last executing test programs: 4m4.997617481s ago: executing program 1 (id=1545): syz_open_dev$vim2m(0x0, 0x7f, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) 4m3.307269236s ago: executing program 1 (id=1547): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 3m57.52919668s ago: executing program 1 (id=1559): socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) pipe2$9p(&(0x7f0000001900), 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)=ANY=[], 0x0) 3m55.713926677s ago: executing program 1 (id=1564): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x7, 0xa, 0x20, 0x80}, {0x1000000003ff, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0x1}, 0x7, 0x0, 0x1}, {{@in6=@mcast2, 0x4d6, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x7, 0x78}}, 0xe8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) 3m54.717494962s ago: executing program 1 (id=1568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) 3m51.071650954s ago: executing program 1 (id=1571): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x802, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) unshare(0x2000400) openat$uhid(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x80000001, 0x7c5, 0x1, 0x3, 0xd59f81, 0x8, 0x5, 0xb, 0xc, 0x9, 0x1, 0x2, 0xb0c, 0x8000, 0x3d, 0x45, {0x84, 0x7fff}, 0x6, 0x3}}) 3m35.495030142s ago: executing program 32 (id=1571): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x802, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) unshare(0x2000400) openat$uhid(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x80000001, 0x7c5, 0x1, 0x3, 0xd59f81, 0x8, 0x5, 0xb, 0xc, 0x9, 0x1, 0x2, 0xb0c, 0x8000, 0x3d, 0x45, {0x84, 0x7fff}, 0x6, 0x3}}) 43.637391483s ago: executing program 5 (id=2022): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, 0x0) 42.281319072s ago: executing program 5 (id=2026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 41.340357016s ago: executing program 5 (id=2031): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2fb74000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x1, 0x0) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f00000030c0)={0x765, {"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", 0x1000}}, 0x1006) 37.970621496s ago: executing program 5 (id=2042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x50}, 0x94) dup(0xffffffffffffffff) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) write$tcp_congestion(r5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 35.712336629s ago: executing program 5 (id=2046): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 32.308084319s ago: executing program 5 (id=2053): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000340)='hugetlbfs\x00', 0x80000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresgid(0xffffffffffffffff, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/udp\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 16.330211642s ago: executing program 33 (id=2053): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000340)='hugetlbfs\x00', 0x80000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresgid(0xffffffffffffffff, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/udp\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 11.403152284s ago: executing program 3 (id=2083): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x8000) 11.061334319s ago: executing program 3 (id=2084): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784c", 0x1f) read$dsp(0xffffffffffffffff, &(0x7f0000001380)=""/229, 0xe5) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcb, 0x6f, 0xcf, 0x20, 0x13d8, 0x20, 0xf731, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xe4, 0xd5}}]}}]}}, 0x0) getrusage(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 9.537714651s ago: executing program 4 (id=2087): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 9.443239443s ago: executing program 3 (id=2088): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1/file0\x00', 0x200010, &(0x7f0000000340)={[], [{@euid_eq}]}, 0xfe, 0x57a, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00), &(0x7f0000001c40)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf", 0xc6) bind$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 7.478989891s ago: executing program 3 (id=2089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000073118600000000008510000002000000850000007600000095000810000000009500a50500000000e2044545cfbd17576630"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x5, 0x80000000, 0x8], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.303519944s ago: executing program 4 (id=2091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x50}, 0x94) dup(0xffffffffffffffff) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) write$tcp_congestion(r5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 6.737182452s ago: executing program 2 (id=2092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r3, 0x301, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000300)={[{0x0, 0x8000, 0xe0, 0x3, 0x0, 0xb, 0x4, 0x1, 0x0, 0x2, 0x3, 0x5, 0x7c}, {0x0, 0x0, 0xff, 0xff, 0x4, 0xfe, 0x81, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x8, 0x9, 0xf8, 0x2, 0xfd, 0xfd, 0x0, 0x0, 0xe0ee}], 0x7}) ioperm(0x0, 0x5, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r7, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r7, 0x400, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x7}, 0x94) 6.15389481s ago: executing program 4 (id=2094): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x0, 0x3b, &(0x7f0000002080)={{0x12, 0x1, 0x110, 0x41, 0xa7, 0x38, 0x10, 0xd49, 0x7000, 0x6c67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x8, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0xc6, 0x9, 0x0, 0x91, 0xb0, 0x9b, 0xf6, [@uac_control={{0xa, 0x24, 0x1, 0x53, 0x6}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x3c}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x9], 0x4}]}]}}]}}]}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3c}}, 0x0) 6.101672801s ago: executing program 3 (id=2095): syz_emit_ethernet(0x3e, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd603d14de0008000000000000000900f0a300000000000000fc0000e400"/56], 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@host}) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x8000000000000000) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbff}, 0x1c}}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@local, 0x9}, 0x6, 0x800000000000002, 0x20007fff}) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000300)="aaeee8ffbe4f8c3c92194f810712a9a201f1473eaad089833464cacfe6b0de758de8eacac33c5aa0c9e7c3a5c5f555af80c1e1c1c9deee5f02fb7ba0b5387f0a09b23191ceb5c64d8f120f3b75245900aa82c56499b67427a6887bc232d69c16a1", 0x61) 2.990858087s ago: executing program 2 (id=2096): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x8}}, 0xffffffffffffff61) 2.916081798s ago: executing program 3 (id=2097): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcb, 0x6f, 0xcf, 0x20, 0x13d8, 0x20, 0xf731, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xe4, 0xd5}}]}}]}}, 0x0) getrusage(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2.829545389s ago: executing program 0 (id=2098): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0], 0x40000000000000c8}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[r2], 0x1, 0x800}) 2.629340482s ago: executing program 2 (id=2099): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x49}}, {@nodiscard}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x20000000008d55}}]}, 0x0, 0x480, &(0x7f0000000200)="$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") 2.629110632s ago: executing program 0 (id=2100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 1.550662018s ago: executing program 2 (id=2101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, 0x0) 1.458579819s ago: executing program 0 (id=2102): shmget(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) memfd_create(&(0x7f0000000280)='/dev/loop#\x00', 0x3) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r2, &(0x7f0000000a80), 0x12) 1.39388711s ago: executing program 4 (id=2103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x50}, 0x94) dup(0xffffffffffffffff) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) write$tcp_congestion(r5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 269.339016ms ago: executing program 2 (id=2104): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={r3, 0x0, 0x7c, 0x9, 0x2, [0x0], [0x8, 0x19, 0x7, 0x7ff], [0x1, 0x4, 0xffffffff, 0x3], [0x2, 0x5, 0x0, 0x2]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r4}) 265.895407ms ago: executing program 4 (id=2105): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) flock(r0, 0x1) flock(r1, 0x5) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 204.535117ms ago: executing program 0 (id=2106): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) fcntl$notify(r0, 0x402, 0x848234f1c7d17d24) 199.870248ms ago: executing program 2 (id=2107): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000) 77.456389ms ago: executing program 0 (id=2108): syz_emit_vhci(&(0x7f0000001c40)=ANY=[@ANYBLOB="040f0ccd010604"], 0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) 59.22901ms ago: executing program 0 (id=2109): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000540)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r2}, 0x10) sendmsg$IPSET_CMD_TYPE(r1, 0x0, 0x200000b0) fcntl$setstatus(r1, 0x4, 0x2400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 4 (id=2110): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="a67fb897007b6751f3e2b1782cc5f1f2bf48282a1b87267e56ddd093571f13c27dd02f977d74901c0867d7b7cdfbcd92a8aaebcc69ad3ffe7aaba6a4db89b7bb82f2bddf8988b323bc571c6a48b993a05e00b30a2a03e9dfabb090d2730e78af4c5775ad60c2743addfd16c24ea31a10e3a509146885fc5109b4af74ed0b7a4cd873ccde33ee78f1dca5ffd03a584286468f6bf623dedc85017ea82196ac53d0468411d52c4bbde103e3ea101280d721"], 0xfb, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 249.477481][ T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.491158][ T6084] befs: (nbd3): unable to read superblock [ 250.543603][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 250.543618][ T26] audit: type=1326 audit(1750889772.916:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3df1929 code=0x7ffc0000 [ 250.601307][ T26] audit: type=1326 audit(1750889772.946:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fada3df1929 code=0x7ffc0000 [ 250.750589][ T26] audit: type=1326 audit(1750889772.946:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3df1929 code=0x7ffc0000 [ 250.773790][ T26] audit: type=1326 audit(1750889772.956:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fada3df1929 code=0x7ffc0000 [ 250.797040][ T26] audit: type=1326 audit(1750889772.956:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3df1929 code=0x7ffc0000 [ 251.342345][ T26] audit: type=1326 audit(1750889772.956:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fada3df1929 code=0x7ffc0000 [ 252.178948][ T26] audit: type=1326 audit(1750889772.956:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3df1929 code=0x7ffc0000 [ 252.207573][ T6109] tipc: Enabled bearer , priority 10 [ 252.308882][ T26] audit: type=1326 audit(1750889772.956:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3df1929 code=0x7ffc0000 [ 252.404034][ T26] audit: type=1326 audit(1750889772.956:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fada3df1929 code=0x7ffc0000 [ 252.578691][ T26] audit: type=1326 audit(1750889772.956:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada3df1929 code=0x7ffc0000 [ 252.626948][ T6119] lo speed is unknown, defaulting to 1000 [ 253.322381][ T5271] tipc: Node number set to 3506202081 [ 253.900684][ T6133] befs: (nbd4): No write support. Marking filesystem read-only [ 253.912129][ T150] block nbd4: Attempted send on invalid socket [ 253.918466][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 254.294919][ T6133] befs: (nbd4): unable to read superblock [ 255.792639][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.799705][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.087765][ T6186] befs: (nbd3): No write support. Marking filesystem read-only [ 259.709148][ T150] block nbd3: Attempted send on invalid socket [ 259.715421][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.740658][ T6186] befs: (nbd3): unable to read superblock [ 261.580631][ T1110] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 261.991775][ T1110] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 262.087910][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.469383][ T1110] usb 4-1: config 0 descriptor?? [ 262.780243][ T1110] usb 4-1: selecting invalid altsetting 3 [ 262.908478][ T6202] tmpfs: Unknown parameter 'usrquota' [ 262.981155][ T1110] comedi comedi0: could not set alternate setting 3 in high speed [ 262.990405][ T1110] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 263.004106][ T1110] usbduxsigma: probe of 4-1:0.0 failed with error -22 [ 264.015701][ T21] usb 4-1: USB disconnect, device number 13 [ 267.822411][ T6212] delete_channel: no stack [ 268.251493][ T1110] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 269.561134][ T1110] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 269.590928][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.501880][ T6282] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[6282] [ 270.524429][ T6282] netlink: 'syz.1.575': attribute type 62 has an invalid length. [ 270.914575][ T1110] usb 5-1: config 0 descriptor?? [ 271.053346][ T1110] usb 5-1: can't set config #0, error -71 [ 271.066673][ T1110] usb 5-1: USB disconnect, device number 6 [ 274.385681][ T6338] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 274.603544][ T6338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.664692][ T6343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.810846][ T1108] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 274.932152][ T6343] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 275.270797][ T1108] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 275.292942][ T6343] bond2: (slave ipip0): Error -95 calling set_mac_address [ 275.310990][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.349760][ T1108] usb 2-1: config 0 descriptor?? [ 275.378086][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 275.389774][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 275.403143][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 275.413648][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 275.423669][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 275.433203][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 275.443068][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 275.516918][ T1108] usb 2-1: selecting invalid altsetting 3 [ 275.531163][ T1108] comedi comedi0: could not set alternate setting 3 in high speed [ 275.539214][ T1108] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 275.560824][ T1108] usbduxsigma: probe of 2-1:0.0 failed with error -22 [ 275.717064][ T6344] tmpfs: Unknown parameter 'usrquota' [ 276.545011][ T21] usb 2-1: USB disconnect, device number 5 [ 277.737301][ T5271] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 278.050668][ T5271] usb 5-1: Using ep0 maxpacket: 16 [ 278.190872][ T5271] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 278.214950][ T5271] usb 5-1: config 0 has no interface number 0 [ 278.289246][ T6385] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.607'. [ 278.566160][ T5271] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 278.578016][ T5271] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 278.740656][ T5271] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 278.749988][ T5271] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 278.761458][ T5271] usb 5-1: Product: syz [ 278.765778][ T5271] usb 5-1: Manufacturer: syz [ 278.771010][ T5271] usb 5-1: SerialNumber: syz [ 278.778231][ T5271] usb 5-1: config 0 descriptor?? [ 278.982924][ T5271] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 279.125710][ T6397] befs: (nbd3): No write support. Marking filesystem read-only [ 279.180907][ T150] block nbd3: Attempted send on invalid socket [ 279.187287][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.198406][ T6397] befs: (nbd3): unable to read superblock [ 279.204908][ T5271] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 279.216860][ T5271] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 279.231482][ T5271] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 279.465776][ T5271] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 279.484263][ T5271] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 279.517273][ T5271] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 279.530052][ T5271] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 279.540216][ T5271] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 279.550594][ T5271] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 279.562734][ T5271] usb 5-1: USB disconnect, device number 7 [ 279.582751][ T5271] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 280.582676][ T5271] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 280.597991][ T5271] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 280.621912][ T5271] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 280.653959][ T5271] keyspan 5-1:0.107: device disconnected [ 280.680799][ T6408] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 281.475451][ T6408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.901079][ T4220] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 282.090021][ T6418] bond1: (slave ip6erspan0): making interface the new active one [ 282.338759][ T6418] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 282.460677][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 282.462986][ T4220] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 282.519678][ T4220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.584874][ T4220] usb 5-1: config 0 descriptor?? [ 282.646160][ T4220] usb 5-1: selecting invalid altsetting 3 [ 282.660949][ T4220] comedi comedi0: could not set alternate setting 3 in high speed [ 282.709962][ T4220] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 282.758119][ T4220] usbduxsigma: probe of 5-1:0.0 failed with error -22 [ 282.966306][ T6421] tmpfs: Unknown parameter 'usrquota' [ 283.307946][ T6441] netlink: 'syz.3.623': attribute type 62 has an invalid length. [ 283.680744][ T5271] usb 5-1: USB disconnect, device number 8 [ 284.824850][ T6447] befs: (nbd3): No write support. Marking filesystem read-only [ 284.835573][ T150] block nbd3: Attempted send on invalid socket [ 284.841867][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.853057][ T6447] befs: (nbd3): unable to read superblock [ 286.139671][ T6465] ptrace attach of "./syz-executor exec"[4169] was attempted by "./syz-executor