last executing test programs: 1m57.855168308s ago: executing program 0 (id=4654): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) 1m57.728243409s ago: executing program 0 (id=4657): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x5, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)="f6f704283621f8", 0x7}], 0x1, &(0x7f00000003c0)=[@timestamping={{0x14}}], 0x18}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x10004e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900150000000000060000000a008900"], 0x34}], 0x1, 0x0, 0x0, 0x40080}, 0x0) 1m54.961777434s ago: executing program 0 (id=4673): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r3, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.670118972s ago: executing program 0 (id=4677): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0xc8882, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x200) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040000}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x40000) utimes(0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x28502, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) setns(0xffffffffffffffff, 0x4000000) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) 1m50.29864948s ago: executing program 0 (id=4685): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x3) 1m50.236846931s ago: executing program 0 (id=4686): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x2, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) 1m50.031769227s ago: executing program 2 (id=4687): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) shutdown(r0, 0x1) 1m49.780517434s ago: executing program 2 (id=4688): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x147}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{0x0}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m49.724384671s ago: executing program 2 (id=4689): readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) 1m48.826518612s ago: executing program 2 (id=4695): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x8000) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000180)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r4], 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 1m48.357122455s ago: executing program 2 (id=4696): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x3) 1m48.266732463s ago: executing program 2 (id=4697): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 1m47.503309374s ago: executing program 4 (id=4699): socket$nl_xfrm(0x10, 0x3, 0x6) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 1m47.226117854s ago: executing program 4 (id=4700): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x5, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)="f6f704283621f8", 0x7}], 0x1, &(0x7f00000003c0)=[@timestamping={{0x14}}], 0x18}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x10004e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900150000000000060000000a008900"], 0x34}], 0x1, 0x0, 0x0, 0x40080}, 0x0) 1m46.175312267s ago: executing program 4 (id=4702): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000004a0000680012800b0001006272696467650000580002800c001f0001000000000000000500160001000000060027000e000000050029000000000008000400010100000c0023006400000000"], 0x90}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) 1m46.002888519s ago: executing program 4 (id=4703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000400)={0x0, 0x7, 0x80, 0xb6, 0x16, "004fba7d07ffffff08630400"}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000101010200000000000000000a00ff7e140019800c000200"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1m44.873834109s ago: executing program 4 (id=4707): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x3) 1m44.382321739s ago: executing program 4 (id=4709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c761", 0xc4}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m35.206042998s ago: executing program 32 (id=4686): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x2, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) 1m33.176022942s ago: executing program 33 (id=4697): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 1m28.76218389s ago: executing program 34 (id=4709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c761", 0xc4}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 39.468229484s ago: executing program 5 (id=4920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) 39.016924832s ago: executing program 5 (id=4922): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) migrate_pages(0x0, 0x9, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(0x0, 0xb) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r4}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 37.433031899s ago: executing program 5 (id=4923): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 35.144725171s ago: executing program 7 (id=4934): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x803c1, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0xffffffffffffffff) ptrace$pokeuser(0x6, r1, 0x3, 0x80000001) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 34.54589738s ago: executing program 3 (id=4937): openat$nullb(0xffffffffffffff9c, 0x0, 0xcfa42, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$dsp(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 33.460486965s ago: executing program 3 (id=4938): openat$nullb(0xffffffffffffff9c, 0x0, 0xcfa42, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 33.047019028s ago: executing program 7 (id=4941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x59, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 33.041701055s ago: executing program 6 (id=4942): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) 32.838858097s ago: executing program 3 (id=4944): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) migrate_pages(0x0, 0x9, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(0x0, 0xb) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r4}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 32.775279297s ago: executing program 7 (id=4945): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x300, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 31.487660986s ago: executing program 6 (id=4946): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4", 0x64, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 31.487069491s ago: executing program 3 (id=4947): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0xfffffffffffffffc, 0x0}, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x19, "6512fc37363d6340a5ff50ebd89cbfc19c85e162b785fa6ffb"}, 0x0}) 30.746106929s ago: executing program 5 (id=4949): openat$nullb(0xffffffffffffff9c, 0x0, 0xcfa42, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$dsp(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 30.345625515s ago: executing program 1 (id=4950): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r0 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x81, 0xfffffff7, 0x1, 0x100, 0xdbd}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) close_range(r3, 0xffffffffffffffff, 0x2000000000000) 30.142633199s ago: executing program 1 (id=4951): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x803c1, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0xffffffffffffffff) ptrace$pokeuser(0x6, r1, 0x3, 0x80000001) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 30.11648045s ago: executing program 6 (id=4952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = io_uring_setup(0x8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, 0x0, 0x7ffffffe) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 29.159086466s ago: executing program 1 (id=4953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c4}, 0x844) 29.158543812s ago: executing program 5 (id=4954): openat$nullb(0xffffffffffffff9c, 0x0, 0xcfa42, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 29.150484887s ago: executing program 7 (id=4955): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x59, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 29.134477232s ago: executing program 1 (id=4956): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 29.055126748s ago: executing program 1 (id=4957): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x4001000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) 28.673178851s ago: executing program 7 (id=4958): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)='/d%v\xff\x00\xd4\xcd/snd/midiC#D#\x00', 0x0) 28.654220185s ago: executing program 1 (id=4959): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 28.625523162s ago: executing program 6 (id=4960): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r3, 0x2, 0x0, 0x0, 0x0, 0x0) io_destroy(r3) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000180)={0xfff, 0x0, 0x1000, 0x9, 0x4, 0xfffff800}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.573451991s ago: executing program 5 (id=4961): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r0 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x81, 0xfffffff7, 0x1, 0x100, 0xdbd}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) close_range(r3, 0xffffffffffffffff, 0x2000000000000) read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/4068, 0xfe4) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f00000000c0)) 26.21769976s ago: executing program 6 (id=4962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 26.060465861s ago: executing program 3 (id=4963): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x803c1, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x3, 0x80000001) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 25.997410951s ago: executing program 7 (id=4964): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000180)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r4], 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 25.856950778s ago: executing program 6 (id=4965): openat$nullb(0xffffffffffffff9c, 0x0, 0xcfa42, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) gettid() r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000100)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 24.154902467s ago: executing program 3 (id=4966): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c4}, 0x844) 0s ago: executing program 35 (id=4961): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r0 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x81, 0xfffffff7, 0x1, 0x100, 0xdbd}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) close_range(r3, 0xffffffffffffffff, 0x2000000000000) read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/4068, 0xfe4) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): erface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 497.366251][ T821] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 497.366274][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.374778][ T821] usb 5-1: config 0 descriptor?? [ 497.376371][T16418] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 497.455163][T16425] syzkaller0: entered promiscuous mode [ 497.455241][T16425] syzkaller0: entered allmulticast mode [ 497.541169][T16426] program syz.3.3863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.843616][T16418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.843910][T16418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.913656][ T821] usbhid 5-1:0.0: can't add hid device: -71 [ 497.913726][ T821] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 498.049824][ T821] usb 5-1: USB disconnect, device number 70 [ 500.231016][T16459] comedi comedi2: No hardware detected at I/O base 0x3c4 [ 500.560650][ T31] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 500.710614][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 500.712799][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 500.713837][ T31] usb 4-1: config 204 has an invalid interface number: 8 but max is 1 [ 500.713860][ T31] usb 4-1: config 204 has an invalid interface number: 8 but max is 1 [ 500.713880][ T31] usb 4-1: config 204 has 1 interface, different from the descriptor's value: 2 [ 500.713902][ T31] usb 4-1: config 204 has no interface number 0 [ 500.713927][ T31] usb 4-1: Duplicate descriptor for config 204 interface 8 altsetting 9, skipping [ 500.713947][ T31] usb 4-1: config 204 interface 8 has no altsetting 0 [ 500.715951][ T31] usb 4-1: New USB device found, idVendor=1199, idProduct=9091, bcdDevice=6b.dd [ 500.716051][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.716071][ T31] usb 4-1: Product: syz [ 500.716086][ T31] usb 4-1: Manufacturer: syz [ 500.716101][ T31] usb 4-1: SerialNumber: syz [ 501.566307][ T1344] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.566369][ T1344] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.100636][ T31] usb 4-1: USB disconnect, device number 58 [ 503.967310][T16480] Driver unsupported XDP return value 0 on prog (id 68) dev N/A, expect packet loss! [ 505.732025][T16497] loop5: detected capacity change from 0 to 6 [ 505.733626][T16497] Dev loop5: unable to read RDB block 6 [ 505.733664][T16497] loop5: unable to read partition table [ 505.733794][T16497] loop5: partition table beyond EOD, truncated [ 505.734874][T16497] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 505.863473][T16501] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 506.360513][T16507] binder: 16504:16507 ioctl 4018620d 0 returned -22 [ 507.067876][ T59] Bluetooth: Wrong link type (-71) [ 507.110401][T16512] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 508.043172][T16521] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x2) [ 509.460780][ T31] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 509.894225][ T31] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 509.894253][ T31] usb 5-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 509.898555][ T31] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 509.898583][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.898603][ T31] usb 5-1: Product: syz [ 509.898618][ T31] usb 5-1: Manufacturer: syz [ 509.898632][ T31] usb 5-1: SerialNumber: syz [ 511.363925][ T31] usb 5-1: USB disconnect, device number 71 [ 512.130626][ T5691] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 512.284747][ T5691] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 512.284781][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.284802][ T5691] usb 3-1: Product: syz [ 512.284817][ T5691] usb 3-1: Manufacturer: syz [ 512.284832][ T5691] usb 3-1: SerialNumber: syz [ 512.535692][ T5691] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 512.535738][ T5691] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 512.535759][ T5691] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 512.702669][ T5691] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 512.728339][ T5691] usb 3-1: USB disconnect, device number 75 [ 512.810643][ T43] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 513.110631][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 513.112942][ T43] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 513.112958][ T43] usb 5-1: config 252 has no interface number 0 [ 513.112978][ T43] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 513.118307][ T43] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 513.118339][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.118359][ T43] usb 5-1: Product: syz [ 513.118374][ T43] usb 5-1: Manufacturer: syz [ 513.118388][ T43] usb 5-1: SerialNumber: syz [ 513.174043][ T43] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 513.412702][ T5851] usb 5-1: Failed to submit usb control message: -71 [ 513.412734][ T5851] usb 5-1: unable to send the bmi data to the device: -71 [ 513.412752][ T5851] usb 5-1: unable to get target info from device [ 513.412777][ T5851] usb 5-1: could not get target info (-71) [ 513.412897][ T5851] usb 5-1: could not probe fw (-71) [ 513.414217][ T5787] usb 5-1: USB disconnect, device number 72 [ 513.493546][ T43] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 513.640979][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 513.649082][ T43] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 513.649140][ T43] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 513.649191][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 513.649499][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 513.649539][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 513.649593][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 513.649644][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 513.649695][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 513.649935][ T43] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 513.649989][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.707855][T16620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3934'. [ 513.762947][ T43] usb 2-1: config 0 descriptor?? [ 514.202495][ T43] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 514.454862][ T43] usb 2-1: USB disconnect, device number 89 [ 514.457474][ T43] usblp0: removed [ 514.559127][T16626] binder: 16623:16626 ioctl 4018620d 0 returned -22 [ 515.350620][T16632] binder: 16627:16632 ioctl 4018620d 0 returned -22 [ 516.080950][ T43] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 516.235746][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.235796][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 