last executing test programs: 2m7.172617535s ago: executing program 4 (id=1901): socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 2m5.889388652s ago: executing program 4 (id=1904): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m0.581091256s ago: executing program 4 (id=1922): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket(0x10, 0x2, 0x0) syz_emit_ethernet(0xfd6, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="2ede79d617b0", @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0xf8, 0x4e, "7bf0", "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"}}}}}, &(0x7f0000000300)={0x1, 0x3, [0x3e9, 0x6b0, 0x584, 0x7f9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000380)=@mmap={0x800, 0x1, 0x4, 0x100, 0x81, {0x0, 0x2710}, {0x3, 0xc, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x0, 0xfffffffe, 0x6}}) 1m58.800330559s ago: executing program 4 (id=1927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148c5, &(0x7f0000000380)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x30a}}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@rodir}, {@fat=@quiet}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r3, &(0x7f0000004c40)={0x2020}, 0x2020) 1m58.086274806s ago: executing program 4 (id=1930): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x20, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd1, 0x40, 0x41, 0xfb, 0x0, 0xc, 0x1, 0xfb, 0x3e, 0xfe, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x100000006e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x10100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x2, 0x0, 0x5], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m56.828485841s ago: executing program 4 (id=1932): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xfff, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "1e00d5db"}]}}, 0x0}, 0x0) 1m56.144583006s ago: executing program 32 (id=1932): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xfff, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "1e00d5db"}]}}, 0x0}, 0x0) 1m25.55174587s ago: executing program 2 (id=1995): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket(0x10, 0x2, 0x0) syz_emit_ethernet(0xfd6, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="2ede79d617b0", @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0xf8, 0x4e, "7bf0", "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"}}}}}, &(0x7f0000000300)={0x1, 0x3, [0x3e9, 0x6b0, 0x584, 0x7f9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000380)=@mmap={0x800, 0x1, 0x4, 0x100, 0x81, {0x0, 0x2710}, {0x3, 0xc, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x0, 0xfffffffe, 0x6}}) 1m24.339247733s ago: executing program 2 (id=1996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m22.593430503s ago: executing program 2 (id=2002): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3c) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610430000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000740)={0x0}) r7 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) 1m20.613926836s ago: executing program 2 (id=2006): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@user_xattr}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@grpid}]}, 0x8, 0x638, &(0x7f0000000940)="$eJzs3c9rVNceAPDvnZn8MHnvJYq893yLZ+DxUHjPxER9yKNQ3YvYH7uuUhPFGo0kKW2s0Ah2UyjdtFDoqovaf6DrVih01UW3XXTTVRGkSBa1SJ1y7/xwMsnkxziTG5PPB69zzz0z95wb/eacOXPOnQD2rJH0r0LEoYi4kUQMNeSVopo5Unne8sNbF5cfpsfK5Vd+SeLWu8lS47mS6uNg9cW/D0XyfSHiQHF1ufOLN69OzsxMz1XTYwvXbozNL948duXa5OXpy9PXJ/43cfrUyVOnx4+3f3HF7E/duTtvvDX0/vnXPv/0cTL+xY/nkzgTT6pPSK+t+eV97ZecGYmRKFc8ajye/lxPP+O5d4pfh2r/T55Kmg+wY12KiIMR0RMRf4uhKDb8aw7Fey/lWjmgq8pJ1NooYM9J2or//s5XBNhmtX5A5b19Zdu411Docq8E2A4PzlYGpCqx3xMRtfgvVcYGoz8bGxhYTlaM8yQR8Qwjc3VpGd99c/5OukXTONyKYcOPO1AYsMLS7WyUuxZqDe1/ksXmcPRnqYHlwor4LzRs6fGX2yx/pCm9uf4H0AlLtyPi79X2v3dr8T/SEP+vt1m++AcAAAAAAIDOuXc2Iv671vy/Qn3+z7dflsvN838GI+JMB8rf+PO/wv3qTtKB4oAGD85GvLDm/N/6HN/hYjX152w+QE9y6crM9PGI+EtEHI2evjQ93nTexhnCxz448Emr8hvn/6VbWn5tLmD1TPdLTQtxpyYXJp/1uoGIB7cj/pHN/z1cPbJy/k/a/idrzP9N4/vGJss48O+7F1rlbRz/QLeUP4s4smb7/7S7nax/f46xrD8wVusVrPbPdz78qlX54h/yk7b/A5X47421478vabxfz/zWzt8bEScWS+VW+e32/3uTV4uxlJ2/tohxYW48ojc5V6yVm3p7cmFhbmJrdYbdqhYP2eN4Jf6P/mv98b96/78hDvdFxNImy/zrk8GfWuVp/yE/afxPrd//H17Z/m99Z+Lu8Nctik8ubKr9P5m16UerR4z/QaPV9+PYbIDmUl0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeM4VIuJPkRRG6/uFwuhoxGBEHIyBwszs/MJ/Ls2+eX0qzcu+/79Q+6bfoUo6qX3//3BE9EREmp6opmv5JyJif0R8VNyXpUcvzs5M5X3xAAAAAAAAAAAAAAAAAAAAsEMMZmv+y33N6/9TPxfzrh3QdaXqo3iHvafU9ivLfR2tCLDt2o9/4Hm3+fjv6Wo9gO3XOv4fPS5ntrU6wDbS/4e9q83493EB7ALaf9irNjmm19/tegB50P4DAAAAAMCusv/wvR+SiFj6/75sS/VW80z2h92tkHcFgNyYwwt7V2k27xoAeWnnPf5AF+oB5Cep7/225mL/1rP/k+5UCAAAAAAAAAAAAABY5cgh6/9hr1p//b+5/bCbrbP+f63gd7sA2EVaf/WHth92O+/xgWSDXwTW/wMAAAAAAAAAAADADtB/8+rkzMz03Pzi87fzYhuv6su78kuTO+FH19mdJ905c09E7IwL7NROEhG1I1Fq/eTaLThyrGrOv5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6PwIAAP//1fokZA==") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x2000001, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e60ab, 0x0) 1m18.654091567s ago: executing program 2 (id=2009): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300), 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) 1m16.293536609s ago: executing program 2 (id=2014): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r7 = socket(0x2, 0x3, 0xff) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "14168eec832e7d26b22cf518c518a641ecfce8645660ff588ff5cb402c86b980", "d7e1abeb8f95f300000000000000b2bebeace700", "9c2b8240115a19fb837dc2ff50078b0db8866c74a7c7f0705e0ea1fa911ff40d", "36211abab79d0dc292874dfdcc986d85c4eaeff1c5a24c1cbad841d5d4090d05", "56fb3c4ea98c31eda376ddaae5a91a62f9f04013f42dd5fb49aea0f06ef469c4", "cfc2ecff14c862c1efd6bee0", 0x10000080, 0xffff0237, 0x704ca33a, 0x8, 0x2}}) 1m15.273249832s ago: executing program 33 (id=2014): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r7 = socket(0x2, 0x3, 0xff) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "14168eec832e7d26b22cf518c518a641ecfce8645660ff588ff5cb402c86b980", "d7e1abeb8f95f300000000000000b2bebeace700", "9c2b8240115a19fb837dc2ff50078b0db8866c74a7c7f0705e0ea1fa911ff40d", "36211abab79d0dc292874dfdcc986d85c4eaeff1c5a24c1cbad841d5d4090d05", "56fb3c4ea98c31eda376ddaae5a91a62f9f04013f42dd5fb49aea0f06ef469c4", "cfc2ecff14c862c1efd6bee0", 0x10000080, 0xffff0237, 0x704ca33a, 0x8, 0x2}}) 46.972804528s ago: executing program 1 (id=2063): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa05c196dd7fd9036) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) openat(0xffffffffffffffff, 0x0, 0x68000, 0x21) poll(0x0, 0x0, 0x7) 46.016091767s ago: executing program 1 (id=2068): socket$nl_generic(0x10, 0x3, 0x10) r0 = fanotify_init(0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) brk(0x689d80000000) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0xfc, 0x0, 0x10}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(0x0, 0x2, 0xc8d03) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x3, {0x0, 0x1}}, 0x18) sendmmsg$inet(r2, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x2) setsockopt$sock_int(r5, 0x1, 0x2f, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604600f500140601fe8000000000000000000000000000bb2001000000000000000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ad0503db215058c4501ff75002000090780002"], 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x5a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendto$inet_nvme_of_msg(r2, &(0x7f0000000680)={@cmd={{0x4, 0xd, 0x48, 0xa}, {@auth_common={0x7f, 0x80, 0xbe0, 0x6, "e9cf4b6db6f5510d94b6f59c0a4bd46abd4dc0", @anon_struct={0x3, 0x7e}, 0x7, 0xe, 0x2, 0x9, 0xb, "9ef322afa195add877c93c24d19dcae4"}}}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 42.961213185s ago: executing program 1 (id=2073): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b75"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = semget$private(0x0, 0x6, 0x0) semop(r2, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x97) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) gettid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x2}, {0x0, 0xef}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) 40.410167008s ago: executing program 1 (id=2081): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1217, &(0x7f0000002200)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 36.674631761s ago: executing program 1 (id=2087): mkdir(0x0, 0x0) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x136) finit_module(r0, 0x0, 0x1) 32.286007048s ago: executing program 5 (id=2094): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0) mremap(&(0x7f000016c000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000190000/0x1000)=nil) socket(0x2a, 0x800, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x32b, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8}, 0x4) 31.379492605s ago: executing program 1 (id=2098): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084523, &(0x7f0000001f40)=""/231) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 30.190844187s ago: executing program 34 (id=2098): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x5, 0x616, &(0x7f0000001800)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084523, &(0x7f0000001f40)=""/231) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 27.173878013s ago: executing program 3 (id=2106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0) 26.525397456s ago: executing program 5 (id=2108): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 26.438178291s ago: executing program 3 (id=2109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x5, 0x0, 0x0) 26.116227938s ago: executing program 3 (id=2110): sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 25.214268324s ago: executing program 6 (id=2111): syz_open_procfs$userns(0x0, &(0x7f0000000100)) syz_open_procfs$userns(0x0, &(0x7f0000000580)) 24.878251911s ago: executing program 6 (id=2112): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 24.790020156s ago: executing program 3 (id=2113): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88"], 0x0) 24.71660556s ago: executing program 5 (id=2114): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@utf8no}, {@shortname_winnt}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0xff}}, {@fat=@flush}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa73}}, {@numtail}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_win95}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlateno}]}, 0x2a, 0x37b, &(0x7f0000000800)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) 24.609993975s ago: executing program 6 (id=2115): socket$nl_generic(0x10, 0x3, 0x10) r0 = fanotify_init(0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) brk(0x689d80000000) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(0x0, 0x2, 0xc8d03) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x3, {0x0, 0x1}}, 0x18) sendmmsg$inet(r2, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x2) setsockopt$sock_int(r5, 0x1, 0x2f, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604600f500140601fe8000000000000000000000000000bb2001000000000000000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ad0503db215058c4501ff75002000090780002"], 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x5a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendto$inet_nvme_of_msg(r2, &(0x7f0000000680)={@cmd={{0x4, 0xd, 0x48, 0xa}, {@auth_common={0x7f, 0x80, 0xbe0, 0x6, "e9cf4b6db6f5510d94b6f59c0a4bd46abd4dc0", @anon_struct={0x3, 0x7e}, 0x7, 0xe, 0x2, 0x9, 0xb, "9ef322afa195add877c93c24d19dcae4"}}}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 24.402823486s ago: executing program 3 (id=2117): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0) mremap(&(0x7f000016c000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000190000/0x1000)=nil) socket(0x2a, 0x800, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x32b, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8}, 0x4) 23.241539077s ago: executing program 5 (id=2118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) 23.241028597s ago: executing program 0 (id=2119): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x0, r6}, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x24000080}, 0x24044050) 22.40213477s ago: executing program 5 (id=2120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="653e0f001a260f01c90fb3319a62159e0066b92309000066b89359000066ba000000000f3066b9700900000f3265640f001f64dcf4ba410066ed0fc76934", 0x3e}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x2, 0x9800, 0x1}}, 0x2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {@in6=@local, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x6, 0xa, 0xa, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xe, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x4004084) 22.174653222s ago: executing program 0 (id=2121): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0), 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) 21.736978324s ago: executing program 0 (id=2122): sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 21.525129225s ago: executing program 6 (id=2123): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 20.611717082s ago: executing program 0 (id=2124): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 20.402043953s ago: executing program 0 (id=2125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@ipv4_delrule={0x50, 0x21, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x10, 0x10, 0x80, 0x6, 0x0, 0x0, 0x5, 0x1}, [@FRA_FLOW={0x8, 0xb, 0x1000}, @FRA_FLOW={0x8, 0xb, 0xfffffff7}, @FRA_DST={0x8, 0x1, @loopback}, @FRA_FLOW={0x8, 0xb, 0x200000}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}, @FRA_SRC={0x8, 0x2, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000001200)={0x0, 0x1, 0x3, 0x1c, 0x87, &(0x7f0000000e00)="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"}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') socket$inet6(0xa, 0x805, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4) mknod$loop(&(0x7f0000000340)='.\x00', 0x2000, 0x0) 20.375207305s ago: executing program 5 (id=2126): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b75"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x97) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) gettid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x2}, {0x0, 0xef}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) 19.565439887s ago: executing program 3 (id=2127): syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x70) 17.521037242s ago: executing program 6 (id=2128): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='./bus\x00', 0x10000, &(0x7f0000000ec0)=ANY=[@ANYBLOB='utf8,dmask=00000000000000000000006,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=iso8859-4,fmask=00000000000000000000001,namecase=1,iocharset=koi8-u,namecase=1,umask=0000000\x00\x0000000004000165,iocharset=iso8859-13,\x00'], 0x1, 0x1535, &(0x7f0000001380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) 16.973742911s ago: executing program 0 (id=2129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) 16.821975859s ago: executing program 6 (id=2130): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x0, r6}, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x24000080}, 0x24044050) 4.118694276s ago: executing program 35 (id=2126): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b75"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x6, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x97) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) gettid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x2}, {0x0, 0xef}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) 3.109407649s ago: executing program 36 (id=2127): syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x70) 93.785695ms ago: executing program 37 (id=2129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) 0s ago: executing program 38 (id=2130): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x0, r6}, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x24000080}, 0x24044050) kernel console output (not intermixed with test programs): usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.854585][ T32] usb 1-1: Product: syz [ 677.859709][ T32] usb 1-1: Manufacturer: syz [ 677.864500][ T32] usb 1-1: SerialNumber: syz [ 677.905623][ T32] usb 1-1: config 0 descriptor?? [ 677.932406][ T32] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 678.353689][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.485208][ T32] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 678.493538][ T32] sq905c 1-1:0.0: Get version command failed [ 678.500204][ T32] sq905c: probe of 1-1:0.0 failed with error -110 [ 678.570910][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.598503][ T9528] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1445'. [ 680.680043][ T32] usb 1-1: USB disconnect, device number 24 [ 680.849753][ T9533] xt_TPROXY: Can be used only with -p tcp or -p udp [ 681.447897][ T4257] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 682.545718][ T4257] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 682.553811][ T4257] usb 5-1: config 0 has no interface number 0 [ 682.654455][ T4257] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 682.911515][ T4257] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 682.930138][ T4325] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 683.271419][ T4257] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 683.549950][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.721003][ T4325] usb 1-1: Using ep0 maxpacket: 8 [ 683.730737][ T4325] usb 1-1: config 6 has an invalid interface number: 220 but max is 0 [ 683.744898][ T4257] usb 5-1: config 0 descriptor?? [ 683.770058][ T4257] usb 5-1: can't set config #0, error -71 [ 683.773476][ T4325] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 683.911515][ T4325] usb 1-1: config 6 has no interface number 0 [ 683.914153][ T4257] usb 5-1: USB disconnect, device number 23 [ 683.946113][ T4325] usb 1-1: config 6 interface 220 has no altsetting 0 [ 684.006714][ T4325] usb 1-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 684.016383][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.025179][ T4325] usb 1-1: Product: syz [ 684.029905][ T4325] usb 1-1: Manufacturer: syz [ 684.037654][ T4325] usb 1-1: SerialNumber: syz [ 684.465271][ T4325] usb 1-1: Found UVC 0.00 device syz (174f:5212) [ 684.473109][ T4325] usb 1-1: No valid video chain found. [ 684.490297][ T4325] usb 1-1: USB disconnect, device number 25 [ 685.946970][ T9590] Malformed UNC in devname [ 685.946970][ T9590] [ 685.953946][ T9590] CIFS: VFS: Malformed UNC in devname [ 685.978085][ T9590] SET target dimension over the limit! [ 688.251774][ T4257] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 688.526794][ T4257] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 688.550989][ T4257] usb 2-1: config 0 has no interface number 0 [ 688.579136][ T4257] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 689.067218][ T4257] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 689.086350][ T4257] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 689.275739][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.386155][ T4257] usb 2-1: config 0 descriptor?? [ 689.392367][ T9603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 689.413291][ T4257] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 689.681631][ T4257] usb 2-1: USB disconnect, device number 17 [ 689.687785][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 690.068704][ T4367] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 690.239455][ T4367] usb 1-1: device descriptor read/64, error -71 [ 690.528728][ T4367] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 690.538545][ T14] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 690.709702][ T4367] usb 1-1: device descriptor read/64, error -71 [ 690.742147][ T14] usb 3-1: device descriptor read/64, error -71 [ 691.436410][ T14] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 691.447394][ T4367] usb usb1-port1: attempt power cycle [ 691.607279][ T14] usb 3-1: device descriptor read/64, error -71 [ 691.747924][ T14] usb usb3-port1: attempt power cycle [ 691.927773][ T4367] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 691.971277][ T4367] usb 1-1: device descriptor read/8, error -71 [ 692.051403][ T9647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.194927][ T14] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 692.243739][ T14] usb 3-1: device descriptor read/8, error -71 [ 692.259125][ T4367] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 692.643916][ T14] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 692.705567][ T14] usb 3-1: device descriptor read/8, error -71 [ 692.882576][ T14] usb usb3-port1: unable to enumerate USB device [ 693.101162][ T4367] usb 1-1: device descriptor read/8, error -71 [ 693.232280][ T4367] usb usb1-port1: unable to enumerate USB device [ 695.432819][ T4312] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 695.784425][ T4312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.818219][ T4312] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 696.126234][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.217462][ T4312] usb 3-1: config 0 descriptor?? [ 696.242075][ T4312] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 698.490782][ T4312] usb 3-1: USB disconnect, device number 21 [ 698.991385][ T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 699.343950][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 699.437022][ T14] usb 4-1: config 6 has an invalid interface number: 220 but max is 0 [ 699.461078][ T14] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 699.633046][ T14] usb 4-1: config 6 has no interface number 0 [ 699.730018][ T14] usb 4-1: config 6 interface 220 has no altsetting 0 [ 699.860982][ T14] usb 4-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 700.041389][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.073881][ T14] usb 4-1: Product: syz [ 700.078135][ T14] usb 4-1: Manufacturer: syz [ 700.198788][ T14] usb 4-1: SerialNumber: syz [ 700.404851][ T9714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.463427][ T14] usb 4-1: Found UVC 0.00 device syz (174f:5212) [ 700.490941][ T14] usb 4-1: No valid video chain found. [ 700.523448][ T14] usb 4-1: USB disconnect, device number 14 [ 701.652244][ T14] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 701.926079][ T14] usb 1-1: config 1 interface 0 has no altsetting 0 [ 701.967378][ T14] usb 1-1: string descriptor 0 read error: -22 [ 701.983470][ T14] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 702.003538][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.866904][ T14] usbhid 1-1:1.0: can't add hid device: -71 [ 702.912187][ T14] usbhid: probe of 1-1:1.0 failed with error -71 [ 703.072275][ T14] usb 1-1: USB disconnect, device number 30 [ 705.274631][ T22] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 705.499188][ T4257] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 705.515036][ T22] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 705.534289][ T22] usb 1-1: config 0 has no interface number 0 [ 705.562352][ T22] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 705.598667][ T22] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 705.610537][ T22] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 705.620140][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.648745][ T14] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 705.668418][ T22] usb 1-1: config 0 descriptor?? [ 705.675358][ T9749] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 705.703768][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.715563][ T22] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 705.723872][ T4257] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 705.747481][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.809313][ T4257] usb 5-1: config 0 descriptor?? [ 705.876527][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 705.885669][ T26] audit: type=1326 audit(1776783979.421:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.2.1510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f201bb9c819 code=0x0 [ 706.731270][ T14] usb 4-1: config 6 has an invalid interface number: 220 but max is 0 [ 706.774426][ T4257] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 706.824775][ T14] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 706.916459][ T14] usb 4-1: config 6 has no interface number 0 [ 706.934106][ T14] usb 4-1: config 6 interface 220 has no altsetting 0 [ 706.951483][ T4257] usb 1-1: USB disconnect, device number 31 [ 706.957620][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 706.972253][ T14] usb 4-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 706.999265][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.008297][ T14] usb 4-1: Product: syz [ 707.018151][ T14] usb 4-1: Manufacturer: syz [ 707.023145][ T14] usb 4-1: SerialNumber: syz [ 707.270383][ T14] usb 4-1: Found UVC 0.00 device syz (174f:5212) [ 707.287808][ T14] usb 4-1: No valid video chain found. [ 707.320655][ T14] usb 4-1: USB disconnect, device number 15 [ 707.706328][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.756770][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.920463][ T9774] xt_recent: Unsupported userspace flags (000000de) [ 709.664955][ T9780] syz.3.1514 (9780) used greatest stack depth: 17520 bytes left [ 709.751163][ T4367] usb 5-1: USB disconnect, device number 24 [ 711.110500][ T26] audit: type=1326 audit(1776783984.315:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.1.1522" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb50e39c819 code=0x0 [ 711.301758][ T4325] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 711.648236][ T4325] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 712.263642][ T4325] usb 5-1: config 0 has no interface number 0 [ 712.269929][ T4325] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 712.284727][ T4325] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 712.303688][ T4325] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 712.410189][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.459154][ T4325] usb 5-1: config 0 descriptor?? [ 712.465859][ T9808] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 712.500661][ T4325] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 712.706314][ T4325] usb 5-1: USB disconnect, device number 25 [ 712.706355][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 712.776242][ T14] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 712.992963][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 713.019156][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.048744][ T14] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 713.094689][ T14] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 713.113029][ T14] usb 2-1: Manufacturer: syz [ 713.131109][ T14] usb 2-1: config 0 descriptor?? [ 714.479589][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 714.496399][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 714.598464][ T14] usb 2-1: USB disconnect, device number 18 [ 716.195892][ T14] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 716.416641][ T14] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 716.447399][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.587670][ T14] usb 2-1: config 0 descriptor?? [ 717.805465][ T14] ath6kl: Failed to submit usb control message: -110 [ 717.849205][ T14] ath6kl: unable to send the bmi data to the device: -110 [ 718.044834][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 718.092586][ T14] ath6kl: Unable to send get target info: -110 [ 718.219156][ T14] ath6kl: Failed to init ath6kl core: -110 [ 718.574861][ T9874] Malformed UNC in devname [ 718.574861][ T9874] [ 718.581719][ T9874] CIFS: VFS: Malformed UNC in devname [ 718.592252][ T9874] SET target dimension over the limit! [ 718.623086][ T14] ath6kl_usb: probe of 2-1:0.0 failed with error -110 [ 718.650963][ T14] usb 2-1: USB disconnect, device number 19 [ 719.122451][ T22] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 719.339219][ T22] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 719.357058][ T22] usb 4-1: config 0 has no interface number 0 [ 719.368707][ T22] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 719.399514][ T22] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 719.434596][ T22] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 719.454616][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.468674][ T22] usb 4-1: config 0 descriptor?? [ 719.474380][ T9876] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 719.551434][ T22] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 719.921714][ T22] usb 4-1: USB disconnect, device number 16 [ 723.555857][ T9913] Malformed UNC in devname [ 723.555857][ T9913] [ 723.562724][ T9913] CIFS: VFS: Malformed UNC in devname [ 723.649463][ T9910] SET target dimension over the limit! [ 724.897772][ T9925] Malformed UNC in devname [ 724.897772][ T9925] [ 724.904528][ T9925] CIFS: VFS: Malformed UNC in devname [ 724.914657][ T9925] SET target dimension over the limit! [ 725.991718][ T4257] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 726.221639][ T4257] usb 2-1: config 1 interface 0 has no altsetting 0 [ 726.254041][ T4257] usb 2-1: string descriptor 0 read error: -22 [ 726.260443][ T4257] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 726.361695][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.045094][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 727.051537][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.365427][ T4257] usbhid 2-1:1.0: can't add hid device: -71 [ 727.371477][ T4257] usbhid: probe of 2-1:1.0 failed with error -71 [ 727.479972][ T4257] usb 2-1: USB disconnect, device number 20 [ 727.676576][ T9949] Malformed UNC in devname [ 727.676576][ T9949] [ 727.683342][ T9949] CIFS: VFS: Malformed UNC in devname [ 727.693270][ T9949] SET target dimension over the limit! [ 729.157937][ T22] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 730.194804][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 730.202113][ T22] usb 3-1: config 6 has an invalid interface number: 220 but max is 0 [ 730.211150][ T22] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 730.222018][ T22] usb 3-1: config 6 has no interface number 0 [ 730.228672][ T22] usb 3-1: config 6 interface 220 has no altsetting 0 [ 730.250109][ T22] usb 3-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 730.280080][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.439854][ T22] usb 3-1: Product: syz [ 730.457664][ T22] usb 3-1: Manufacturer: syz [ 730.476673][ T22] usb 3-1: SerialNumber: syz [ 730.489739][ T9976] Malformed UNC in devname [ 730.489739][ T9976] [ 730.496468][ T9976] CIFS: VFS: Malformed UNC in devname [ 730.506974][ T9976] SET target dimension over the limit! [ 730.771959][ T22] usb 3-1: Found UVC 0.00 device syz (174f:5212) [ 730.789874][ T22] usb 3-1: No valid video chain found. [ 730.817764][ T22] usb 3-1: USB disconnect, device number 22 [ 731.383394][ T9987] 9pnet_fd: Insufficient options for proto=fd [ 732.145352][ T9992] Malformed UNC in devname [ 732.145352][ T9992] [ 732.152274][ T9992] CIFS: VFS: Malformed UNC in devname [ 732.162406][ T9992] SET target dimension over the limit! [ 732.236066][ T14] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 732.289632][ T9994] autofs4:pid:9994:autofs_fill_super: called with bogus options [ 732.494753][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 732.568902][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.980486][ T14] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 733.011996][ T14] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 733.035981][ T14] usb 4-1: Manufacturer: syz [ 733.066214][ T14] usb 4-1: config 0 descriptor?? [ 733.536475][ T14] usbhid 4-1:0.0: can't add hid device: -71 [ 733.576749][ T14] usbhid: probe of 4-1:0.0 failed with error -71 [ 733.585032][ T14] usb 4-1: USB disconnect, device number 17 [ 737.595067][ T7] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 737.803293][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 737.810417][ T7] usb 2-1: config 6 has an invalid interface number: 220 but max is 0 [ 737.853850][ T7] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 738.341996][ T7] usb 2-1: config 6 has no interface number 0 [ 738.357673][ T7] usb 2-1: config 6 interface 220 has no altsetting 0 [ 738.376705][ T7] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 738.388038][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.397043][ T7] usb 2-1: Product: syz [ 738.405582][ T7] usb 2-1: Manufacturer: syz [ 738.413360][ T7] usb 2-1: SerialNumber: syz [ 739.229874][ T4824] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 739.448701][ T4824] usb 5-1: Using ep0 maxpacket: 32 [ 739.456280][ T4824] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 739.498671][ T4824] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 739.500000][ T7] usb 2-1: Found UVC 0.00 device syz (174f:5212) [ 739.521978][ T4824] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 739.531359][ T7] usb 2-1: No valid video chain found. [ 739.542431][ T4824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.551062][ T7] usb 2-1: USB disconnect, device number 21 [ 739.553946][ T4824] usb 5-1: Product: syz [ 739.561629][ T4824] usb 5-1: Manufacturer: syz [ 739.572146][ T4824] usb 5-1: SerialNumber: syz [ 739.620271][ T4824] usb 5-1: interface 1 not found [ 740.036156][ T26] audit: type=1326 audit(1776784011.369:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.4.1589" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff12199c819 code=0x0 [ 740.872126][ T4824] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 741.083729][ T4824] usb 1-1: Using ep0 maxpacket: 16 [ 741.908414][T10061] xt_recent: Unsupported userspace flags (000000de) [ 741.911278][ T4824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.020649][ T4824] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 742.068383][ T4824] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 742.096123][ T4824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.128412][ T4510] usb 5-1: USB disconnect, device number 26 [ 742.171026][ T4824] usb 1-1: config 0 descriptor?? [ 743.396650][T10079] hfsplus: unable to find HFS+ superblock [ 744.337382][ T7] usb 1-1: USB disconnect, device number 32 [ 744.535300][ T4312] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 744.545887][ T4510] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 744.784279][ T4510] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 744.857069][ T4312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 744.868408][ T4312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.887027][ T4312] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 744.904226][ T4510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.914081][ T4510] usb 5-1: Product: syz [ 744.914156][ T4312] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 744.919603][ T4510] usb 5-1: Manufacturer: syz [ 744.930992][ T7] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 744.995681][T10095] Malformed UNC in devname [ 744.995681][T10095] [ 745.002549][T10095] CIFS: VFS: Malformed UNC in devname [ 745.013392][T10095] SET target dimension over the limit! [ 745.201792][ T4312] usb 3-1: Manufacturer: syz [ 745.215588][ T4312] usb 3-1: config 0 descriptor?? [ 745.237139][ T4510] usb 5-1: SerialNumber: syz [ 745.263136][ T4510] usb 5-1: config 0 descriptor?? [ 745.281417][ T4510] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 745.304568][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 745.312455][ T7] usb 1-1: config 6 has an invalid interface number: 220 but max is 0 [ 745.340193][ T7] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 745.352538][ T7] usb 1-1: config 6 has no interface number 0 [ 745.359605][ T7] usb 1-1: config 6 interface 220 has no altsetting 0 [ 745.376572][ T7] usb 1-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 745.386831][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.415639][ T7] usb 1-1: Product: syz [ 745.421034][ T7] usb 1-1: Manufacturer: syz [ 745.429104][ T7] usb 1-1: SerialNumber: syz [ 745.494213][T10089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.507483][T10089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.747973][ T4312] usbhid 3-1:0.0: can't add hid device: -71 [ 745.768899][ T4312] usbhid: probe of 3-1:0.0 failed with error -71 [ 745.799014][ T7] usb 1-1: Found UVC 0.00 device syz (174f:5212) [ 745.814349][ T4312] usb 3-1: USB disconnect, device number 23 [ 745.828868][ T7] usb 1-1: No valid video chain found. [ 745.868486][ T7] usb 1-1: USB disconnect, device number 33 [ 746.001642][ T4510] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 746.009054][ T4510] sq905c 5-1:0.0: Reading version command failed [ 746.179208][ T4510] sq905c: probe of 5-1:0.0 failed with error -71 [ 746.200600][ T4510] usb 5-1: USB disconnect, device number 27 [ 747.628377][T10119] hfsplus: unable to find HFS+ superblock [ 748.275356][ T4312] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 748.573811][T10129] Malformed UNC in devname [ 748.573811][T10129] [ 748.581316][T10129] CIFS: VFS: Malformed UNC in devname [ 748.592442][T10129] SET target dimension over the limit! [ 749.258643][ T4312] usb 1-1: Using ep0 maxpacket: 16 [ 749.265801][ T4312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.386763][ T4312] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 749.406223][ T4312] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 749.421877][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.432875][ T4312] usb 1-1: config 0 descriptor?? [ 749.612109][ T14] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 749.739549][ T6317] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 749.960234][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 750.018230][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.042663][ T6317] usb 5-1: Using ep0 maxpacket: 8 [ 750.076092][ T6317] usb 5-1: config 6 has an invalid interface number: 220 but max is 0 [ 750.092051][ T6317] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 750.102599][ T6317] usb 5-1: config 6 has no interface number 0 [ 750.108751][ T6317] usb 5-1: config 6 interface 220 has no altsetting 0 [ 750.111165][ T14] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 750.129717][ T6317] usb 5-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 750.145383][ T6317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.156077][ T14] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 750.164165][ T14] usb 4-1: Manufacturer: syz [ 750.165200][ T6317] usb 5-1: Product: syz [ 750.175660][ T6317] usb 5-1: Manufacturer: syz [ 750.186573][ T6317] usb 5-1: SerialNumber: syz [ 750.205499][ T14] usb 4-1: config 0 descriptor?? [ 750.242197][ T4312] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 750.460485][ T4312] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 750.483362][ T4312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 750.490508][ T6317] usb 5-1: Found UVC 0.00 device syz (174f:5212) [ 750.500098][ T6317] usb 5-1: No valid video chain found. [ 750.844808][ T6317] usb 5-1: USB disconnect, device number 28 [ 750.855589][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 750.863045][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 750.870448][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 750.877718][ T14] usbhid 4-1:0.0: can't add hid device: -32 [ 750.883886][ T14] usbhid: probe of 4-1:0.0 failed with error -32 [ 750.897966][ T4312] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 750.910522][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.919274][ T4312] usb 2-1: Product: syz [ 750.923577][ T4312] usb 2-1: Manufacturer: syz [ 750.928286][ T4312] usb 2-1: SerialNumber: syz [ 750.944889][ T14] usb 4-1: USB disconnect, device number 18 [ 750.959360][ T4312] usb 2-1: config 0 descriptor?? [ 751.256889][ T4312] usb 2-1: USB disconnect, device number 22 [ 751.661773][ T14] usb 1-1: USB disconnect, device number 34 [ 751.919497][ T4312] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 752.048078][T10160] fuse: Bad value for 'fd' [ 752.295482][ T4312] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 752.314865][ T4312] usb 4-1: config 8 has no interface number 0 [ 752.382442][T10167] Malformed UNC in devname [ 752.382442][T10167] [ 752.389230][T10167] CIFS: VFS: Malformed UNC in devname [ 752.413903][T10167] SET target dimension over the limit! [ 753.100789][ T4312] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 753.130208][ T4312] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 753.148194][ T4312] usb 4-1: config 8 interface 177 has no altsetting 0 [ 753.172119][ T4312] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 753.195536][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.360090][T10156] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 753.372007][T10156] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 753.395532][ C0] ir_toy 4-1:8.177: out urb status: -71 [ 754.179681][ T4312] ir_toy 4-1:8.177: could not write reset command: -110 [ 754.186932][ T4312] ir_toy: probe of 4-1:8.177 failed with error -110 [ 754.204635][ T4312] usb 4-1: USB disconnect, device number 19 [ 754.932732][ T4312] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 755.990750][ T14] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 756.030879][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 756.050621][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.062938][ T4312] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 756.081435][ T4312] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 756.091645][ T4312] usb 1-1: Manufacturer: syz [ 756.124024][ T4312] usb 1-1: config 0 descriptor?? [ 756.183520][ T7446] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 756.195238][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 756.214461][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.225800][ T14] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 756.234881][ T14] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 756.244265][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.256244][ T14] usb 2-1: config 0 descriptor?? [ 756.323636][T10200] Malformed UNC in devname [ 756.323636][T10200] [ 756.330381][T10200] CIFS: VFS: Malformed UNC in devname [ 756.354655][T10200] SET target dimension over the limit! [ 756.422274][ T7446] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 756.469644][ T7446] usb 3-1: config 0 has no interface number 0 [ 756.536962][ T7446] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 756.617660][ T7446] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 