last executing test programs: 37.150891344s ago: executing program 3 (id=1146): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffd}], 0x0, 0x0, 0x0}) 37.115235314s ago: executing program 3 (id=1147): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) io_uring_setup(0x50b4, &(0x7f0000002240)={0x0, 0x9f12, 0x0, 0x1}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 34.075261692s ago: executing program 3 (id=1155): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x638, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x626, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xfc, "489f31"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x60, "f5d74665a1f7"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x9, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x63, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581a3f2d6"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x1d, 0x0, 0x1, 0x1f, 0x8, [@generic={0x7b, 0xd, "c5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f59ac608bb7b97bc58ba099e51de8f69"}, @uac_iso={0x7, 0x25, 0x1, 0xbeea4e69913121f6, 0xe0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x41, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd23f04a2bee664295a991210d7458cc7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8a, 0x7, 0xe, [@generic={0xb8, 0x23, "58f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0513be397d45eee60659ecaa5948a7332333e32803fb1b91842a6f5de870a88d7817176b819e96c203466a75bb6e12fb3c1ed3bbe0b2f95306c517ead5e5dbefb0fd2edc74ebfa9a0a52e3df7a444d286d383f8094e121a52bafa611175"}, @generic={0x6b, 0x1, "d711f13ed609e160a4fe792461d93b458b91067321480acf39685cb92b63dbe867a80b1267f4d346e01de58cb15bbe11b1821cb4e8271c586f5fe2f755fbb3d71b4f7ed05d4fa45a1cf4a5e29061efdf0420dbddb1c59ff905e224c1e534e0cc2e27dee22b7754271f"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}, @generic={0x62, 0x21, "62577cba293bba305869f08ab851fb587e2eed458fc5bee46fb025d3b967f9be90be8b40ef3017c99ab22f13b5397107174a572a16ea33ad9f9831c43dd24de095a4d57925d4674c489889f2ccdabe0f1557cd9c48a56a1fb0a9197b1d83cd62"}]}}]}}, {{0x9, 0x4, 0x6, 0x81, 0xd, 0xfc, 0x5b, 0x82, 0xd7, [@hid_hid={0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x247}}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x4b, 0x4, [@generic={0x14, 0x7, "c3d9b8972f8536b56b1b8ed984d6edf464bd"}, @generic={0x28, 0x9, "d26cb3c2f7baadaa3bd87077a9a8f8612496be2550945fc67626adc5237aed5a823bb25bfdf6"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0x5f, 0x30, "adba40ad1ea8dc90ac1abc5ca3dda59c3ebce8a129bf6f032a360f20404e0a030a7d4e48eba9df4a9a953f5cf9bf995c43567488b4f501e2c8587a8c8265c9f6c498ce5050ef1a8c7160ac450c51ac98f80c53ee9bbe3d78eac1d1d161"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0xd, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3a}]}}, {{0x9, 0x5, 0xc, 0x0, 0x278, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x4, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xf7ef}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6f, 0xf6, 0xa3, [@generic={0x68, 0x1a706ddc45c7be6c, "4a85f115ba000403ce77fb79afa920ba41ea90d69bcf0f00d0c069e995c6fc91e8753cc06b8a66e557772ee323ef15e33cc03d488fba1b9458d147029835823da1d29bc5ad06cb1961a9073703a33e9a0aac26689563d7af64d967db9ba5f243f8b14f2ac885"}, @generic={0x74, 0xf, "c8141a089e3edece84c8d0e3948e48fde590e4d5669331e884f338771c338a979a058314f00e35992c9d857fd47017ed60860916fe6284f955e25349d82db94dba21733cd8173264b8df4bc38f2b6a78794da97e944c08b55138b67532b3c79fd747bb0e4df3f4f68549ae438c4909acc599"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x38, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x44, 0x6, "bcf5c276eb7e6041ded0936f8e701ff524cc17c62017a427da4e43e4c15d518d62d88b36e4405d67b02f0ee5f956445091bfdf5c3301db9854f0af967d92ecb24444"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4c, 0x1, 0xfe, [@generic={0x16, 0xf, "11d86072c3a4dc06475987707a7f57674d55c7cd"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8f, 0x4, 0xc1}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xa9, 0xef, 0x6}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x40, 0x3, 0x7, [@generic={0x33, 0x22, "54d79160e3bb2b979055366518a0402e0d7197feac1163166820e42a96d9892377f31677125d1a67551d627f8fa316782e"}, @generic={0xa, 0x31, "4b143e0f2ad03248"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}, 0x3, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 32.170764128s ago: executing program 3 (id=1162): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x4, 0x100, 0x9}) bind$inet(0xffffffffffffffff, 0x0, 0x0) 32.164682449s ago: executing program 1 (id=1163): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x400000000000000}) 31.774803544s ago: executing program 1 (id=1166): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000b11}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.73577583s ago: executing program 1 (id=1167): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x1, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="ad98d189230b64a539c532c5bf2d359c2f74c6186e5c018375605eccc9aba993674141f5a3366ed980ac32233c21b435509b8941568d3c0af73360eb5d95ea54ca751803bf3d268b5a1152814fcd43ea216798b553a02af9a6898e749dd60fdcef6397824724383ed60401b28dae9b2646be4ea5f44d042f52b3a22fa7a02d71983bfa56f2d58d4789c2313ea1de60b755576a18aaa82dc03bea61", 0x9b}, {&(0x7f0000000380)="a436f8b8fc469a64b4fe59277a3c02ac2d9898c3dfe1356d2963df9825fb5c515e481b47933cca8b935162071e662b248a46ef9bbd7940cb2b7fb7e724a3c80e6e4d335e12a4c73f2f280a397bee6103a6db1b0c275cd69cdd49923ce88b68381cae6e3f8b5b449bf6605ad30d7e69e12b9fa0d379f3d1cb42afa32d110748162c569ad79b8fa4f4001416729b97255b636621d218ad7c5f396c9c281585059eb9f451", 0xa3}, {&(0x7f0000000a40)="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", 0x5bc}], 0x3}, 0x4048005) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r8 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) 29.450889537s ago: executing program 3 (id=1172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={0x0, 0x0, 0x2020}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x111}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xacd2}], 0x1, 0x12040, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r8, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000580)={@rand_addr=' \x01\x00', @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, 0x400, 0x6, 0x2, 0x300, 0x148f, 0x100000, r9}) 28.560567898s ago: executing program 3 (id=1175): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000600)={@val={0x8, 0x800}, @val={0x1, 0x0, 0xf, 0x0, 0x1}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x66, 0x0, 0x9, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2}, {0x12, 0x40, 0x0, @local}}}, 0x2a) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = epoll_create1(0x0) poll(&(0x7f00000000c0)=[{r2, 0x34}, {r3, 0x254d}], 0x2, 0x90f0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000008}) socket$inet(0x2, 0x3, 0x4) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r4, 0x0, 0x0, 0x15f, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 28.475980044s ago: executing program 1 (id=1177): r0 = syz_io_uring_setup(0x236, &(0x7f0000000080)={0x0, 0x20000, 0x8, 0x3}, &(0x7f0000000180), &(0x7f0000000100)) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x100000) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) setrlimit(0x6, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044840}, 0x48000) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r4, 0x41045508, &(0x7f0000000340)) r5 = syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x8) timer_create(0x2, 0x0, 0x0) timer_create(0x7, 0x0, 0x0) 28.22742354s ago: executing program 1 (id=1178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x800006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 28.100975023s ago: executing program 1 (id=1179): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="710505cd0202eb01010603011a040ffd700273"], 0x14) 24.288615744s ago: executing program 2 (id=1196): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0xffe0}, {0x0, 0xfff3}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1, 0x885, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 24.271190681s ago: executing program 2 (id=1197): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4c90) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0x40a45323, &(0x7f00000000c0)={{0x80}, 'port1\x00'}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x7d, 0x0, &(0x7f0000000300), &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$media(0x0, 0x66, 0x180502) pwritev(r5, &(0x7f0000000540), 0x0, 0x7, 0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) 23.202404746s ago: executing program 2 (id=1200): socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x1000000, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005080000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 22.19395523s ago: executing program 2 (id=1204): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x1, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r8 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) 21.49025814s ago: executing program 0 (id=1206): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000000780)=""/4088, 0xff8}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000500)=""/129, 0x81}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000440)=""/171, 0xab}], 0x6}, 0x0) syz_emit_ethernet(0x360, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x32a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bc"}]}}}}}}, 0x0) 20.625895989s ago: executing program 0 (id=1208): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x9, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) syz_usb_connect(0x0, 0x32, &(0x7f0000001c80)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x29, 0xfd, 0xdd, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x5, 0x5, "94ef63"}]}}]}}]}}]}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x26}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xf1, 0x16, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x650, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r3, 0x83c0550b, &(0x7f0000000500)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, &(0x7f00000004c0), 0x0}, 0x20) 19.061790985s ago: executing program 2 (id=1210): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.966118509s ago: executing program 0 (id=1211): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4c90) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a000b00fe800000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000001"], 0x3c}, 0x1, 0x11}, 0x0) syz_io_uring_setup(0x7d, 0x0, &(0x7f0000000300), &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$media(0x0, 0x66, 0x180502) pwritev(r5, &(0x7f0000000540), 0x0, 0x7, 0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) 18.140786664s ago: executing program 2 (id=1213): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f00000000c0)=[{r0, 0x34}], 0x1, 0x90f0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) 18.059754504s ago: executing program 0 (id=1214): socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x1000000, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005080000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 17.974012701s ago: executing program 0 (id=1215): syz_mount_image$fuse(0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0xff, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 17.723793261s ago: executing program 0 (id=1216): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r3, 0x5501) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) close(0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x50) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x8, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 17.701275934s ago: executing program 4 (id=1217): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff0400"/19, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) write$P9_RWALK(r0, &(0x7f0000000340)={0x30, 0x6f, 0x2, {0x3, [{0x80, 0x1, 0x2}, {0x1, 0x2}, {0x8, 0x3, 0x8}]}}, 0x30) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) 16.837430629s ago: executing program 4 (id=1218): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000000780)=""/4088, 0xff8}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000500)=""/129, 0x81}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000440)=""/171, 0xab}], 0x6}, 0x0) syz_emit_ethernet(0x360, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x32a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bc"}]}}}}}}, 0x0) 15.982493841s ago: executing program 4 (id=1219): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.929754664s ago: executing program 4 (id=1220): r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000100)=0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x84}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0xd, 0x100000001, 0x6, 0xfffffffffffffffc}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x6}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 15.883368144s ago: executing program 4 (id=1221): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, 0x0, &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f80)=@gettfilter={0x24, 0x2e, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xc, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880) 15.871539982s ago: executing program 4 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r4], 0x4c}}, 0x40000) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbb87162ca36fbbbbd3aaaaaaaaaa08004510002000660000070290780a010102ac1414aa11af9078e000000200e00000"], 0x0) 13.519807734s ago: executing program 32 (id=1175): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000600)={@val={0x8, 0x800}, @val={0x1, 0x0, 0xf, 0x0, 0x1}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x66, 0x0, 0x9, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2}, {0x12, 0x40, 0x0, @local}}}, 0x2a) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = epoll_create1(0x0) poll(&(0x7f00000000c0)=[{r2, 0x34}, {r3, 0x254d}], 0x2, 0x90f0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000008}) socket$inet(0x2, 0x3, 0x4) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r4, 0x0, 0x0, 0x15f, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 13.023939376s ago: executing program 33 (id=1179): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="710505cd0202eb01010603011a040ffd700273"], 0x14) 3.004680053s ago: executing program 34 (id=1213): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f00000000c0)=[{r0, 0x34}], 0x1, 0x90f0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) 1.995107571s ago: executing program 35 (id=1216): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r3, 0x5501) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) close(0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x50) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x8, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 36 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r4], 0x4c}}, 0x40000) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbb87162ca36fbbbbd3aaaaaaaaaa08004510002000660000070290780a010102ac1414aa11af9078e000000200e00000"], 0x0) kernel console output (not intermixed with test programs): 110 [ 81.947238][ T5868] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 81.947250][ T5868] f2fs_handle_critical_error+0x37c/0x540 [ 81.947260][ T5868] f2fs_write_end_io+0x886/0xb60 [ 81.947269][ T5868] __submit_merged_bio+0x27a/0x6a0 [ 81.947278][ T5868] __submit_merged_write_cond+0x255/0x530 [ 81.947287][ T5868] f2fs_write_data_pages+0x261d/0x3000 [ 81.947296][ T5868] ? rcu_is_watching+0x15/0xb0 [ 81.947308][ T5868] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 81.947323][ T5868] ? __mod_zone_page_state+0xd7/0x140 [ 81.947334][ T5868] ? folios_put_refs+0x560/0x640 [ 81.947345][ T5868] ? __pfx_folios_put_refs+0x10/0x10 [ 81.947351][ T5868] ? rcu_is_watching+0x15/0xb0 [ 81.947357][ T5868] ? lru_add+0xa2f/0xd80 [ 81.947364][ T5868] ? lru_add+0x198/0xd80 [ 81.947370][ T5868] ? folio_batch_move_lru+0x319/0x3a0 [ 81.947378][ T5868] ? filemap_get_folios_tag+0xed/0x630 [ 81.947384][ T5868] ? rcu_is_watching+0x15/0xb0 [ 81.947391][ T5868] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 81.947400][ T5868] do_writepages+0x32e/0x550 [ 81.947409][ T5868] ? rcu_is_watching+0x15/0xb0 [ 81.947416][ T5868] ? do_raw_spin_unlock+0x122/0x240 [ 81.947425][ T5868] filemap_fdatawrite+0x199/0x240 [ 81.947434][ T5868] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 81.947448][ T5868] ? rcu_is_watching+0x15/0xb0 [ 81.947455][ T5868] ? do_raw_spin_unlock+0x122/0x240 [ 81.947463][ T5868] f2fs_sync_dirty_inodes+0x31f/0x830 [ 81.947471][ T5868] f2fs_write_checkpoint+0x93e/0x2440 [ 81.947482][ T5868] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 81.947497][ T5868] kill_f2fs_super+0x2cc/0x6d0 [ 81.947504][ T5868] ? __pfx_kill_f2fs_super+0x10/0x10 [ 81.947513][ T5868] ? shrinker_free+0x2ce/0x3e0 [ 81.947520][ T5868] deactivate_locked_super+0xb9/0x130 [ 81.947529][ T5868] cleanup_mnt+0x425/0x4c0 [ 81.947536][ T5868] task_work_run+0x1d4/0x260 [ 81.947545][ T5868] ? __pfx_task_work_run+0x10/0x10 [ 81.947553][ T5868] ? __x64_sys_umount+0x122/0x160 [ 81.947561][ T5868] ? __pfx___x64_sys_umount+0x10/0x10 [ 81.947570][ T5868] ? rcu_is_watching+0x15/0xb0 [ 81.947576][ T5868] exit_to_user_mode_loop+0xec/0x130 [ 81.947585][ T5868] do_syscall_64+0x2bd/0x3b0 [ 81.947593][ T5868] ? rcu_is_watching+0x15/0xb0 [ 81.947599][ T5868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.947605][ T5868] ? clear_bhb_loop+0x60/0xb0 [ 81.947612][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.947618][ T5868] RIP: 0033:0x7effb2d8ff17 [ 81.947625][ T5868] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 81.947631][ T5868] RSP: 002b:00007ffdf95f9408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.947639][ T5868] RAX: 0000000000000000 RBX: 00007effb2e11c05 RCX: 00007effb2d8ff17 [ 81.947643][ T5868] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf95f94c0 [ 81.947647][ T5868] RBP: 00007ffdf95f94c0 R08: 0000000000000000 R09: 0000000000000000 [ 81.947651][ T5868] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf95fa550 [ 81.947655][ T5868] R13: 00007effb2e11c05 R14: 0000000000013fea R15: 00007ffdf95fa590 [ 81.947663][ T5868] [ 81.947666][ T5868] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 82.328081][ T5868] CPU: 1 UID: 0 PID: 5868 Comm: syz-executor Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 82.328100][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.328120][ T5868] Call Trace: [ 82.328124][ T5868] [ 82.328129][ T5868] dump_stack_lvl+0x189/0x250 [ 82.328148][ T5868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.328160][ T5868] ? __pfx_queue_work_on+0x10/0x10 [ 82.328171][ T5868] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 82.328188][ T5868] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.328205][ T5868] f2fs_handle_critical_error+0x37c/0x540 [ 82.328220][ T5868] f2fs_write_end_io+0x886/0xb60 [ 82.328232][ T5868] __submit_merged_bio+0x27a/0x6a0 [ 82.328242][ T5868] __submit_merged_write_cond+0x255/0x530 [ 82.328251][ T5868] f2fs_write_data_pages+0x261d/0x3000 [ 82.328260][ T5868] ? rcu_is_watching+0x15/0xb0 [ 82.328271][ T5868] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 82.328285][ T5868] ? __mod_zone_page_state+0xd7/0x140 [ 82.328296][ T5868] ? folios_put_refs+0x560/0x640 [ 82.328305][ T5868] ? __pfx_folios_put_refs+0x10/0x10 [ 82.328312][ T5868] ? rcu_is_watching+0x15/0xb0 [ 82.328318][ T5868] ? lru_add+0xa2f/0xd80 [ 82.328324][ T5868] ? lru_add+0x198/0xd80 [ 82.328330][ T5868] ? folio_batch_move_lru+0x319/0x3a0 [ 82.328338][ T5868] ? filemap_get_folios_tag+0xed/0x630 [ 82.328344][ T5868] ? rcu_is_watching+0x15/0xb0 [ 82.328351][ T5868] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 82.328362][ T5868] do_writepages+0x32e/0x550 [ 82.328371][ T5868] ? rcu_is_watching+0x15/0xb0 [ 82.328377][ T5868] ? do_raw_spin_unlock+0x122/0x240 [ 82.328386][ T5868] filemap_fdatawrite+0x199/0x240 [ 82.328394][ T5868] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 82.328407][ T5868] ? rcu_is_watching+0x15/0xb0 [ 82.328414][ T5868] ? do_raw_spin_unlock+0x122/0x240 [ 82.328422][ T5868] f2fs_sync_dirty_inodes+0x31f/0x830 [ 82.328430][ T5868] f2fs_write_checkpoint+0x93e/0x2440 [ 82.328440][ T5868] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 82.328453][ T5868] kill_f2fs_super+0x2cc/0x6d0 [ 82.328460][ T5868] ? __pfx_kill_f2fs_super+0x10/0x10 [ 82.328468][ T5868] ? shrinker_free+0x2ce/0x3e0 [ 82.328475][ T5868] deactivate_locked_super+0xb9/0x130 [ 82.328483][ T5868] cleanup_mnt+0x425/0x4c0 [ 82.328491][ T5868] task_work_run+0x1d4/0x260 [ 82.328500][ T5868] ? __pfx_task_work_run+0x10/0x10 [ 82.328508][ T5868] ? __x64_sys_umount+0x122/0x160 [ 82.328516][ T5868] ? __pfx___x64_sys_umount+0x10/0x10 [ 82.328525][ T5868] ? rcu_is_watching+0x15/0xb0 [ 82.328531][ T5868] exit_to_user_mode_loop+0xec/0x130 [ 82.328540][ T5868] do_syscall_64+0x2bd/0x3b0 [ 82.328548][ T5868] ? rcu_is_watching+0x15/0xb0 [ 82.328554][ T5868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.328560][ T5868] ? clear_bhb_loop+0x60/0xb0 [ 82.328567][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.328573][ T5868] RIP: 0033:0x7effb2d8ff17 [ 82.328580][ T5868] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 82.328586][ T5868] RSP: 002b:00007ffdf95f9408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.328594][ T5868] RAX: 0000000000000000 RBX: 00007effb2e11c05 RCX: 00007effb2d8ff17 [ 82.328599][ T5868] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf95f94c0 [ 82.328607][ T5868] RBP: 00007ffdf95f94c0 R08: 0000000000000000 R09: 0000000000000000 [ 82.328613][ T5868] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf95fa550 [ 82.328619][ T5868] R13: 00007effb2e11c05 R14: 0000000000013fea R15: 00007ffdf95fa590 [ 82.328629][ T5868] [ 82.692072][ T5868] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 82.734557][ T6812] netlink: 'syz.4.255': attribute type 10 has an invalid length. [ 82.745533][ T6812] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 82.876409][ T6825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.258'. [ 83.452958][ T6825] hub 9-0:1.0: USB hub found [ 83.467411][ T6825] hub 9-0:1.0: 1 port detected [ 85.645151][ T6888] loop2: detected capacity change from 0 to 256 [ 86.119931][ T6898] netlink: 28 bytes leftover after parsing attributes in process `syz.3.278'. [ 86.228649][ T6899] block nbd2: Device being setup by another task [ 86.235275][ T5871] block nbd2: Receive control failed (result -107) [ 86.269295][ T6897] block nbd2: NBD_DISCONNECT [ 86.273884][ T6897] block nbd2: Send disconnect failed -22 [ 86.285946][ T6903] netlink: 596 bytes leftover after parsing attributes in process `syz.1.280'. [ 86.309314][ T6896] block nbd2: shutting down sockets [ 86.949662][ T6922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.411994][ T6938] netlink: 596 bytes leftover after parsing attributes in process `syz.2.292'. [ 87.535392][ T6941] loop1: detected capacity change from 0 to 32768 [ 87.555717][ T6941] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 87.583326][ T6941] XFS (loop1): Ending clean mount [ 87.603161][ T5868] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 87.810197][ T6953] block nbd1: server does not support multiple connections per device. [ 87.874265][ T6953] block nbd1: NBD_DISCONNECT [ 87.880385][ T6953] block nbd1: Send disconnect failed -22 [ 87.892474][ T6953] block nbd1: Send disconnect failed -22 [ 87.909228][ T6952] block nbd1: Disconnected due to user request. [ 87.923933][ T6952] block nbd1: shutting down sockets [ 87.971380][ T6960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.014814][ T6962] fuse: Unknown parameter 'group_id00000000000000000000' [ 88.461600][ T6983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.308'. [ 88.979909][ T6993] block nbd1: server does not support multiple connections per device. [ 89.057122][ T6996] block nbd1: NBD_DISCONNECT [ 89.061954][ T6996] block nbd1: Send disconnect failed -22 [ 89.072421][ T6996] block nbd1: Send disconnect failed -22 [ 89.089815][ T6992] block nbd1: Disconnected due to user request. [ 89.096136][ T6992] block nbd1: shutting down sockets [ 89.163586][ T6998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.950055][ T7019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.319'. [ 91.598200][ T7038] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.325'. [ 91.878740][ T979] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.165781][ T979] usb 1-1: Using ep0 maxpacket: 8 [ 92.227893][ T979] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 92.258530][ T979] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.355513][ T979] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.465281][ T979] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.663579][ T7066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.783190][ T979] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.804466][ T979] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.814578][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.544906][ T979] usb 1-1: usb_control_msg returned -71 [ 93.564869][ T979] usbtmc 1-1:16.0: can't read capabilities [ 93.598101][ T979] usb 1-1: USB disconnect, device number 2 [ 94.018226][ T5869] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.152610][ T7110] netlink: 596 bytes leftover after parsing attributes in process `syz.2.352'. [ 95.797472][ T7137] netlink: 44 bytes leftover after parsing attributes in process `syz.3.361'. [ 96.599603][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.774310][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.788504][ T5869] usb 2-1: no configurations [ 96.800727][ T5869] usb 2-1: can't read configurations, error -22 [ 96.984380][ T7162] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.367'. [ 99.345879][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.418650][ T2150] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 100.222251][ T43] usb 1-1: no configurations [ 100.227019][ T43] usb 1-1: can't read configurations, error -22 [ 100.287381][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 100.394271][ T7196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.383'. [ 100.481102][ T7204] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.382'. [ 100.970995][ T7210] program syz.2.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.476940][ T7214] loop4: detected capacity change from 0 to 32768 [ 101.487844][ T7214] XFS: ikeep mount option is deprecated. [ 101.515020][ T7214] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.553355][ T7214] XFS (loop4): Ending clean mount [ 101.560686][ T7214] XFS (loop4): Quotacheck needed: Please wait. [ 101.580312][ T7214] XFS (loop4): Quotacheck: Done. [ 101.900129][ T5856] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.218314][ T2150] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.274234][ T2150] usb 4-1: no configurations [ 102.358679][ T2150] usb 4-1: can't read configurations, error -22 [ 103.214781][ T7248] loop2: detected capacity change from 0 to 128 [ 104.071918][ T7255] loop3: detected capacity change from 0 to 32768 [ 104.078814][ T7255] XFS: attr2 mount option is deprecated. [ 104.128804][ T7255] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 104.166572][ T7255] XFS (loop3): Ending clean mount [ 104.174207][ T7255] XFS (loop3): Quotacheck needed: Please wait. [ 104.186866][ T7255] XFS (loop3): Quotacheck: Done. [ 104.432893][ T7270] program syz.2.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.144307][ T7278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'. [ 105.402864][ T5862] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 105.412601][ T7278] hub 9-0:1.0: USB hub found [ 105.652038][ T7278] hub 9-0:1.0: 1 port detected [ 107.599189][ T7326] netlink: 44 bytes leftover after parsing attributes in process `syz.4.414'. [ 107.744703][ T7329] fuse: Bad value for 'fd' [ 108.145945][ T7339] netlink: 596 bytes leftover after parsing attributes in process `syz.4.418'. [ 108.808707][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.421'. [ 109.180795][ T7357] lo speed is unknown, defaulting to 1000 [ 109.364057][ T7361] netlink: 44 bytes leftover after parsing attributes in process `syz.2.426'. [ 109.425248][ T7363] fuse: Bad value for 'fd' [ 109.505814][ T7311] loop3: detected capacity change from 0 to 262144 [ 109.512869][ T7311] ======================================================= [ 109.512869][ T7311] WARNING: The mand mount option has been deprecated and [ 109.512869][ T7311] and is ignored by this kernel. Remove the mand [ 109.512869][ T7311] option from the mount to silence this warning. [ 109.512869][ T7311] ======================================================= [ 109.627922][ T7311] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.409 (7311) [ 109.695478][ T7311] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 109.709916][ T7311] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 109.774252][ T7311] BTRFS info (device loop3): enabling ssd optimizations [ 109.826347][ T7311] BTRFS info (device loop3): using spread ssd allocation scheme [ 109.918430][ T7311] BTRFS info (device loop3): enabling free space tree [ 110.158506][ T5862] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 110.868739][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 111.018649][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 111.047552][ T43] usb 4-1: config 0 has no interfaces? [ 111.097785][ T43] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 111.300754][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.333494][ T43] usb 4-1: config 0 descriptor?? [ 111.796702][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 111.805518][ T7399] bridge_slave_1: left allmulticast mode [ 111.811413][ T7399] bridge_slave_1: left promiscuous mode [ 111.817001][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.829991][ T7399] bridge_slave_0: left allmulticast mode [ 111.835639][ T7399] bridge_slave_0: left promiscuous mode [ 111.841749][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.870366][ T7419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.438'. [ 111.912141][ T7421] fuse: Invalid rootmode [ 112.098734][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.259356][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 112.265504][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.293584][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 112.321046][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 112.332940][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 112.345169][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.361012][ T24] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 112.370311][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.378272][ T24] usb 2-1: Product: syz [ 112.383511][ T24] usb 2-1: Manufacturer: syz [ 112.388088][ T24] usb 2-1: SerialNumber: syz [ 112.397962][ T24] usb 2-1: config 0 descriptor?? [ 112.449575][ T24] rc_core: IR keymap rc-imon-rsc not found [ 112.455493][ T24] Registered IR keymap rc-empty [ 112.463393][ T24] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 112.480117][ T43] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 112.480337][ T979] usb 4-1: USB disconnect, device number 9 [ 112.496449][ T24] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 112.665453][ T43] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 112.673678][ T43] usb 1-1: config 0 has no interface number 0 [ 112.681434][ T43] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 112.696386][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 112.712887][ T43] usb 1-1: Product: syz [ 112.721561][ T43] usb 1-1: Manufacturer: syz [ 112.732458][ T43] usb 1-1: SerialNumber: syz [ 112.747309][ T43] usb 1-1: config 0 descriptor?? [ 112.893086][ T7417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.908896][ T7417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.923263][ T979] usb 2-1: USB disconnect, device number 5 [ 112.965311][ T43] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 112.981179][ T43] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 113.155820][ T43] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 113.253249][ T43] usb 1-1: media controller created [ 113.260338][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.289986][ T43] DVB: Unable to find symbol dib7000p_attach() [ 113.296233][ T43] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 113.307385][ T43] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 113.317633][ T43] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 113.328075][ T43] usb 1-1: media controller created [ 113.335358][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.348957][ T43] dib0700: the master dib7090 has to be initialized first [ 113.356210][ T43] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 113.438664][ T43] rc_core: IR keymap rc-dib0700-rc5 not found [ 113.455404][ T43] Registered IR keymap rc-empty [ 113.467163][ T43] dvb-usb: could not initialize remote control. [ 113.483731][ T43] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 113.599392][ T7449] netlink: 'syz.1.448': attribute type 8 has an invalid length. [ 113.745251][ T7453] fuse: Invalid rootmode [ 114.812086][ T7467] loop4: detected capacity change from 0 to 32768 [ 114.818994][ T7467] XFS: attr2 mount option is deprecated. [ 114.852700][ T7467] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.875016][ T7467] XFS (loop4): Ending clean mount [ 114.880389][ T979] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.890927][ T7467] XFS (loop4): Quotacheck needed: Please wait. [ 114.900405][ T7467] XFS (loop4): Quotacheck: Done. [ 115.282210][ T43] usb 1-1: USB disconnect, device number 5 [ 115.374451][ T43] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 115.392468][ T7492] netlink: 'syz.0.460': attribute type 8 has an invalid length. [ 115.594588][ T5856] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.631588][ T7495] fuse: Invalid rootmode [ 116.449776][ T7513] block nbd4: Device being setup by another task [ 116.457349][ T5871] block nbd4: Receive control failed (result -107) [ 116.559421][ T7508] block nbd4: NBD_DISCONNECT [ 116.564354][ T7508] block nbd4: Send disconnect failed -22 [ 116.599337][ T7507] block nbd4: shutting down sockets [ 117.637027][ T979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.712757][ T43] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 117.791960][ T979] usb 2-1: no configurations [ 117.796575][ T979] usb 2-1: can't read configurations, error -22 [ 118.055983][ T43] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 118.074916][ T43] usb 3-1: config 0 has no interface number 0 [ 118.093299][ T43] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 118.105902][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 118.115300][ T43] usb 3-1: Product: syz [ 118.201503][ T43] usb 3-1: Manufacturer: syz [ 118.206765][ T43] usb 3-1: SerialNumber: syz [ 118.283414][ T43] usb 3-1: config 0 descriptor?? [ 118.552202][ T43] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 118.604884][ T43] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 118.763895][ T7548] block nbd1: server does not support multiple connections per device. [ 118.853899][ T43] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 118.859123][ T7548] block nbd1: NBD_DISCONNECT [ 118.867195][ T7548] block nbd1: Send disconnect failed -22 [ 118.874891][ T7548] block nbd1: Send disconnect failed -22 [ 118.916656][ T43] usb 3-1: media controller created [ 118.927222][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.025415][ T7547] block nbd1: Disconnected due to user request. [ 119.048741][ T7547] block nbd1: shutting down sockets [ 119.252391][ T43] DVB: Unable to find symbol dib7000p_attach() [ 119.264435][ T43] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 119.270271][ T7559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.294099][ T43] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 119.323309][ T43] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 119.334676][ T43] usb 3-1: media controller created [ 119.348415][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.360418][ T43] dib0700: the master dib7090 has to be initialized first [ 119.367592][ T43] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 119.778672][ T43] rc_core: IR keymap rc-dib0700-rc5 not found [ 119.794449][ T43] Registered IR keymap rc-empty [ 119.802731][ T43] dvb-usb: could not initialize remote control. [ 119.810987][ T7576] netlink: 596 bytes leftover after parsing attributes in process `syz.1.483'. [ 119.826788][ T43] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 120.112035][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 120.112049][ T30] audit: type=1326 audit(1755535934.349:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 120.140695][ T30] audit: type=1326 audit(1755535934.349:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 120.163044][ T30] audit: type=1326 audit(1755535934.349:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 120.191105][ T30] audit: type=1326 audit(1755535934.349:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 120.610984][ T30] audit: type=1326 audit(1755535934.349:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 120.755296][ T43] usb 3-1: USB disconnect, device number 6 [ 120.784337][ T30] audit: type=1326 audit(1755535934.349:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdae278d550 code=0x7ffc0000 [ 120.808277][ T43] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 120.838949][ T30] audit: type=1326 audit(1755535934.359:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdae278d550 code=0x7ffc0000 [ 120.864797][ T30] audit: type=1326 audit(1755535934.359:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 120.901066][ T30] audit: type=1326 audit(1755535934.359:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 120.923474][ T30] audit: type=1326 audit(1755535934.359:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 120.943413][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xeb [ 120.970868][ T7603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.239528][ T7611] fuse: Bad value for 'rootmode' [ 121.789677][ T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 121.983521][ T24] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 122.052240][ T24] usb 4-1: config 0 has no interface number 0 [ 122.062464][ T24] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 122.084517][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 