last executing test programs: 4m59.603919011s ago: executing program 1 (id=2069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f79"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r3, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) r4 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r4, 0x1, 0x0, 0x2000}) r5 = syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x353}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000240)) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4m52.611615973s ago: executing program 1 (id=2079): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000180)={0x3, 0x0, 0x3, {0x2, @raw_data="f73067ab987e18d64946d83360f164e54932c924173c426d4ac79c43b40c2ac934d22c1987eddb8a666aeaae4dfa8c90556dc1279800f0736e2a50633825a708305eef6461778c24c350e1a78c725ce4c2424a6f7e02b0fa381e684acae36e68e58a894e115f8a4045f23b211285a8a1fd3791cc236c039742d415a449ca6b1e4ad546bba1deea715b44879185e26c63317efeb12de77aeaa78ba3965a16946836a688610f4e299919775d2cfed4172d42aafdb8e74d88bb4627e7dd9c5e0d4cbf85423d52a3e7d3"}, 0x8001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32, @ANYBLOB="00000000000000f0a91500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$P9_RSTATFS(r1, &(0x7f0000005f40)={0x43, 0x9, 0x1, {0x4, 0x8, 0x9107, 0xfffb, 0xc, 0x0, 0x5, 0x9, 0x1000005}}, 0x43) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 4m47.744032177s ago: executing program 1 (id=2087): getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000080)={0x0, 0x6c, "02000000000000703fe6153c5997e989843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986fe30642b3348c700b558041310b18d364b87808f8a74a6c8c4cf9ff3addfdc94c5de7f7ba36ec3b597fae6ac116b5bc6c564f98676e592284a82b4"}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m47.34641958s ago: executing program 1 (id=2090): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = epoll_create1(0x80000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0x1000201c}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xe0000004}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m38.855998916s ago: executing program 1 (id=2095): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000002100)='usbip-vudc.0', 0xc) 4m36.667529062s ago: executing program 1 (id=2098): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_clone3(&(0x7f0000000540)={0x40000000, &(0x7f0000000080), 0x0, 0x0, {0x4}, 0x0, 0x0, &(0x7f0000000300)=""/4, &(0x7f0000000340)=[r0, 0x0, 0x0, 0x0], 0x4}, 0x58) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x2, 0x1, 0x238, 0x0, 0x2, "02e29398581bd13e95ac00fcffff0f5d02000e", 0x800, 0x3}) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@broadcast}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/194}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 4m20.264251853s ago: executing program 32 (id=2098): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_clone3(&(0x7f0000000540)={0x40000000, &(0x7f0000000080), 0x0, 0x0, {0x4}, 0x0, 0x0, &(0x7f0000000300)=""/4, &(0x7f0000000340)=[r0, 0x0, 0x0, 0x0], 0x4}, 0x58) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x2, 0x1, 0x238, 0x0, 0x2, "02e29398581bd13e95ac00fcffff0f5d02000e", 0x800, 0x3}) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@broadcast}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/194}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 3m52.012110184s ago: executing program 2 (id=2142): sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x8001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000159e99eabc6934d95000288"], 0x48}}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) 3m51.559249946s ago: executing program 2 (id=2143): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r3, 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) syz_ublk_setup_queues(r6, r5, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r6, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r4, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) 3m49.079850401s ago: executing program 2 (id=2147): mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x8050) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f0000000580)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m45.486971667s ago: executing program 2 (id=2150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@eol]}}}}}}, 0x3a) 3m35.273032174s ago: executing program 2 (id=2157): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/253, 0xfd}], 0x1, 0x7, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000a80)={0x11, 0xf9, &(0x7f0000000980)="ed3ffaaee757b2cd0ee092f1063a9eeeb21b038a1fdc3a899e2b4dbd65a62b8aa9925307f5f739eb68714a2e99c1ae402c41dc29f1cd8f5ee78cb61c1df53301be009b228e2a008843313493ea4c36f5c2f9ed9c318e6dda5d255701eb589ac2f5a64976b798a4fceff277808a3d2fb84f5852e1075ad4b5bec1126d58f686e0e6117b3eedb53e9e53823064a67cc3f131c72c614ac16a052322966df0fac02a2a2674e1d04fb2ed354d499ad02b5529d8dbdfd8ce9a24b54683460a135d40bf6f85af17af750c7d2a2c4f909b9fb2de590432b12750aad767aa49076117bf42e20b88664941ddd5a8b1f10a29901aa195e43e532545df9d5f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000340)='./file0\x00', 0x4) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3m24.247012515s ago: executing program 2 (id=2165): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 3m9.962903468s ago: executing program 3 (id=2177): r0 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m9.255936648s ago: executing program 3 (id=2181): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) socket(0x848000000015, 0x805, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x10}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) close(0x3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r9, r7, 0x0, r7}, 0x5) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r3, 0x0, 0x0, 0xc, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 3m9.102350454s ago: executing program 33 (id=2165): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 3m8.359723377s ago: executing program 3 (id=2184): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r5, 0x0, 0x0, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000170a01020000000000000000000c0007"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 2m58.142662719s ago: executing program 3 (id=2188): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}]}, 0x38}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt(r4, 0x8, 