516.235822][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.281945][ T43] usb 3-1: config 0 descriptor?? [ 516.326936][T16660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.330514][ T43] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 516.350044][ T43] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 516.523431][ T43] usb 3-1: USB disconnect, device number 76 [ 517.146250][ T5787] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 517.341348][ T5787] usb 2-1: Using ep0 maxpacket: 16 [ 517.666531][ T5787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.666585][ T5787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 517.677278][ T5787] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.677315][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.677335][ T5787] usb 2-1: Product: syz [ 517.677351][ T5787] usb 2-1: Manufacturer: syz [ 517.677372][ T5787] usb 2-1: SerialNumber: syz [ 518.733720][ T5787] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 518.752363][ T5787] cdc_ncm 2-1:1.0: bind() failure [ 518.770031][ T5787] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 518.770067][ T5787] cdc_ncm 2-1:1.1: bind() failure [ 518.793434][ T5787] usb 2-1: USB disconnect, device number 90 [ 519.381044][ T5787] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 519.530804][ T5787] usb 4-1: Using ep0 maxpacket: 32 [ 519.534126][ T5787] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 519.534156][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.534176][ T5787] usb 4-1: Product: syz [ 519.534190][ T5787] usb 4-1: Manufacturer: syz [ 519.534204][ T5787] usb 4-1: SerialNumber: syz [ 519.539859][ T5787] usb 4-1: config 0 descriptor?? [ 519.960815][ T821] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 520.112563][ T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.112610][ T821] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 520.112634][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.122853][ T821] usb 2-1: config 0 descriptor?? [ 520.160737][ T5787] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 520.160792][ T5787] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 520.160841][ T5787] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 520.301791][ T5787] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 520.403896][ T5691] usb 4-1: USB disconnect, device number 59 [ 520.553662][ T821] ath6kl: Failed to read usb control message: -71 [ 520.553700][ T821] ath6kl: Unable to read the bmi data from the device: -71 [ 520.553717][ T821] ath6kl: Unable to recv target info: -71 [ 520.554141][ T821] ath6kl: Failed to init ath6kl core: -71 [ 520.554441][ T821] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 520.559512][ T821] usb 2-1: USB disconnect, device number 91 [ 523.718329][T16882] binder: 16872:16882 ioctl 4018620d 0 returned -22 [ 525.480623][ T5691] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 525.701987][ T5691] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.702034][ T5691] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 525.702059][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.705501][ T5691] usb 4-1: config 0 descriptor?? [ 526.491968][ T5691] ath6kl: Failed to read usb control message: -71 [ 526.492008][ T5691] ath6kl: Unable to read the bmi data from the device: -71 [ 526.492024][ T5691] ath6kl: Unable to recv target info: -71 [ 526.493961][ T5691] ath6kl: Failed to init ath6kl core: -71 [ 526.494254][ T5691] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 526.549737][ T5691] usb 4-1: USB disconnect, device number 60 [ 529.450662][ T43] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 529.615592][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 529.688890][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.689110][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.689534][ T43] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 529.689668][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.868111][ T43] usb 3-1: config 0 descriptor?? [ 530.363825][ T43] hid_parser_main: 364 callbacks suppressed [ 530.363899][ T43] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 530.363931][ T43] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 530.561783][ T43] ft260 0003:0403:6030.0015: chip code: 12fc 3736 [ 530.621676][T17020] netlink: 'syz.1.4098': attribute type 1 has an invalid length. [ 530.764734][ T43] ft260 0003:0403:6030.0015: failed to retrieve system status [ 530.764974][ T43] ft260 0003:0403:6030.0015: probe with driver ft260 failed with error -71 [ 530.770037][ T43] usb 3-1: USB disconnect, device number 77 [ 533.584169][T17103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.730643][ T5708] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 534.047848][ T5708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.049741][ T5708] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 534.050277][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.200741][ T5708] usb 2-1: config 0 descriptor?? [ 534.653511][T17122] ip6erspan0: entered promiscuous mode [ 535.121761][ T5708] ath6kl: Failed to read usb control message: -71 [ 535.121802][ T5708] ath6kl: Unable to read the bmi data from the device: -71 [ 535.121818][ T5708] ath6kl: Unable to recv target info: -71 [ 535.122063][ T5708] ath6kl: Failed to init ath6kl core: -71 [ 535.122371][ T5708] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 535.136075][ T5708] usb 2-1: USB disconnect, device number 92 [ 535.454735][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4143'. [ 535.860709][ T31] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 536.012705][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.012753][ T31] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 536.012778][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.016010][ T31] usb 5-1: config 0 descriptor?? [ 536.441542][ T31] ath6kl: Failed to read usb control message: -71 [ 536.441825][ T31] ath6kl: Unable to read the bmi data from the device: -71 [ 536.441847][ T31] ath6kl: Unable to recv target info: -71 [ 536.446048][ T31] ath6kl: Failed to init ath6kl core: -71 [ 536.446355][ T31] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 536.487496][ T31] usb 5-1: USB disconnect, device number 73 [ 537.397152][T17201] binder: 17192:17201 ioctl 4018620d 0 returned -22 [ 538.370656][ T820] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 538.521576][ T820] usb 4-1: Using ep0 maxpacket: 16 [ 538.523208][ T820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.523254][ T820] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 538.524967][ T820] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.524994][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.525015][ T820] usb 4-1: Product: syz [ 538.525029][ T820] usb 4-1: Manufacturer: syz [ 538.525044][ T820] usb 4-1: SerialNumber: syz [ 538.839405][T17235] binder: 17228:17235 ioctl 4018620d 0 returned -22 [ 539.444496][ T820] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 539.444544][ T820] cdc_ncm 4-1:1.0: bind() failure [ 539.466515][ T820] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 539.466551][ T820] cdc_ncm 4-1:1.1: bind() failure [ 539.482841][ T820] usb 4-1: USB disconnect, device number 61 [ 540.279450][T17267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.800152][T17288] binder: 17279:17288 ioctl 4018620d 0 returned -22 [ 541.611511][T17289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4199'. [ 542.383759][T17297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.421021][ T821] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 542.550673][ T821] usb 2-1: device descriptor read/64, error -71 [ 542.780634][ T43] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 542.951961][T17328] binder: 17315:17328 ioctl 4018620d 0 returned -22 [ 543.201918][T17329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4213'. [ 543.737572][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 543.788418][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 543.789332][ T43] usb 4-1: config 204 has an invalid interface number: 8 but max is 1 [ 543.789357][ T43] usb 4-1: config 204 has an invalid interface number: 8 but max is 1 [ 543.789377][ T43] usb 4-1: config 204 has 1 interface, different from the descriptor's value: 2 [ 543.789401][ T43] usb 4-1: config 204 has no interface number 0 [ 543.789428][ T43] usb 4-1: Duplicate descriptor for config 204 interface 8 altsetting 9, skipping [ 543.789450][ T43] usb 4-1: config 204 interface 8 has no altsetting 0 [ 543.800710][ T43] usb 4-1: New USB device found, idVendor=1199, idProduct=9091, bcdDevice=6b.dd [ 543.800742][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.800763][ T43] usb 4-1: Product: syz [ 543.800779][ T43] usb 4-1: Manufacturer: syz [ 543.800794][ T43] usb 4-1: SerialNumber: syz [ 543.958375][ T821] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 544.526600][ T43] usb 4-1: USB disconnect, device number 62 [ 545.210647][ T820] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 545.540602][ T820] usb 3-1: Using ep0 maxpacket: 16 [ 545.542146][ T820] usb 3-1: config 0 has no interfaces? [ 545.543835][ T820] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 545.543862][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.543883][ T820] usb 3-1: Product: syz [ 545.543897][ T820] usb 3-1: Manufacturer: syz [ 545.543911][ T820] usb 3-1: SerialNumber: syz [ 545.603550][ T820] usb 3-1: config 0 descriptor?? [ 545.776034][T17412] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 545.815571][ T5708] usb 3-1: USB disconnect, device number 78 [ 545.831816][ T5820] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 545.900649][ T5700] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 546.051793][ T5700] usb 2-1: Using ep0 maxpacket: 16 [ 546.056322][ T5700] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.056370][ T5700] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 546.064271][ T5700] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.064300][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.064320][ T5700] usb 2-1: Product: syz [ 546.064335][ T5700] usb 2-1: Manufacturer: syz [ 546.064349][ T5700] usb 2-1: SerialNumber: syz [ 547.057063][ T5700] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 547.076749][ T5700] cdc_ncm 2-1:1.0: bind() failure [ 547.080901][ T5700] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 547.080937][ T5700] cdc_ncm 2-1:1.1: bind() failure [ 547.084689][ T5700] usb 2-1: USB disconnect, device number 95 [ 547.330989][ T31] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 547.357672][T17465] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 547.502236][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 547.508721][ T31] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 547.508753][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.508773][ T31] usb 4-1: Product: syz [ 547.508787][ T31] usb 4-1: Manufacturer: syz [ 547.508801][ T31] usb 4-1: SerialNumber: syz [ 547.515208][ T31] usb 4-1: config 0 descriptor?? [ 547.920603][ T820] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 548.062507][ T31] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 548.070473][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 548.074228][ T31] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 548.074338][ T31] usb 4-1: media controller created [ 548.085371][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 548.170663][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 548.182063][ T820] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 548.182093][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.182114][ T820] usb 5-1: Product: syz [ 548.183280][ T820] usb 5-1: Manufacturer: syz [ 548.183297][ T820] usb 5-1: SerialNumber: syz [ 548.204639][ T820] usb 5-1: config 0 descriptor?? [ 548.263188][T17445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.263513][T17445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.310063][T17445] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 548.369386][T17445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.369710][T17445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.394841][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 548.395174][ T31] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 548.395315][ T31] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 548.405664][ T31] usb 4-1: USB disconnect, device number 63 [ 548.465634][ T31] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 548.822489][ T820] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 548.822527][ T820] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 548.822577][ T820] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 548.971861][ T820] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 548.997601][ T36] audit: type=1326 audit(1781847103.390:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17526 comm="syz.1.4265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e4f56ce59 code=0x0 [ 549.172342][ T5708] usb 5-1: USB disconnect, device number 74 [ 549.335381][ T36] audit: type=1326 audit(1781847103.730:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17534 comm="syz.3.4267" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10e94bce59 code=0x0 [ 549.739861][T17554] futex_wake_op: syz.4.4270 tries to shift op by 144; fix this program [ 549.740286][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4270'. [ 549.740342][T17554] netlink: 'syz.4.4270': attribute type 2 has an invalid length. [ 549.788116][T17556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.490616][ T5700] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 550.640888][ T5700] usb 4-1: Using ep0 maxpacket: 16 [ 550.644178][ T5700] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 550.644208][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.644228][ T5700] usb 4-1: Product: syz [ 550.644242][ T5700] usb 4-1: Manufacturer: syz [ 550.644256][ T5700] usb 4-1: SerialNumber: syz [ 550.646806][ T5700] usb 4-1: config 0 descriptor?? [ 550.739353][T17583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.831094][ T5787] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 550.970817][ T5787] usb 3-1: device descriptor read/64, error -71 [ 551.055364][ T5700] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 551.058926][T17596] loop5: detected capacity change from 0 to 6 [ 551.060498][ T5700] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 551.070769][T17596] Dev loop5: unable to read RDB block 6 [ 551.070806][T17596] loop5: AHDI p1 p2 [ 551.070822][T17596] loop5: partition table partially beyond EOD, truncated [ 551.070973][T17596] loop5: p1 start 1702059890 is beyond EOD, truncated [ 551.082499][ T5700] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 551.082540][ T5700] usb 4-1: media controller created [ 551.128347][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.210656][ T5787] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 551.260370][T17571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.270974][T17571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.340624][ T5787] usb 3-1: device descriptor read/64, error -71 [ 551.425517][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4288'. [ 551.425649][T17601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4288'. [ 551.736064][ T5787] usb usb3-port1: attempt power cycle [ 551.918910][ T5700] zl10353_read_register: readreg error (reg=127, ret==0) [ 551.918958][ T5700] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 551.918972][ T5700] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 551.966906][T17601] bridge0: entered allmulticast mode [ 551.967347][T17600] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 551.974849][T17605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.979141][T17605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.220635][ T5787] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 552.241227][ T5787] usb 3-1: device descriptor read/8, error -71 [ 552.392505][T17609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.480597][ T5787] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 552.501039][ T5787] usb 3-1: device descriptor read/8, error -71 [ 552.613928][ T5787] usb usb3-port1: unable to enumerate USB device [ 552.879276][T17625] futex_wake_op: syz.4.4296 tries to shift op by 144; fix this program [ 552.879747][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4296'. [ 552.879784][T17625] netlink: 'syz.4.4296': attribute type 2 has an invalid length. [ 553.254840][ T5787] usb 4-1: USB disconnect, device number 64 [ 553.281889][ T5787] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 553.327830][T17629] loop5: detected capacity change from 0 to 6 [ 553.328837][T17629] Dev loop5: unable to read RDB block 6 [ 553.328875][T17629] loop5: unable to read partition table [ 553.328977][T17629] loop5: partition table beyond EOD, truncated [ 553.329010][T17629] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 556.700795][ T5708] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 556.830980][ T5708] usb 1-1: device descriptor read/64, error -71 [ 557.070864][ T5708] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 557.215964][ T5708] usb 1-1: device descriptor read/64, error -71 [ 557.321644][ T5708] usb usb1-port1: attempt power cycle [ 557.574619][T17673] futex_wake_op: syz.1.4312 tries to shift op by 144; fix this program [ 557.575068][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4312'. [ 557.575103][T17673] netlink: 'syz.1.4312': attribute type 2 has an invalid length. [ 558.127397][ T5708] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 558.141608][ T5708] usb 1-1: device descriptor read/8, error -71 [ 558.270627][ T5700] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 558.380925][ T5708] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 558.400667][ T5700] usb 5-1: device descriptor read/64, error -71 [ 558.401203][ T5708] usb 1-1: device descriptor read/8, error -71 [ 558.410957][ T5592] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 558.511953][ T5708] usb usb1-port1: unable to enumerate USB device [ 558.540668][ T5592] usb 2-1: device descriptor read/64, error -71 [ 558.640638][ T5700] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 558.770603][ T5700] usb 5-1: device descriptor read/64, error -71 [ 558.781002][ T5592] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 558.880947][ T5700] usb usb5-port1: attempt power cycle [ 558.910641][ T5592] usb 2-1: device descriptor read/64, error -71 [ 559.020788][ T5592] usb usb2-port1: attempt power cycle [ 559.223803][ T5700] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 559.241166][ T5700] usb 5-1: device descriptor read/8, error -71 [ 559.361112][ T5592] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 559.381226][ T5592] usb 2-1: device descriptor read/8, error -71 [ 559.480622][ T5700] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 559.490774][ T5708] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 559.505899][ T5700] usb 5-1: device descriptor read/8, error -71 [ 559.613404][ T5700] usb usb5-port1: unable to enumerate USB device [ 559.619666][T17699] futex_wake_op: syz.3.4324 tries to shift op by 144; fix this program [ 559.620148][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4324'. [ 559.620171][T17699] netlink: 'syz.3.4324': attribute type 2 has an invalid length. [ 559.620704][ T5592] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 559.640735][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 559.641155][ T5592] usb 2-1: device descriptor read/8, error -71 [ 559.645280][ T5708] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 559.645307][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.645327][ T5708] usb 3-1: Product: syz [ 559.645342][ T5708] usb 3-1: Manufacturer: syz [ 559.645357][ T5708] usb 3-1: SerialNumber: syz [ 559.652573][ T5708] usb 3-1: config 0 descriptor?? [ 559.750850][ T5592] usb usb2-port1: unable to enumerate USB device [ 560.703042][ T5708] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 560.811025][ T5708] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 560.818299][ T5708] usb 3-1: USB disconnect, device number 83 [ 560.970648][ T5700] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 561.100641][ T5700] usb 5-1: device descriptor read/64, error -71 [ 561.401719][ T5700] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 561.525791][T17728] futex_wake_op: syz.2.4335 tries to shift op by 144; fix this program [ 561.527315][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4335'. [ 561.527389][T17728] netlink: 'syz.2.4335': attribute type 2 has an invalid length. [ 561.579748][ T5700] usb 5-1: device descriptor read/64, error -71 [ 561.680821][ T5700] usb usb5-port1: attempt power cycle [ 562.020666][ T5700] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 562.119986][ T43] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 562.310972][ T43] usb 4-1: device descriptor read/64, error -71 [ 562.521253][ T5700] usb 5-1: device descriptor read/8, error -71 [ 562.580694][ T5592] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 562.598273][ T43] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 562.720692][ T43] usb 4-1: device descriptor read/64, error -71 [ 562.783319][ T5700] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 562.788978][ T5592] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.789023][ T5592] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 562.789046][ T5592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.793314][ T5592] usb 1-1: config 0 descriptor?? [ 562.807496][ T5700] usb 5-1: device descriptor read/8, error -71 [ 562.830799][ T43] usb usb4-port1: attempt power cycle [ 562.910819][ T5700] usb usb5-port1: unable to enumerate USB device [ 562.982059][ T1344] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.982096][ T1344] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.061197][ T5691] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 563.180630][ T43] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 563.190666][ T5700] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 563.191251][ T5691] usb 3-1: device descriptor read/64, error -71 [ 563.207740][ T43] usb 4-1: device descriptor read/8, error -71 [ 563.210848][ T5592] ath6kl: Failed to read usb control message: -71 [ 563.210882][ T5592] ath6kl: Unable to read the bmi data from the device: -71 [ 563.210897][ T5592] ath6kl: Unable to recv target info: -71 [ 563.212136][ T5592] ath6kl: Failed to init ath6kl core: -71 [ 563.212452][ T5592] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 563.216860][ T5592] usb 1-1: USB disconnect, device number 67 [ 563.340658][ T5700] usb 2-1: Using ep0 maxpacket: 32 [ 563.343950][ T5700] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 563.343980][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.344001][ T5700] usb 2-1: Product: syz [ 563.344015][ T5700] usb 2-1: Manufacturer: syz [ 563.344030][ T5700] usb 2-1: SerialNumber: syz [ 563.345720][ T5700] usb 2-1: config 0 descriptor?? [ 563.430627][ T5691] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 563.460622][ T43] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 563.481215][ T43] usb 4-1: device descriptor read/8, error -71 [ 563.560650][ T5691] usb 3-1: device descriptor read/64, error -71 [ 563.591353][ T43] usb usb4-port1: unable to enumerate USB device [ 563.670837][ T5691] usb usb3-port1: attempt power cycle [ 563.896336][T17761] kvm: vcpu 0: requested 288 ns lapic timer period limited to 200000 ns [ 563.972131][ T5700] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 564.010673][ T5691] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 564.031494][ T5691] usb 3-1: device descriptor read/8, error -71 [ 564.062002][ T5700] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 564.067581][ T5700] usb 2-1: USB disconnect, device number 100 [ 564.270642][ T5691] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 564.291529][ T5691] usb 3-1: device descriptor read/8, error -71 [ 564.402232][ T5691] usb usb3-port1: unable to enumerate USB device [ 565.942475][ T5691] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 565.970428][T17794] F2FS-fs: Conflicting test_dummy_encryption options [ 566.070639][ T5691] usb 2-1: device descriptor read/64, error -71 [ 566.260604][ T31] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 566.310605][ T5691] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 566.390655][ T31] usb 1-1: device descriptor read/64, error -71 [ 566.440727][ T5691] usb 2-1: device descriptor read/64, error -71 [ 566.550930][ T5691] usb usb2-port1: attempt power cycle [ 566.630659][ T31] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 566.780642][ T31] usb 1-1: device descriptor read/64, error -71 [ 566.890626][ T5691] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 566.890793][ T31] usb usb1-port1: attempt power cycle [ 566.911120][ T5691] usb 2-1: device descriptor read/8, error -71 [ 567.170633][ T5708] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 567.170746][ T5691] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 567.254987][ T31] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 567.418175][ T5691] usb 2-1: device descriptor read/8, error -71 [ 567.465991][ T5708] usb 4-1: device descriptor read/64, error -71 [ 567.523952][ T5691] usb usb2-port1: unable to enumerate USB device [ 567.617906][ T31] usb 1-1: device descriptor read/8, error -71 [ 567.730634][ T5708] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 568.378848][T17828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.701892][ T31] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 568.701975][ T5708] usb 4-1: device descriptor read/64, error -71 [ 568.721026][ T31] usb 1-1: device descriptor read/8, error -71 [ 568.810812][ T5708] usb usb4-port1: attempt power cycle [ 568.920493][ T31] usb usb1-port1: unable to enumerate USB device [ 569.150625][ T5708] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 569.171105][ T5708] usb 4-1: device descriptor read/8, error -71 [ 569.410653][ T5708] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 569.433353][ T5708] usb 4-1: device descriptor read/8, error -71 [ 569.450648][ T5691] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 569.541053][ T5708] usb usb4-port1: unable to enumerate USB device [ 569.600725][ T5691] usb 1-1: Using ep0 maxpacket: 16 [ 569.606530][ T5691] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 569.606546][ T5691] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 569.606557][ T5691] usb 1-1: config 252 has no interface number 0 [ 569.606575][ T5691] usb 1-1: config 252 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.613112][ T5691] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 569.613142][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.613161][ T5691] usb 1-1: Product: syz [ 569.613176][ T5691] usb 1-1: Manufacturer: syz [ 569.613191][ T5691] usb 1-1: SerialNumber: syz [ 569.634582][ T5691] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 569.842757][T16567] usb 1-1: Failed to submit usb control message: -71 [ 569.842789][T16567] usb 1-1: unable to send the bmi data to the device: -71 [ 569.842806][T16567] usb 1-1: unable to get target info from device [ 569.842819][T16567] usb 1-1: could not get target info (-71) [ 569.842836][T16567] usb 1-1: could not probe fw (-71) [ 569.844246][ T5708] usb 1-1: USB disconnect, device number 72 [ 570.730830][ T43] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 570.870861][ T43] usb 1-1: device descriptor read/64, error -71 [ 571.000652][ T5708] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 571.079878][ T5591] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 571.080228][ T5591] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 571.080465][ T5591] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 571.102393][ T5591] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 571.102948][ T5591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 571.130667][ T5708] usb 2-1: device descriptor read/64, error -71 [ 571.191044][ T43] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 571.352084][ T43] usb 1-1: device descriptor read/64, error -71 [ 571.478440][ T43] usb usb1-port1: attempt power cycle [ 571.540876][ T5708] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 571.670629][ T5708] usb 2-1: device descriptor read/64, error -71 [ 571.782098][ T5708] usb usb2-port1: attempt power cycle [ 572.120905][ T5708] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 572.143563][ T5708] usb 2-1: device descriptor read/8, error -71 [ 572.321057][ T43] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 572.341373][ T43] usb 1-1: device descriptor read/8, error -71 [ 572.380686][ T5708] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 572.401273][ T5708] usb 2-1: device descriptor read/8, error -71 [ 572.510829][ T5708] usb usb2-port1: unable to enumerate USB device [ 572.591556][ T43] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 572.612567][ T43] usb 1-1: device descriptor read/8, error -71 [ 572.627787][ T8057] syz_tun (unregistering): left allmulticast mode [ 572.640845][T17912] loop3: detected capacity change from 0 to 10503 [ 572.722037][ T43] usb usb1-port1: unable to enumerate USB device [ 572.899307][T17888] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.899438][T17888] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.899553][T17888] bridge_slave_0: entered allmulticast mode [ 572.907649][T17888] bridge_slave_0: entered promiscuous mode [ 572.931121][T17888] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.931192][T17888] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.931321][T17888] bridge_slave_1: entered allmulticast mode [ 572.933602][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4405'. [ 572.934116][T17888] bridge_slave_1: entered promiscuous mode [ 572.960064][T17888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.966920][T17888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.005971][T17888] team0: Port device team_slave_0 added [ 573.008110][T17888] team0: Port device team_slave_1 added [ 573.035089][T17888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.035103][T17888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.035118][T17888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.035890][T17888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.035900][T17888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.035914][T17888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.065861][T17888] hsr_slave_0: entered promiscuous mode [ 573.067202][T17888] hsr_slave_1: entered promiscuous mode [ 573.067808][T17888] debugfs: 'hsr0' already exists in 'hsr' [ 573.067826][T17888] Cannot create hsr debugfs directory [ 573.605967][T17922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.609869][ T5591] Bluetooth: hci4: command tx timeout [ 574.810635][ T43] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 574.831848][T17888] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.940607][ T43] usb 1-1: device descriptor read/64, error -71 [ 575.512575][T17961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.655179][ T59] Bluetooth: hci4: command tx timeout [ 575.675956][ T5708] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 575.910615][ T43] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 575.990634][ T5708] usb 5-1: device descriptor read/64, error -71 [ 576.040696][ T43] usb 1-1: device descriptor read/64, error -71 [ 576.057673][T17888] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.150907][ T43] usb usb1-port1: attempt power cycle [ 576.330676][ T5708] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 576.461783][ T5708] usb 5-1: device descriptor read/64, error -71 [ 576.510665][ T43] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 576.512223][T17888] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.532331][ T43] usb 1-1: device descriptor read/8, error -71 [ 576.619399][ T5708] usb usb5-port1: attempt power cycle [ 576.770619][ T43] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 576.791320][ T43] usb 1-1: device descriptor read/8, error -71 [ 576.892886][T17888] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.901154][ T43] usb usb1-port1: unable to enumerate USB device [ 576.950600][ T5708] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 577.063825][ T5708] usb 5-1: device descriptor read/8, error -71 [ 577.300748][ T5708] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 577.321056][ T5708] usb 5-1: device descriptor read/8, error -71 [ 577.417542][T17888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 577.430990][ T5708] usb usb5-port1: unable to enumerate USB device [ 577.457822][T17888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.459029][T17888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 577.507348][T17888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.509431][T17888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 577.542413][T17888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.542989][T17888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 577.598528][T17888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 577.700653][ T59] Bluetooth: hci4: command tx timeout [ 577.766210][T17888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.782182][T17888] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.813169][T17888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 577.813195][T17888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.843540][T17603] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.844095][T17603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.845684][T17603] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.845756][T17603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.513752][T18033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.154931][T17888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.230592][ T5691] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 579.234972][T17888] veth0_vlan: entered promiscuous mode [ 579.254659][T17888] veth1_vlan: entered promiscuous mode [ 579.281434][T17888] veth0_macvtap: entered promiscuous mode [ 579.284751][T17888] veth1_macvtap: entered promiscuous mode [ 579.309866][T17888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.320468][T17888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.339124][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.339245][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.339282][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.339310][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.380656][ T5691] usb 5-1: Using ep0 maxpacket: 32 [ 579.382508][ T5691] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 579.382609][ T5691] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 579.382631][ T5691] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.382652][ T5691] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 579.382685][ T5691] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 579.382710][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.387934][ T5691] usb 5-1: config 0 descriptor?? [ 579.556226][T17603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.556248][T17603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.603743][ T5844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.603766][ T5844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.634429][T18071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4459'. [ 579.770461][T18080] futex_wake_op: syz.0.4460 tries to shift op by 144; fix this program [ 579.770871][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4460'. [ 579.770908][T18080] netlink: 'syz.0.4460': attribute type 2 has an invalid length. [ 580.016601][ T59] Bluetooth: hci4: command tx timeout [ 581.076170][T18093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.190426][ T5591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.197871][ T5591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.198310][ T5591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.200347][ T5591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.223226][ T5591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.302553][T18106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4467'. [ 582.033335][ T5592] usb 5-1: USB disconnect, device number 87 [ 582.179101][T18113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4469'. [ 582.411423][T10483] syz_tun (unregistering): left allmulticast mode [ 582.491563][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4471'. [ 582.491695][T18119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4471'. [ 583.067297][T18119] bridge1: entered allmulticast mode [ 583.301894][ T5591] Bluetooth: hci1: command tx timeout [ 583.609061][T18100] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.609145][T18100] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.609229][T18100] bridge_slave_0: entered allmulticast mode [ 583.609991][T18100] bridge_slave_0: entered promiscuous mode [ 583.612257][T18100] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.612328][T18100] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.612446][T18100] bridge_slave_1: entered allmulticast mode [ 583.614796][T18100] bridge_slave_1: entered promiscuous mode [ 583.900710][T18145] futex_wake_op: syz.2.4476 tries to shift op by 144; fix this program [ 584.004366][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4476'. [ 584.004967][T18145] netlink: 'syz.2.4476': attribute type 2 has an invalid length. [ 584.102552][ T821] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 584.131705][T18100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.134529][T18100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.155494][T18100] team0: Port device team_slave_0 added [ 584.157832][T18100] team0: Port device team_slave_1 added [ 584.185259][T18100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.185276][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.185301][T18100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.187823][T18100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.187836][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.187855][T18100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.244980][T18100] hsr_slave_0: entered promiscuous mode [ 584.245930][T18100] hsr_slave_1: entered promiscuous mode [ 584.246512][T18100] debugfs: 'hsr0' already exists in 'hsr' [ 584.246530][T18100] Cannot create hsr debugfs directory [ 584.250667][ T821] usb 4-1: Using ep0 maxpacket: 16 [ 584.253515][ T821] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 584.253540][ T821] usb 4-1: config 252 has no interface number 0 [ 584.253572][ T821] usb 4-1: config 252 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.255916][ T821] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 584.255942][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.255963][ T821] usb 4-1: Product: syz [ 584.255977][ T821] usb 4-1: Manufacturer: syz [ 584.255990][ T821] usb 4-1: SerialNumber: syz [ 584.379312][ T821] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 584.430935][ T820] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 584.467484][T18154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4478'. [ 584.483982][ T13] usb 4-1: Failed to submit usb control message: -71 [ 584.484014][ T13] usb 4-1: unable to send the bmi data to the device: -71 [ 584.484032][ T13] usb 4-1: unable to get target info from device [ 584.484047][ T13] usb 4-1: could not get target info (-71) [ 584.484063][ T13] usb 4-1: could not probe fw (-71) [ 584.486322][ T5691] usb 4-1: USB disconnect, device number 73 [ 585.081941][T18156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.110602][ T820] usb 1-1: Using ep0 maxpacket: 32 [ 585.112005][ T820] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 585.112030][ T820] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 585.112050][ T820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.112070][ T820] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 585.112101][ T820] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 585.112116][ T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.113906][ T820] usb 1-1: config 0 descriptor?? [ 585.408870][ T5591] Bluetooth: hci1: command tx timeout [ 585.524434][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4481'. [ 585.524570][T18164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4481'. [ 586.099865][T18100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.134613][T18164] bridge2: entered allmulticast mode [ 586.491840][T18100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.200383][ T31] usb 1-1: USB disconnect, device number 81 [ 587.323630][T18190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4489'. [ 587.333848][T18100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.656656][ T5591] Bluetooth: hci1: command tx timeout [ 588.069626][T18189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.257405][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4493'. [ 588.397520][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4495'. [ 588.397655][T18207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4495'. [ 588.921875][T18100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.976777][T18207] bridge1: entered allmulticast mode [ 589.161812][ T5691] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 589.213501][T18213] loop5: detected capacity change from 0 to 6 [ 589.216062][T18213] Dev loop5: unable to read RDB block 6 [ 589.216104][T18213] loop5: AHDI p1 p2 [ 589.216121][T18213] loop5: partition table partially beyond EOD, truncated [ 589.217419][T18213] loop5: p1 start 1702059890 is beyond EOD, truncated [ 589.290628][ T5691] usb 1-1: device descriptor read/64, error -71 [ 589.400636][ T820] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 589.531997][T18100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 589.550692][ T820] usb 4-1: Using ep0 maxpacket: 32 [ 589.552302][ T820] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 589.552328][ T820] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 589.552349][ T820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.552369][ T820] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 589.552401][ T820] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 589.552414][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.554971][ T820] usb 4-1: config 0 descriptor?? [ 589.710801][ T5591] Bluetooth: hci1: command tx timeout [ 590.107499][T18100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 590.109479][T18100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 590.110624][ T5691] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 590.153452][T18100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 590.154352][T18100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 590.187184][T18100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 590.189145][T18100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 590.222488][T18100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 590.240576][ T5691] usb 1-1: device descriptor read/64, error -71 [ 590.243480][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4503'. [ 590.317188][T18100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.328350][T18100] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.336221][T16567] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.336292][T16567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.342035][T16567] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.342165][T16567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.350810][ T5691] usb usb1-port1: attempt power cycle [ 590.627515][T18100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.675930][T18100] veth0_vlan: entered promiscuous mode [ 590.685001][T18100] veth1_vlan: entered promiscuous mode [ 590.710770][ T5691] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 590.712088][T18100] veth0_macvtap: entered promiscuous mode [ 590.715823][T18100] veth1_macvtap: entered promiscuous mode [ 590.730259][T18100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.734884][T18250] syz.2.4507 (18250) used greatest stack depth: 17608 bytes left [ 590.744994][ T5691] usb 1-1: device descriptor read/8, error -71 [ 590.766270][T18100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.778659][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.778760][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.778848][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.778930][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.981068][ T5691] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 591.001255][ T5691] usb 1-1: device descriptor read/8, error -71 [ 591.109658][T17603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.109677][T17603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.126690][ T5691] usb usb1-port1: unable to enumerate USB device [ 591.158447][T16567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.158472][T16567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.091372][ T5691] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 592.240766][ T5691] usb 5-1: Using ep0 maxpacket: 16 [ 592.277626][ T5691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.277697][ T5691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.277754][ T5691] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 592.277885][ T5691] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 592.277945][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.382536][ T5691] usb 5-1: config 0 descriptor?? [ 592.432457][ T5592] usb 4-1: USB disconnect, device number 74 [ 592.815739][ T5691] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 592.840025][ T5691] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 592.883757][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 592.885512][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 592.885765][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 592.886463][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 592.886953][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 592.965295][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4518'. [ 592.965331][T18285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4518'. [ 592.971663][T18285] bridge1: entered allmulticast mode [ 593.263721][ T5691] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 593.263966][ T5691] microsoft 0003:045E:07DA.0016: no inputs found [ 593.264089][ T5691] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 593.470621][ T5691] usb 5-1: USB disconnect, device number 88 [ 593.613825][T18286] fido_id[18286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 593.705405][T18291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4519'. [ 593.792953][T17256] syz_tun (unregistering): left allmulticast mode [ 593.858848][T18296] futex_wake_op: syz.1.4521 tries to shift op by 144; fix this program [ 593.859305][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4521'. [ 593.859343][T18296] netlink: 'syz.1.4521': attribute type 2 has an invalid length. [ 594.900633][ T59] Bluetooth: hci2: command tx timeout [ 595.182618][ T31] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 595.330703][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 595.332680][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.332705][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 595.332751][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 595.335463][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.335492][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.335513][ T31] usb 5-1: Product: syz [ 595.335528][ T31] usb 5-1: Manufacturer: syz [ 595.335544][ T31] usb 5-1: SerialNumber: syz [ 595.344957][ T31] cdc_ncm 5-1:1.0: skipping garbage [ 595.344977][ T31] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 595.345006][ T31] cdc_ncm 5-1:1.0: bind() failure [ 595.347743][T18343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4533'. [ 595.386210][T18280] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.386375][T18280] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.386509][T18280] bridge_slave_0: entered allmulticast mode [ 595.387892][T18280] bridge_slave_0: entered promiscuous mode [ 595.390909][T18280] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.391024][T18280] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.391171][T18280] bridge_slave_1: entered allmulticast mode [ 595.392475][T18280] bridge_slave_1: entered promiscuous mode [ 595.416248][T18280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.418897][T18280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.441634][T18280] team0: Port device team_slave_0 added [ 595.443814][T18280] team0: Port device team_slave_1 added [ 595.466670][T18280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.466685][T18280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.466711][T18280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.468305][T18280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.468368][T18280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.468395][T18280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.506655][T18280] hsr_slave_0: entered promiscuous mode [ 595.507574][T18280] hsr_slave_1: entered promiscuous mode [ 595.508088][T18280] debugfs: 'hsr0' already exists in 'hsr' [ 595.508105][T18280] Cannot create hsr debugfs directory [ 596.001252][ T821] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 596.150719][ T821] usb 3-1: Using ep0 maxpacket: 16 [ 596.152637][ T821] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 596.152653][ T821] usb 3-1: config 252 has no interface number 0 [ 596.152670][ T821] usb 3-1: config 252 interface 15 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 596.154160][ T821] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 596.154176][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.154187][ T821] usb 3-1: Product: syz [ 596.154196][ T821] usb 3-1: Manufacturer: syz [ 596.154203][ T821] usb 3-1: SerialNumber: syz [ 596.224311][ T821] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 596.360801][ T5841] usb 3-1: Failed to submit usb control message: -71 [ 596.360832][ T5841] usb 3-1: unable to send the bmi data to the device: -71 [ 596.360849][ T5841] usb 3-1: unable to get target info from device [ 596.360865][ T5841] usb 3-1: could not get target info (-71) [ 596.360881][ T5841] usb 3-1: could not probe fw (-71) [ 596.361062][ T821] usb 3-1: USB disconnect, device number 88 [ 596.980683][ T59] Bluetooth: hci2: command tx timeout [ 597.543909][T18280] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.507328][ T820] usb 5-1: USB disconnect, device number 89 [ 599.060761][ T59] Bluetooth: hci2: command tx timeout [ 599.244581][T18280] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.670936][ T820] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 599.849213][T18280] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.850621][ T820] usb 4-1: Using ep0 maxpacket: 16 [ 599.852430][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.852460][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.852483][ T820] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 599.852522][ T820] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 599.852546][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.871878][ T820] usb 4-1: config 0 descriptor?? [ 600.402512][ T820] usbhid 4-1:0.0: can't add hid device: -71 [ 600.402601][ T820] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 600.406826][ T820] usb 4-1: USB disconnect, device number 75 [ 600.513442][T18280] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.025507][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4558'. [ 