exec"[6465] [ 286.161058][ T6465] netlink: 'syz.4.630': attribute type 62 has an invalid length. [ 288.049502][ T6481] lo speed is unknown, defaulting to 1000 [ 288.543330][ T6486] netlink: 'syz.0.636': attribute type 62 has an invalid length. [ 289.531905][ T5271] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 290.711670][ T5271] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 290.721587][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.754353][ T5271] usb 5-1: config 0 descriptor?? [ 290.834265][ T5271] usb 5-1: selecting invalid altsetting 3 [ 290.840805][ T5271] comedi comedi0: could not set alternate setting 3 in high speed [ 290.848798][ T5271] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 290.860086][ T5271] usbduxsigma: probe of 5-1:0.0 failed with error -22 [ 291.091685][ T6506] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 291.176120][ T6509] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[6509] [ 291.198590][ T6509] netlink: 'syz.1.642': attribute type 62 has an invalid length. [ 291.305428][ T6506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.986751][ T6506] bond1: (slave ip6erspan0): making interface the new active one [ 292.104620][ T6506] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 292.117214][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 292.163786][ T4220] usb 5-1: USB disconnect, device number 9 [ 294.847348][ T6529] lo speed is unknown, defaulting to 1000 [ 296.046025][ T6542] netlink: 'syz.2.650': attribute type 62 has an invalid length. [ 299.005444][ T6577] lo speed is unknown, defaulting to 1000 [ 300.583292][ T6586] netlink: 'syz.2.662': attribute type 62 has an invalid length. [ 304.845745][ T6623] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.670'. [ 305.258688][ T6627] befs: (nbd1): No write support. Marking filesystem read-only [ 305.266830][ T150] block nbd1: Attempted send on invalid socket [ 305.273254][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.284212][ T6627] befs: (nbd1): unable to read superblock [ 305.740421][ T6640] netlink: 'syz.0.674': attribute type 62 has an invalid length. [ 306.959064][ T6648] ptrace attach of "./syz-executor exec"[4181] was attempted by "./syz-executor exec"[6648] [ 306.997817][ T6648] netlink: 'syz.2.678': attribute type 62 has an invalid length. [ 311.012579][ T6697] netlink: 'syz.4.688': attribute type 62 has an invalid length. [ 311.960803][ T6708] ptrace attach of "./syz-executor exec"[4169] was attempted by "./syz-executor exec"[6708] [ 311.981068][ T6708] netlink: 'syz.4.691': attribute type 62 has an invalid length. [ 318.012870][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.019212][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.945615][ T6753] ptrace attach of "./syz-executor exec"[4176] was attempted by "./syz-executor exec"[6753] [ 318.990391][ T6753] netlink: 'syz.0.704': attribute type 62 has an invalid length. [ 321.100771][ T1325] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 321.511275][ T1325] usb 2-1: config 0 has no interfaces? [ 321.830929][ T1325] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 321.830961][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.830981][ T1325] usb 2-1: Product: syz [ 321.830996][ T1325] usb 2-1: Manufacturer: syz [ 321.831011][ T1325] usb 2-1: SerialNumber: syz [ 321.833133][ T1325] usb 2-1: config 0 descriptor?? [ 322.471466][ T6795] netlink: 'syz.3.716': attribute type 62 has an invalid length. [ 323.650715][ T6802] ptrace attach of "./syz-executor exec"[4183] was attempted by "./syz-executor exec"[6802] [ 323.681754][ T6802] netlink: 'syz.3.718': attribute type 62 has an invalid length. [ 324.384520][ T6775] udc-core: couldn't find an available UDC or it's busy [ 324.644971][ T6775] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 324.679730][ T6805] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 325.627321][ T6805] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 327.271304][ T5271] usb 2-1: USB disconnect, device number 6 [ 328.931529][ T1110] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 329.671068][ T1110] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 330.258531][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.470860][ T1110] usb 2-1: config 0 descriptor?? [ 330.472550][ T6860] netlink: 'syz.3.734': attribute type 1 has an invalid length. [ 330.516378][ T1110] usb 2-1: selecting invalid altsetting 3 [ 331.278888][ T6860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.310989][ T1110] comedi comedi0: could not set alternate setting 3 in high speed [ 331.318952][ T1110] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 331.334071][ T1110] usbduxsigma: probe of 2-1:0.0 failed with error -22 [ 331.348876][ T1110] usb 2-1: USB disconnect, device number 7 [ 332.670530][ T1110] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 333.864953][ T1110] usb 2-1: config 0 has no interfaces? [ 334.141803][ T1110] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 334.209224][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.357430][ T1110] usb 2-1: Product: syz [ 334.461716][ T1110] usb 2-1: Manufacturer: syz [ 334.534487][ T1110] usb 2-1: SerialNumber: syz [ 334.983277][ T1110] usb 2-1: config 0 descriptor?? [ 335.679278][ T5271] usb 2-1: USB disconnect, device number 8 [ 336.775525][ T6916] befs: (nbd1): No write support. Marking filesystem read-only [ 336.893080][ T264] block nbd1: Attempted send on invalid socket [ 336.900038][ T264] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.911205][ T6916] befs: (nbd1): unable to read superblock [ 337.237406][ T6921] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 337.274378][ T6921] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 339.819029][ T6953] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.758'. [ 340.000524][ T4220] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 341.080578][ T4220] usb 3-1: config 0 has no interfaces? [ 341.168318][ T6961] ptrace attach of "./syz-executor exec"[4176] was attempted by "./syz-executor exec"[6961] [ 341.192182][ T6961] netlink: 'syz.0.760': attribute type 62 has an invalid length. [ 342.021161][ T4220] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 342.086272][ T4220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.181294][ T4220] usb 3-1: Product: syz [ 342.237831][ T4220] usb 3-1: Manufacturer: syz [ 342.318857][ T4220] usb 3-1: SerialNumber: syz [ 342.418778][ T4220] usb 3-1: config 0 descriptor?? [ 342.720538][ T4282] usb 3-1: USB disconnect, device number 12 [ 344.618638][ T6980] MPTCP: addr_signal error, add_addr=1, echo=0 [ 346.994711][ T7003] ptrace attach of "./syz-executor exec"[4181] was attempted by "./syz-executor exec"[7003] [ 347.025207][ T7003] netlink: 'syz.2.772': attribute type 62 has an invalid length. [ 347.610732][ T4218] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 347.750609][ T1325] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 348.572520][ T4218] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 348.616526][ T4218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.805130][ T4218] usb 2-1: config 0 descriptor?? [ 348.830812][ T1325] usb 5-1: config 0 has no interfaces? [ 349.455567][ T4218] usb 2-1: can't set config #0, error -71 [ 349.871617][ T4218] usb 2-1: USB disconnect, device number 9 [ 350.220670][ T1325] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 351.129379][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.328079][ T1325] usb 5-1: Product: syz [ 351.335521][ T1325] usb 5-1: config 0 descriptor?? [ 351.370668][ T1325] usb 5-1: can't set config #0, error -71 [ 351.387454][ T1325] usb 5-1: USB disconnect, device number 10 [ 353.172264][ T7058] netlink: 'syz.0.788': attribute type 1 has an invalid length. [ 353.580930][ T4218] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 353.872212][ T7058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.000781][ T4218] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 354.054585][ T4218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.381617][ T4218] usb 3-1: config 0 descriptor?? [ 356.480809][ T4218] usb 3-1: can't set config #0, error -71 [ 356.498794][ T4218] usb 3-1: USB disconnect, device number 13 [ 356.551182][ T1110] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 361.950548][ T23] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 362.271009][ T4221] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 362.702065][ T23] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 362.963670][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.024394][ T23] usb 5-1: config 0 descriptor?? [ 363.149607][ T23] usb 5-1: selecting invalid altsetting 3 [ 363.173003][ T23] comedi comedi0: could not set alternate setting 3 in high speed [ 363.233716][ T23] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 363.977515][ T23] usbduxsigma: probe of 5-1:0.0 failed with error -22 [ 364.000638][ T4221] usb 3-1: config 0 has no interfaces? [ 364.065574][ T23] usb 5-1: USB disconnect, device number 11 [ 364.086249][ T7153] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.812'. [ 364.201147][ T4221] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 364.270232][ T4221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.534696][ T4221] usb 3-1: Product: syz [ 364.593567][ T7161] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[7161] [ 364.614097][ T7161] netlink: 'syz.1.813': attribute type 62 has an invalid length. [ 364.625623][ T4221] usb 3-1: Manufacturer: syz [ 364.630577][ T4221] usb 3-1: SerialNumber: syz [ 364.646873][ T4221] usb 3-1: config 0 descriptor?? [ 365.450700][ T4221] usb 3-1: can't set config #0, error -71 [ 365.461606][ T4221] usb 3-1: USB disconnect, device number 14 [ 369.467538][ T1108] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 370.530760][ T1108] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 370.552266][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.577497][ T1108] usb 5-1: config 0 descriptor?? [ 370.699271][ T1108] usb 5-1: selecting invalid altsetting 3 [ 370.777868][ T1108] comedi comedi0: could not set alternate setting 3 in high speed [ 370.873658][ T7205] netlink: 'syz.0.826': attribute type 1 has an invalid length. [ 370.918824][ T1108] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 371.054805][ T7205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.070514][ T1108] usbduxsigma: probe of 5-1:0.0 failed with error -22 [ 371.383738][ T5271] usb 5-1: USB disconnect, device number 12 [ 371.419322][ T7216] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.828'. [ 372.540494][ T1110] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 375.380990][ T1110] usb 1-1: unable to read config index 0 descriptor/all [ 375.408189][ T1110] usb 1-1: can't read configurations, error -71 [ 378.641593][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.648183][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.516582][ T7376] befs: (nbd3): No write support. Marking filesystem read-only [ 389.591063][ T264] block nbd3: Attempted send on invalid socket [ 389.597392][ T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.609160][ T7376] befs: (nbd3): unable to read superblock [ 400.871369][ T7451] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 400.910014][ T7451] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 406.024008][ T7513] ptrace attach of "./syz-executor exec"[4181] was attempted by "./syz-executor exec"[7513] [ 406.046756][ T7513] netlink: 'syz.2.911': attribute type 62 has an invalid length. [ 408.136391][ T7525] usb usb8: usbfs: process 7525 (syz.3.915) did not claim interface 0 before use [ 408.619521][ T7540] capability: warning: `syz.4.918' uses deprecated v2 capabilities in a way that may be insecure [ 410.291285][ T7533] sctp: failed to load transform for md5: -4 [ 414.422804][ T7606] lo speed is unknown, defaulting to 1000 [ 420.400587][ T13] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 421.287017][ T13] usb 1-1: device descriptor read/64, error -71 [ 422.210660][ T13] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 422.410458][ T13] usb 1-1: device descriptor read/64, error -71 [ 423.435174][ T13] usb usb1-port1: attempt power cycle [ 424.422200][ T7694] udc-core: couldn't find an available UDC or it's busy [ 424.560481][ T7694] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 424.810514][ T4220] Bluetooth: hci4: command 0x0405 tx timeout [ 424.860555][ T13] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 424.972483][ T13] usb 1-1: device descriptor read/8, error -71 [ 425.830158][ T7715] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 426.448960][ T7715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.292545][ T7731] netlink: 'syz.4.967': attribute type 62 has an invalid length. [ 427.427078][ T7733] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.974'. [ 427.480543][ T13] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 428.091486][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 428.207424][ T7742] ptrace attach of "./syz-executor exec"[4183] was attempted by "./syz-executor exec"[7742] [ 428.229794][ T7742] netlink: 'syz.3.975': attribute type 62 has an invalid length. [ 429.040699][ T13] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 429.064885][ T13] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.101709][ T13] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.480672][ T13] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.500152][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.517794][ T13] usb 3-1: Product: syz [ 429.532349][ T13] usb 3-1: Manufacturer: syz [ 429.562853][ T13] usb 3-1: SerialNumber: syz [ 430.083490][ T13] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 430.256157][ T7759] netlink: 'syz.3.981': attribute type 1 has an invalid length. [ 430.304726][ T7759] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.600640][ T13] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 432.322937][ T13] usb 3-1: USB disconnect, device number 15 [ 432.506714][ T4372] udevd[4372]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.172580][ T1108] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 433.540633][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 434.695639][ T1108] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 434.705226][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.714319][ T1108] usb 2-1: Product: syz [ 434.718631][ T1108] usb 2-1: Manufacturer: syz [ 434.724065][ T1108] usb 2-1: SerialNumber: syz [ 434.739854][ T1108] r8152-cfgselector 2-1: config 0 descriptor?? [ 435.231631][ T1108] r8152-cfgselector 2-1: Unknown version 0x0000 [ 435.312617][ T1108] r8152-cfgselector 2-1: bad CDC descriptors [ 435.440378][ C1] hrtimer: interrupt took 60324 ns [ 435.471338][ T1108] r8152-cfgselector 2-1: Unknown version 0x0000 [ 435.777104][ T1108] r8152-cfgselector 2-1: USB disconnect, device number 11 [ 436.615793][ T7825] ptrace attach of "./syz-executor exec"[4176] was attempted by "./syz-executor exec"[7825] [ 436.638587][ T7825] netlink: 'syz.0.1000': attribute type 62 has an invalid length. [ 437.522326][ T7833] befs: (nbd0): No write support. Marking filesystem read-only [ 437.531221][ T150] block nbd0: Attempted send on invalid socket [ 437.537623][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.551034][ T7833] befs: (nbd0): unable to read superblock [ 440.016043][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.027031][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.695895][ T7876] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 441.749745][ T7876] 8021q: adding VLAN 0 to HW filter on device bond3 [ 442.369078][ T7892] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[7892] [ 445.997569][ T7922] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 446.088299][ T7922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 446.406956][ T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 446.771042][ T13] usb 4-1: no configurations [ 446.776140][ T13] usb 4-1: can't read configurations, error -22 [ 446.940450][ T13] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 448.040880][ T13] usb 4-1: no configurations [ 448.045865][ T13] usb 4-1: can't read configurations, error -22 [ 448.138929][ T13] usb usb4-port1: attempt power cycle [ 449.221793][ T13] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 449.760496][ T13] usb 4-1: device descriptor read/8, error -71 [ 450.025387][ T7967] netlink: 'syz.3.1038': attribute type 1 has an invalid length. [ 450.536682][ T7967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.543149][ T1108] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 453.615381][ T8017] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 453.794737][ T8017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 455.027957][ T1108] usb 5-1: no configurations [ 455.033864][ T1108] usb 5-1: can't read configurations, error -22 [ 455.231027][ T1108] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 456.120558][ T1108] usb 5-1: device descriptor read/all, error -71 [ 456.130515][ T1108] usb usb5-port1: attempt power cycle [ 458.497956][ T8064] input: syz1 as /devices/virtual/input/input9 [ 458.498679][ T8066] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 458.596162][ T8066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.249041][ T8080] o2cb: This node has not been configured. [ 459.255416][ T8080] o2cb: Cluster check failed. Fix errors before retrying. [ 459.263168][ T8080] (syz.1.1067,8080,0):user_dlm_register:675 ERROR: status = -22 [ 459.271298][ T8080] (syz.1.1067,8080,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 460.700495][ T1108] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 461.900771][ T1108] usb 1-1: no configurations [ 461.907207][ T1108] usb 1-1: can't read configurations, error -22 [ 462.741153][ T1108] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 464.564857][ T8107] befs: (nbd4): No write support. Marking filesystem read-only [ 464.572828][ T150] block nbd4: Attempted send on invalid socket [ 464.579034][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 464.590842][ T8107] befs: (nbd4): unable to read superblock [ 464.692368][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 464.692383][ T26] audit: type=1326 audit(1750893827.069:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 464.760627][ T26] audit: type=1326 audit(1750893827.069:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 464.783681][ T8129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1082'. [ 464.838162][ T26] audit: type=1326 audit(1750893827.069:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 464.873193][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 464.892410][ T26] audit: type=1326 audit(1750893827.069:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 464.945912][ T26] audit: type=1326 audit(1750893827.189:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 465.009045][ T26] audit: type=1326 audit(1750893827.199:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 465.038942][ T8128] syz.0.1082 (8128) used greatest stack depth: 18592 bytes left [ 465.060462][ T26] audit: type=1326 audit(1750893827.239:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 465.140180][ T26] audit: type=1326 audit(1750893827.239:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 465.205786][ T26] audit: type=1326 audit(1750893827.239:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 465.273910][ T26] audit: type=1326 audit(1750893827.239:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.0.