last executing test programs: 29.438565333s ago: executing program 3 (id=758): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 28.144073597s ago: executing program 3 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfd, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0xa0, 0x0, 0x1d}, {@in=@broadcast, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x80, 0x50}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x60, "210466d385"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 26.563225014s ago: executing program 3 (id=766): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 25.760004958s ago: executing program 3 (id=768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic'], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) 25.682996431s ago: executing program 1 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB='6\x00'], 0x2, 0x1553, &(0x7f0000001900)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, 0x0) socket$rds(0x15, 0x5, 0x0) 24.07829558s ago: executing program 3 (id=772): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x22040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000280)) r1 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 24.013790403s ago: executing program 1 (id=773): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000616263646587fe"], 0x18, 0xfffffffffffffffd) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xa8d4}}, './file0\x00'}) r0 = add_key$user(0x0, &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23.769442593s ago: executing program 2 (id=775): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 23.3513418s ago: executing program 4 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000140)=@fd={0x295, 0x2, 0x4, 0x2000, 0x4, {}, {0x5, 0x1, 0x2, 0x2, 0x1, 0x20, "7e9fe623"}, 0x8, 0x4, {}, 0xffffffff}) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x400c080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a3000000000140000001100"], 0xe0}}, 0x0) 22.673652699s ago: executing program 2 (id=779): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000640)="3ce2a41eba747dd7c65c", 0xa}], 0x2) 22.618240161s ago: executing program 4 (id=780): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffff", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 22.522741915s ago: executing program 1 (id=781): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000a40)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e1ec103706d8b0bb468babe142dc2fe14205b8b103eddb77adad09c1cd3e78c0ab98a9d0600da41c52411b0bc760b0000000000000000000000008ea0e05be2ac47f4ba23042e3394cc134df55ab336103854782d00779d865d50bbb6c61f08784f127b2498604cdf3b96a1d4233d63", 0xa4}, {&(0x7f0000000600)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa", 0x2d}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17c", 0x60}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041e", 0x8b}], 0x5}}, {{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000000900)="e71dd690e092d1f7d9233f90328fc4d8e552aeacace7f18623c2a1a4fb1305b4cc04da7f1ca8b45b7ef4860dcf3b413c3d1150b9482d4e284bc3d8ed556680c03f55ca2beb3b11e780849db35e157a4cd187957c06335bbc3a69ac3e890289dfecefaa2a2d811c7332fb5fe2a705ef2a23501e5f0d6e7b7e", 0x78}], 0x2}}, {{&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10dbc2, 0x2}, 0x80, 0x0}}], 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r2, 0x0, 0x0, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0x2, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x8000000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x7, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xc, 0x7, 0x7f, 0x7, 0x2, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xc, 0x2, 0x7, 0x2, 0x5, 0x5, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0xdddd0000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0x2000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x4000, 0x5}, {0x54000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xb800, 0x8000900, 0x0, [0x5, 0x2, 0x1, 0x1]}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22.522468395s ago: executing program 2 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic'], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) 22.216355348s ago: executing program 4 (id=784): syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00', @ANYBLOB="01000000000000000000170000004c"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xed]}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @loopback, 0xa098}, {0xa, 0x4e21, 0x4, @local, 0x100}, r3, 0x8401}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 21.573420176s ago: executing program 2 (id=785): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x2) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @loopback, @private}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 21.172952783s ago: executing program 1 (id=786): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) 21.172690072s ago: executing program 4 (id=787): r0 = socket$kcm(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x3f2, 0x300, 0x70bd26, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x1157d27a36c007f1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="0207000902001f", 0x7}, {&(0x7f0000000200)="bd4e28b1e4a0ba7e", 0x8}], 0x2}, 0xc000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa040, 0x0) r4 = socket(0x3, 0x5, 0x3) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 20.982186871s ago: executing program 1 (id=788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) 20.863962076s ago: executing program 0 (id=789): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f080001401f000000340005800c00010070"], 0xc0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 20.861529446s ago: executing program 4 (id=790): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 20.035461401s ago: executing program 1 (id=791): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2004888, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1812480, &(0x7f00000003c0)) 19.945661275s ago: executing program 4 (id=792): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000616263646587fe"], 0x18, 0xfffffffffffffffd) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xa8d4}}, './file0\x00'}) r0 = add_key$user(0x0, &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19.774177272s ago: executing program 2 (id=793): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@dax_never}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) connect$unix(0xffffffffffffffff, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) 19.634032078s ago: executing program 0 (id=794): io_setup(0x6, &(0x7f0000000440)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) recvmsg(0xffffffffffffffff, 0x0, 0x2000) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x6, 0x2, 0x0, 0x0, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1000000000003}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 19.393531428s ago: executing program 3 (id=795): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x13a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_create(0xd) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000500)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES64=r0], 0x0) 18.775690654s ago: executing program 2 (id=796): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 18.64534704s ago: executing program 0 (id=797): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000a40)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e1ec103706d8b0bb468babe142dc2fe14205b8b103eddb77adad09c1cd3e78c0ab98a9d0600da41c52411b0bc760b0000000000000000000000008ea0e05be2ac47f4ba23042e3394cc134df55ab336103854782d00779d865d50bbb6c61f08784f127b2498604cdf3b96a1d4233d63", 0xa4}, {&(0x7f0000000600)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa", 0x2d}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17c", 0x60}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041e", 0x8b}], 0x5}}, {{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000000900)="e71dd690e092d1f7d9233f90328fc4d8e552aeacace7f18623c2a1a4fb1305b4cc04da7f1ca8b45b7ef4860dcf3b413c3d1150b9482d4e284bc3d8ed556680c03f55ca2beb3b11e780849db35e157a4cd187957c06335bbc3a69ac3e890289dfecefaa2a2d811c7332fb5fe2a705ef2a23501e5f0d6e7b7e", 0x78}], 0x2}}, {{&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10dbc2, 0x2}, 0x80, 0x0}}], 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r2, 0x0, 0x0, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0x2, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x8000000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x7, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xc, 0x7, 0x7f, 0x7, 0x2, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xc, 0x2, 0x7, 0x2, 0x5, 0x5, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0xdddd0000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0x2000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x4000, 0x5}, {0x54000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xb800, 0x8000900, 0x0, [0x5, 0x2, 0x1, 0x1]}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 16.643901955s ago: executing program 0 (id=798): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffc88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="741000002100100027bd7000fddbdf2500000000000000000000ffffac1e0001fe8000000000000000000000000000bb4e2100004e200000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x7) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xd9000}, 0x1, 0x2}) 15.585571379s ago: executing program 0 (id=799): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x50) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 15.486220204s ago: executing program 0 (id=800): r0 = socket$kcm(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x3f2, 0x300, 0x70bd26, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x1157d27a36c007f1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="0207000902001f", 0x7}, {&(0x7f0000000200)="bd4e28b1e4a0ba7e", 0x8}], 0x2}, 0xc000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa040, 0x0) r4 = socket(0x3, 0x5, 0x3) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 4.502102449s ago: executing program 32 (id=791): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2004888, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1812480, &(0x7f00000003c0)) 4.451568411s ago: executing program 33 (id=792): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000616263646587fe"], 0x18, 0xfffffffffffffffd) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xa8d4}}, './file0\x00'}) r0 = add_key$user(0x0, &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.992028451s ago: executing program 34 (id=795): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x13a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_create(0xd) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000500)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES64=r0], 0x0) 3.450314914s ago: executing program 35 (id=796): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 0s ago: executing program 36 (id=800): r0 = socket$kcm(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x3f2, 0x300, 0x70bd26, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x1157d27a36c007f1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="0207000902001f", 0x7}, {&(0x7f0000000200)="bd4e28b1e4a0ba7e", 0x8}], 0x2}, 0xc000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa040, 0x0) r4 = socket(0x3, 0x5, 0x3) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) kernel console output (not intermixed with test programs): ] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.629310][ T4273] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 84.633182][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.649295][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.656153][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.662896][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.678175][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.690826][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.697569][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.705041][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.711974][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.718664][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.725897][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.732684][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.740298][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.747018][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.753826][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.760593][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.767351][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.774108][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.780879][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.787567][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.795213][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.801956][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.808713][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.815455][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.822247][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.828937][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.835744][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.842458][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.849250][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.855977][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.862777][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.869486][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.876234][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.882989][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.889756][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.897300][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.904081][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.910871][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.917665][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.924532][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.931351][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.938107][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.944942][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.951740][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.958714][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.965526][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.972355][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.979099][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.985924][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 84.992760][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.000421][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.007178][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.014006][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.020769][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.027556][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.034362][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.041179][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.047927][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.054774][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.061620][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.069501][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.076767][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.084015][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.090868][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.097722][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.105419][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.112317][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.119134][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.126016][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.132876][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.139754][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.146571][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.153489][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.160350][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.167210][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.174058][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.180954][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.187772][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.194667][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.202343][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.209652][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.216449][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.223347][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.230144][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.236970][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.245637][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.252540][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.259373][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.266197][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.273254][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.280084][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.286875][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.293770][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.300734][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.308700][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.315706][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.322610][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.329468][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.336344][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.343221][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.350126][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.356968][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.364305][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.371186][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.378029][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.384838][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.391718][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.398498][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.406394][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.415343][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.425149][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.434007][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.443865][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.452777][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.462599][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.471475][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.478262][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.488099][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.497063][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.507007][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.517510][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.527315][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.541234][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.553627][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.562539][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.572378][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.579174][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.585996][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.599160][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.605990][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.619488][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.626637][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.637809][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.649650][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.656423][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.667188][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.675715][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.686469][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.694297][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.705153][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.714396][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.725532][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.733571][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.744752][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.752543][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.763439][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.771371][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.781592][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.788774][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.802179][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.808925][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.816560][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.823316][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.830065][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.836746][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.843464][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.850364][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.857060][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.863791][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.870511][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.877186][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.885071][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.891790][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.898468][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.905167][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.911887][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.919087][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.925825][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.932526][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.939234][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.945909][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.952808][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.959534][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.966213][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.972906][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.979629][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.986314][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.993021][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 