756.696330][ T7446] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 756.710332][ T7446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.830638][ T4312] usbhid 1-1:0.0: can't add hid device: -71 [ 756.891070][ T4312] usbhid: probe of 1-1:0.0 failed with error -71 [ 756.899295][ T7446] usb 3-1: config 0 descriptor?? [ 756.905042][T10194] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 756.968163][ T4312] usb 1-1: USB disconnect, device number 35 [ 756.974715][ T7446] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 757.682991][ T4312] usb 3-1: USB disconnect, device number 24 [ 757.689098][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 758.098586][ T4312] usb 2-1: USB disconnect, device number 23 [ 759.108062][ T26] audit: type=1326 audit(1776784029.224:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.1.1653" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb50e39c819 code=0x0 [ 761.114613][T10248] 9pnet_fd: Insufficient options for proto=fd [ 761.125615][T10246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.941959][T10260] Malformed UNC in devname [ 761.941959][T10260] [ 761.948870][T10260] CIFS: VFS: Malformed UNC in devname [ 761.973262][T10260] SET target dimension over the limit! [ 762.754937][ T4313] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 762.974066][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 763.083592][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.421825][ T4313] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 763.438982][ T4313] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 763.848613][ T4313] usb 5-1: Manufacturer: syz [ 763.870814][ T4313] usb 5-1: config 0 descriptor?? [ 763.919608][ C1] hrtimer: interrupt took 52418 ns [ 765.209370][ T4313] usbhid 5-1:0.0: can't add hid device: -71 [ 765.229498][ T4313] usbhid: probe of 5-1:0.0 failed with error -71 [ 765.242704][ T26] audit: type=1326 audit(1776784034.960:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.3.1669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e17f9c819 code=0x0 [ 765.280423][ T4313] usb 5-1: USB disconnect, device number 29 [ 767.031190][T10303] Malformed UNC in devname [ 767.031190][T10303] [ 767.037929][T10303] CIFS: VFS: Malformed UNC in devname [ 767.062208][T10303] SET target dimension over the limit! [ 767.994462][T10301] xt_recent: Unsupported userspace flags (000000de) [ 768.754237][T10296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.925246][ T4313] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 770.119499][ T4313] usb 3-1: config 1 interface 0 has no altsetting 0 [ 770.141279][ T4313] usb 3-1: string descriptor 0 read error: -22 [ 770.147624][ T4313] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 770.178640][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.624087][T10329] 9pnet_fd: Insufficient options for proto=fd [ 770.886402][ T4313] usbhid 3-1:1.0: can't add hid device: -71 [ 770.894264][ T4313] usbhid: probe of 3-1:1.0 failed with error -71 [ 770.916185][ T4313] usb 3-1: USB disconnect, device number 25 [ 771.270158][T10332] xt_recent: Unsupported userspace flags (000000de) [ 773.313607][T10343] SET target dimension over the limit! [ 773.329356][T10345] Malformed UNC in devname [ 773.329356][T10345] [ 773.336493][T10345] CIFS: VFS: Malformed UNC in devname [ 775.362042][ T26] audit: type=1326 audit(1776784044.431:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.2.1693" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f201bb9c819 code=0x0 [ 776.896355][T10375] 9pnet_fd: Insufficient options for proto=fd [ 781.314942][T10403] xt_TPROXY: Can be used only with -p tcp or -p udp [ 784.789097][T10418] 9pnet_fd: Insufficient options for proto=fd [ 787.851347][T10445] xt_TPROXY: Can be used only with -p tcp or -p udp [ 790.303406][T10475] 9pnet_fd: Insufficient options for proto=fd [ 791.758419][T10482] syz.4.1731 uses obsolete (PF_INET,SOCK_PACKET) [ 793.289153][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 793.295691][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 793.494689][T10489] xt_TPROXY: Can be used only with -p tcp or -p udp [ 795.346144][T10512] 9pnet_fd: Insufficient options for proto=fd [ 796.106742][ T4312] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 796.275816][T10517] xt_recent: Unsupported userspace flags (000000de) [ 796.507864][ T4312] usb 4-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 796.537876][ T4312] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 796.572340][ T4312] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 796.624476][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.648895][ T4312] usb 4-1: Product: syz [ 796.664604][ T4312] usb 4-1: Manufacturer: syz [ 796.727967][ T4312] usb 4-1: SerialNumber: syz [ 797.090026][ T4312] usb 4-1: config 0 descriptor?? [ 797.335114][ T4312] usb 4-1: USB disconnect, device number 20 [ 798.776420][T10536] xt_TPROXY: Can be used only with -p tcp or -p udp [ 801.019111][T10559] xt_recent: Unsupported userspace flags (000000de) [ 801.652303][ T4314] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 801.881843][ T4314] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 802.154415][ T4314] usb 1-1: config 0 has no interface number 0 [ 802.167496][ T4314] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 802.201204][ T4314] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 802.834701][ T4314] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 802.861431][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.934257][ T4314] usb 1-1: config 0 descriptor?? [ 802.943420][T10555] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 802.996186][ T4314] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 803.187724][ T4367] usb 1-1: USB disconnect, device number 36 [ 803.193765][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 803.351224][ T4312] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 803.686654][ T4312] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 803.711775][ T4312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 803.752316][ T4312] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 803.776044][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.795049][ T4312] usb 2-1: Product: syz [ 803.799339][ T4312] usb 2-1: Manufacturer: syz [ 803.830065][ T4312] usb 2-1: SerialNumber: syz [ 803.852228][ T4312] usb 2-1: config 0 descriptor?? [ 804.096093][ T4312] usb 2-1: USB disconnect, device number 24 [ 805.097958][ T26] audit: type=1326 audit(1776784072.261:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10590 comm="syz.4.1765" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff12199c819 code=0x0 [ 805.221406][ T22] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 805.435103][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 805.446741][ T22] usb 1-1: config 6 has an invalid interface number: 220 but max is 0 [ 805.475175][ T22] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 805.507250][ T22] usb 1-1: config 6 has no interface number 0 [ 805.520789][ T22] usb 1-1: config 6 interface 220 has no altsetting 0 [ 805.540478][ T22] usb 1-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 805.562965][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.572395][ T22] usb 1-1: Product: syz [ 805.584917][ T22] usb 1-1: Manufacturer: syz [ 805.592190][ T22] usb 1-1: SerialNumber: syz [ 805.606063][ T4312] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 805.822027][ T4312] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 805.841104][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.841355][ T22] usb 1-1: Found UVC 0.00 device syz (174f:5212) [ 805.873558][ T22] usb 1-1: No valid video chain found. [ 805.887701][ T4312] usb 2-1: config 0 descriptor?? [ 805.896055][ T22] usb 1-1: USB disconnect, device number 37 [ 807.049138][ T4312] ath6kl: Failed to submit usb control message: -110 [ 807.081401][ T4312] ath6kl: unable to send the bmi data to the device: -110 [ 807.107574][ T4312] ath6kl: Unable to send get target info: -110 [ 807.147511][ T4312] ath6kl: Failed to init ath6kl core: -110 [ 807.155434][ T4510] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 807.214733][ T4312] ath6kl_usb: probe of 2-1:0.0 failed with error -110 [ 807.358719][ T4510] usb 3-1: Using ep0 maxpacket: 16 [ 807.375169][ T4510] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.396862][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 807.404306][ T9846] Bluetooth: hci5: command 0x1003 tx timeout [ 807.433540][ T22] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 807.494260][ T4510] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 807.513236][ T4510] usb 3-1: config 0 interface 0 has no altsetting 0 [ 807.520707][ T4510] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 807.661284][ T4510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.678589][ T4367] usb 2-1: USB disconnect, device number 25 [ 807.967132][ T22] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 807.975294][ T22] usb 4-1: config 0 has no interface number 0 [ 807.991542][ T4510] usb 3-1: config 0 descriptor?? [ 808.008535][ T4510] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 808.031752][ T22] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 808.076128][ T22] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 808.100716][ T22] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 808.130260][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.166086][ T22] usb 4-1: config 0 descriptor?? [ 808.174799][T10616] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 808.231373][ T22] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 808.442082][ T7446] usb 4-1: USB disconnect, device number 21 [ 808.448098][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 809.784732][ T4312] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 809.993489][ T26] audit: type=1326 audit(1776784076.837:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.4.1779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff12199c819 code=0x0 [ 810.550139][ T4312] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 810.594923][ T4312] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 810.632398][ T4312] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 810.643779][ T22] usb 3-1: USB disconnect, device number 26 [ 810.707881][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.754506][ T4312] usb 1-1: Product: syz [ 810.944356][ T4312] usb 1-1: Manufacturer: syz [ 810.975131][ T4312] usb 1-1: SerialNumber: syz [ 811.090556][ T4312] usb 1-1: config 0 descriptor?? [ 812.199373][ T4312] usb 1-1: USB disconnect, device number 38 [ 812.274116][ T7446] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 812.530516][ T7446] usb 3-1: Using ep0 maxpacket: 8 [ 812.814287][ T7446] usb 3-1: config 6 has an invalid interface number: 220 but max is 0 [ 812.871944][ T7446] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 812.910632][ T7446] usb 3-1: config 6 has no interface number 0 [ 812.917773][ T7446] usb 3-1: config 6 interface 220 has no altsetting 0 [ 812.945706][ T7446] usb 3-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 812.957390][ T7446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.966205][ T7446] usb 3-1: Product: syz [ 812.970767][ T7446] usb 3-1: Manufacturer: syz [ 812.975607][ T7446] usb 3-1: SerialNumber: syz [ 813.370574][ T7446] usb 3-1: Found UVC 0.00 device syz (174f:5212) [ 813.385456][ T7446] usb 3-1: No valid video chain found. [ 813.432367][ T7446] usb 3-1: USB disconnect, device number 27 [ 813.481952][ T4312] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 813.775212][ T4312] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 813.786607][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.809480][ T4312] usb 4-1: config 0 descriptor?? [ 813.973989][ T22] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 814.922975][ T22] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 814.932228][ T22] usb 5-1: config 0 has no interface number 0 [ 814.947508][ T22] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 814.985240][ T22] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 815.013756][ T4312] ath6kl: Failed to submit usb control message: -110 [ 815.021240][ T22] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 815.074312][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.114844][ T4312] ath6kl: unable to send the bmi data to the device: -110 [ 815.140548][ T22] usb 5-1: config 0 descriptor?? [ 815.156861][T10673] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 815.172225][ T4312] ath6kl: Unable to send get target info: -110 [ 815.236523][ T22] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 815.268877][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 815.291700][ T9846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 815.550560][ T4312] ath6kl: Failed to init ath6kl core: -110 [ 815.587470][ T4510] usb 5-1: USB disconnect, device number 30 [ 815.616497][ T4312] ath6kl_usb: probe of 4-1:0.0 failed with error -110 [ 815.642284][ T4312] usb 4-1: USB disconnect, device number 22 [ 819.017136][T10701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.679581][ T4350] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 820.009121][ T4350] usb 3-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 820.751747][ T4350] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 820.778686][ T4350] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 820.809326][ T4350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.817903][ T4350] usb 3-1: Product: syz [ 820.822141][ T4350] usb 3-1: Manufacturer: syz [ 820.827052][ T4350] usb 3-1: SerialNumber: syz [ 820.837870][ T4350] usb 3-1: config 0 descriptor?? [ 821.948379][ T4350] usb 3-1: USB disconnect, device number 28 [ 822.105572][ T7446] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 822.339523][ T7446] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 822.389016][ T7446] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 822.456046][ T7446] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 822.927995][ T7446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.957272][T10720] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 823.719720][ T7446] usb 4-1: USB disconnect, device number 23 [ 824.195681][ T4559] udevd[4559]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.264155][ T4313] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 825.183599][ T4313] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 825.191690][ T4313] usb 1-1: config 0 has no interface number 0 [ 825.285442][ T4313] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 826.182185][ T4313] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 826.193720][ T4313] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 826.203759][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.215408][ T4313] usb 1-1: config 0 descriptor?? [ 826.283712][T10740] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 826.311975][ T4313] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 826.651597][T10760] Malformed UNC in devname [ 826.651597][T10760] [ 826.658326][T10760] CIFS: VFS: Malformed UNC in devname [ 827.490121][T10760] SET target dimension over the limit! [ 827.508109][ T4325] usb 1-1: USB disconnect, device number 39 [ 830.660771][T10790] xt_recent: Unsupported userspace flags (000000de) [ 831.820463][T10798] hfsplus: unable to find HFS+ superblock [ 833.218938][ T4824] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 833.429246][ T4824] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 833.437675][ T4824] usb 5-1: config 0 has no interface number 0 [ 833.444452][ T4824] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 833.456263][ T4824] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 833.486002][ T4824] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 833.527859][ T4824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.712123][ T4824] usb 5-1: config 0 descriptor?? [ 833.718136][T10805] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 833.753564][ T4824] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 833.814776][T10817] Malformed UNC in devname [ 833.814776][T10817] [ 833.821801][T10817] CIFS: VFS: Malformed UNC in devname [ 833.846231][T10817] SET target dimension over the limit! [ 834.592229][ T4824] usb 5-1: USB disconnect, device number 31 [ 834.635724][T10818] netlink: 'syz.3.1827': attribute type 72 has an invalid length. [ 836.192486][T10838] xt_TPROXY: Can be used only with -p tcp or -p udp [ 839.050579][T10866] hfsplus: unable to find HFS+ superblock [ 839.157795][T10867] Malformed UNC in devname [ 839.157795][T10867] [ 839.164755][T10867] CIFS: VFS: Malformed UNC in devname [ 839.228235][T10867] SET target dimension over the limit! [ 843.308425][T10907] Malformed UNC in devname [ 843.308425][T10907] [ 843.315312][T10907] CIFS: VFS: Malformed UNC in devname [ 843.924317][T10907] SET target dimension over the limit! [ 845.345434][T10925] xt_recent: Unsupported userspace flags (000000de) [ 846.878561][ T4350] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 847.030016][T10956] Malformed UNC in devname [ 847.030016][T10956] [ 847.036993][T10956] CIFS: VFS: Malformed UNC in devname [ 847.082072][T10956] SET target dimension over the limit! [ 847.185462][ T4272] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 847.346530][ T4350] usb 2-1: config 1 interface 0 has no altsetting 0 [ 847.409953][ T4272] usb 3-1: Using ep0 maxpacket: 8 [ 847.423608][ T4272] usb 3-1: config 6 has an invalid interface number: 220 but max is 0 [ 847.509763][ T4272] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 847.614825][ T4272] usb 3-1: config 6 has no interface number 0 [ 847.673813][ T4272] usb 3-1: config 6 interface 220 has no altsetting 0 [ 847.775385][ T4272] usb 3-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 847.867025][ T4272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.930490][ T4272] usb 3-1: Product: syz [ 847.942082][ T4350] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 847.951645][ T4272] usb 3-1: Manufacturer: syz [ 847.981234][ T4350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.989458][ T4350] usb 2-1: Product: syz [ 847.993684][ T4350] usb 2-1: Manufacturer: syz [ 847.995801][ T4272] usb 3-1: SerialNumber: syz [ 847.998650][ T4350] usb 2-1: SerialNumber: syz [ 848.241765][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 848.267403][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 848.267432][ T4272] usb 3-1: Found UVC 0.00 device syz (174f:5212) [ 848.275432][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 848.288598][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 848.296243][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 848.303835][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 848.311306][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 848.319869][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 848.327299][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 848.335100][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 848.342652][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 848.345948][ T4272] usb 3-1: No valid video chain found. [ 848.350645][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 848.362669][ T4350] usbhid 2-1:1.0: can't add hid device: -32 [ 848.368721][ T4350] usbhid: probe of 2-1:1.0 failed with error -32 [ 848.389059][ T4272] usb 3-1: USB disconnect, device number 29 [ 848.447145][ T4313] usb 2-1: USB disconnect, device number 26 [ 848.559761][T10963] hfsplus: unable to find HFS+ superblock [ 849.461944][T10970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1872'. [ 849.602640][T10974] xt_recent: Unsupported userspace flags (000000de) [ 850.866483][T10988] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1879'. [ 851.334058][ T7446] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 851.393267][ T4272] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 851.620280][ T4272] usb 5-1: Using ep0 maxpacket: 16 [ 851.637314][ T4272] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.714651][ T4272] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.920889][ T4272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.010525][ T4272] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 852.129693][ T4272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.158402][ T14] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 852.189653][ T4272] usb 5-1: config 0 descriptor?? [ 852.282967][ T7446] usb 2-1: Using ep0 maxpacket: 32 [ 852.297172][ T7446] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.310211][ T7446] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 852.324410][ T7446] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 852.339148][ T4313] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 852.445350][ T7446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.453781][ T7446] usb 2-1: Product: syz [ 852.458003][ T7446] usb 2-1: Manufacturer: syz [ 852.462652][ T7446] usb 2-1: SerialNumber: syz [ 852.479561][ T7446] usb 2-1: interface 1 not found [ 852.486643][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 852.493810][ T14] usb 4-1: config 6 has an invalid interface number: 220 but max is 0 [ 852.503122][ T14] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 852.532601][ T14] usb 4-1: config 6 has no interface