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 465.590415][ T1110] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 465.961303][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44855, setting to 1024 [ 466.058681][ T1110] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 466.256966][ T1110] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 466.390480][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.421635][ T1110] usb 3-1: config 0 descriptor?? [ 466.440770][ T8134] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 466.472119][ T1110] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 468.160668][ T1108] usb 3-1: USB disconnect, device number 16 [ 470.710483][ T5271] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 470.970456][ T5271] usb 2-1: Using ep0 maxpacket: 32 [ 471.100752][ T5271] usb 2-1: config 8 has an invalid interface number: 203 but max is 0 [ 471.109331][ T5271] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 471.120147][ T5271] usb 2-1: config 8 has no interface number 0 [ 471.126887][ T5271] usb 2-1: config 8 interface 203 altsetting 1 has an invalid endpoint with address 0x93, skipping [ 471.138211][ T5271] usb 2-1: config 8 interface 203 altsetting 1 endpoint 0xB has invalid wMaxPacketSize 0 [ 471.149337][ T5271] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 0 [ 471.159955][ T5271] usb 2-1: config 8 interface 203 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.180057][ T5271] usb 2-1: config 8 interface 203 has no altsetting 0 [ 471.340615][ T5271] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 471.353261][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.366793][ T5271] usb 2-1: Product: syz [ 471.374620][ T5271] usb 2-1: Manufacturer: syz [ 471.400824][ T5271] usb 2-1: SerialNumber: syz [ 471.521955][ T8177] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 471.823130][ T5271] port100 2-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 471.857150][ T5271] usb 2-1: USB disconnect, device number 12 [ 471.948374][ T8197] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1103'. [ 472.990468][ T23] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 473.090150][ T1108] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 473.410688][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44855, setting to 1024 [ 473.422531][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 473.433138][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 473.442629][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.453494][ T23] usb 1-1: config 0 descriptor?? [ 473.460715][ T1108] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 473.470870][ T8200] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 473.498109][ T23] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 473.621012][ T1108] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 473.630250][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.644858][ T1108] usb 5-1: Product: syz [ 473.649152][ T1108] usb 5-1: Manufacturer: syz [ 473.655469][ T1108] usb 5-1: SerialNumber: syz [ 473.677909][ T1108] usb 5-1: config 0 descriptor?? [ 475.050138][ T1108] usb 1-1: USB disconnect, device number 24 [ 475.140496][ T4218] Bluetooth: hci4: command 0x0405 tx timeout [ 475.950641][ T1108] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 476.201112][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 476.385312][ T1108] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 476.585089][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'. [ 476.850545][ T1108] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 476.862921][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 476.880820][ T1108] usb 1-1: Product: syz [ 476.888282][ T1108] usb 1-1: Manufacturer: syz [ 476.897334][ T1108] usb 1-1: SerialNumber: syz [ 476.947461][ T1108] usb 1-1: config 0 descriptor?? [ 476.980766][ T8242] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 478.292001][ T1108] hub 1-1:0.0: bad descriptor, ignoring hub [ 478.308352][ T1108] hub: probe of 1-1:0.0 failed with error -5 [ 479.341458][ T1108] usb 1-1: USB disconnect, device number 25 [ 481.384305][ T8288] 9pnet_virtio: no channels available for device 127.0.0.1 [ 481.665344][ T8290] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1129'. [ 483.166080][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1135'. [ 484.897148][ T8331] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 485.021131][ T8336] device virt_wifi0 entered promiscuous mode [ 486.341159][ T4218] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 486.407790][ T8348] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 486.839452][ T4218] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 486.848666][ T4218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.859229][ T4218] usb 1-1: config 0 descriptor?? [ 486.919079][ T4218] usb 1-1: selecting invalid altsetting 3 [ 486.950553][ T4218] comedi comedi0: could not set alternate setting 3 in high speed [ 487.039558][ T4218] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 487.082537][ T4218] usbduxsigma: probe of 1-1:0.0 failed with error -22 [ 488.623147][ T1108] usb 1-1: USB disconnect, device number 26 [ 490.642208][ T8407] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1161'. [ 493.110497][ T4221] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 493.280466][ T1108] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 493.400433][ T4221] usb 4-1: Using ep0 maxpacket: 16 [ 493.521037][ T4221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.544136][ T4221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.566252][ T4221] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 493.580974][ T4221] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 493.591208][ T4221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.610146][ T4221] usb 4-1: config 0 descriptor?? [ 493.670654][ T1108] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 493.685152][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.714629][ T1108] usb 1-1: config 0 descriptor?? [ 493.765774][ T1108] usb 1-1: selecting invalid altsetting 3 [ 493.790491][ T1108] comedi comedi0: could not set alternate setting 3 in high speed [ 493.812165][ T1108] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 493.837921][ T1108] usbduxsigma: probe of 1-1:0.0 failed with error -22 [ 494.095068][ T4221] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 494.113843][ T4221] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 494.138568][ T4221] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 494.156785][ T4221] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 494.176536][ T4221] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 494.196760][ T4221] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 494.215143][ T4221] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 494.240801][ T4221] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 494.264669][ T4221] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 494.291245][ T8432] udc-core: couldn't find an available UDC or it's busy [ 494.308247][ T8432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 494.316225][ T4221] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 494.326382][ T8432] udc-core: couldn't find an available UDC or it's busy [ 494.339929][ T4221] HID 045e:07da: Invalid code 65791 type 1 [ 494.348173][ T8432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 494.359771][ T4221] HID 045e:07da: Invalid code 768 type 1 [ 494.368442][ T4221] HID 045e:07da: Invalid code 769 type 1 [ 494.388817][ T4221] HID 045e:07da: Invalid code 770 type 1 [ 494.397534][ T4221] HID 045e:07da: Invalid code 771 type 1 [ 494.406765][ T4221] HID 045e:07da: Invalid code 772 type 1 [ 494.417910][ T4221] HID 045e:07da: Invalid code 773 type 1 [ 494.426782][ T4221] HID 045e:07da: Invalid code 774 type 1 [ 494.427561][ T4218] usb 1-1: USB disconnect, device number 27 [ 494.437123][ T4221] HID 045e:07da: Invalid code 775 type 1 [ 494.448759][ T4221] HID 045e:07da: Invalid code 776 type 1 [ 494.560631][ T4221] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input10 [ 494.701509][ T8454] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1174'. [ 495.011990][ T4221] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 495.061638][ T4221] usb 4-1: USB disconnect, device number 18 [ 496.804488][ T8459] fido_id[8459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 500.232884][ T8508] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 500.297426][ T8508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.469459][ T8508] bond1: (slave ip6erspan0): making interface the new active one [ 500.512630][ T1110] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 500.524262][ T8519] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1192'. [ 500.778598][ T8508] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 500.793500][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 500.916205][ T8523] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1191'. [ 501.140591][ T1110] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 501.190577][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.372365][ T1110] usb 4-1: config 0 descriptor?? [ 501.414260][ T1110] usb 4-1: selecting invalid altsetting 3 [ 501.453085][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.459407][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.538581][ T1110] comedi comedi0: could not set alternate setting 3 in high speed [ 501.600972][ T1110] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 501.654473][ T1110] usbduxsigma: probe of 4-1:0.0 failed with error -22 [ 501.696207][ T1110] usb 4-1: USB disconnect, device number 19 [ 502.631364][ T8544] ptrace attach of "./syz-executor exec"[4176] was attempted by "./syz-executor exec"[8544] [ 502.660522][ T8544] netlink: 'syz.0.1198': attribute type 62 has an invalid length. [ 505.875592][ T8564] netlink: 'syz.1.1204': attribute type 1 has an invalid length. [ 505.957821][ T8564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 506.122683][ T8567] team0: Device vlan2 is already an upper device of the team interface [ 506.571026][ T4218] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 507.900586][ T4218] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 507.926580][ T4218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.948282][ T4218] usb 4-1: config 0 descriptor?? [ 508.121031][ T8594] ptrace attach of "./syz-executor exec"[4169] was attempted by "./syz-executor exec"[8594] [ 509.160525][ T4218] usb 4-1: can't set config #0, error -71 [ 509.336933][ T4218] usb 4-1: USB disconnect, device number 20 [ 509.500022][ T8608] netlink: 'syz.0.1216': attribute type 62 has an invalid length. [ 509.839435][ T8612] netlink: 'syz.2.1218': attribute type 1 has an invalid length. [ 509.969534][ T8612] 8021q: adding VLAN 0 to HW filter on device bond6 [ 511.365486][ T8617] ALSA: mixer_oss: invalid index 40000 [ 515.657334][ T8654] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 515.840547][ T4221] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 515.917527][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 516.013221][ T8654] 8021q: adding VLAN 0 to HW filter on device bond7 [ 517.171004][ T8668] netlink: 'syz.3.1234': attribute type 62 has an invalid length. [ 517.270761][ T4221] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 517.353076][ T4221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.477513][ T4221] usb 2-1: config 0 descriptor?? [ 517.670596][ T4221] usb 2-1: can't set config #0, error -71 [ 517.689180][ T4221] usb 2-1: USB disconnect, device number 13 [ 523.036623][ T8696] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 523.085017][ T8696] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 523.281729][ T8707] befs: (nbd1): No write support. Marking filesystem read-only [ 523.291200][ T150] block nbd1: Attempted send on invalid socket [ 523.297485][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.309608][ T8707] befs: (nbd1): unable to read superblock [ 524.357725][ T8712] netlink: 'syz.1.1245': attribute type 62 has an invalid length. [ 525.197437][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 529.525668][ T8753] netlink: 'syz.2.1256': attribute type 62 has an invalid length. [ 530.698379][ T8771] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[8771] [ 533.052793][ T8791] befs: (nbd3): No write support. Marking filesystem read-only [ 533.629147][ T150] block nbd3: Attempted send on invalid socket [ 533.635547][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 533.646563][ T8791] befs: (nbd3): unable to read superblock [ 534.385341][ T8810] netlink: 'syz.2.1271': attribute type 62 has an invalid length. [ 536.647159][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 543.108860][ T8886] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1294'. [ 545.942166][ T8911] ptrace attach of "./syz-executor exec"[4176] was attempted by "./syz-executor exec"[8911] [ 545.963346][ T8911] netlink: 'syz.0.1300': attribute type 62 has an invalid length. [ 548.500989][ T5271] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 549.720491][ T8955] ptrace attach of "./syz-executor exec"[4181] was attempted by "./syz-executor exec"[8955] [ 549.732651][ T8955] netlink: 'syz.2.1311': attribute type 62 has an invalid length. [ 549.745711][ T21] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 549.944264][ T5271] usb 1-1: Using ep0 maxpacket: 8 [ 550.207666][ T8958] udc-core: couldn't find an available UDC or it's busy [ 550.220426][ T8958] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 550.245454][ T5271] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 550.259046][ T5271] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 550.271136][ T5271] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 550.281542][ T5271] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.295424][ T5271] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 550.305034][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.600447][ T21] usb 2-1: config 0 has no interfaces? [ 551.460448][ T21] usb 2-1: string descriptor 0 read error: -71 [ 551.466853][ T21] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 551.476167][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.486214][ T21] usb 2-1: config 0 descriptor?? [ 551.491611][ T5271] usb 1-1: usb_control_msg returned -71 [ 551.497543][ T5271] usbtmc 1-1:16.0: can't read capabilities [ 551.522517][ T5271] usb 1-1: USB disconnect, device number 28 [ 551.530423][ T21] usb 2-1: can't set config #0, error -71 [ 551.547907][ T21] usb 2-1: USB disconnect, device number 14 [ 556.200381][ T4171] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 556.570580][ T4171] usb 4-1: config 0 has no interfaces? [ 556.740442][ T4171] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 556.770858][ T4171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.817654][ T4171] usb 4-1: Product: syz [ 556.826771][ T4171] usb 4-1: Manufacturer: syz [ 556.849034][ T4171] usb 4-1: SerialNumber: syz [ 556.860353][ T4218] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 556.903897][ T4171] usb 4-1: config 0 descriptor?? [ 557.130584][ T4218] usb 2-1: Using ep0 maxpacket: 32 [ 557.160541][ T1110] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 557.173922][ T9015] udc-core: couldn't find an available UDC or it's busy [ 557.303447][ T9015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 557.422597][ T4218] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 557.690689][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44855, setting to 1024 [ 557.790559][ T4218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.799403][ T1110] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 558.090684][ T1110] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 558.106628][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.169611][ T4218] usb 2-1: config 0 descriptor?? [ 558.224678][ T1110] usb 1-1: config 0 descriptor?? [ 558.251607][ T9025] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 558.282811][ T1110] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 558.298017][ T4218] as10x_usb: device has been detected [ 558.319197][ T4218] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 558.378592][ T4218] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 558.409076][ T1110] usb 4-1: USB disconnect, device number 21 [ 558.450753][ T4218] as10x_usb: error during firmware upload part1 [ 558.457930][ T4218] Registered device nBox DVB-T Dongle [ 558.500951][ T4218] usb 2-1: USB disconnect, device number 15 [ 558.601531][ T4218] Unregistered device nBox DVB-T Dongle [ 558.607063][ T4218] as10x_usb: device has been disconnected [ 558.797942][ T9034] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1337'. [ 560.896762][ T9056] tipc: Started in network mode [ 560.943604][ T9056] tipc: Node identity ac14140f, cluster identity 4711 [ 561.113034][ T9056] gre0: MTU too low for tipc bearer [ 561.118497][ T9056] tipc: Enabling of bearer rejected, failed to enable media [ 561.142784][ T23] usb 1-1: USB disconnect, device number 29 [ 563.542719][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.549165][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.320475][ T9097] ptrace attach of "./syz-executor exec"[4176] was attempted by "./syz-executor exec"[9097] [ 565.413837][ T9096] netlink: 'syz.0.1351': attribute type 62 has an invalid length. [ 565.988273][ T9100] lo speed is unknown, defaulting to 1000 [ 565.994353][ T9100] lo speed is unknown, defaulting to 1000 [ 566.000855][ T9100] lo speed is unknown, defaulting to 1000 [ 566.013206][ T9100] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 566.044470][ T9100] lo speed is unknown, defaulting to 1000 [ 566.051679][ T9100] lo speed is unknown, defaulting to 1000 [ 566.058427][ T9100] lo speed is unknown, defaulting to 1000 [ 566.065219][ T9100] lo speed is unknown, defaulting to 1000 [ 566.072900][ T9100] lo speed is unknown, defaulting to 1000 [ 566.760327][ T13] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 567.130645][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44855, setting to 1024 [ 567.217599][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 