85.999740][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.006417][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.013113][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.019833][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.027040][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.033752][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.040482][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.047159][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.053853][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.060578][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.067366][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.074080][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.080828][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.087504][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.094215][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.100934][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.107611][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.114443][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.121243][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.128433][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.135159][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.141863][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.148523][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.155233][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.161925][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.168589][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.175296][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.181989][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.188648][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.195356][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.202065][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.208726][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.215440][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.222133][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.229346][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.236029][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.242833][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.249558][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.256241][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.262955][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.269676][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.276362][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.283070][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.289798][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.296473][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.303186][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.309911][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.316592][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.323307][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.330884][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.337566][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.344277][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.350989][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.357668][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.364389][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.371104][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.377798][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.384501][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.391209][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.397885][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.404588][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.411308][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.417986][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.424677][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.432244][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.438934][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.445662][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.452362][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.459025][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.465729][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.472445][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.479122][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.485827][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.492524][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.499247][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.505930][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.512634][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.519710][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.526395][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.533749][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.540478][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.547156][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.553873][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.560605][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.567516][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.574271][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.580981][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.587657][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.594356][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.601087][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.607764][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.614465][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.621198][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.627878][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.635401][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.642112][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.648774][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.655462][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.662162][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.668837][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.675558][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.682477][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.689163][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.695877][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.702578][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.709279][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.715956][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.722643][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.729343][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.736017][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.743484][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.750211][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.756888][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.763625][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.770371][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.777049][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.783738][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.790458][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.797136][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.803840][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.810591][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.817268][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.823954][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.830673][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.837351][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.844944][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.851679][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.858354][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.865066][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.871801][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.878480][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.885191][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.891921][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.898601][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.905301][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.912029][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.918706][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.925414][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.932128][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.938803][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.946112][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.952829][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.959566][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.966248][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.972955][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.979673][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.986350][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.993037][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 86.999744][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.006424][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.013119][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.019859][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.026533][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.033222][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.039940][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.047123][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.053833][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.060566][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.067242][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x4 [ 87.074208][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.080974][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.087651][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.094357][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.101079][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x2 [ 87.107755][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.114453][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.121173][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.127852][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.134542][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.141250][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.148405][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.155129][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.162588][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.169295][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.175973][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.182662][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.189377][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.196054][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.202754][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.209470][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.216151][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.222855][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.229581][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.236257][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.242954][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.250499][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.257179][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.263867][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.270584][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.277260][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.283977][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.290688][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.297363][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.304049][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.310757][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.317433][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.324133][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.330887][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.337580][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.344292][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.351014][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.358200][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.364941][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.371651][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.378331][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.385037][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.391753][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.398429][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.405235][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.411973][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.418651][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.425524][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.432241][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.438918][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.445605][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.452327][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.459772][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.466465][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.473192][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.480115][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.486794][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.493499][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.500209][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.506912][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.513602][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.520311][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.526987][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.533734][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.540452][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.547132][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.553847][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.561714][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.568510][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.575491][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.582204][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.588881][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.595597][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.602300][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.608972][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.615660][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.622375][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.629059][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.635773][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.642478][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.649135][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.655831][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.663025][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.669746][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.676419][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.683109][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.689822][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.696494][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.703188][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.709911][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.716587][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.723323][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.730043][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.736736][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.743447][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.750152][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.756827][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.764134][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.770885][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.777560][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.784277][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.790984][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x0 [ 87.797658][ T4241] kye 0003:0458:5010.0003: unknown main item tag 0x3 [ 87.806903][ T4241] kye 0003:0458:5010.0003: hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 87.817815][ T4241] kye 0003:0458:5010.0003: tablet-enabling feature report not found [ 87.825802][ T4241] kye 0003:0458:5010.0003: tablet enabling failed [ 87.906674][ T4241] usb 4-1: USB disconnect, device number 6 [ 88.061612][ T4760] fido_id[4760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 88.698910][ T4235] usb 5-1: USB disconnect, device number 10 [ 89.069305][ T4241] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 89.439278][ T4197] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 89.579402][ T4241] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 89.621035][ T4241] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 89.659541][ T4241] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.539336][ T4197] usb 1-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 90.579346][ T4241] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 