. [ 488.083998][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1959'. [ 488.356999][T11477] bridge0: port 3(syz_tun) entered disabled state [ 488.527545][T11477] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.532021][T11477] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.619936][T11497] FAULT_INJECTION: forcing a failure. [ 488.619936][T11497] name fail_futex, interval 1, probability 0, space 0, times 1 [ 488.619981][T11497] CPU: 0 UID: 0 PID: 11497 Comm: syz.4.1967 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 488.620011][T11497] Tainted: [L]=SOFTLOCKUP [ 488.620017][T11497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.620034][T11497] Call Trace: [ 488.620041][T11497] [ 488.620049][T11497] dump_stack_lvl+0xe8/0x150 [ 488.620086][T11497] should_fail_ex+0x467/0x600 [ 488.620117][T11497] get_futex_key+0x1b3/0x1580 [ 488.620149][T11497] ? __pfx_get_futex_key+0x10/0x10 [ 488.620170][T11497] ? update_se+0x90/0xf30 [ 488.620201][T11497] futex_wait_setup+0x4a/0x590 [ 488.620232][T11497] ? __futex_wait+0xe1/0x410 [ 488.620263][T11497] __futex_wait+0x161/0x410 [ 488.620291][T11497] ? __pfx___futex_wait+0x10/0x10 [ 488.620318][T11497] ? __pfx_futex_wake_mark+0x10/0x10 [ 488.620348][T11497] ? try_to_wake_up+0x84b/0x1430 [ 488.620387][T11497] futex_wait+0x121/0x390 [ 488.620416][T11497] ? __pfx_futex_wait+0x10/0x10 [ 488.620458][T11497] do_futex+0x3e7/0x4e0 [ 488.620479][T11497] ? lockdep_hardirqs_on+0x7a/0x110 [ 488.620504][T11497] ? __pfx_do_futex+0x10/0x10 [ 488.620527][T11497] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 488.620562][T11497] __se_sys_futex+0x3a8/0x450 [ 488.620590][T11497] ? ksys_write+0x248/0x270 [ 488.620613][T11497] ? __pfx___se_sys_futex+0x10/0x10 [ 488.620648][T11497] ? __pfx_ksys_write+0x10/0x10 [ 488.620674][T11497] ? __x64_sys_futex+0x21/0xf0 [ 488.620697][T11497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.620718][T11497] do_syscall_64+0x174/0x580 [ 488.620738][T11497] ? trace_irq_disable+0x3b/0x140 [ 488.620769][T11497] ? clear_bhb_loop+0x40/0x90 [ 488.620793][T11497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.620811][T11497] RIP: 0033:0x7f0e382de0d9 [ 488.620830][T11497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.620847][T11497] RSP: 002b:00007f0e365360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 488.620868][T11497] RAX: ffffffffffffffda RBX: 00007f0e38565fa8 RCX: 00007f0e382de0d9 [ 488.620883][T11497] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0e38565fa8 [ 488.620900][T11497] RBP: 00007f0e38565fa0 R08: 0000000000000000 R09: 0000000000000000 [ 488.620913][T11497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.620925][T11497] R13: 00007f0e38566038 R14: 00007fff0eb799b0 R15: 00007fff0eb79a98 [ 488.620954][T11497] [ 488.655791][ T876] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 488.655818][ T876] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 488.656072][ T876] asix 1-1:0.34: probe with driver asix failed with error -71 [ 488.729546][ T876] usb 1-1: USB disconnect, device number 22 [ 489.453877][T11477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.502304][T11477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.772648][T11517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 491.254199][ T44] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.254243][ T44] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.254275][ T44] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.254307][ T44] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.440689][T11579] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 491.455193][ T37] audit: type=1326 audit(1786035828.717:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.5.2003" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 491.455240][ T37] audit: type=1326 audit(1786035828.717:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.5.2003" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 491.455279][ T37] audit: type=1326 audit(1786035828.717:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.5.2003" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 491.473056][ T37] audit: type=1326 audit(1786035828.737:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.5.2003" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 491.477850][T11579] bridge_slave_0: left allmulticast mode [ 491.477886][T11579] bridge_slave_0: left promiscuous mode [ 491.478154][T11579] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.514184][ T37] audit: type=1326 audit(1786035828.787:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.5.2003" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88d3c5e90e code=0x7ffc0000 [ 491.515905][ T37] audit: type=1326 audit(1786035828.787:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.5.2003" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88d3c5e90e code=0x7ffc0000 [ 491.516155][ T37] audit: type=1326 audit(1786035828.787:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.5.2003" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88d3c5e90e code=0x7ffc0000 [ 491.523745][ T37] audit: type=1326 audit(1786035828.787:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.5.2003" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88d3c5e90e code=0x7ffc0000 [ 491.528531][ T37] audit: type=1326 audit(1786035828.787:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.5.2003" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88d3c5e90e code=0x7ffc0000 [ 491.539596][ T37] audit: type=1326 audit(1786035828.807:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11573 comm="syz.5.2003" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88d3c5e90e code=0x7ffc0000 [ 491.863127][T11579] bridge_slave_1: left allmulticast mode [ 491.863160][T11579] bridge_slave_1: left promiscuous mode [ 491.863474][T11579] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.072134][T11579] bond0: (slave bond_slave_0): Releasing backup interface [ 492.171292][T11579] bond0: (slave bond_slave_1): Releasing backup interface [ 492.315664][T11579] team0: Port device team_slave_0 removed [ 492.345823][T11579] team0: Port device team_slave_1 removed [ 492.346418][T11579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.346434][T11579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.393375][T11579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.393401][T11579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.212830][T11652] batman_adv: batadv0: Adding interface: dummy0 [ 493.212846][T11652] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.212879][T11652] batman_adv: batadv0: Interface activated: dummy0 [ 493.321542][T11652] batadv0: mtu less than device minimum [ 493.357344][T11652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 