number 0 [ 852.539469][ T14] usb 4-1: config 6 interface 220 has no altsetting 0 [ 852.544223][ T4313] usb 3-1: config 1 interface 0 has no altsetting 0 [ 852.560335][ T14] usb 4-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 852.570238][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.570235][ T4313] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 852.570266][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.579352][ T14] usb 4-1: Product: syz [ 852.601354][ T14] usb 4-1: Manufacturer: syz [ 852.609877][ T4313] usb 3-1: Product: syz [ 852.610283][T11001] hfsplus: unable to find HFS+ superblock [ 852.620539][ T14] usb 4-1: SerialNumber: syz [ 852.625181][ T4313] usb 3-1: Manufacturer: syz [ 852.625202][ T4313] usb 3-1: SerialNumber: syz [ 852.665841][ T4272] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 852.714468][ T26] audit: type=1326 audit(1776784116.824:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10985 comm="syz.1.1878" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb50e39c819 code=0x0 [ 853.005727][ T7446] usb 5-1: USB disconnect, device number 32 [ 853.138979][ T4313] usbhid 3-1:1.0: can't add hid device: -71 [ 853.146707][ T4313] usbhid: probe of 3-1:1.0 failed with error -71 [ 853.236705][ T4313] usb 3-1: USB disconnect, device number 30 [ 853.391303][ T14] usb 4-1: Found UVC 0.00 device syz (174f:5212) [ 853.410092][ T14] usb 4-1: No valid video chain found. [ 853.438143][ T14] usb 4-1: USB disconnect, device number 24 [ 853.537189][T11004] fido_id[11004]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 854.180720][ T4313] usb 2-1: USB disconnect, device number 27 [ 858.343839][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 858.350263][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 858.694991][ T26] audit: type=1326 audit(1776784122.420:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.4.1894" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff12199c819 code=0x0 [ 859.389977][T11049] hfsplus: unable to find HFS+ superblock [ 859.720333][ T4313] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 860.222389][ T4313] usb 4-1: Using ep0 maxpacket: 8 [ 860.240013][ T4313] usb 4-1: config 6 has an invalid interface number: 220 but max is 0 [ 860.697668][T11061] xt_TPROXY: Can be used only with -p tcp or -p udp [ 861.273046][ T4313] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 861.322239][ T4313] usb 4-1: config 6 has no interface number 0 [ 861.352991][ T4313] usb 4-1: config 6 interface 220 has no altsetting 0 [ 861.429549][ T4313] usb 4-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 861.467175][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.950279][ T4313] usb 4-1: Product: syz [ 861.972774][ T4313] usb 4-1: Manufacturer: syz [ 862.526863][ T4313] usb 4-1: SerialNumber: syz [ 862.661508][ T4313] usb 4-1: can't set config #6, error -71 [ 862.708586][ T4313] usb 4-1: USB disconnect, device number 25 [ 866.552242][ T7446] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 866.773128][ T7446] usb 1-1: Using ep0 maxpacket: 16 [ 866.780373][ T7446] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.802365][ T7446] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.823969][ T7446] usb 1-1: config 0 interface 0 has no altsetting 0 [ 866.845564][ T7446] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 866.856346][ T7446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.898816][ T7446] usb 1-1: config 0 descriptor?? [ 867.041298][ T4824] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 867.244533][ T4824] usb 4-1: Using ep0 maxpacket: 8 [ 867.258578][ T4824] usb 4-1: config 6 has an invalid interface number: 220 but max is 0 [ 867.294923][ T4824] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 867.318241][ T4824] usb 4-1: config 6 has no interface number 0 [ 867.346526][ T4824] usb 4-1: config 6 interface 220 has no altsetting 0 [ 867.353465][ T7446] usbhid 1-1:0.0: can't add hid device: -71 [ 867.353564][ T7446] usbhid: probe of 1-1:0.0 failed with error -71 [ 867.375670][ T7446] usb 1-1: USB disconnect, device number 40 [ 867.400973][ T4824] usb 4-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 867.424617][ T4824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.448740][ T4824] usb 4-1: Product: syz [ 867.468183][ T4824] usb 4-1: Manufacturer: syz [ 867.472906][ T4824] usb 4-1: SerialNumber: syz [ 867.805237][ T4824] usb 4-1: Found UVC 0.00 device syz (174f:5212) [ 867.811799][ T4824] usb 4-1: No valid video chain found. [ 867.818876][ T4824] usb 4-1: USB disconnect, device number 26 [ 869.888488][T11144] loop4: detected capacity change from 0 to 128 [ 869.975854][T11144] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 871.806169][ T9211] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.993153][ T9211] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.187956][ T9211] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.377249][ T9211] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.134247][T11164] xt_TPROXY: Can be used only with -p tcp or -p udp [ 873.818615][ T4350] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 874.035373][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 874.070596][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 874.120197][ T4350] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 874.329252][ T4350] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 874.453669][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.636912][ T4350] usb 1-1: config 0 descriptor?? [ 874.729740][T11169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 875.122296][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 875.141046][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 875.161607][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 875.171235][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 875.179588][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 875.187471][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 875.211634][ T9846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 875.224654][ T9846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 875.232434][ T9846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 875.253688][ T9846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 875.263585][ T9846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 875.271578][ T9846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 875.298283][ T4350] chicony 0003:04F2:1421.000B: unknown main item tag 0x3 [ 875.311048][ T4350] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 875.318285][ T4350] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 875.326852][ T4350] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 875.334494][ T4350] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 875.341712][ T4350] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 875.349536][ T4350] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 875.357146][ T4350] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 875.364344][ T4350] chicony 0003:04F2:1421.000B: collection stack underflow [ 875.371899][ T4350] chicony 0003:04F2:1421.000B: item 0 2 0 12 parsing failed [ 875.380197][ T4350] chicony 0003:04F2:1421.000B: Chicony hid parse failed: -22 [ 875.388088][ T4350] chicony: probe of 0003:04F2:1421.000B failed with error -22 [ 875.523331][ T4350] usb 1-1: USB disconnect, device number 41 [ 876.788927][T11177] loop2: detected capacity change from 0 to 40427 [ 876.913143][T11177] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 876.937026][T11177] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 876.977868][T11177] F2FS-fs (loop2): invalid crc value [ 877.037910][T11177] F2FS-fs (loop2): Found nat_bits in checkpoint [ 877.135521][T11182] chnl_net:caif_netlink_parms(): no params data found [ 877.491417][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 878.011005][T11223] xt_TPROXY: Can be used only with -p tcp or -p udp [ 879.858542][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 881.094725][ T9211] device hsr_slave_0 left promiscuous mode [ 881.115646][ T9211] device hsr_slave_1 left promiscuous mode [ 881.130684][ T9211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.150001][ T9211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.168661][ T9211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.203387][ T9211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.238620][ T9211] device bridge_slave_1 left promiscuous mode [ 881.257981][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.316822][ T9211] device bridge_slave_0 left promiscuous mode [ 881.327537][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.027329][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 882.658820][ T9211] device veth1_macvtap left promiscuous mode [ 882.698687][ T9211] device veth0_macvtap left promiscuous mode [ 882.704889][ T9211] device veth1_vlan left promiscuous mode [ 882.735996][ T9211] device veth0_vlan left promiscuous mode [ 884.177269][ T9211] team0 (unregistering): Port device team_slave_1 removed [ 884.233221][ T9211] team0 (unregistering): Port device team_slave_0 removed [ 884.260315][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 884.290197][ T9211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.342780][ T9211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.730486][ T9211] bond0 (unregistering): Released all slaves [ 884.932224][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.940858][T11182] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.949581][T11182] device bridge_slave_0 entered promiscuous mode [ 884.968406][T11182] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.982319][T11182] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.990638][T11182] device bridge_slave_1 entered promiscuous mode [ 885.153777][T11182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.185684][T11182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.542918][T11182] team0: Port device team_slave_0 added [ 887.595530][T11182] team0: Port device team_slave_1 added [ 888.114126][ T4350] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 888.308805][T11182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.315856][T11182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.365400][T11182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.380128][ T4350] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 888.390394][ T4350] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 888.468793][ T4350] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 888.497626][ T4350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.505800][ T4350] usb 1-1: Product: syz [ 888.518452][ T4350] usb 1-1: Manufacturer: syz [ 888.523738][ T4350] usb 1-1: SerialNumber: syz [ 888.541434][T11182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.550248][T11182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.563839][ T4350] usb 1-1: config 0 descriptor?? [ 888.737095][T11182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.315094][ T4350] usb 1-1: USB disconnect, device number 42 [ 889.436172][T11182] device hsr_slave_0 entered promiscuous mode [ 889.504611][T11182] device hsr_slave_1 entered promiscuous mode [ 889.915401][ T26] audit: type=1326 audit(1776784151.617:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11305 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e17f9c819 code=0x7ffc0000 [ 890.068814][ T26] audit: type=1326 audit(1776784151.682:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11305 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e17f9c819 code=0x7ffc0000 [ 890.175614][ T26] audit: type=1326 audit(1776784151.682:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11305 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f5e17f9c819 code=0x7ffc0000 [ 890.282495][ T26] audit: type=1326 audit(1776784151.682:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11305 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e17f9c819 code=0x7ffc0000 [ 890.414448][ T26] audit: type=1326 audit(1776784151.682:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11305 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e17f9c819 code=0x7ffc0000 [ 890.424004][T11182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 890.602155][T11182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 890.655324][T11182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 890.685351][T11182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 891.028482][T11182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.072699][T11182] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.098757][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 891.138519][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 891.157565][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 891.958055][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 891.967140][ T9239] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.974333][ T9239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.051584][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 892.066122][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 892.080336][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 892.108690][ T9239] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.115901][ T9239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.133941][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 892.170788][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 892.211059][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 892.231519][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 892.483780][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 892.863025][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 892.903783][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 892.926750][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 892.961422][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 892.997892][T11182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 893.016226][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 893.033808][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 893.892489][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 896.148866][ T7446] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 896.197264][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 896.229632][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 896.298082][T11182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.656463][ T7446] usb 3-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 897.683103][ T7446] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 897.722844][ T7446] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 897.754974][ T7446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.807856][ T7446] usb 3-1: Product: syz [ 897.838798][ T7446] usb 3-1: Manufacturer: syz [ 897.885447][ T7446] usb 3-1: SerialNumber: syz [ 897.936490][ T7446] usb 3-1: config 0 descriptor?? [ 898.203767][ T7446] usb 3-1: USB disconnect, device number 31 [ 898.582942][T11391] Malformed UNC in devname [ 898.582942][T11391] [ 898.589795][T11391] CIFS: VFS: Malformed UNC in devname [ 898.601229][T11391] SET target dimension over the limit! [ 899.852525][ T9225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 899.865275][ T9225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 899.963154][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 899.983319][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 900.004422][T11182] device veth0_vlan entered promiscuous mode [ 900.014079][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 900.034985][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 900.066042][T11182] device veth1_vlan entered promiscuous mode [ 900.140077][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 900.156433][ T4350] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 900.172117][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 900.194314][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 900.226813][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 900.247265][T11182] device veth0_macvtap entered promiscuous mode [ 900.296744][T11182] device veth1_macvtap entered promiscuous mode [ 900.346226][T11182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.356893][T11182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.367163][T11182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.377835][T11182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.389955][ T4350] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 900.860369][T11414] xt_TPROXY: Can be used only with -p tcp or -p udp [ 901.185503][ T4350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.207190][ T4350] usb 3-1: Product: syz [ 901.211444][ T4350] usb 3-1: Manufacturer: syz [ 901.216671][ T4350] usb 3-1: SerialNumber: syz [ 901.233813][ T4350] usb 3-1: config 0 descriptor?? [ 901.242636][ T4350] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 901.246264][T11182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.294198][T11182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.330533][T11182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.381194][T11182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.427348][T11182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.492047][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 901.517650][T11406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.542652][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 901.606748][T11406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.616992][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 901.650321][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 901.793311][ T4350] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 901.800923][ T4350] sq905c 3-1:0.0: Get version command failed [ 901.827855][ T4350] sq905c: probe of 3-1:0.0 failed with error -110 [ 901.869379][T11182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.089309][T11182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.140777][T11182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.151923][T11182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.162313][T11182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.173338][T11182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.183915][T11182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.195031][T11182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.214127][T11182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.223708][ T32] usb 3-1: USB disconnect, device number 32 [ 902.299261][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 902.311381][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 902.333343][T11182] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.445785][T11182] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.521302][T11182] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.537328][T11182] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.920196][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.945189][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.993737][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 903.236459][ T9223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.250840][ T9223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.439075][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 904.052967][ T9232] Bluetooth: Error in BCSP hdr checksum [ 904.120771][ T7446] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 904.138595][T11449] loop2: detected capacity change from 0 to 512 [ 904.182229][T11449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 904.221582][T11449] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1996: iget: bad i_size value: 38620345925642 [ 904.258913][T11449] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1996: couldn't read orphan inode 15 (err -117) [ 904.300429][T11449] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 904.325389][ T9225] Bluetooth: Error in BCSP hdr checksum [ 904.333467][ T7446] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 904.389605][ T7446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.456824][ T7446] usb 6-1: config 0 descriptor?? [ 904.555534][T11454] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1996: bg 0: block 5: invalid block bitmap [ 904.602048][ T9225] Bluetooth: Error in BCSP hdr checksum [ 904.681358][ T7446] ath6kl: Failed to submit usb control message: -71 [ 904.691423][ T7446] ath6kl: unable to send the bmi data to the device: -71 [ 904.763032][ T7446] ath6kl: Unable to send get target info: -71 [ 904.771434][ T7446] ath6kl: Failed to init ath6kl core: -71 [ 904.824837][T11454] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 372 with error 28 [ 905.381205][T11454] EXT4-fs (loop2): This should not happen!! Data will be lost [ 905.381205][T11454] [ 905.393865][ T7446] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 905.407425][T11454] EXT4-fs (loop2): Total free blocks count 0 [ 905.416113][ T7446] usb 6-1: USB disconnect, device number 2 [ 905.464288][T11454] EXT4-fs (loop2): Free/Dirty block details [ 905.472443][T11454] EXT4-fs (loop2): free_blocks=0 [ 905.477624][T11454] EXT4-fs (loop2): dirty_blocks=376 [ 905.522267][T11454] EXT4-fs (loop2): Block reservation details [ 905.528385][T11454] EXT4-fs (loop2): i_reserved_data_blocks=376 [ 905.819209][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 906.187321][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 906.194111][ T9846] Bluetooth: hci5: command 0x1003 tx timeout [ 907.411684][T11473] xt_TPROXY: Can be used only with -p tcp or -p udp [ 907.808218][ T7446] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 907.966834][T11487] loop2: detected capacity change from 0 to 1024 [ 907.990868][T11487] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46228!