567.327248][ T13] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 567.355050][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.510748][ T13] usb 4-1: config 0 descriptor?? [ 568.030195][ T9102] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 568.313064][ T13] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 571.506741][ T23] usb 4-1: USB disconnect, device number 22 [ 571.969083][ T5271] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 573.341132][ T5271] usb 3-1: config 9 has an invalid interface number: 77 but max is 0 [ 573.354611][ T5271] usb 3-1: config 9 has no interface number 0 [ 573.369465][ T5271] usb 3-1: config 9 interface 77 has no altsetting 0 [ 573.660668][ T5271] usb 3-1: New USB device found, idVendor=2040, idProduct=8400, bcdDevice=83.b1 [ 573.669766][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.709860][ T5271] usb 3-1: Product: syz [ 573.737183][ T5271] usb 3-1: Manufacturer: syz [ 573.765180][ T5271] usb 3-1: SerialNumber: syz [ 574.114576][ T9184] ptrace attach of "./syz-executor exec"[4183] was attempted by "./syz-executor exec"[9184] [ 574.126953][ T9184] netlink: 'syz.3.1376': attribute type 62 has an invalid length. [ 574.726898][ T9185] ALSA: mixer_oss: invalid index 40000 [ 574.760528][ T5271] usb 3-1: can't set config #9, error -71 [ 574.767721][ T5271] usb 3-1: USB disconnect, device number 17 [ 577.490935][ T4218] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 579.971036][ T9232] ptrace attach of "./syz-executor exec"[4181] was attempted by "./syz-executor exec"[9232] [ 579.983146][ T9232] netlink: 'syz.2.1390': attribute type 62 has an invalid length. [ 580.520426][ T4218] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 580.528055][ T4218] usb 2-1: can't read configurations, error -71 [ 582.570559][ T13] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 583.305071][ T9274] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[9274] [ 583.317384][ T9274] netlink: 'syz.1.1402': attribute type 62 has an invalid length. [ 583.491282][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 583.513351][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.539633][ T13] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 583.564666][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.671753][ T13] usb 4-1: config 0 descriptor?? [ 584.390647][ T13] usb 4-1: string descriptor 0 read error: -22 [ 584.642478][ T13] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input13 [ 584.736209][ T1108] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 584.746689][ T13] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 584.879016][ T13] usb 4-1: USB disconnect, device number 23 [ 585.064259][ T9293] fido_id[9293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 585.500523][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44855, setting to 1024 [ 585.549348][ T1108] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 585.606249][ T1108] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 585.660478][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.864040][ T9301] lo speed is unknown, defaulting to 1000 [ 585.873303][ T9301] lo speed is unknown, defaulting to 1000 [ 585.879675][ T9301] lo speed is unknown, defaulting to 1000 [ 585.964541][ T9301] infiniband sz1: set active [ 585.969625][ T9301] infiniband sz1: added lo [ 586.055201][ T5271] lo speed is unknown, defaulting to 1000 [ 586.063215][ T1108] usb 1-1: config 0 descriptor?? [ 586.080676][ T9287] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 586.110437][ T9301] RDS/IB: sz1: added [ 586.115445][ T9301] smc: adding ib device sz1 with port count 1 [ 586.122024][ T9301] smc: ib device sz1 port 1 has pnetid [ 586.131672][ T9301] lo speed is unknown, defaulting to 1000 [ 586.205902][ T9301] lo speed is unknown, defaulting to 1000 [ 586.279901][ T9301] lo speed is unknown, defaulting to 1000 [ 586.357451][ T9301] lo speed is unknown, defaulting to 1000 [ 586.431451][ T9301] lo speed is unknown, defaulting to 1000 [ 586.502800][ T5271] lo speed is unknown, defaulting to 1000 [ 586.532552][ T1108] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 587.485535][ T9320] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[9320] [ 587.497617][ T9320] netlink: 'syz.1.1415': attribute type 62 has an invalid length. [ 588.705876][ T13] usb 1-1: USB disconnect, device number 30 [ 589.953364][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 591.595666][ T9369] ieee802154 phy0 wpan0: encryption failed: -22 [ 596.870018][ T9407] udc-core: couldn't find an available UDC or it's busy [ 596.878569][ T9407] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 598.628639][ T9431] ksmbd: Unknown IPC event: 6, ignore. [ 600.684955][ T9454] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 601.400025][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 601.400042][ T26] audit: type=1326 audit(1750894475.771:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 601.492587][ T26] audit: type=1326 audit(1750894475.821:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 601.516147][ T26] audit: type=1326 audit(1750894475.821:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 601.542391][ T26] audit: type=1326 audit(1750894475.821:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 601.565179][ T26] audit: type=1326 audit(1750894475.831:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 601.793512][ T26] audit: type=1326 audit(1750894475.831:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 602.002422][ T26] audit: type=1326 audit(1750894475.831:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 602.326717][ T26] audit: type=1326 audit(1750894475.831:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 602.793501][ T26] audit: type=1326 audit(1750894475.831:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 603.527769][ T26] audit: type=1326 audit(1750894475.831:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9457 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 604.799860][ T9493] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[9493] [ 604.811951][ T9493] netlink: 'syz.1.1463': attribute type 62 has an invalid length. [ 605.752319][ T9505] udc-core: couldn't find an available UDC or it's busy [ 605.773130][ T9505] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 607.762763][ T9521] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1471'. [ 610.035686][ T9527] netlink: 'syz.1.1473': attribute type 10 has an invalid length. [ 610.085853][ T9527] device syz_tun entered promiscuous mode [ 610.097504][ T9527] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 611.674485][ T9541] ptrace attach of "./syz-executor exec"[4176] was attempted by "./syz-executor exec"[9541] [ 611.686583][ T9541] netlink: 'syz.0.1478': attribute type 62 has an invalid length. [ 614.080401][ T4218] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 615.390406][ T4218] usb 2-1: config 0 has no interfaces? [ 615.580628][ T4218] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 615.600060][ T4218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.615203][ T4218] usb 2-1: Product: syz [ 615.620595][ T4218] usb 2-1: Manufacturer: syz [ 615.625309][ T4218] usb 2-1: SerialNumber: syz [ 615.633680][ T4218] usb 2-1: config 0 descriptor?? [ 615.743387][ T9595] udc-core: couldn't find an available UDC or it's busy [ 615.760613][ T9595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 615.827327][ T5271] usb 2-1: USB disconnect, device number 18 [ 616.413936][ T9599] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[9599] [ 616.480540][ T9603] netlink: 'syz.1.1492': attribute type 62 has an invalid length. [ 621.189858][ T9640] binder: 9634:9640 ioctl c018620c 200000000000 returned -1 [ 622.280154][ T9658] ptrace attach of "./syz-executor exec"[4176] was attempted by "./syz-executor exec"[9658] [ 622.293499][ T9658] netlink: 'syz.0.1504': attribute type 62 has an invalid length. [ 624.333372][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.341137][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.840344][ T4220] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 625.250643][ T4220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44855, setting to 1024 [ 625.391069][ T4220] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 625.571919][ T4220] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 625.738954][ T4220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.921096][ T4220] usb 1-1: config 0 descriptor?? [ 625.950676][ T9670] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 626.043903][ T4220] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 627.420371][ T1108] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 627.731157][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 629.904270][ T9701] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[9701] [ 629.940776][ T1108] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 630.129517][ T1108] usb 3-1: config 0 has no interface number 0 [ 630.150345][ T1108] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 630.402912][ T1108] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 630.565690][ T1108] usb 3-1: string descriptor 0 read error: -71 [ 630.581155][ T1108] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 630.722291][ T1110] usb 1-1: USB disconnect, device number 31 [ 630.745359][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.892831][ T1108] usb 3-1: config 0 descriptor?? [ 631.170920][ T1108] usb 3-1: can't set config #0, error -71 [ 631.400701][ T1108] usb 3-1: USB disconnect, device number 18 [ 636.140423][ T21] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 636.530955][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44855, setting to 1024 [ 636.586360][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 636.641516][ T21] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 637.509840][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.521157][ T21] usb 1-1: config 0 descriptor?? [ 637.540711][ T9747] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 637.562915][ T21] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 640.414466][ T4220] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 641.143123][ T21] usb 1-1: USB disconnect, device number 32 [ 641.480520][ T4221] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 641.937858][ T4220] usb 2-1: Using ep0 maxpacket: 16 [ 642.066129][ T4220] usb 2-1: device descriptor read/all, error -71 [ 644.100519][ T4221] usb 4-1: unable to read config index 0 descriptor/all [ 644.113608][ T4221] usb 4-1: can't read configurations, error -71 [ 646.827353][ T9819] udc-core: couldn't find an available UDC or it's busy [ 646.870480][ T9819] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.923206][ T9882] befs: (nbd1): No write support. Marking filesystem read-only [ 653.931737][ T150] block nbd1: Attempted send on invalid socket [ 653.938406][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 653.949851][ T9882] befs: (nbd1): unable to read superblock [ 659.510434][ T1110] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 661.813702][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 661.819955][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.826585][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.833079][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.839538][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.846028][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.852503][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.858980][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.865499][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.872035][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.878545][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.885035][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.891519][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.897974][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.904478][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.910989][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.917502][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.924059][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.930584][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.937047][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.943734][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.950182][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.956690][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.963167][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.969625][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.976106][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.982585][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.989042][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 661.995554][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.002033][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.008481][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.014980][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.021470][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.027922][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.034393][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.040863][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.047341][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.053847][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.060328][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.066809][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.073286][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.079729][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.086195][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.092662][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.099122][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.105592][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.112060][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.118513][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.125021][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.131520][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.138119][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.144610][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.151206][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.157652][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.164227][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.170723][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.177191][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.183771][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.190301][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.196784][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.203272][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.209725][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.216200][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.222672][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.231187][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.237744][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.244333][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.250891][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.257394][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.263897][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.270424][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.276891][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.283409][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.289919][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.296453][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.302955][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.309436][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.315945][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.322454][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.328927][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.335588][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.342080][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.348560][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.355084][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.361563][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.368043][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.374576][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.381069][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.387679][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.394199][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.400698][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.407171][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.413721][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.420352][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.426834][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.433416][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.439880][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.446416][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.452924][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.459387][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.465898][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.472404][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.478890][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.485408][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.492001][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.498482][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.505054][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.511566][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.518076][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.524575][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.531114][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.537588][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.544090][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.550666][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.557137][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.563737][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.570353][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.576823][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.583322][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.589789][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.596283][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.602821][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.609346][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.615873][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.622369][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.628888][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.635457][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.641960][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 