493.376004][T11652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 493.403589][T11652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 493.411926][T11652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 493.421827][T11652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 493.430956][T11652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 493.439521][T11652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 493.447490][T11652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 493.461287][T11652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 493.587135][T11656] geneve2: entered promiscuous mode [ 493.587169][T11656] geneve2: entered allmulticast mode [ 493.608035][T11656] batman_adv: batadv0: Adding interface: geneve2 [ 493.608056][T11656] batman_adv: batadv0: Interface activated: geneve2 [ 495.034639][T11729] Bluetooth: ISO socket layer initialized [ 495.500716][ T5604] hid_parser_main: 4007 callbacks suppressed [ 495.500762][ T5604] hid-generic 0006:79D90A04:10000.0010: unknown main item tag 0x0 [ 495.554429][T11751] syz_tun: entered allmulticast mode [ 495.630181][ T6980] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 495.762358][T11750] syz_tun: left allmulticast mode [ 495.852097][ T6980] usb 1-1: Using ep0 maxpacket: 32 [ 495.854464][ T6980] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 495.854489][ T6980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.854509][ T6980] usb 1-1: config 0 has no interface number 0 [ 495.854550][ T6980] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.854577][ T6980] usb 1-1: config 0 interface 184 has no altsetting 0 [ 495.857229][ T6980] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 495.857255][ T6980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.857274][ T6980] usb 1-1: Product: syz [ 495.857288][ T6980] usb 1-1: Manufacturer: syz [ 495.857302][ T6980] usb 1-1: SerialNumber: syz [ 495.934713][ T6980] usb 1-1: config 0 descriptor?? [ 495.942084][ T5604] hid-generic 0006:79D90A04:10000.0010: hidraw0: VIRTUAL HID v7f.ff Device [syz0] on syz1 [ 495.961194][ T6980] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 495.961563][ T6980] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 495.985471][T11762] netlink: 'syz.4.2084': attribute type 4 has an invalid length. [ 496.108861][ T5858] lo speed is unknown, defaulting to 1000 [ 496.108902][ T5858] syz2: Port: 1 Link DOWN [ 496.234105][ T6980] usb 1-1: USB disconnect, device number 23 [ 500.312555][ T7225] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 500.458858][ T7225] usb 1-1: Using ep0 maxpacket: 8 [ 500.461228][ T7225] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.461252][ T7225] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 500.461300][ T7225] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 500.461328][ T7225] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 500.461370][ T7225] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 500.461453][ T7225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.547191][ T7225] hub 1-1:1.0: bad descriptor, ignoring hub [ 500.547228][ T7225] hub 1-1:1.0: probe with driver hub failed with error -5 [ 500.565393][ T7225] cdc_wdm 1-1:1.0: skipping garbage [ 500.565411][ T7225] cdc_wdm 1-1:1.0: skipping garbage [ 500.592265][ T7225] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 500.592415][ T7225] cdc_wdm 1-1:1.0: Unknown control protocol [ 501.407568][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 501.749471][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 501.795025][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 501.796613][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 501.822131][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 502.069135][ T6211] block nbd1: Possible stuck request ffff888026c05080: control (read@0,1024B). Runtime 210 seconds [ 502.069179][ T6211] block nbd1: Possible stuck request ffff888026c05240: control (read@1024,1024B). Runtime 210 seconds [ 502.069207][ T6211] block nbd1: Possible stuck request ffff888026c05400: control (read@2048,1024B). Runtime 210 seconds [ 502.069340][ T6211] block nbd1: Possible stuck request ffff888026c055c0: control (read@3072,1024B). Runtime 210 seconds [ 502.812265][T11912] fuse: Bad value for 'fd' [ 503.106657][T11875] lo speed is unknown, defaulting to 1000 [ 503.313741][ T960] usb 1-1: USB disconnect, device number 24 [ 503.529945][ T37] kauditd_printk_skb: 71 callbacks suppressed [ 503.529986][ T37] audit: type=1326 audit(1786035840.677:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11920 comm="syz.5.2145" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88d3c9e0d9 code=0x0 [ 504.139272][ T5597] Bluetooth: hci0: command tx timeout [ 506.129202][T11954] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11956] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11954] [ 506.394200][ T4900] Bluetooth: hci0: command tx timeout [ 506.494547][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.494617][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.198873][T11875] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.199003][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.199189][T11875] bridge_slave_0: entered allmulticast mode [ 507.203804][T11875] bridge_slave_0: entered promiscuous mode [ 507.212346][T11875] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.212455][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.212622][T11875] bridge_slave_1: entered allmulticast mode [ 507.216917][T11875] bridge_slave_1: entered promiscuous mode [ 507.416071][T11875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.433640][T11875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.504854][T11875] team0: Port device team_slave_0 added [ 507.515183][T11875] team0: Port device team_slave_1 added [ 507.741145][T11875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.741162][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.741189][T11875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.812322][T11875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.812337][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.812363][T11875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.237172][T11875] hsr_slave_0: entered promiscuous mode [ 508.238432][T11875] hsr_slave_1: entered promiscuous mode [ 508.254275][T11875] debugfs: 'hsr0' already exists in 'hsr' [ 508.254299][T11875] Cannot create hsr debugfs directory [ 508.409767][ T4900] Bluetooth: hci0: command tx timeout [ 508.670369][ T5719] IPVS: starting estimator thread 0... [ 508.809111][T12001] IPVS: using max 11 ests per chain, 26400 per kthread [ 509.230390][T11875] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 509.250515][T12020] CIFS: Attempting to mount //127.0.0.1/share [ 