91.185955][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 91.280912][ T4241] usb 4-1: Product: syz [ 91.285103][ T4241] usb 4-1: Manufacturer: syz [ 91.362903][ T4241] usb 4-1: SerialNumber: syz [ 91.369480][ T4197] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 91.417191][ T4197] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 91.443418][ T4241] usb 4-1: config 0 descriptor?? [ 91.472873][ T4197] usb 1-1: Manufacturer: syz [ 91.499386][ T4241] usb 4-1: can't set config #0, error -71 [ 91.507304][ T4197] usb 1-1: SerialNumber: syz [ 91.535641][ T4241] usb 4-1: USB disconnect, device number 7 [ 91.841457][ T4197] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 91.886857][ T4197] usb 1-1: USB disconnect, device number 10 [ 91.961914][ T4800] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.970886][ T4800] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.979603][ T4800] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.988282][ T4800] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.130032][ T4800] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.139079][ T4800] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.148228][ T4800] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.157230][ T4800] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.161637][ T4802] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 92.247416][ T4802] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 92.424194][ T4197] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 93.049623][ T4197] usb 1-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 93.549514][ T4197] usb 1-1: string descriptor 0 read error: -71 [ 93.555735][ T4197] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 93.585565][ T4197] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 93.629451][ T4197] usb 1-1: can't set config #36, error -71 [ 93.665838][ T4197] usb 1-1: USB disconnect, device number 11 [ 93.884995][ T4840] smc: net device wlan0 applied user defined pnetid SYZ0 [ 93.889217][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 93.902785][ T4840] Unsupported ieee802154 address type: 0 [ 94.287159][ T4853] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 94.327366][ T4848] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 94.979231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 94.999229][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.009222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.019222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.029225][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.039220][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.049221][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.059220][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 95.069232][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 96.090004][ T4848] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 98.122202][ T4885] Unsupported ieee802154 address type: 0 [ 98.281515][ T4884] binder: 4878:4884 ioctl c0306201 0 returned -14 [ 99.284241][ T4235] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 99.539763][ T4232] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 100.139253][ T4238] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 100.254660][ T4903] loop2: detected capacity change from 0 to 128 [ 100.340555][ T4235] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 100.351103][ T4903] ======================================================= [ 100.351103][ T4903] WARNING: The mand mount option has been deprecated and [ 100.351103][ T4903] and is ignored by this kernel. Remove the mand [ 100.351103][ T4903] option from the mount to silence this warning. [ 100.351103][ T4903] ======================================================= [ 100.385933][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.414425][ T4903] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 100.426885][ T4903] hpfs: filesystem error: improperly stopped [ 100.433024][ T4903] hpfs: You really don't want any checks? You are crazy... [ 100.441440][ T4903] hpfs: hpfs_map_sector(): read error [ 100.446862][ T4903] hpfs: code page support is disabled [ 100.455180][ T4903] hpfs: hpfs_map_4sectors(): unaligned read [ 100.461919][ T4903] hpfs: hpfs_map_4sectors(): unaligned read [ 100.467930][ T4903] hpfs: filesystem error: unable to find root dir [ 100.509342][ T4238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 100.529750][ T4232] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 100.931789][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.649533][ T4235] usb 5-1: Product: syz [ 101.714411][ T4235] usb 5-1: Manufacturer: syz [ 101.720469][ T4232] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 101.776093][ T4232] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 101.808408][ T4235] usb 5-1: SerialNumber: syz [ 101.897674][ T4232] usb 2-1: Manufacturer: syz [ 101.934167][ T4235] usb 5-1: config 0 descriptor?? [ 101.957059][ T4232] usb 2-1: SerialNumber: syz [ 102.076530][ T4238] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 102.086854][ T4238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 102.096631][ T4238] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 102.107054][ T4238] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 102.116137][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.125756][ T4238] usb 1-1: config 0 descriptor?? [ 102.170776][ T4235] usb 5-1: can't set config #0, error -71 [ 102.183691][ T4235] usb 5-1: USB disconnect, device number 11 [ 102.229368][ T4238] usb 1-1: can't set config #0, error -71 [ 102.268376][ T4238] usb 1-1: USB disconnect, device number 12 [ 102.879913][ T4232] usb 2-1: can't set config #36, error -71 [ 102.909551][ T4232] usb 2-1: USB disconnect, device number 8 [ 103.030722][ T4195] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 103.055733][ T4195] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.449412][ T4238] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 103.899351][ T4238] usb 1-1: config 0 has no interfaces? [ 104.041752][ T4932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.209'. [ 104.133979][ T4238] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.165898][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 104.262931][ T4238] usb 1-1: SerialNumber: syz [ 104.313928][ T4238] usb 1-1: config 0 descriptor?? [ 104.773392][ T4932] syz.4.209 (4932) used greatest stack depth: 18040 bytes left [ 104.936600][ T25] audit: type=1326 audit(1778597311.552:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.4.210" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe658dd9 code=0x7ffc0000 [ 105.008351][ T4238] usb 1-1: USB disconnect, device number 13 [ 105.022978][ T4948] loop1: detected capacity change from 0 to 2048 [ 105.098423][ T25] audit: type=1326 audit(1778597311.552:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.4.210" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe658dd9 code=0x7ffc0000 [ 105.122265][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.215704][ T4949] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.252681][ T25] audit: type=1326 audit(1778597311.552:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.4.210" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5ebe658dd9 code=0x7ffc0000 [ 105.276568][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.292388][ T25] audit: type=1326 audit(1778597311.742:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.4.210" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe658dd9 code=0x7ffc0000 [ 105.298764][ T4948] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=104, inode=18446744073709551376, rec_len=255, name_len=5 [ 105.320049][ T25] audit: type=1326 audit(1778597311.752:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.4.210" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe658dd9 code=0x7ffc0000 [ 105.357070][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.413801][ T4948] Remounting filesystem read-only [ 105.514732][ T4953] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=104, inode=18446744073709551376, rec_len=255, name_len=5 [ 105.660412][ T4205] block nbd3: Receive control failed (result -32) [ 105.670056][ T4939] block nbd3: shutting down sockets [ 105.689354][ T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 105.702487][ T4956] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=104, inode=18446744073709551376, rec_len=255, name_len=5 [ 105.822118][ T4948] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=104, inode=18446744073709551376, rec_len=255, name_len=5 [ 105.960551][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 106.089320][ T4232] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 106.739512][ T13] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 106.754210][ T13] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 106.767578][ T13] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.786475][ T13] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.796361][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.837089][ T4976] bond1: option mode: unable to set because the bond device has slaves [ 106.872672][ T4976] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 106.911490][ T13] usbtmc 5-1:16.0: bulk endpoints not found [ 106.931355][ T4232] usb 3-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 107.020997][ T4238] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 107.039799][ T4982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.221'. [ 107.369324][ T4238] usb 1-1: Using ep0 maxpacket: 32 [ 107.799547][ T4238] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 107.872758][ T4232] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 107.882238][ T13] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 107.889845][ T4232] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 107.898098][ T4232] usb 3-1: Manufacturer: syz [ 107.902738][ T4232] usb 3-1: SerialNumber: syz [ 108.309879][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.418019][ T4232] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 108.690198][ T4238] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.722490][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.726409][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.737833][ T4990] loop3: detected capacity change from 0 to 128 [ 108.748667][ T4232] usb 3-1: USB disconnect, device number 9 [ 108.762832][ T4238] usb 1-1: Product: syz [ 108.766997][ T4238] usb 1-1: Manufacturer: syz [ 108.783284][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.792229][ T4238] usb 1-1: SerialNumber: syz [ 108.792491][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.810725][ T4238] usb 1-1: config 0 descriptor?? [ 108.839875][ T4972] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 108.869727][ T4990] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.886524][ T4990] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.918309][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.049439][ T13] usb 2-1: usb_control_msg returned -32 [ 109.059430][ T13] usbtmc 2-1:16.0: can't read capabilities [ 109.158411][ T4994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 109.674699][ T4232] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 109.685788][ T13] usb 1-1: USB disconnect, device number 14 [ 110.814395][ T1107] usb 2-1: USB disconnect, device number 9 [ 112.312492][ T5007] loop3: detected capacity change from 0 to 256 [ 112.424306][ T4235] usb 5-1: USB disconnect, device number 12 [ 112.622615][ T5027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.233'. [ 114.571924][ T5040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.582425][ T5047] loop3: detected capacity change from 0 to 128 [ 114.673345][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 114.702061][ T5047] FAT-fs (loop3): bogus number of reserved sectors [ 114.708781][ T5047] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 114.763538][ T5047] FAT-fs (loop3): Can't find a valid FAT filesystem [ 114.829297][ T4272] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 117.405644][ T5081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.248'. [ 117.742803][ T4232] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 117.771197][ T5088] mmap: syz.3.251 (5088) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 119.119389][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 119.272232][ T5096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.253'. [ 119.945359][ T5110] block device autoloading is deprecated and will be removed. [ 120.385965][ T25] audit: type=1326 audit(1778597327.002:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.0.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 120.504941][ T25] audit: type=1326 audit(1778597327.042:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.0.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 120.532941][ T5109] libceph: resolve '0..' (ret=-3): failed [ 120.650957][ T25] audit: type=1326 audit(1778597327.042:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.0.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 120.831556][ T5130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.261'. [ 121.494854][ T25] audit: type=1326 audit(1778597327.052:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.0.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 121.622749][ T25] audit: type=1326 audit(1778597327.052:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.0.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 121.646641][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.777276][ T25] audit: type=1326 audit(1778597327.052:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.0.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 121.814255][ T25] audit: type=1326 audit(1778597327.052:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.0.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 121.819359][ T4232] usb 5-1: device descriptor read/all, error -71 [ 121.850475][ T25] audit: type=1326 audit(1778597327.052:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.0.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 121.946054][ T25] audit: type=1326 audit(1778597327.052:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.0.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 121.978813][ T5140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.268'. [ 121.988925][ T25] audit: type=1326 audit(1778597327.052:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.0.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 122.012849][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.992624][ T13] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 123.931012][ T5167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.276'. [ 124.869438][ T13] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 124.913045][ T13] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 124.989888][ T4271] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.008596][ T13] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 125.009648][ T4271] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.079346][ T4238] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.099679][ T13] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 125.228503][ T13] usb 1-1: string descriptor 0 read error: -71 [ 125.234959][ T13] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 125.250892][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.428502][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 125.428512][ T25] audit: type=1326 audit(1778597332.042:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.286" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 125.469294][ T4238] usb 4-1: Using ep0 maxpacket: 8 [ 125.479468][ T25] audit: type=1326 audit(1778597332.042:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.286" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 125.489342][ T4241] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 125.511123][ T4272] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 125.518972][ T13] usb 1-1: can't set config #1, error -71 [ 125.535635][ T13] usb 1-1: USB disconnect, device number 16 [ 125.559619][ T25] audit: type=1326 audit(1778597332.042:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.286" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 125.583514][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.610718][ T4238] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 125.620524][ T4238] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 125.630800][ T4238] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.644670][ T4238] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.654413][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.679094][ T25] audit: type=1326 audit(1778597332.292:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.286" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 125.759846][ T4238] usbtmc 4-1:16.0: bulk endpoints not found [ 125.812033][ T25] audit: type=1326 audit(1778597332.292:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.286" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ead6dcdd9 code=0x7ffc0000 [ 125.889555][ T4272] usb 3-1: config 0 has no interfaces? [ 125.969516][ T4272] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.984321][ T4272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.998567][ T4272] usb 3-1: SerialNumber: syz [ 126.025533][ T4272] usb 3-1: config 0 descriptor?? [ 126.069420][ T4241] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 126.090239][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.107099][ T4241] usb 2-1: Product: syz [ 126.117156][ T4241] usb 2-1: Manufacturer: syz [ 126.127503][ T4241] usb 2-1: SerialNumber: syz [ 126.335912][ T4232] usb 3-1: USB disconnect, device number 11 [ 126.399618][ T4241] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 126.689333][ T4241] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 126.712695][ T4241] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 126.764634][ T4241] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 126.783339][ T4241] lan78xx: probe of 2-1:1.0 failed with error -32 [ 127.288976][ T5212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.291'. [ 127.618926][ T5222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.293'. [ 128.412139][ T4232] usb 4-1: USB disconnect, device number 8 [ 128.429805][ T5231] loop0: detected capacity change from 0 to 1024 [ 128.437049][ T4241] usb 2-1: USB disconnect, device number 10 [ 128.661197][ T5239] netlink: 'syz.3.298': attribute type 10 has an invalid length. [ 128.786786][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.816951][ T5239] device team_slave_0 entered promiscuous mode [ 128.823194][ T5239] device team_slave_1 entered promiscuous mode [ 128.864558][ T5239] bond0: (slave team0): Enslaving as an active interface with an up link [ 129.425006][ T5246] loop0: detected capacity change from 0 to 128 [ 129.825266][ T5246] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.842746][ T5246] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.060821][ T5259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.304'. [ 130.347142][ T5269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.424862][ T5269] device bond_slave_0 entered promiscuous mode [ 130.431086][ T5269] device bond_slave_1 entered promiscuous mode [ 130.437244][ T5269] device team_slave_0 entered promiscuous mode [ 130.443440][ T5269] device team_slave_1 entered promiscuous mode [ 130.457528][ T5269] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.465441][ T5269] bond2: (slave macvlan2): speed changed to 0 on port 1 [ 130.474216][ T5269] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 130.583158][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 130.660951][ T5280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.307'. [ 131.006994][ T5289] loop2: detected capacity change from 0 to 128 [ 131.289511][ T13] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 131.371076][ T5295] device hsr0 entered promiscuous