662.649853][ T9932] befs: (nbd3): No write support. Marking filesystem read-only [ 662.667167][ T150] block nbd3: Attempted send on invalid socket [ 662.673534][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 662.684909][ T9932] befs: (nbd3): unable to read superblock [ 664.725099][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e34c00: rx timeout, send abort [ 665.235128][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e34c00: abort rx timeout. Force session deactivation [ 669.596846][ T9991] ======================================================= [ 669.596846][ T9991] WARNING: The mand mount option has been deprecated and [ 669.596846][ T9991] and is ignored by this kernel. Remove the mand [ 669.596846][ T9991] option from the mount to silence this warning. [ 669.596846][ T9991] ======================================================= [ 674.080337][ T5271] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 674.392986][ T4170] bond0: (slave syz_tun): Releasing backup interface [ 676.541935][ T4171] Bluetooth: hci1: command 0x0409 tx timeout [ 676.763511][ T3076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.579617][T10018] lo speed is unknown, defaulting to 1000 [ 678.580512][ T4171] Bluetooth: hci1: command 0x041b tx timeout [ 681.181112][ T4220] Bluetooth: hci1: command 0x040f tx timeout [ 681.202840][ T3076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.289082][T10070] udc-core: couldn't find an available UDC or it's busy [ 681.296231][T10070] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 681.414578][T10018] lo speed is unknown, defaulting to 1000 [ 681.617481][ T3076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.657338][ T3076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.988655][T10089] ptrace attach of "./syz-executor exec"[4183] was attempted by "./syz-executor exec"[10089] [ 683.422047][ T4171] Bluetooth: hci1: command 0x0419 tx timeout [ 685.791380][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.797792][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.868629][ T3076] bond1: (slave ip6erspan0): Releasing active interface [ 688.892348][T10018] chnl_net:caif_netlink_parms(): no params data found [ 691.170300][T10168] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1637'. [ 692.430711][T10018] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.437826][T10018] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.509029][T10018] device bridge_slave_0 entered promiscuous mode [ 692.780502][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1641'. [ 692.790147][T10018] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.818565][T10018] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.984898][T10018] device bridge_slave_1 entered promiscuous mode [ 695.009831][T10018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.051075][T10018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.160127][T10018] team0: Port device team_slave_0 added [ 698.090610][T10018] team0: Port device team_slave_1 added [ 699.508380][T10018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.536963][T10018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.820718][T10018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.868264][T10018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.925602][T10018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.007811][T10018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.100509][ T4171] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 701.119142][ T3076] device hsr_slave_0 left promiscuous mode [ 701.200418][ T3076] device hsr_slave_1 left promiscuous mode [ 701.301842][ T3076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.337890][ T3076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.417823][ T3076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.455512][ T3076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.576705][ T3076] device bridge_slave_1 left promiscuous mode [ 702.047191][ T3076] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.139098][ T3076] device bridge_slave_0 left promiscuous mode [ 702.327636][ T3076] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.381338][ T4171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.426161][ T4171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.451225][ T4171] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 703.462300][ T4171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.503625][ T4171] usb 3-1: config 0 descriptor?? [ 703.771597][ T3076] device veth1_macvtap left promiscuous mode [ 703.794579][ T3076] device veth0_macvtap left promiscuous mode [ 703.808970][ T3076] device veth1_vlan left promiscuous mode [ 703.817157][ T3076] device veth0_vlan left promiscuous mode [ 704.109491][ T4171] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 704.730443][ T4171] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 704.771583][ T4171] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0003/input/input14 [ 704.885790][ T3076] bond3 (unregistering): Released all slaves [ 704.967768][ T3076] bond2 (unregistering): Released all slaves [ 704.967829][ T4171] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 704.998163][ T3076] bond1 (unregistering): Released all slaves [ 705.068341][ T4171] usb 3-1: USB disconnect, device number 20 [ 705.856533][T10308] fido_id[10308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 707.918462][ T3076] team0 (unregistering): Port device team_slave_1 removed [ 708.015352][ T3076] team0 (unregistering): Port device team_slave_0 removed [ 708.047835][ T3076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.280236][ T3076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.119602][ T3076] bond0 (unregistering): Released all slaves [ 710.568018][T10018] device hsr_slave_0 entered promiscuous mode [ 710.595752][T10018] device hsr_slave_1 entered promiscuous mode [ 710.603088][T10018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 710.783720][T10018] Cannot create hsr debugfs directory [ 712.440914][T10348] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1676'. [ 717.052033][T10018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 717.206027][T10018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 717.253579][T10018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 717.396981][T10018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 718.391445][T10018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.459389][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 718.489814][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 718.523492][T10018] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.540614][ T1110] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 718.565016][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 718.591187][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 718.629483][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.636684][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.731359][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 718.746467][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 718.750356][ T1110] usb 1-1: device descriptor read/64, error -71 [ 718.774405][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 718.812644][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.819960][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.864082][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 718.903850][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 718.971655][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 719.032671][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 719.310500][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 719.578684][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 719.808455][T10018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 719.860412][ T1110] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 719.888446][T10018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 720.067051][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 720.075736][ T1110] usb 1-1: device descriptor read/64, error -71 [ 720.076262][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 720.096807][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 720.111357][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 720.286188][ T1110] usb usb1-port1: attempt power cycle [ 720.603355][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 720.967042][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 722.971162][ T1110] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 723.690837][ T1110] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 724.048566][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 724.076796][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 724.102633][T10018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.145328][T10458] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1698'. [ 724.226232][ T1110] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 724.239465][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.255926][ T1110] usb 1-1: config 0 descriptor?? [ 724.311786][ T1110] usb 1-1: selecting invalid altsetting 3 [ 724.326248][ T1110] comedi comedi0: could not set alternate setting 3 in high speed [ 724.362737][ T1110] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 724.400999][ T1110] usbduxsigma: probe of 1-1:0.0 failed with error -22 [ 724.545289][ T1110] usb 1-1: USB disconnect, device number 36 [ 725.270388][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 725.351089][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 725.486177][T10018] device veth0_vlan entered promiscuous mode [ 725.661224][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 725.676919][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 725.708443][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 725.736322][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 725.854157][T10018] device veth1_vlan entered promiscuous mode [ 725.988767][T10488] netlink: 'syz.3.1702': attribute type 1 has an invalid length. [ 726.055061][T10488] 8021q: adding VLAN 0 to HW filter on device bond5 [ 726.267457][T10018] device veth0_macvtap entered promiscuous mode [ 726.427830][T10018] device veth1_macvtap entered promiscuous mode [ 727.040469][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 727.106434][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 727.285926][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 727.403380][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 728.142036][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 728.157562][T10018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.321601][T10511] udc-core: couldn't find an available UDC or it's busy [ 728.676403][T10018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.682052][T10511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 728.687389][T10018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.707115][T10018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.717309][T10018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.728001][T10018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.738111][T10018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.749064][T10018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.760527][T10018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.769699][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 728.780462][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 728.794045][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 728.856517][T10018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.879533][T10511] udc-core: couldn't find an available UDC or it's busy [ 728.887704][T10018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.899040][T10018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.925292][T10511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 728.934140][T10018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.960786][T10018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.988348][T10018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.011092][T10018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.040394][T10018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.065383][T10018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.077303][T10018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.087000][T10018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.096108][T10018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.106251][T10018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.150276][ T13] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 729.206720][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 729.227945][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 729.620749][ T13] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 730.112899][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.140030][ T13] usb 4-1: config 0 descriptor?? [ 730.204784][ T13] usb 4-1: selecting invalid altsetting 3 [ 730.218026][ T13] comedi comedi0: could not set alternate setting 3 in high speed [ 730.226041][ T13] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 730.241431][ T13] usbduxsigma: probe of 4-1:0.0 failed with error -22 [ 730.402429][ T9164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.423922][ T9164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.424493][ T1325] usb 4-1: USB disconnect, device number 27 [ 730.505910][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 730.543040][ T4568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.571071][ T4568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.632342][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 732.100966][T10554] netlink: 'syz.0.1716': attribute type 1 has an invalid length. [ 732.194431][T10554] 8021q: adding VLAN 0 to HW filter on device bond4 [ 734.107684][T10587] udc-core: couldn't find an available UDC or it's busy [ 734.114950][T10587] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 735.561481][ T1325] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 737.000280][ T1325] usb 4-1: config 0 has no interfaces? [ 737.150333][ T1325] usb 4-1: string descriptor 0 read error: -71 [ 737.156677][ T1325] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 738.043746][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.469607][ T1325] usb 4-1: config 0 descriptor?? [ 738.490322][ T1325] usb 4-1: can't set config #0, error -71 [ 738.508493][ T1325] usb 4-1: USB disconnect, device number 28 [ 738.601213][T10640] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1734'. [ 740.591382][ T4218] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 741.131089][ T21] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 741.967141][ T4218] usb 6-1: unable to read config index 0 descriptor/all [ 741.980076][ T4218] usb 6-1: can't read configurations, error -71 [ 744.930474][ T21] usb 4-1: unable to read config index 0 descriptor/all [ 744.937538][ T21] usb 4-1: can't read configurations, error -71 [ 745.023852][T10715] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 746.027107][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1759'. [ 746.100273][ T9931] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 747.260617][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.267273][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.320283][ T9931] usb 6-1: config 7 interface 0 has no altsetting 0 [ 748.470334][ T9931] usb 6-1: string descriptor 0 read error: -71 [ 748.502239][ T9931] usb 6-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 748.664208][ T9931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.711632][ T9931] usb 6-1: can't set config #7, error -71 [ 748.989960][ T9931] usb 6-1: USB disconnect, device number 4 [ 749.050508][ T4282] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 749.651789][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 749.651805][ T26] audit: type=1326 audit(1750895392.025:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 749.654404][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1770'. [ 749.659850][ T26] audit: type=1326 audit(1750895392.025:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 749.719935][ T26] audit: type=1326 audit(1750895392.025:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 749.752382][ T26] audit: type=1326 audit(1750895392.025:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 749.790567][ T26] audit: type=1326 audit(1750895392.025:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 749.839620][ T26] audit: type=1326 audit(1750895392.025:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 749.888538][ T26] audit: type=1326 audit(1750895392.025:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 749.917192][T10784] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 749.924485][T10784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 750.061206][ T26] audit: type=1326 audit(1750895392.025:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 750.085104][ T4282] usb 4-1: config 0 has no interfaces? [ 750.167432][T10791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1772'. [ 750.782303][T10790] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 750.900865][T10784] vhci_hcd vhci_hcd.0: Device attached [ 750.907137][ T26] audit: type=1326 audit(1750895392.025:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 750.931781][ T4282] usb 4-1: string descriptor 0 read error: -71 [ 750.938068][ T4282] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 750.951536][T10784] sg_write: data in/out 37998/14 bytes for SCSI command 0x0-- guessing data in; [ 750.951536][T10784] program syz.5.1771 not setting count and/or reply_len properly [ 750.978826][ T26] audit: type=1326 audit(1750895392.055:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10777 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f253b929 code=0x7ffc0000 [ 751.176153][ T4282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.198181][ T4282] usb 4-1: config 0 descriptor?? [ 751.220378][ T4282] usb 4-1: can't set config #0, error -71 [ 752.111583][ T4282] usb 4-1: USB disconnect, device number 31 [ 752.170297][ T21] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 752.512480][T10785] vhci_hcd: connection reset by peer [ 752.585121][T10792] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 752.591696][T10792] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 752.620307][T10808] vhci_hcd: connection closed [ 752.624213][T10792] vhci_hcd vhci_hcd.0: Device attached [ 753.123389][ T4262] vhci_hcd: stop threads [ 753.128039][ T4262] vhci_hcd: release socket [ 753.542160][ T4262] vhci_hcd: disconnect device [ 753.571284][ T4262] vhci_hcd: stop threads [ 753.801775][ T4262] vhci_hcd: release socket [ 754.080485][ T4262] vhci_hcd: disconnect device [ 756.540630][ T4282] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 757.500255][ T21] vhci_hcd: vhci_device speed not set [ 758.460314][ T4282] usb 6-1: config 0 has no interfaces? [ 759.340607][ T4282] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 759.386644][ T4282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.403075][ T4282] usb 6-1: config 0 descriptor?? [ 759.420833][ T4282] usb 6-1: can't set config #0, error -71 [ 759.427795][ T4282] usb 6-1: USB disconnect, device number 5 [ 762.801636][T10951] binder: 10949:10951 ioctl c0306201 200000000080 returned -14 [ 764.200425][ T1110] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 764.413621][ T4218] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 764.673995][ T1110] usb 6-1: config 0 has no interfaces? [ 765.930662][ T4218] usb 4-1: not running at top speed; connect to a high speed hub [ 766.085221][ T4218] usb 4-1: config 7 has an invalid interface number: 40 but max is 0 [ 766.108364][ T4218] usb 4-1: config 7 has no interface number 0 [ 766.120297][ T1110] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 766.131579][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.351164][ T4218] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=cc.d4 [ 766.442481][ T1110] usb 6-1: config 0 descriptor?? [ 766.583916][ T4218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.767495][ T1110] usb 6-1: can't set config #0, error -71 [ 766.818287][ T4218] usb 4-1: Product: syz [ 766.847927][ T1110] usb 6-1: USB disconnect, device number 6 [ 766.860375][ T4218] usb 4-1: Manufacturer: syz [ 766.925857][ T4218] usb 4-1: SerialNumber: syz [ 767.007777][ T264] block nbd0: Attempted send on invalid socket [ 767.014211][ T264] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 767.035144][ T264] block nbd0: Attempted send on invalid socket [ 767.041557][ T264] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 767.053549][T10988] Mount JFS Failure: -5 [ 767.059092][T10988] jfs_mount failed w/return code = -5 [ 767.171826][T10994] bridge0: port 3(syz_tun) entered blocking state [ 767.201087][ T4218] kvaser_usb 4-1:7.40: Cannot get usb endpoint(s) [ 767.228337][ T4218] usb 4-1: USB disconnect, device number 32 [ 767.259689][T10994] bridge0: port 3(syz_tun) entered disabled state [ 767.316918][T10994] device syz_tun entered promiscuous mode [ 767.347934][T10994] bridge0: port 3(syz_tun) entered blocking state [ 767.354582][T10994] bridge0: port 3(syz_tun) entered forwarding state [ 772.420263][ T1325] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 772.670361][ T1325] usb 4-1: Using ep0 maxpacket: 16 [ 772.930677][ T1325] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 772.942382][ T1325] usb 4-1: config 0 has no interface number 0 [ 772.949800][ T1325] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 773.024579][ T1325] usb 4-1: config 0 interface 49 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 773.840289][ T1325] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 773.869100][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.878960][ T1325] usb 4-1: Product: syz [ 773.888918][ T1325] usb 4-1: Manufacturer: syz [ 773.899280][ T1325] usb 4-1: SerialNumber: syz [ 773.920020][ T1325] usb 4-1: config 0 descriptor?? [ 773.946090][T11070] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 773.969939][T11070] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 774.560705][T11099] kvm [11098]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 774.841777][ T1325] qmi_wwan: probe of 4-1:0.49 failed with error -22 [ 774.855638][ T1325] usb 4-1: USB disconnect, device number 33 [ 777.482182][T11152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1851'. [ 780.195802][T11179] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1858'. [ 784.128530][T11231] lo speed is unknown, defaulting to 1000 [ 784.146854][T11231] lo speed is unknown, defaulting to 1000 [ 784.584834][T11250] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1874'. [ 786.370276][ T4282] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 787.790312][ T4282] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 787.799419][ T4282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.820191][ T4282] usb 6-1: Product: syz [ 787.824411][ T4282] usb 6-1: Manufacturer: syz [ 787.829026][ T4282] usb 6-1: SerialNumber: syz [ 787.853450][ T4282] usb 6-1: config 0 descriptor?? [ 787.912683][ T4282] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 789.565934][T11304] lo speed is unknown, defaulting to 1000 [ 789.572755][T11304] lo speed is unknown, defaulting to 1000 [ 790.111144][ T4282] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 790.119434][ T4282] sq905c 6-1:0.0: Get version command failed [ 790.126036][ T4282] sq905c: probe of 6-1:0.0 failed with error -110 [ 790.160471][ T4282] usb 6-1: USB disconnect, device number 7 [ 791.990217][ T4218] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 792.540504][ T4218] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 792.560018][ T4218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.586815][ T4218] usb 6-1: Product: syz [ 792.600371][ T4218] usb 6-1: Manufacturer: syz [ 792.620255][ T4218] usb 6-1: SerialNumber: syz [ 792.653054][ T4218] usb 6-1: config 0 descriptor?? [ 792.722444][ T4218] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 792.803330][T11341] Cannot find map_set index 0 as target [ 793.380789][ T4218] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 793.388318][ T4218] sq905c 6-1:0.0: Get version command failed [ 793.410204][ T4218] sq905c: probe of 6-1:0.0 failed with error -110 [ 794.262332][ T4218] usb 6-1: USB disconnect, device number 8 [ 794.900423][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 797.870329][T11392] bridge0: port 3(netdevsim0) entered disabled state [ 797.878462][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.885791][T11392] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.183274][T11392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.236890][T11392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.454818][T11392] device virt_wifi0 left promiscuous mode [ 800.490269][ T4218] Bluetooth: hci1: command 0x0406 tx timeout [ 800.737749][T11392] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.746960][T11392] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.756753][T11392] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.767393][T11392] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.908784][T11407] lo speed is unknown, defaulting to 1000 [ 800.920075][T11407] lo speed is unknown, defaulting to 1000 [ 805.130517][T11482] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1930'. [ 805.600243][T11490] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 809.411467][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.417866][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.894752][T11548] lo speed is unknown, defaulting to 1000 [ 812.050408][T11548] lo speed is unknown, defaulting to 1000 [ 812.543667][T11549] netlink: 'syz.2.1945': attribute type 21 has an invalid length. [ 812.740754][T11566] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1949'. [ 812.750318][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 812.769323][T11566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1949'. [ 812.782590][T11566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1949'. [ 812.800482][T11549] netlink: 'syz.2.1945': attribute type 6 has an invalid length. [ 812.951033][T11549] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1945'. [ 816.267623][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 816.576646][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.720409][T11679] netlink: 'syz.3.1972': attribute type 1 has an invalid length. [ 821.603077][T11679] 8021q: adding VLAN 0 to HW filter on device bond6 [ 821.662032][T11686] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.847657][T11694] loop0: detected capacity change from 0 to 128 [ 824.395679][T11694] FAT-fs (loop0): Directory bread(block 11554) failed [ 824.403321][T11694] FAT-fs (loop0): Directory bread(block 11555) failed [ 824.410613][T11694] FAT-fs (loop0): Directory bread(block 11556) failed [ 824.417616][T11694] FAT-fs (loop0): Directory bread(block 11557) failed [ 824.425057][T11694] FAT-fs (loop0): Directory bread(block 11558) failed [ 824.432152][T11694] FAT-fs (loop0): Directory bread(block 11559) failed [ 824.439218][T11694] FAT-fs (loop0): Directory bread(block 11560) failed [ 824.446318][T11694] FAT-fs (loop0): Directory bread(block 11561) failed [ 824.455112][T11694] FAT-fs (loop0): Directory bread(block 11562) failed [ 824.462105][T11694] FAT-fs (loop0): Directory bread(block 11563) failed [ 828.520195][ T4218] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 828.891045][ T4218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 829.007380][ T4218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 829.172637][ T4218] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 829.512761][ T4218] usb 3-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 829.560512][ T4218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.619562][ T4218] usb 3-1: config 0 descriptor?? [ 829.660642][T11752] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 831.270257][ T4218] usbhid 3-1:0.0: can't add hid device: -71 [ 831.276404][ T4218] usbhid: probe of 3-1:0.0 failed with error -71 [ 831.310467][ T4218] usb 3-1: USB disconnect, device number 21 [ 831.366936][T11799] loop3: detected capacity change from 0 to 2048 [ 831.474794][T11799] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 831.499193][T11802] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 831.505765][T11802] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 831.544102][T11802] vhci_hcd vhci_hcd.0: Device attached [ 831.820471][T10302] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 832.288758][T11811] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 832.304999][T11807] netlink: 'syz.0.1999': attribute type 10 has an invalid length. [ 832.336912][T11807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.355303][T11807] team0: Port device bond0 added [ 832.449971][T11799] attempt to access beyond end of device [ 832.449971][T11799] loop3: rw=524288, want=33554432, limit=2048 [ 834.920328][T11819] loop2: detected capacity change from 0 to 128 [ 835.192847][T11819] EXT4-fs (loop2): Test dummy encryption mode enabled [ 835.269253][T11819] EXT4-fs (loop2): Test dummy encryption mode enabled [ 835.634849][T11819] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 835.656455][T11819] ext4 filesystem being mounted at /423/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 836.948477][T11803] vhci_hcd: connection reset by peer [ 836.954176][ T154] vhci_hcd: stop threads [ 836.958479][ T154] vhci_hcd: release socket [ 837.000226][ T154] vhci_hcd: disconnect device [ 837.075777][T10302] vhci_hcd: vhci_device speed not set [ 838.962745][T11851] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 840.978929][T11871] loop3: detected capacity change from 0 to 512 [ 842.042488][T11871] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 842.255331][T11871] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.647327][T11900] loop4: detected capacity change from 0 to 40427 [ 843.904439][T11900] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7 [ 843.912750][T11900] F2FS-fs (loop4): Unrecognized mount option "barrier" or missing value [ 844.874100][T11432] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 845.082379][T11919] input: syz1 as /devices/virtual/input/input15 [ 845.160212][T11432] usb 3-1: Using ep0 maxpacket: 32 [ 845.237558][ T3548] udevd[3548]: worker [8974] terminated by signal 33 (Unknown signal 33) [ 845.252921][ T3548] udevd[3548]: worker [8974] failed while handling '/devices/virtual/block/loop4' [ 845.341696][T11432] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.531768][T11432] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 845.547209][T11432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.557480][T11432] usb 3-1: Product: syz [ 845.566296][T11432] usb 3-1: Manufacturer: syz [ 845.573982][T11432] usb 3-1: SerialNumber: syz [ 845.604689][T11432] usb 3-1: config 0 descriptor?? [ 845.662566][T11432] etas_es58x 3-1:0.0: Starting syz syz (Serial Number syz) driver version 1.00 [ 845.944150][T11432] usb 3-1: USB disconnect, device number 22 [ 851.383163][T11978] loop5: detected capacity change from 0 to 512 [ 853.895199][T11978] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 854.601289][T11978] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.491624][T12012] tipc: Started in network mode [ 856.497842][T12012] tipc: Node identity ac141425, cluster identity 4711 [ 856.504867][T12012] tipc: New replicast peer: 0.0.0.0 [ 856.511976][T12012] tipc: Enabled bearer , priority 10 [ 856.804332][T12021] netlink: 'syz.2.2057': attribute type 1 has an invalid length. [ 856.856191][T12021] 8021q: adding VLAN 0 to HW filter on device bond8 [ 857.752982][T11491] tipc: Node number set to 2886997029 [ 857.902513][T12034] loop4: detected capacity change from 0 to 128 [ 859.027393][T12035] loop3: detected capacity change from 0 to 2048 [ 860.071288][T12035] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 862.404063][T12035] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 864.058608][T12073] loop0: detected capacity change from 0 to 4096 [ 865.297361][T12074] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 865.384458][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 865.385612][ T26] audit: type=1800 audit(1750895507.755:171): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2068" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 867.523803][T12084] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 867.555328][T12084] 8021q: adding VLAN 0 to HW filter on device bond9 [ 869.331528][T12101] xt_hashlimit: size too large, truncated to 1048576 [ 870.092219][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.098650][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.157946][T12114] lo speed is unknown, defaulting to 1000 [ 873.183596][T12114] lo speed is unknown, defaulting to 1000 [ 873.533052][T12114] chnl_net:caif_netlink_parms(): no params data found [ 874.582889][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.590624][T12114] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.622196][T12127] loop3: detected capacity change from 0 to 512 [ 874.631821][T12114] device bridge_slave_0 entered promiscuous mode [ 874.671952][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.737406][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.754034][T12127] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 874.787897][T12114] device bridge_slave_1 entered promiscuous mode [ 874.808539][T12127] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 874.957492][T12127] EXT4-fs (loop3): 1 truncate cleaned up [ 874.997691][T12127] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000001,noquota,noload,,errors=continue. Quota mode: none. [ 875.134942][T11432] Bluetooth: hci5: command 0x0409 tx timeout [ 875.181240][ T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 875.571363][T12114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.646023][T12114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.739372][T12114] team0: Port device team_slave_0 added [ 875.782369][T12114] team0: Port device team_slave_1 added [ 875.820250][ T23] usb 3-1: config 0 has no interfaces? [ 875.841602][ T4281] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.863813][T12138] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 875.891010][T12138] 8021q: adding VLAN 0 to HW filter on device bond7 [ 875.909267][T12114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.923519][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.970336][T12114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.981204][ T23] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 875.992497][T12114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.999481][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.025595][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.034466][ T23] usb 3-1: Product: syz [ 876.038673][ T23] usb 3-1: Manufacturer: syz [ 876.049812][ T23] usb 3-1: SerialNumber: syz [ 876.062101][ T23] usb 3-1: config 0 descriptor?? [ 876.067200][T12114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.092322][ T4281] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.153551][T12114] device hsr_slave_0 entered promiscuous mode [ 876.160924][T12114] device hsr_slave_1 entered promiscuous mode [ 876.167694][T12114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 876.176936][T12114] Cannot create hsr debugfs directory [ 876.198597][ T4281] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.267607][ T4281] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.319080][T12126] udc-core: couldn't find an available UDC or it's busy [ 876.330121][ T9931] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 876.353831][T12126] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 876.402432][T11491] usb 3-1: USB disconnect, device number 23 [ 876.538381][T12114] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 876.592624][T12114] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 876.651139][T12114] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 876.670012][T12114] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 876.690622][ T9931] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 876.699718][ T9931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.714039][ T9931] usb 4-1: config 0 descriptor?? [ 876.754807][ T9931] usb 4-1: selecting invalid altsetting 3 [ 876.764920][ T9931] comedi comedi0: could not set alternate setting 3 in high speed [ 876.796795][ T9931] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 876.809998][ T9931] usbduxsigma: probe of 4-1:0.0 failed with error -22 [ 876.883505][T12114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.956369][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 876.962925][ T9931] usb 4-1: USB disconnect, device number 34 [ 876.979108][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 877.084298][T12114] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.210363][T11432] Bluetooth: hci5: command 0x041b tx timeout [ 877.219835][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 877.249234][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 877.269166][ T8504] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.276341][ T8504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.311033][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 877.330924][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 