=20869) [ 908.139237][ T129] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 908.154415][ T26] audit: type=1326 audit(1776784168.705:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.3.1999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e17f9c819 code=0x0 [ 908.330581][ T7446] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 908.942325][ T7446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.951252][ T7446] usb 1-1: Product: syz [ 908.955590][ T7446] usb 1-1: Manufacturer: syz [ 908.960337][ T7446] usb 1-1: SerialNumber: syz [ 908.974587][ T7446] usb 1-1: config 0 descriptor?? [ 908.986952][ T7446] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 909.138279][T11487] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 909.153868][ T129] usb 2-1: Using ep0 maxpacket: 32 [ 909.161412][ T129] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.186710][ T129] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 909.201443][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.269087][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.286838][ T129] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 909.488956][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.497503][ T129] usb 2-1: Product: syz [ 909.501776][ T129] usb 2-1: Manufacturer: syz [ 909.506491][ T129] usb 2-1: SerialNumber: syz [ 909.528111][ T7446] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 909.542881][ T7446] sq905c 1-1:0.0: Get version command failed [ 909.552754][ T129] usb 2-1: interface 1 not found [ 909.560466][ T7446] sq905c: probe of 1-1:0.0 failed with error -110 [ 909.617115][T11133] usb 1-1: USB disconnect, device number 43 [ 909.684015][ T4277] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 909.780892][ T4824] usb 2-1: USB disconnect, device number 28 [ 909.844936][ T4277] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz-executor: corrupted in-inode xattr [ 909.886481][ T4277] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz-executor: corrupted in-inode xattr [ 911.358381][T11482] EXT4-fs (loop2): unmounting filesystem. [ 912.772322][ T9242] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.977225][ T9242] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.228287][ T9242] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.515495][ T9242] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.674397][ T129] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 913.711241][ T9232] Bluetooth: Error in BCSP hdr checksum [ 913.913305][ T129] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 913.937100][T11532] xt_TPROXY: Can be used only with -p tcp or -p udp [ 913.975728][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.048899][ T129] usb 4-1: config 0 descriptor?? [ 914.138024][ T4337] Bluetooth: Error in BCSP hdr checksum [ 914.328371][ T129] ath6kl: Failed to submit usb control message: -71 [ 914.337119][ T129] ath6kl: unable to send the bmi data to the device: -71 [ 914.344337][ T129] ath6kl: Unable to send get target info: -71 [ 914.374075][ T129] ath6kl: Failed to init ath6kl core: -71 [ 914.463645][ T129] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 914.490192][T11548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.501047][ T129] usb 4-1: USB disconnect, device number 27 [ 914.609826][ T9846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 914.619990][ T9846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 914.629155][ T9846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 914.637186][ T9846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 914.648096][ T9846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 914.655522][ T9846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 915.538933][ T4280] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 915.818467][T11549] chnl_net:caif_netlink_parms(): no params data found [ 916.129648][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.138068][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.146809][T11549] device bridge_slave_0 entered promiscuous mode [ 916.156431][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.163705][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.172648][T11549] device bridge_slave_1 entered promiscuous mode [ 916.244672][ T9242] device hsr_slave_0 left promiscuous mode [ 916.267476][ T14] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 916.276845][ T9242] device hsr_slave_1 left promiscuous mode [ 916.299231][ T9242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.307319][ T9242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.315924][ T9242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.323449][ T9242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.332048][ T9242] device bridge_slave_1 left promiscuous mode [ 916.344790][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.364319][ T9242] device bridge_slave_0 left promiscuous mode [ 916.373542][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.415979][ T9242] device veth1_macvtap left promiscuous mode [ 916.422635][ T9242] device veth0_macvtap left promiscuous mode [ 916.428892][ T9242] device veth1_vlan left promiscuous mode [ 916.435603][ T9242] device veth0_vlan left promiscuous mode [ 916.871068][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 917.247260][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 917.266273][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.324842][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 917.336825][ T14] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 917.346225][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.354527][ T14] usb 1-1: Product: syz [ 917.358763][ T14] usb 1-1: Manufacturer: syz [ 917.363990][ T14] usb 1-1: SerialNumber: syz [ 917.393465][ T14] usb 1-1: interface 1 not found [ 917.589145][ T26] audit: type=1326 audit(1776784177.529:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.0.2021" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51e4d9c819 code=0x0 [ 919.038430][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 919.458885][ T129] usb 1-1: USB disconnect, device number 44 [ 921.636189][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 921.650137][T11606] xt_TPROXY: Can be used only with -p tcp or -p udp [ 922.066990][ T9242] team0 (unregistering): Port device team_slave_1 removed [ 922.121850][ T9242] team0 (unregistering): Port device team_slave_0 removed [ 922.174589][ T9242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.226881][ T9242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.598815][ T9242] bond0 (unregistering): Released all slaves [ 922.719896][T11549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.739493][T11549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.979168][T11549] team0: Port device team_slave_0 added [ 922.999477][T11549] team0: Port device team_slave_1 added [ 923.144389][T11549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.190084][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.253027][T11549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.332895][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 924.356241][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.362598][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 925.433477][T11549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.440564][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.540588][T11549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.685233][T11632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.094035][T11549] device hsr_slave_0 entered promiscuous mode [ 927.153709][T11549] device hsr_slave_1 entered promiscuous mode [ 927.190565][T11549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 927.222951][T11549] Cannot create hsr debugfs directory [ 927.527677][ T4272] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 927.737228][ T4272] usb 1-1: Using ep0 maxpacket: 16 [ 927.746237][ T4272] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.812776][ T4272] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.842972][ T4272] usb 1-1: config 0 interface 0 has no altsetting 0 [ 927.868174][ T4272] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 927.899028][ T4272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.929596][ T4272] usb 1-1: config 0 descriptor?? [ 928.067400][T11549] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 928.101020][T11549] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 928.130538][T11549] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 928.175621][T11549] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 928.587635][ T4272] usbhid 1-1:0.0: can't add hid device: -71 [ 928.612866][ T4272] usbhid: probe of 1-1:0.0 failed with error -71 [ 928.623523][T11549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.649130][ T4272] usb 1-1: USB disconnect, device number 45 [ 928.680222][ T9225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 928.695800][ T9225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 928.725418][T11549] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.770317][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 928.786939][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 928.800629][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.807917][ T9242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.942428][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 929.047744][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 929.168816][ T7446] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 929.184344][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 929.284914][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.292250][ T9242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.404100][ T7446] usb 4-1: Using ep0 maxpacket: 32 [ 929.418098][ T7446] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.519453][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 929.568133][ T7446] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 929.696666][ T7446] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 929.725574][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 929.744785][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 929.798933][ T7446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.948828][ T7446] usb 4-1: Product: syz [ 929.953265][ T7446] usb 4-1: Manufacturer: syz [ 929.957897][ T7446] usb 4-1: SerialNumber: syz [ 930.110197][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 930.132812][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 930.150038][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 930.352398][T11669] xt_TPROXY: Can be used only with -p tcp or -p udp [ 930.816646][ T7446] usb 4-1: interface 1 not found [ 930.841194][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 930.950842][T11549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 930.974210][T11549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 931.017660][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 931.053997][ T26] audit: type=1326 audit(1776784190.134:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.2038" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e17f9c819 code=0x0 [ 931.064683][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 931.139140][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 931.156361][ T4350] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 931.182097][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 931.245434][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 931.395674][ T4350] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 931.412977][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 931.430050][ T4350] usb 2-1: Product: syz [ 931.473115][ T4350] usb 2-1: config 0 descriptor?? [ 931.492055][ T4350] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 932.561146][ T4824] usb 4-1: USB disconnect, device number 28 [ 932.984919][ T4350] usb 2-1: Detected FT232H [ 933.049377][ T4350] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 933.968325][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2046'. [ 934.433302][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 934.461831][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 934.610358][T11549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.457940][ T4350] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 935.482781][ T4350] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 935.598139][ T4350] usb 2-1: USB disconnect, device number 29 [ 935.826729][ T4350] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 936.161633][ T4350] ftdi_sio 2-1:0.0: device disconnected [ 936.246259][T11724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.253216][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 937.262897][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 937.546083][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 937.572098][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 937.614099][T11549] device veth0_vlan entered promiscuous mode [ 937.632803][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 937.649247][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 937.734139][T11549] device veth1_vlan entered promiscuous mode [ 938.354259][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 938.404113][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 938.414732][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 938.426747][T11549] device veth0_macvtap entered promiscuous mode [ 938.754423][ T32] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 938.801563][T11549] device veth1_macvtap entered promiscuous mode [ 938.827897][T11762] loop5: detected capacity change from 0 to 16 [ 938.854845][T11762] erofs: (device loop5): mounted with root inode @ nid 36. [ 938.876959][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.898385][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.909698][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.927028][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.941575][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.954218][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.982386][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 939.007083][ T32] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 939.028959][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.040271][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.054848][ T32] usb 1-1: Product: syz [ 939.061331][T11549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.073138][ T32] usb 1-1: Manufacturer: syz [ 939.080264][ T32] usb 1-1: SerialNumber: syz [ 939.090676][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 939.113914][ T32] usb 1-1: config 0 descriptor?? [ 939.123966][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 939.142290][ T32] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 939.153849][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 939.172184][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 939.191861][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.239248][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.256775][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.280685][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.290990][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.302493][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.312891][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 939.323822][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.355981][T11549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.381911][T11748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.393212][T11748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.414230][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 939.429508][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 939.480034][T11549] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.510857][T11549] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.595118][T11549] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.636956][T11549] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.253602][ T32] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 940.603245][ T32] sq905c 1-1:0.0: Reading version command failed [ 940.642349][ T32] sq905c: probe of 1-1:0.0 failed with error -110 [ 941.030475][ T32] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 941.258136][ T32] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 941.268977][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.309463][ T32] usb 4-1: config 0 descriptor?? [ 941.503439][ T129] usb 1-1: USB disconnect, device number 46 [ 941.548419][ T32] ath6kl: Failed to submit usb control message: -71 [ 941.555315][ T32] ath6kl: unable to send the bmi data to the device: -71 [ 941.601999][ T9223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.642311][ T32] ath6kl: Unable to send get target info: -71 [ 941.658357][ T9223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.682368][ T32] ath6kl: Failed to init ath6kl core: -71 [ 941.714905][ T9223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 941.750476][ T9225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.775738][T11797] netlink: 'syz.0.2064': attribute type 3 has an invalid length. [ 941.780915][ T9225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.781274][ T9225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 941.817841][ T32] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 941.843988][ T32] usb 4-1: USB disconnect, device number 29 [ 941.876838][T11797] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2064'. [ 941.917305][T11797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2064'. [ 941.926817][T11797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2064'. [ 942.039375][T11802] dccp_invalid_packet: P.Data Offset(10) too large [ 943.659257][T11810] xt_TPROXY: Can be used only with -p tcp or -p udp [ 944.143361][T11815] Malformed UNC in devname [ 944.143361][T11815] [ 944.407820][T11822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.176624][T11815] CIFS: VFS: Malformed UNC in devname [ 945.381792][T11815] Cannot find add_set index 0 as target [ 945.892487][T11133] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 946.122420][T11133] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 946.215461][T11133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.426753][T11133] usb 2-1: Product: syz [ 946.457372][T11133] usb 2-1: Manufacturer: syz [ 946.517003][T11133] usb 2-1: SerialNumber: syz [ 946.545892][T11133] usb 2-1: config 0 descriptor?? [ 946.600663][T11133] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 946.772525][T11841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.810083][T11841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.309189][T11133] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 947.327548][T11133] sq905c 2-1:0.0: Reading version command failed [ 947.334026][T11133] sq905c: probe of 2-1:0.0 failed with error -71 [ 947.356503][ T32] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 947.366079][T11133] usb 2-1: USB disconnect, device number 30 [ 947.561457][ T32] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 947.580812][ T32] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 947.610817][ T32] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 947.653504][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.639091][ T32] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 948.864900][ T32] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input14 [ 949.147449][T11871] loop1: detected capacity change from 0 to 8192 [ 949.154092][ T32] input: failed to attach handler kbd to device input14, error: -5 [ 949.189079][T11871] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 949.933280][ T32] usb 4-1: USB disconnect, device number 30 [ 950.087022][T11882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 950.689161][T11866] loop5: detected capacity change from 0 to 40427 [ 950.806409][T11866] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 950.817879][T11866] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 950.894767][T11866] F2FS-fs (loop5): invalid crc value [ 951.268478][T11866] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-12) [ 953.971056][T11919] Malformed UNC in devname [ 953.971056][T11919] [ 953.977936][T11919] CIFS: VFS: Malformed UNC in devname [ 954.304004][T11923] loop3: detected capacity change from 0 to 128 [ 954.384594][ T26] audit: type=1804 audit(1776784211.948:36): pid=11923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2092" name="/newroot/461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=1048603 res=1 errno=0 [ 958.346169][T11960] Malformed UNC in devname [ 958.346169][T11960] [ 958.371638][T11960] CIFS: VFS: Malformed UNC in devname [ 958.423971][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 958.522510][ T9242] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.540673][T11960] Cannot