601.025543][T18417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4558'. [ 601.052384][ T56] bridge_slave_1: left allmulticast mode [ 601.052410][ T56] bridge_slave_1: left promiscuous mode [ 601.052571][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.140593][ T59] Bluetooth: hci2: command tx timeout [ 601.161244][ T56] bridge_slave_0: left allmulticast mode [ 601.161270][ T56] bridge_slave_0: left promiscuous mode [ 601.161420][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.604921][ T59] Bluetooth: hci5: unexpected event for opcode 0x203c [ 601.910646][ T821] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 602.060707][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 602.062263][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.062295][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.062318][ T821] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 602.062348][ T821] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 602.062360][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.063831][ T821] usb 5-1: config 0 descriptor?? [ 602.071061][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.181108][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.202477][ T56] bond0 (unregistering): Released all slaves [ 602.206577][ T56] bond1 (unregistering): Released all slaves [ 602.255622][T18417] bridge2: entered allmulticast mode [ 602.367886][T18448] overlayfs: missing 'lowerdir' [ 602.486925][T18280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 602.529578][T18280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 602.537950][T18280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 602.540742][ T821] usbhid 5-1:0.0: can't add hid device: -71 [ 602.540852][ T821] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 602.546040][ T821] usb 5-1: USB disconnect, device number 90 [ 602.564917][ T56] IPVS: stopping master sync thread 16512 ... [ 602.589834][T18280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.597952][T18280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 602.629175][T18280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.680605][ T820] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 602.822320][T18280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 602.832159][ T820] usb 3-1: Using ep0 maxpacket: 16 [ 602.845564][T18280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 602.846037][ T820] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 602.846064][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.846084][ T820] usb 3-1: Product: syz [ 602.846098][ T820] usb 3-1: Manufacturer: syz [ 602.846113][ T820] usb 3-1: SerialNumber: syz [ 602.849106][ T820] usb 3-1: config 0 descriptor?? [ 602.959307][T18280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.972146][T18280] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.977990][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.978063][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.984090][T17602] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.984610][T17602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.188095][ T59] Bluetooth: hci5: unexpected event for opcode 0x203c [ 603.266109][ T820] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 603.269928][ T820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 603.282251][ T820] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 603.282292][ T820] usb 3-1: media controller created [ 603.331246][ T820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 603.467203][T18450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.471258][T18450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.560615][ T5701] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 603.630629][T18450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.631884][T18450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.690716][ T5701] usb 5-1: device descriptor read/64, error -71 [ 603.813571][ T56] hsr_slave_0: left promiscuous mode [ 603.840686][ T56] hsr_slave_1: left promiscuous mode [ 603.841357][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.841371][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.886034][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.886225][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.907306][ T820] zl10353_read_register: readreg error (reg=127, ret==0) [ 603.907535][ T820] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 603.907565][ T820] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 604.440620][ T5701] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 604.455517][ T56] veth1_macvtap: left promiscuous mode [ 604.455556][ T56] veth0_macvtap: left promiscuous mode [ 604.455632][ T56] veth1_vlan: left promiscuous mode [ 604.455695][ T56] veth0_vlan: left promiscuous mode [ 604.769576][ T5701] usb 5-1: device descriptor read/64, error -71 [ 604.907111][ T5701] usb usb5-port1: attempt power cycle [ 605.356825][ T59] Bluetooth: hci0: unexpected event for opcode 0x203c [ 605.480611][ T5701] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 605.501449][ T5701] usb 5-1: device descriptor read/8, error -71 [ 605.690908][ T56] team0 (unregistering): Port device team_slave_1 removed [ 605.734181][ T56] team0 (unregistering): Port device team_slave_0 removed [ 605.740617][ T5701] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 605.762241][ T5701] usb 5-1: device descriptor read/8, error -71 [ 605.864036][ T31] usb 3-1: USB disconnect, device number 89 [ 605.873740][ T5701] usb usb5-port1: unable to enumerate USB device [ 605.923969][ T31] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 606.044204][T18280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.085410][T18280] veth0_vlan: entered promiscuous mode [ 606.257932][T18519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.502596][T18280] veth1_vlan: entered promiscuous mode [ 606.537942][T18280] veth0_macvtap: entered promiscuous mode [ 606.547009][T18280] veth1_macvtap: entered promiscuous mode [ 606.562530][T18280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.565384][T18280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.613237][T18306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.700625][T17603] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.702900][T17603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.884260][T17603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.344015][T18306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.344074][T18306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.425859][T17603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.425873][T17603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.188636][ T821] IPVS: starting estimator thread 0... [ 610.280618][T18575] IPVS: using max 23 ests per chain, 55200 per kthread [ 612.958137][T18612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.112668][T18619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4628'. [ 614.845062][T18651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.917011][T18659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4641'. [ 615.120594][ T821] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 615.270615][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 615.272500][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.272533][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.272557][ T821] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 615.272595][ T821] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 615.272620][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.279341][ T821] usb 5-1: config 0 descriptor?? [ 615.758146][ T821] usbhid 5-1:0.0: can't add hid device: -71 [ 615.758235][ T821] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 615.779654][ T821] usb 5-1: USB disconnect, device number 95 [ 617.351676][T18705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4657'. [ 617.361130][T18706] futex_wake_op: syz.2.4658 tries to shift op by 144; fix this program [ 617.363220][T18706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4658'. [ 617.363257][T18706] netlink: 'syz.2.4658': attribute type 2 has an invalid length. [ 619.933057][ T5708] IPVS: starting estimator thread 0... [ 619.942150][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 619.942183][T18732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4669'. [ 619.947916][T18732] bridge3: entered allmulticast mode [ 620.052892][T18735] IPVS: using max 19 ests per chain, 45600 per kthread [ 620.220828][T18753] futex_wake_op: syz.2.4674 tries to shift op by 144; fix this program [ 620.225062][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4674'. [ 620.225100][T18753] netlink: 'syz.2.4674': attribute type 2 has an invalid length. [ 622.455256][ T36] audit: type=1326 audit(1781847176.850:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18760 comm="syz.4.4679" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701ddbce59 code=0x7ffc0000 [ 622.458635][ T36] audit: type=1326 audit(1781847176.850:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18760 comm="syz.4.4679" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701ddbce59 code=0x7ffc0000 [ 622.551584][ T36] audit: type=1326 audit(1781847176.940:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18760 comm="syz.4.4679" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701ddbce59 code=0x7ffc0000 [ 622.554162][ T36] audit: type=1326 audit(1781847176.950:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18760 comm="syz.4.4679" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701ddbce59 code=0x7ffc0000 [ 622.554204][ T36] audit: type=1326 audit(1781847176.950:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18760 comm="syz.4.4679" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f701ddbce59 code=0x7ffc0000 [ 622.554238][ T36] audit: type=1326 audit(1781847176.950:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18760 comm="syz.4.4679" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701ddbce59 code=0x7ffc0000 [ 622.556947][ T36] audit: type=1326 audit(1781847176.950:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18760 comm="syz.4.4679" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701ddbce59 code=0x7ffc0000 [ 622.693560][ T36] audit: type=1326 audit(1781847176.950:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18760 comm="syz.4.4679" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f701ddbce59 code=0x7ffc0000 [ 622.750291][ T36] audit: type=1326 audit(1781847177.140:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18760 comm="syz.4.4679" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f701ddbce59 code=0x7ffc0000 [ 623.880910][ T5708] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 624.556969][ T1344] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.557021][ T1344] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.622557][T18778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4683'. [ 624.732245][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.732292][ T5708] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 624.732316][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.734658][ T5708] usb 4-1: config 0 descriptor?? [ 625.406433][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4684'. [ 625.406469][T18795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4684'. [ 625.410051][T18795] bridge1: entered allmulticast mode [ 626.545424][ T820] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 626.690686][ T820] usb 2-1: Using ep0 maxpacket: 16 [ 626.692310][ T820] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.692356][ T820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 626.694120][ T820] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.694148][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.694169][ T820] usb 2-1: Product: syz [ 626.694184][ T820] usb 2-1: Manufacturer: syz [ 626.694199][ T820] usb 2-1: SerialNumber: syz [ 626.752534][ T820] usb 2-1: selecting invalid altsetting 1 [ 627.107210][ T820] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 627.107418][ T820] cdc_ncm 2-1:1.0: bind() failure [ 627.123020][ T820] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 627.123055][ T820] cdc_ncm 2-1:1.1: bind() failure [ 627.271823][ T5708] ath6kl: Failed to read usb control message: -110 [ 627.271869][ T5708] ath6kl: Unable to read the bmi data from the device: -110 [ 627.271884][ T5708] ath6kl: Unable to recv target info: -110 [ 627.272029][ T5708] ath6kl: Failed to init ath6kl core: -110 [ 627.272298][ T5708] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 627.325439][ T5701] usb 4-1: USB disconnect, device number 76 [ 627.894262][T18826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4700'. [ 628.834610][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4702'. [ 628.834632][T18832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4702'. [ 628.838190][T18832] bridge3: entered allmulticast mode [ 629.019555][T18837] futex_wake_op: syz.4.4703 tries to shift op by 144; fix this program [ 629.021663][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4703'. [ 629.021765][T18837] netlink: 'syz.4.4703': attribute type 2 has an invalid length. [ 629.142342][ T5787] usb 2-1: USB disconnect, device number 109 [ 630.370625][ T5787] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 630.542359][ T5787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.542407][ T5787] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 630.542433][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.547409][ T5787] usb 2-1: config 0 descriptor?? [ 630.740437][ T59] Bluetooth: hci0: unexpected event for opcode 0x6c61 [ 630.884300][T18860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4712'. [ 631.712233][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4713'. [ 631.712268][T18864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4713'. [ 631.718366][T18864] bridge2: entered allmulticast mode [ 632.181184][ T5701] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 632.330623][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 632.332205][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.332251][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 632.334074][ T5701] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 632.334102][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.334121][ T5701] usb 4-1: Product: syz [ 632.334136][ T5701] usb 4-1: Manufacturer: syz [ 632.334152][ T5701] usb 4-1: SerialNumber: syz [ 632.339744][ T5701] usb 4-1: selecting invalid altsetting 1 [ 632.743415][ T5701] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 632.743464][ T5701] cdc_ncm 4-1:1.0: bind() failure [ 632.747102][ T5701] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 632.747139][ T5701] cdc_ncm 4-1:1.1: bind() failure [ 632.831621][ T5787] ath6kl: Failed to read usb control message: -110 [ 632.831657][ T5787] ath6kl: Unable to read the bmi data from the device: -110 [ 632.831666][ T5787] ath6kl: Unable to recv target info: -110 [ 632.831794][ T5787] ath6kl: Failed to init ath6kl core: -110 [ 632.832074][ T5787] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 633.157513][ T5701] usb 2-1: USB disconnect, device number 110 [ 633.221519][T18870] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 633.580605][ T5701] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 633.710623][ T5701] usb 2-1: device descriptor read/64, error -71 [ 633.950618][ T5701] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 634.080596][ T5701] usb 2-1: device descriptor read/64, error -71 [ 634.191359][ T5701] usb usb2-port1: attempt power cycle [ 634.530615][ T5701] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 634.551603][ T5701] usb 2-1: device descriptor read/8, error -71 [ 634.790596][ T5701] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 634.811042][ T5701] usb 2-1: device descriptor read/8, error -71 [ 634.920732][ T5701] usb usb2-port1: unable to enumerate USB device [ 634.951821][ T5787] usb 4-1: USB disconnect, device number 77 [ 635.630734][ T59] Bluetooth: hci0: unexpected event for opcode 0x6c61 [ 635.848281][T18890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4723'. [ 636.362247][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4724'. [ 636.362285][T18893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4724'. [ 636.368484][T18893] bridge2: entered allmulticast mode [ 636.850677][ T5708] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 637.000675][ T5701] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 637.001991][ T5708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.002034][ T5708] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 637.002060][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.003426][ T5708] usb 2-1: config 0 descriptor?? [ 637.150619][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 637.152573][ T5701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.152614][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 637.152654][ T5701] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 637.152676][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.155366][ T5701] usb 4-1: config 0 descriptor?? [ 637.161969][ T5701] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 639.221019][ T5708] ath6kl: Failed to read usb control message: -110 [ 639.221316][ T5708] ath6kl: Unable to read the bmi data from the device: -110 [ 639.221328][ T5708] ath6kl: Unable to recv target info: -110 [ 639.221472][ T5708] ath6kl: Failed to init ath6kl core: -110 [ 639.221708][ T5708] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 639.624173][ T5787] usb 2-1: USB disconnect, device number 115 [ 639.658831][T18904] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 640.252574][ T5591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 640.252889][ T5591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 640.253171][ T5591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 640.253882][ T5591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 640.254363][ T5591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 640.494895][ T1010] usb 4-1: USB disconnect, device number 78 [ 641.316374][T18908] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.316484][T18908] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.316785][T18908] bridge_slave_0: entered allmulticast mode [ 641.318075][T18908] bridge_slave_0: entered promiscuous mode [ 641.319989][T18908] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.320109][T18908] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.320238][T18908] bridge_slave_1: entered allmulticast mode [ 641.322366][T18908] bridge_slave_1: entered promiscuous mode [ 641.347979][T18908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.352001][T18908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.377098][T18908] team0: Port device team_slave_0 added [ 641.379408][T18908] team0: Port device team_slave_1 added [ 641.399726][T18908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.399750][T18908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.399777][T18908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.401644][T18908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.401658][T18908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.401684][T18908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.434645][T18908] hsr_slave_0: entered promiscuous mode [ 641.435576][T18908] hsr_slave_1: entered promiscuous mode [ 641.436137][T18908] debugfs: 'hsr0' already exists in 'hsr' [ 641.436154][T18908] Cannot create hsr debugfs directory [ 641.921411][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 641.921663][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 641.921892][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 641.922515][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 641.922957][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 641.993425][T18908] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 642.054898][T18908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.260601][ T5591] Bluetooth: hci3: command tx timeout [ 642.320570][ T1010] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 642.421721][T18908] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 642.443782][T18908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 642.450645][ T1010] usb 4-1: device descriptor read/64, error -71 [ 642.637165][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4735'. [ 642.637202][T18948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4735'. [ 642.810619][ T1010] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 642.884931][T18948] bridge3: entered allmulticast mode [ 642.885344][T18908] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 642.917423][T18908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 642.960640][ T1010] usb 4-1: device descriptor read/64, error -71 [ 643.051802][ T5854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.081144][ T1010] usb usb4-port1: attempt power cycle [ 643.096293][T18908] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 643.132263][T18908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 643.311660][ T5854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.407022][T18908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.422632][ T1010] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 643.441460][ T1010] usb 4-1: device descriptor read/8, error -71 [ 643.448862][T18908] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.601749][ T5854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.643116][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.643206][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.651657][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.651732][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.690592][ T1010] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 643.711168][ T1010] usb 4-1: device descriptor read/8, error -71 [ 643.820768][ T1010] usb usb4-port1: unable to enumerate USB device [ 643.940608][ T5591] Bluetooth: hci6: command tx timeout [ 644.091494][T18978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4737'. [ 644.576077][ T59] Bluetooth: hci3: command tx timeout [ 644.586386][ T5854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.638849][T18937] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.638922][T18937] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.639023][T18937] bridge_slave_0: entered allmulticast mode [ 644.639762][T18937] bridge_slave_0: entered promiscuous mode [ 644.642494][T18937] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.642616][T18937] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.642750][T18937] bridge_slave_1: entered allmulticast mode [ 644.644861][T18937] bridge_slave_1: entered promiscuous mode [ 644.676990][T18937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.686304][T18937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.731515][T18937] team0: Port device team_slave_0 added [ 644.734119][T18937] team0: Port device team_slave_1 added [ 644.765699][T18937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.765715][T18937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.765740][T18937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.767470][T18937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.767484][T18937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.767509][T18937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.806099][T18937] hsr_slave_0: entered promiscuous mode [ 644.806986][T18937] hsr_slave_1: entered promiscuous mode [ 644.807518][T18937] debugfs: 'hsr0' already exists in 'hsr' [ 644.807535][T18937] Cannot create hsr debugfs directory [ 644.986413][T18937] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 645.031235][T18937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 645.034069][T18937] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 645.081545][T18937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.095505][T18937] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 645.128550][T18937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 645.140301][T18937] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 645.164736][T18937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 645.192655][T18908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.490838][ T5854] bridge_slave_1: left allmulticast mode [ 645.490865][ T5854] bridge_slave_1: left promiscuous mode [ 645.491065][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.097601][ T5591] Bluetooth: hci6: command tx timeout [ 646.245578][ T5854] bridge_slave_0: left allmulticast mode [ 646.245607][ T5854] bridge_slave_0: left promiscuous mode [ 646.245765][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.336981][T19017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4746'. [ 646.874872][ T5591] Bluetooth: hci3: command tx timeout [ 646.911805][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 646.912544][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 646.912791][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 646.913940][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 646.914366][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 647.151120][ T5787] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 647.280587][ T5787] usb 4-1: device descriptor read/64, error -71 [ 647.327046][T19030] binder: 19027:19030 ioctl 4018620d 0 returned -22 [ 647.520605][ T5787] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 647.562102][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.641349][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.650615][ T5787] usb 4-1: device descriptor read/64, error -71 [ 647.670965][ T5854] bond0 (unregistering): Released all slaves [ 647.760890][ T5787] usb usb4-port1: attempt power cycle [ 648.081385][ T9868] syz_tun (unregistering): left allmulticast mode [ 648.101463][ T5591] Bluetooth: hci6: command tx timeout [ 648.101603][ T5787] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 648.121231][ T5787] usb 4-1: device descriptor read/8, error -71 [ 648.371119][ T5787] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 648.422645][ T5787] usb 4-1: device descriptor read/8, error -71 [ 648.530922][ T5787] usb usb4-port1: unable to enumerate USB device [ 648.734537][T19053] process 'syz.1.4754' launched './file0' with NULL argv: empty string added [ 649.000834][ T59] Bluetooth: hci2: command tx timeout [ 649.001176][ T5591] Bluetooth: hci3: command tx timeout [ 649.293858][T18908] veth0_vlan: entered promiscuous mode [ 649.330358][T18908] veth1_vlan: entered promiscuous mode [ 649.669601][T19072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4756'. [ 650.135582][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 650.149602][T18937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.180593][ T59] Bluetooth: hci6: command tx timeout [ 650.216623][T18937] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.246131][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.246253][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.288475][T18908] veth0_macvtap: entered promiscuous mode [ 650.302632][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.302707][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.464995][ T5854] hsr_slave_0: left promiscuous mode [ 650.602239][ T5854] hsr_slave_1: left promiscuous mode [ 650.602940][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.602960][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.717897][T19094] binder: 19089:19094 ioctl 4018620d 0 returned -22 [ 651.060822][ T59] Bluetooth: hci2: command tx timeout [ 651.169452][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.169475][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.231095][ T5854] veth1_macvtap: left promiscuous mode [ 651.231158][ T5854] veth0_macvtap: left promiscuous mode [ 651.231276][ T5854] veth1_vlan: left promiscuous mode [ 651.231357][ T5854] veth0_vlan: left promiscuous mode [ 651.800960][ T5854] team0 (unregistering): Port device team_slave_1 removed [ 651.821053][ T5854] team0 (unregistering): Port device team_slave_0 removed [ 651.927432][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 651.939577][T18908] veth1_macvtap: entered promiscuous mode [ 652.071679][T18908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.164759][T18908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.275755][T19019] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.276869][T19019] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.277033][T19019] bridge_slave_0: entered allmulticast mode [ 652.279132][T19019] bridge_slave_0: entered promiscuous mode [ 652.316904][T19019] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.317022][T19019] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.317347][T19019] bridge_slave_1: entered allmulticast mode [ 652.319078][T19019] bridge_slave_1: entered promiscuous mode [ 652.350406][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.379637][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.406707][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.426903][T19019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.427671][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.452838][T19019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.611080][T19019] team0: Port device team_slave_0 added [ 652.656450][T19019] team0: Port device team_slave_1 added [ 652.813775][T19019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.813793][T19019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.813821][T19019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.871911][T19019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.871928][T19019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.871957][T19019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.873702][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.873721][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.140821][ T59] Bluetooth: hci2: command tx timeout [ 653.184500][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3 [ 653.230054][ T5854] IPVS: stop unused estimator thread 0... [ 653.246281][T19019] hsr_slave_0: entered promiscuous mode [ 653.247161][T19019] hsr_slave_1: entered promiscuous mode [ 653.247712][T19019] debugfs: 'hsr0' already exists in 'hsr' [ 653.247731][T19019] Cannot create hsr debugfs directory [ 653.277203][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.277218][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.544586][ T5854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.349627][T19143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 654.382033][ T5854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.480583][ T5773] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 654.630570][ T5773] usb 6-1: Using ep0 maxpacket: 16 [ 654.632829][ T5773] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.632875][ T5773] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 654.632910][ T5773] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 654.635135][ T5773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 654.635162][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.635183][ T5773] usb 6-1: Product: syz [ 654.635198][ T5773] usb 6-1: Manufacturer: syz [ 654.635215][ T5773] usb 6-1: SerialNumber: syz [ 654.646085][ T5773] usb 6-1: selecting invalid altsetting 1 [ 654.732866][ T5854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.773419][ T5254] 8021q: adding VLAN 0 to HW filter on device eth4 [ 654.779782][T18937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.843998][T19019] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 654.924025][T19019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.082842][ T5854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.096330][ T5773] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 655.096382][ T5773] cdc_ncm 6-1:1.0: bind() failure [ 655.106586][ T5773] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 655.106621][ T5773] cdc_ncm 6-1:1.1: bind() failure [ 655.142495][T19019] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 655.183753][T19019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.186318][T19019] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 655.220624][ T59] Bluetooth: hci2: command tx timeout [ 655.228267][T19019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 655.251901][T19019] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 655.325494][T19169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4764'. [ 655.407315][T19019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 656.156699][T19188] binder: 19185:19188 ioctl 4018620d 0 returned -22 [ 656.603108][ T5854] bridge_slave_1: left allmulticast mode [ 656.603134][ T5854] bridge_slave_1: left promiscuous mode [ 656.603331][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.647664][T19190] input: syz1 as /devices/virtual/input/input23 [ 656.705790][ T821] usb 6-1: USB disconnect, device number 2 [ 656.885253][ T5854] bridge_slave_0: left allmulticast mode [ 656.885278][ T5854] bridge_slave_0: left promiscuous mode [ 656.885420][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.590605][ T5773] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 657.750744][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 657.754366][ T5773] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.754410][ T5773] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 657.754434][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.759238][ T5773] usb 4-1: config 0 descriptor?? [ 657.804932][ T5773] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 657.971069][ T5708] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 658.120761][ T5708] usb 6-1: Using ep0 maxpacket: 32 [ 658.126859][ T5708] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.126900][ T5708] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 658.126925][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.129608][ T5708] usb 6-1: config 0 descriptor?? [ 658.137779][ T5708] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 658.941033][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.021058][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.041923][ T5854] bond0 (unregistering): Released all slaves [ 659.087243][T18937] veth0_vlan: entered promiscuous mode [ 659.119216][T19019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.120263][T18937] veth1_vlan: entered promiscuous mode [ 