877.341026][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.348129][ T8504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.367639][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 877.381913][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 877.419441][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 877.436684][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 877.448617][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 877.458832][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 877.521806][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 877.545540][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 877.564879][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 877.576915][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 877.682531][T12168] loop3: detected capacity change from 0 to 1024 [ 877.706814][ T1325] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 877.719141][T12114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 877.751270][T12114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 877.992871][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 879.134085][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 879.614723][T11433] Bluetooth: hci5: command 0x040f tx timeout [ 880.280414][ T1325] usb 3-1: unable to read config index 0 descriptor/all [ 880.295009][ T1325] usb 3-1: can't read configurations, error -71 [ 881.918183][ T1325] Bluetooth: hci5: command 0x0419 tx timeout [ 882.926118][T12196] udc-core: couldn't find an available UDC or it's busy [ 883.044829][T12196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 883.171166][T12196] udc-core: couldn't find an available UDC or it's busy [ 883.368702][T12196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 884.128401][T12195] netlink: 'syz.0.2093': attribute type 1 has an invalid length. [ 884.224278][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 884.258337][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 884.289736][T12114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.434892][T12226] loop2: detected capacity change from 0 to 512 [ 884.604147][T12226] EXT4-fs (loop2): Invalid want_extra_isize 73 [ 884.770432][T10302] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 885.181142][T10302] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 885.203359][T10302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.486996][T10302] usb 4-1: config 0 descriptor?? [ 885.651678][T10302] usb 4-1: selecting invalid altsetting 3 [ 885.658024][T10302] comedi comedi0: could not set alternate setting 3 in high speed [ 885.667991][T10302] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 885.681328][T10302] usbduxsigma: probe of 4-1:0.0 failed with error -22 [ 885.961321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 886.426690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 886.525007][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 886.546267][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 886.584183][T12114] device veth0_vlan entered promiscuous mode [ 886.870807][ T4281] device hsr_slave_0 left promiscuous mode [ 886.930378][ T4281] device hsr_slave_1 left promiscuous mode [ 886.971772][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.005312][ T9033] udevd[9033]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 887.031026][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.051410][T12263] [ 887.053785][T12263] ===================================================== [ 887.060732][T12263] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 887.064763][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.068290][T12263] 5.15.185-syzkaller #0 Not tainted [ 887.077835][T12265] loop4: detected capacity change from 0 to 128 [ 887.080964][T12263] ----------------------------------------------------- [ 887.080973][T12263] syz.0.2109/12263 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 887.080993][T12263] ffff88805a5d4018 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16d/0x490 [ 887.081045][T12263] [ 887.081045][T12263] and this task is already holding: [ 887.090944][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.094230][T12263] ffff888060ef8028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 887.135031][T12263] which would create a new lock dependency: [ 887.140930][T12263] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 887.149044][T12263] [ 887.149044][T12263] but this new dependency connects a HARDIRQ-irq-safe lock: [ 887.158679][T12263] (&dev->event_lock#2){-...}-{2:2} [ 887.158715][T12263] [ 887.158715][T12263] ... which became HARDIRQ-irq-safe at: [ 887.171616][T12263] lock_acquire+0x197/0x3f0 [ 887.176222][T12263] _raw_spin_lock_irqsave+0xa4/0xf0 [ 887.181519][T12263] input_event+0x76/0xb0 [ 887.185858][T12263] psmouse_report_standard_packet+0x4f/0x200 [ 887.191939][T12263] psmouse_process_byte+0x42b/0x620 [ 887.197240][T12263] psmouse_handle_byte+0x43/0x490 [ 887.202360][T12263] psmouse_interrupt+0x699/0x1130 [ 887.207740][T12263] serio_interrupt+0x87/0x130 [ 887.212511][T12263] i8042_interrupt+0x369/0x710 [ 887.217371][T12263] __handle_irq_event_percpu+0x291/0x9b0 [ 887.223096][T12263] handle_irq_event+0xa5/0x220 [ 887.227953][T12263] handle_edge_irq+0x243/0xb20 [ 887.232809][T12263] __common_interrupt+0xd7/0x1e0 [ 887.237842][T12263] common_interrupt+0xb0/0xd0 [ 887.242619][T12263] asm_common_interrupt+0x22/0x40 [ 887.247734][T12263] number+0x28/0xf70 [ 887.251717][T12263] vsnprintf+0x10fe/0x1a00 [ 887.256253][T12263] add_uevent_var+0x1c5/0x440 [ 887.261021][T12263] kobject_uevent_env+0x51a/0x890 [ 887.266141][T12263] driver_register+0x3e2/0x430 [ 887.271001][T12263] usb_register_driver+0x202/0x3d0 [ 887.276204][T12263] do_one_initcall+0x1ee/0x680 [ 887.281061][T12263] do_initcall_level+0x137/0x1f0 [ 887.286089][T12263] do_initcalls+0x4b/0x90 [ 887.290508][T12263] kernel_init_freeable+0x3ce/0x560 [ 887.295795][T12263] kernel_init+0x19/0x1b0 [ 887.300221][T12263] ret_from_fork+0x1f/0x30 [ 887.304729][T12263] [ 887.304729][T12263] to a HARDIRQ-irq-unsafe lock: [ 887.311746][T12263] (tasklist_lock){.+.+}-{2:2} [ 887.311770][T12263] [ 887.311770][T12263] ... which became HARDIRQ-irq-unsafe at: [ 887.324407][T12263] ... [ 887.324415][T12263] lock_acquire+0x197/0x3f0 [ 887.331588][T12263] _raw_read_lock+0x32/0x40 [ 887.336221][T12263] do_wait+0x293/0xac0 [ 887.340388][T12263] kernel_wait+0xa8/0x160 [ 887.344812][T12263] call_usermodehelper_exec_work+0xb5/0x220 [ 887.350803][T12263] process_one_work+0x863/0x1000 [ 887.355832][T12263] worker_thread+0xaa8/0x12a0 [ 887.360602][T12263] kthread+0x436/0x520 [ 887.364759][T12263] ret_from_fork+0x1f/0x30 [ 887.369266][T12263] [ 887.369266][T12263] other info that might help us debug this: [ 887.369266][T12263] [ 887.379492][T12263] Chain exists of: [ 887.379492][T12263] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 887.379492][T12263] [ 887.393052][T12263] Possible interrupt unsafe locking scenario: [ 887.393052][T12263] [ 887.401369][T12263] CPU0 CPU1 [ 887.406732][T12263] ---- ---- [ 887.412093][T12263] lock(tasklist_lock); [ 887.416341][T12263] local_irq_disable(); [ 887.423095][T12263] lock(&dev->event_lock#2); [ 887.430300][T12263] lock(&client->buffer_lock); [ 887.437674][T12263] [ 887.441125][T12263] lock(&dev->event_lock#2); [ 887.445989][T12263] [ 887.445989][T12263] *** DEADLOCK *** [ 887.445989][T12263] [ 887.454251][T12263] 7 locks held by syz.0.2109/12263: [ 887.459447][T12263] #0: ffff888025412110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x177/0x470 [ 887.468602][T12263] #1: ffff888148656230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0x9e/0x2c0 [ 887.478706][T12263] #2: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 887.488019][T12263] #3: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 887.497330][T12263] #4: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 887.506646][T12263] #5: ffff888060ef8028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 887.516848][T12263] #6: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 887.526184][T12263] [ 887.526184][T12263] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 887.536605][T12263] -> (&dev->event_lock#2){-...}-{2:2} { [ 887.542268][T12263] IN-HARDIRQ-W at: [ 887.546338][T12263] lock_acquire+0x197/0x3f0 [ 887.552674][T12263] _raw_spin_lock_irqsave+0xa4/0xf0 [ 887.559703][T12263] input_event+0x76/0xb0 [ 887.565772][T12263] psmouse_report_standard_packet+0x4f/0x200 [ 887.573581][T12263] psmouse_process_byte+0x42b/0x620 [ 887.580605][T12263] psmouse_handle_byte+0x43/0x490 [ 887.587455][T12263] psmouse_interrupt+0x699/0x1130 [ 887.594305][T12263] serio_interrupt+0x87/0x130 [ 887.600808][T12263] i8042_interrupt+0x369/0x710 [ 887.607400][T12263] __handle_irq_event_percpu+0x291/0x9b0 [ 887.614866][T12263] handle_irq_event+0xa5/0x220 [ 887.621455][T12263] handle_edge_irq+0x243/0xb20 [ 887.628049][T12263] __common_interrupt+0xd7/0x1e0 [ 887.634816][T12263] common_interrupt+0xb0/0xd0 [ 887.641323][T12263] asm_common_interrupt+0x22/0x40 [ 887.648199][T12263] number+0x28/0xf70 [ 887.653958][T12263] vsnprintf+0x10fe/0x1a00 [ 887.660296][T12263] add_uevent_var+0x1c5/0x440 [ 887.666806][T12263] kobject_uevent_env+0x51a/0x890 [ 887.673746][T12263] driver_register+0x3e2/0x430 [ 887.680341][T12263] usb_register_driver+0x202/0x3d0 [ 887.687339][T12263] do_one_initcall+0x1ee/0x680 [ 887.693936][T12263] do_initcall_level+0x137/0x1f0 [ 887.700703][T12263] do_initcalls+0x4b/0x90 [ 887.707075][T12263] kernel_init_freeable+0x3ce/0x560 [ 887.714123][T12263] kernel_init+0x19/0x1b0 [ 887.720295][T12263] ret_from_fork+0x1f/0x30 [ 887.726542][T12263] INITIAL USE at: [ 887.730535][T12263] lock_acquire+0x197/0x3f0 [ 887.737042][T12263] _raw_spin_lock_irqsave+0xa4/0xf0 [ 887.743982][T12263] input_inject_event+0x9e/0x2c0 [ 887.750672][T12263] led_trigger_event+0x10a/0x1e0 [ 887.757354][T12263] kbd_led_trigger_activate+0xb9/0x100 [ 887.764559][T12263] led_trigger_set+0x504/0x900 [ 887.771066][T12263] led_trigger_set_default+0x19c/0x1e0 [ 887.778266][T12263] led_classdev_register_ext+0x68f/0x870 [ 887.785647][T12263] input_leds_connect+0x51d/0x750 [ 887.792416][T12263] input_register_device+0xda7/0x1140 [ 887.799531][T12263] atkbd_connect+0x759/0xa10 [ 887.805968][T12263] serio_driver_probe+0x76/0x90 [ 887.812568][T12263] really_probe+0x284/0xc80 [ 887.818818][T12263] __driver_probe_device+0x18c/0x330 [ 887.825847][T12263] driver_probe_device+0x4f/0x420 [ 887.832619][T12263] __driver_attach+0x46b/0x670 [ 887.839125][T12263] bus_for_each_dev+0x175/0x1e0 [ 887.845743][T12263] serio_handle_event+0x29c/0x840 [ 887.852513][T12263] process_one_work+0x863/0x1000 [ 887.859193][T12263] worker_thread+0xaa8/0x12a0 [ 887.865613][T12263] kthread+0x436/0x520 [ 887.871439][T12263] ret_from_fork+0x1f/0x30 [ 887.877598][T12263] } [ 887.880184][T12263] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 887.889300][T12263] -> (&client->buffer_lock){....}-{2:2} { [ 887.895044][T12263] INITIAL USE at: [ 887.898989][T12263] lock_acquire+0x197/0x3f0 [ 887.905070][T12263] _raw_spin_lock+0x2a/0x40 [ 887.911175][T12263] evdev_pass_values+0xcb/0xab0 [ 887.917612][T12263] evdev_events+0x1c0/0x2f0 [ 887.923704][T12263] input_pass_values+0x880/0x1220 [ 887.930301][T12263] input_handle_event+0xb3f/0x1490 [ 887.936991][T12263] input_inject_event+0x1b9/0x2c0 [ 887.943604][T12263] evdev_write+0x326/0x470 [ 887.949599][T12263] vfs_write+0x300/0xd00 [ 887.955410][T12263] ksys_write+0x14d/0x250 [ 887.961397][T12263] do_syscall_64+0x4c/0xa0 [ 887.967388][T12263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 887.974853][T12263] } [ 887.977366][T12263] ... key at: [] evdev_open.__key.22+0x0/0x20 [ 887.985623][T12263] ... acquired at: [ 887.989425][T12263] _raw_spin_lock+0x2a/0x40 [ 887.994124][T12263] evdev_pass_values+0xcb/0xab0 [ 887.999158][T12263] evdev_events+0x1c0/0x2f0 [ 888.003839][T12263] input_pass_values+0x880/0x1220 [ 888.009041][T12263] input_handle_event+0xb3f/0x1490 [ 888.014328][T12263] input_inject_event+0x1b9/0x2c0 [ 888.019534][T12263] evdev_write+0x326/0x470 [ 888.024133][T12263] vfs_write+0x300/0xd00 [ 888.028556][T12263] ksys_write+0x14d/0x250 [ 888.033077][T12263] do_syscall_64+0x4c/0xa0 [ 888.037676][T12263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.043754][T12263] [ 888.046088][T12263] [ 888.046088][T12263] the dependencies between the lock to be acquired [ 888.046096][T12263] and HARDIRQ-irq-unsafe lock: [ 888.059622][T12263] -> (tasklist_lock){.+.+}-{2:2} { [ 888.064929][T12263] HARDIRQ-ON-R at: [ 888.069083][T12263] lock_acquire+0x197/0x3f0 [ 888.075614][T12263] _raw_read_lock+0x32/0x40 [ 888.082210][T12263] do_wait+0x293/0xac0 [ 888.088288][T12263] kernel_wait+0xa8/0x160 [ 888.094634][T12263] call_usermodehelper_exec_work+0xb5/0x220 [ 888.102540][T12263] process_one_work+0x863/0x1000 [ 888.109586][T12263] worker_thread+0xaa8/0x12a0 [ 888.116276][T12263] kthread+0x436/0x520 [ 888.122354][T12263] ret_from_fork+0x1f/0x30 [ 888.128781][T12263] SOFTIRQ-ON-R at: [ 888.132940][T12263] lock_acquire+0x197/0x3f0 [ 888.139541][T12263] _raw_read_lock+0x32/0x40 [ 888.146087][T12263] do_wait+0x293/0xac0 [ 888.152164][T12263] kernel_wait+0xa8/0x160 [ 888.158498][T12263] call_usermodehelper_exec_work+0xb5/0x220 [ 888.166402][T12263] process_one_work+0x863/0x1000 [ 888.173345][T12263] worker_thread+0xaa8/0x12a0 [ 888.180031][T12263] kthread+0x436/0x520 [ 888.186112][T12263] ret_from_fork+0x1f/0x30 [ 888.192536][T12263] INITIAL USE at: [ 888.196614][T12263] lock_acquire+0x197/0x3f0 [ 888.203038][T12263] _raw_write_lock_irq+0x9f/0xe0 [ 888.209982][T12263] copy_process+0x234a/0x3e00 [ 888.216577][T12263] kernel_clone+0x219/0x930 [ 888.222998][T12263] kernel_thread+0xc8/0x120 [ 888.229421][T12263] rest_init+0x21/0x330 [ 888.235500][T12263] start_kernel+0x486/0x530 [ 888.241919][T12263] secondary_startup_64_no_verify+0xb1/0xbb [ 888.249732][T12263] INITIAL READ USE at: [ 888.254263][T12263] lock_acquire+0x197/0x3f0 [ 888.261123][T12263] _raw_read_lock+0x32/0x40 [ 888.268003][T12263] do_wait+0x293/0xac0 [ 888.274428][T12263] kernel_wait+0xa8/0x160 [ 888.281118][T12263] call_usermodehelper_exec_work+0xb5/0x220 [ 888.289364][T12263] process_one_work+0x863/0x1000 [ 888.296650][T12263] worker_thread+0xaa8/0x12a0 [ 888.303678][T12263] kthread+0x436/0x520 [ 888.310097][T12263] ret_from_fork+0x1f/0x30 [ 888.316864][T12263] } [ 888.319535][T12263] ... key at: [] tasklist_lock+0x18/0x40 [ 888.327548][T12263] ... acquired at: [ 888.331526][T12263] _raw_read_lock+0x32/0x40 [ 888.336216][T12263] send_sigio+0xd2/0x330 [ 888.340636][T12263] kill_fasync+0x20a/0x490 [ 888.345228][T12263] lease_break_callback+0x22/0x30 [ 888.350434][T12263] __break_lease+0x4a3/0x12b0 [ 888.355291][T12263] vfs_truncate+0x1fb/0x2f0 [ 888.359976][T12263] do_sys_truncate+0xdc/0x190 [ 888.364835][T12263] do_syscall_64+0x4c/0xa0 [ 888.369446][T12263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.375526][T12263] [ 888.377868][T12263] -> (&f->f_owner.lock){...-}-{2:2} { [ 888.383433][T12263] IN-SOFTIRQ-R at: [ 888.387675][T12263] lock_acquire+0x197/0x3f0 [ 888.394094][T12263] _raw_read_lock_irqsave+0xac/0xf0 [ 888.401129][T12263] send_sigurg+0x25/0x390 [ 888.407456][T12263] sk_send_sigurg+0x6b/0xc0 [ 888.413788][T12263] tcp_urg+0x2bc/0xb10 [ 888.419686][T12263] tcp_rcv_established+0xa9c/0x1c80 [ 888.426709][T12263] tcp_v6_do_rcv+0x539/0x1180 [ 888.433223][T12263] tcp_v6_rcv+0x20c4/0x2660 [ 888.439551][T12263] ip6_protocol_deliver_rcu+0x8f0/0x12c0 [ 888.447011][T12263] ip6_input_finish+0xa2/0x130 [ 888.453601][T12263] NF_HOOK+0x2d6/0x360 [ 888.459510][T12263] NF_HOOK+0x2d6/0x360 [ 888.465404][T12263] __netif_receive_skb+0xcc/0x290 [ 888.472262][T12263] process_backlog+0x364/0x780 [ 888.478861][T12263] __napi_poll+0xc0/0x430 [ 888.485037][T12263] net_rx_action+0x4a8/0x9c0 [ 888.491478][T12263] handle_softirqs+0x328/0x820 [ 888.498071][T12263] __irq_exit_rcu+0x12f/0x220 [ 888.504572][T12263] irq_exit_rcu+0x5/0x20 [ 888.510640][T12263] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 888.518119][T12263] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 888.525932][T12263] preempt_count_add+0x2/0x190 [ 888.532525][T12263] __up_read+0x17c/0x660 [ 888.538600][T12263] kernfs_iop_permission+0x23e/0x340 [ 888.545723][T12263] inode_permission+0x239/0x480 [ 888.552425][T12263] link_path_walk+0x2ca/0xd40 [ 888.558933][T12263] path_lookupat+0x9d/0x440 [ 888.565269][T12263] filename_lookup+0x1e2/0x4f0 [ 888.571960][T12263] user_path_at_empty+0x40/0x190 [ 888.578727][T12263] vfs_statx+0x102/0x4d0 [ 888.584793][T12263] __x64_sys_newfstatat+0x12c/0x1b0 [ 888.591820][T12263] do_syscall_64+0x4c/0xa0 [ 888.598066][T12263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.605796][T12263] INITIAL USE at: [ 888.609784][T12263] lock_acquire+0x197/0x3f0 [ 888.616031][T12263] _raw_write_lock_irq+0x9f/0xe0 [ 888.622720][T12263] __f_setown+0x37/0x330 [ 888.628705][T12263] generic_setlease+0xe9b/0x12c0 [ 888.635387][T12263] fcntl_setlease+0x25e/0x330 [ 888.641847][T12263] do_fcntl+0x10c/0x12d0 [ 888.647831][T12263] __se_sys_fcntl+0xcc/0x190 [ 888.654165][T12263] do_syscall_64+0x4c/0xa0 [ 888.660327][T12263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.667971][T12263] INITIAL READ USE at: [ 888.672387][T12263] lock_acquire+0x197/0x3f0 [ 888.679080][T12263] _raw_read_lock_irq+0xa7/0xf0 [ 888.686107][T12263] f_getown+0x22/0x240 [ 888.692375][T12263] sock_ioctl+0x45b/0x6e0 [ 888.698880][T12263] __se_sys_ioctl+0xfa/0x170 [ 888.705650][T12263] do_syscall_64+0x4c/0xa0 [ 888.712247][T12263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.720327][T12263] } [ 888.722916][T12263] ... key at: [] __alloc_file.__key+0x0/0x10 [ 888.731082][T12263] ... acquired at: [ 888.735121][T12263] _raw_read_lock_irqsave+0xac/0xf0 [ 888.740512][T12263] send_sigio+0x2f/0x330 [ 888.744935][T12263] kill_fasync+0x20a/0x490 [ 888.749530][T12263] lease_break_callback+0x22/0x30 [ 888.754737][T12263] __break_lease+0x4a3/0x12b0 [ 888.759595][T12263] vfs_truncate+0x1fb/0x2f0 [ 888.764284][T12263] do_sys_truncate+0xdc/0x190 [ 888.769143][T12263] do_syscall_64+0x4c/0xa0 [ 888.773758][T12263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.779836][T12263] [ 888.782156][T12263] -> (&new->fa_lock){....