122.109733][ T24] usb 4-1: Product: syz [ 122.139755][ T24] usb 4-1: Manufacturer: syz [ 122.144336][ T24] usb 4-1: SerialNumber: syz [ 122.155456][ T24] usb 4-1: config 0 descriptor?? [ 122.922896][ T24] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 122.932674][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 122.942315][ T24] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 122.957837][ T24] usb 4-1: media controller created [ 122.964993][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.004488][ T24] DVB: Unable to find symbol dib7000p_attach() [ 123.010980][ T24] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 123.021344][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 123.049056][ T24] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 123.057748][ T24] usb 4-1: media controller created [ 123.064485][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.088574][ T24] dib0700: the master dib7090 has to be initialized first [ 123.294848][ T24] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 123.501824][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 123.507932][ T24] Registered IR keymap rc-empty [ 123.529816][ T24] dvb-usb: could not initialize remote control. [ 123.537239][ T24] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 123.567335][ T7655] netlink: 596 bytes leftover after parsing attributes in process `syz.2.506'. [ 123.768792][ T5908] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.558059][ T7666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.594644][ T24] usb 4-1: USB disconnect, device number 10 [ 124.666371][ T24] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 125.909577][ T7691] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.515'. [ 126.565966][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.574041][ T5908] usb 2-1: no configurations [ 126.601417][ T5908] usb 2-1: can't read configurations, error -22 [ 126.623189][ T7696] loop3: detected capacity change from 0 to 2048 [ 126.712977][ T7713] netlink: 596 bytes leftover after parsing attributes in process `syz.0.522'. [ 126.723656][ T7712] loop4: detected capacity change from 0 to 1024 [ 126.750166][ T7712] hfsplus: cannot replace xattr [ 127.152982][ T7718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.255171][ T7723] fuse: Unknown parameter 'use00000000000000000000' [ 127.343525][ T13] hfsplus: b-tree write err: -5, ino 4 [ 127.357251][ T7727] binder: 7726:7727 ioctl c0306201 2000000001c0 returned -22 [ 127.760451][ T7741] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.532'. [ 129.016543][ T7761] loop4: detected capacity change from 0 to 1024 [ 129.096539][ T7761] hfsplus: cannot replace xattr [ 129.146437][ T3026] hfsplus: b-tree write err: -5, ino 4 [ 129.401057][ T7772] netlink: 596 bytes leftover after parsing attributes in process `syz.4.542'. [ 129.761111][ T7779] binder: BINDER_SET_CONTEXT_MGR already set [ 129.767142][ T7779] binder: 7775:7779 ioctl 4018620d 2000000002c0 returned -16 [ 130.762078][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.477542][ T7807] fuse: Unknown parameter 'user_i00000000000000000000' [ 131.558664][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 131.641665][ T5869] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 132.003827][ T5869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.117730][ T5869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.224653][ T5869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.236327][ T5869] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.283617][ T5869] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.320060][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.326356][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.358670][ T5908] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 132.397105][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.588717][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 133.304024][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 133.313432][ T5869] usb 5-1: usb_control_msg returned -32 [ 133.319800][ T5869] usbtmc 5-1:16.0: can't read capabilities [ 133.329812][ T5869] usb 5-1: USB disconnect, device number 3 [ 133.352894][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.368866][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.385468][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.398336][ T5908] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.409619][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.421451][ T5908] usb 2-1: config 0 descriptor?? [ 133.498504][ T7843] fuse: Bad value for 'fd' [ 133.515035][ T7835] syz_tun: entered allmulticast mode [ 133.523866][ T7834] syz_tun: left allmulticast mode [ 133.703356][ T7851] lo speed is unknown, defaulting to 1000 [ 133.834394][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'. [ 134.084731][ T5908] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 134.124584][ T5908] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input10 [ 134.216745][ T5908] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 134.469447][ T5908] usb 2-1: USB disconnect, device number 10 [ 134.616145][ T7863] vivid-000: disconnect [ 134.739148][ T7850] vivid-000: reconnect [ 135.215529][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 135.215542][ T30] audit: type=1800 audit(1755535949.459:77): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.574" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 135.535506][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 136.139067][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.578'. [ 136.348683][ T7903] netlink: 596 bytes leftover after parsing attributes in process `syz.2.582'. [ 136.738644][ T5869] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 136.987344][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 137.202420][ T5869] usb 2-1: config 0 has no interfaces? [ 137.208244][ T5869] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 137.271565][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.608334][ T5869] usb 2-1: config 0 descriptor?? [ 138.097649][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 138.106495][ T7906] bridge_slave_1: left allmulticast mode [ 138.112138][ T7906] bridge_slave_1: left promiscuous mode [ 138.117731][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.127759][ T7906] bridge_slave_0: left allmulticast mode [ 138.133448][ T7906] bridge_slave_0: left promiscuous mode [ 138.139109][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.548404][ T30] audit: type=1800 audit(1755535952.789:78): pid=7940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.592" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 138.693884][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.593'. [ 139.087796][ T5869] usb 2-1: USB disconnect, device number 11 [ 139.749489][ T2150] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 139.838739][ T5869] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 140.007115][ T2150] usb 2-1: Using ep0 maxpacket: 32 [ 140.020056][ T2150] usb 2-1: config 0 has no interfaces? [ 140.025617][ T2150] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 140.049596][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 140.054833][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.063972][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.075242][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.085266][ T2150] usb 2-1: config 0 descriptor?? [ 140.090428][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.267708][ T5869] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.279905][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.289167][ T7967] vivid-000: disconnect [ 140.290114][ T5869] usb 1-1: config 0 descriptor?? [ 140.299242][ T7966] vivid-000: reconnect [ 140.709503][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 140.879089][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 141.045752][ T7975] binder: BINDER_SET_CONTEXT_MGR already set [ 141.052176][ T7975] binder: 7972:7975 ioctl 4018620d 2000000002c0 returned -16 [ 142.214130][ T5869] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 142.239083][ T5869] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input11 [ 142.253907][ T2150] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.361651][ T5869] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 142.416193][ T5908] usb 2-1: USB disconnect, device number 12 [ 142.430604][ T43] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.461098][ T2150] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.474862][ T2150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.486700][ T2150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 142.497370][ T2150] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.511110][ T2150] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.522192][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.532307][ T2150] usb 5-1: config 0 descriptor?? [ 142.547156][ T5869] usb 1-1: USB disconnect, device number 6 [ 142.618837][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 143.453034][ T43] usb 3-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 143.473036][ T43] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.486999][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.503765][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.612'. [ 143.516014][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 143.529314][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.596028][ T43] usb 3-1: Product: syz [ 143.611899][ T43] usb 3-1: Manufacturer: syz [ 143.632178][ T2150] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 143.662102][ T8006] loop3: detected capacity change from 0 to 256 [ 143.671010][ T43] usb 3-1: SerialNumber: syz [ 143.689986][ T43] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 143.788715][ T5935] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 144.121862][ T43] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 144.146566][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 144.153100][ T43] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 144.173406][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.192087][ T5935] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.048907][ T5935] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 145.058412][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.068382][ T5935] usb 2-1: config 0 descriptor?? [ 145.141815][ T5935] usb 3-1: USB disconnect, device number 7 [ 146.039151][ T979] usb 5-1: USB disconnect, device number 4 [ 146.270716][ T8065] loop4: detected capacity change from 0 to 256 [ 146.483105][ T8068] loop4: detected capacity change from 0 to 32768 [ 146.489940][ T8068] XFS: attr2 mount option is deprecated. [ 146.570923][ T8068] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.615962][ T8068] XFS (loop4): Ending clean mount [ 146.622506][ T8068] XFS (loop4): Quotacheck needed: Please wait. [ 146.632750][ T8068] XFS (loop4): Quotacheck: Done. [ 147.154133][ T43] usb 2-1: USB disconnect, device number 13 [ 147.290282][ T5856] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.720136][ T8141] fuse: Bad value for 'user_id' [ 148.725200][ T8141] fuse: Bad value for 'user_id' [ 149.198817][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 149.358698][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 149.365923][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.393036][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.415698][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.428721][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 149.437844][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.453165][ T43] usb 2-1: config 0 descriptor?? [ 149.747947][ T8158] loop4: detected capacity change from 0 to 2048 [ 149.976537][ T5908] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 150.041531][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 150.149115][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 150.159858][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.172661][ T5908] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.194341][ T5908] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 150.244425][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.278869][ T5908] usb 1-1: config 0 descriptor?? [ 150.329290][ T43] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 150.432532][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input13 [ 150.580001][ T43] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 150.606903][ T43] usb 2-1: USB disconnect, device number 14 [ 150.609352][ T8172] loop4: detected capacity change from 0 to 256 [ 150.677925][ T8173] fido_id[8173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 151.979247][ T8189] dvmrp1: entered allmulticast mode [ 152.119328][ T8199] binder: BINDER_SET_CONTEXT_MGR already set [ 152.125378][ T8199] binder: 8194:8199 ioctl 4018620d 2000000002c0 returned -16 [ 152.517723][ T2150] usb 1-1: USB disconnect, device number 7 [ 153.089334][ T8200] syz_tun: entered allmulticast mode [ 153.099964][ T8200] dvmrp1: entered allmulticast mode [ 153.109423][ T8198] syz_tun: left allmulticast mode [ 153.930005][ T2150] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.255536][ T2150] usb 3-1: Using ep0 maxpacket: 16 [ 154.316153][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.381529][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.396495][ T2150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.702436][ T2150] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.712788][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.734241][ T2150] usb 3-1: config 0 descriptor?? [ 155.178995][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.660'. [ 155.902595][ T2150] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 155.935281][ T2150] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input14 [ 156.554800][ T2150] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 156.592816][ T2150] usb 3-1: USB disconnect, device number 8 [ 156.818440][ T8244] fido_id[8244]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 157.538729][ T5869] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 157.761841][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 157.788676][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.811709][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 157.838821][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 157.859782][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 157.877814][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.902170][ T5869] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 157.911639][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.967873][ T5869] usb 2-1: Product: syz [ 157.974710][ T5869] usb 2-1: Manufacturer: syz [ 157.981746][ T5869] usb 2-1: SerialNumber: syz [ 158.018816][ T5869] usb 2-1: config 0 descriptor?? [ 158.118775][ T5869] rc_core: IR keymap rc-imon-rsc not found [ 158.124804][ T5869] Registered IR keymap rc-empty [ 158.236694][ T8267] loop3: detected capacity change from 0 to 4096 [ 158.349139][ T5869] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 158.360778][ T8267] ntfs3(loop3): Primary boot: invalid bytes per MFT record 7168 (7). [ 158.361508][ T5869] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 158.378789][ T8267] ntfs3(loop3): try to read out of volume at offset 0x1ffe00 [ 158.634446][ T8258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.650286][ T8258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.738898][ T979] usb 2-1: USB disconnect, device number 15 [ 158.900746][ T5935] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.129953][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 159.136399][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.147760][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.160896][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.191860][ T5935] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.224846][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.249094][ T5935] usb 3-1: config 0 descriptor?? [ 159.358864][ T30] audit: type=1800 audit(1755535973.579:79): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.682" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 159.690499][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 159.701155][ T5935] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 159.720735][ T5935] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input16 [ 159.812542][ T5935] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 159.943202][ T5935] usb 3-1: USB disconnect, device number 9 [ 159.993759][ T8303] fido_id[8303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 160.212472][ T979] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.483198][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 160.495765][ T979] usb 5-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 160.532487][ T979] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.600686][ T979] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 160.650012][ T979] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 160.660576][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.669356][ T979] usb 5-1: Product: syz [ 160.676479][ T979] usb 5-1: Manufacturer: syz [ 160.689556][ T979] usb 5-1: SerialNumber: syz [ 160.731349][ T979] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 160.746087][ T979] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 160.858484][ T979] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 161.070613][ T8323] fuse: Unknown parameter '0x0000000000000003' [ 163.258778][ T5935] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 163.374404][ T2150] usb 5-1: USB disconnect, device number 5 [ 163.507001][ T8345] loop3: detected capacity change from 0 to 32768 [ 163.513771][ T8345] XFS: ikeep mount option is deprecated. [ 163.522949][ T8345] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.596441][ T8346] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.695'. [ 163.661893][ T5935] usb 1-1: no configurations [ 163.666505][ T5935] usb 1-1: can't read configurations, error -22 [ 163.690282][ T8345] XFS (loop3): Ending clean mount [ 163.696328][ T8345] XFS (loop3): Quotacheck needed: Please wait. [ 163.709094][ T8345] XFS (loop3): Quotacheck: Done. [ 163.923286][ T5935] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 164.041040][ T5862] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.106246][ T5935] usb 1-1: no configurations [ 164.114231][ T5935] usb 1-1: can't read configurations, error -22 [ 164.139161][ T5935] usb usb1-port1: attempt power cycle [ 164.258649][ T2150] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.509827][ T5935] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.559495][ T5935] usb 1-1: no configurations [ 164.564108][ T5935] usb 1-1: can't read configurations, error -22 [ 164.729305][ T5935] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 164.741830][ T979] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 164.753052][ T5935] usb 1-1: no configurations [ 164.757747][ T5935] usb 1-1: can't read configurations, error -22 [ 164.898637][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 164.905227][ T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.915669][ T979] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 164.919294][ T5935] usb usb1-port1: unable to enumerate USB device [ 164.924896][ T979] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 164.940500][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.953197][ T979] usb 4-1: config 0 descriptor?? [ 165.118765][ T5873] Bluetooth: hci2: command 0x0406 tx timeout [ 165.118829][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 165.124891][ T5873] Bluetooth: hci3: command 0x0406 tx timeout [ 165.137426][ T5184] Bluetooth: hci0: command 0x0406 tx timeout [ 167.038076][ T2150] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.083849][ T2150] usb 3-1: no configurations [ 167.104370][ T2150] usb 3-1: can't read configurations, error -22 [ 167.888469][ T5935] usb 4-1: USB disconnect, device number 11 [ 167.932131][ T8407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.708'. [ 167.941910][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.708'. [ 167.952414][ T8407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.708'. [ 167.961505][ T8407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.708'. [ 168.073288][ T30] audit: type=1800 audit(1755535982.319:80): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.709" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 168.373910][ T8419] lo speed is unknown, defaulting to 1000 [ 168.918303][ T8429] dvmrp1: entered allmulticast mode [ 169.218669][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 169.499189][ T43] usb 5-1: no configurations [ 169.508173][ T43] usb 5-1: can't read configurations, error -22 [ 169.679874][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 169.770083][ T979] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 169.863794][ T43] usb 5-1: no configurations [ 169.876990][ T43] usb 5-1: can't read configurations, error -22 [ 169.896901][ T43] usb usb5-port1: attempt power cycle [ 169.965374][ T2150] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 170.055780][ T8449] netlink: 'syz.1.719': attribute type 10 has an invalid length. [ 170.111874][ T8449] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 170.179701][ T2150] usb 1-1: Using ep0 maxpacket: 32 [ 170.253658][ T2150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.270854][ T2150] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.287476][ T2150] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 170.321386][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.344161][ T2150] usb 1-1: config 0 descriptor?? [ 170.349231][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 170.369796][ T43] usb 5-1: no configurations [ 170.374412][ T43] usb 5-1: can't read configurations, error -22 [ 170.508747][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 170.531542][ T43] usb 5-1: no configurations [ 170.536342][ T43] usb 5-1: can't read configurations, error -22 [ 170.543424][ T43] usb usb5-port1: unable to enumerate USB device [ 171.378678][ T2150] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 171.819400][ T2150] usb 2-1: Using ep0 maxpacket: 16 [ 171.825923][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.841622][ T8463] lo speed is unknown, defaulting to 1000 [ 171.849679][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.865802][ T2150] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.885856][ T2150] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.905042][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.914855][ T2150] usb 2-1: config 0 descriptor?? [ 172.329271][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 172.851087][ T2150] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 172.923639][ T5908] usb 1-1: USB disconnect, device number 12 [ 172.934114][ T979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.937473][ T2150] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input17 [ 172.943802][ T979] usb 4-1: no configurations [ 172.962125][ T979] usb 4-1: can't read configurations, error -22 [ 173.798265][ T8477] netlink: 36 bytes leftover after parsing attributes in process `syz.4.726'. [ 173.894082][ T2150] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 174.036189][ T30] audit: type=1326 audit(1755535988.279:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 174.070826][ T2150] usb 2-1: USB disconnect, device number 16 [ 174.164366][ T30] audit: type=1326 audit(1755535988.279:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 174.192754][ T8495] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.730'. [ 174.233355][ T30] audit: type=1326 audit(1755535988.279:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 174.257524][ T8491] fido_id[8491]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 174.673348][ T30] audit: type=1326 audit(1755535988.279:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 174.729034][ T30] audit: type=1326 audit(1755535988.279:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 174.753779][ T30] audit: type=1326 audit(1755535988.279:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 174.777112][ T30] audit: type=1326 audit(1755535988.279:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 174.801616][ T30] audit: type=1326 audit(1755535988.279:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff06e18d550 code=0x7ffc0000 [ 175.258704][ T30] audit: type=1326 audit(1755535988.279:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff06e18d550 code=0x7ffc0000 [ 175.288298][ T30] audit: type=1326 audit(1755535988.279:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 175.366926][ T8500] lo speed is unknown, defaulting to 1000 [ 176.860403][ T979] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 177.199651][ T979] usb 3-1: no configurations [ 177.219481][ T979] usb 3-1: can't read configurations, error -22 [ 177.358746][ T979] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 178.290034][ T5942] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 178.410274][ T8530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.739'. [ 178.687650][ T979] usb 3-1: device not accepting address 13, error -71 [ 178.702569][ T979] usb usb3-port1: attempt power cycle [ 179.148738][ T5915] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 179.387669][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 179.432411][ T5915] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 179.443420][ T5915] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.459221][ T5915] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.470870][ T5915] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.485253][ T5915] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.499645][ T5915] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.510929][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.730101][ T5915] usb 1-1: GET_CAPABILITIES returned 0 [ 179.766201][ T5915] usbtmc 1-1:16.0: can't read capabilities [ 179.911464][ T8553] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.744'. [ 180.229599][ T5942] usb 5-1: unable to get BOS descriptor or descriptor too short [ 180.242014][ T5942] usb 5-1: no configurations [ 180.249943][ T5942] usb 5-1: can't read configurations, error -22 [ 180.271452][ T43] usb 1-1: USB disconnect, device number 13 [ 180.438375][ T8558] loop4: detected capacity change from 0 to 32768 [ 180.445367][ T8558] XFS: attr2 mount option is deprecated. [ 180.463692][ T8558] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.488469][ T8558] XFS (loop4): Ending clean mount [ 180.494741][ T8558] XFS (loop4): Quotacheck needed: Please wait. [ 180.506839][ T8558] XFS (loop4): Quotacheck: Done. [ 181.227002][ T5856] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.629529][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 183.629543][ T30] audit: type=1326 audit(1755535997.859:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb087d8ebe9 code=0x7ffc0000 [ 183.659269][ T30] audit: type=1326 audit(1755535997.859:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fb087d8ebe9 code=0x7ffc0000 [ 183.738159][ T30] audit: type=1326 audit(1755535997.859:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb087d8ebe9 code=0x7ffc0000 [ 183.740971][ T5915] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 183.794426][ T30] audit: type=1326 audit(1755535997.859:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fb087d8ebe9 code=0x7ffc0000 [ 183.878720][ T30] audit: type=1326 audit(1755535997.869:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb087d8ebe9 code=0x7ffc0000 [ 183.903434][ T30] audit: type=1326 audit(1755535997.869:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb087d8d550 code=0x7ffc0000 [ 184.200148][ T30] audit: type=1326 audit(1755535997.869:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb087d8d550 code=0x7ffc0000 [ 184.223040][ T30] audit: type=1326 audit(1755535997.869:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb087d8ebe9 code=0x7ffc0000 [ 184.256338][ T30] audit: type=1326 audit(1755535997.869:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb087d8ebe9 code=0x7ffc0000 [ 184.279463][ T30] audit: type=1326 audit(1755535997.869:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb087d8ebe9 code=0x7ffc0000 [ 184.400290][ T5915] usb 2-1: no configurations [ 184.405029][ T5915] usb 2-1: can't read configurations, error -22 [ 184.728703][ T5915] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 184.824615][ T8608] tipc: Started in network mode [ 184.829976][ T8608] tipc: Node identity 02c3da96a71, cluster identity 4711 [ 184.913240][ T8608] tipc: Enabled bearer , priority 0 [ 184.926209][ T8610] syzkaller0: entered promiscuous mode [ 184.937868][ T8610] syzkaller0: entered allmulticast mode [ 185.135304][ T5915] usb 2-1: no configurations [ 185.140425][ T5915] usb 2-1: can't read configurations, error -22 [ 185.153487][ T5915] usb usb2-port1: attempt power cycle [ 185.204676][ T8608] tipc: Resetting bearer [ 185.223729][ T8606] tipc: Resetting bearer [ 185.230364][ T8606] tipc: Disabling bearer [ 185.498774][ T5915] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 185.529849][ T5915] usb 2-1: no configurations [ 185.534704][ T5915] usb 2-1: can't read configurations, error -22 [ 185.679127][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 185.790233][ T5915] usb 2-1: no configurations [ 185.794948][ T5915] usb 2-1: can't read configurations, error -22 [ 185.802529][ T5915] usb usb2-port1: unable to enumerate USB device [ 186.018848][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 187.078821][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 187.157157][ T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 187.188862][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.209135][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.234480][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.255264][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.278705][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.288170][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.781987][ T43] usb 4-1: GET_CAPABILITIES returned 0 [ 187.787671][ T43] usbtmc 4-1:16.0: can't read capabilities [ 188.012499][ T43] usb 4-1: USB disconnect, device number 14 [ 189.018860][ T5942] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 189.180385][ T5942] usb 2-1: no configurations [ 189.185769][ T5942] usb 2-1: can't read configurations, error -22 [ 189.329622][ T5942] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 189.500700][ T5942] usb 2-1: no configurations [ 189.505623][ T5942] usb 2-1: can't read configurations, error -22 [ 189.517811][ T5942] usb usb2-port1: attempt power cycle [ 189.939737][ T5942] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 189.981302][ T5942] usb 2-1: no configurations [ 189.986023][ T5942] usb 2-1: can't read configurations, error -22 [ 190.128739][ T5942] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 190.149645][ T5942] usb 2-1: no configurations [ 190.155040][ T5942] usb 2-1: can't read configurations, error -22 [ 190.171729][ T5942] usb usb2-port1: unable to enumerate USB device [ 190.951648][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 190.951770][ T30] audit: type=1326 audit(1755536005.199:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 190.983937][ T30] audit: type=1326 audit(1755536005.229:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 191.008249][ T30] audit: type=1326 audit(1755536005.249:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 191.047339][ T30] audit: type=1326 audit(1755536005.279:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 191.076752][ T30] audit: type=1326 audit(1755536005.279:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 191.102746][ T30] audit: type=1326 audit(1755536005.279:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdae278d550 code=0x7ffc0000 [ 191.168267][ T30] audit: type=1326 audit(1755536005.279:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdae278d550 code=0x7ffc0000 [ 191.194855][ T30] audit: type=1326 audit(1755536005.279:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 191.221841][ T30] audit: type=1326 audit(1755536005.279:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 191.246761][ T30] audit: type=1326 audit(1755536005.279:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 191.998845][ T5915] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 192.068700][ T5969] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 192.197719][ T5915] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 192.243866][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.265950][ T5915] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.289651][ T8743] netlink: 'syz.2.796': attribute type 29 has an invalid length. [ 192.317063][ T8743] netlink: 'syz.2.796': attribute type 29 has an invalid length. [ 192.333760][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.347124][ T5915] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.347711][ T8743] netlink: 596 bytes leftover after parsing attributes in process `syz.2.796'. [ 192.367726][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 192.378408][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.402118][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.419949][ T5915] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.451137][ T5969] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.464181][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.484988][ T5915] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 192.486124][ T7865] udevd[7865]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.548097][ T5969] usb 2-1: config 0 descriptor?? [ 192.625653][ T8732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.764925][ T8750] block nbd2: server does not support multiple connections per device. [ 192.785120][ T8732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.867791][ T8750] block nbd2: NBD_DISCONNECT [ 192.874299][ T8750] block nbd2: Send disconnect failed -22 [ 192.880997][ T8750] block nbd2: Send disconnect failed -22 [ 192.892096][ T5915] usb 1-1: USB disconnect, device number 14 [ 192.984871][ T5969] usbhid 2-1:0.0: can't add hid device: -71 [ 192.998797][ T5969] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 193.061920][ T8744] block nbd2: Disconnected due to user request. [ 193.063584][ T5969] usb 2-1: USB disconnect, device number 25 [ 193.102566][ T8744] block nbd2: shutting down sockets [ 193.781365][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.787885][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.868471][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.803'. [ 194.592565][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.807'. [ 194.622383][ T8782] hub 9-0:1.0: USB hub found [ 194.631173][ T8782] hub 9-0:1.0: 1 port detected [ 196.838786][ T5969] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 197.191311][ T8804] loop4: detected capacity change from 0 to 32768 [ 197.198067][ T8804] XFS: ikeep mount option is deprecated. [ 197.220681][ T5969] usb 2-1: Using ep0 maxpacket: 32 [ 197.237117][ T5969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.269863][ T8804] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 197.300766][ T5969] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.346407][ T5969] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 197.379106][ T8804] XFS (loop4): Ending clean mount [ 197.385491][ T8804] XFS (loop4): Quotacheck needed: Please wait. [ 197.414654][ T8804] XFS (loop4): Quotacheck: Done. [ 197.489117][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.503346][ T5969] usb 2-1: config 0 descriptor?? [ 197.525963][ T5856] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 197.805158][ T8820] binder_alloc: 8819: binder_alloc_buf, no vma [ 198.029848][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 198.029868][ T30] audit: type=1326 audit(1755536012.219:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 198.126035][ T30] audit: type=1326 audit(1755536012.219:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 198.180533][ T30] audit: type=1326 audit(1755536012.219:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 198.256106][ T30] audit: type=1326 audit(1755536012.219:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 198.328671][ T30] audit: type=1326 audit(1755536012.219:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 198.353575][ T5935] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 198.472428][ T30] audit: type=1326 audit(1755536012.219:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdae278d550 code=0x7ffc0000 [ 198.496551][ T30] audit: type=1326 audit(1755536012.219:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdae278d550 code=0x7ffc0000 [ 198.521358][ T30] audit: type=1326 audit(1755536012.219:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 198.547323][ T30] audit: type=1326 audit(1755536012.219:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 198.580302][ T30] audit: type=1326 audit(1755536012.219:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8822 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae278ebe9 code=0x7ffc0000 [ 198.628684][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 198.637075][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.650593][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 198.663674][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 198.675558][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 198.689497][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.730665][ T5935] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 198.934421][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.005001][ T5935] usb 3-1: Product: syz [ 199.011447][ T5935] usb 3-1: Manufacturer: syz [ 199.016871][ T5935] usb 3-1: SerialNumber: syz [ 199.030682][ T5935] usb 3-1: config 0 descriptor?? [ 199.053081][ T8831] lo speed is unknown, defaulting to 1000 [ 199.113132][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 199.180950][ T5935] rc_core: IR keymap rc-imon-rsc not found [ 199.199442][ T5935] Registered IR keymap rc-empty [ 199.211780][ T5935] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 199.238475][ T5935] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 199.415163][ T5969] usb 2-1: USB disconnect, device number 26 [ 199.460202][ T8827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.488940][ T8827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.537011][ T5908] usb 3-1: USB disconnect, device number 15 [ 200.578687][ T5969] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.751160][ T5969] usb 4-1: no configurations [ 200.757088][ T5969] usb 4-1: can't read configurations, error -22 [ 200.908697][ T5969] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 201.079268][ T5969] usb 4-1: no configurations [ 201.085867][ T5969] usb 4-1: can't read configurations, error -22 [ 201.094598][ T5969] usb usb4-port1: attempt power cycle [ 201.460053][ T5935] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 201.618685][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 201.618703][ T5969] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 201.636930][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.649056][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.650743][ T5969] usb 4-1: no configurations [ 201.660046][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 201.679712][ T5969] usb 4-1: can't read configurations, error -22 [ 201.685031][ T5935] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 201.701359][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.712654][ T5935] usb 3-1: config 0 descriptor?? [ 201.832185][ T5969] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 201.889570][ T5969] usb 4-1: no configurations [ 201.896170][ T5969] usb 4-1: can't read configurations, error -22 [ 201.904620][ T5969] usb usb4-port1: unable to enumerate USB device [ 202.194997][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.828'. [ 203.484319][ T5935] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 203.736929][ T8903] lo speed is unknown, defaulting to 1000 [ 204.095557][ T5935] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input19 [ 204.250668][ T5935] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 204.276038][ T5935] usb 3-1: USB disconnect, device number 16 [ 204.667086][ T8912] fido_id[8912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 204.943686][ T8917] lo speed is unknown, defaulting to 1000 [ 205.161535][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 206.577096][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.842'. [ 206.981662][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 206.981674][ T30] audit: type=1326 audit(1755536021.219:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 207.099963][ T30] audit: type=1326 audit(1755536021.219:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 207.281921][ T30] audit: type=1326 audit(1755536021.219:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 207.445920][ T30] audit: type=1326 audit(1755536021.219:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 207.655504][ T30] audit: type=1326 audit(1755536021.219:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 207.783446][ T30] audit: type=1326 audit(1755536021.219:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 208.015171][ T30] audit: type=1326 audit(1755536021.219:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73f9d8d550 code=0x7ffc0000 [ 208.295871][ T30] audit: type=1326 audit(1755536021.219:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73f9d8d550 code=0x7ffc0000 [ 208.567858][ T30] audit: type=1326 audit(1755536021.219:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 208.670067][ T30] audit: type=1326 audit(1755536021.219:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8950 comm="syz.3.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 208.815482][ T8975] input: syz1 as /devices/virtual/input/input20 [ 209.164564][ T8982] loop3: detected capacity change from 0 to 4096 [ 209.204454][ T8982] ntfs3(loop3): Primary boot: invalid bytes per MFT record 7168 (7). [ 209.214914][ T8982] ntfs3(loop3): try to read out of volume at offset 0x1ffe00 [ 210.067499][ T8994] dvmrp1: entered allmulticast mode [ 211.326350][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 212.131655][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 212.131666][ T30] audit: type=1326 audit(1755536026.309:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 212.253861][ T30] audit: type=1326 audit(1755536026.339:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 212.345585][ T30] audit: type=1326 audit(1755536026.339:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 212.412754][ T30] audit: type=1326 audit(1755536026.349:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 212.540798][ T30] audit: type=1326 audit(1755536026.349:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 212.637002][ T30] audit: type=1326 audit(1755536026.369:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73f9d8d550 code=0x7ffc0000 [ 212.727641][ T30] audit: type=1326 audit(1755536026.369:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73f9d8d550 code=0x7ffc0000 [ 213.218858][ T30] audit: type=1326 audit(1755536026.369:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 213.244684][ T30] audit: type=1326 audit(1755536026.449:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 213.319582][ T30] audit: type=1326 audit(1755536026.449:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f9d8ebe9 code=0x7ffc0000 [ 213.423214][ T9038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.866'. [ 215.588261][ T9052] loop3: detected capacity change from 0 to 128 [ 216.457106][ T9070] input: syz1 as /devices/virtual/input/input21 [ 217.074276][ T9080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.082527][ T9080] IPv6: NLM_F_CREATE should be set when creating new route [ 217.091043][ T9080] IPv6: NLM_F_CREATE should be set when creating new route [ 217.612232][ T5935] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 218.017929][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.127931][ T5935] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 218.228813][ T5935] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.462986][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.519463][ T5935] usb 1-1: config 0 descriptor?? [ 218.739912][ T5935] usb 1-1: string descriptor 0 read error: -71 [ 218.784448][ T5935] usb 1-1: USB disconnect, device number 15 [ 219.105090][ T9114] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.880'. [ 219.341223][ T9117] netlink: 44 bytes leftover after parsing attributes in process `syz.0.883'. [ 219.373948][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.883'. [ 219.404308][ T9117] netlink: 44 bytes leftover after parsing attributes in process `syz.0.883'. [ 219.962666][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 220.121385][ T43] usb 1-1: no configurations [ 220.127588][ T43] usb 1-1: can't read configurations, error -22 [ 220.298697][ T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 220.468395][ T9130] lo speed is unknown, defaulting to 1000 [ 220.743080][ T43] usb 1-1: no configurations [ 220.777087][ T43] usb 1-1: can't read configurations, error -22 [ 220.808726][ T43] usb usb1-port1: attempt power cycle [ 221.208653][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 221.231706][ T43] usb 1-1: no configurations [ 221.237022][ T43] usb 1-1: can't read configurations, error -22 [ 221.381613][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 221.409497][ T43] usb 1-1: no configurations [ 221.414824][ T43] usb 1-1: can't read configurations, error -22 [ 221.421897][ T43] usb usb1-port1: unable to enumerate USB device [ 221.578523][ T9148] loop3: detected capacity change from 0 to 32768 [ 221.587350][ T9148] XFS: ikeep mount option is deprecated. [ 221.608689][ T9148] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 221.636351][ T9148] XFS (loop3): Ending clean mount [ 221.642769][ T9148] XFS (loop3): Quotacheck needed: Please wait. [ 221.658830][ T9148] XFS (loop3): Quotacheck: Done. [ 222.033843][ T5862] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.493894][ T9167] input: syz1 as /devices/virtual/input/input22 [ 223.590917][ T9172] lo speed is unknown, defaulting to 1000 [ 224.128617][ T5915] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 224.281489][ T5915] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 224.301245][ T5915] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 224.316936][ T5915] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.332399][ T5915] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.342601][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.356976][ T5915] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.376606][ T5915] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 224.378995][ T7865] udevd[7865]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.569507][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.581265][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.617234][ T5915] usb 5-1: USB disconnect, device number 12 [ 224.832747][ T9205] input: syz1 as /devices/virtual/input/input23 [ 225.256352][ T9209] fuse: Bad value for 'fd' [ 226.372744][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 227.226089][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.915'. [ 227.297732][ T9249] fuse: Bad value for 'fd' [ 227.715850][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 227.715867][ T30] audit: type=1800 audit(1755536041.859:239): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.916" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 227.919394][ T5915] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 228.121784][ T5915] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 228.133929][ T5915] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.152502][ T5915] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.262873][ T5915] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.282309][ T5908] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 228.353345][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.422242][ T5915] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.430160][ T5915] usb 2-1: invalid MIDI out EP 0 [ 228.489294][ T5915] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 228.502983][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 228.558604][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 228.567932][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.581134][ T5908] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 229.050546][ T5908] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 229.165715][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.194558][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.218334][ T5908] usb 4-1: config 0 descriptor?? [ 229.300881][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.382053][ T5869] usb 2-1: USB disconnect, device number 27 [ 230.500175][ T9294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.859211][ T5869] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 231.018781][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 231.026689][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.045803][ T5869] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.073259][ T5869] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 231.204067][ T5908] usb 4-1: USB disconnect, device number 19 [ 231.507135][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.557899][ T5869] usb 2-1: config 0 descriptor?? [ 233.809490][ T5908] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 233.908759][ T5869] usb 2-1: USB disconnect, device number 28 [ 234.026436][ T5908] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 234.091488][ T9346] binder: BINDER_SET_CONTEXT_MGR already set [ 234.097880][ T9346] binder: 9342:9346 ioctl 4018620d 2000000002c0 returned -16 [ 234.206880][ T5908] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.435575][ T5908] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.508261][ T5908] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 234.899058][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.998848][ T5869] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 235.950010][ T5908] usb 5-1: can't set config #27, error -71 [ 236.000352][ T5908] usb 5-1: USB disconnect, device number 13 [ 236.367400][ T9368] lo speed is unknown, defaulting to 1000 [ 236.874123][ T9379] netlink: 596 bytes leftover after parsing attributes in process `syz.3.949'. [ 238.885279][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.935544][ T5869] usb 2-1: no configurations [ 239.011932][ T5869] usb 2-1: can't read configurations, error -22 [ 239.214471][ T9405] binder: BINDER_SET_CONTEXT_MGR already set [ 239.220905][ T9405] binder: 9400:9405 ioctl 4018620d 2000000002c0 returned -16 [ 240.558712][ T5908] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 240.886739][ T5908] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 241.012429][ T5908] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.024168][ T5908] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.066310][ T5908] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.164014][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.422974][ T5908] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.462686][ T5908] usb 3-1: invalid MIDI out EP 0 [ 241.629877][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.707275][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.735385][ T5908] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 242.665955][ T5869] usb 3-1: USB disconnect, device number 17 [ 243.276872][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 243.505057][ T9457] input: syz1 as /devices/virtual/input/input24 [ 243.638658][ T5869] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 243.809013][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 243.880550][ T5869] usb 1-1: config 0 has no interfaces? [ 243.891639][ T5869] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 244.106602][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.133824][ T5869] usb 1-1: config 0 descriptor?? [ 244.468761][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 244.479289][ T9465] bridge_slave_1: left allmulticast mode [ 244.485664][ T9465] bridge_slave_1: left promiscuous mode [ 244.493160][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.695398][ T9465] bridge_slave_0: left allmulticast mode [ 244.701958][ T9465] bridge_slave_0: left promiscuous mode [ 244.709036][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.873794][ T9471] lo speed is unknown, defaulting to 1000 [ 246.054418][ T5915] usb 1-1: USB disconnect, device number 20 [ 248.918865][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.982'. [ 249.878610][ T5915] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 249.978624][ T5869] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 250.028660][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 250.036035][ T5915] usb 2-1: config 0 has no interfaces? [ 250.042992][ T5915] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 250.053686][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.066004][ T5915] usb 2-1: config 0 descriptor?? [ 250.163258][ T5869] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 250.288983][ T5869] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.302070][ T5869] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.320051][ T5869] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.331878][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.334181][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 250.617255][ T5869] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.674137][ T43] usb 2-1: USB disconnect, device number 31 [ 250.898388][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.908311][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.941545][ T5869] usb 4-1: invalid MIDI out EP 0 [ 251.080361][ T5869] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 251.157505][ T7485] udevd[7485]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.003885][ T5869] usb 4-1: USB disconnect, device number 20 [ 252.464969][ T9569] program syz.4.998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.839906][ T5869] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 253.155925][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 253.167573][ T5869] usb 2-1: can't read configurations, error -71 [ 253.779388][ T9590] input: syz1 as /devices/virtual/input/input25 [ 253.957427][ T9592] input: syz1 as /devices/virtual/input/input26 [ 255.155978][ T5915] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 255.212184][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.220744][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.448626][ T5869] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 255.639277][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 255.646688][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.658762][ T5869] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.733517][ T9615] program syz.2.1011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.020178][ T5869] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 256.039892][ T5915] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 256.051793][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.058676][ T5915] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.104913][ T5869] usb 4-1: config 0 descriptor?? [ 256.157610][ T5915] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.341673][ T5915] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.593528][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.629498][ T5915] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.676786][ T5915] usb 1-1: invalid MIDI out EP 0 [ 256.850048][ T9599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.872529][ T9599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.127623][ T5915] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 257.145909][ T5915] usb 1-1: USB disconnect, device number 21 [ 258.951755][ T5869] usb 4-1: USB disconnect, device number 21 [ 259.091269][ T9642] input: syz1 as /devices/virtual/input/input27 [ 260.708659][ T9658] netlink: 'syz.4.1023': attribute type 29 has an invalid length. [ 260.774642][ T9658] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1023'. [ 260.836668][ T9663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.844466][ T9663] IPv6: NLM_F_CREATE should be set when creating new route [ 260.852886][ T9663] IPv6: NLM_F_CREATE should be set when creating new route [ 261.199188][ T9675] binder: BINDER_SET_CONTEXT_MGR already set [ 261.205880][ T9675] binder: 9667:9675 ioctl 4018620d 2000000002c0 returned -16 [ 263.119562][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'. [ 264.307553][ T9700] lo speed is unknown, defaulting to 1000 [ 267.429295][ T5915] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 267.658620][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 267.671161][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.702211][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.731196][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 267.745944][ T5915] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 267.888161][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.931688][ T5915] usb 5-1: config 0 descriptor?? [ 268.099007][ T5908] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 269.300615][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'. [ 269.591103][ T5908] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 269.605809][ T5908] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.625838][ T5908] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.694507][ T5915] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 269.731693][ T5908] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.749632][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1052'. [ 269.760585][ T5915] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input28 [ 269.777992][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.810022][ T9769] hub 9-0:1.0: USB hub found [ 269.833687][ T9769] hub 9-0:1.0: 1 port detected [ 269.840177][ T5908] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.867216][ T5908] usb 2-1: invalid MIDI out EP 0 [ 269.948382][ T5915] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 270.029356][ T9756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.040049][ T9756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.151746][ T5908] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 270.205820][ T9777] udevd[9777]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.230168][ T5908] usb 2-1: USB disconnect, device number 34 [ 270.409939][ T5869] usb 5-1: USB disconnect, device number 14 [ 270.485843][ T9786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.494410][ T9786] IPv6: NLM_F_CREATE should be set when creating new route [ 270.502459][ T9786] IPv6: NLM_F_CREATE should be set when creating new route [ 271.487496][ T9799] input: syz1 as /devices/virtual/input/input29 [ 273.913334][ T9832] lo speed is unknown, defaulting to 1000 [ 275.368692][ T5908] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 275.528628][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 275.535864][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.548993][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.559668][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.574201][ T5908] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.585351][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.595467][ T5908] usb 5-1: config 0 descriptor?? [ 275.838471][ T9853] input: syz1 as /devices/virtual/input/input30 [ 276.047291][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1068'. [ 276.061291][ T5908] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 276.105798][ T5908] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input31 [ 276.237316][ T5908] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 276.285146][ T5908] usb 5-1: USB disconnect, device number 15 [ 276.586704][ T9866] lo speed is unknown, defaulting to 1000 [ 276.949067][ T5915] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 277.119386][ T9861] fido_id[9861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 277.157419][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 277.559501][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.581527][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.602195][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 277.647710][ T5915] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 277.678628][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.709785][ T5915] usb 4-1: config 0 descriptor?? [ 278.189835][ T5915] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 278.262937][ T5915] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input32 [ 278.440848][ T5915] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 278.497760][ T5915] usb 4-1: USB disconnect, device number 22 [ 278.498713][ T5869] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 278.830365][ T9901] fido_id[9901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 278.967676][ T5869] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 279.040634][ T5869] usb 5-1: config 0 has no interface number 0 [ 279.124604][ T9905] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 279.169897][ T5869] usb 5-1: config 0 interface 113 has no altsetting 0 [ 279.458830][ T5869] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 279.469922][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.478392][ T5869] usb 5-1: Product: syz [ 279.488321][ T5869] usb 5-1: Manufacturer: syz [ 279.493462][ T5869] usb 5-1: SerialNumber: syz [ 279.504600][ T5869] usb 5-1: config 0 descriptor?? [ 279.507016][ T9916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.517407][ T5869] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 279.518095][ T9916] IPv6: NLM_F_CREATE should be set when creating new route [ 279.534857][ T9916] IPv6: NLM_F_CREATE should be set when creating new route [ 279.766106][ T9918] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1084'. [ 280.331114][ T9924] netlink: 'syz.0.1086': attribute type 10 has an invalid length. [ 280.772519][ T9924] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 281.228127][ T5869] usb 5-1: USB disconnect, device number 16 [ 281.245001][ T9928] lo speed is unknown, defaulting to 1000 [ 281.795048][ T9948] binder: BINDER_SET_CONTEXT_MGR already set [ 281.802520][ T9948] binder: 9943:9948 ioctl 4018620d 2000000002c0 returned -16 [ 282.858924][ T30] audit: type=1800 audit(1755536097.049:240): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1092" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 283.061643][ T9967] program syz.2.1094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.038607][ T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 284.208576][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 284.217826][ T43] usb 3-1: config 0 has no interfaces? [ 284.223764][ T43] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 284.233217][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.246348][ T43] usb 3-1: config 0 descriptor?? [ 284.536791][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1098'. [ 284.546345][ T9989] bridge_slave_1: left allmulticast mode [ 284.552230][ T9989] bridge_slave_1: left promiscuous mode [ 284.559065][ T9989] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.710778][ T9989] bridge_slave_0: left allmulticast mode [ 284.716753][ T9989] bridge_slave_0: left promiscuous mode [ 284.723890][ T9989] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.528678][ T5915] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 285.854083][ T5908] usb 3-1: USB disconnect, device number 18 [ 286.033479][T10015] program syz.1.1108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.357374][ T5915] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 286.366961][ T5915] usb 1-1: config 0 has no interface number 0 [ 286.393661][ T5915] usb 1-1: config 0 interface 113 has no altsetting 0 [ 286.641641][ T5915] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 286.651677][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.662484][ T5915] usb 1-1: Product: syz [ 286.674117][ T5915] usb 1-1: Manufacturer: syz [ 286.684106][ T5915] usb 1-1: SerialNumber: syz [ 286.702866][ T5915] usb 1-1: config 0 descriptor?? [ 286.781823][ T5915] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 286.828900][T10021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.200292][ T43] usb 1-1: USB disconnect, device number 22 [ 288.554066][T10047] binder: BINDER_SET_CONTEXT_MGR already set [ 288.560371][T10047] binder: 10042:10047 ioctl 4018620d 2000000002c0 returned -16 [ 289.297449][T10056] netlink: 'syz.1.1118': attribute type 29 has an invalid length. [ 289.405994][T10061] program syz.4.1119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.665821][T10064] netlink: 'syz.1.1118': attribute type 29 has an invalid length. [ 289.702446][T10056] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1118'. [ 290.811440][T10091] binder_alloc: 10089: binder_alloc_buf, no vma [ 291.664010][T10102] netlink: 'syz.0.1134': attribute type 29 has an invalid length. [ 291.674766][T10102] netlink: 'syz.0.1134': attribute type 29 has an invalid length. [ 292.041096][T10102] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1134'. [ 292.278582][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 292.461543][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 292.468329][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 292.482578][ T43] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 292.492435][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.577728][ T43] usb 5-1: Product: syz [ 292.642794][T10120] program syz.1.1138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.875290][ T43] usb 5-1: Manufacturer: syz [ 292.916732][ T43] usb 5-1: SerialNumber: syz [ 292.922190][ T43] usb 5-1: config 0 descriptor?? [ 292.930860][ T43] imon_raw 5-1:0.0: IR endpoint missing [ 292.938625][ T5915] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 293.122402][ T5915] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 293.137509][ T5915] usb 1-1: config 0 has no interface number 0 [ 293.148491][ T5915] usb 1-1: config 0 interface 113 has no altsetting 0 [ 293.192805][ T5915] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 293.202951][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.212936][ T5915] usb 1-1: Product: syz [ 293.217206][ T5915] usb 1-1: Manufacturer: syz [ 293.222778][ T5915] usb 1-1: SerialNumber: syz [ 293.245627][ T5915] usb 1-1: config 0 descriptor?? [ 293.256645][ T5915] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 293.336911][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.347263][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.364615][ T5915] usb 5-1: USB disconnect, device number 17 [ 293.723692][T10131] binder_alloc: 10127: binder_alloc_buf, no vma [ 294.768878][T10144] binder: BINDER_SET_CONTEXT_MGR already set [ 294.774960][T10144] binder: 10143:10144 ioctl 4018620d 200000000040 returned -16 [ 295.618214][ T43] usb 1-1: USB disconnect, device number 23 [ 297.153595][T10192] binder: BINDER_SET_CONTEXT_MGR already set [ 297.160431][T10192] binder: 10190:10192 ioctl 4018620d 2000000002c0 returned -16 [ 299.953209][T10223] lo speed is unknown, defaulting to 1000 [ 300.038634][ T5915] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 300.210302][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.258074][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 300.393273][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 300.405109][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.445864][ T5915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.464669][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.479968][ T5915] usb 4-1: config 0 descriptor?? [ 300.908415][ T5915] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 301.844120][ T5969] usb 4-1: USB disconnect, device number 23 [ 301.995596][T10256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.018627][ T5915] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 302.308557][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 302.370386][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.397169][ T5915] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.418709][ T5915] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 302.441703][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.479068][ T5915] usb 3-1: config 0 descriptor?? [ 303.707316][T10281] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1176'. [ 303.742553][T10280] syzkaller0: entered promiscuous mode [ 303.749842][T10280] syzkaller0: entered allmulticast mode [ 304.309656][T10277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.314059][ T5869] usb 3-1: USB disconnect, device number 19 [ 304.315726][T10277] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 304.424829][T10277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.437949][T10277] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 304.509117][T10277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.642126][T10277] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 304.666486][T10277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.688419][T10277] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 304.709252][T10277] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 304.715174][T10277] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 305.214230][ T5935] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 305.290271][T10353] syzkaller0: entered promiscuous mode [ 305.369749][ T5935] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 305.387525][ T5935] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.401780][ T5935] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.415205][ T5935] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.424442][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.441755][ T5935] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.448402][T10363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1186'. [ 305.451889][ T5935] usb 3-1: invalid MIDI out EP 0 [ 305.490322][ T9770] udevd[9770]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.511361][ T5935] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 305.641595][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.670056][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.721664][ T5915] usb 3-1: USB disconnect, device number 20 [ 306.651425][T10410] input: syz1 as /devices/virtual/input/input34 [ 309.318594][ T5935] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 309.480355][ T5935] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 309.551727][ T5935] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 309.602874][ T5935] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.642702][ T5935] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 309.655671][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.686864][ T5935] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 309.694886][ T5935] usb 5-1: invalid MIDI out EP 0 [ 309.789712][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 309.864812][ T5935] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 309.900721][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.922990][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.948075][ T5935] usb 5-1: USB disconnect, device number 18 [ 310.669985][ T30] audit: type=1326 audit(1755536124.919:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 310.692860][ T30] audit: type=1326 audit(1755536124.939:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 310.715979][ T30] audit: type=1326 audit(1755536124.939:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 310.740782][ T30] audit: type=1326 audit(1755536124.939:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 310.769601][ T30] audit: type=1326 audit(1755536124.939:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 310.793948][ T30] audit: type=1326 audit(1755536124.959:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 310.816359][ T30] audit: type=1326 audit(1755536124.959:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 310.838839][ T30] audit: type=1326 audit(1755536124.959:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff06e18d550 code=0x7ffc0000 [ 310.861220][ T30] audit: type=1326 audit(1755536124.959:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff06e18d550 code=0x7ffc0000 [ 310.884100][ T30] audit: type=1326 audit(1755536124.959:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06e18ebe9 code=0x7ffc0000 [ 311.558565][ T5915] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 311.718619][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 311.724906][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.735619][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 311.746559][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.762575][ T5915] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 311.771660][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.779806][ T5915] usb 1-1: Product: syz [ 311.783962][ T5915] usb 1-1: Manufacturer: syz [ 311.788563][ T5915] usb 1-1: SerialNumber: syz [ 311.793942][ T5915] usb 1-1: config 0 descriptor?? [ 311.801046][ T5915] imon_raw 1-1:0.0: IR endpoint missing [ 312.203729][T10466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.212283][T10466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.221529][ T5915] usb 1-1: USB disconnect, device number 24 [ 312.875689][T10472] kvm: pic: non byte write [ 312.947671][T10475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.954935][T10475] IPv6: NLM_F_CREATE should be set when creating new route [ 312.962148][T10475] IPv6: NLM_F_CREATE should be set when creating new route [ 314.450588][T10501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1217'. [ 315.990456][T10511] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1220'. [ 316.640257][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.647213][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.079718][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.086000][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.520255][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.526557][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 467.678643][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 467.686211][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 467.693480][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.702167][ T31] task:kworker/1:1 state:D stack:21536 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 467.714146][ T31] Workqueue: events rfkill_sync_work [ 467.719441][ T31] Call Trace: [ 467.722718][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 467.725619][ T31] __schedule+0x1798/0x4cc0 [ 467.730226][ T31] ? __pfx___schedule+0x10/0x10 [ 467.735493][ T31] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 467.741210][ T31] ? lock_release+0x4b/0x3e0 [ 467.748497][ T31] ? rcu_is_watching+0x15/0xb0 [ 467.753259][ T31] schedule+0x165/0x360 [ 467.775062][ T31] schedule_preempt_disabled+0x13/0x30 [ 467.780736][ T31] __mutex_lock+0x7e6/0x1350 [ 467.785321][ T31] ? __mutex_lock+0x5bb/0x1350 [ 467.790080][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 467.795351][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 467.800371][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 467.806252][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 467.812576][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 467.818275][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 467.823373][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 467.829093][ T31] rfkill_set_block+0x1cf/0x440 [ 467.833910][ T31] rfkill_sync_work+0x114/0x200 [ 467.838843][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 467.844553][ T31] process_scheduled_works+0xade/0x17b0 [ 467.850095][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 467.856053][ T31] worker_thread+0x8a0/0xda0 [ 467.860656][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 467.866967][ T31] ? __kthread_parkme+0x7b/0x200 [ 467.871903][ T31] kthread+0x711/0x8a0 [ 467.875954][ T31] ? __pfx_worker_thread+0x10/0x10 [ 467.881064][ T31] ? __pfx_kthread+0x10/0x10 [ 467.885637][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.890854][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.896053][ T31] ? __pfx_kthread+0x10/0x10 [ 467.900679][ T31] ret_from_fork+0x3f9/0x770 [ 467.905264][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 467.910403][ T31] ? __switch_to_asm+0x39/0x70 [ 467.915155][ T31] ? __switch_to_asm+0x33/0x70 [ 467.919952][ T31] ? __pfx_kthread+0x10/0x10 [ 467.924531][ T31] ret_from_fork_asm+0x1a/0x30 [ 467.929392][ T31] [ 467.932463][ T31] INFO: task syz-executor:5868 blocked for more than 143 seconds. [ 467.940335][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 467.947424][ T31] Blocked by coredump. [ 467.952015][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.960696][ T31] task:syz-executor state:D stack:21928 pid:5868 tgid:5868 ppid:1 task_flags:0x40054c flags:0x00004006 [ 467.972781][ T31] Call Trace: [ 467.976043][ T31] [ 467.978982][ T31] __schedule+0x1798/0x4cc0 [ 467.983483][ T31] ? __fput+0x44c/0xa70 [ 467.987606][ T31] ? kernfs_should_drain_open_files+0x20/0x2d0 [ 467.993772][ T31] ? __pfx___schedule+0x10/0x10 [ 467.998713][ T31] ? schedule+0x91/0x360 [ 468.002945][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.007678][ T31] ? lock_release+0x4b/0x3e0 [ 468.012266][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 468.018146][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 468.024482][ T31] schedule+0x165/0x360 [ 468.028638][ T31] schedule_preempt_disabled+0x13/0x30 [ 468.034087][ T31] __mutex_lock+0x7e6/0x1350 [ 468.038705][ T31] ? __mutex_lock+0x5bb/0x1350 [ 468.043447][ T31] ? rfkill_unregister+0xc8/0x220 [ 468.048483][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 468.053488][ T31] ? __pfx_device_del+0x10/0x10 [ 468.058321][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 468.063526][ T31] rfkill_unregister+0xc8/0x220 [ 468.068364][ T31] hci_unregister_dev+0x374/0x510 [ 468.073406][ T31] vhci_release+0x80/0xd0 [ 468.077718][ T31] ? __pfx_vhci_release+0x10/0x10 [ 468.082741][ T31] __fput+0x44c/0xa70 [ 468.086704][ T31] task_work_run+0x1d4/0x260 [ 468.091344][ T31] ? __pfx_task_work_run+0x10/0x10 [ 468.096446][ T31] ? kmem_cache_free+0x18f/0x400 [ 468.101401][ T31] do_exit+0x6b5/0x2300 [ 468.105544][ T31] ? do_raw_spin_lock+0x121/0x290 [ 468.110587][ T31] ? __pfx_do_exit+0x10/0x10 [ 468.115170][ T31] ? remove_wait_queue+0x33/0x120 [ 468.120214][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.124964][ T31] do_group_exit+0x21c/0x2d0 [ 468.129553][ T31] get_signal+0x1286/0x1340 [ 468.134029][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 468.139574][ T31] ? __pfx___x64_sys_wait4+0x10/0x10 [ 468.144850][ T31] ? fput_close_sync+0x119/0x200 [ 468.149802][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 468.155939][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.160780][ T31] exit_to_user_mode_loop+0x75/0x130 [ 468.166049][ T31] do_syscall_64+0x2bd/0x3b0 [ 468.170668][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.176729][ T31] ? clear_bhb_loop+0x60/0xb0 [ 468.181397][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.187279][ T31] RIP: 0033:0x7effb2d84e57 [ 468.191743][ T31] RSP: 002b:00007ffdf95fa4d0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 468.200212][ T31] RAX: fffffffffffffe00 RBX: 00000000000002df RCX: 00007effb2d84e57 [ 468.208156][ T31] RDX: 0000000040000000 RSI: 00007ffdf95fa53c RDI: 00000000ffffffff [ 468.216136][ T31] RBP: 00007ffdf95fa53c R08: 0000000000000000 R09: 0000000000000000 [ 468.224104][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000000e5 [ 468.232083][ T31] R13: 00005555925b3590 R14: 000000000004a5ef R15: 00007ffdf95fa590 [ 468.240064][ T31] [ 468.243080][ T31] INFO: task kworker/1:3:5869 blocked for more than 143 seconds. [ 468.251508][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 468.258627][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.267282][ T31] task:kworker/1:3 state:D stack:21264 pid:5869 tgid:5869 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 468.279269][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 468.285930][ T31] Call Trace: [ 468.289209][ T31] [ 468.292119][ T31] __schedule+0x1798/0x4cc0 [ 468.296610][ T31] ? __pfx___schedule+0x10/0x10 [ 468.301453][ T31] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 468.306981][ T31] ? lock_release+0x4b/0x3e0 [ 468.311567][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.316305][ T31] schedule+0x165/0x360 [ 468.321297][ T31] schedule_preempt_disabled+0x13/0x30 [ 468.326727][ T31] __mutex_lock+0x7e6/0x1350 [ 468.331324][ T31] ? __mutex_lock+0x5bb/0x1350 [ 468.336062][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 468.342300][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 468.347303][ T31] ? lock_acquire+0x5f/0x360 [ 468.351883][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 468.357578][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 468.363634][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 468.369364][ T31] process_scheduled_works+0xade/0x17b0 [ 468.374892][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 468.380876][ T31] worker_thread+0x8a0/0xda0 [ 468.385450][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 468.391797][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 468.397670][ T31] ? __kthread_parkme+0x7b/0x200 [ 468.402671][ T31] kthread+0x711/0x8a0 [ 468.406721][ T31] ? __pfx_worker_thread+0x10/0x10 [ 468.411817][ T31] ? __pfx_kthread+0x10/0x10 [ 468.416386][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.421138][ T31] ? __pfx_kthread+0x10/0x10 [ 468.425706][ T31] ret_from_fork+0x3f9/0x770 [ 468.430290][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 468.435376][ T31] ? __switch_to_asm+0x39/0x70 [ 468.440145][ T31] ? __switch_to_asm+0x33/0x70 [ 468.444886][ T31] ? __pfx_kthread+0x10/0x10 [ 468.449467][ T31] ret_from_fork_asm+0x1a/0x30 [ 468.454211][ T31] [ 468.457225][ T31] INFO: task syz.3.1175:10277 blocked for more than 144 seconds. [ 468.465671][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 468.472771][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.481426][ T31] task:syz.3.1175 state:D stack:24328 pid:10277 tgid:10270 ppid:5862 task_flags:0x400140 flags:0x00004006 [ 468.493333][ T31] Call Trace: [ 468.496596][ T31] [ 468.499552][ T31] __schedule+0x1798/0x4cc0 [ 468.504052][ T31] ? __pfx___schedule+0x10/0x10 [ 468.508907][ T31] ? schedule+0x91/0x360 [ 468.513142][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.517874][ T31] ? lock_release+0x4b/0x3e0 [ 468.522457][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 468.528332][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 468.534657][ T31] schedule+0x165/0x360 [ 468.538813][ T31] schedule_preempt_disabled+0x13/0x30 [ 468.544260][ T31] __mutex_lock+0x7e6/0x1350 [ 468.548842][ T31] ? __mutex_lock+0x5bb/0x1350 [ 468.553583][ T31] ? rfkill_fop_release+0x4b/0x220 [ 468.558707][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 468.563720][ T31] ? do_syscall_64+0xfa/0x3b0 [ 468.568373][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 468.573945][ T31] rfkill_fop_release+0x4b/0x220 [ 468.578885][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 468.584413][ T31] __fput+0x44c/0xa70 [ 468.588365][ T31] task_work_run+0x1d4/0x260 [ 468.592959][ T31] ? __pfx_task_work_run+0x10/0x10 [ 468.598054][ T31] get_signal+0x11ed/0x1340 [ 468.602613][ T31] ? task_work_add+0x281/0x420 [ 468.607373][ T31] ? __pfx_vfs_write+0x10/0x10 [ 468.612139][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 468.617674][ T31] ? __pfx___fput_deferred+0x10/0x10 [ 468.622969][ T31] ? __fget_files+0x2a/0x420 [ 468.627550][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 468.633714][ T31] ? __pfx_ksys_write+0x10/0x10 [ 468.638582][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.643319][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.648045][ T31] exit_to_user_mode_loop+0x75/0x130 [ 468.653322][ T31] do_syscall_64+0x2bd/0x3b0 [ 468.657894][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.662650][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.668722][ T31] ? clear_bhb_loop+0x60/0xb0 [ 468.673388][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.679292][ T31] RIP: 0033:0x7f73f9d8ebe9 [ 468.683698][ T31] RSP: 002b:00007f73f7fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 468.692125][ T31] RAX: 0000000000000008 RBX: 00007f73f9fb6090 RCX: 00007f73f9d8ebe9 [ 468.700104][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 468.708058][ T31] RBP: 00007f73f9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 468.716050][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.724025][ T31] R13: 00007f73f9fb6128 R14: 00007f73f9fb6090 R15: 00007ffe6b69f848 [ 468.732014][ T31] [ 468.735032][ T31] INFO: task syz.1.1179:10287 blocked for more than 144 seconds. [ 468.742941][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 468.750061][ T31] Blocked by coredump. [ 468.754627][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.763398][ T31] task:syz.1.1179 state:D stack:26792 pid:10287 tgid:10286 ppid:5868 task_flags:0x40044c flags:0x00004002 [ 468.776097][ T31] Call Trace: [ 468.779390][ T31] [ 468.782301][ T31] __schedule+0x1798/0x4cc0 [ 468.786795][ T31] ? unwind_get_return_address+0x4d/0x90 [ 468.792452][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 468.798633][ T31] ? __pfx___schedule+0x10/0x10 [ 468.803470][ T31] ? schedule+0x91/0x360 [ 468.807694][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.812475][ T31] ? lock_release+0x4b/0x3e0 [ 468.817061][ T31] schedule+0x165/0x360 [ 468.821245][ T31] schedule_timeout+0x9a/0x270 [ 468.826004][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 468.831380][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.836125][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.840886][ T31] ? wait_for_completion+0x267/0x5d0 [ 468.846150][ T31] wait_for_completion+0x2bf/0x5d0 [ 468.851255][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 468.856865][ T31] ? lock_release+0x4b/0x3e0 [ 468.861472][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.866226][ T31] ? __flush_work+0xd2/0xbc0 [ 468.870818][ T31] __flush_work+0x9b9/0xbc0 [ 468.875312][ T31] ? __flush_work+0xd2/0xbc0 [ 468.879949][ T31] ? __pfx___flush_work+0x10/0x10 [ 468.884957][ T31] ? __mutex_lock+0x335/0x1350 [ 468.889727][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 468.894990][ T31] ? __pfx___cancel_work+0x10/0x10 [ 468.900110][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 468.905729][ T31] __cancel_work_sync+0xbe/0x110 [ 468.910668][ T31] rfkill_unregister+0x92/0x220 [ 468.915497][ T31] nfc_unregister_device+0x96/0x2a0 [ 468.920686][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 468.926400][ T31] virtual_ncidev_close+0x56/0x90 [ 468.931437][ T31] __fput+0x44c/0xa70 [ 468.935417][ T31] task_work_run+0x1d4/0x260 [ 468.940021][ T31] ? __pfx_task_work_run+0x10/0x10 [ 468.945118][ T31] do_exit+0x6b5/0x2300 [ 468.949281][ T31] ? do_raw_spin_lock+0x121/0x290 [ 468.954292][ T31] ? __pfx_do_exit+0x10/0x10 [ 468.958934][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.963684][ T31] do_group_exit+0x21c/0x2d0 [ 468.968251][ T31] get_signal+0x1286/0x1340 [ 468.972764][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 468.978330][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 468.984528][ T31] ? rcu_is_watching+0x15/0xb0 [ 468.989297][ T31] exit_to_user_mode_loop+0x75/0x130 [ 468.994565][ T31] do_syscall_64+0x2bd/0x3b0 [ 468.999193][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.005248][ T31] ? clear_bhb_loop+0x60/0xb0 [ 469.009962][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.015895][ T31] RIP: 0033:0x7effb2d8ebe9 [ 469.020326][ T31] RSP: 002b:00007effb3bbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 469.028746][ T31] RAX: 0000000000000003 RBX: 00007effb2fb5fa0 RCX: 00007effb2d8ebe9 [ 469.036701][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 469.044692][ T31] RBP: 00007effb2e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 469.052674][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.060693][ T31] R13: 00007effb2fb6038 R14: 00007effb2fb5fa0 R15: 00007ffdf95fa178 [ 469.068689][ T31] [ 469.071704][ T31] INFO: task syz.2.1213:10484 blocked for more than 144 seconds. [ 469.079535][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 469.086647][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.095333][ T31] task:syz.2.1213 state:D stack:28440 pid:10484 tgid:10483 ppid:5860 task_flags:0x400040 flags:0x00004004 [ 469.107244][ T31] Call Trace: [ 469.110558][ T31] [ 469.113474][ T31] __schedule+0x1798/0x4cc0 [ 469.117970][ T31] ? __pfx___schedule+0x10/0x10 [ 469.122839][ T31] ? schedule+0x91/0x360 [ 469.127063][ T31] ? rcu_is_watching+0x15/0xb0 [ 469.131838][ T31] ? lock_release+0x4b/0x3e0 [ 469.136413][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 469.142325][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 469.148680][ T31] schedule+0x165/0x360 [ 469.152817][ T31] schedule_preempt_disabled+0x13/0x30 [ 469.158243][ T31] __mutex_lock+0x7e6/0x1350 [ 469.162836][ T31] ? __mutex_lock+0x5bb/0x1350 [ 469.167583][ T31] ? rfkill_fop_open+0x12d/0x820 [ 469.172528][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 469.177533][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 469.182826][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 469.188299][ T31] rfkill_fop_open+0x12d/0x820 [ 469.193072][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 469.198335][ T31] misc_open+0x2b9/0x330 [ 469.202632][ T31] chrdev_open+0x4c9/0x5e0 [ 469.207033][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 469.211975][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 469.218283][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 469.223220][ T31] do_dentry_open+0x950/0x13f0 [ 469.227970][ T31] vfs_open+0x3b/0x340 [ 469.232050][ T31] ? path_openat+0x2ecd/0x3830 [ 469.236799][ T31] path_openat+0x2ee5/0x3830 [ 469.241404][ T31] ? arch_stack_walk+0xfc/0x150 [ 469.246245][ T31] ? stack_depot_save_flags+0x40/0x860 [ 469.251710][ T31] ? rcu_is_watching+0x15/0xb0 [ 469.256459][ T31] ? __pfx_path_openat+0x10/0x10 [ 469.261424][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.267469][ T31] do_filp_open+0x1fa/0x410 [ 469.271965][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 469.276968][ T31] ? _raw_spin_unlock+0x28/0x50 [ 469.281814][ T31] ? alloc_fd+0x64c/0x6c0 [ 469.286126][ T31] do_sys_openat2+0x121/0x1c0 [ 469.290797][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 469.295981][ T31] ? lock_release+0x4b/0x3e0 [ 469.300596][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 469.305866][ T31] __x64_sys_openat+0x138/0x170 [ 469.310733][ T31] do_syscall_64+0xfa/0x3b0 [ 469.315216][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.321271][ T31] ? clear_bhb_loop+0x60/0xb0 [ 469.325931][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.331834][ T31] RIP: 0033:0x7fb087d8ebe9 [ 469.336229][ T31] RSP: 002b:00007fb085fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 469.344637][ T31] RAX: ffffffffffffffda RBX: 00007fb087fb5fa0 RCX: 00007fb087d8ebe9 [ 469.352616][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 469.361083][ T31] RBP: 00007fb087e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 469.369189][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.377149][ T31] R13: 00007fb087fb6038 R14: 00007fb087fb5fa0 R15: 00007fff6a251608 [ 469.385131][ T31] [ 469.388859][ T31] INFO: task syz.0.1216:10499 blocked for more than 145 seconds. [ 469.396569][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 469.403738][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.412394][ T31] task:syz.0.1216 state:D stack:28304 pid:10499 tgid:10494 ppid:5857 task_flags:0x400040 flags:0x00004004 [ 469.424282][ T31] Call Trace: [ 469.427538][ T31] [ 469.430474][ T31] __schedule+0x1798/0x4cc0 [ 469.434959][ T31] ? __pfx___schedule+0x10/0x10 [ 469.439809][ T31] ? schedule+0x91/0x360 [ 469.444035][ T31] ? rcu_is_watching+0x15/0xb0 [ 469.448804][ T31] ? lock_release+0x4b/0x3e0 [ 469.453374][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 469.459259][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 469.465567][ T31] schedule+0x165/0x360 [ 469.469726][ T31] schedule_preempt_disabled+0x13/0x30 [ 469.475166][ T31] __mutex_lock+0x7e6/0x1350 [ 469.479757][ T31] ? __mutex_lock+0x5bb/0x1350 [ 469.484497][ T31] ? misc_open+0x51/0x330 [ 469.488827][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 469.493831][ T31] misc_open+0x51/0x330 [ 469.497952][ T31] chrdev_open+0x4c9/0x5e0 [ 469.502354][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 469.507273][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 469.513598][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 469.518534][ T31] do_dentry_open+0x950/0x13f0 [ 469.523267][ T31] vfs_open+0x3b/0x340 [ 469.527294][ T31] ? path_openat+0x2ecd/0x3830 [ 469.532055][ T31] path_openat+0x2ee5/0x3830 [ 469.536624][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 469.542005][ T31] ? __kfence_alloc+0x385/0x3b0 [ 469.546835][ T31] ? getname_flags+0xb8/0x540 [ 469.551498][ T31] ? __pfx_path_openat+0x10/0x10 [ 469.556416][ T31] do_filp_open+0x1fa/0x410 [ 469.560910][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 469.565915][ T31] ? _raw_spin_unlock+0x28/0x50 [ 469.570760][ T31] ? alloc_fd+0x64c/0x6c0 [ 469.575071][ T31] do_sys_openat2+0x121/0x1c0 [ 469.579732][ T31] ? __se_sys_futex+0x36f/0x400 [ 469.584562][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 469.589755][ T31] ? rcu_is_watching+0x15/0xb0 [ 469.594505][ T31] __x64_sys_openat+0x138/0x170 [ 469.599406][ T31] do_syscall_64+0xfa/0x3b0 [ 469.603910][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.609982][ T31] ? clear_bhb_loop+0x60/0xb0 [ 469.614637][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.620521][ T31] RIP: 0033:0x7ff06e18ebe9 [ 469.624923][ T31] RSP: 002b:00007ff06ef64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 469.633330][ T31] RAX: ffffffffffffffda RBX: 00007ff06e3b6180 RCX: 00007ff06e18ebe9 [ 469.641294][ T31] RDX: 0000000000000002 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 469.649255][ T31] RBP: 00007ff06e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 469.657204][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.665180][ T31] R13: 00007ff06e3b6218 R14: 00007ff06e3b6180 R15: 00007ffca25f3998 [ 469.673177][ T31] [ 469.676197][ T31] INFO: task syz.0.1216:10500 blocked for more than 145 seconds. [ 469.684100][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 469.691214][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.699908][ T31] task:syz.0.1216 state:D stack:28208 pid:10500 tgid:10494 ppid:5857 task_flags:0x400040 flags:0x00004004 [ 469.711835][ T31] Call Trace: [ 469.715123][ T31] [ 469.718317][ T31] __schedule+0x1798/0x4cc0 [ 469.722856][ T31] ? __pfx___schedule+0x10/0x10 [ 469.727697][ T31] ? schedule+0x91/0x360 [ 469.731943][ T31] ? rcu_is_watching+0x15/0xb0 [ 469.736692][ T31] ? lock_release+0x4b/0x3e0 [ 469.741280][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 469.747156][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 469.753489][ T31] schedule+0x165/0x360 [ 469.757627][ T31] schedule_preempt_disabled+0x13/0x30 [ 469.763111][ T31] __mutex_lock+0x7e6/0x1350 [ 469.767692][ T31] ? __mutex_lock+0x5bb/0x1350 [ 469.772471][ T31] ? misc_open+0x51/0x330 [ 469.776803][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 469.781835][ T31] misc_open+0x51/0x330 [ 469.785974][ T31] chrdev_open+0x4c9/0x5e0 [ 469.790390][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 469.795311][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 469.801660][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 