mode [ 131.439874][ T5294] device hsr0 left promiscuous mode [ 131.570641][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 131.719553][ T13] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 131.738089][ T13] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 131.758696][ T13] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.857831][ T13] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.884817][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.951890][ T13] usbtmc 5-1:16.0: bulk endpoints not found [ 132.179260][ T4232] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.449241][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 132.503689][ T5357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.320'. [ 132.601585][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.607991][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.205274][ T5358] bond1: option mode: unable to set because the bond device has slaves [ 133.244264][ T5358] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 133.329506][ T4232] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 133.529578][ T4232] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 133.539511][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 133.547683][ T4232] usb 4-1: Product: syz [ 133.552367][ T4232] usb 4-1: Manufacturer: syz [ 133.556966][ T4232] usb 4-1: SerialNumber: syz [ 133.579868][ T4232] usb 4-1: config 0 descriptor?? [ 133.629503][ T5311] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 133.673739][ T5371] loop2: detected capacity change from 0 to 256 [ 133.762506][ T5371] exfat: Unknown parameter 'keep_last_dots' [ 133.877980][ T4232] usb 4-1: USB disconnect, device number 9 [ 134.049492][ T5375] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 136.045997][ T5401] bond1: option mode: unable to set because the bond device has slaves [ 136.129624][ T25] audit: type=1326 audit(1778597342.742:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.3.336" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 137.487190][ T25] audit: type=1326 audit(1778597342.742:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.3.336" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 137.507097][ T4272] usb 5-1: USB disconnect, device number 15 [ 137.511203][ T25] audit: type=1326 audit(1778597342.742:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.3.336" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 137.809295][ T4235] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.089244][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 138.215857][ T5416] loop4: detected capacity change from 0 to 32768 [ 138.219300][ T4235] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 138.263852][ T5416] [ 138.263852][ T5416] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.263852][ T5416] [ 138.439331][ T4235] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 138.461430][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 138.485560][ T4235] usb 4-1: Product: syz [ 138.493651][ T4235] usb 4-1: Manufacturer: syz [ 138.498749][ T4191] [ 138.498749][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.498749][ T4191] [ 138.501746][ T4235] usb 4-1: SerialNumber: syz [ 138.554228][ T4191] [ 138.554228][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.554228][ T4191] [ 138.682006][ T4235] usb 4-1: config 0 descriptor?? [ 138.725052][ T5410] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.664955][ T5436] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.673736][ T5436] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.683188][ T5436] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.692024][ T5436] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.755085][ T4235] usb 4-1: USB disconnect, device number 10 [ 139.832234][ T5436] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.841299][ T5436] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.850316][ T5436] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.859252][ T5436] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.072289][ T25] audit: type=1326 audit(1778597346.692:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.2.347" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9b442dd9 code=0x7ffc0000 [ 140.197895][ T25] audit: type=1326 audit(1778597346.692:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.2.347" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9b442dd9 code=0x7ffc0000 [ 140.223207][ T4273] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 140.267184][ T25] audit: type=1326 audit(1778597346.692:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.2.347" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9f9b442dd9 code=0x7ffc0000 [ 141.456284][ T4273] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 141.694555][ T4273] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 141.708949][ T5457] bond1: option mode: unable to set because the bond device has slaves [ 141.735839][ T4273] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.851168][ T5471] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 143.989362][ T4273] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 143.999261][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 144.010792][ T4273] usb 1-1: config 0 descriptor?? [ 144.029344][ T4273] usb 1-1: can't set config #0, error -71 [ 144.039434][ T4273] usb 1-1: USB disconnect, device number 17 [ 144.169683][ T5482] device syzkaller0 entered promiscuous mode [ 144.382300][ T5487] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.391408][ T5487] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.400306][ T5487] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.408997][ T5487] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.438824][ T5487] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.448360][ T5487] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.457273][ T5487] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.466164][ T5487] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.493134][ T5485] loop1: detected capacity change from 0 to 4096 [ 145.939490][ T25] audit: type=1326 audit(1778597352.462:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.363" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 145.981282][ T25] audit: type=1326 audit(1778597352.462:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.363" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 146.030350][ T25] audit: type=1326 audit(1778597352.472:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.363" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 146.158081][ T4188] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 146.209405][ T4188] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 146.335639][ T5522] bond1: option mode: unable to set because the bond device has slaves [ 146.411695][ T5522] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 146.559314][ T4235] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 146.679591][ T4241] Bluetooth: hci4: command 0x0409 tx timeout [ 146.969323][ T4235] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 146.986568][ T4235] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 147.009393][ T4235] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.209966][ T4235] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 147.236019][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 147.257984][ T5535] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.267066][ T5535] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.275860][ T5535] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.284609][ T5535] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.338801][ T4235] usb 5-1: Product: syz [ 147.373468][ T5535] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.382394][ T5535] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.391287][ T5535] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.400198][ T5535] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.416966][ T4235] usb 5-1: Manufacturer: syz [ 147.442880][ T4235] usb 5-1: SerialNumber: syz [ 147.466002][ T4235] usb 5-1: config 0 descriptor?? [ 147.473020][ T5539] device tunl0 entered promiscuous mode [ 147.497039][ T5539] netlink: 'syz.2.375': attribute type 4 has an invalid length. [ 147.512557][ T5539] netlink: 9 bytes leftover after parsing attributes in process `syz.2.375'. [ 147.525930][ T4235] usb 5-1: selecting invalid altsetting 0 [ 147.728211][ T4241] usb 5-1: USB disconnect, device number 16 [ 148.554761][ T5549] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)$™æ`¡Æ6L) Ñι] [ 148.563538][ T5549] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 148.576718][ T5549] Error parsing options; rc = [-22] [ 149.063920][ T25] audit: type=1326 audit(1778597355.332:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.1.380" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a020f8dd9 code=0x7ffc0000 [ 149.105676][ T25] audit: type=1326 audit(1778597355.332:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.1.380" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a020f8dd9 code=0x7ffc0000 [ 149.130640][ T25] audit: type=1326 audit(1778597355.332:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.1.380" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6a020f8dd9 code=0x7ffc0000 [ 149.569231][ T4241] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 149.727612][ T5567] bond1: option mode: unable to set because the bond device has slaves [ 149.743116][ T5567] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 149.759445][ T4271] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 149.826232][ T5573] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.835130][ T5573] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.844055][ T5573] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.852777][ T5573] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.866183][ T5573] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.875151][ T5573] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.884071][ T5573] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.892945][ T5573] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.949478][ T4241] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.966124][ T4241] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.009531][ T4271] usb 2-1: Using ep0 maxpacket: 32 [ 150.049476][ T4241] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 150.063272][ T4241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.072770][ T4241] usb 5-1: SerialNumber: syz [ 150.129446][ T4271] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 150.148730][ T4271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.372219][ T4241] usb 5-1: 0:2 : does not exist [ 150.403052][ T4241] usb 5-1: USB disconnect, device number 17 [ 150.419386][ T4271] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 150.440075][ T4271] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.469674][ T4271] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 150.477001][ T4271] usb 2-1: media controller created [ 150.494842][ T4271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.629519][ T4271] az6027: usb out operation failed. (-71) [ 150.641105][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.679389][ T4271] az6027: usb out operation failed. (-71) [ 150.688539][ T4271] stb0899_attach: Driver disabled by Kconfig [ 150.697658][ T4271] az6027: no front-end attached [ 150.697658][ T4271] [ 150.726406][ T4271] az6027: usb out operation failed. (-71) [ 150.741253][ T4271] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 150.754181][ T4271] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 150.781522][ T4271] dvb-usb: schedule remote query interval to 400 msecs. [ 150.788474][ T4271] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 150.806918][ T4271] usb 2-1: USB disconnect, device number 11 [ 150.902843][ T4271] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 151.998926][ T5610] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.007723][ T5610] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.016417][ T5610] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.025243][ T5610] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.079914][ T5610] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.088826][ T5610] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.097855][ T5610] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.106704][ T5610] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.197351][ T5639] kAFS: Can only specify source 'none' with -o dyn [ 154.274676][ T25] audit: type=1326 audit(1778597360.892:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a020f8dd9 code=0x7ffc0000 [ 154.831424][ T25] audit: type=1326 audit(1778597360.892:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6a020f8dd9 code=0x7ffc0000 [ 154.900069][ T5665] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.908816][ T5665] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.917618][ T5665] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.926304][ T5665] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.979394][ T25] audit: type=1326 audit(1778597361.522:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a020f8dd9 code=0x7ffc0000 [ 155.104789][ T5665] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.113750][ T5665] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.122673][ T5665] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.131814][ T5665] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.146317][ T25] audit: type=1326 audit(1778597361.522:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a020f8dd9 code=0x7ffc0000 [ 155.534708][ T5684] netlink: 'syz.2.422': attribute type 29 has an invalid length. [ 155.553013][ T5684] netlink: 'syz.2.422': attribute type 29 has an invalid length. [ 155.586369][ T5684] netlink: 'syz.2.422': attribute type 29 has an invalid length. [ 155.841999][ T5689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'. [ 156.572889][ T25] audit: type=1326 audit(1778597363.192:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.3.426" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 156.615541][ T25] audit: type=1326 audit(1778597363.192:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.3.426" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 156.646800][ T25] audit: type=1326 audit(1778597363.212:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.3.426" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 156.655290][ T5707] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.680285][ T5707] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.688976][ T5707] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.698002][ T5707] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.707831][ T4197] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 156.796513][ T25] audit: type=1326 audit(1778597363.412:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.3.426" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 156.820837][ T25] audit: type=1326 audit(1778597363.412:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.3.426" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 156.846640][ T5707] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.855652][ T5707] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.864559][ T5707] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.873667][ T5707] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.000430][ T4197] usb 5-1: Using ep0 maxpacket: 8 [ 157.120033][ T4197] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.138624][ T4197] usb 5-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 157.166881][ T4197] usb 5-1: config 1 interface 0 has no altsetting 0 [ 157.399576][ T4197] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 157.414992][ T4197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.449227][ T4197] usb 5-1: Product: syz [ 157.459536][ T4197] usb 5-1: Manufacturer: syz [ 157.465546][ T4197] usb 5-1: SerialNumber: syz [ 157.684307][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.929408][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 158.005363][ T5726] Unsupported ieee802154 address type: 0 [ 158.151299][ T4197] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 158.176500][ T4197] usb 5-1: USB disconnect, device number 18 [ 158.209760][ T7] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 158.229664][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.249652][ T7] usb 4-1: Product: syz [ 158.253906][ T7] usb 4-1: Manufacturer: syz [ 158.258496][ T7] usb 4-1: SerialNumber: syz [ 158.275800][ T7] usb 4-1: config 0 descriptor?? [ 158.330967][ T7] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 158.344504][ T7] dvb-usb: bulk message failed: -22 (4/0) [ 158.357302][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 158.378077][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 158.388130][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 158.415075][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.449473][ T7] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 158.463175][ T7] usb 4-1: media controller created [ 158.495778][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.525503][ T7] usb 4-1: selecting invalid altsetting 3 [ 158.529230][ T4271] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 158.536041][ T5723] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 158.556980][ T7] ttusb2: set interface to alts=3 failed [ 158.559775][ T5723] dvb-usb: bulk message failed: -22 (7/0) [ 158.568470][ T5723] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 158.599244][ T5723] ttusb2: i2c transfer failed. [ 158.647491][ T7] DVB: Unable to find symbol tda10086_attach() [ 158.679034][ T7] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 158.729430][ T7] dvb-usb: bulk message failed: -22 (4/0) [ 158.735183][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 158.755585][ T7] dvb-usb: bulk message failed: -22 (5/0) [ 158.769221][ T7] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 158.789226][ T7] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 158.810704][ T7] usb 4-1: USB disconnect, device number 11 [ 158.850701][ T7] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 158.974543][ T4271] usb 1-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 159.215898][ T5746] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.224806][ T5746] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.233504][ T5746] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.242220][ T5746] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.251332][ T4271] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 159.261105][ T4271] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 159.274048][ T5746] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.283236][ T5746] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.292146][ T5746] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.301049][ T5746] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.473887][ T4271] usb 1-1: Manufacturer: syz [ 159.478509][ T4271] usb 1-1: SerialNumber: syz [ 159.711956][ T25] audit: type=1326 audit(1778597366.332:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.3.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 159.743038][ T25] audit: type=1326 audit(1778597366.332:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.3.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 159.796425][ T25] audit: type=1326 audit(1778597366.362:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.3.