}-{2:2} { [ 888.787288][T12263] INITIAL USE at: [ 888.791185][T12263] lock_acquire+0x197/0x3f0 [ 888.797265][T12263] _raw_write_lock_irq+0x9f/0xe0 [ 888.803775][T12263] fasync_remove_entry+0xf0/0x1c0 [ 888.810378][T12263] lease_modify+0x1a2/0x390 [ 888.816455][T12263] locks_remove_file+0x492/0xdf0 [ 888.822966][T12263] __fput+0x18d/0x930 [ 888.828522][T12263] task_work_run+0x125/0x1a0 [ 888.834683][T12263] exit_to_user_mode_loop+0x10f/0x130 [ 888.841627][T12263] exit_to_user_mode_prepare+0xb1/0x140 [ 888.848746][T12263] syscall_exit_to_user_mode+0x16/0x40 [ 888.855775][T12263] do_syscall_64+0x58/0xa0 [ 888.861759][T12263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.869259][T12263] INITIAL READ USE at: [ 888.873593][T12263] lock_acquire+0x197/0x3f0 [ 888.880193][T12263] _raw_read_lock_irqsave+0xac/0xf0 [ 888.887407][T12263] kill_fasync+0x16d/0x490 [ 888.893826][T12263] lease_break_callback+0x22/0x30 [ 888.900853][T12263] __break_lease+0x4a3/0x12b0 [ 888.907541][T12263] vfs_truncate+0x1fb/0x2f0 [ 888.914158][T12263] do_sys_truncate+0xdc/0x190 [ 888.920857][T12263] do_syscall_64+0x4c/0xa0 [ 888.927300][T12263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.935216][T12263] } [ 888.937730][T12263] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 888.946535][T12263] ... acquired at: [ 888.950352][T12263] _raw_read_lock_irqsave+0xac/0xf0 [ 888.955736][T12263] kill_fasync+0x16d/0x490 [ 888.960338][T12263] evdev_pass_values+0x54b/0xab0 [ 888.965484][T12263] evdev_events+0x1c0/0x2f0 [ 888.970191][T12263] input_pass_values+0x880/0x1220 [ 888.975407][T12263] input_handle_event+0xb3f/0x1490 [ 888.980709][T12263] input_inject_event+0x1b9/0x2c0 [ 888.985919][T12263] evdev_write+0x326/0x470 [ 888.990554][T12263] vfs_write+0x300/0xd00 [ 888.995023][T12263] ksys_write+0x14d/0x250 [ 888.999543][T12263] do_syscall_64+0x4c/0xa0 [ 889.004154][T12263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 889.010491][T12263] [ 889.012825][T12263] [ 889.012825][T12263] stack backtrace: [ 889.018714][T12263] CPU: 0 PID: 12263 Comm: syz.0.2109 Not tainted 5.15.185-syzkaller #0 [ 889.026964][T12263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 889.037066][T12263] Call Trace: [ 889.040371][T12263] [ 889.043399][T12263] dump_stack_lvl+0x168/0x230 [ 889.048205][T12263] ? load_image+0x3b0/0x3b0 [ 889.052724][T12263] ? show_regs_print_info+0x20/0x20 [ 889.057930][T12263] ? load_image+0x3b0/0x3b0 [ 889.062459][T12263] ? print_shortest_lock_dependencies+0xf0/0x160 [ 889.068817][T12263] __lock_acquire+0x65dd/0x7c60 [ 889.073690][T12263] ? cpufreq_update_util+0x91/0x230 [ 889.078910][T12263] ? verify_lock_unused+0x140/0x140 [ 889.084120][T12263] ? verify_lock_unused+0x140/0x140 [ 889.089373][T12263] ? do_raw_spin_unlock+0x11d/0x230 [ 889.094598][T12263] lock_acquire+0x197/0x3f0 [ 889.099204][T12263] ? kill_fasync+0x16d/0x490 [ 889.103806][T12263] ? read_lock_is_recursive+0x10/0x10 [ 889.109188][T12263] _raw_read_lock_irqsave+0xac/0xf0 [ 889.114492][T12263] ? kill_fasync+0x16d/0x490 [ 889.119116][T12263] ? _raw_read_lock+0x40/0x40 [ 889.123822][T12263] ? do_raw_spin_lock+0x11d/0x280 [ 889.128868][T12263] kill_fasync+0x16d/0x490 [ 889.133299][T12263] evdev_pass_values+0x54b/0xab0 [ 889.138250][T12263] ? evdev_pass_values+0x571/0xab0 [ 889.143370][T12263] evdev_events+0x1c0/0x2f0 [ 889.148055][T12263] ? evdev_event+0xd0/0xd0 [ 889.152612][T12263] input_pass_values+0x880/0x1220 [ 889.157664][T12263] ? read_lock_is_recursive+0x10/0x10 [ 889.163076][T12263] input_handle_event+0xb3f/0x1490 [ 889.168217][T12263] input_inject_event+0x1b9/0x2c0 [ 889.173473][T12263] evdev_write+0x326/0x470 [ 889.177919][T12263] ? evdev_read+0xb50/0xb50 [ 889.182437][T12263] ? end_current_label_crit_section+0x14b/0x170 [ 889.188695][T12263] ? common_file_perm+0x171/0x1c0 [ 889.193724][T12263] ? fsnotify_perm+0x5d/0x560 [ 889.198405][T12263] ? security_file_permission+0x75/0xa0 [ 889.203955][T12263] ? evdev_read+0xb50/0xb50 [ 889.208562][T12263] vfs_write+0x300/0xd00 [ 889.212842][T12263] ? file_end_write+0x250/0x250 [ 889.217731][T12263] ? __fget_files+0x40f/0x480 [ 889.222682][T12263] ? __fdget_pos+0x1e2/0x370 [ 889.227289][T12263] ? ksys_write+0x71/0x250 [ 889.231713][T12263] ksys_write+0x14d/0x250 [ 889.236148][T12263] ? __ia32_sys_read+0x80/0x80 [ 889.240915][T12263] ? lockdep_hardirqs_on+0x94/0x140 [ 889.246120][T12263] do_syscall_64+0x4c/0xa0 [ 889.250539][T12263] ? clear_bhb_loop+0x30/0x80 [ 889.255219][T12263] ? clear_bhb_loop+0x30/0x80 [ 889.259903][T12263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 889.265814][T12263] RIP: 0033:0x7f61f253b929 [ 889.270236][T12263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.289991][T12263] RSP: 002b:00007f61f03a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 889.298463][T12263] RAX: ffffffffffffffda RBX: 00007f61f2762fa0 RCX: 00007f61f253b929 [ 889.306465][T12263] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 889.314442][T12263] RBP: 00007f61f25bdb39 R08: 0000000000000000 R09: 0000000000000000 [ 889.322413][T12263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.330384][T12263] R13: 0000000000000000 R14: 00007f61f2762fa0 R15: 00007fffe80b2e58 [ 889.338365][T12263] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 889.341513][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.381008][T12265] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 889.451160][T10302] usb 4-1: USB disconnect, device number 35 [ 889.470469][T12265] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 889.517834][ T4281] device bridge_slave_1 left promiscuous mode [ 889.535543][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.535693][ T4221] usb 5-1: USB disconnect, device number 16 [ 889.572353][ T4281] device bridge_slave_0 left promiscuous mode [ 889.591973][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.610508][ T4281] device veth1_macvtap left promiscuous mode [ 889.616572][ T4281] device veth0_macvtap left promiscuous mode [ 889.630194][ T4281] device veth1_vlan left promiscuous mode [ 889.636018][ T4281] device veth0_vlan left promiscuous mode [ 889.818831][ T4281] team0 (unregistering): Port device team_slave_1 removed [ 889.832191][ T4281] team0 (unregistering): Port device team_slave_0 removed [ 889.844125][ T4281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.858028][ T4281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.906909][ T4281] bond0 (unregistering): Released all slaves [ 889.943598][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 889.951612][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 889.975343][T12256] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 890.000831][ T4183] bridge0: port 3(syz_tun) entered disabled state [ 890.041095][ T4183] device syz_tun left promiscuous mode [ 890.046634][ T4183] bridge0: port 3(syz_tun) entered disabled state [ 890.413339][ C1] ------------[ cut here ]------------ [ 890.418848][ C1] refcount_t: addition on 0; use-after-free. [ 890.425342][ C1] WARNING: CPU: 1 PID: 12144 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0 [ 890.434810][ C1] Modules linked in: [ 890.438739][ C1] CPU: 1 PID: 12144 Comm: kworker/1:6 Not tainted 5.15.185-syzkaller #0 [ 890.447146][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 890.457267][ C1] Workqueue: events pwq_unbound_release_workfn [ 890.463519][ C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 890.469633][ C1] Code: 09 01 48 c7 c7 40 6b 59 8a e8 dd 27 bb 05 0f 0b eb e0 e8 04 42 9c fd c6 05 ae 8f 79 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 <0f> 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59 [ 890.489342][ C1] RSP: 0018:ffffc90000dd06a8 EFLAGS: 00010246 [ 890.495476][ C1] RAX: da57ff6a9a66a700 RBX: 0000000000000002 RCX: ffff888029560000 [ 890.503524][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 890.511551][ C1] RBP: ffffc90000dd0808 R08: dffffc0000000000 R09: fffff520001ba039 [ 890.519556][ C1] R10: fffff520001ba039 R11: 1ffff920001ba038 R12: ffff888073010000 [ 890.527782][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 890.535822][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 890.544928][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 890.551562][ C1] CR2: 00007ff013941000 CR3: 000000000be8e000 CR4: 00000000003506e0 [ 890.559583][ C1] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 890.567697][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 890.575735][ C1] Call Trace: [ 890.579045][ C1] [ 890.581950][ C1] tipc_crypto_xmit+0x1949/0x2560 [ 890.587228][ C1] ? tipc_crypto_do_cmd+0xd60/0xd60 [ 890.592506][ C1] ? skb_clone+0x1f1/0x350 [ 890.596958][ C1] ? tipc_crypto_clone_msg+0x33/0x160 [ 890.602409][ C1] tipc_crypto_clone_msg+0x91/0x160 [ 890.607639][ C1] tipc_crypto_xmit+0x1ac5/0x2560 [ 890.612744][ C1] ? tipc_crypto_do_cmd+0xd60/0xd60 [ 890.618149][ C1] tipc_bearer_xmit_skb+0x228/0x3c0 [ 890.623432][ C1] ? tipc_bearer_min_mtu+0x190/0x190 [ 890.628753][ C1] tipc_disc_timeout+0x568/0x6b0 [ 890.633776][ C1] ? tipc_disc_create+0x920/0x920 [ 890.638841][ C1] ? lock_acquire+0xcd/0x3f0 [ 890.643514][ C1] ? rcu_is_watching+0x11/0xa0 [ 890.648317][ C1] ? tipc_disc_create+0x920/0x920 [ 890.653428][ C1] call_timer_fn+0x16c/0x530 [ 890.658065][ C1] ? tipc_disc_create+0x920/0x920 [ 890.663164][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 890.668308][ C1] ? __run_timers+0x7c0/0x7c0 [ 890.673061][ C1] ? rcu_is_watching+0x11/0xa0 [ 890.677860][ C1] ? tipc_disc_create+0x920/0x920 [ 890.682964][ C1] __run_timers+0x525/0x7c0 [ 890.687519][ C1] ? detach_timer+0x2b0/0x2b0 [ 890.692263][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 890.697498][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 890.702422][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 890.707745][ C1] run_timer_softirq+0x63/0xf0 [ 890.712595][ C1] handle_softirqs+0x328/0x820 [ 890.717405][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 890.722337][ C1] ? do_softirq+0x200/0x200 [ 890.726876][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 890.732164][ C1] __irq_exit_rcu+0x12f/0x220 [ 890.736885][ C1] ? irq_exit_rcu+0x20/0x20 [ 890.741466][ C1] irq_exit_rcu+0x5/0x20 [ 890.745743][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 890.751461][ C1] [ 890.754588][ C1] [ 890.757543][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 890.763615][ C1] RIP: 0010:preempt_schedule_irq+0xac/0x150 [ 890.769654][ C1] Code: 44 24 20 f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 70 bf 01 00 00 00 e8 7f b5 a7 f7 e8 1a 37 d4 f7 fb bf 01 00 00 00 cf b5 ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 890.789360][ C1] RSP: 0018:ffffc900031ff9c0 EFLAGS: 00000282 [ 890.795764][ C1] RAX: da57ff6a9a66a700 RBX: 0000000000000000 RCX: ffff888029560000 [ 890.803811][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 890.812027][ C1] RBP: ffffc900031ffa60 R08: dffffc0000000000 R09: fffffbfff1ad157e [ 890.820084][ C1] R10: fffffbfff1ad157e R11: 1ffffffff1ad157d R12: 0000000000000000 [ 890.828098][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200063ff38 [ 890.836245][ C1] ? __cond_resched+0xb0/0xb0 [ 890.840994][ C1] ? rcu_is_watching+0x11/0xa0 [ 890.845791][ C1] ? rcu_irq_exit_check_preempt+0xd2/0x200 [ 890.851676][ C1] irqentry_exit+0x63/0x70 [ 890.856133][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 890.861676][ C1] RIP: 0010:lockdep_unregister_key+0x4ae/0x500 [ 890.867870][ C1] Code: 48 3b 84 24 80 00 00 00 75 39 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1e e1 44 08 41 f7 c4 00 02 00 00 74 8b fb 84 db <75> 8a eb 9b 0f 0b e9 58 ff ff ff 0f 0b e9 c4 fe ff ff 0f 0b e9 11 [ 890.887692][ C1] RSP: 0018:ffffc900031ffb20 EFLAGS: 00000246 [ 890.893821][ C1] RAX: da57ff6a9a66a700 RBX: 0000000000000000 RCX: da57ff6a9a66a700 [ 890.901882][ C1] RDX: 0000000000000001 RSI: ffffffff8a0b1fc0 RDI: ffffffff8a59a740 [ 890.909896][ C1] RBP: ffffc900031ffbf0 R08: dffffc0000000000 R09: fffffbfff1fed8a4 [ 890.917986][ C1] R10: fffffbfff1fed8a4 R11: 1ffffffff1fed8a3 R12: 0000000000000203 [ 890.926129][ C1] R13: ffff888140d9b129 R14: ffffffff8ff6b028 R15: 1ffff9200063ff68 [ 890.934193][ C1] ? lockdep_reset_lock+0x2d0/0x2d0 [ 890.939432][ C1] ? read_lock_is_recursive+0x10/0x10 [ 890.944914][ C1] pwq_unbound_release_workfn+0x262/0x2b0 [ 890.950692][ C1] process_one_work+0x863/0x1000 [ 890.955677][ C1] ? worker_detach_from_pool+0x240/0x240 [ 890.961406][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 890.966730][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 890.971835][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 890.977246][ C1] ? wq_worker_running+0x97/0x170 [ 890.982354][ C1] worker_thread+0xaa8/0x12a0 [ 890.987082][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 890.993156][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 890.998403][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 891.003686][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 891.009629][ C1] kthread+0x436/0x520 [ 891.013782][ C1] ? rcu_lock_release+0x20/0x20 [ 891.018665][ C1] ? kthread_blkcg+0xd0/0xd0 [ 891.023338][ C1] ret_from_fork+0x1f/0x30 [ 891.027796][ C1] [ 891.030881][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 891.038179][ C1] CPU: 1 PID: 12144 Comm: kworker/1:6 Not tainted 5.15.185-syzkaller #0 [ 891.046533][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 891.056627][ C1] Workqueue: events pwq_unbound_release_workfn [ 891.062830][ C1] Call Trace: [ 891.066135][ C1] [ 891.069003][ C1] dump_stack_lvl+0x168/0x230 [ 891.073715][ C1] ? show_regs_print_info+0x20/0x20 [ 891.079041][ C1] ? load_image+0x3b0/0x3b0 [ 891.083587][ C1] panic+0x2c9/0x7f0 [ 891.087521][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 891.092060][ C1] ? ret_from_fork+0x1f/0x30 [ 891.096692][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 891.102191][ C1] __warn+0x248/0x2b0 [ 891.106204][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 891.111698][ C1] report_bug+0x1b7/0x2e0 [ 891.116067][ C1] handle_bug+0x3a/0x70 [ 891.120263][ C1] exc_invalid_op+0x16/0x40 [ 891.124891][ C1] asm_exc_invalid_op+0x16/0x20 [ 891.129771][ C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 891.135874][ C1] Code: 09 01 48 c7 c7 40 6b 59 8a e8 dd 27 bb 05 0f 0b eb e0 e8 04 42 9c fd c6 05 ae 8f 79 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 <0f> 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59 [ 891.155506][ C1] RSP: 0018:ffffc90000dd06a8 EFLAGS: 00010246 [ 891.161603][ C1] RAX: da57ff6a9a66a700 RBX: 0000000000000002 RCX: ffff888029560000 [ 891.169605][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 891.177606][ C1] RBP: ffffc90000dd0808 R08: dffffc0000000000 R09: fffff520001ba039 [ 891.185607][ C1] R10: fffff520001ba039 R11: 1ffff920001ba038 R12: ffff888073010000 [ 891.193604][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 891.201619][ C1] ? refcount_warn_saturate+0xff/0x1a0 [ 891.207114][ C1] tipc_crypto_xmit+0x1949/0x2560 [ 891.212269][ C1] ? tipc_crypto_do_cmd+0xd60/0xd60 [ 891.217502][ C1] ? skb_clone+0x1f1/0x350 [ 891.221944][ C1] ? tipc_crypto_clone_msg+0x33/0x160 [ 891.227343][ C1] tipc_crypto_clone_msg+0x91/0x160 [ 891.232574][ C1] tipc_crypto_xmit+0x1ac5/0x2560 [ 891.237636][ C1] ? tipc_crypto_do_cmd+0xd60/0xd60 [ 891.242881][ C1] tipc_bearer_xmit_skb+0x228/0x3c0 [ 891.248116][ C1] ? tipc_bearer_min_mtu+0x190/0x190 [ 891.253442][ C1] tipc_disc_timeout+0x568/0x6b0 [ 891.258418][ C1] ? tipc_disc_create+0x920/0x920 [ 891.263471][ C1] ? lock_acquire+0xcd/0x3f0 [ 891.268102][ C1] ? rcu_is_watching+0x11/0xa0 [ 891.272896][ C1] ? tipc_disc_create+0x920/0x920 [ 891.277947][ C1] call_timer_fn+0x16c/0x530 [ 891.282564][ C1] ? tipc_disc_create+0x920/0x920 [ 891.287621][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 891.292679][ C1] ? __run_timers+0x7c0/0x7c0 [ 891.297394][ C1] ? rcu_is_watching+0x11/0xa0 [ 891.302448][ C1] ? tipc_disc_create+0x920/0x920 [ 891.307506][ C1] __run_timers+0x525/0x7c0 [ 891.312048][ C1] ? detach_timer+0x2b0/0x2b0 [ 891.316766][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 891.321992][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 891.326871][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 891.332190][ C1] run_timer_softirq+0x63/0xf0 [ 891.336991][ C1] handle_softirqs+0x328/0x820 [ 891.341796][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 891.346688][ C1] ? do_softirq+0x200/0x200 [ 891.351345][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 891.356576][ C1] __irq_exit_rcu+0x12f/0x220 [ 891.361288][ C1] ? irq_exit_rcu+0x20/0x20 [ 891.365830][ C1] irq_exit_rcu+0x5/0x20 [ 891.370098][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 891.375783][ C1] [ 891.378735][ C1] [ 891.381685][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 891.387700][ C1] RIP: 0010:preempt_schedule_irq+0xac/0x150 [ 891.393636][ C1] Code: 44 24 20 f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 70 bf 01 00 00 00 e8 7f b5 a7 f7 e8 1a 37 d4 f7 fb bf 01 00 00 00 cf b5 ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 891.413272][ C1] RSP: 0018:ffffc900031ff9c0 EFLAGS: 00000282 [ 891.419381][ C1] RAX: da57ff6a9a66a700 RBX: 0000000000000000 RCX: ffff888029560000 [ 891.427383][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 891.435488][ C1] RBP: ffffc900031ffa60 R08: dffffc0000000000 R09: fffffbfff1ad157e [ 891.443498][ C1] R10: fffffbfff1ad157e R11: 1ffffffff1ad157d R12: 0000000000000000 [ 891.451507][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200063ff38 [ 891.459611][ C1] ? __cond_resched+0xb0/0xb0 [ 891.464426][ C1] ? rcu_is_watching+0x11/0xa0 [ 891.469230][ C1] ? rcu_irq_exit_check_preempt+0xd2/0x200 [ 891.475072][ C1] irqentry_exit+0x63/0x70 [ 891.479521][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 891.485021][ C1] RIP: 0010:lockdep_unregister_key+0x4ae/0x500 [ 891.491239][ C1] Code: 48 3b 84 24 80 00 00 00 75 39 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1e e1 44 08 41 f7 c4 00 02 00 00 74 8b fb 84 db <75> 8a eb 9b 0f 0b e9 58 ff ff ff 0f 0b e9 c4 fe ff ff 0f 0b e9 11 [ 891.510874][ C1] RSP: 0018:ffffc900031ffb20 EFLAGS: 00000246 [ 891.516973][ C1] RAX: da57ff6a9a66a700 RBX: 0000000000000000 RCX: da57ff6a9a66a700 [ 891.524979][ C1] RDX: 0000000000000001 RSI: ffffffff8a0b1fc0 RDI: ffffffff8a59a740 [ 891.532983][ C1] RBP: ffffc900031ffbf0 R08: dffffc0000000000 R09: fffffbfff1fed8a4 [ 891.540989][ C1] R10: fffffbfff1fed8a4 R11: 1ffffffff1fed8a3 R12: 0000000000000203 [ 891.549004][ C1] R13: ffff888140d9b129 R14: ffffffff8ff6b028 R15: 1ffff9200063ff68 [ 891.557022][ C1] ? lockdep_reset_lock+0x2d0/0x2d0 [ 891.562265][ C1] ? read_lock_is_recursive+0x10/0x10 [ 891.567684][ C1] pwq_unbound_release_workfn+0x262/0x2b0 [ 891.573545][ C1] process_one_work+0x863/0x1000 [ 891.578525][ C1] ? worker_detach_from_pool+0x240/0x240 [ 891.584197][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 891.589605][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 891.594846][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 891.600256][ C1] ? wq_worker_running+0x97/0x170 [ 891.605317][ C1] worker_thread+0xaa8/0x12a0 [ 891.610031][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 891.615985][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 891.621225][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 891.626458][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 891.632383][ C1] kthread+0x436/0x520 [ 891.636482][ C1] ? rcu_lock_release+0x20/0x20 [ 891.641362][ C1] ? kthread_blkcg+0xd0/0xd0 [ 891.645981][ C1] ret_from_fork+0x1f/0x30 [ 891.650442][ C1] [ 891.653763][ C1] Kernel Offset: disabled [ 891.658097][ C1] Rebooting in 86400 seconds..