469.806577][ T31] do_dentry_open+0x950/0x13f0 [ 469.811355][ T31] vfs_open+0x3b/0x340 [ 469.815412][ T31] ? path_openat+0x2ecd/0x3830 [ 469.820181][ T31] path_openat+0x2ee5/0x3830 [ 469.824752][ T31] ? arch_stack_walk+0xfc/0x150 [ 469.829612][ T31] ? stack_depot_save_flags+0x40/0x860 [ 469.835066][ T31] ? rcu_is_watching+0x15/0xb0 [ 469.839843][ T31] ? __pfx_path_openat+0x10/0x10 [ 469.844762][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.850830][ T31] do_filp_open+0x1fa/0x410 [ 469.855323][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 469.860352][ T31] ? _raw_spin_unlock+0x28/0x50 [ 469.865189][ T31] ? alloc_fd+0x64c/0x6c0 [ 469.869541][ T31] do_sys_openat2+0x121/0x1c0 [ 469.874213][ T31] ? __se_sys_futex+0x36f/0x400 [ 469.879069][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 469.884255][ T31] ? rcu_is_watching+0x15/0xb0 [ 469.889066][ T31] __x64_sys_openat+0x138/0x170 [ 469.893912][ T31] do_syscall_64+0xfa/0x3b0 [ 469.898399][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.904465][ T31] ? clear_bhb_loop+0x60/0xb0 [ 469.909158][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.915046][ T31] RIP: 0033:0x7ff06e18ebe9 [ 469.919548][ T31] RSP: 002b:00007ff06ef43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 469.927948][ T31] RAX: ffffffffffffffda RBX: 00007ff06e3b6270 RCX: 00007ff06e18ebe9 [ 469.935935][ T31] RDX: 0000000000101000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 469.943952][ T31] RBP: 00007ff06e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 469.951957][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.959931][ T31] R13: 00007ff06e3b6308 R14: 00007ff06e3b6270 R15: 00007ffca25f3998 [ 469.967903][ T31] [ 469.970975][ T31] INFO: task syz.0.1216:10502 blocked for more than 145 seconds. [ 469.978732][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 469.985830][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.994523][ T31] task:syz.0.1216 state:D stack:27368 pid:10502 tgid:10494 ppid:5857 task_flags:0x400140 flags:0x00024004 [ 470.006428][ T31] Call Trace: [ 470.009713][ T31] [ 470.012630][ T31] __schedule+0x1798/0x4cc0 [ 470.017113][ T31] ? __pfx___schedule+0x10/0x10 [ 470.021960][ T31] ? schedule+0x91/0x360 [ 470.026263][ T31] ? rcu_is_watching+0x15/0xb0 [ 470.031029][ T31] ? lock_release+0x4b/0x3e0 [ 470.035603][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 470.041501][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.047827][ T31] schedule+0x165/0x360 [ 470.051991][ T31] schedule_preempt_disabled+0x13/0x30 [ 470.057429][ T31] __mutex_lock+0x7e6/0x1350 [ 470.062035][ T31] ? __mutex_lock+0x5bb/0x1350 [ 470.066781][ T31] ? misc_open+0x51/0x330 [ 470.071120][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 470.076146][ T31] misc_open+0x51/0x330 [ 470.080402][ T31] chrdev_open+0x4c9/0x5e0 [ 470.084818][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 470.089780][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 470.096103][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 470.101049][ T31] do_dentry_open+0x950/0x13f0 [ 470.105796][ T31] vfs_open+0x3b/0x340 [ 470.109883][ T31] ? path_openat+0x2ecd/0x3830 [ 470.114631][ T31] path_openat+0x2ee5/0x3830 [ 470.119220][ T31] ? arch_stack_walk+0xfc/0x150 [ 470.124052][ T31] ? stack_depot_save_flags+0x40/0x860 [ 470.129515][ T31] ? __pfx_path_openat+0x10/0x10 [ 470.134430][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.140508][ T31] do_filp_open+0x1fa/0x410 [ 470.145000][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 470.150021][ T31] ? _raw_spin_unlock+0x28/0x50 [ 470.154864][ T31] ? alloc_fd+0x64c/0x6c0 [ 470.159212][ T31] do_sys_openat2+0x121/0x1c0 [ 470.163887][ T31] ? __se_sys_futex+0x36f/0x400 [ 470.168761][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 470.173949][ T31] ? rcu_is_watching+0x15/0xb0 [ 470.178724][ T31] __x64_sys_openat+0x138/0x170 [ 470.183570][ T31] do_syscall_64+0xfa/0x3b0 [ 470.188052][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.194182][ T31] ? clear_bhb_loop+0x60/0xb0 [ 470.198935][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.204827][ T31] RIP: 0033:0x7ff06e18ebe9 [ 470.209244][ T31] RSP: 002b:00007ff06ef22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 470.217634][ T31] RAX: ffffffffffffffda RBX: 00007ff06e3b6360 RCX: 00007ff06e18ebe9 [ 470.225620][ T31] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 470.233594][ T31] RBP: 00007ff06e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 470.241668][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.249651][ T31] R13: 00007ff06e3b63f8 R14: 00007ff06e3b6360 R15: 00007ffca25f3998 [ 470.257616][ T31] [ 470.260659][ T31] INFO: task syz.4.1222:10515 blocked for more than 145 seconds. [ 470.268353][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 470.275526][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.284221][ T31] task:syz.4.1222 state:D stack:28456 pid:10515 tgid:10514 ppid:5856 task_flags:0x400040 flags:0x00004004 [ 470.296152][ T31] Call Trace: [ 470.299445][ T31] [ 470.302373][ T31] __schedule+0x1798/0x4cc0 [ 470.306848][ T31] ? kasan_save_free_info+0x46/0x50 [ 470.312059][ T31] ? do_sys_openat2+0x121/0x1c0 [ 470.316896][ T31] ? do_syscall_64+0xfa/0x3b0 [ 470.321594][ T31] ? __pfx___schedule+0x10/0x10 [ 470.326429][ T31] ? schedule+0x91/0x360 [ 470.330677][ T31] ? rcu_is_watching+0x15/0xb0 [ 470.335421][ T31] ? lock_release+0x4b/0x3e0 [ 470.340495][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 470.346376][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.352718][ T31] schedule+0x165/0x360 [ 470.356852][ T31] schedule_preempt_disabled+0x13/0x30 [ 470.362378][ T31] __mutex_lock+0x7e6/0x1350 [ 470.366961][ T31] ? __mutex_lock+0x5bb/0x1350 [ 470.371729][ T31] ? misc_open+0x51/0x330 [ 470.376047][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 470.381084][ T31] misc_open+0x51/0x330 [ 470.385243][ T31] chrdev_open+0x4c9/0x5e0 [ 470.389659][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 470.394584][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 470.401053][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 470.405989][ T31] do_dentry_open+0x950/0x13f0 [ 470.410952][ T31] vfs_open+0x3b/0x340 [ 470.415025][ T31] ? path_openat+0x2ecd/0x3830 [ 470.419791][ T31] path_openat+0x2ee5/0x3830 [ 470.424372][ T31] ? arch_stack_walk+0xfc/0x150 [ 470.429227][ T31] ? stack_depot_save_flags+0x40/0x860 [ 470.434681][ T31] ? __pfx_path_openat+0x10/0x10 [ 470.439630][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.445703][ T31] do_filp_open+0x1fa/0x410 [ 470.450204][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 470.455214][ T31] ? _raw_spin_unlock+0x28/0x50 [ 470.460057][ T31] ? alloc_fd+0x64c/0x6c0 [ 470.464378][ T31] do_sys_openat2+0x121/0x1c0 [ 470.469046][ T31] ? __se_sys_futex+0x36f/0x400 [ 470.473876][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 470.479076][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 470.484253][ T31] ? __sys_socketpair+0x4a9/0x560 [ 470.489276][ T31] __x64_sys_openat+0x138/0x170 [ 470.494118][ T31] do_syscall_64+0xfa/0x3b0 [ 470.498611][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.504665][ T31] ? clear_bhb_loop+0x60/0xb0 [ 470.509343][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.515222][ T31] RIP: 0033:0x7fdae278ebe9 [ 470.519626][ T31] RSP: 002b:00007fdae364d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 470.528021][ T31] RAX: ffffffffffffffda RBX: 00007fdae29b5fa0 RCX: 00007fdae278ebe9 [ 470.536006][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 470.543976][ T31] RBP: 00007fdae2811e19 R08: 0000000000000000 R09: 0000000000000000 [ 470.551972][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.559950][ T31] R13: 00007fdae29b6038 R14: 00007fdae29b5fa0 R15: 00007ffd2629f638 [ 470.567913][ T31] [ 470.570960][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 470.579993][ T31] INFO: task syz-executor:10520 blocked for more than 146 seconds. [ 470.587866][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 470.594981][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.603657][ T31] task:syz-executor state:D stack:28168 pid:10520 tgid:10520 ppid:1 task_flags:0x400040 flags:0x00004000 [ 470.615563][ T31] Call Trace: [ 470.618853][ T31] [ 470.621758][ T31] __schedule+0x1798/0x4cc0 [ 470.626229][ T31] ? kasan_save_free_info+0x46/0x50 [ 470.631509][ T31] ? do_sys_openat2+0x121/0x1c0 [ 470.636349][ T31] ? do_syscall_64+0xfa/0x3b0 [ 470.641067][ T31] ? __pfx___schedule+0x10/0x10 [ 470.645904][ T31] ? schedule+0x91/0x360 [ 470.650162][ T31] ? rcu_is_watching+0x15/0xb0 [ 470.654906][ T31] ? lock_release+0x4b/0x3e0 [ 470.659524][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 470.665427][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.671865][ T31] schedule+0x165/0x360 [ 470.676010][ T31] schedule_preempt_disabled+0x13/0x30 [ 470.681465][ T31] __mutex_lock+0x7e6/0x1350 [ 470.686045][ T31] ? __mutex_lock+0x5bb/0x1350 [ 470.690817][ T31] ? misc_open+0x51/0x330 [ 470.695134][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 470.700180][ T31] misc_open+0x51/0x330 [ 470.704322][ T31] chrdev_open+0x4c9/0x5e0 [ 470.708743][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 470.713671][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 470.720009][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 470.725793][ T31] do_dentry_open+0x950/0x13f0 [ 470.730563][ T31] vfs_open+0x3b/0x340 [ 470.734618][ T31] ? path_openat+0x2ecd/0x3830 [ 470.739378][ T31] path_openat+0x2ee5/0x3830 [ 470.743947][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 470.749401][ T31] ? rcu_is_watching+0x15/0xb0 [ 470.754141][ T31] ? count_memcg_event_mm+0x21/0x260 [ 470.759417][ T31] ? count_memcg_event_mm+0x21/0x260 [ 470.764698][ T31] ? lock_release+0x4b/0x3e0 [ 470.769281][ T31] ? __pfx_path_openat+0x10/0x10 [ 470.774197][ T31] ? __pfx___up_read+0x10/0x10 [ 470.778966][ T31] ? lock_release+0x4b/0x3e0 [ 470.783540][ T31] do_filp_open+0x1fa/0x410 [ 470.788011][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 470.793029][ T31] ? _raw_spin_unlock+0x28/0x50 [ 470.797869][ T31] ? alloc_fd+0x64c/0x6c0 [ 470.802203][ T31] do_sys_openat2+0x121/0x1c0 [ 470.806859][ T31] ? lock_release+0x4b/0x3e0 [ 470.811458][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 470.816643][ T31] ? fd_install+0x97/0x540 [ 470.821075][ T31] ? fd_install+0x30d/0x540 [ 470.825565][ T31] __x64_sys_openat+0x138/0x170 [ 470.830413][ T31] do_syscall_64+0xfa/0x3b0 [ 470.834885][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.840953][ T31] ? clear_bhb_loop+0x60/0xb0 [ 470.845607][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.851488][ T31] RIP: 0033:0x7f8b6fb8d4d1 [ 470.855893][ T31] RSP: 002b:00007ffeb3f51150 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 470.864301][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8b6fb8d4d1 [ 470.872266][ T31] RDX: 0000000000000002 RSI: 00007f8b6fc12822 RDI: 00000000ffffff9c [ 470.880248][ T31] RBP: 00007f8b6fc12822 R08: 0000000000000000 R09: 00007f8b708ed6c0 [ 470.888208][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 470.896171][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 470.904148][ T31] [ 470.907165][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 470.916240][ T31] INFO: task syz-executor:10523 blocked for more than 146 seconds. [ 470.924151][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 470.931279][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.939946][ T31] task:syz-executor state:D stack:28168 pid:10523 tgid:10523 ppid:1 task_flags:0x400040 flags:0x00004000 [ 470.951879][ T31] Call Trace: [ 470.955143][ T31] [ 470.958054][ T31] __schedule+0x1798/0x4cc0 [ 470.962578][ T31] ? kasan_save_free_info+0x46/0x50 [ 470.967764][ T31] ? do_sys_openat2+0x121/0x1c0 [ 470.972617][ T31] ? do_syscall_64+0xfa/0x3b0 [ 470.977277][ T31] ? __pfx___schedule+0x10/0x10 [ 470.982121][ T31] ? schedule+0x91/0x360 [ 470.986344][ T31] ? rcu_is_watching+0x15/0xb0 [ 470.991100][ T31] ? lock_release+0x4b/0x3e0 [ 470.995670][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 471.001558][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 471.007880][ T31] schedule+0x165/0x360 [ 471.012027][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.017463][ T31] __mutex_lock+0x7e6/0x1350 [ 471.022050][ T31] ? __mutex_lock+0x5bb/0x1350 [ 471.026791][ T31] ? misc_open+0x51/0x330 [ 471.031129][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 471.036135][ T31] misc_open+0x51/0x330 [ 471.040331][ T31] chrdev_open+0x4c9/0x5e0 [ 471.044740][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 471.049687][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 471.056001][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 471.060947][ T31] do_dentry_open+0x950/0x13f0 [ 471.065695][ T31] vfs_open+0x3b/0x340 [ 471.069761][ T31] ? path_openat+0x2ecd/0x3830 [ 471.074513][ T31] path_openat+0x2ee5/0x3830 [ 471.079114][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 471.084550][ T31] ? rcu_is_watching+0x15/0xb0 [ 471.089315][ T31] ? count_memcg_event_mm+0x21/0x260 [ 471.094584][ T31] ? count_memcg_event_mm+0x21/0x260 [ 471.099865][ T31] ? lock_release+0x4b/0x3e0 [ 471.104437][ T31] ? __pfx_path_openat+0x10/0x10 [ 471.109383][ T31] ? __pfx___up_read+0x10/0x10 [ 471.114124][ T31] ? lock_release+0x4b/0x3e0 [ 471.118724][ T31] do_filp_open+0x1fa/0x410 [ 471.123208][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 471.128202][ T31] ? _raw_spin_unlock+0x28/0x50 [ 471.133045][ T31] ? alloc_fd+0x64c/0x6c0 [ 471.137359][ T31] do_sys_openat2+0x121/0x1c0 [ 471.142565][ T31] ? lock_release+0x4b/0x3e0 [ 471.147150][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 471.152352][ T31] ? fd_install+0x97/0x540 [ 471.156753][ T31] ? fd_install+0x30d/0x540 [ 471.161255][ T31] __x64_sys_openat+0x138/0x170 [ 471.166093][ T31] do_syscall_64+0xfa/0x3b0 [ 471.170634][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.176687][ T31] ? clear_bhb_loop+0x60/0xb0 [ 471.181384][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.187258][ T31] RIP: 0033:0x7f6089d8d4d1 [ 471.191805][ T31] RSP: 002b:00007fffcf03ca40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 471.200248][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6089d8d4d1 [ 471.208206][ T31] RDX: 0000000000000002 RSI: 00007f6089e12822 RDI: 00000000ffffff9c [ 471.216219][ T31] RBP: 00007f6089e12822 R08: 0000000000000000 R09: 00007f608aaed6c0 [ 471.224204][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 471.232178][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 471.240161][ T31] [ 471.243161][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 471.252189][ T31] INFO: lockdep is turned off. [ 471.256934][ T31] NMI backtrace for cpu 0 [ 471.256944][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 471.256953][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 471.256957][ T31] Call Trace: [ 471.256962][ T31] [ 471.256965][ T31] dump_stack_lvl+0x189/0x250 [ 471.256978][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.256986][ T31] ? __pfx__printk+0x10/0x10 [ 471.256997][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 471.257009][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 471.257018][ T31] ? __pfx__printk+0x10/0x10 [ 471.257027][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 471.257038][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 471.257053][ T31] watchdog+0xf60/0xfa0 [ 471.257064][ T31] ? watchdog+0x1e2/0xfa0 [ 471.257073][ T31] kthread+0x711/0x8a0 [ 471.257081][ T31] ? __pfx_watchdog+0x10/0x10 [ 471.257090][ T31] ? __pfx_kthread+0x10/0x10 [ 471.257103][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.257113][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.257120][ T31] ? __pfx_kthread+0x10/0x10 [ 471.257128][ T31] ret_from_fork+0x3f9/0x770 [ 471.257135][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 471.257142][ T31] ? __switch_to_asm+0x39/0x70 [ 471.257151][ T31] ? __switch_to_asm+0x33/0x70 [ 471.257159][ T31] ? __pfx_kthread+0x10/0x10 [ 471.257166][ T31] ret_from_fork_asm+0x1a/0x30 [ 471.257177][ T31] [ 471.257180][ T31] Sending NMI from CPU 0 to CPUs 1: [ 471.403445][ C1] NMI backtrace for cpu 1 [ 471.403459][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 471.403469][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 471.403475][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 471.403490][ C1] Code: d3 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c6 2b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 471.403498][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 471.403507][ C1] RAX: d899c3f40b097300 RBX: ffffffff819684e8 RCX: d899c3f40b097300 [ 471.403514][ C1] RDX: 0000000000000001 RSI: ffffffff8c0358e0 RDI: ffffffff819684e8 [ 471.403520][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 471.403526][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fc3ca30 [ 471.403533][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a56b40 [ 471.403539][ C1] FS: 0000000000000000(0000) GS:ffff888125b0b000(0000) knlGS:0000000000000000 [ 471.403546][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.403552][ C1] CR2: 000056017dd0d168 CR3: 000000000e136000 CR4: 00000000003526f0 [ 471.403562][ C1] Call Trace: [ 471.403565][ C1] [ 471.403569][ C1] default_idle+0x13/0x20 [ 471.403580][ C1] default_idle_call+0x74/0xb0 [ 471.403591][ C1] do_idle+0x1e8/0x510 [ 471.403601][ C1] ? __pfx_do_idle+0x10/0x10 [ 471.403613][ C1] cpu_startup_entry+0x44/0x60 [ 471.403621][ C1] start_secondary+0x101/0x110 [ 471.403633][ C1] common_startup_64+0x13e/0x147 [ 471.403647][ C1] [ 471.404470][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 471.572060][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 471.583310][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 471.593333][ T31] Call Trace: [ 471.596586][ T31] [ 471.599490][ T31] dump_stack_lvl+0x99/0x250 [ 471.604055][ T31] ? __asan_memcpy+0x40/0x70 [ 471.608720][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.613889][ T31] ? __pfx__printk+0x10/0x10 [ 471.618457][ T31] vpanic+0x281/0x750 [ 471.622410][ T31] ? __pfx_vpanic+0x10/0x10 [ 471.626900][ T31] ? rcu_is_watching+0x15/0xb0 [ 471.631633][ T31] ? preempt_schedule+0xae/0xc0 [ 471.636473][ T31] ? preempt_schedule_common+0x83/0xd0 [ 471.641902][ T31] panic+0xb9/0xc0 [ 471.645593][ T31] ? __pfx_panic+0x10/0x10 [ 471.649981][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 471.655320][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 471.661445][ T31] watchdog+0xf9f/0xfa0 [ 471.665575][ T31] ? watchdog+0x1e2/0xfa0 [ 471.669880][ T31] kthread+0x711/0x8a0 [ 471.673977][ T31] ? __pfx_watchdog+0x10/0x10 [ 471.678649][ T31] ? __pfx_kthread+0x10/0x10 [ 471.683224][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.688401][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.693571][ T31] ? __pfx_kthread+0x10/0x10 [ 471.698133][ T31] ret_from_fork+0x3f9/0x770 [ 471.702697][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 471.707778][ T31] ? __switch_to_asm+0x39/0x70 [ 471.712515][ T31] ? __switch_to_asm+0x33/0x70 [ 471.717249][ T31] ? __pfx_kthread+0x10/0x10 [ 471.721809][ T31] ret_from_fork_asm+0x1a/0x30 [ 471.726561][ T31] [ 471.729688][ T31] Kernel Offset: disabled [ 471.733992][ T31] Rebooting in 86400 seconds..