509.301457][T11875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.569996][T11875] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 509.733041][T11875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.741256][T11875] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 509.797192][T11875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.798555][T11875] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 509.798887][ T5858] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 509.856567][T11875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.004354][T12042] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 510.087775][T12020] CIFS: VFS: Error connecting to socket. Aborting operation. [ 510.088001][T12020] CIFS: VFS: cifs_mount failed w/return code = -4 [ 510.106154][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 510.107895][ T5858] usb 1-1: config 0 has no interfaces? [ 510.109232][ T5858] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 510.109259][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 510.109277][ T5858] usb 1-1: SerialNumber: syz [ 510.150114][ T5858] usb 1-1: config 0 descriptor?? [ 510.413316][T11875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.462699][ T5719] usb 1-1: USB disconnect, device number 25 [ 510.489078][ T4900] Bluetooth: hci0: command tx timeout [ 510.584640][T11875] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.606477][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.612990][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.635220][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.653810][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.938901][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.985121][T11875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.779761][T11875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.388049][T12142] overlayfs: conflicting options: userxattr,redirect_dir=on [ 515.426974][T12139] binder_alloc: 12138: pid 12138 spamming oneway? 1 buffers allocated for a total size of 4096 [ 515.427407][T12139] binder_alloc: 12138: pid 12138 spamming oneway? 2 buffers allocated for a total size of 5120 [ 515.770336][T11875] veth0_vlan: entered promiscuous mode [ 515.860203][T11875] veth1_vlan: entered promiscuous mode [ 515.981194][T11875] veth0_macvtap: entered promiscuous mode [ 516.006298][T11875] veth1_macvtap: entered promiscuous mode [ 516.070939][T11875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.107895][T11875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.760600][ T3425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.692958][T12173] random: crng reseeded on system resumption [ 518.193305][ T1164] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.194257][ T1164] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.206317][ T1160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.070123][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.070142][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.383101][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.383121][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.078879][ T7225] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 526.235973][ T7225] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.236027][ T7225] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 526.236049][ T7225] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 526.236074][ T7225] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.236115][ T7225] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 526.236138][ T7225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.944070][ T7225] usb 1-1: USB disconnect, device number 26 [ 528.610951][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2280'. [ 528.634837][T12282] fuse: Bad value for 'fd' [ 531.105581][ T37] audit: type=1326 audit(1786035868.367:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12343 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e382de0d9 code=0x7ffc0000 [ 531.116741][ T37] audit: type=1326 audit(1786035868.377:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12343 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e382de0d9 code=0x7ffc0000 [ 531.116786][ T37] audit: type=1326 audit(1786035868.377:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12343 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e382de0d9 code=0x7ffc0000 [ 531.121647][ T37] audit: type=1326 audit(1786035868.387:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12343 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0e382de0d9 code=0x7ffc0000 [ 531.132492][ T37] audit: type=1326 audit(1786035868.387:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12343 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e382de0d9 code=0x7ffc0000 [ 531.132533][ T37] audit: type=1326 audit(1786035868.407:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12343 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e382de0d9 code=0x7ffc0000 [ 531.132570][ T37] audit: type=1326 audit(1786035868.407:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12343 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e382de0d9 code=0x7ffc0000 [ 531.132609][ T37] audit: type=1326 audit(1786035868.407:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12343 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e382de0d9 code=0x7ffc0000 [ 531.141713][ T37] audit: type=1326 audit(1786035868.407:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12343 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e382de0d9 code=0x7ffc0000 [ 531.141758][ T37] audit: type=1326 audit(1786035868.407:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12343 comm="syz.4.2302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e382de0d9 code=0x7ffc0000 [ 532.153373][ T6211] block nbd1: Possible stuck request ffff888026c05080: control (read@0,1024B). Runtime 240 seconds [ 532.156388][ T6211] block nbd1: Possible stuck request ffff888026c05240: control (read@1024,1024B). Runtime 240 seconds [ 532.156503][ T6211] block nbd1: Possible stuck request ffff888026c05400: control (read@2048,1024B). Runtime 240 seconds [ 532.248322][ T6211] block nbd1: Possible stuck request ffff888026c055c0: control (read@3072,1024B). Runtime 240 seconds [ 534.083296][ T7225] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 534.218869][ T960] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 534.228857][ T7225] usb 5-1: Using ep0 maxpacket: 32 [ 534.244443][ T7225] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 534.244467][ T7225] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 534.244487][ T7225] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 534.244553][ T7225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 534.244575][ T7225] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 