find add_set index 0 as target [ 958.734493][ T9242] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.893165][ T9242] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.469970][ T9242] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.436288][ T129] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 960.464276][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 960.479422][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 960.491602][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 960.510381][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 960.518800][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 960.532933][ T9846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 960.645221][ T129] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 960.687194][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.728063][ T129] usb 1-1: Product: syz [ 960.732334][ T129] usb 1-1: Manufacturer: syz [ 960.782018][ T129] usb 1-1: SerialNumber: syz [ 960.823564][ T129] usb 1-1: config 0 descriptor?? [ 960.881457][ T129] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 961.150865][T11979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.213876][T11979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.529917][ T129] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 961.538731][ T129] sq905c 1-1:0.0: Get version command failed [ 961.545810][ T129] sq905c: probe of 1-1:0.0 failed with error -110 [ 961.652936][T11987] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2106'. [ 962.197547][T11982] chnl_net:caif_netlink_parms(): no params data found [ 962.306456][ T4350] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 962.543100][ T4350] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 962.572909][ T4350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.689271][ T4350] usb 6-1: config 0 descriptor?? [ 962.728138][T11982] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.736013][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 962.852040][T11982] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.970707][T11982] device bridge_slave_0 entered promiscuous mode [ 963.013779][ T4350] ath6kl: Failed to submit usb control message: -71 [ 963.035624][ T4350] ath6kl: unable to send the bmi data to the device: -71 [ 963.056580][ T4350] ath6kl: Unable to send get target info: -71 [ 963.073305][ T4350] ath6kl: Failed to init ath6kl core: -71 [ 963.607762][ T4350] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 963.675560][ T4350] usb 6-1: USB disconnect, device number 3 [ 963.743812][T11982] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.768734][T12035] loop5: detected capacity change from 0 to 256 [ 963.775936][T11982] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.789727][T11982] device bridge_slave_1 entered promiscuous mode [ 963.876903][T12035] FAT-fs (loop5): Directory bread(block 64) failed [ 963.917206][T12035] FAT-fs (loop5): Directory bread(block 65) failed [ 963.938721][T12035] FAT-fs (loop5): Directory bread(block 66) failed [ 963.963736][ T7446] usb 1-1: USB disconnect, device number 47 [ 964.014638][T12035] FAT-fs (loop5): Directory bread(block 67) failed [ 964.031541][T12035] FAT-fs (loop5): Directory bread(block 68) failed [ 964.040373][T12035] FAT-fs (loop5): Directory bread(block 69) failed [ 964.047078][T12035] FAT-fs (loop5): Directory bread(block 70) failed [ 964.057854][T12035] FAT-fs (loop5): Directory bread(block 71) failed [ 964.065559][T12035] FAT-fs (loop5): Directory bread(block 72) failed [ 964.086974][T12038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.097234][T12035] FAT-fs (loop5): Directory bread(block 73) failed [ 965.031351][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 965.059310][T11982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.113671][T11982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.229970][T11982] team0: Port device team_slave_0 added [ 965.240257][T11982] team0: Port device team_slave_1 added [ 965.318606][T11982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.355402][T11982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.426627][T11982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.439628][T11982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.446641][T11982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.480091][T11982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.552001][T12052] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2118'. [ 965.900315][ T9242] device hsr_slave_0 left promiscuous mode [ 965.907699][ T9242] device hsr_slave_1 left promiscuous mode [ 965.924201][ T9242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.950234][ T9242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.989918][ T9242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.016703][ T9242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.026010][ T9242] device bridge_slave_1 left promiscuous mode [ 966.032376][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.076416][ T9242] device bridge_slave_0 left promiscuous mode [ 966.102176][T12063] Malformed UNC in devname [ 966.102176][T12063] [ 966.108953][T12063] CIFS: VFS: Malformed UNC in devname [ 966.121363][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.272327][T12063] SET target dimension over the limit! [ 966.288422][ T9242] device veth1_macvtap left promiscuous mode [ 966.301820][ T9242] device veth0_macvtap left promiscuous mode [ 966.311597][ T9242] device veth1_vlan left promiscuous mode [ 966.323975][ T9242] device veth0_vlan left promiscuous mode [ 967.254012][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 968.065987][ T6317] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 968.477402][ T7446] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 968.701542][ T7446] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 968.728477][ T7446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.749833][ T7446] usb 6-1: Product: syz [ 968.754184][ T7446] usb 6-1: Manufacturer: syz [ 968.759036][ T7446] usb 6-1: SerialNumber: syz [ 968.825465][ T7446] usb 6-1: config 0 descriptor?? [ 968.870462][ T7446] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 969.070105][T12093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.111867][T12093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.155451][ T6317] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 969.155553][ T6317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.412276][ T6317] usb 7-1: config 0 descriptor?? [ 970.088875][T12095] tty tty4: ldisc open failed (-12), clearing slot 3 [ 970.097562][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 970.991332][T12107] loop6: detected capacity change from 0 to 256 [ 971.051955][T12107] exfat: Deprecated parameter 'utf8' [ 971.080941][T12107] exfat: Deprecated parameter 'namecase' [ 971.086719][T12107] exfat: Deprecated parameter 'namecase' [ 971.205146][T12107] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 971.397795][ T7446] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 971.411871][ T7446] sq905c 6-1:0.0: Reading version command failed [ 971.418921][ T7446] sq905c: probe of 6-1:0.0 failed with error -110 [ 987.944384][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 987.957511][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 987.973652][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 987.983596][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 987.991927][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 987.999652][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 988.031313][ T4278] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 988.044857][ T4278] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 988.053787][ T4278] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 988.062171][ T4278] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 988.071701][ T4278] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 988.079114][ T4278] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 988.990878][ T4280] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 989.009149][ T4280] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 989.018243][ T4280] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 989.033243][ T4280] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 989.043830][ T4280] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 989.052972][ T4280] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 989.104156][ T9846] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 989.119127][ T9846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 989.134883][ T9846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 989.145787][ T9846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 989.153764][ T9846] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 989.162921][ T9846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 989.653733][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 989.660133][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 990.164841][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 990.250538][ T4278] Bluetooth: hci6: command 0x0409 tx timeout [ 991.276336][ T4278] Bluetooth: hci7: command 0x0409 tx timeout [ 991.362370][ T4278] Bluetooth: hci8: command 0x0409 tx timeout [ 992.389581][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 992.483859][ T4278] Bluetooth: hci6: command 0x041b tx timeout [ 993.509689][ T4278] Bluetooth: hci7: command 0x041b tx timeout [ 993.595543][ T4278] Bluetooth: hci8: command 0x041b tx timeout [ 994.620836][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 994.706566][ T4278] Bluetooth: hci6: command 0x040f tx timeout [ 995.721606][ T4278] Bluetooth: hci7: command 0x040f tx timeout [ 995.807954][ T4278] Bluetooth: hci8: command 0x040f tx timeout [ 996.832973][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 996.918666][ T4278] Bluetooth: hci6: command 0x0419 tx timeout [ 997.955095][ T4278] Bluetooth: hci7: command 0x0419 tx timeout [ 998.030171][ T4278] Bluetooth: hci8: command 0x0419 tx timeout [ 1008.288533][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 1029.643412][ T4278] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1029.659220][ T4278] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1029.685945][ T4278] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1029.746631][ T4278] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1029.773162][ T4278] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1029.796316][ T4278] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1032.235834][ T4278] Bluetooth: hci9: command 0x0409 tx timeout [ 1034.447881][ T4278] Bluetooth: hci9: command 0x041b tx timeout [ 1036.681277][ T4278] Bluetooth: hci9: command 0x040f tx timeout [ 1036.746433][ T3638] udevd[3638]: worker [11717] /devices/platform/dummy_hcd.6/usb7/7-1 is taking a long time [ 1038.906023][ T4278] Bluetooth: hci9: command 0x0419 tx timeout [ 1046.593447][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 1052.461654][ T4278] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1052.472812][ T4278] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1052.482911][ T4278] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1052.492611][ T4278] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1052.500945][ T4278] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1052.509607][ T4278] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1053.590570][ T4280] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1053.601398][ T4280] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1053.618263][ T4280] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1053.626652][ T4280] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1053.635163][ T4280] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1053.642912][ T4280] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1053.747627][ T9846] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1053.760035][ T9846] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1053.772927][ T9846] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1053.782194][ T9846] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1053.793393][ T9846] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1053.801184][ T9846] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1053.810531][ T9846] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1053.836749][ T4278] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1053.845690][ T9846] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1053.857941][T12135] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1053.870873][T12135] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1053.878785][T12135] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1054.708586][T12135] Bluetooth: hci10: command 0x0409 tx timeout [ 1055.309285][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.315666][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.830765][T12135] Bluetooth: hci11: command 0x0409 tx timeout [ 1055.991063][T12135] Bluetooth: hci13: command 0x0409 tx timeout [ 1056.087294][T12135] Bluetooth: hci12: command 0x0409 tx timeout [ 1056.931519][T12135] Bluetooth: hci10: command 0x041b tx timeout [ 1058.042686][T12135] Bluetooth: hci11: command 0x041b tx timeout [ 1058.213674][T12135] Bluetooth: hci13: command 0x041b tx timeout [ 1058.299114][T12135] Bluetooth: hci12: command 0x041b tx timeout [ 1059.164931][T12135] Bluetooth: hci10: command 0x040f tx timeout [ 1060.265990][T12135] Bluetooth: hci11: command 0x040f tx timeout [ 1060.436326][T12135] Bluetooth: hci13: command 0x040f tx timeout [ 1060.521760][T12135] Bluetooth: hci12: command 0x040f tx timeout [ 1061.376957][T12135] Bluetooth: hci10: command 0x0419 tx timeout [ 1062.488707][T12135] Bluetooth: hci11: command 0x0419 tx timeout [ 1062.669681][T12135] Bluetooth: hci13: command 0x0419 tx timeout [ 1062.744544][T12135] Bluetooth: hci12: command 0x0419 tx timeout [ 1094.146069][ T4280] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1094.162420][ T4280] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1094.178792][ T4280] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1094.201735][ T4280] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1094.222351][ T4280] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1094.262520][ T4280] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1096.010194][T12135] Bluetooth: hci0: command 0x0406 tx timeout [ 1096.512684][T12135] Bluetooth: hci14: command 0x0409 tx timeout [ 1098.735041][T12135] Bluetooth: hci14: command 0x041b tx timeout [ 1100.957704][T12135] Bluetooth: hci14: command 0x040f tx timeout [ 1103.191081][T12135] Bluetooth: hci14: command 0x0419 tx timeout [ 1117.273544][ T4280] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1117.285001][ T4280] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1117.294376][ T4280] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1117.305874][ T4280] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1117.318931][ T4280] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1117.326594][ T4280] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1117.839543][T12135] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1117.850880][T12135] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1117.860599][T12135] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1117.870132][T12135] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1117.878239][T12135] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 1117.885774][T12135] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1117.989878][ T4280] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1118.001594][ T4280] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1118.010698][ T4280] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1118.034333][ T4280] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1118.042270][ T4280] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 1118.049760][ T4280] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1118.228741][T12135] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1118.251046][T12135] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1118.262810][T12135] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1118.271395][ T9846] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1118.279996][ T9846] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 1118.288374][ T9846] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1119.508936][ T9846] Bluetooth: hci15: command 0x0409 tx timeout [ 1120.118042][ T9846] Bluetooth: hci16: command 0x0409 tx timeout [ 1120.289534][ T9846] Bluetooth: hci17: command 0x0409 tx timeout [ 1120.449376][ T9846] Bluetooth: hci18: command 0x0409 tx timeout [ 1120.968737][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.980681][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.731535][ T9846] Bluetooth: hci15: command 0x041b tx timeout [ 1122.340817][ T9846] Bluetooth: hci16: command 0x041b tx timeout [ 1122.501624][ T9846] Bluetooth: hci17: command 0x041b tx timeout [ 1122.682671][ T9846] Bluetooth: hci18: command 0x041b tx timeout [ 1123.195563][ T9846] Bluetooth: hci6: command 0x0406 tx timeout [ 1123.201747][ T9846] Bluetooth: hci4: command 0x0406 tx timeout [ 1123.207959][ T4280] Bluetooth: hci7: command 0x0406 tx timeout [ 1123.214007][ T4280] Bluetooth: hci8: command 0x0406 tx timeout [ 1123.954445][ T4280] Bluetooth: hci15: command 0x040f tx timeout [ 1124.552615][ T4280] Bluetooth: hci16: command 0x040f tx timeout [ 1124.724070][ T4280] Bluetooth: hci17: command 0x040f tx timeout [ 1124.894814][ T4280] Bluetooth: hci18: command 0x040f tx timeout [ 1126.187706][ T4280] Bluetooth: hci15: command 0x0419 tx timeout [ 1126.775443][ T4280] Bluetooth: hci16: command 0x0419 tx timeout [ 1126.946965][ T4280] Bluetooth: hci17: command 0x0419 tx timeout [ 1127.117633][ T4280] Bluetooth: hci18: command 0x0419 tx timeout [ 1128.496097][ T27] INFO: task dhcpcd:3933 blocked for more than 143 seconds. [ 1128.503492][ T27] Not tainted syzkaller #0 [ 1128.526320][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1128.539391][ T27] task:dhcpcd state:D stack:20912 pid:3933 ppid:3932 flags:0x00004002 [ 1128.548742][ T27] Call Trace: [ 1128.590182][ T27] [ 1128.602096][ T27] __schedule+0x11d1/0x40e0 [ 1128.634568][ T27] ? __sched_text_start+0x8/0x8 [ 1128.639547][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1128.645107][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1128.679987][ T27] schedule+0xb9/0x180 [ 1128.684178][ T27] schedule_preempt_disabled+0xf/0x20 [ 1128.752090][ T27] __mutex_lock+0x562/0xaf0 [ 1128.756729][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 1128.761479][ T27] ? devinet_ioctl+0x288/0x1af0 [ 1128.803217][ T27] ? mutex_lock_nested+0x10/0x10 [ 1128.827775][ T27] ? bpf_lsm_capable+0x5/0x10 [ 1128.832707][ T27] ? security_capable+0x85/0xb0 [ 1128.870475][ T27] devinet_ioctl+0x288/0x1af0 [ 1128.875323][ T27] ? get_user_ifreq+0x127/0x170 [ 1128.918968][ T27] inet_ioctl+0x2fa/0x460 [ 1128.928749][ T27] ? inet_shutdown+0x370/0x370 [ 1128.944983][ T27] ? slab_free_freelist_hook+0x131/0x1a0 [ 1128.950735][ T27] ? tomoyo_path_number_perm+0x4fb/0x650 [ 1128.972725][ T27] ? __kmem_cache_free+0xb6/0x1f0 [ 1128.987472][ T27] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1128.993055][ T27] sock_do_ioctl+0xfb/0x320 [ 1128.997665][ T27] ? sock_show_fdinfo+0xb0/0xb0 [ 1129.039263][ T27] sock_ioctl+0x4d2/0x710 [ 1129.068725][ T27] ? sock_poll+0x410/0x410 [ 1129.077608][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1129.098280][ T27] ? fd_install+0x5c/0x4e0 [ 1129.102816][ T27] ? lock_chain_count+0x20/0x20 [ 1129.136908][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1129.141973][ T27] ? security_file_ioctl+0x7c/0xa0 [ 1129.147157][ T27] ? sock_poll+0x410/0x410 [ 1129.188470][ T27] __se_sys_ioctl+0xfa/0x170 [ 1129.197343][ T27] do_syscall_64+0x4c/0xa0 [ 1129.212935][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1129.217718][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1129.234307][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1129.241131][ T27] RIP: 0033:0x7fda29cc2378 [ 1129.260317][ T27] RSP: 002b:00007ffec4b90b78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1129.279048][ T27] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00007fda29cc2378 [ 1129.296633][ T27] RDX: 00007ffec4ba0d70 RSI: 0000000000008914 RDI: 0000000000000017 [ 1129.311889][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1129.330635][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec4bb0f10 [ 1129.338811][ T27] R13: 00007fda29bc26c8 R14: 0000000000000028 R15: 0000000000008914 [ 1129.373577][ T27] [ 1129.376741][ T27] INFO: task syz-executor:4270 blocked for more than 144 seconds. [ 1129.396932][ T27] Not tainted syzkaller #0 [ 1129.401959][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1129.426594][ T27] task:syz-executor state:D stack:21840 pid:4270 ppid:1 flags:0x00004004 [ 1129.449530][ T27] Call Trace: [ 1129.452899][ T27] [ 1129.455923][ T27] __schedule+0x11d1/0x40e0 [ 1129.475266][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1129.493929][ T27] ? queue_work_on+0x196/0x1f0 [ 1129.498797][ T27] ? __sched_text_start+0x8/0x8 [ 1129.517327][ T27] ? wq_worker_last_func+0x40/0x40 [ 1129.528976][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1129.546918][ T27] ? prepare_to_wait_event+0x430/0x470 [ 1129.552536][ T27] schedule+0xb9/0x180 [ 1129.573688][ T27] synchronize_rcu_expedited+0x6e6/0x890 [ 1129.584725][ T27] ? synchronize_rcu+0x3f0/0x3f0 [ 1129.599450][ T27] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 1129.605650][ T27] ? namespace_unlock+0x1d7/0x430 [ 1129.624288][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 1129.637594][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1129.654638][ T27] ? wake_bit_function+0x200/0x200 [ 1129.659879][ T27] ? shrink_dentry_list+0x688/0x6a0 [ 1129.679994][ T27] ? up_write+0x1bb/0x420 [ 1129.696808][ T27] namespace_unlock+0x23f/0x430 [ 1129.701768][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 1129.718870][ T27] ? umount_tree+0xe20/0xe20 [ 1129.723727][ T27] ? umount_mnt+0x2c0/0x2c0 [ 1129.741416][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1129.754681][ T27] path_umount+0xf19/0xf90 [ 1129.767101][ T27] ? __x64_sys_umount+0x12d/0x170 [ 1129.783605][ T27] ? may_mount+0x90/0x90 [ 1129.798157][ T27] ? kmem_cache_free+0xf7/0x290 [ 1129.812639][ T27] __x64_sys_umount+0x12d/0x170 [ 1129.817745][ T27] ? path_umount+0xf90/0xf90 [ 1129.836295][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1129.841633][ T27] do_syscall_64+0x4c/0xa0 [ 1129.858707][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1129.872031][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1129.883524][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1129.901710][ T27] RIP: 0033:0x7f51e4d9da57 [ 1129.916378][ T27] RSP: 002b:00007ffee6ee9d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1129.933812][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f51e4d9da57 [ 1129.948731][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee6ee9e40 [ 1129.967792][ T27] RBP: 00007ffee6ee9e40 R08: 00007ffee6eeae40 R09: 00000000ffffffff [ 1129.980162][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6eeaed0 [ 1129.999306][ T27] R13: 00007f51e4e32048 R14: 00000000000def90 R15: 00007ffee6eeaf10 [ 1130.019538][ T27] [ 1130.022749][ T27] INFO: task kworker/u4:8:4337 blocked for more than 144 seconds. [ 1130.040763][ T27] Not tainted syzkaller #0 [ 1130.058745][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1130.078214][ T27] task:kworker/u4:8 state:D stack:22128 pid:4337 ppid:2 flags:0x00004000 [ 1130.087546][ T27] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 1130.108003][ T27] Call Trace: [ 1130.117835][ T27] [ 1130.129538][ T27] __schedule+0x11d1/0x40e0 [ 1130.139820][ T27] ? __sched_text_start+0x8/0x8 [ 1130.157568][ T27] ? kthread_data+0x4b/0xc0 [ 1130.162205][ T27] ? wq_worker_sleeping+0x60/0x280 [ 1130.185144][ T27] schedule+0xb9/0x180 [ 1130.189336][ T27] schedule_timeout+0xbd/0x2d0 [ 1130.194170][ T27] ? console_conditional_schedule+0x40/0x40 [ 1130.216427][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1130.222569][ T27] ? lock_chain_count+0x20/0x20 [ 1130.242179][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1130.247315][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1130.268289][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1130.280675][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1130.286038][ T27] ? wait_for_completion+0x276/0x5a0 [ 1130.308112][ T27] wait_for_completion+0x2c7/0x5a0 [ 1130.318939][ T27] ? io_schedule+0xd0/0xd0 [ 1130.333333][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1130.345787][ T27] ? debug_object_active_state+0x6a/0x380 [ 1130.351623][ T27] __synchronize_srcu+0x2b9/0x350 [ 1130.370429][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 1130.376281][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 1130.395894][ T27] ? __rwlock_init+0x140/0x140 [ 1130.413655][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1130.429459][ T27] ? synchronize_srcu+0x192/0x1b0 [ 1130.441324][ T27] ? process_one_work+0x7b0/0x1160 [ 1130.447378][ T27] fsnotify_mark_destroy_workfn+0x106/0x2f0 [ 1130.475285][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1130.481298][ T27] ? fsnotify_connector_destroy_workfn+0xa0/0xa0 [ 1130.502828][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1130.514843][ T27] ? process_one_work+0x7b0/0x1160 [ 1130.532731][ T27] process_one_work+0x8a2/0x1160 [ 1130.545308][ T27] ? worker_detach_from_pool+0x240/0x240 [ 1130.560681][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1130.565835][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1130.600295][ T27] ? kthread_data+0x4b/0xc0 [ 1130.619271][ T27] worker_thread+0xaa2/0x1270 [ 1130.634690][ T27] kthread+0x29d/0x330 [ 1130.638859][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 1130.674031][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1130.690531][ T27] ret_from_fork+0x1f/0x30 [ 1130.695092][ T27] [ 1130.713915][ T27] INFO: task kworker/0:8:4350 blocked for more than 145 seconds. [ 1130.731523][ T27] Not tainted syzkaller #0 [ 1130.736554][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1130.772318][ T27] task:kworker/0:8 state:D stack:21808 pid:4350 ppid:2 flags:0x00004000 [ 1130.781669][ T27] Workqueue: events switchdev_deferred_process_work [ 1130.825183][ T27] Call Trace: [ 1130.828557][ T27] [ 1130.831536][ T27] __schedule+0x11d1/0x40e0 [ 1130.857312][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1130.862659][ T27] ? mark_lock+0x94/0x320 [ 1130.867058][ T27] ? __sched_text_start+0x8/0x8 [ 1130.881808][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1130.887134][ T27] schedule+0xb9/0x180 [ 1130.913953][ T27] schedule_preempt_disabled+0xf/0x20 [ 1130.919480][ T27] __mutex_lock+0x562/0xaf0 [ 1130.947957][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 1130.952771][ T27] ? switchdev_deferred_process_work+0xa/0x20 [ 1130.974788][ T27] ? mutex_lock_nested+0x10/0x10 [ 1130.979851][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1130.984784][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1131.017878][ T27] ? process_one_work+0x7b0/0x1160 [ 1131.023106][ T27] switchdev_deferred_process_work+0xa/0x20 [ 1131.056239][ T27] process_one_work+0x8a2/0x1160 [ 1131.088021][ T27] ? worker_detach_from_pool+0x240/0x240 [ 1131.099122][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1131.116755][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1131.122461][ T27] ? kthread_data+0x4b/0xc0 [ 1131.174510][ T27] worker_thread+0xaa2/0x1270 [ 1131.183526][ T27] kthread+0x29d/0x330 [ 1131.187681][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 1131.222448][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1131.227160][ T27] ret_from_fork+0x1f/0x30 [ 1131.242042][ T27] [ 1131.245224][ T27] INFO: task kworker/u4:20:9223 blocked for more than 145 seconds. [ 1131.268876][ T27] Not tainted syzkaller #0 [ 1131.273922][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1131.306286][ T27] task:kworker/u4:20 state:D stack:23888 pid:9223 ppid:2 flags:0x00004000 [ 1131.315610][ T27] Workqueue: events_unbound linkwatch_event [ 1131.370168][ T27] Call Trace: [ 1131.373556][ T27] [ 1131.376555][ T27] __schedule+0x11d1/0x40e0 [ 1131.402479][ T27] ? __sched_text_start+0x8/0x8 [ 1131.407460][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1131.434313][ T27] ? wq_worker_sleeping+0x60/0x280 [ 1131.439546][ T27] schedule+0xb9/0x180 [ 1131.443775][ T27] schedule_preempt_disabled+0xf/0x20 [ 1131.480342][ T27] __mutex_lock+0x562/0xaf0 [ 1131.484976][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 1131.509091][ T27] ? linkwatch_event+0xa/0x50 [ 1131.513877][ T27] ? mutex_lock_nested+0x10/0x10 [ 1131.518882][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1131.551833][ T27] ? process_one_work+0x7b0/0x1160 [ 1131.557070][ T27] linkwatch_event+0xa/0x50 [ 1131.561712][ T27] process_one_work+0x8a2/0x1160 [ 1131.605294][ T27] ? worker_detach_from_pool+0x240/0x240 [ 1131.611058][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1131.648224][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1131.653922][ T27] ? kthread_data+0x4b/0xc0 [ 1131.658569][ T27] worker_thread+0xaa2/0x1270 [ 1131.690794][ T27] kthread+0x29d/0x330 [ 1131.694961][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 1131.700119][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1131.733521][ T27] ret_from_fork+0x1f/0x30 [ 1131.738101][ T27] [ 1131.741176][ T27] INFO: task kworker/u4:23:9230 blocked for more than 146 seconds. [ 1131.776536][ T27] Not tainted syzkaller #0 [ 1131.781832][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1131.830735][ T27] task:kworker/u4:23 state:D stack:24784 pid:9230 ppid:2 flags:0x00004000 [ 1131.840253][ T27] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 1131.875174][ T27] Call Trace: [ 1131.878648][ T27] [ 1131.881625][ T27] __schedule+0x11d1/0x40e0 [ 1131.916240][ T27] ? __sched_text_start+0x8/0x8 [ 1131.921221][ T27] ? kthread_data+0x4b/0xc0 [ 1131.936555][ T27] ? wq_worker_sleeping+0x60/0x280 [ 1131.941797][ T27] schedule+0xb9/0x180 [ 1131.945930][ T27] schedule_timeout+0xbd/0x2d0 [ 1131.957903][ T27] ? console_conditional_schedule+0x40/0x40 [ 1131.963904][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1131.986803][ T27] ? lock_chain_count+0x20/0x20 [ 1131.997978][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1132.003208][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1132.008819][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1132.031306][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1132.042719][ T27] ? wait_for_completion+0x276/0x5a0 [ 1132.048169][ T27] wait_for_completion+0x2c7/0x5a0 [ 1132.053357][ T27] ? io_schedule+0xd0/0xd0 [ 1132.075583][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1132.081581][ T27] ? debug_object_active_state+0x6a/0x380 [ 1132.105082][ T27] __synchronize_srcu+0x2b9/0x350 [ 1132.123138][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 1132.142212][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 1132.147962][ T27] ? __rwlock_init+0x140/0x140 [ 1132.160612][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1132.167653][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1132.180266][ T27] ? synchronize_srcu+0x192/0x1b0 [ 1132.186220][ T27] ? process_one_work+0x7b0/0x1160 [ 1132.191417][ T27] fsnotify_connector_destroy_workfn+0x40/0xa0 [ 1132.208542][ T27] ? process_one_work+0x7b0/0x1160 [ 1132.213779][ T27] process_one_work+0x8a2/0x1160 [ 1132.225655][ T27] ? worker_detach_from_pool+0x240/0x240 [ 1132.231409][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1132.244331][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1132.252288][ T27] ? kthread_data+0x4b/0xc0 [ 1132.256925][ T27] worker_thread+0xaa2/0x1270 [ 1132.268180][ T27] kthread+0x29d/0x330 [ 1132.272368][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 1132.277542][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1132.288737][ T27] ret_from_fork+0x1f/0x30 [ 1132.295151][ T27] [ 1132.298317][ T27] INFO: task kworker/u4:28:9242 blocked for more than 146 seconds. [ 1132.313672][ T27] Not tainted syzkaller #0 [ 1132.318697][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1132.334030][ T27] task:kworker/u4:28 state:D stack:21904 pid:9242 ppid:2 flags:0x00004000 [ 1132.349892][ T27] Workqueue: netns cleanup_net [ 1132.359180][ T27] Call Trace: [ 1132.362551][ T27] [ 1132.370968][ T27] __schedule+0x11d1/0x40e0 [ 1132.378179][ T27] ? __sched_text_start+0x8/0x8 [ 1132.383202][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1132.393884][ T27] ? wq_worker_sleeping+0x60/0x280 [ 1132.402119][ T27] schedule+0xb9/0x180 [ 1132.406295][ T27] schedule_preempt_disabled+0xf/0x20 [ 1132.419625][ T27] __mutex_lock+0x562/0xaf0 [ 1132.424289][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 1132.435274][ T27] ? synchronize_rcu_expedited+0x3c0/0x890 [ 1132.446752][ T27] ? mutex_lock_nested+0x10/0x10 [ 1132.456993][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 1132.465491][ T27] ? __rwlock_init+0x140/0x140 [ 1132.470360][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1132.482221][ T27] synchronize_rcu_expedited+0x3c0/0x890 [ 1132.487975][ T27] ? synchronize_rcu+0x3f0/0x3f0 [ 1132.499519][ T27] ? finish_task_switch+0x265/0x8f0 [ 1132.507038][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1132.512337][ T27] ? finish_task_switch+0x265/0x8f0 [ 1132.524823][ T27] ? __sched_text_start+0x8/0x8 [ 1132.529874][ T27] synchronize_rcu+0x128/0x3f0 [ 1132.534719][ T27] ? schedule_delayed_monitor_work+0x160/0x160 [ 1132.548697][ T27] ? lock_chain_count+0x20/0x20 [ 1132.553664][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1132.565760][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1132.575172][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1132.585666][ T27] lockdep_unregister_key+0x4d2/0x550 [ 1132.597738][ T27] ? lockdep_reset_lock+0x300/0x300 [ 1132.606502][ T27] ? rcu_is_watching+0x11/0xa0 [ 1132.615656][ T27] ? qdisc_reset+0x299/0x5c0 [ 1132.620351][ T27] __qdisc_destroy+0x128/0x430 [ 1132.629421][ T27] dev_shutdown+0x92/0x440 [ 1132.638873][ T27] unregister_netdevice_many_notify+0xa76/0x19c0 [ 1132.649074][ T27] ? unregister_netdevice_many+0x20/0x20 [ 1132.658929][ T27] ? unregister_netdevice_queue+0x1aa/0x370 [ 1132.668415][ T27] ? list_netdevice+0x6c0/0x6c0 [ 1132.673382][ T27] ? br_dev_delete+0xde/0x110 [ 1132.696012][ T27] default_device_exit_batch+0x9ea/0xa80 [ 1132.701763][ T27] ? __might_sleep+0xd0/0xd0 [ 1132.717622][ T27] ? net_rps_action_and_irq_enable+0x200/0x200 [ 1132.723884][ T27] ? rdma_dev_init_net+0x270/0x270 [ 1132.738893][ T27] ? net_rps_action_and_irq_enable+0x200/0x200 [ 1132.746164][ T27] cleanup_net+0x791/0xba0 [ 1132.757066][ T27] ? ops_free_list+0x3b0/0x3b0 [ 1132.763877][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1132.769864][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1132.780628][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1132.786791][ T27] ? process_one_work+0x7b0/0x1160 [ 1132.798670][ T27] process_one_work+0x8a2/0x1160 [ 1132.806792][ T27] ? worker_detach_from_pool+0x240/0x240 [ 1132.812623][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1132.827202][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1132.832856][ T27] ? kthread_data+0x4b/0xc0 [ 1132.842538][ T27] worker_thread+0xaa2/0x1270 [ 1132.854133][ T27] kthread+0x29d/0x330 [ 1132.862187][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 1132.871635][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1132.876322][ T27] ret_from_fork+0x1f/0x30 [ 1132.885016][ T27] [ 1132.891650][ T27] INFO: task syz-executor:11549 blocked for more than 147 seconds. [ 1132.905057][ T27] Not tainted syzkaller #0 [ 1132.914962][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1132.929475][ T27] task:syz-executor state:D stack:22096 pid:11549 ppid:1 flags:0x00004004 [ 1132.946967][ T27] Call Trace: [ 1132.950336][ T27] [ 1132.959273][ T27] __schedule+0x11d1/0x40e0 [ 1132.968780][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1132.978539][ T27] ? __sched_text_start+0x8/0x8 [ 1132.983495][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 1132.992781][ T27] ? prepare_to_wait_event+0x430/0x470 [ 1133.002457][ T27] schedule+0xb9/0x180 [ 1133.010123][ T27] synchronize_rcu_expedited+0x7ad/0x890 [ 1133.019311][ T27] ? synchronize_rcu+0x3f0/0x3f0 [ 1133.024410][ T27] ? wake_bit_function+0x200/0x200 [ 1133.036382][ T27] ? namespace_unlock+0x1d7/0x430 [ 1133.044745][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 1133.058077][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1133.064255][ T27] ? shrink_dentry_list+0x688/0x6a0 [ 1133.078446][ T27] ? up_write+0x1bb/0x420 [ 1133.083782][ T27] namespace_unlock+0x23f/0x430 [ 1133.088713][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 1133.101508][ T27] ? umount_tree+0xe20/0xe20 [ 1133.106199][ T27] ? umount_mnt+0x2c0/0x2c0 [ 1133.110762][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1133.124225][ T27] path_umount+0xf19/0xf90 [ 1133.128751][ T27] ? __x64_sys_umount+0x12d/0x170 [ 1133.140032][ T27] ? may_mount+0x90/0x90 [ 1133.146787][ T27] ? kmem_cache_free+0xf7/0x290 [ 1133.151732][ T27] __x64_sys_umount+0x12d/0x170 [ 1133.164239][ T27] ? path_umount+0xf90/0xf90 [ 1133.173375][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1133.184407][ T27] do_syscall_64+0x4c/0xa0 [ 1133.193494][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1133.203087][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1133.207864][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.217039][ T27] RIP: 0033:0x7f9fe679da57 [ 1133.226868][ T27] RSP: 002b:00007ffd6ac81668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1133.238753][ T27] RAX: ffffffffffffffda RBX: 00007f9fe6832048 RCX: 00007f9fe679da57 [ 1133.251597][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6ac81720 [ 1133.259647][ T27] RBP: 00007ffd6ac81720 R08: 00007ffd6ac82720 R09: 00000000ffffffff [ 1133.274170][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6ac827b0 [ 1133.282259][ T27] R13: 00007f9fe6832048 R14: 00000000000df4c6 R15: 00007ffd6ac827f0 [ 1133.300728][ T27] [ 1133.303871][ T27] INFO: task udevd:11717 blocked for more than 147 seconds. [ 1133.319157][ T27] Not tainted syzkaller #0 [ 1133.324191][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1133.340184][ T27] task:udevd state:D stack:24400 pid:11717 ppid:3638 flags:0x00004002 [ 1133.352858][ T27] Call Trace: [ 1133.356207][ T27] [ 1133.366281][ T27] __schedule+0x11d1/0x40e0 [ 1133.373955][ T27] ? __sched_text_start+0x8/0x8 [ 1133.378906][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1133.389639][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1133.399674][ T27] schedule+0xb9/0x180 [ 1133.408757][ T27] schedule_preempt_disabled+0xf/0x20 [ 1133.419780][ T27] __mutex_lock+0x562/0xaf0 [ 1133.429550][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 1133.438093][ T27] ? uevent_show+0x16c/0x320 [ 1133.442790][ T27] ? mutex_lock_nested+0x10/0x10 [ 1133.456736][ T27] uevent_show+0x16c/0x320 [ 1133.461278][ T27] dev_attr_show+0x50/0xb0 [ 1133.470939][ T27] sysfs_kf_seq_show+0x349/0x4b0 [ 1133.479492][ T27] ? device_get_ownership+0xa0/0xa0 [ 1133.484962][ T27] seq_read_iter+0x49b/0xd50 [ 1133.493789][ T27] ? common_file_perm+0x171/0x1c0 [ 1133.503250][ T27] vfs_read+0x4a7/0xa00 [ 1133.511798][ T27] ? kernel_read+0x1e0/0x1e0 [ 1133.516594][ T27] ? __rseq_handle_notify_resume+0x3a9/0x11f0 [ 1133.527309][ T27] ? __fdget_pos+0x2b5/0x360 [ 1133.538869][ T27] ksys_read+0x14c/0x250 [ 1133.547303][ T27] ? vfs_write+0xa30/0xa30 [ 1133.556875][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1133.566797][ T27] do_syscall_64+0x4c/0xa0 [ 1133.572309][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1133.577073][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1133.581824][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.595562][ T27] RIP: 0033:0x7f1e342a7407 [ 1133.600247][ T27] RSP: 002b:00007ffc06a06320 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1133.612904][ T27] RAX: ffffffffffffffda RBX: 00007f1e349ab880 RCX: 00007f1e342a7407 [ 1133.629858][ T27] RDX: 0000000000001000 RSI: 00005607d2ded550 RDI: 0000000000000008 [ 1133.641341][ T27] RBP: 00007f1e343efff0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.657112][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 1133.665178][ T27] R13: 00007f1e343efea0 R14: 0000000000000000 R15: 00005607d2de40d0 [ 1133.681438][ T27] [ 1133.684554][ T27] INFO: task syz-executor:11982 blocked for more than 148 seconds. [ 1133.696604][ T27] Not tainted syzkaller #0 [ 1133.705806][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1133.718868][ T27] task:syz-executor state:D stack:22640 pid:11982 ppid:1 flags:0x00004004 [ 1133.736173][ T27] Call Trace: [ 1133.739541][ T27] [ 1133.745596][ T27] __schedule+0x11d1/0x40e0 [ 1133.750217][ T27] ? __sched_text_start+0x8/0x8 [ 1133.760024][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1133.771182][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1133.783724][ T27] schedule+0xb9/0x180 [ 1133.792401][ T27] schedule_preempt_disabled+0xf/0x20 [ 1133.802560][ T27] __mutex_lock+0x562/0xaf0 [ 1133.810178][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 1133.814988][ T27] ? rtnetlink_rcv_msg+0x824/0xfc0 [ 1133.825396][ T27] ? mutex_lock_nested+0x10/0x10 [ 1133.833648][ T27] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1133.844620][ T27] rtnetlink_rcv_msg+0x824/0xfc0 [ 1133.852106][ T27] ? rtnetlink_bind+0x80/0x80 [ 1133.856897][ T27] ? mark_lock+0x94/0x320 [ 1133.867217][ T27] ? __lock_acquire+0x12f4/0x7d10 [ 1133.888468][ T27] ? verify_lock_unused+0x140/0x140 [ 1133.900781][ T27] ? netlink_sendmsg+0x654/0xbd0 [ 1133.911840][ T27] ? verify_lock_unused+0x140/0x140 [ 1133.920177][ T27] netlink_rcv_skb+0x1fb/0x450 [ 1133.930179][ T27] ? rtnetlink_bind+0x80/0x80 [ 1133.937365][ T27] ? netlink_ack+0x1170/0x1170 [ 1133.942226][ T27] ? netlink_deliver_tap+0x2e/0x1b0 [ 1133.954538][ T27] netlink_unicast+0x74d/0x8d0 [ 1133.967078][ T27] netlink_sendmsg+0x8ad/0xbd0 [ 1133.971959][ T27] ? netlink_getsockopt+0x550/0x550 [ 1133.977234][ T27] ? aa_sock_msg_perm+0x94/0x150 [ 1133.989506][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1133.994900][ T27] ? security_socket_sendmsg+0x7c/0xa0 [ 1134.009068][ T27] __sys_sendto+0x497/0x650 [ 1134.017604][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 1134.029165][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1134.038294][ T27] ? lock_chain_count+0x20/0x20 [ 1134.051239][ T27] __x64_sys_sendto+0xda/0xf0 [ 