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f72b1800dd9 code=0x7ffc0000 [ 159.951005][ T5769] Unsupported ieee802154 address type: 0 [ 159.960953][ T4271] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 160.037461][ T4271] usb 1-1: USB disconnect, device number 18 [ 160.800396][ T4271] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 161.952956][ T4271] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 161.988789][ T4271] usb 1-1: can't read configurations, error -71 [ 162.746658][ T5798] bond1: option mode: unable to set because the bond device has slaves [ 162.931623][ T5798] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 163.114080][ T5803] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.122858][ T5803] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.132022][ T5803] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.140919][ T5803] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.166443][ T5807] loop2: detected capacity change from 0 to 128 [ 163.188590][ T5803] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.197662][ T5803] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.206555][ T5803] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.215437][ T5803] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.265716][ T5807] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.296680][ T5807] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.249329][ T5822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'. [ 164.916405][ T5835] loop2: detected capacity change from 0 to 256 [ 164.960127][ T5835] exfat: Unknown parameter 'keep_last_dots' [ 164.992242][ T4197] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 165.759655][ T5841] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 166.167888][ T5843] bond1: option mode: unable to set because the bond device has slaves [ 166.169430][ T4197] usb 1-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 166.184936][ T5843] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 166.323536][ T5850] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 166.374480][ T4197] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 166.413577][ T4197] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 166.417924][ T5852] loop2: detected capacity change from 0 to 512 [ 166.438413][ T4197] usb 1-1: Manufacturer: syz [ 166.449238][ T4197] usb 1-1: SerialNumber: syz [ 166.463041][ T5852] EXT4-fs (loop2): inline encryption not supported [ 166.521908][ T5852] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.650477][ T5852] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 166.687222][ T5852] EXT4-fs (loop2): Remounting filesystem read-only [ 166.699777][ T5852] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.471: corrupted inode contents [ 166.733059][ T4197] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 166.766739][ T4197] usb 1-1: USB disconnect, device number 21 [ 166.796029][ T5852] EXT4-fs (loop2): Remounting filesystem read-only [ 166.905347][ T5852] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #12: comm syz.2.471: mark_inode_dirty error [ 166.930347][ T5852] EXT4-fs (loop2): Remounting filesystem read-only [ 166.959002][ T5852] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.471: corrupted inode contents [ 167.613741][ T5852] EXT4-fs (loop2): Remounting filesystem read-only [ 167.623572][ T5852] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.471: mark_inode_dirty error [ 167.722868][ T5852] EXT4-fs (loop2): Remounting filesystem read-only [ 167.835662][ T5852] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.471: corrupted inode contents [ 167.856995][ T5852] EXT4-fs (loop2): Remounting filesystem read-only [ 167.864153][ T5852] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 168.552928][ T5870] ntfs3: loop4: try to read out of volume at offset 0x0 [ 168.862830][ T5852] EXT4-fs (loop2): Remounting filesystem read-only [ 168.865059][ T4197] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 168.869635][ T5852] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.471: corrupted inode contents [ 168.889913][ T5852] EXT4-fs (loop2): Remounting filesystem read-only [ 168.931496][ T5852] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.471: mark_inode_dirty error [ 168.944924][ T5852] EXT4-fs (loop2): Remounting filesystem read-only [ 168.954540][ T5852] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 168.967078][ T5852] EXT4-fs (loop2): Remounting filesystem read-only [ 168.976933][ T5852] EXT4-fs (loop2): 1 truncate cleaned up [ 168.984657][ T5852] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,noblock_validity,resgid=0x0000000000000000,inlinecrypt,errors=remount-ro,noblock_validity,usrjquota=,nodelalloc,resgid=0x00000000000000002. Quota mode: writeback. [ 169.069665][ T5876] loop0: detected capacity change from 0 to 4096 [ 169.083073][ T5852] EXT4-fs (loop2): shut down requested (0) [ 169.101808][ T5876] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 169.240188][ T5876] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 169.319119][ T154] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 169.345286][ T4187] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 169.379248][ T4187] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 169.386202][ T4187] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 169.406232][ T154] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 169.416726][ T4187] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 169.474211][ T5886] bond1: option mode: unable to set because the bond device has slaves [ 169.496802][ T5886] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 169.609311][ T4195] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 169.859262][ T4195] usb 4-1: Using ep0 maxpacket: 32 [ 169.903020][ T5892] loop1: detected capacity change from 0 to 128 [ 169.979373][ T4195] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 169.987466][ T4195] usb 4-1: config 0 has no interface number 0 [ 169.999024][ T5892] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.018752][ T5892] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.189294][ T4195] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 170.198892][ T4195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.246491][ T4195] usb 4-1: Product: syz [ 170.253997][ T4195] usb 4-1: Manufacturer: syz [ 170.258821][ T4195] usb 4-1: SerialNumber: syz [ 170.276595][ T4195] usb 4-1: config 0 descriptor?? [ 170.918560][ T5909] udc-core: couldn't find an available UDC or it's busy [ 171.278918][ T4195] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 171.307903][ T5909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.323010][ T4195] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 171.338861][ T4195] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 171.662244][ T5884] udc-core: couldn't find an available UDC or it's busy [ 171.799253][ T4241] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 171.959711][ T5884] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 172.052515][ T5884] udc-core: couldn't find an available UDC or it's busy [ 172.135748][ T5884] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 172.339412][ T4241] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 172.384054][ T4273] usb 4-1: USB disconnect, device number 12 [ 172.399283][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 172.422752][ T4273] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 172.510468][ T4241] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 172.512038][ T4273] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 172.530487][ T4241] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 172.550382][ T4241] usb 2-1: Manufacturer: syz [ 172.571276][ T4241] usb 2-1: SerialNumber: syz [ 172.595231][ T4273] quatech2 4-1:0.51: device disconnected [ 172.677323][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 172.873404][ T4241] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 172.898901][ T4241] usb 2-1: USB disconnect, device number 12 [ 173.362871][ T5925] netlink: 84 bytes leftover after parsing attributes in process `syz.2.493'. [ 174.646153][ T5931] loop1: detected capacity change from 0 to 128 [ 174.824021][ T5931] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.839386][ T5931] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.963207][ T4271] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 175.973289][ T4195] Bluetooth: hci4: command 0x0406 tx timeout [ 175.996860][ T4195] Bluetooth: hci3: command 0x0406 tx timeout [ 176.080169][ T4195] Bluetooth: hci2: command 0x0406 tx timeout [ 176.087262][ T4195] Bluetooth: hci0: command 0x0406 tx timeout [ 176.097607][ T4195] Bluetooth: hci1: command 0x0406 tx timeout [ 177.750082][ T5959] sched: RT throttling activated [ 177.799359][ T4271] usb 3-1: Using ep0 maxpacket: 8 [ 178.299295][ T4197] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 180.219450][ T4197] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 180.235567][ T5982] loop3: detected capacity change from 0 to 128 [ 180.319501][ T5984] bond2: option mode: unable to set because the bond device has slaves [ 180.345304][ T5984] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 180.373084][ T5982] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.385124][ T4197] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 180.402680][ T4197] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 180.418369][ T5982] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.524252][ T4197] usb 2-1: Manufacturer: syz [ 180.528880][ T4197] usb 2-1: SerialNumber: syz [ 180.549286][ T4271] usb 3-1: device descriptor read/all, error -71 [ 180.712660][ T5999] loop2: detected capacity change from 0 to 512 [ 180.747648][ T5999] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.809497][ T5999] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.841833][ T4197] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 180.883033][ T4197] usb 2-1: USB disconnect, device number 14 [ 181.069755][ T6009] device syzkaller0 entered promiscuous mode [ 182.037344][ T6021] bond1: option mode: unable to set because the bond device has slaves [ 182.155598][ T6021] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 182.509354][ T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 183.291039][ T6044] device syzkaller0 entered promiscuous mode [ 183.399233][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 184.219403][ T7] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 184.242753][ T7] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 184.358931][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.395527][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.409464][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.474087][ T7] usbtmc 3-1:16.0: bulk endpoints not found [ 184.935584][ T6059] loop1: detected capacity change from 0 to 512 [ 184.982179][ T6059] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 185.042680][ T6059] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.108750][ T6059] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0022] [ 185.219547][ T6059] System zones: 1-12 [ 186.075637][ T6059] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 186.141475][ T6070] bond1: option mode: unable to set because the bond device has slaves [ 186.153945][ T6070] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 186.163250][ T6059] EXT4-fs (loop1): 1 truncate cleaned up [ 186.172063][ T6059] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,dax=never,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 187.132825][ T6080] loop0: detected capacity change from 0 to 512 [ 187.192200][ T6080] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 187.201780][ T6080] EXT4-fs (loop0): Unrecognized mount option "hash" or missing value [ 187.311707][ T4273] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 187.382250][ T7] usb 3-1: USB disconnect, device number 14 [ 187.461890][ T6089] device syzkaller0 entered promiscuous mode [ 187.678349][ T6074] loop4: detected capacity change from 0 to 32768 [ 187.729373][ T4273] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 187.847398][ T6094] loop2: detected capacity change from 0 to 32768 [ 187.866639][ T4273] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 187.967485][ T4273] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.018751][ T6074] XFS (loop4): Mounting V5 Filesystem [ 188.027886][ T6094] XFS (loop2): Mounting V5 Filesystem [ 188.141647][ T6094] XFS (loop2): Ending clean mount [ 188.162674][ T6094] XFS (loop2): Quotacheck needed: Please wait. [ 188.229462][ T4273] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 188.263379][ T6074] XFS (loop4): Ending clean mount [ 188.289491][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 188.297735][ T4273] usb 2-1: Product: syz [ 188.302207][ T4273] usb 2-1: Manufacturer: syz [ 188.333961][ T4273] usb 2-1: SerialNumber: syz [ 188.360065][ T4273] usb 2-1: config 0 descriptor?? [ 188.400853][ T4273] usb 2-1: selecting invalid altsetting 0 [ 188.421774][ T6094] XFS (loop2): Quotacheck: Done. [ 188.440523][ T4191] XFS (loop4): Unmounting Filesystem [ 188.994607][ T4232] usb 2-1: USB disconnect, device number 15 [ 189.096086][ T4434] udevd[4434]: setting owner of /dev/dsp3 to uid=0, gid=29 failed: No such file or directory [ 189.121480][ T4189] XFS (loop2): Unmounting Filesystem [ 189.323888][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.915550][ T6130] usb usb8: usbfs: process 6130 (syz.1.551) did not claim interface 0 before use [ 191.027675][ T6137] bond2: option mode: unable to set because the bond device has slaves [ 191.232139][ T6137] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 191.469202][ T6144] device syzkaller0 entered promiscuous mode [ 193.619342][ T4273] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 193.810835][ T4197] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 193.825548][ T4197] Bluetooth: hci0: Injecting HCI hardware error event [ 193.871077][ T4205] Bluetooth: hci0: hardware error 0x00 [ 193.979339][ T4273] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 194.002354][ T4273] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 194.019381][ T4273] usb 1-1: config 0 interface 0 has no altsetting 0 [ 194.041061][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.047332][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.271173][ T4273] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.449181][ T6193] loop4: detected capacity change from 0 to 256 [ 194.483156][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.491652][ T4273] usb 1-1: Product: syz [ 194.521144][ T6192] loop3: detected capacity change from 0 to 128 [ 194.593282][ T4273] usb 1-1: Manufacturer: syz [ 194.597954][ T4273] usb 1-1: SerialNumber: syz [ 194.621100][ T4273] usb 1-1: config 0 descriptor?? [ 194.670643][ T4273] usb 1-1: selecting invalid altsetting 0 [ 194.709809][ T6193] exfat: Unknown parameter 'keep_last_dots' [ 194.739830][ T6192] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 194.751498][ T6192] hpfs: filesystem error: improperly stopped [ 194.757454][ T6192] hpfs: You really don't want any checks? You are crazy... [ 194.764767][ T6192] hpfs: hpfs_map_sector(): read error [ 194.770500][ T6192] hpfs: code page support is disabled [ 194.777789][ T6192] hpfs: hpfs_map_4sectors(): unaligned read [ 194.783715][ T6192] hpfs: hpfs_map_4sectors(): unaligned read [ 194.789618][ T6192] hpfs: filesystem error: unable to find root dir [ 195.794618][ T6201] device syzkaller0 entered promiscuous mode [ 195.801281][ T4273] usb 1-1: USB disconnect, device number 23 [ 196.899885][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.167798][ T6232] capability: warning: `syz.2.579' uses deprecated v2 capabilities in a way that may be insecure [ 198.679310][ T4232] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 198.760140][ T4241] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 199.069405][ T6249] device syzkaller0 entered promiscuous mode [ 199.181005][ T4232] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 199.194763][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.209330][ T4241] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 199.229337][ T4241] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 199.240713][ T4241] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.284851][ T4232] usb 3-1: config 0 has no interfaces? [ 199.291341][ T4232] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 199.305177][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.333050][ T4232] usb 3-1: config 0 descriptor?? [ 199.399399][ T4241] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 199.451100][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 199.469071][ T4241] usb 1-1: Product: syz [ 199.479876][ T4241] usb 1-1: Manufacturer: syz [ 199.484557][ T4241] usb 1-1: SerialNumber: syz [ 199.519135][ T4241] usb 1-1: config 0 descriptor?? [ 199.583359][ T4241] usb 1-1: selecting invalid altsetting 0 [ 200.952826][ T6271] netlink: 84 bytes leftover after parsing attributes in process `syz.3.589'. [ 201.838445][ T4197] usb 1-1: USB disconnect, device number 24 [ 203.128392][ T6290] device syzkaller0 entered promiscuous mode [ 204.270672][ T6310] loop3: detected capacity change from 0 to 128 [ 204.792041][ T6310] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 204.803892][ T6310] hpfs: filesystem error: improperly stopped [ 204.809938][ T6310] hpfs: You really don't want any checks? You are crazy... [ 204.818181][ T6310] hpfs: hpfs_map_sector(): read error [ 204.823680][ T6310] hpfs: code page support is disabled [ 204.836577][ T6310] hpfs: hpfs_map_4sectors(): unaligned read [ 204.842757][ T6310] hpfs: hpfs_map_4sectors(): unaligned read [ 204.848688][ T6310] hpfs: filesystem error: unable to find root dir [ 208.297082][ T6324] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 208.372842][ T4195] usb 3-1: USB disconnect, device number 15 [ 209.651417][ T6345] device syzkaller0 entered promiscuous mode [ 211.162059][ T6363] loop4: detected capacity change from 0 to 128 [ 211.752593][ T6363] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 211.764505][ T6363] hpfs: filesystem error: improperly stopped [ 211.770919][ T6363] hpfs: You really don't want any checks? You are crazy... [ 211.778945][ T6363] hpfs: hpfs_map_sector(): read error [ 211.784550][ T6363] hpfs: code page support is disabled [ 211.796222][ T6363] hpfs: hpfs_map_4sectors(): unaligned read [ 211.802539][ T6363] hpfs: hpfs_map_4sectors(): unaligned read [ 211.808514][ T6363] hpfs: filesystem error: unable to find root dir [ 216.172377][ T6420] loop4: detected capacity change from 0 to 256 [ 216.210230][ T6420] exfat: Unknown parameter 'keep_last_dots' [ 216.743081][ T6434] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 217.278739][ T6435] Unsupported ieee802154 address type: 0 [ 217.309252][ T4271] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 217.589340][ T4271] usb 1-1: Using ep0 maxpacket: 16 [ 217.826532][ T6451] netlink: 84 bytes leftover after parsing attributes in process `syz.3.638'. [ 218.060058][ T4271] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.149543][ T4271] usb 1-1: config 1 has an invalid interface number: 129 but max is 0 [ 218.409567][ T4271] usb 1-1: config 1 has no interface number 0 [ 218.415784][ T4271] usb 1-1: config 1 interface 129 altsetting 9 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 218.469357][ T4271] usb 1-1: config 1 interface 129 has no altsetting 0 [ 218.630928][ T4271] usb 1-1: New USB device found, idVendor=06e0, idProduct=f115, bcdDevice=f9.56 [ 218.657239][ T263] block nbd3: Attempted send on invalid socket [ 218.664290][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.676889][ T6463] FAT-fs (nbd3): unable to read boot sector [ 218.914851][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.011411][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 219.650120][ T4271] usb 1-1: Product: syz [ 219.824894][ T4271] usb 1-1: Manufacturer: syz [ 219.836257][ T4271] usb 1-1: SerialNumber: syz [ 220.156178][ T4271] usb 1-1: can't set config #1, error -71 [ 220.211655][ T4271] usb 1-1: USB disconnect, device number 25 [ 220.622918][ T6495] loop0: detected capacity change from 0 to 512 [ 220.725591][ T6495] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 220.790985][ T6495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0022] [ 220.809384][ T6495] System zones: 1-12 [ 220.852892][ T6500] Unsupported ieee802154 address type: 