534.244599][ T7225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 534.244620][ T7225] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 534.244642][ T7225] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 534.244682][ T7225] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 534.244706][ T7225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.373244][ T7225] usb 5-1: config 0 descriptor?? [ 534.383925][ T960] usb 1-1: Using ep0 maxpacket: 8 [ 534.386220][ T960] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 534.386245][ T960] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 534.386269][ T960] usb 1-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 534.386292][ T960] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 534.386317][ T960] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 534.386341][ T960] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.386381][ T960] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 534.386403][ T960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.627999][ T7225] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 534.692555][ T960] usb 1-1: GET_CAPABILITIES returned 0 [ 534.692602][ T960] usbtmc 1-1:16.0: can't read capabilities [ 534.939255][ T960] usb 1-1: USB disconnect, device number 27 [ 536.417521][ T960] usb 5-1: USB disconnect, device number 26 [ 536.508211][ T960] usblp0: removed [ 537.738944][ T5604] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 537.911840][ T5604] usb 5-1: Using ep0 maxpacket: 32 [ 537.914187][ T5604] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 537.914212][ T5604] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 537.914234][ T5604] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 537.914255][ T5604] usb 5-1: config 1 has no interface number 0 [ 537.914297][ T5604] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 537.914325][ T5604] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 537.914367][ T5604] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 537.914390][ T5604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.065710][ T5604] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 539.574096][ T5604] snd_usb_pod 5-1:1.1: set_interface failed [ 539.799872][ T5604] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 539.800102][ T5604] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 539.832970][ T5604] usb 5-1: USB disconnect, device number 27 [ 540.735767][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2344'. [ 540.780591][T12451] vlan2: entered promiscuous mode [ 540.780613][T12451] dummy0: entered promiscuous mode [ 541.894694][T12482] net_ratelimit: 30 callbacks suppressed [ 541.894712][T12482] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 560.048860][ T876] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 561.058811][ T876] usb 7-1: device descriptor read/64, error -71 [ 562.337293][ T960] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 562.438942][ T70] block nbd1: Possible stuck request ffff888026c05080: control (read@0,1024B). Runtime 270 seconds [ 562.438987][ T70] block nbd1: Possible stuck request ffff888026c05240: control (read@1024,1024B). Runtime 270 seconds [ 562.488906][ T70] block nbd1: Possible stuck request ffff888026c05400: control (read@2048,1024B). Runtime 270 seconds [ 562.488949][ T70] block nbd1: Possible stuck request ffff888026c055c0: control (read@3072,1024B). Runtime 270 seconds [ 562.591021][ T960] usb 5-1: config 0 has no interfaces? [ 562.603846][ T960] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 562.603873][ T960] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 562.603893][ T960] usb 5-1: Manufacturer: syz [ 562.603907][ T960] usb 5-1: SerialNumber: syz [ 562.630321][ T960] usb 5-1: config 0 descriptor?? [ 565.182017][T12788] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2470'. [ 566.642668][ T37] kauditd_printk_skb: 70 callbacks suppressed [ 566.642685][ T37] audit: type=1800 audit(1786035903.127:281): pid=12792 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2485" name="use" dev="configfs" ino=38627 res=0 errno=0 [ 566.777644][ T5719] usb 5-1: USB disconnect, device number 28 [ 567.108879][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 568.118395][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.118466][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.719972][T12847] ALSA: mixer_oss: invalid OSS volume ')' [ 571.660142][ T4952] udevd[4952]: worker [5690] /devices/virtual/block/nbd1 timeout; kill it [ 571.873029][ T4952] udevd[4952]: seq 12136 '/devices/virtual/block/nbd1' killed [ 575.355373][ T4900] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 578.245728][ T1179] kworker/u8:11 (1179) used greatest stack depth: 16864 bytes left [ 579.150387][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 580.495494][ T4900] Bluetooth: hci0: hcon ffff88804f6f0000 sent 1 < count 5 [ 580.503862][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2532'. [ 583.093449][T12962] pim6reg: entered allmulticast mode [ 588.635867][T13009] : renamed from bond_slave_0 (while UP) [ 589.903062][ T37] audit: type=1326 audit(1786035927.157:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.5.2526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 589.903106][ T37] audit: type=1326 audit(1786035927.167:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.5.2526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 589.916448][ T37] audit: type=1326 audit(1786035927.177:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.5.2526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 589.916495][ T37] audit: type=1326 audit(1786035927.177:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.5.2526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 589.916534][ T37] audit: type=1326 audit(1786035927.177:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.5.2526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 589.916572][ T37] audit: type=1326 audit(1786035927.177:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.5.2526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 589.916610][ T37] audit: type=1326 audit(1786035927.177:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.5.2526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 589.916648][ T37] audit: type=1326 audit(1786035927.177:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.5.2526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 589.918458][ T37] audit: type=1326 audit(1786035927.177:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.5.2526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 591.080999][ T37] audit: type=1326 audit(1786035928.347:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.5.2526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3c9e0d9 