1134.059861][ T27] do_syscall_64+0x4c/0xa0 [ 1134.069125][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1134.076894][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1134.081669][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.092735][ T27] RIP: 0033:0x7f2516b5d04e [ 1134.100501][ T27] RSP: 002b:00007ffda0a50958 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1134.113718][ T27] RAX: ffffffffffffffda RBX: 0000555581aa5500 RCX: 00007f2516b5d04e [ 1134.127764][ T27] RDX: 0000000000000084 RSI: 00007f2517944670 RDI: 0000000000000003 [ 1134.135832][ T27] RBP: 0000000000000001 R08: 00007ffda0a509d4 R09: 000000000000000c [ 1134.154748][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1134.166408][ T27] R13: 0000000000000000 R14: 00007f2517944670 R15: 0000000000000000 [ 1134.182107][ T27] [ 1134.185247][ T27] [ 1134.185247][ T27] Showing all locks held in the system: [ 1134.198315][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1134.206761][ T27] #0: ffffffff8cb2df70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1134.225734][ T27] 1 lock held by rcu_tasks_trace/13: [ 1134.231363][ T27] #0: ffffffff8cb2e790 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1134.250395][ T27] 3 locks held by kworker/0:1/14: [ 1134.261413][ T27] #0: ffff888017471938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.279062][ T27] #1: ffffc90000137d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.295082][ T27] #2: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x8e/0xda0 [ 1134.308354][ T27] 1 lock held by khungtaskd/27: [ 1134.317884][ T27] #0: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1134.335591][ T27] 1 lock held by dhcpcd/3933: [ 1134.340387][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x288/0x1af0 [ 1134.352884][ T27] 2 locks held by getty/4027: [ 1134.357640][ T27] #0: ffff88802f186098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1134.379342][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 1134.392461][ T27] 1 lock held by syz-executor/4270: [ 1134.403960][ T27] #0: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1134.423269][ T27] 2 locks held by kworker/u4:8/4337: [ 1134.429561][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.447858][ T27] #1: ffffc90004607d00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.458195][ T27] 3 locks held by kworker/0:8/4350: [ 1134.470177][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.490185][ T27] #1: ffffc90004967d00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.506694][ T27] #2: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 1134.524187][ T27] 1 lock held by syz.3.55/4590: [ 1134.529123][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1134.546685][ T27] 1 lock held by syz.3.191/5139: [ 1134.551707][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1134.565983][ T27] 5 locks held by kworker/1:11/6317: [ 1134.571371][ T27] 1 lock held by syz.3.587/6494: [ 1134.583269][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1134.593499][ T27] 1 lock held by syz.3.732/6992: [ 1134.608143][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1134.617259][ T27] 1 lock held by syz.3.745/7033: [ 1134.632673][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1134.644865][ T27] 1 lock held by syz.3.760/7093: [ 1134.649877][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1134.664207][ T27] 3 locks held by kworker/0:10/7446: [ 1134.669580][ T27] #0: ffff88802efac538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.686139][ T27] #1: ffffc9001c0ffd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.703568][ T27] #2: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 1134.718107][ T27] 1 lock held by syz.3.1318/9050: [ 1134.723207][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1134.747545][ T27] 1 lock held by syz.3.1344/9141: [ 1134.752688][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1134.770212][ T27] 3 locks held by kworker/u4:20/9223: [ 1134.775677][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.792157][ T27] #1: ffffc9000e7d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.807085][ T27] #2: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1134.820412][ T27] 2 locks held by kworker/u4:23/9230: [ 1134.830685][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.845986][ T27] #1: ffffc9000e827d00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.863872][ T27] 5 locks held by kworker/u4:28/9242: [ 1134.879442][ T27] #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.892884][ T27] #1: ffffc9000e8b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1134.908326][ T27] #2: ffffffff8dd3b090 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 1134.924415][ T27] #3: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xee/0xa80 [ 1134.937258][ T27] #4: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1134.954050][ T27] 1 lock held by syz.3.1430/9478: [ 1134.959151][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1134.972004][ T27] 1 lock held by syz.3.1443/9534: [ 1134.977112][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1135.003498][ T27] 1 lock held by syz.3.1733/10497: [ 1135.008707][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1135.027397][ T27] 1 lock held by syz.3.2028/11607: [ 1135.032610][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1135.051185][ T27] 4 locks held by udevd/11717: [ 1135.056088][ T27] #0: ffff88807c937540 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 1135.074847][ T27] #1: ffff88805533c488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x410 [ 1135.086317][ T27] #2: ffff88801c31e830 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0xae/0x410 [ 1135.102314][ T27] #3: ffff88807b23b190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 1135.124175][ T27] 1 lock held by syz-executor/11982: [ 1135.129571][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.145105][ T27] 1 lock held by syz.5.2126/12093: [ 1135.151103][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3fc/0x1e60 [ 1135.171120][ T27] 1 lock held by syz.5.2126/12103: [ 1135.178298][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.194224][ T27] 2 locks held by syz.3.2127/12098: [ 1135.201455][ T27] #0: ffffffff8dd3b090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x32e/0x5b0 [ 1135.216898][ T27] #1: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x240 [ 1135.228926][ T27] 1 lock held by syz-executor/12110: [ 1135.234488][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.257665][ T27] 1 lock held by syz-executor/12112: [ 1135.267848][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.285191][ T27] 1 lock held by syz-executor/12116: [ 1135.290586][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.303272][ T27] 1 lock held by syz-executor/12118: [ 1135.308731][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.325251][ T27] 1 lock held by syz-executor/12121: [ 1135.330633][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.350908][ T27] 1 lock held by syz-executor/12124: [ 1135.361074][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.380515][ T27] 1 lock held by syz-executor/12129: [ 1135.385903][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.401010][ T27] 1 lock held by syz-executor/12131: [ 1135.406388][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.424251][ T27] 1 lock held by syz-executor/12132: [ 1135.429632][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.447793][ T27] 1 lock held by syz-executor/12137: [ 1135.454040][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.470326][ T27] 1 lock held by syz-executor/12140: [ 1135.480136][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.499128][ T27] 1 lock held by syz-executor/12145: [ 1135.504504][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.522426][ T27] 1 lock held by syz-executor/12147: [ 1135.528613][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.545159][ T27] 1 lock held by syz-executor/12149: [ 1135.551437][ T27] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1135.568839][ T27] [ 1135.572866][ T27] ============================================= [ 1135.572866][ T27] [ 1135.589689][ T27] NMI backtrace for cpu 0 [ 1135.594134][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1135.601381][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1135.611519][ T27] Call Trace: [ 1135.614933][ T27] [ 1135.617921][ T27] dump_stack_lvl+0x188/0x24e [ 1135.622661][ T27] ? irq_work_queue+0xb8/0x140 [ 1135.627491][ T27] ? show_regs_print_info+0x12/0x12 [ 1135.632749][ T27] ? load_image+0x400/0x400 [ 1135.637303][ T27] ? vprintk_emit+0x59f/0x6a0 [ 1135.642045][ T27] ? printk_sprint+0x460/0x460 [ 1135.646905][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 1135.651917][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1135.658145][ T27] ? _printk+0xda/0x130 [ 1135.662439][ T27] ? load_image+0x400/0x400 [ 1135.667001][ T27] ? load_image+0x400/0x400 [ 1135.671558][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1135.677694][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1135.683820][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1135.689860][ T27] watchdog+0xeee/0xf30 [ 1135.694080][ T27] ? watchdog+0x1ed/0xf30 [ 1135.698473][ T27] kthread+0x29d/0x330 [ 1135.702595][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1135.707934][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1135.712571][ T27] ret_from_fork+0x1f/0x30 [ 1135.717053][ T27] [ 1135.720856][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1135.726115][ C1] NMI backtrace for cpu 1 [ 1135.726127][ C1] CPU: 1 PID: 6317 Comm: kworker/1:11 Not tainted syzkaller #0 [ 1135.726147][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1135.726160][ C1] Workqueue: usb_hub_wq hub_event [ 1135.726188][ C1] RIP: 0010:__lock_acquire+0x549/0x7d10 [ 1135.726218][ C1] Code: 81 e3 ff 1f 00 00 41 c1 ed 03 41 81 e5 f8 03 00 00 49 8d bd 40 92 af 90 be 08 00 00 00 e8 af 3b 6f 00 48 0f a3 1d c7 4a 4b 0f <73> 1f 48 8d 04 5b c1 e0 06 48 8d 98 00 11 48 90 48 ba 00 00 00 00 [ 1135.726239][ C1] RSP: 0018:ffffc900001e0360 EFLAGS: 00000057 [ 1135.726253][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81644771 [ 1135.726266][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90af9240 [ 1135.726278][ C1] RBP: ffffc900001e05b0 R08: ffffffff90af9247 R09: 1ffffffff215f248 [ 1135.726292][ C1] R10: dffffc0000000000 R11: fffffbfff215f249 R12: ffff8880276abb80 [ 1135.726305][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1135.726317][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1135.726332][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1135.726345][ C1] CR2: 00007f5b2f2e4de0 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 1135.726362][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1135.726372][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1135.726384][ C1] Call Trace: [ 1135.726389][ C1] [ 1135.726401][ C1] ? arch_stack_walk+0x10c/0x140 [ 1135.726429][ C1] ? stack_trace_save+0xa6/0xf0 [ 1135.726452][ C1] ? verify_lock_unused+0x140/0x140 [ 1135.726477][ C1] ? __stack_depot_save+0x35/0x460 [ 1135.726508][ C1] ? kasan_set_track+0x60/0x70 [ 1135.726532][ C1] ? kasan_set_track+0x4b/0x70 [ 1135.726556][ C1] ? kasan_save_free_info+0x2d/0x50 [ 1135.726573][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 1135.726598][ C1] ? slab_free_freelist_hook+0x131/0x1a0 [ 1135.726621][ C1] ? __kmem_cache_free+0xb6/0x1f0 [ 1135.726640][ C1] ? skb_release_data+0x5db/0x7c0 [ 1135.726667][ C1] ? consume_skb+0xa2/0x100 [ 1135.726692][ C1] ? ath6kl_usb_recv_complete+0x1d2/0x4d0 [ 1135.726716][ C1] ? dummy_timer+0x8d0/0x3330 [ 1135.726733][ C1] ? __hrtimer_run_queues+0x54a/0xd50 [ 1135.726754][ C1] ? hrtimer_run_softirq+0x183/0x2a0 [ 1135.726774][ C1] ? handle_softirqs+0x2a1/0x930 [ 1135.726793][ C1] lock_acquire+0x1bb/0x4a0 [ 1135.726817][ C1] ? debug_check_no_obj_freed+0x136/0x530 [ 1135.726839][ C1] ? ath6kl_usb_post_recv_transfers+0x3cd/0x6f0 [ 1135.726863][ C1] ? ath6kl_usb_power_on+0x66/0x280 [ 1135.726885][ C1] ? driver_probe_device+0x4f/0x420 [ 1135.726909][ C1] ? __device_attach_driver+0x2c6/0x510 [ 1135.726933][ C1] ? bus_for_each_drv+0x184/0x210 [ 1135.726953][ C1] ? __device_attach+0x2a8/0x480 [ 1135.726976][ C1] ? bus_probe_device+0xbc/0x1e0 [ 1135.726996][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1135.727021][ C1] ? usb_probe_device+0x139/0x270 [ 1135.727041][ C1] ? really_probe+0x2aa/0xc70 [ 1135.727064][ C1] ? __driver_probe_device+0x18c/0x330 [ 1135.727087][ C1] ? driver_probe_device+0x4f/0x420 [ 1135.727111][ C1] ? __device_attach_driver+0x2c6/0x510 [ 1135.727135][ C1] ? __device_attach+0x2a8/0x480 [ 1135.727157][ C1] ? bus_probe_device+0xbc/0x1e0 [ 1135.727176][ C1] ? device_add+0xa00/0xfb0 [ 1135.727192][ C1] ? hub_event+0x2dcf/0x5560 [ 1135.727216][ C1] ? process_one_work+0x8a2/0x1160 [ 1135.727244][ C1] ? worker_thread+0xaa2/0x1270 [ 1135.727266][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 1135.727286][ C1] ? debug_check_no_obj_freed+0x136/0x530 [ 1135.727308][ C1] ? _raw_spin_lock+0x40/0x40 [ 1135.727332][ C1] debug_check_no_obj_freed+0x136/0x530 [ 1135.727354][ C1] ? skb_release_data+0x5db/0x7c0 [ 1135.727383][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 1135.727408][ C1] ? ath6kl_usb_recv_complete+0x1d2/0x4d0 [ 1135.727430][ C1] kmem_cache_free+0xf7/0x290 [ 1135.727451][ C1] ath6kl_usb_recv_complete+0x1d2/0x4d0 [ 1135.727477][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 1135.727507][ C1] dummy_timer+0x8d0/0x3330 [ 1135.727535][ C1] ? mark_lock+0x94/0x320 [ 1135.727562][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1135.727588][ C1] ? lock_chain_count+0x20/0x20 [ 1135.727617][ C1] ? dummy_free_streams+0x530/0x530 [ 1135.727639][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 1135.727662][ C1] ? dummy_free_streams+0x530/0x530 [ 1135.727684][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1135.727703][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1135.727731][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 1135.727754][ C1] handle_softirqs+0x2a1/0x930 [ 1135.727773][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1135.727792][ C1] ? do_softirq+0x210/0x210 [ 1135.727810][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1135.727829][ C1] __irq_exit_rcu+0x13b/0x230 [ 1135.727846][ C1] ? irq_exit_rcu+0x20/0x20 [ 1135.727867][ C1] irq_exit_rcu+0x5/0x20 [ 1135.727882][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1135.727903][ C1] [ 1135.727908][ C1] [ 1135.727914][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1135.727939][ C1] RIP: 0010:unwind_next_frame+0xa1b/0x20b0 [ 1135.727961][ C1] Code: 00 00 fc ff df 48 8b 4c 24 18 0f b6 04 01 84 c0 0f 85 84 11 00 00 83 3b 00 0f 95 c0 49 39 ee 0f 96 c1 20 c1 49 39 ef 0f 97 c0 <20> c8 3c 01 75 18 48 8d 45 08 4c 39 f0 0f 97 c1 4c 39 f8 0f 96 c0 [ 1135.727976][ C1] RSP: 0018:ffffc9000347e6d0 EFLAGS: 00000206 [ 1135.727990][ C1] RAX: 0000000000000001 RBX: ffffc9000347e7a8 RCX: 1ffff9200068fc01 [ 1135.728003][ C1] RDX: ffffc9000347efa8 RSI: ffffffff8e67a57c RDI: ffffffff81391adf [ 1135.728017][ C1] RBP: ffffc9000347efa0 R08: 0000000000000001 R09: 0000000000000008 [ 1135.728029][ C1] R10: dffffc0000000000 R11: fffff5200068fd01 R12: 1ffff9200068fcf6 [ 1135.728042][ C1] R13: 1ffff9200068fcf7 R14: ffffc90003478000 R15: ffffc90003480000 [ 1135.728060][ C1] ? unwind_next_frame+0xaf/0x20b0 [ 1135.728086][ C1] ? usb_probe_interface+0x5c5/0xb20 [ 1135.728109][ C1] ? stack_trace_save+0xf0/0xf0 [ 1135.728131][ C1] arch_stack_walk+0x10c/0x140 [ 1135.728154][ C1] ? usb_probe_interface+0x5c5/0xb20 [ 1135.728176][ C1] stack_trace_save+0xa6/0xf0 [ 1135.728199][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1135.728230][ C1] ? memset+0x1e/0x40 [ 1135.728247][ C1] kasan_set_track+0x4b/0x70 [ 1135.728271][ C1] ? kasan_set_track+0x4b/0x70 [ 1135.728293][ C1] ? __kasan_kmalloc+0x8e/0xa0 [ 1135.728318][ C1] ? dummy_urb_enqueue+0x78/0x770 [ 1135.728335][ C1] ? usb_hcd_submit_urb+0x30f/0x19c0 [ 1135.728361][ C1] ? ath6kl_usb_post_recv_transfers+0x3cd/0x6f0 [ 1135.728384][ C1] ? ath6kl_usb_power_on+0x66/0x280 [ 1135.728404][ C1] ? ath6kl_core_init+0x1d6/0x1090 [ 1135.728424][ C1] ? ath6kl_usb_probe+0x144a/0x1540 [ 1135.728444][ C1] ? usb_probe_interface+0x5c5/0xb20 [ 1135.728482][ C1] ? rcu_is_watching+0x11/0xa0 [ 1135.728509][ C1] __kasan_kmalloc+0x8e/0xa0 [ 1135.728535][ C1] dummy_urb_enqueue+0x78/0x770 [ 1135.728556][ C1] usb_hcd_submit_urb+0x30f/0x19c0 [ 1135.728587][ C1] ath6kl_usb_post_recv_transfers+0x3cd/0x6f0 [ 1135.728617][ C1] ath6kl_usb_power_on+0x66/0x280 [ 1135.728639][ C1] ath6kl_core_init+0x1d6/0x1090 [ 1135.728659][ C1] ? free_zapped_rcu+0x1f0/0x1f0 [ 1135.728689][ C1] ? ath6kl_core_rx_complete+0x70/0x70 [ 1135.728708][ C1] ? ath6kl_core_create+0x7d6/0x980 [ 1135.728729][ C1] ? memcpy+0x3c/0x60 [ 1135.728745][ C1] ? ath6kl_core_create+0x7d6/0x980 [ 1135.728767][ C1] ath6kl_usb_probe+0x144a/0x1540 [ 1135.728795][ C1] usb_probe_interface+0x5c5/0xb20 [ 1135.728819][ C1] ? usb_register_driver+0x3d0/0x3d0 [ 1135.728839][ C1] really_probe+0x2aa/0xc70 [ 1135.728864][ C1] ? pm_runtime_barrier+0x147/0x1c0 [ 1135.728888][ C1] __driver_probe_device+0x18c/0x330 [ 1135.728913][ C1] driver_probe_device+0x4f/0x420 [ 1135.728938][ C1] __device_attach_driver+0x2c6/0x510 [ 1135.728962][ C1] ? coredump_store+0x90/0x90 [ 1135.728986][ C1] bus_for_each_drv+0x184/0x210 [ 1135.729007][ C1] ? coredump_store+0x90/0x90 [ 1135.729030][ C1] ? subsys_find_device_by_id+0x360/0x360 [ 1135.729056][ C1] __device_attach+0x2a8/0x480 [ 1135.729080][ C1] ? device_attach+0x20/0x20 [ 1135.729103][ C1] ? kobject_uevent_env+0x35f/0x8a0 [ 1135.729126][ C1] bus_probe_device+0xbc/0x1e0 [ 1135.729146][ C1] ? device_add+0x97c/0xfb0 [ 1135.729163][ C1] device_add+0xa00/0xfb0 [ 1135.729183][ C1] usb_set_configuration+0x1991/0x1fd0 [ 1135.729214][ C1] usb_generic_driver_probe+0x89/0x150 [ 1135.729239][ C1] usb_probe_device+0x139/0x270 [ 1135.729261][ C1] ? usb_register_device_driver+0x230/0x230 [ 1135.729281][ C1] really_probe+0x2aa/0xc70 [ 1135.729306][ C1] ? pm_runtime_barrier+0x147/0x1c0 [ 1135.729328][ C1] __driver_probe_device+0x18c/0x330 [ 1135.729353][ C1] driver_probe_device+0x4f/0x420 [ 1135.729379][ C1] __device_attach_driver+0x2c6/0x510 [ 1135.729403][ C1] ? coredump_store+0x90/0x90 [ 1135.729428][ C1] bus_for_each_drv+0x184/0x210 [ 1135.729449][ C1] ? coredump_store+0x90/0x90 [ 1135.729473][ C1] ? subsys_find_device_by_id+0x360/0x360 [ 1135.729502][ C1] __device_attach+0x2a8/0x480 [ 1135.729525][ C1] ? device_attach+0x20/0x20 [ 1135.729547][ C1] ? __kmem_cache_free+0xb6/0x1f0 [ 1135.729568][ C1] ? kobject_uevent_env+0x35f/0x8a0 [ 1135.729590][ C1] bus_probe_device+0xbc/0x1e0 [ 1135.729609][ C1] ? device_add+0x97c/0xfb0 [ 1135.729627][ C1] device_add+0xa00/0xfb0 [ 1135.729647][ C1] usb_new_device+0xd66/0x1650 [ 1135.729675][ C1] ? lock_chain_count+0x20/0x20 [ 1135.729699][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 1135.729723][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1135.729743][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1135.729770][ C1] hub_event+0x2dcf/0x5560 [ 1135.729813][ C1] ? hub_post_resume+0x120/0x120 [ 1135.729838][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1135.729863][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1135.729884][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1135.729904][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1135.729925][ C1] ? process_one_work+0x7b0/0x1160 [ 1135.729945][ C1] process_one_work+0x8a2/0x1160 [ 1135.729971][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1135.729995][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1135.730015][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1135.730035][ C1] ? kthread_data+0x4b/0xc0 [ 1135.730064][ C1] worker_thread+0xaa2/0x1270 [ 1135.730089][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1135.730112][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1135.730140][ C1] kthread+0x29d/0x330 [ 1135.730154][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 1135.730174][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1135.730191][ C1] ret_from_fork+0x1f/0x30 [ 1135.730220][ C1] [ 1136.847876][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1136.854817][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1136.862087][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1136.872196][ T27] Call Trace: [ 1136.875529][ T27] [ 1136.878503][ T27] dump_stack_lvl+0x188/0x24e [ 1136.883246][ T27] ? memcpy+0x3c/0x60 [ 1136.887280][ T27] ? show_regs_print_info+0x12/0x12 [ 1136.892540][ T27] ? load_image+0x400/0x400 [ 1136.897130][ T27] panic+0x2e5/0x730 [ 1136.901090][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1136.906829][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1136.911386][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 1136.916996][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1136.923216][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1136.929459][ T27] watchdog+0xf2d/0xf30 [ 1136.933672][ T27] ? watchdog+0x1ed/0xf30 [ 1136.938068][ T27] kthread+0x29d/0x330 [ 1136.942179][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1136.947346][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1136.952002][ T27] ret_from_fork+0x1f/0x30 [ 1136.956484][ T27] [ 1136.960128][ T27] Kernel Offset: disabled [ 1136.964475][ T27] Rebooting in 86400 seconds..