0 [ 220.894624][ T6495] EXT4-fs (loop0): 1 truncate cleaned up [ 220.923582][ T6495] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,dax=never,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 222.132882][ T6526] loop4: detected capacity change from 0 to 256 [ 222.159753][ T6526] exfat: Unknown parameter 'keep_last_dots' [ 222.173324][ T6524] loop2: detected capacity change from 0 to 256 [ 222.209796][ T6524] exfat: Unknown parameter 'keep_last_dots' [ 223.301519][ T4271] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 223.337340][ T6532] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 223.586747][ T6535] usb usb8: usbfs: process 6535 (syz.4.655) did not claim interface 0 before use [ 223.811419][ T4271] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 223.834979][ T4271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.974759][ T4271] usb 1-1: config 0 descriptor?? [ 224.139226][ T7] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 224.316238][ T6550] Unsupported ieee802154 address type: 0 [ 224.820701][ T6575] netlink: 84 bytes leftover after parsing attributes in process `syz.1.662'. [ 225.367497][ T7] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 225.488036][ T6584] bond2: option mode: unable to set because the bond device has slaves [ 225.489587][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.504452][ T7] usb 3-1: Product: syz [ 225.508620][ T7] usb 3-1: Manufacturer: syz [ 225.524804][ T7] usb 3-1: SerialNumber: syz [ 225.527742][ T6585] loop1: detected capacity change from 0 to 256 [ 225.539388][ T4271] usb 1-1: Cannot set autoneg [ 225.544377][ T4271] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -61 [ 225.573778][ T6584] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 225.619994][ T6585] exfat: Unknown parameter 'keep_last_dots' [ 225.632196][ T6591] loop3: detected capacity change from 0 to 256 [ 225.669815][ T6591] exfat: Unknown parameter 'keep_last_dots' [ 225.904441][ T6597] usb usb8: usbfs: process 6597 (syz.4.668) did not claim interface 0 before use [ 226.985617][ T13] usb 1-1: USB disconnect, device number 26 [ 226.991736][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 227.044711][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 227.098543][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 227.122030][ T7] lan78xx: probe of 3-1:1.0 failed with error -32 [ 228.513265][ T6648] netlink: 84 bytes leftover after parsing attributes in process `syz.1.678'. [ 229.580011][ T4271] usb 3-1: USB disconnect, device number 16 [ 229.701479][ T6651] loop1: detected capacity change from 0 to 256 [ 229.729274][ T13] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 229.740037][ T6651] exfat: Unknown parameter 'keep_last_dots' [ 229.740329][ T13] Bluetooth: hci4: Injecting HCI hardware error event [ 229.759294][ T4203] Bluetooth: hci4: hardware error 0x00 [ 229.783069][ T6654] loop2: detected capacity change from 0 to 256 [ 229.829704][ T6654] exfat: Unknown parameter 'keep_last_dots' [ 229.961085][ T4205] Bluetooth: hci4: unexpected event for opcode 0x203d [ 230.291876][ T6665] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 231.077520][ T6673] loop1: detected capacity change from 0 to 4096 [ 231.121747][ T6659] usb usb8: usbfs: process 6659 (syz.4.683) did not claim interface 0 before use [ 231.154007][ T6673] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 231.229270][ T4271] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 231.549238][ T4271] usb 3-1: Using ep0 maxpacket: 32 [ 232.334452][ T4271] usb 3-1: config 0 has an invalid descriptor of length 121, skipping remainder of the config [ 232.386145][ T6689] netlink: 84 bytes leftover after parsing attributes in process `syz.3.690'. [ 232.809279][ T4271] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 232.854751][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.231181][ T4271] usb 3-1: Product: syz [ 233.235369][ T4271] usb 3-1: Manufacturer: syz [ 233.240395][ T4271] usb 3-1: SerialNumber: syz [ 233.251033][ T4271] usb 3-1: config 0 descriptor?? [ 233.356142][ T4271] usb 3-1: bad CDC descriptors [ 233.361746][ T4271] usb 3-1: unsupported MDLM descriptors [ 234.135707][ T1324] usb 3-1: USB disconnect, device number 17 [ 234.172901][ T6705] loop0: detected capacity change from 0 to 256 [ 234.179893][ T6705] exfat: Unknown parameter 'keep_last_dots' [ 235.139058][ T4205] Bluetooth: hci4: unexpected event for opcode 0x203d [ 235.943070][ T25] audit: type=1326 audit(1778597442.552:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.703" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9b442dd9 code=0x7ffc0000 [ 236.383863][ T6730] usb usb8: usbfs: process 6730 (syz.4.698) did not claim interface 0 before use [ 237.604113][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.706'. [ 237.760246][ T25] audit: type=1326 audit(1778597442.552:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.703" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9b442dd9 code=0x7ffc0000 [ 239.048613][ T25] audit: type=1326 audit(1778597442.552:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.703" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9f9b442dd9 code=0x7ffc0000 [ 240.979058][ T6771] netlink: 84 bytes leftover after parsing attributes in process `syz.1.711'. [ 241.715541][ T6777] loop1: detected capacity change from 0 to 256 [ 241.770124][ T6777] exfat: Unknown parameter 'keep_last_dots' [ 242.186196][ T6785] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 242.278000][ T25] audit: type=1326 audit(1778597448.892:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.4.716" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe658dd9 code=0x7ffc0000 [ 242.449108][ T25] audit: type=1326 audit(1778597448.892:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.4.716" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe658dd9 code=0x7ffc0000 [ 242.473107][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.482472][ T25] audit: type=1326 audit(1778597448.892:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.4.716" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5ebe658dd9 code=0x7ffc0000 [ 242.506470][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.036959][ T6802] loop1: detected capacity change from 0 to 1024 [ 244.263846][ T6809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.722'. [ 244.334632][ T6810] loop4: detected capacity change from 0 to 2048 [ 244.492593][ T4181] loop4: p1 p3 p4 [ 244.492593][ T4181] p1: [ 244.526917][ T4181] loop4: p1 size 67110656 extends beyond EOD, truncated [ 244.600107][ T4181] loop4: p3 size 134217728 extends beyond EOD, truncated [ 244.724180][ T4181] loop4: p4 size 4278190080 extends beyond EOD, truncated [ 245.190046][ T6821] netlink: 84 bytes leftover after parsing attributes in process `syz.0.724'. [ 245.810586][ T4181] loop4: p5 size 67110656 extends beyond EOD, truncated [ 246.002769][ T4181] loop4: p6 size 134217728 extends beyond EOD, truncated [ 246.188906][ T6810] loop_reread_partitions: partition scan of loop4 () failed (rc=-16) [ 246.377253][ T6841] loop0: detected capacity change from 0 to 256 [ 246.409866][ T6841] exfat: Unknown parameter 'keep_last_dots' [ 246.544803][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 246.576290][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 246.592820][ T6213] udevd[6213]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 246.607786][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 246.789945][ T6848] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 247.836406][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 248.814286][ T6880] loop1: detected capacity change from 0 to 128 [ 249.295063][ T6880] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.533722][ T6880] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 249.795366][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 252.378192][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.748'. [ 252.656172][ T6944] loop0: detected capacity change from 0 to 512 [ 252.972124][ T6944] EXT4-fs (loop0): can't read group descriptor 0 [ 253.539311][ T4273] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 253.549868][ T6951] loop3: detected capacity change from 0 to 256 [ 254.580200][ T6951] exfat: Unknown parameter 'keep_last_dots' [ 254.802414][ T4273] usb 5-1: Using ep0 maxpacket: 32 [ 254.880183][ T6960] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 255.409848][ T4273] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 255.418902][ T4273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.429615][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 255.481270][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.487548][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.499284][ T4273] usb 5-1: can't set config #64, error -71 [ 255.536300][ T4273] usb 5-1: USB disconnect, device number 20 [ 257.637540][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.763'. [ 259.148826][ T7011] loop1: detected capacity change from 0 to 256 [ 259.259826][ T7011] exfat: Unknown parameter 'keep_last_dots' [ 259.590807][ T7017] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 261.212343][ T7035] loop0: detected capacity change from 0 to 512 [ 261.269586][ T7035] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 261.349980][ T7035] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0022] [ 261.364881][ T7038] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 261.380870][ T7035] System zones: 1-12 [ 261.405409][ T7035] EXT4-fs (loop0): 1 truncate cleaned up [ 261.426907][ T7035] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,dax=never,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 261.479196][ T4271] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 262.181442][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.780'. [ 262.459724][ T7059] loop0: detected capacity change from 0 to 256 [ 262.543081][ T7059] exfat: Unknown parameter 'keep_last_dots' [ 262.600061][ T4271] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 262.628564][ T4271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.644635][ T4271] usb 4-1: Product: syz [ 262.665803][ T4271] usb 4-1: Manufacturer: syz [ 262.818946][ T4271] usb 4-1: SerialNumber: syz [ 262.883894][ T7058] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 263.849597][ T4271] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 264.889253][ T4271] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 264.963684][ T4271] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 264.973185][ T4271] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 264.982061][ T4271] lan78xx: probe of 4-1:1.0 failed with error -71 [ 264.992227][ T4271] usb 4-1: USB disconnect, device number 13 [ 265.110579][ T7095] loop2: detected capacity change from 0 to 512 [ 265.137563][ T7095] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 265.152630][ T7095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0022] [ 265.165683][ T7095] System zones: 1-12 [ 265.187640][ T7095] EXT4-fs (loop2): 1 truncate cleaned up [ 265.195387][ T7095] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,dax=never,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 266.671828][ T7111] input: syz1 as /devices/virtual/input/input7 [ 280.792968][ T7129] chnl_net:caif_netlink_parms(): no params data found [ 280.881608][ T7132] chnl_net:caif_netlink_parms(): no params data found [ 281.014221][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.036222][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.046769][ T7129] device bridge_slave_0 entered promiscuous mode [ 281.062021][ T7129] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.069086][ T7129] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.077061][ T7129] device bridge_slave_1 entered promiscuous mode [ 281.149220][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.156269][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.173213][ T7132] device bridge_slave_0 entered promiscuous mode [ 281.207098][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.214590][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.229972][ T7132] device bridge_slave_1 entered promiscuous mode [ 281.238732][ T7129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.273001][ T7129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.336216][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.385578][ T7129] team0: Port device team_slave_0 added [ 281.411425][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.431318][ T7129] team0: Port device team_slave_1 added [ 281.455458][ T7144] chnl_net:caif_netlink_parms(): no params data found [ 281.506631][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.533220][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.599150][ T7129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.638269][ T7132] team0: Port device team_slave_0 added [ 281.647186][ T7132] team0: Port device team_slave_1 added [ 281.669079][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.677350][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.703685][ T7129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.750063][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.756995][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.783231][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.831885][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.838823][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.874038][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.599390][ T4272] Bluetooth: hci5: command 0x0409 tx timeout [ 282.679271][ T4272] Bluetooth: hci6: command 0x0409 tx timeout [ 283.079372][ T4272] Bluetooth: hci7: command 0x0409 tx timeout [ 283.719268][ T4272] Bluetooth: hci8: command 0x0409 tx timeout [ 284.681924][ T4272] Bluetooth: hci5: command 0x041b tx timeout [ 284.759265][ T4272] Bluetooth: hci6: command 0x041b tx timeout [ 286.759276][ T4272] Bluetooth: hci5: command 0x040f tx timeout [ 286.839301][ T4272] Bluetooth: hci6: command 0x040f tx timeout [ 287.079351][ T4272] Bluetooth: hci9: command 0x0409 tx timeout [ 288.839273][ T4272] Bluetooth: hci5: command 0x0419 tx timeout [ 288.919277][ T4272] Bluetooth: hci6: command 0x0419 tx timeout [ 316.930917][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.937249][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.599283][ T4271] Bluetooth: hci10: command 0x0409 tx timeout [ 343.639276][ T4272] Bluetooth: hci11: command 0x0409 tx timeout [ 347.639470][ T4271] Bluetooth: hci14: command 0x0409 tx timeout [ 378.371074][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.377992][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.799244][ T4271] Bluetooth: hci15: command 0x0409 tx timeout [ 403.962336][ T1324] Bluetooth: hci17: command 0x0409 tx timeout [ 403.968422][ T1324] Bluetooth: hci16: command 0x0409 tx timeout [ 404.919169][ T1324] Bluetooth: hci18: command 0x0409 tx timeout [ 406.039127][ T1324] Bluetooth: hci5: command 0x0406 tx timeout [ 406.057484][ T1324] Bluetooth: hci6: command 0x0406 tx timeout [ 408.199212][ T1324] Bluetooth: hci19: command 0x0409 tx timeout [ 415.479323][ T27] INFO: task kworker/u4:11:4867 blocked for more than 143 seconds. [ 415.487242][ T27] Not tainted syzkaller #0 [ 415.505819][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.518345][ T27] task:kworker/u4:11 state:D stack:21880 pid: 4867 ppid: 2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 415.538749][ T27] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 415.559248][ T27] Call Trace: [ 415.562535][ T27] [ 415.565463][ T27] __schedule+0x11ef/0x43c0 [ 415.598534][ T27] ? mark_lock+0x94/0x320 [ 415.605089][ T27] ? __lock_acquire+0x13bc/0x7d10 [ 415.623503][ T27] ? release_firmware_map_entry+0x190/0x190 [ 415.629713][ T27] ? verify_lock_unused+0x140/0x140 [ 415.634914][ T27] ? mark_lock+0x94/0x320 [ 415.639539][ T27] ? kthread_data+0x4b/0xc0 [ 415.644046][ T27] schedule+0x11b/0x1e0 [ 415.648740][ T27] schedule_timeout+0xbd/0x2d0 [ 415.653863][ T27] ? console_conditional_schedule+0x40/0x40 [ 415.659949][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 415.665935][ T27] ? lock_chain_count+0x20/0x20 [ 415.671071][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 415.676270][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 415.681731][ T27] do_wait_for_common+0x2a2/0x450 [ 415.686766][ T27] ? console_conditional_schedule+0x40/0x40 [ 415.693007][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 415.699781][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 415.704807][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 415.712211][ T27] wait_for_completion+0x48/0x60 [ 415.717155][ T27] __synchronize_srcu+0x2bb/0x350 [ 415.722438][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 415.728164][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 415.733984][ T27] ? __rwlock_init+0x140/0x140 [ 415.738751][ T27] ? synchronize_srcu+0x192/0x1b0 [ 415.744016][ T27] fsnotify_mark_destroy_workfn+0x106/0x2f0 [ 415.750709][ T27] ? fsnotify_connector_destroy_workfn+0xa0/0xa0 [ 415.757042][ T27] ? __schedule+0x11f7/0x43c0 [ 415.761967][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 415.767170][ T27] process_one_work+0x85f/0x1010 [ 415.772387][ T27] ? worker_detach_from_pool+0x240/0x240 [ 415.778022][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 415.783596][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 415.788620][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 415.794445][ T27] ? wq_worker_running+0x97/0x170 [ 415.804455][ T27] worker_thread+0xaa6/0x1290 [ 415.809365][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 415.814564][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 415.822472][ T27] kthread+0x436/0x520 [ 415.826542][ T27] ? rcu_lock_release+0x20/0x20 [ 415.832131][ T27] ? kthread_blkcg+0xd0/0xd0 [ 415.836726][ T27] ret_from_fork+0x1f/0x30 [ 415.845408][ T27] [ 415.848482][ T27] INFO: task kworker/u4:15:5161 blocked for more than 143 seconds. [ 415.858009][ T27] Not tainted syzkaller #0 [ 415.863226][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.872661][ T27] task:kworker/u4:15 state:D stack:22480 pid: 5161 ppid: 2 flags:0x00004000 [ 415.882179][ T27] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 415.889847][ T27] Call Trace: [ 415.893123][ T27] [ 415.896051][ T27] __schedule+0x11ef/0x43c0 [ 415.900901][ T27] ? release_firmware_map_entry+0x190/0x190 [ 415.906795][ T27] ? verify_lock_unused+0x140/0x140 [ 415.912248][ T27] ? kthread_data+0x4b/0xc0 [ 415.916756][ T27] schedule+0x11b/0x1e0 [ 415.921183][ T27] schedule_timeout+0xbd/0x2d0 [ 415.925944][ T27] ? console_conditional_schedule+0x40/0x40 [ 415.933690][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 415.939879][ T27] ? lock_chain_count+0x20/0x20 [ 415.944735][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 415.950169][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 415.955921][ T27] do_wait_for_common+0x2a2/0x450 [ 415.961657][ T27] ? console_conditional_schedule+0x40/0x40 [ 415.967557][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 415.974411][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 415.979646][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 415.985197][ T27] wait_for_completion+0x48/0x60 [ 415.990403][ T27] __synchronize_srcu+0x2bb/0x350 [ 415.995443][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 416.001434][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 416.006991][ T27] ? __rwlock_init+0x140/0x140 [ 416.011999][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 416.017545][ T27] ? synchronize_srcu+0x192/0x1b0 [ 416.022868][ T27] fsnotify_connector_destroy_workfn+0x40/0xa0 [ 416.029025][ T27] process_one_work+0x85f/0x1010 [ 416.034275][ T27] ? worker_detach_from_pool+0x240/0x240 [ 416.041844][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 416.047145][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 416.052869][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 416.058954][ T27] ? wq_worker_running+0x97/0x170 [ 416.064273][ T27] worker_thread+0xaa6/0x1290 [ 416.068963][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 416.074409][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 416.080529][ T27] kthread+0x436/0x520 [ 416.084596][ T27] ? rcu_lock_release+0x20/0x20 [ 416.089684][ T27] ? kthread_blkcg+0xd0/0xd0 [ 416.094273][ T27] ret_from_fork+0x1f/0x30 [ 416.098700][ T27] [ 416.102098][ T27] INFO: task syz.4.792:7091 blocked for more than 143 seconds. [ 416.109838][ T27] Not tainted syzkaller #0 [ 416.114795][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.124250][ T27] task:syz.4.792 state:D stack:26128 pid: 7091 ppid: 4191 flags:0x00004004 [ 416.133954][ T27] Call Trace: [ 416.137327][ T27] [ 416.140760][ T27] __schedule+0x11ef/0x43c0 [ 416.145296][ T27] ? release_firmware_map_entry+0x190/0x190 [ 416.152994][ T27] ? verify_lock_unused+0x140/0x140 [ 416.158730][ T27] schedule+0x11b/0x1e0 [ 416.163177][ T27] schedule_timeout+0xbd/0x2d0 [ 416.167942][ T27] ? console_conditional_schedule+0x40/0x40 [ 416.174104][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 416.180307][ T27] ? lock_chain_count+0x20/0x20 [ 416.185168][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 416.190619][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 416.195824][ T27] do_wait_for_common+0x2a2/0x450 [ 416.201215][ T27] ? console_conditional_schedule+0x40/0x40 [ 416.207107][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 416.213946][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 416.218970][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 416.224801][ T27] wait_for_completion+0x48/0x60 [ 416.229930][ T27] __synchronize_srcu+0x2bb/0x350 [ 416.234965][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 416.240947][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 416.246579][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 416.252381][ T27] ? __rwlock_init+0x140/0x140 [ 416.257151][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 416.264929][ T27] install_new_memslots+0x2b5/0x430 [ 416.270714][ T27] kvm_set_memslot+0x1292/0x1a10 [ 416.275674][ T27] ? __kvm_memslots+0x1a0/0x1a0 [ 416.280892][ T27] __kvm_set_memory_region+0xb3d/0xdd0 [ 416.286375][ T27] ? kvm_put_kvm_no_destroy+0x80/0x80 [ 416.292044][ T27] ? __might_fault+0xb7/0x110 [ 416.296727][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 416.302225][ T27] ? __might_fault+0xb3/0x110 [ 416.306907][ T27] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 416.313052][ T27] kvm_vm_ioctl+0x8fe/0xb30 [ 416.317566][ T27] ? kvm_device_release+0x1f0/0x1f0 [ 416.323062][ T27] ? tomoyo_path_number_perm+0x5b4/0x660 [ 416.328705][ T27] ? verify_lock_unused+0x140/0x140 [ 416.334237][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 416.339411][ T27] ? security_file_ioctl+0x7c/0xa0 [ 416.344523][ T27] ? kvm_device_release+0x1f0/0x1f0 [ 416.350128][ T27] __se_sys_ioctl+0xfa/0x170 [ 416.354722][ T27] do_syscall_64+0x4c/0xa0 [ 416.359418][ T27] ? clear_bhb_loop+0x30/0x80 [ 416.364634][ T27] ? clear_bhb_loop+0x30/0x80 [ 416.371106][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 416.377015][ T27] RIP: 0033:0x7f5ebe658dd9 [ 416.381721][ T27] RSP: 002b:00007f5ebc8b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.390330][ T27] RAX: ffffffffffffffda RBX: 00007f5ebe8d1fa0 RCX: 00007f5ebe658dd9 [ 416.398298][ T27] RDX: 0000200000000840 RSI: 000000004020ae46 RDI: 0000000000000004 [ 416.406544][ T27] RBP: 00007f5ebe6eed69 R08: 0000000000000000 R09: 0000000000000000 [ 416.414683][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.422873][ T27] R13: 00007f5ebe8d2038 R14: 00007f5ebe8d1fa0 R15: 00007ffe0ad80518 [ 416.431032][ T27] [ 416.434091][ T27] INFO: task syz.4.792:7097 blocked for more than 144 seconds. [ 416.441897][ T27] Not tainted syzkaller #0 [ 416.446825][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.455742][ T27] task:syz.4.792 state:D stack:27824 pid: 7097 ppid: 4191 flags:0x00004004 [ 416.466052][ T27] Call Trace: [ 416.469548][ T27] [ 416.472484][ T27] __schedule+0x11ef/0x43c0 [ 416.477005][ T27] ? rcu_lock_acquire+0x30/0x30 [ 416.483807][ T27] ? __mutex_lock_common+0xcf7/0x2400 [ 416.489398][ T27] ? release_firmware_map_entry+0x190/0x190 [ 416.495292][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 416.500611][ T27] ? __mutex_trylock_common+0x86/0x260 [ 416.506076][ T27] ? rcu_lock_release+0x20/0x20 [ 416.511187][ T27] schedule+0x11b/0x1e0 [ 416.515347][ T27] schedule_preempt_disabled+0xf/0x20 [ 416.521083][ T27] __mutex_lock_common+0xcfc/0x2400 [ 416.526298][ T27] ? kvm_vm_ioctl_set_memory_region+0x64/0xa0 [ 416.538796][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 416.546349][ T27] ? do_vfs_ioctl+0x1d16/0x1ef0 [ 416.557621][ T27] ? __might_fault+0xb3/0x110 [ 416.564596][ T27] mutex_lock_nested+0x17/0x20 [ 416.576254][ T27] kvm_vm_ioctl_set_memory_region+0x64/0xa0 [ 416.584546][ T27] kvm_vm_ioctl+0x8fe/0xb30 [ 416.601574][ T27] ? kvm_device_release+0x1f0/0x1f0 [ 416.606790][ T27] ? tomoyo_path_number_perm+0x5b4/0x660 [ 416.618785][ T27] ? verify_lock_unused+0x140/0x140 [ 416.624296][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 416.629486][ T27] ? security_file_ioctl+0x7c/0xa0 [ 416.634601][ T27] ? kvm_device_release+0x1f0/0x1f0 [ 416.640076][ T27] __se_sys_ioctl+0xfa/0x170 [ 416.644672][ T27] do_syscall_64+0x4c/0xa0 [ 416.649335][ T27] ? clear_bhb_loop+0x30/0x80 [ 416.654014][ T27] ? clear_bhb_loop+0x30/0x80 [ 416.658689][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 416.664923][ T27] RIP: 0033:0x7f5ebe658a6b [ 416.670073][ T27] RSP: 002b:00007f5ebc88f450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.678492][ T27] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f5ebe658a6b [ 416.686778][ T27] RDX: 00007f5ebc88fbd0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 416.695021][ T27] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000008 [ 416.704756][ T27] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000fec00000 [ 416.712974][ T27] R13: 00007f5ebc88fbd0 R14: 0000200000001000 R15: 0000000000000001 [ 416.721177][ T27] [ 416.724244][ T27] INFO: task syz.3.795:7107 blocked for more than 144 seconds. [ 416.732070][ T27] Not tainted syzkaller #0 [ 416.736997][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.745928][ T27] task:syz.3.795 state:D stack:27536 pid: 7107 ppid: 4190 flags:0x00004006 [ 416.755579][ T27] Call Trace: [ 416.758856][ T27] [ 416.762103][ T27] __schedule+0x11ef/0x43c0 [ 416.766632][ T27] ? rcu_lock_acquire+0x30/0x30 [ 416.772695][ T27] ? __mutex_lock_common+0xcf7/0x2400 [ 416.778080][ T27] ? release_firmware_map_entry+0x190/0x190 [ 416.784251][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 416.793774][ T27] ? __mutex_trylock_common+0x86/0x260 [ 416.803602][ T27] ? rcu_lock_release+0x20/0x20 [ 416.808461][ T27] schedule+0x11b/0x1e0 [ 416.819181][ T27] schedule_preempt_disabled+0xf/0x20 [ 416.824670][ T27] __mutex_lock_common+0xcfc/0x2400 [ 416.830059][ T27] ? synchronize_rcu_expedited+0x3a5/0x750 [ 416.835874][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 416.841186][ T27] ? __rwlock_init+0x140/0x140 [ 416.846059][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 416.851329][ T27] mutex_lock_nested+0x17/0x20 [ 416.856184][ T27] synchronize_rcu_expedited+0x3a5/0x750 [ 416.861869][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 416.866919][ T27] ? packet_release+0x971/0xc30 [ 416.871868][ T27] synchronize_rcu+0x119/0x1e0 [ 416.877226][ T27] ? kvfree_call_rcu+0x7d0/0x7d0 [ 416.882208][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 416.887955][ T27] ? __might_sleep+0xf0/0xf0 [ 416.892696][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 416.898073][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 416.903477][ T27] ? _local_bh_enable+0xa0/0xa0 [ 416.908443][ T27] packet_release+0x976/0xc30 [ 416.913307][ T27] sock_close+0xd5/0x240 [ 416.917558][ T27] ? sock_mmap+0x90/0x90 [ 416.923731][ T27] __fput+0x234/0x930 [ 416.927733][ T27] task_work_run+0x125/0x1a0 [ 416.932420][ T27] do_exit+0x626/0x20c0 [ 416.936713][ T27] ? put_task_struct+0x80/0x80 [ 416.941523][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 416.947584][ T27] ? lock_chain_count+0x20/0x20 [ 416.952529][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 416.957662][ T27] do_group_exit+0x12e/0x300 [ 416.962300][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 416.967582][ T27] get_signal+0x6ca/0x12c0 [ 416.972099][ T27] arch_do_signal_or_restart+0xe7/0x12c0 [ 416.978629][ T27] ? get_sigframe_size+0x10/0x10 [ 416.983653][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 416.989305][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 416.994595][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 417.000890][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 417.006360][ T27] do_syscall_64+0x58/0xa0 [ 417.011044][ T27] ? clear_bhb_loop+0x30/0x80 [ 417.015723][ T27] ? clear_bhb_loop+0x30/0x80 [ 417.020661][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.026554][ T27] RIP: 0033:0x7f72b1800a6b [ 417.032875][ T27] RSP: 002b:00007f72afa57f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.041913][ T27] RAX: fffffffffffffffc RBX: 0000000000000013 RCX: 00007f72b1800a6b [ 417.050116][ T27] RDX: 00007f72afa58fd0 RSI: 0000000080085502 RDI: 0000000000000013 [ 417.058088][ T27] RBP: 00007f72afa58fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 417.066315][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 417.074495][ T27] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f72b18b51da [ 417.083200][ T27] [ 417.086273][ T27] INFO: task syz.2.796:7111 blocked for more than 144 seconds. [ 417.094557][ T27] Not tainted syzkaller #0 [ 417.099715][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.108373][ T27] task:syz.2.796 state:D stack:26360 pid: 7111 ppid: 4189 flags:0x00004006 [ 417.117898][ T27] Call Trace: [ 417.121360][ T27] [ 417.124293][ T27] __schedule+0x11ef/0x43c0 [ 417.128817][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 417.144629][ T27] ? release_firmware_map_entry+0x190/0x190 [ 417.154789][ T27] ? queue_work_on+0x196/0x1f0 [ 417.166259][ T27] ? __might_sleep+0xf0/0xf0 [ 417.171188][ T27] ? wq_worker_last_func+0x40/0x40 [ 417.176313][ T27] schedule+0x11b/0x1e0 [ 417.180827][ T27] synchronize_rcu_expedited+0x5c1/0x750 [ 417.187022][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 417.192325][ T27] ? rcu_exp_sel_wait_wake+0x1b30/0x1b30 [ 417.197974][ T27] ? lock_chain_count+0x20/0x20 [ 417.203106][ T27] ? input_unregister_handle+0x1b0/0x1c0 [ 417.208750][ T27] ? init_wait_entry+0xd0/0xd0 [ 417.213796][ T27] synchronize_rcu+0x119/0x1e0 [ 417.218563][ T27] ? kvfree_call_rcu+0x7d0/0x7d0 [ 417.223828][ T27] ? mutex_unlock+0x10/0x10 [ 417.228343][ T27] ? ida_free+0x2c9/0x320 [ 417.232958][ T27] ? ida_alloc_range+0x860/0x860 [ 417.237905][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 417.243370][ T27] ? input_unregister_handle+0x1b0/0x1c0 [ 417.249009][ T27] evdev_disconnect+0x7c/0xb0 [ 417.255608][ T27] __input_unregister_device+0x18a/0x320 [ 417.261849][ T27] input_unregister_device+0x97/0xf0 [ 417.267149][ T27] uinput_destroy_device+0x710/0x930 [ 417.272684][ T27] ? uinput_open+0x170/0x170 [ 417.277275][ T27] uinput_release+0x3a/0x50 [ 417.282051][ T27] __fput+0x234/0x930 [ 417.286618][ T27] task_work_run+0x125/0x1a0 [ 417.291531][ T27] get_signal+0x1222/0x12c0 [ 417.296041][ T27] ? kasan_save_stack+0x4b/0x60 [ 417.301196][ T27] ? kasan_save_stack+0x35/0x60 [ 417.306051][ T27] ? kasan_record_aux_stack+0xb8/0x100 [ 417.311773][ T27] ? task_work_add+0x2f/0x1d0 [ 417.316449][ T27] ? fput_many+0xde/0x1a0 [ 417.321067][ T27] ? __se_sys_ioctl+0x157/0x170 [ 417.325919][ T27] ? do_syscall_64+0x4c/0xa0 [ 417.330764][ T27] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.336837][ T27] arch_do_signal_or_restart+0xe7/0x12c0 [ 417.342745][ T27] ? get_sigframe_size+0x10/0x10 [ 417.347696][ T27] ? kick_process+0xd4/0x140 [ 417.352526][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 417.357987][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 417.365101][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 417.370838][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 417.376299][ T27] do_syscall_64+0x58/0xa0 [ 417.380980][ T27] ? clear_bhb_loop+0x30/0x80 [ 417.385658][ T27] ? clear_bhb_loop+0x30/0x80 [ 417.391144][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.397054][ T27] RIP: 0033:0x7f9f9b442dd9 [ 417.401789][ T27] RSP: 002b:00007f9f9967b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.410428][ T27] RAX: 0000000000000000 RBX: 00007f9f9b6bc090 RCX: 00007f9f9b442dd9 [ 417.418402][ T27] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 417.426645][ T27] RBP: 00007f9f9b4d8d69 R08: 0000000000000000 R09: 0000000000000000 [ 417.434828][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.442989][ T27] R13: 00007f9f9b6bc128 R14: 00007f9f9b6bc090 R15: 00007ffcb2df1258 [ 417.451215][ T27] [ 417.454234][ T27] INFO: task syz.0.800:7123 blocked for more than 145 seconds. [ 417.467046][ T27] Not tainted syzkaller #0 [ 417.473839][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.483211][ T27] task:syz.0.800 state:D stack:27600 pid: 7123 ppid: 4187 flags:0x00004004 [ 417.493622][ T27] Call Trace: [ 417.496903][ T27] [ 417.500090][ T27] __schedule+0x11ef/0x43c0 [ 417.504599][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 417.518924][ T27] ? __rwlock_init+0x140/0x140 [ 417.523937][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 417.530165][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 417.535366][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 417.541531][ T27] ? release_firmware_map_entry+0x190/0x190 [ 417.547430][ T27] ? __might_sleep+0xf0/0xf0 [ 417.552302][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 417.557335][ T27] schedule+0x11b/0x1e0 [ 417.572275][ T27] synchronize_rcu_expedited+0x680/0x750 [ 417.577919][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 417.593311][ T27] ? init_wait_entry+0xd0/0xd0 [ 417.598103][ T27] ? verify_lock_unused+0x140/0x140 [ 417.608699][ T27] synchronize_rcu+0x119/0x1e0 [ 417.616724][ T27] ? kvfree_call_rcu+0x7d0/0x7d0 [ 417.621951][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 417.627243][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 417.633447][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 417.638648][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 417.644864][ T27] ? _raw_spin_unlock+0x40/0x40 [ 417.649918][ T27] ? skb_queue_purge+0x62/0x290 [ 417.654766][ T27] ? clear_nonspinnable+0x60/0x60 [ 417.660054][ T27] pfkey_release+0x24f/0x310 [ 417.664644][ T27] sock_close+0xd5/0x240 [ 417.668882][ T27] ? sock_mmap+0x90/0x90 [ 417.673462][ T27] __fput+0x234/0x930 [ 417.677484][ T27] task_work_run+0x125/0x1a0 [ 417.682331][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 417.687703][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 417.694087][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 417.701389][ T27] do_syscall_64+0x58/0xa0 [ 417.705812][ T27] ? clear_bhb_loop+0x30/0x80 [ 417.710751][ T27] ? clear_bhb_loop+0x30/0x80 [ 417.715430][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.721594][ T27] RIP: 0033:0x7f1ead6dcdd9 [ 417.726007][ T27] RSP: 002b:00007ffc7df6c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 417.734758][ T27] RAX: 0000000000000000 RBX: 00007f1ead957da0 RCX: 00007f1ead6dcdd9 [ 417.742909][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 417.751093][ T27] RBP: 00007f1ead957da0 R08: 0000000000000006 R09: 0000000000000000 [ 417.759253][ T27] R10: 00007f1ead957cb0 R11: 0000000000000246 R12: 0000000000041f2d [ 417.767222][ T27] R13: 00007f1ead955fac R14: 0000000000041c2d R15: 00007ffc7df6c1f0 [ 417.775491][ T27] [ 417.778546][ T27] INFO: task syz.0.800:7124 blocked for more than 145 seconds. [ 417.786377][ T27] Not tainted syzkaller #0 [ 417.791507][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.800860][ T27] task:syz.0.800 state:D stack:26576 pid: 7124 ppid: 4187 flags:0x00004004 [ 417.811900][ T27] Call Trace: [ 417.815182][ T27] [ 417.818110][ T27] __schedule+0x11ef/0x43c0 [ 417.823352][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 417.829617][ T27] ? __rwlock_init+0x140/0x140 [ 417.834384][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 417.840527][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 417.845729][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 417.851909][ T27] ? release_firmware_map_entry+0x190/0x190 [ 417.857803][ T27] ? __might_sleep+0xf0/0xf0 [ 417.862644][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 417.867678][ T27] schedule+0x11b/0x1e0 [ 417.872076][ T27] synchronize_rcu_expedited+0x680/0x750 [ 417.877709][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 417.882914][ T27] ? init_wait_entry+0xd0/0xd0 [ 417.887689][ T27] ? verify_lock_unused+0x140/0x140 [ 417.893134][ T27] ? kfree+0xef/0x2a0 [ 417.897118][ T27] ? stack_trace_save+0xa6/0xf0 [ 417.902735][ T27] ? stack_trace_snprint+0xf0/0xf0 [ 417.907850][ T27] ? __kernel_text_address+0x9a/0x100 [ 417.913474][ T27] ? unwind_get_return_address+0x49/0x80 [ 417.920804][ T27] ? stack_trace_save+0xf0/0xf0 [ 417.925671][ T27] synchronize_rcu+0x119/0x1e0 [ 417.930689][ T27] ? kvfree_call_rcu+0x7d0/0x7d0 [ 417.935631][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 417.941005][ T27] nf_tables_abort+0x54d4/0x6510 [ 417.945959][ T27] ? kasan_quarantine_put+0xd4/0x220 [ 417.951519][ T27] ? nf_tables_commit+0x7480/0x7480 [ 417.956722][ T27] ? kfree+0xef/0x2a0 [ 417.960998][ T27] nfnetlink_rcv+0x1d10/0x2460 [ 417.965799][ T27] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 417.971661][ T27] ? rcu_lock_release+0x5/0x20 [ 417.976427][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 417.981761][ T27] netlink_unicast+0x774/0x920 [ 417.986544][ T27] netlink_sendmsg+0x8ba/0xbe0 [ 417.991606][ T27] ? netlink_getsockopt+0x570/0x570 [ 417.996808][ T27] ? aa_sock_msg_perm+0x94/0x150 [ 418.005603][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 418.016162][ T27] ? security_socket_sendmsg+0x7c/0xa0 [ 418.024892][ T27] ? netlink_getsockopt+0x570/0x570 [ 418.037175][ T27] ____sys_sendmsg+0x5b7/0x8f0 [ 418.046028][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 418.063059][ T27] ? import_iovec+0x6f/0xa0 [ 418.067580][ T27] ___sys_sendmsg+0x236/0x2e0 [ 418.076784][ T27] ? __sys_sendmsg+0x2a0/0x2a0 [ 418.086009][ T27] ? percpu_counter_add_batch+0x13b/0x160 [ 418.096004][ T27] __se_sys_sendmsg+0x1af/0x290 [ 418.101150][ T27] ? __x64_sys_sendmsg+0x80/0x80 [ 418.106624][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 418.112942][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 418.118152][ T27] do_syscall_64+0x4c/0xa0 [ 418.122892][ T27] ? clear_bhb_loop+0x30/0x80 [ 418.127570][ T27] ? clear_bhb_loop+0x30/0x80 [ 418.132517][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.138413][ T27] RIP: 0033:0x7f1ead6dcdd9 [ 418.144604][ T27] RSP: 002b:00007f1eab936028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.153285][ T27] RAX: ffffffffffffffda RBX: 00007f1ead955fa0 RCX: 00007f1ead6dcdd9 [ 418.161444][ T27] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 418.169643][ T27] RBP: 00007f1ead772d69 R08: 0000000000000000 R09: 0000000000000000 [ 418.177613][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.185862][ T27] R13: 00007f1ead956038 R14: 00007f1ead955fa0 R15: 00007ffc7df6bf88 [ 418.194026][ T27] [ 418.197051][ T27] INFO: task dhcpcd:7126 blocked for more than 146 seconds. [ 418.204586][ T27] Not tainted syzkaller #0 [ 418.210398][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.219309][ T27] task:dhcpcd state:D stack:28368 pid: 7126 ppid: 3853 flags:0x00004002 [ 418.228517][ T27] Call Trace: [ 418.232040][ T27] [ 418.234970][ T27] __schedule+0x11ef/0x43c0 [ 418.239907][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 418.245894][ T27] ? __rwlock_init+0x140/0x140 [ 418.252593][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 418.258489][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 418.264421][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 