code=0x7ffc0000 [ 592.604216][T13042] 9pnet_virtio: no channels available for device syz [ 593.077681][ T70] block nbd1: Possible stuck request ffff888026c05080: control (read@0,1024B). Runtime 300 seconds [ 593.077803][ T70] block nbd1: Possible stuck request ffff888026c05240: control (read@1024,1024B). Runtime 300 seconds [ 593.077834][ T70] block nbd1: Possible stuck request ffff888026c05400: control (read@2048,1024B). Runtime 300 seconds [ 593.077906][ T70] block nbd1: Possible stuck request ffff888026c055c0: control (read@3072,1024B). Runtime 300 seconds [ 596.965630][ T5597] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 597.006794][ T5597] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 597.008564][ T5597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 597.022142][ T5597] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 597.023390][ T5597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 598.136102][T12898] syz_tun (unregistering): left allmulticast mode [ 598.136123][T12898] syz_tun (unregistering): left promiscuous mode [ 598.136187][T12898] bridge0: port 3(syz_tun) entered disabled state [ 599.272223][ T5597] Bluetooth: hci6: command tx timeout [ 601.289659][ T5597] Bluetooth: hci6: command tx timeout [ 601.723840][T13132] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 603.369321][ T5597] Bluetooth: hci6: command tx timeout [ 604.953744][T13061] lo speed is unknown, defaulting to 1000 [ 605.578643][ T5597] Bluetooth: hci6: command tx timeout [ 606.654840][T13194] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 606.917922][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 608.649498][ T5597] Bluetooth: hci0: command 0x0c20 tx timeout [ 608.701023][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2621'. [ 608.789856][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 609.439357][T13061] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.439477][T13061] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.439673][T13061] bridge_slave_0: entered allmulticast mode [ 609.464557][T13061] bridge_slave_0: entered promiscuous mode [ 609.625279][T13061] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.625406][T13061] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.625688][T13061] bridge_slave_1: entered allmulticast mode [ 609.651829][T13061] bridge_slave_1: entered promiscuous mode [ 611.319256][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2638'. [ 611.589783][T13061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.672624][T13061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.053431][T13301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2648'. [ 613.392995][T13061] team0: Port device team_slave_0 added [ 613.406391][T13061] team0: Port device team_slave_1 added [ 613.611386][ T66] bridge_slave_1: left allmulticast mode [ 613.611427][ T66] bridge_slave_1: left promiscuous mode [ 613.611672][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.774146][ T66] bridge_slave_0: left allmulticast mode [ 613.774169][ T66] bridge_slave_0: left promiscuous mode [ 613.774322][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.082856][T13332] netlink: 'syz.0.2660': attribute type 1 has an invalid length. [ 614.082876][T13332] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2660'. [ 615.343455][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.439546][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.480583][ T66] bond0 (unregistering): Released all slaves [ 615.662567][T13061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.662583][T13061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.662608][T13061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.667069][T13061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.667082][T13061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.667107][T13061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.230420][T13061] hsr_slave_0: entered promiscuous mode [ 616.231517][T13061] hsr_slave_1: entered promiscuous mode [ 616.232241][T13061] debugfs: 'hsr0' already exists in 'hsr' [ 616.232259][T13061] Cannot create hsr debugfs directory [ 617.324544][T13438] kvm: kvm [13435]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 617.402257][T13438] kvm: kvm [13435]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 617.409836][T13438] kvm: kvm [13435]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 617.410046][T13438] kvm: kvm [13435]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 617.491807][T13438] kvm: kvm [13435]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 617.616571][ T6981] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 618.584297][ T6981] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 618.584330][ T6981] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 618.595511][ T6981] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 618.595541][ T6981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.595560][ T6981] usb 1-1: Product: syz [ 618.595574][ T6981] usb 1-1: Manufacturer: syz [ 618.595588][ T6981] usb 1-1: SerialNumber: syz [ 618.686073][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 618.715894][ T6981] usb 1-1: config 0 descriptor?? [ 618.716925][T13449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 618.717117][T13449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 618.990078][T13449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 619.018028][T13449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 619.242593][ T6981] Error reading MAC address [ 619.277120][ T6981] usb 1-1: USB disconnect, device number 28 [ 619.477312][ T5719] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 620.386186][ T5719] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 620.386219][ T5719] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 620.411664][ T5719] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 620.411692][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.411712][ T5719] usb 5-1: Product: syz [ 620.411733][ T5719] usb 5-1: Manufacturer: syz [ 620.411747][ T5719] usb 5-1: SerialNumber: syz [ 620.423677][ T5719] usb 5-1: config 0 descriptor?? [ 620.435064][T13472] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 620.435239][T13472] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 620.793260][T13495] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 620.793377][T13495] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 621.358481][T13061] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 621.530906][T13061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 621.668211][T13061] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 622.828111][T13061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.832085][ T5719] Error reading MAC address [ 622.846314][T13061] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 622.861345][ T5719] usb 5-1: USB disconnect, device number 29 [ 622.923099][T13061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 623.337342][ T66] hsr_slave_0: left promiscuous mode [ 624.073927][ T66] hsr_slave_1: left promiscuous mode [ 624.287218][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.711682][ T70] block nbd1: Possible stuck request ffff888026c05080: control (read@0,1024B). Runtime 330 seconds [ 624.711727][ T70] block nbd1: Possible stuck request ffff888026c05240: control (read@1024,1024B). Runtime 330 seconds [ 624.711755][ T70] block nbd1: Possible stuck request ffff888026c05400: control (read@2048,1024B). Runtime 330 seconds [ 624.711792][ T70] block nbd1: Possible stuck request ffff888026c055c0: control (read@3072,1024B). Runtime 330 seconds [ 624.951234][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.905233][ T5597] Bluetooth: hci0: command 0x0c20 tx timeout [ 628.965904][ T6980] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 629.195541][ T6980] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 629.198050][ T6980] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 629.198075][ T6980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.198092][ T6980] usb 5-1: Product: syz [ 629.198106][ T6980] usb 5-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 629.198128][ T6980] usb 5-1: SerialNumber: syz [ 629.784482][ T4900] Bluetooth: hci0: ACL packet for unknown connection handle 3439 [ 630.680571][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.680647][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.816574][ T38] INFO: tas[ 631.816574][ T38] INFO: task syz.2.1921:11398 blocked for more than 143 seconds. [ 631.816827][ T38] Tainted: G L syzkaller #0 [ 631.816840][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.816850][ T38] task:syz.2.1921 state:D stack:28336 pid:11398 tgid:11397 ppid:5587 task_flags:0x400140 flags:0x00080002 [ 631.816906][ T38] Call Trace: [ 631.816913][ T38] [ 631.816925][ T38] __schedule+0x16dc/0x5500 [ 631.817004][ T38] ? blk_finish_plug+0x5d/0x80 [ 631.817049][ T38] ? __pfx___schedule+0x10/0x10 [ 631.817093][ T38] rt_mutex_schedule+0x76/0xf0 [ 631.817509][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 631.817561][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 631.817590][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 631.818012][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 631.818049][ T38] ? sync_bdevs+0x276/0x470 [ 631.818085][ T38] ? sync_bdevs+0x276/0x470 [ 631.818103][ T38] mutex_lock_nested+0x168/0x1d0 [ 631.818688][ T38] sync_bdevs+0x276/0x470 [ 631.818718][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.818740][ T38] __ia32_sys_sync+0xc5/0x120 [ 631.818764][ T38] ? __pfx___ia32_sys_sync+0x10/0x10 [ 631.819351][ T38] ? do_syscall_64+0x9d/0x580 [ 631.819378][ T38] do_syscall_64+0x174/0x580 [ 631.819397][ T38] ? trace_irq_disable+0x3b/0x140 [ 631.819424][ T38] ? clear_bhb_loop+0x40/0x90 [ 631.819447][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.820020][ T38] RIP: 0033:0x7f02860fe0d9 [ 631.820040][ T38] RSP: 002b:00007f0284356028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 631.820060][ T38] RAX: ffffffffffffffda RBX: 00007f0286385fa0 RCX: 00007f02860fe0d9 [ 631.820075][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 631.820087][ T38] RBP: 00007f0286385fa0 R08: 0000000000000000 R09: 0000000000000000 [ 631.820099][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.820111][ T38] R13: 00007f0286386038 R14: 00007f0286385fa0 R15: 00007ffdfb1142a8 [ 631.820710][ T38] [ 631.820721][ T38] INFO: task syz.2.1921:11401 blocked for more than 143 seconds. [ 631.820738][ T38] Tainted: G L syzkaller #0 [ 631.820748][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.820756][ T38] task:syz.2.1921 state:D stack:28856 pid:11401 tgid:11397 ppid:5587 task_flags:0x400040 flags:0x00080002 [ 631.821193][ T38] Call Trace: [ 631.821201][ T38] [ 631.821213][ T38] __schedule+0x16dc/0x5500 [ 631.821241][ T38] ? rcu_is_watching+0x15/0xb0 [ 631.821295][ T38] ? __pfx___schedule+0x10/0x10 [ 631.822385][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 631.822432][ T38] rt_mutex_schedule+0x76/0xf0 [ 631.822454][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 631.822486][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 631.822740][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 631.822771][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 631.822797][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 631.822833][ T38] ? sync_bdevs+0x276/0x470 [ 631.833323][ T38] ? sync_bdevs+0x276/0x470 [ 631.833348][ T38] mutex_lock_nested+0x168/0x1d0 [ 631.833379][ T38] sync_bdevs+0x276/0x470 [ 631.833969][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.833994][ T38] __ia32_sys_sync+0xc5/0x120 [ 631.834018][ T38] ? __pfx___ia32_sys_sync+0x10/0x10 [ 631.834044][ T38] ? do_syscall_64+0x9d/0x580 [ 631.834067][ T38] do_syscall_64+0x174/0x580 [ 631.836980][ T38] ? trace_irq_disable+0x3b/0x140 [ 631.837013][ T38] ? clear_bhb_loop+0x40/0x90 [ 631.837038][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.837057][ T38] RIP: 0033:0x7f02860fe0d9 [ 631.837074][ T38] RSP: 002b:00007f0284335028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 631.837492][ T38] RAX: ffffffffffffffda RBX: 00007f0286386090 RCX: 00007f02860fe0d9 [ 631.837507][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 631.837519][ T38] RBP: 00007f0286386090 R08: 0000000000000000 R09: 0000000000000000 [ 631.837531][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.837549][ T38] R13: 00007f0286386128 R14: 00007f0286386090 R15: 00007ffdfb1142a8 [ 631.837581][ T38] [ 631.838157][ T38] INFO: task syz.2.1921:11404 blocked for more than 143 seconds. [ 631.838175][ T38] Tainted: G L syzkaller #0 [ 631.838186][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.838194][ T38] task:syz.2.1921 state:D stack:27192 pid:11404 tgid:11397 ppid:5587 task_flags:0x400040 flags:0x00080002 [ 631.838243][ T38] Call Trace: [ 631.838249][ T38] [ 631.838831][ T38] __schedule+0x16dc/0x5500 [ 631.838883][ T38] ? __pfx___schedule+0x10/0x10 [ 631.838927][ T38] rt_mutex_schedule+0x76/0xf0 [ 631.839501][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 631.839554][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 631.839582][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 631.840000][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 631.840040][ T38] ? sync_bdevs+0x276/0x470 [ 631.840073][ T38] ? sync_bdevs+0x276/0x470 [ 631.840092][ T38] mutex_lock_nested+0x168/0x1d0 [ 631.840675][ T38] sync_bdevs+0x276/0x470 [ 631.840703][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.840723][ T38] __ia32_sys_sync+0xc5/0x120 [ 631.840744][ T38] ? __pfx___ia32_sys_sync+0x10/0x10 [ 631.840769][ T38] ? do_syscall_64+0x9d/0x580 [ 631.842695][ T38] do_syscall_64+0x174/0x580 [ 631.842720][ T38] ? trace_irq_disable+0x3b/0x140 [ 631.842748][ T38] ? clear_bhb_loop+0x40/0x90 [ 631.842772][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.842791][ T38] RIP: 0033:0x7f02860fe0d9 [ 631.843366][ T38] RSP: 002b:00007f0284314028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 631.843387][ T38] RAX: ffffffffffffffda RBX: 00007f0286386180 RCX: 00007f02860fe0d9 [ 631.843402][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 631.843414][ T38] RBP: 00007f0286386180 R08: 0000000000000000 R09: 0000000000000000 [ 631.843427][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.843438][ T38] R13: 00007f0286386218 R14: 00007f0286386180 R15: 00007ffdfb1142a8 [ 631.844039][ T38] [ 631.844078][ T38] [ 631.844078][ T38] Showing all locks held in the system: [ 631.844089][ T38] 4 locks held by ktimers/1/29: [ 631.844101][ T38] 1 lock held by khungtaskd/38: [ 631.844111][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 631.844721][ T38] 4 locks held by kworker/u8:2/43: [ 631.844734][ T38] 6 locks held by kworker/u8:3/44: [ 631.844744][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.844793][ T38] #1: ffffc90000b67c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.845424][ T38] #2: ffff8880227e4310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 631.845495][ T38] #3: ffff88805facb120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 631.846940][ T38] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 631.846995][ T38] #5: ffff88813ffaed58 (&n->list_lock){+.+.}-{3:3}, at: get_from_partial_node+0x58/0x460 [ 631.849458][ T38] 6 locks held by kworker/u8:4/66: [ 631.849473][ T38] 5 locks held by kworker/u8:5/111: [ 631.849484][ T38] #0: ffff888032bac938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.849535][ T38] #1: ffffc90002f3fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.850489][ T38] #2: ffff8880301d21d0 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xe8/0xfa0 [ 631.850552][ T38] #3: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x86c/0xfa0 [ 631.851335][ T38] #4: ffff88801dac7858 (&barn->lock){+.+.}-{3:3}, at: __pcs_replace_empty_main+0x407/0x690 [ 631.851390][ T38] 6 locks held by kworker/u8:7/519: [ 631.852297][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.852348][ T38] #1: ffffc90004297c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.852396][ T38] #2: ffff88801ab34310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 631.853340][ T38] #3: ffff88805f9a2d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 631.853388][ T38] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 631.855220][ T38] #5: ffff88813ffaed58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0 [ 631.855492][ T38] 3 locks held by kworker/0:2/876: [ 631.855504][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.855556][ T38] #1: ffffc90004ea7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.856386][ T38] #2: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x72/0x7f0 [ 631.856444][ T38] 3 locks held by kworker/u8:10/1164: [ 631.856455][ T38] #0: ffff888032753938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.857147][ T38] #1: ffffc90005cafc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.857592][ T38] #2: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 631.858400][ T38] 8 locks held by kworker/u8:14/3331: [ 631.858413][ T38] 6 locks held by kworker/u8:16/3425: [ 631.858424][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.858473][ T38] #1: ffffc9000e69fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.859252][ T38] #2: ffff888024ccc310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 631.859305][ T38] #3: ffff88805fb79d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 631.860235][ T38] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 631.860288][ T38] #5: ffff88813ffaed58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0 [ 631.861248][ T38] 1 lock held by klogd/4941: [ 631.861263][ T38] 1 lock held by dhcpcd/5247: [ 631.861273][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 631.861322][ T38] 2 locks held by getty/5340: [ 631.861332][ T38] #0: ffff888035d2c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 631.862277][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 631.862328][ T38] 4 locks held by syz-executor/5572: [ 631.862343][ T38] 4 locks held by udevd/5689: [ 631.863165][ T38] #0: ffff88802a7dc090 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 631.863446][ T38] #1: ffff88803b1fe878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 631.863500][ T38] #2: ffff88805ead5b48 (kn->active#29){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 631.865952][ T38] #3: ffff88803203e210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 631.866021][ T38] 1 lock held by udevd/5690: [ 631.866032][ T38] #0: ffff888025b784c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 631.866465][ T38] 2 locks held by kworker/0:8/5858: [ 631.866479][ T38] 4 locks held by kworker/0:10/6980: [ 631.866489][ T38] #0: ffff8880212e4d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.866554][ T38] #1: ffffc9000610fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.867349][ T38] #2: ffff88802998e210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 631.867401][ T38] #3: ffff88803203e210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 631.868005][ T38] 1 lock held by syz.2.1921/11398: [ 631.868016][ T38] #0: ffff888025b784c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 631.868062][ T38] 1 lock held by syz.2.1921/11401: [ 631.868072][ T38] #0: ffff888025b784c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 631.869187][ T38] 1 lock held by syz.2.1921/11404: [ 631.869198][ T38] #0: ffff888025b784c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 631.869248][ T38] 6 locks held by kworker/u8:1/12975: [ 631.869981][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.870032][ T38] #1: ffffc90004d87c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 631.870079][ T38] #2: ffff88801ab44310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 631.870851][ T38] #3: ffff888060365120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 631.870899][ T38] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 631.871674][ T38] #5: ffff88813ffaed58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5b0 [ 631.871726][ T38] 1 lock held by syz-executor/13061: [ 631.871737][ T38] #0: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 631.872548][ T38] 9 locks held by kworker/u8:11/13570: [ 631.872561][ T38] 4 locks held by syz.4.2749/13607: [ 631.872572][ T38] 2 locks held by syz.4.2749/13608: [ 631.872582][ T38] #0: ffffffff8faf5630 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 631.873360][ T38] #1: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 631.873412][ T38] 2 locks held by syz.4.2749/13635: [ 631.873423][ T38] #0: ffffffff8f61c4e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 631.874022][ T38] #1: ffffffff8f5ab1f8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 631.874070][ T38] 3 locks held by syz.4.2749/13637: [ 631.874918][ T38] 4 locks held by syz.6.2758/13640: [ 631.874931][ T38] 3 locks held by syz.3.2760/13638: [ 631.874994][ T38] [ 631.874999][ T38] ============================================= [ 631.874999][ T38] [ 631.875007][ T38] NMI backtrace for cpu 0 [ 631.875024][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 631.875050][ T38] Tainted: [L]=SOFTLOCKUP [ 631.875056][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 631.875067][ T38] Call Trace: [ 631.875074][ T38] [ 631.875081][ T38] dump_stack_lvl+0xe8/0x150 [ 631.875112][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 631.875138][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 631.875167][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 631.875197][ T38] sys_info+0x135/0x170 [ 631.875220][ T38] watchdog+0xfd7/0x1030 [ 631.875254][ T38] ? watchdog+0x1c7/0x1030 [ 631.875287][ T38] kthread+0x388/0x470 [ 631.875312][ T38] ? __pfx_watchdog+0x10/0x10 [ 631.875336][ T38] ? __pfx_kthread+0x10/0x10 [ 631.875362][ T38] ret_from_fork+0x514/0xb70 [ 631.875391][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 631.875417][ T38] ? __switch_to+0xc89/0x1420 [ 631.875442][ T38] ? __pfx_kthread+0x10/0x10 [ 631.875468][ T38] ret_from_fork_asm+0x1a/0x30 [ 631.875515][ T38] [ 631.875550][ T38] Sending NMI from CPU 0 to CPUs 1: [ 631.875580][ C1] NMI backtrace for cpu 1 [ 631.875594][ C1] CPU: 1 UID: 0 PID: 13640 Comm: syz.6.2758 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 631.875616][ C1] Tainted: [L]=SOFTLOCKUP [ 631.875621][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 631.875630][ C1] RIP: 0010:folio_mapping+0x177/0x1f0 [ 631.875653][ C1] Code: 00 74 08 48 89 df e8 f8 6c 20 00 48 8b 1b 31 c0 48 89 de 48 83 e6 03 48 0f 45 d8 31 ff e8 a1 fe b6 ff 48 89 d8 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 cc cc cc cc cc e8 29 f9 b6 ff 31 db eb e4 e8 20 [ 631.875666][ C1] RSP: 0018:ffffc90009c97348 EFLAGS: 00000293 [ 631.875680][ C1] RAX: 0000000000000000 RBX: ffffea0001cb5a80 RCX: ffff8880325fbe00 [ 631.875691][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 631.875700][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 631.875710][ C1] R10: dffffc0000000000 R11: fffff94000396b51 R12: dffffc0000000000 [ 631.875721][ C1] R13: dffffc0000000001 R14: ffffea0001cb5a88 R15: dffffc0000000000 [ 631.875733][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 631.875746][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 631.875756][ C1] CR2: 00007f9a97696990 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 631.875770][ C1] Call Trace: [ 631.875776][ C1] [ 631.875783][ C1] folio_mark_dirty+0x1e/0x190 [ 631.875801][ C1] __zap_vma_range+0x14f0/0x49f0 [ 631.875834][ C1] ? mas_next_node+0xbd7/0xe50 [ 631.875863][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 631.875887][ C1] ? mas_find+0xab1/0xcf0 [ 631.875902][ C1] ? unmap_vmas+0x1b9/0x550 [ 631.875921][ C1] unmap_vmas+0x390/0x550 [ 631.875943][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 631.875973][ C1] exit_mmap+0x293/0x9f0 [ 631.875988][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 631.876001][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 631.876028][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 631.876055][ C1] ? __pfx_exit_aio+0x10/0x10 [ 631.876074][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 631.876097][ C1] ? uprobe_clear_state+0x2af/0x3e0 [ 631.876119][ C1] __mmput+0xcb/0x3d0 [ 631.876136][ C1] exit_mm+0x186/0x240 [ 631.876157][ C1] do_exit+0x6cd/0x2360 [ 631.876182][ C1] ? __pfx_do_exit+0x10/0x10 [ 631.876202][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 631.876222][ C1] ? rt_spin_lock+0x1e0/0x400 [ 631.876246][ C1] ? rt_spin_unlock+0x157/0x200 [ 631.876278][ C1] do_group_exit+0x22d/0x2f0 [ 631.876299][ C1] ? rt_spin_unlock+0x163/0x200 [ 631.876319][ C1] get_signal+0x121b/0x12c0 [ 631.876346][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 631.876367][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 631.876390][ C1] ? ksys_write+0xfe/0x270 [ 631.876411][ C1] exit_to_user_mode_loop+0x104/0x730 [ 631.876433][ C1] ? rcu_is_watching+0x15/0xb0 [ 631.876451][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.876466][ C1] do_syscall_64+0x353/0x580 [ 631.876483][ C1] ? clear_bhb_loop+0x40/0x90 [ 631.876501][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.876516][ C1] RIP: 0033:0x7f9a9943e0d9 [ 631.876528][ C1] Code: Unable to access opcode bytes at 0x7f9a9943e0af. [ 631.876537][ C1] RSP: 002b:00007f9a976540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 631.876552][ C1] RAX: fffffffffffffe00 RBX: 00007f9a996c6188 RCX: 00007f9a9943e0d9 [ 631.876563][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9a996c6188 [ 631.876573][ C1] RBP: 00007f9a996c6180 R08: 0000000000000000 R09: 0000000000000000 [ 631.876583][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.876592][ C1] R13: 00007f9a996c6218 R14: 00007ffcdc16a0e0 R15: 00007ffcdc16a1c8 [ 631.876612][ C1] [ 631.893041][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 631.893060][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 631.893087][ T38] Tainted: [L]=SOFTLOCKUP [ 631.893094][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 631.893105][ T38] Call Trace: [ 631.893112][ T38] [ 631.893119][ T38] vpanic+0x56c/0xa60 [ 631.893149][ T38] ? __pfx___schedule+0x10/0x10 [ 631.893176][ T38] ? __pfx_vpanic+0x10/0x10 [ 631.893210][ T38] panic+0xc5/0xd0 [ 631.893235][ T38] ? __pfx_panic+0x10/0x10 [ 631.893259][ T38] ? preempt_schedule_common+0x82/0xd0 [ 631.893277][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 631.893297][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 631.893325][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 631.893355][ T38] watchdog+0x1030/0x1030 [ 631.893387][ T38] ? watchdog+0x1c7/0x1030 [ 631.893417][ T38] kthread+0x388/0x470 [ 631.893441][ T38] ? __pfx_watchdog+0x10/0x10 [ 631.893465][ T38] ? __pfx_kthread+0x10/0x10 [ 631.893490][ T38] ret_from_fork+0x514/0xb70 [ 631.893518][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 631.893550][ T38] ? __switch_to+0xc89/0x1420 [ 631.893575][ T38] ? __pfx_kthread+0x10/0x10 [ 631.893600][ T38] ret_from_fork_asm+0x1a/0x30 [ 631.893640][ T38] [ 631.893882][ T38] Kernel Offset: disabled