659.153396][T19019] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.171292][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.171411][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.179294][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.179415][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.219839][T18937] veth0_macvtap: entered promiscuous mode [ 659.237017][T18937] veth1_macvtap: entered promiscuous mode [ 659.273098][T18937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.289565][T18937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.305098][T16567] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.307830][T16567] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.309568][T16567] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.312507][T16567] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.528808][T19018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.528830][T19018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.059587][T19236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4775'. [ 660.204504][ T5701] usb 4-1: USB disconnect, device number 87 [ 660.231260][T19238] input: syz1 as /devices/virtual/input/input24 [ 660.361032][ T5254] 8021q: adding VLAN 0 to HW filter on device eth5 [ 660.378441][ T5837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.378463][ T5837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.703385][T19254] binder: 19247:19254 ioctl 4018620d 0 returned -22 [ 661.206473][ T820] usb 6-1: USB disconnect, device number 3 [ 661.447637][T19268] netlink: 'syz.6.4780': attribute type 13 has an invalid length. [ 662.554378][ T36] audit: type=1326 audit(1781847216.770:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19285 comm="syz.3.4784" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10e94bce59 code=0x0 [ 662.891368][T19268] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.894144][T19268] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.376407][T19268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.430806][ T1010] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 664.645616][ T1010] usb 4-1: Using ep0 maxpacket: 32 [ 665.466888][T19268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.521388][ T1010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.521432][ T1010] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 666.521457][ T1010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.526522][ T1010] usb 4-1: config 0 descriptor?? [ 666.685606][ T1010] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 666.916310][T19320] futex_wake_op: syz.5.4791 tries to shift op by 144; fix this program [ 666.916774][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4791'. [ 666.916813][T19320] netlink: 'syz.5.4791': attribute type 2 has an invalid length. [ 667.780626][ T821] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 667.814236][ T5254] 8021q: adding VLAN 0 to HW filter on device eth6 [ 667.815117][ T56] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.818222][ T56] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.821682][ T56] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.827757][ T56] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.837457][T19019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.051903][ T821] usb 6-1: Using ep0 maxpacket: 32 [ 668.170184][ T821] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 668.186890][ T821] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 668.187243][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.316514][ T821] usb 6-1: config 0 descriptor?? [ 668.367162][ T821] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 668.506796][ T820] usb 4-1: USB disconnect, device number 88 [ 669.550603][ T820] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 669.712613][ T820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.712661][ T820] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 669.712685][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.717341][ T820] usb 4-1: config 0 descriptor?? [ 669.792842][ T5854] hsr_slave_0: left promiscuous mode [ 670.350659][ T5854] hsr_slave_1: left promiscuous mode [ 670.351992][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.352010][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.392120][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.392142][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.408514][ T820] ath6kl: Failed to read usb control message: -71 [ 670.408550][ T820] ath6kl: Unable to read the bmi data from the device: -71 [ 670.408563][ T820] ath6kl: Unable to recv target info: -71 [ 670.408746][ T820] ath6kl: Failed to init ath6kl core: -71 [ 670.409049][ T820] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 670.455365][ T820] usb 4-1: USB disconnect, device number 89 [ 670.467807][ T36] audit: type=1326 audit(1781847224.860:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19363 comm="syz.1.4807" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42f33bce59 code=0x0 [ 670.510972][ T5854] veth1_macvtap: left promiscuous mode [ 670.511029][ T5854] veth0_macvtap: left promiscuous mode [ 670.511140][ T5854] veth1_vlan: left promiscuous mode [ 670.511216][ T5854] veth0_vlan: left promiscuous mode [ 670.715304][ T820] usb 6-1: USB disconnect, device number 4 [ 671.551423][ T5854] team0 (unregistering): Port device team_slave_1 removed [ 671.714686][ T5854] team0 (unregistering): Port device team_slave_0 removed [ 671.976015][ T36] audit: type=1326 audit(1781847226.370:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19396 comm="syz.5.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c6f3ce59 code=0x7ffc0000 [ 671.976325][ T36] audit: type=1326 audit(1781847226.370:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19396 comm="syz.5.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c6f3ce59 code=0x7ffc0000 [ 671.976601][ T36] audit: type=1326 audit(1781847226.370:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19396 comm="syz.5.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f84c6f3ce59 code=0x7ffc0000 [ 671.976637][ T36] audit: type=1326 audit(1781847226.370:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19396 comm="syz.5.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c6f3ce59 code=0x7ffc0000 [ 671.976869][ T36] audit: type=1326 audit(1781847226.370:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19396 comm="syz.5.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c6f3ce59 code=0x7ffc0000 [ 671.977171][ T36] audit: type=1326 audit(1781847226.370:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19396 comm="syz.5.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f84c6f3ce59 code=0x7ffc0000 [ 671.977382][ T36] audit: type=1326 audit(1781847226.370:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19396 comm="syz.5.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c6f3ce59 code=0x7ffc0000 [ 671.977683][ T36] audit: type=1326 audit(1781847226.370:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19396 comm="syz.5.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f84c6f3ce59 code=0x7ffc0000 [ 672.518915][T19019] veth0_vlan: entered promiscuous mode [ 672.530398][T19019] veth1_vlan: entered promiscuous mode [ 672.564608][T19019] veth0_macvtap: entered promiscuous mode [ 672.567918][T19019] veth1_macvtap: entered promiscuous mode [ 672.604674][T19019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.633809][T19019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.154059][ T821] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 673.203686][T18766] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.205030][T18766] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.205175][T18766] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.205615][T18766] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.300580][ T821] usb 6-1: Using ep0 maxpacket: 32 [ 673.301944][ T821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.301976][ T821] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 673.301996][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.315655][ T821] usb 6-1: config 0 descriptor?? [ 673.337239][ T821] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 673.633560][ T5254] 8021q: adding VLAN 0 to HW filter on device eth7 [ 673.653051][ T5851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.653072][ T5851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.714512][ T5856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.714542][ T5856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.851335][ T36] audit: type=1326 audit(1781847229.250:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19461 comm="syz.3.4829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e94bce59 code=0x7ffc0000 [ 674.910668][ T5254] 8021q: adding VLAN 0 to HW filter on device eth8 [ 675.388380][ T820] usb 6-1: USB disconnect, device number 5 [ 682.493655][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 682.493689][ T36] audit: type=1326 audit(1781847236.890:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19608 comm="syz.7.4860" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145875ce59 code=0x7ffc0000 [ 682.500303][ T36] audit: type=1326 audit(1781847236.890:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19608 comm="syz.7.4860" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145875ce59 code=0x7ffc0000 [ 682.547778][ T36] audit: type=1326 audit(1781847236.940:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19608 comm="syz.7.4860" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145875ce59 code=0x7ffc0000 [ 682.547820][ T36] audit: type=1326 audit(1781847236.940:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19608 comm="syz.7.4860" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145875ce59 code=0x7ffc0000 [ 682.600622][ T36] audit: type=1326 audit(1781847236.990:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19608 comm="syz.7.4860" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145875ce59 code=0x7ffc0000 [ 682.600668][ T36] audit: type=1326 audit(1781847236.990:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19608 comm="syz.7.4860" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145875ce59 code=0x7ffc0000 [ 682.600701][ T36] audit: type=1326 audit(1781847236.990:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19608 comm="syz.7.4860" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145875ce59 code=0x7ffc0000 [ 682.600734][ T36] audit: type=1326 audit(1781847236.990:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19608 comm="syz.7.4860" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145875ce59 code=0x7ffc0000 [ 682.600768][ T36] audit: type=1326 audit(1781847236.990:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19608 comm="syz.7.4860" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145875ce59 code=0x7ffc0000 [ 682.600799][ T36] audit: type=1326 audit(1781847236.990:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19608 comm="syz.7.4860" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145875ce59 code=0x7ffc0000 [ 685.924011][ T1344] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.924065][ T1344] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.312526][ T5787] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 686.507665][ T5787] usb 6-1: device descriptor read/64, error -71 [ 686.741509][ T5787] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 686.898222][ T5787] usb 6-1: device descriptor read/64, error -71 [ 687.000861][ T5787] usb usb6-port1: attempt power cycle [ 687.590931][ T5787] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 687.633916][ T5787] usb 6-1: device descriptor read/8, error -71 [ 687.941017][ T5787] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 687.961090][ T5787] usb 6-1: device descriptor read/8, error -71 [ 688.139920][ T5787] usb usb6-port1: unable to enumerate USB device [ 688.177387][T19730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.320693][T19782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.311633][T19824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.339431][T19836] fuse: Bad value for 'fd' [ 695.791911][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 695.791930][ T36] audit: type=1326 audit(1781847250.170:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19855 comm="syz.1.4919" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42f33bce59 code=0x0 [ 696.977235][T19874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.071006][ T43] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 698.372392][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 698.541423][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.544451][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.548131][ T43] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 698.548964][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.607603][ T43] usb 2-1: config 0 descriptor?? [ 699.698480][T19913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 699.763321][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 699.764890][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 699.767190][ T43] usb 2-1: USB disconnect, device number 116 [ 700.691150][ T36] audit: type=1326 audit(1781847254.970:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19940 comm="syz.3.4937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10e94bce59 code=0x0 [ 703.275662][T19972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 704.485871][ T36] audit: type=1326 audit(1781847258.710:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19984 comm="syz.5.4949" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84c6f3ce59 code=0x0 [ 705.720561][ T5701] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 705.872225][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 706.116640][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.116661][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.116682][ T5701] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 706.116694][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.121711][ T5701] usb 4-1: config 0 descriptor?? [ 707.147460][ T5701] usbhid 4-1:0.0: can't add hid device: -71 [ 707.147557][ T5701] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 708.420846][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 708.757567][ T5701] usb 4-1: USB disconnect, device number 90 [ 709.464543][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 816.450432][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 816.450449][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16/2:b..l P20027 [ 816.450471][ C0] rcu: (detected by 0, t=10502 jiffies, g=76757, q=1763 ncpus=2) [ 816.450486][ C0] task:syz.7.4964 state:R running task stack:25208 pid:20027 tgid:20027 ppid:19019 task_flags:0x400040 flags:0x00080000 [ 816.450524][ C0] Call Trace: [ 816.450596][ C0] [ 816.450631][ C0] sched_show_task+0x4aa/0x5f0 [ 816.450785][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 816.450824][ C0] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 816.450874][ C0] ? wq_watchdog_touch+0x100/0x160 [ 816.450917][ C0] print_other_cpu_stall+0xf7b/0x1310 [ 816.450930][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 816.450941][ C0] ? __pfx___css_rstat_updated+0x10/0x10 [ 816.450988][ C0] rcu_sched_clock_irq+0x93d/0x1050 [ 816.451025][ C0] update_process_times+0x234/0x2d0 [ 816.451078][ C0] tick_nohz_handler+0x38f/0x6b0 [ 816.451117][ C0] ? rcu_is_watching+0x15/0xb0 [ 816.451129][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 816.451141][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 816.451172][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 816.451184][ C0] __hrtimer_run_queues+0x3a0/0xaf0 [ 816.451202][ C0] hrtimer_interrupt+0x44a/0x900 [ 816.451221][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 816.451288][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 816.451380][ C0] [ 816.451407][ C0] [ 816.451436][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 816.451489][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 816.451526][ C0] Code: f7 e8 1d 81 7d f6 f7 c3 00 02 00 00 74 05 e8 20 67 a9 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 04 a2 6f f6 65 8b 05 dd 5f 49 07 85 c0 74 18 5b 41 5e e9 41 3c [ 816.451559][ C0] RSP: 0018:ffffc90003ec75c0 EFLAGS: 00000206 [ 816.451573][ C0] RAX: 0000000000000046 RBX: 0000000000000246 RCX: 0000000080000002 [ 816.451581][ C0] RDX: 0000000000000000 RSI: ffffffff8ba7d600 RDI: 0000000000000001 [ 816.451587][ C0] RBP: 00000000ffffffff R08: ffffffff8f8974f7 R09: 1ffffffff1f12e9e [ 816.451599][ C0] R10: dffffc0000000000 R11: fffffbfff1f12e9f R12: dffffc0000000000 [ 816.451606][ C0] R13: ffff8880b8828780 R14: ffff8880b8828440 R15: 1ffff110171050f0 [ 816.451618][ C0] hrtimer_try_to_cancel+0x4a7/0x680 [ 816.451634][ C0] drm_crtc_vblank_start_timer+0xeb/0x240 [ 816.451705][ C0] ? __pfx_drm_crtc_vblank_helper_enable_vblank_timer+0x10/0x10 [ 816.451765][ C0] drm_vblank_enable+0x1b3/0x460 [ 816.451779][ C0] drm_vblank_get+0x11f/0x280 [ 816.451790][ C0] vkms_crtc_atomic_flush+0x92/0x1e0 [ 816.451802][ C0] ? __pfx_vkms_crtc_atomic_flush+0x10/0x10 [ 816.451813][ C0] drm_atomic_helper_commit_planes+0xbb1/0xea0 [ 816.451869][ C0] vkms_atomic_commit_tail+0x5e/0x220 [ 816.451904][ C0] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 816.451917][ C0] commit_tail+0x29b/0x3c0 [ 816.451931][ C0] drm_atomic_helper_commit+0xa77/0xb10 [ 816.451946][ C0] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 816.451958][ C0] drm_atomic_commit+0x24e/0x2b0 [ 816.451992][ C0] ? __asan_memcpy+0x40/0x70 [ 816.452067][ C0] ? __pfx_drm_atomic_commit+0x10/0x10 [ 816.452076][ C0] ? __pfx___drm_printfn_info+0x10/0x10 [ 816.452105][ C0] ? drm_client_rotation+0x47c/0x5b0 [ 816.452120][ C0] drm_client_modeset_commit_atomic+0x660/0x7e0 [ 816.452134][ C0] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 816.452153][ C0] ? trace_irq_enable+0x3b/0x140 [ 816.452196][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 816.452207][ C0] ? mutex_lock_nested+0x152/0x1d0 [ 816.452221][ C0] ? drm_client_modeset_commit_locked+0x4c/0x4d0 [ 816.452232][ C0] drm_client_modeset_commit_locked+0xce/0x4d0 [ 816.452244][ C0] drm_client_modeset_commit+0x4a/0x70 [ 816.452254][ C0] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9c/0x1c0 [ 816.452277][ C0] drm_fbdev_client_restore+0x1b/0x30 [ 816.452291][ C0] drm_client_dev_restore+0x14f/0x290 [ 816.452303][ C0] drm_release+0x343/0x410 [ 816.452347][ C0] ? __pfx_drm_release+0x10/0x10 [ 816.452356][ C0] __fput+0x42a/0xa80 [ 816.452420][ C0] task_work_run+0x1d9/0x270 [ 816.452454][ C0] ? __pfx_task_work_run+0x10/0x10 [ 816.452465][ C0] ? rcu_is_watching+0x15/0xb0 [ 816.452478][ C0] exit_to_user_mode_loop+0x1fa/0x730 [ 816.452509][ C0] ? rcu_is_watching+0x15/0xb0 [ 816.452522][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.452532][ C0] do_syscall_64+0x353/0x580 [ 816.452543][ C0] ? trace_irq_disable+0x3b/0x140 [ 816.452553][ C0] ? clear_bhb_loop+0x40/0x90 [ 816.452564][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.452573][ C0] RIP: 0033:0x7f145875ce59 [ 816.452588][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.452597][ C0] RSP: 002b:00007ffecf6f9e28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 816.452607][ C0] RAX: 0000000000000000 RBX: 00007f14589d7da0 RCX: 00007f145875ce59 [ 816.452614][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 816.452620][ C0] RBP: 00007f14589d7da0 R08: 00007f14589d6038 R09: 0000000000000000 [ 816.452627][ C0] R10: 00000000003feee4 R11: 0000000000000246 R12: 00000000000ad387 [ 816.452633][ C0] R13: 00007f14589d609c R14: 00000000000ad13f R15: 00007f14589d6090 [ 816.452643][ C0] [ 816.452648][ C0] task:ktimers/0 state:R running task stack:23376 pid:16 tgid:16 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 816.452676][ C0] Call Trace: [ 816.452680][ C0] [ 816.452684][ C0] __schedule+0x16dc/0x5500 [ 816.452700][ C0] ? __pfx___schedule+0x10/0x10 [ 816.452710][ C0] ? rcu_is_watching+0x15/0xb0 [ 816.452723][ C0] ? rcu_is_watching+0x15/0xb0 [ 816.452735][ C0] ? trace_irq_enable+0x3b/0x140 [ 816.452744][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 816.452769][ C0] preempt_schedule_common+0x82/0xd0 [ 816.452780][ C0] preempt_schedule_thunk+0x16/0x40 [ 816.452794][ C0] rt_mutex_slowunlock+0x6d1/0xa20 [ 816.452811][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 816.452820][ C0] ? lock_release+0x4b/0x3c0 [ 816.452853][ C0] ? rt_spin_unlock+0x160/0x200 [ 816.452862][ C0] vkms_crtc_handle_vblank_timeout+0x83/0x290 [ 816.452873][ C0] ? drm_vblank_timer_function+0x18e/0x210 [ 816.452886][ C0] ? __pfx_vkms_crtc_handle_vblank_timeout+0x10/0x10 [ 816.452896][ C0] drm_vblank_timer_function+0x19a/0x210 [ 816.452909][ C0] ? __pfx_drm_vblank_timer_function+0x10/0x10 [ 816.452922][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 816.452939][ C0] hrtimer_run_softirq+0x18f/0x260 [ 816.452950][ C0] handle_softirqs+0x1d9/0x6c0 [ 816.452986][ C0] run_ktimerd+0x69/0x100 [ 816.452994][ C0] smpboot_thread_fn+0x57c/0xa80 [ 816.453030][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 816.453045][ C0] kthread+0x388/0x470 [ 816.453075][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 816.453088][ C0] ? __pfx_kthread+0x10/0x10 [ 816.453097][ C0] ret_from_fork+0x514/0xb70 [ 816.453154][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 816.453164][ C0] ? __switch_to+0xc89/0x1420 [ 816.453179][ C0] ? __pfx_kthread+0x10/0x10 [ 816.453188][ C0] ret_from_fork_asm+0x1a/0x30 [ 816.453202][ C0] [ 816.453210][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9853 jiffies! g76757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 816.453222][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=47589 [ 816.453228][ C0] rcu: rcu_preempt kthread starved for 9854 jiffies! g76757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 816.453239][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 816.453244][ C0] rcu: RCU grace-period kthread stack dump: [ 816.453248][ C0] task:rcu_preempt state:I stack:27768 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 816.453275][ C0] Call Trace: [ 816.453279][ C0] [ 816.453283][ C0] __schedule+0x16dc/0x5500 [ 816.453298][ C0] ? __pfx___schedule+0x10/0x10 [ 816.453308][ C0] ? schedule+0x90/0x360 [ 816.453318][ C0] ? rcu_is_watching+0x15/0xb0 [ 816.453330][ C0] ? lock_release+0x4b/0x3c0 [ 816.453342][ C0] schedule+0x164/0x360 [ 816.453351][ C0] schedule_timeout+0x152/0x2c0 [ 816.453361][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 816.453371][ C0] ? __pfx_process_timeout+0x10/0x10 [ 816.453381][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 816.453392][ C0] ? prepare_to_swait_event+0x322/0x350 [ 816.453425][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 816.453438][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 816.453450][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 816.453462][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 816.453472][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 816.453485][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 816.453497][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 816.453508][ C0] ? __kthread_parkme+0x71/0x1f0 [ 816.453521][ C0] ? __kthread_parkme+0x196/0x1f0 [ 816.453535][ C0] kthread+0x388/0x470 [ 816.453544][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 816.453554][ C0] ? __pfx_kthread+0x10/0x10 [ 816.453563][ C0] ret_from_fork+0x514/0xb70 [ 816.453573][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 816.453583][ C0] ? __switch_to+0xc89/0x1420 [ 816.453596][ C0] ? __pfx_kthread+0x10/0x10 [ 816.453605][ C0] ret_from_fork_asm+0x1a/0x30 [ 816.453619][ C0] [ 816.453623][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 816.453640][ C0] CPU: 0 UID: 0 PID: 20027 Comm: syz.7.4964 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 816.453666][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 816.453678][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 816.453705][ C0] Code: f7 e8 1d 81 7d f6 f7 c3 00 02 00 00 74 05 e8 20 67 a9 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 04 a2 6f f6 65 8b 05 dd 5f 49 07 85 c0 74 18 5b 41 5e e9 41 3c [ 816.453724][ C0] RSP: 0018:ffffc90003ec75c0 EFLAGS: 00000206 [ 816.453741][ C0] RAX: 0000000000000046 RBX: 0000000000000246 RCX: 0000000080000002 [ 816.453760][ C0] RDX: 0000000000000000 RSI: ffffffff8ba7d600 RDI: 0000000000000001 [ 816.453767][ C0] RBP: 00000000ffffffff R08: ffffffff8f8974f7 R09: 1ffffffff1f12e9e [ 816.453773][ C0] R10: dffffc0000000000 R11: fffffbfff1f12e9f R12: dffffc0000000000 [ 816.453780][ C0] R13: ffff8880b8828780 R14: ffff8880b8828440 R15: 1ffff110171050f0 [ 816.453788][ C0] FS: 000055557e58e500(0000) GS:ffff88812614f000(0000) knlGS:0000000000000000 [ 816.453796][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 816.453802][ C0] CR2: 00007f13a8368060 CR3: 000000007c1de000 CR4: 00000000003526f0 [ 816.453811][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 816.453818][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 816.453823][ C0] Call Trace: [ 816.453827][ C0] [ 816.453830][ C0] hrtimer_try_to_cancel+0x4a7/0x680 [ 816.453846][ C0] drm_crtc_vblank_start_timer+0xeb/0x240 [ 816.453858][ C0] ? __pfx_drm_crtc_vblank_helper_enable_vblank_timer+0x10/0x10 [ 816.453871][ C0] drm_vblank_enable+0x1b3/0x460 [ 816.453884][ C0] drm_vblank_get+0x11f/0x280 [ 816.453895][ C0] vkms_crtc_atomic_flush+0x92/0x1e0 [ 816.453905][ C0] ? __pfx_vkms_crtc_atomic_flush+0x10/0x10 [ 816.453915][ C0] drm_atomic_helper_commit_planes+0xbb1/0xea0 [ 816.453931][ C0] vkms_atomic_commit_tail+0x5e/0x220 [ 816.453945][ C0] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 816.453957][ C0] commit_tail+0x29b/0x3c0 [ 816.453971][ C0] drm_atomic_helper_commit+0xa77/0xb10 [ 816.453985][ C0] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 816.453997][ C0] drm_atomic_commit+0x24e/0x2b0 [ 816.454006][ C0] ? __asan_memcpy+0x40/0x70 [ 816.454019][ C0] ? __pfx_drm_atomic_commit+0x10/0x10 [ 816.454028][ C0] ? __pfx___drm_printfn_info+0x10/0x10 [ 816.454040][ C0] ? drm_client_rotation+0x47c/0x5b0 [ 816.454051][ C0] drm_client_modeset_commit_atomic+0x660/0x7e0 [ 816.454063][ C0] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 816.454077][ C0] ? trace_irq_enable+0x3b/0x140 [ 816.454087][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 816.454098][ C0] ? mutex_lock_nested+0x152/0x1d0 [ 816.454111][ C0] ? drm_client_modeset_commit_locked+0x4c/0x4d0 [ 816.454122][ C0] drm_client_modeset_commit_locked+0xce/0x4d0 [ 816.454133][ C0] drm_client_modeset_commit+0x4a/0x70 [ 816.454143][ C0] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9c/0x1c0 [ 816.454157][ C0] drm_fbdev_client_restore+0x1b/0x30 [ 816.454171][ C0] drm_client_dev_restore+0x14f/0x290 [ 816.454181][ C0] drm_release+0x343/0x410 [ 816.454191][ C0] ? __pfx_drm_release+0x10/0x10 [ 816.454199][ C0] __fput+0x42a/0xa80 [ 816.454213][ C0] task_work_run+0x1d9/0x270 [ 816.454223][ C0] ? __pfx_task_work_run+0x10/0x10 [ 816.454233][ C0] ? rcu_is_watching+0x15/0xb0 [ 816.454246][ C0] exit_to_user_mode_loop+0x1fa/0x730 [ 816.454256][ C0] ? rcu_is_watching+0x15/0xb0 [ 816.454268][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.454277][ C0] do_syscall_64+0x353/0x580 [ 816.454288][ C0] ? trace_irq_disable+0x3b/0x140 [ 816.454297][ C0] ? clear_bhb_loop+0x40/0x90 [ 816.454307][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.454316][ C0] RIP: 0033:0x7f145875ce59 [ 816.454324][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.454332][ C0] RSP: 002b:00007ffecf6f9e28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 816.454341][ C0] RAX: 0000000000000000 RBX: 00007f14589d7da0 RCX: 00007f145875ce59 [ 816.454347][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 816.454353][ C0] RBP: 00007f14589d7da0 R08: 00007f14589d6038 R09: 0000000000000000 [ 816.454360][ C0] R10: 00000000003feee4 R11: 0000000000000246 R12: 00000000000ad387 [ 816.454366][ C0] R13: 00007f14589d609c R14: 00000000000ad13f R15: 00007f14589d6090 [ 816.454376][ C0] [ 939.935929][T12841] ------------[ cut here ]------------ [ 939.935947][T12841] kcov->t != t [ 939.935959][T12841] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: udevd/12841 [ 939.936112][T12841] Modules linked in: [ 939.936139][T12841] CPU: 1 UID: 0 PID: 12841 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 939.936165][T12841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 939.936180][T12841] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 939.936230][T12841] Code: 10 00 00 48 8b bb 90 00 00 00 e8 16 94 57 00 48 89 df 5b 41 5e 41 5f e9 49 59 5d 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 db 91 5d 09 48 89 df be 03 00 [ 939.936250][T12841] RSP: 0018:ffffc90005fcfd20 EFLAGS: 00010287 [ 939.936269][T12841] RAX: eaafb9532b077400 RBX: ffff888025e28b00 RCX: 0000000000000000 [ 939.936286][T12841] RDX: 0000000000000000 RSI: ffffffff8ba7d600 RDI: 00000000ffffffff [ 939.936308][T12841] RBP: ffffc90005fcfe80 R08: 0000000000000000 R09: 0000000000000000 [ 939.936323][T12841] R10: dffffc0000000000 R11: fffffbfff1f12e9f R12: 0000000000000000 [ 939.936339][T12841] R13: ffff888021f71f00 R14: ffff888025e28b08 R15: ffff888021f71f00 [ 939.936356][T12841] FS: 00007fa40db6f880(0000) GS:ffff88812624f000(0000) knlGS:0000000000000000 [ 939.936376][T12841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.936391][T12841] CR2: 00007f13a836c740 CR3: 000000005d504000 CR4: 00000000003526f0 [ 939.936411][T12841] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 939.936424][T12841] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 939.936439][T12841] Call Trace: [ 939.936447][T12841] [ 939.936458][T12841] do_exit+0x159/0x2360 [ 939.936484][T12841] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 939.936514][T12841] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 939.936535][T12841] ? preempt_count_add+0x91/0x190 [ 939.936597][T12841] ? __pfx_do_exit+0x10/0x10 [ 939.936618][T12841] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 939.936642][T12841] ? rt_spin_unlock+0x160/0x200 [ 939.936662][T12841] do_group_exit+0x22d/0x2f0 [ 939.936686][T12841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.936710][T12841] __x64_sys_exit_group+0x3f/0x40 [ 939.936733][T12841] x64_sys_call+0x221a/0x2240 [ 939.936761][T12841] do_syscall_64+0x174/0x580 [ 939.936788][T12841] ? clear_bhb_loop+0x40/0x90 [ 939.936810][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.936831][T12841] RIP: 0033:0x7fa40dca76c5 [ 939.936849][T12841] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 939.936868][T12841] RSP: 002b:00007ffcea9970f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 939.936890][T12841] RAX: ffffffffffffffda RBX: 000055fe5e677d10 RCX: 00007fa40dca76c5 [ 939.936907][T12841] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 939.936922][T12841] RBP: 000055fe5e597910 R08: 0000000000000000 R09: 0000000000000000 [ 939.936937][T12841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.936950][T12841] R13: 00007ffcea997140 R14: 0000000000000000 R15: 0000000000000000 [ 939.936972][T12841] [ 939.936989][T12841] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 939.937005][T12841] CPU: 1 UID: 0 PID: 12841 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 939.937030][T12841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 939.937043][T12841] Call Trace: [ 939.937051][T12841] [ 939.937059][T12841] vpanic+0x56c/0xa60 [ 939.937086][T12841] ? __pfx__printk+0x10/0x10 [ 939.937116][T12841] ? __pfx_vpanic+0x10/0x10 [ 939.937140][T12841] ? is_bpf_text_address+0x292/0x2b0 [ 939.937197][T12841] ? is_bpf_text_address+0x26/0x2b0 [ 939.937227][T12841] panic+0xc5/0xd0 [ 939.937251][T12841] ? __pfx_panic+0x10/0x10 [ 939.937283][T12841] __warn+0x315/0x4c0 [ 939.937314][T12841] ? kcov_task_exit+0xf5/0x160 [ 939.937335][T12841] ? kcov_task_exit+0xf5/0x160 [ 939.937355][T12841] __report_bug+0x331/0x530 [ 939.937414][T12841] ? kcov_task_exit+0xf5/0x160 [ 939.937435][T12841] ? __pfx___report_bug+0x10/0x10 [ 939.937462][T12841] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 939.937485][T12841] ? rt_spin_lock+0x1e0/0x400 [ 939.937504][T12841] ? rcu_is_watching+0x15/0xb0 [ 939.937534][T12841] ? lock_acquire+0x5f/0x350 [ 939.937559][T12841] ? kcov_task_exit+0xf5/0x160 [ 939.937580][T12841] report_bug+0x16a/0x220 [ 939.937605][T12841] ? kcov_task_exit+0xf5/0x160 [ 939.937624][T12841] ? kcov_task_exit+0xf7/0x160 [ 939.937644][T12841] handle_bug+0x9c/0x200 [ 939.937672][T12841] exc_invalid_op+0x1a/0x50 [ 939.937699][T12841] asm_exc_invalid_op+0x1a/0x20 [ 939.937719][T12841] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 939.937741][T12841] Code: 10 00 00 48 8b bb 90 00 00 00 e8 16 94 57 00 48 89 df 5b 41 5e 41 5f e9 49 59 5d 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 db 91 5d 09 48 89 df be 03 00 [ 939.937760][T12841] RSP: 0018:ffffc90005fcfd20 EFLAGS: 00010287 [ 939.937778][T12841] RAX: eaafb9532b077400 RBX: ffff888025e28b00 RCX: 0000000000000000 [ 939.937794][T12841] RDX: 0000000000000000 RSI: ffffffff8ba7d600 RDI: 00000000ffffffff [ 939.937810][T12841] RBP: ffffc90005fcfe80 R08: 0000000000000000 R09: 0000000000000000 [ 939.937825][T12841] R10: dffffc0000000000 R11: fffffbfff1f12e9f R12: 0000000000000000 [ 939.937841][T12841] R13: ffff888021f71f00 R14: ffff888025e28b08 R15: ffff888021f71f00 [ 939.937866][T12841] do_exit+0x159/0x2360 [ 939.937888][T12841] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 939.937913][T12841] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 939.937934][T12841] ? preempt_count_add+0x91/0x190 [ 939.937961][T12841] ? __pfx_do_exit+0x10/0x10 [ 939.937982][T12841] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 939.938007][T12841] ? rt_spin_unlock+0x160/0x200 [ 939.938027][T12841] do_group_exit+0x22d/0x2f0 [ 939.938050][T12841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.938072][T12841] __x64_sys_exit_group+0x3f/0x40 [ 939.938095][T12841] x64_sys_call+0x221a/0x2240 [ 939.938121][T12841] do_syscall_64+0x174/0x580 [ 939.938146][T12841] ? clear_bhb_loop+0x40/0x90 [ 939.938170][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.938191][T12841] RIP: 0033:0x7fa40dca76c5 [ 939.938207][T12841] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 939.938226][T12841] RSP: 002b:00007ffcea9970f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 939.938247][T12841] RAX: ffffffffffffffda RBX: 000055fe5e677d10 RCX: 00007fa40dca76c5 [ 939.938264][T12841] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 939.938279][T12841] RBP: 000055fe5e597910 R08: 0000000000000000 R09: 0000000000000000 [ 939.938299][T12841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.938313][T12841] R13: 00007ffcea997140 R14: 0000000000000000 R15: 0000000000000000 [ 939.938335][T12841] [ 939.938673][T12841] Kernel Offset: disabled