418.273637][ T27] ? release_firmware_map_entry+0x190/0x190 [ 418.284993][ T27] ? __might_sleep+0xf0/0xf0 [ 418.293726][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 418.298761][ T27] schedule+0x11b/0x1e0 [ 418.312623][ T27] synchronize_rcu_expedited+0x680/0x750 [ 418.318280][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 418.327573][ T27] ? init_wait_entry+0xd0/0xd0 [ 418.336670][ T27] ? verify_lock_unused+0x140/0x140 [ 418.346367][ T27] ? verify_lock_unused+0x140/0x140 [ 418.355860][ T27] ? verify_lock_unused+0x140/0x140 [ 418.366999][ T27] ? verify_lock_unused+0x140/0x140 [ 418.372493][ T27] ? mark_lock+0x94/0x320 [ 418.376825][ T27] ? aa_label_sk_perm+0x3d0/0x530 [ 418.382176][ T27] synchronize_rcu+0x119/0x1e0 [ 418.386942][ T27] ? kvfree_call_rcu+0x7d0/0x7d0 [ 418.392170][ T27] ? __unregister_prot_hook+0x3f2/0x570 [ 418.397719][ T27] ? __might_sleep+0xf0/0xf0 [ 418.402648][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 418.407680][ T27] ? rcu_lock_release+0x5/0x20 [ 418.413293][ T27] __unregister_prot_hook+0x3f7/0x570 [ 418.418681][ T27] packet_do_bind+0x50a/0xda0 [ 418.423638][ T27] __sys_bind+0x2e9/0x3e0 [ 418.427973][ T27] ? __ia32_sys_socketpair+0xb0/0xb0 [ 418.433545][ T27] ? vtime_user_exit+0x2c8/0x3e0 [ 418.438487][ T27] __x64_sys_bind+0x76/0x80 [ 418.443289][ T27] do_syscall_64+0x4c/0xa0 [ 418.447702][ T27] ? clear_bhb_loop+0x30/0x80 [ 418.452651][ T27] ? clear_bhb_loop+0x30/0x80 [ 418.457329][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.463460][ T27] RIP: 0033:0x7fd5d3ba52d7 [ 418.467873][ T27] RSP: 002b:00007ffcada3c538 EFLAGS: 00000213 ORIG_RAX: 0000000000000031 [ 418.478210][ T27] RAX: ffffffffffffffda RBX: 000055c623c5dac0 RCX: 00007fd5d3ba52d7 [ 418.486803][ T27] RDX: 0000000000000014 RSI: 00007ffcada3c550 RDI: 0000000000000003 [ 418.494985][ T27] RBP: 000055c61819a4b0 R08: 00007fd5d3c74ac0 R09: 0000000000000000 [ 418.503142][ T27] R10: 0000000000000003 R11: 0000000000000213 R12: 0000000000000000 [ 418.511331][ T27] R13: 000055c623c57720 R14: 0000000000000000 R15: 000055c6181afac0 [ 418.520046][ T27] [ 418.523152][ T27] [ 418.523152][ T27] Showing all locks held in the system: [ 418.531213][ T27] 3 locks held by kworker/0:0/7: [ 418.536152][ T27] 1 lock held by khungtaskd/27: [ 418.541302][ T27] #0: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 418.550877][ T27] 4 locks held by kworker/u5:0/146: [ 418.556068][ T27] #0: ffff88802445a138 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 418.566794][ T27] #1: ffffc9000176fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 418.578433][ T27] #2: ffff888078e08078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 418.590160][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 418.600836][ T27] 1 lock held by dhcpcd/3852: [ 418.605506][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0xec/0xcf0 [ 418.614621][ T27] 2 locks held by getty/3951: [ 418.620293][ T27] #0: ffff88814d874098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 418.630198][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 418.640476][ T27] 4 locks held by kworker/u5:1/4192: [ 418.645753][ T27] #0: ffff88807e94c138 ((wq_completion)hci12){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 418.657261][ T27] #1: ffffc90002f3fd00 ((work_completion)(&hdev->scan_update)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 418.669302][ T27] #2: ffff888025d5cff0 (&hdev->req_lock){+.+.}-{3:3}, at: scan_update_work+0x1e/0xa0 [ 418.678882][ T27] #3: ffff888025d5c078 (&hdev->lock){+.+.}-{3:3}, at: update_scan+0x3b/0x70 [ 418.687898][ T27] 4 locks held by kworker/u5:2/4199: [ 418.693977][ T27] #0: ffff88807c471938 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 418.705692][ T27] #1: ffffc90002fdfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 418.717912][ T27] #2: ffff88807d12c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 418.728038][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 418.738709][ T27] 4 locks held by kworker/u5:3/4201: [ 418.744177][ T27] #0: ffff88805a4ce138 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 418.754930][ T27] #1: ffffc90002fffd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 418.766530][ T27] #2: ffff88801e724078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 418.776664][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 418.787300][ T27] 4 locks held by kworker/u5:4/4202: [ 418.792777][ T27] #0: ffff88801bcad138 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 418.803934][ T27] #1: ffffc9000300fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 418.816907][ T27] #2: ffff88807d128078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 418.827909][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 418.838583][ T27] 4 locks held by kworker/u5:5/4203: [ 418.844070][ T27] #0: ffff888024e88938 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 418.854725][ T27] #1: ffffc9000301fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 418.866332][ T27] #2: ffff88807df9c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 418.876479][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 418.887130][ T27] 4 locks held by kworker/u5:6/4204: [ 418.892616][ T27] #0: ffff88807de54138 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 418.903189][ T27] #1: ffffc9000303fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 418.915348][ T27] #2: ffff88801abc4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 418.927302][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 418.937992][ T27] 4 locks held by kworker/u5:7/4205: [ 418.943457][ T27] #0: ffff88807e94d938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 418.954175][ T27] #1: ffffc9000304fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 418.965792][ T27] #2: ffff888025d5c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 418.975931][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 418.986564][ T27] 3 locks held by kworker/1:7/4271: [ 418.991977][ T27] #0: ffff88802aedb538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 419.003179][ T27] #1: ffffc9000426fd00 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 419.013677][ T27] #2: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 419.023843][ T27] 1 lock held by kworker/u4:7/4820: [ 419.036396][ T27] #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa5/0x140 [ 419.046540][ T27] 2 locks held by kworker/u4:11/4867: [ 419.060474][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 419.077991][ T27] #1: ffffc9000361fd00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 419.088964][ T27] 3 locks held by kworker/u4:12/4904: [ 419.102810][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 419.118258][ T27] #1: ffffc900039a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 419.130530][ T27] #2: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 419.140784][ T27] 2 locks held by kworker/u4:15/5161: [ 419.146150][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 419.157464][ T27] #1: ffffc90003317d00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 419.168068][ T27] 3 locks held by syz.3.407/5635: [ 419.173335][ T27] #0: ffff888023c44ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 419.183325][ T27] #1: ffff888023c44078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x3f4/0x1030 [ 419.193082][ T27] #2: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220 [ 419.203371][ T27] 1 lock held by syz.4.792/7091: [ 419.208300][ T27] #0: ffffc900026d10a8 (&kvm->slots_lock){+.+.}-{3:3}, at: kvm_vm_ioctl_set_memory_region+0x64/0xa0 [ 419.227543][ T27] 1 lock held by syz.4.792/7097: [ 419.233571][ T27] #0: ffffc900026d10a8 (&kvm->slots_lock){+.+.}-{3:3}, at: kvm_vm_ioctl_set_memory_region+0x64/0xa0 [ 419.245310][ T27] 2 locks held by syz.3.795/7107: [ 419.251638][ T27] #0: ffff8880605e5c10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 419.262429][ T27] #1: ffffffff8c3235a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 419.273535][ T27] 2 locks held by syz.2.796/7111: [ 419.278563][ T27] #0: ffffffff8cf465e8 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x10e/0x320 [ 419.297154][ T27] #1: ffffffff8c3235a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 419.308260][ T27] 1 lock held by syz.0.800/7123: [ 419.320770][ T27] #0: ffff88806050a010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 419.331280][ T27] 1 lock held by syz.0.800/7124: [ 419.336770][ T27] #0: ffff88801ee6a8b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 419.347807][ T27] 1 lock held by dhcpcd/7126: [ 419.353229][ T27] #0: ffff88802ba2c120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 419.364171][ T27] 1 lock held by syz-executor/7129: [ 419.369565][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 419.378981][ T27] 1 lock held by syz-executor/7132: [ 419.384454][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 419.394065][ T27] 1 lock held by syz-executor/7144: [ 419.399507][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 419.408918][ T27] 1 lock held by dhcpcd/7149: [ 419.413881][ T27] #0: ffff88804a3c8120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 419.423744][ T27] 1 lock held by dhcpcd/7151: [ 419.428411][ T27] #0: ffff88805a5dc120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 419.439403][ T27] 1 lock held by dhcpcd/7153: [ 419.444080][ T27] #0: ffff88807af82120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 419.454021][ T27] 1 lock held by dhcpcd/7155: [ 419.458691][ T27] #0: ffff88807c776120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 419.478296][ T27] 2 locks held by syz-executor/7156: [ 419.484139][ T27] #0: ffffffff8d4314d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x32e/0x5b0 [ 419.493881][ T27] #1: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x234/0x6f0 [ 419.503601][ T27] 1 lock held by syz-executor/7162: [ 419.508794][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 419.518527][ T27] 1 lock held by syz-executor/7166: [ 419.532076][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 419.547377][ T27] 1 lock held by syz-executor/7172: [ 419.555821][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 419.565572][ T27] 1 lock held by syz-executor/7174: [ 419.570999][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 419.582234][ T27] 1 lock held by syz-executor/7177: [ 419.587428][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 419.597132][ T27] 4 locks held by kworker/u5:8/7178: [ 419.602581][ T27] #0: ffff888047ba2938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 419.613268][ T27] #1: ffffc9000368fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 419.624885][ T27] #2: ffff888023798078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 419.634992][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 419.646218][ T27] 4 locks held by kworker/u5:9/7180: [ 419.651736][ T27] #0: ffff88801fb32938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 419.662390][ T27] #1: ffffc900036afd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 419.673989][ T27] #2: ffff888051d5c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 419.684140][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 419.696428][ T27] 1 lock held by syz-executor/7182: [ 419.701818][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 419.711444][ T27] 4 locks held by kworker/u5:10/7184: [ 419.716804][ T27] #0: ffff8880460a1938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 419.727529][ T27] #1: ffffc900036bfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 419.747912][ T27] #2: ffff888025d58078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 419.758040][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 419.776945][ T27] 1 lock held by syz-executor/7190: [ 419.782340][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 419.800753][ T27] 4 locks held by kworker/u5:11/7192: [ 419.806126][ T27] #0: ffff888046523138 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 419.824865][ T27] #1: ffffc900036efd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 419.838597][ T27] #2: ffff8880789f4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 419.849855][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 419.860486][ T27] 1 lock held by syz-executor/7194: [ 419.865675][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 419.875308][ T27] 4 locks held by kworker/u5:12/7196: [ 419.880884][ T27] #0: ffff888073647138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 419.891567][ T27] #1: ffffc9000370fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 419.903181][ T27] #2: ffff888051d58078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 419.914842][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 419.925528][ T27] 1 lock held by syz-executor/7197: [ 419.934941][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 419.944615][ T27] 4 locks held by kworker/u5:13/7198: [ 419.954194][ T27] #0: ffff888046523938 ((wq_completion)hci18){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 419.964922][ T27] #1: ffffc900031ffd00 ((work_completion)(&hdev->scan_update)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 419.976925][ T27] #2: ffff8880789f4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: scan_update_work+0x1e/0xa0 [ 419.986775][ T27] #3: ffff8880789f4078 (&hdev->lock){+.+.}-{3:3}, at: update_scan+0x3b/0x70 [ 419.995780][ T27] 1 lock held by syz-executor/7201: [ 420.001157][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 420.010833][ T27] 4 locks held by kworker/u5:14/7202: [ 420.016195][ T27] #0: ffff88807dc40938 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 420.028590][ T27] #1: ffffc9000365fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 420.040729][ T27] #2: ffff888058cb0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0xba/0xa40 [ 420.051390][ T27] #3: ffffffff8d5838e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x5f5/0xa40 [ 420.062079][ T27] 1 lock held by syz-executor/7206: [ 420.067268][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 420.077065][ T27] [ 420.079614][ T27] ============================================= [ 420.079614][ T27] [ 420.088013][ T27] NMI backtrace for cpu 1 [ 420.092347][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 420.099534][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.109580][ T27] Call Trace: [ 420.112855][ T27] [ 420.115781][ T27] dump_stack_lvl+0x188/0x250 [ 420.120455][ T27] ? show_regs_print_info+0x20/0x20 [ 420.125649][ T27] ? load_image+0x400/0x400 [ 420.130146][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 420.135266][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 420.140211][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 420.146360][ T27] ? _printk+0xda/0x130 [ 420.150508][ T27] ? load_image+0x400/0x400 [ 420.155018][ T27] ? load_image+0x400/0x400 [ 420.159520][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 420.165584][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 420.171563][ T27] watchdog+0xe0f/0xe50 [ 420.175721][ T27] kthread+0x436/0x520 [ 420.179781][ T27] ? hungtask_pm_notify+0x40/0x40 [ 420.184806][ T27] ? kthread_blkcg+0xd0/0xd0 [ 420.189393][ T27] ret_from_fork+0x1f/0x30 [ 420.193818][ T27] [ 420.197446][ T27] Sending NMI from CPU 1 to CPUs 0: [ 420.202836][ C0] NMI backtrace for cpu 0 [ 420.202845][ C0] CPU: 0 PID: 4865 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 420.202862][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.202871][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 420.202890][ C0] RIP: 0010:unwind_next_frame+0x142/0x1d90 [ 420.202910][ C0] Code: 00 00 fc ff df 48 89 44 24 68 42 0f b6 04 28 84 c0 0f 85 3f 16 00 00 4c 89 74 24 70 45 0f b6 36 48 8b 44 24 20 42 80 3c 28 00 <4c> 8b 7c 24 18 74 08 4c 89 ff e8 8f 35 89 00 49 8b 2f 49 83 f6 01 [ 420.202923][ C0] RSP: 0018:ffffc900034af368 EFLAGS: 00000246 [ 420.202935][ C0] RAX: 1ffff92000695e8e RBX: ffffc900034af428 RCX: ffffffff962dbf00 [ 420.202947][ C0] RDX: dffffc0000000000 RSI: ffffffff89461c40 RDI: ffffffff81351d2c [ 420.202958][ C0] RBP: ffffc900034af470 R08: ffffc900034af4f0 R09: 0000000000000002 [ 420.202969][ C0] R10: dffffc0000000000 R11: fffff52000695e91 R12: ffffffff89461c40 [ 420.202980][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900034af478 [ 420.202992][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 420.203005][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.203016][ C0] CR2: 0000556fc2221f70 CR3: 000000007e1a5000 CR4: 00000000003526f0 [ 420.203030][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 420.203044][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 420.203054][ C0] Call Trace: [ 420.203058][ C0] [ 420.203068][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x370/0x2ab0 [ 420.203088][ C0] ? stack_trace_save+0xf0/0xf0 [ 420.203102][ C0] arch_stack_walk+0x10c/0x140 [ 420.203121][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x370/0x2ab0 [ 420.203139][ C0] stack_trace_save+0xa6/0xf0 [ 420.203153][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 420.203166][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 420.203185][ C0] ? deref_stack_reg+0xd0/0x120 [ 420.203217][ C0] ? memset+0x1e/0x40 [ 420.203230][ C0] __kasan_kmalloc+0xb5/0xf0 [ 420.203245][ C0] ? __kasan_kmalloc+0xb5/0xf0 [ 420.203259][ C0] ? ieee802_11_parse_elems_crc+0xb3/0x10b0 [ 420.203274][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x370/0x2ab0 [ 420.203312][ C0] ieee802_11_parse_elems_crc+0xb3/0x10b0 [ 420.203328][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 420.203350][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 420.203371][ C0] ? ieee80211_queue_delayed_work+0x150/0x150 [ 420.203387][ C0] ? verify_lock_unused+0x140/0x140 [ 420.203406][ C0] ieee80211_ibss_rx_queued_mgmt+0x370/0x2ab0 [ 420.203426][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 420.203443][ C0] ? lock_chain_count+0x20/0x20 [ 420.203462][ C0] ? ieee80211_ibss_rx_no_sta+0x770/0x770 [ 420.203476][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 420.203491][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 420.203508][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 420.203522][ C0] ? _raw_spin_unlock+0x40/0x40 [ 420.203536][ C0] ? kcov_remote_start+0x6f/0x4a0 [ 420.203554][ C0] ? kcov_remote_start+0xea/0x4a0 [ 420.203569][ C0] ieee80211_iface_work+0x70e/0xc60 [ 420.203589][ C0] cfg80211_wiphy_work+0x221/0x260 [ 420.203607][ C0] process_one_work+0x85f/0x1010 [ 420.203629][ C0] ? worker_detach_from_pool+0x240/0x240 [ 420.203644][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 420.203660][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 420.203674][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 420.203689][ C0] ? wq_worker_running+0x97/0x170 [ 420.203704][ C0] worker_thread+0xaa6/0x1290 [ 420.203726][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 420.203745][ C0] kthread+0x436/0x520 [ 420.203758][ C0] ? rcu_lock_release+0x20/0x20 [ 420.203772][ C0] ? kthread_blkcg+0xd0/0xd0 [ 420.203786][ C0] ret_from_fork+0x1f/0x30 [ 420.203808][ C0] [ 420.211612][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 420.581649][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 420.588837][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.598882][ T27] Call Trace: [ 420.602150][ T27] [ 420.605073][ T27] dump_stack_lvl+0x188/0x250 [ 420.609747][ T27] ? show_regs_print_info+0x20/0x20 [ 420.614935][ T27] ? load_image+0x400/0x400 [ 420.619440][ T27] panic+0x2e5/0x810 [ 420.623332][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 420.628966][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 420.633465][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 420.639014][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 420.645164][ T27] watchdog+0xe4e/0xe50 [ 420.649329][ T27] kthread+0x436/0x520 [ 420.653388][ T27] ? hungtask_pm_notify+0x40/0x40 [ 420.658402][ T27] ? kthread_blkcg+0xd0/0xd0 [ 420.662983][ T27] ret_from_fork+0x1f/0x30 [ 420.667410][ T27] [ 420.670743][ T27] Kernel Offset: disabled [ 420.675067][ T27] Rebooting in 86400 seconds..