0x6d, &(0x7f0000000280)="efd91c8082fe842d64dee068acfd74d5cb4b60b058a8480fd572ac0c7671a421c2ff072e66e0be74929853abb6ca49b0b90023fe308bc6305f107ccab7b8925c3c8fddd06acee2f4198ea60b911d1bcc311045e7964af6076256219da9af586e5ec219affd935c34e588ff0f44c79c8707947e3b8eb52f5bc08832a748a2884cc2b3b0c3d1bb0e497d8f61377a1f3464aee6736f568f2de4f06a07a6ea87aaad5f5eb75e4c952e38ea558df0c5cd50f96598bf172025e64dceabeff75057f015d714d34447e187205ca853ef38359c8f491c30b6ae", 0xd5) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r5) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x48043) dup(r5) 2m56.332807347s ago: executing program 3 (id=2191): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) syz_ublk_setup_io_uring(0x13ff, &(0x7f0000000440)={0x0, 0x94a1, 0x10000, 0x3, 0x123}, &(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x7) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@empty, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x3, 0x11, 0x0, @rand_addr=0x64010100, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) r2 = mmap$IORING_OFF_CQ_RING(0x0, 0x2, 0x1000000, 0x11, 0xffffffffffffffff, 0x8000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_complete(r0, r2) openat$null(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e09030000000000000109022700010100c0320904000003ff00000007058102400000070502024000000705830340"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m54.331146984s ago: executing program 3 (id=2195): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020059021400060000", 0xb}], 0x1}, 0x0) 2m36.751109608s ago: executing program 34 (id=2195): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020059021400060000", 0xb}], 0x1}, 0x0) 1m47.738352276s ago: executing program 4 (id=2248): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0xfffffffffffffffd, 0x1, 0x3ff, 0x3, 0x4002004c2, 0x1000, 0x9, 0x10001, 0xfffffffffffffffb, 0x8, 0x6, 0x0, 0x8, 0xda91], 0x41000, 0x2008c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m47.422597843s ago: executing program 4 (id=2249): socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) pipe(&(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r0, r0, 0x2e}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000300)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, '*|4', 0x0, 0x6c, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}, 0x0) 1m47.289049123s ago: executing program 4 (id=2250): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_open_dev$usbmon(&(0x7f00000008c0), 0x5, 0x800) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000000), 0x0) socket$inet(0x2, 0x80000, 0x9cf) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) 1m46.281064727s ago: executing program 4 (id=2251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) 1m45.25107809s ago: executing program 4 (id=2252): bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = syz_io_uring_setup(0x28a0, &(0x7f0000000800)={0x0, 0xcf6d, 0x80, 0x0, 0x3c7}, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000a80)={0x1, 0xf, 0x7}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0xf5ff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r2, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x20000020, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x9, &(0x7f0000000040)) listen(r1, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x2, @ANYRES32=0x41424344, @ANYBLOB="5018100090780dd4"], 0x0) 1m44.992210153s ago: executing program 4 (id=2253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x53}}]}, 0x38}}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, 0x0}, 0x0) 1m29.792565578s ago: executing program 35 (id=2253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x53}}]}, 0x38}}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, 0x0}, 0x0) 42.044065067s ago: executing program 8 (id=2291): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) 35.4373071s ago: executing program 8 (id=2293): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x104) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, 0x0) 34.345039947s ago: executing program 0 (id=2294): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) 34.150657422s ago: executing program 0 (id=2295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f79"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, 0xffffffffffffffff, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x2000}) r4 = syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x353}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 29.614601681s ago: executing program 8 (id=2298): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_open_dev$usbmon(&(0x7f00000008c0), 0x5, 0x800) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) memfd_create(0x0, 0x0) pipe2(0x0, 0x0) socket$inet(0x2, 0x80000, 0x9cf) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, 0x0) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) 29.248443057s ago: executing program 0 (id=2299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1000}, @TCA_CODEL_LIMIT={0x23, 0x2, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xfffffffd}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_CODEL_TARGET={0x8, 0x1, 0xfffffff7}, @TCA_CODEL_ECN={0x8}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048090) 28.062356583s ago: executing program 8 (id=2301): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x200006}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x30) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/194, 0xc2, 0x1, 0x0}, &(0x7f0000000240)=0x40) creat(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='6', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) 27.088499368s ago: executing program 5 (id=2302): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x2b81, 0x21, 0x3, 0x3b7}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x712a, 0x20000, 0x2, 0x10c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e4c6, 0x8000, 0x1, 0x71}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbb18, 0x400, 0x1, 0x28c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x381a, 0x80, 0x1, 0x92e}, 0xffffffffffffffff}], 0x4, &(0x7f0000001900)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x1, 0x90a, 0x0, &(0x7f0000001b40)=@buf_1k="d5ba4ac1ff3de0b411804d07929fbd3a0053373069c3bae763af56cb9e5a241fc8200ac37dba84d1edb652ee3d5df120a1c627a5222c44084674b87d81dd997a0fcf4f826cd6b1f585d1690eb0bcb8ff33e5772172eb74b005841e351b943dce5892b758dbfbc140f1e01ead08af7ec3d7854d7e1bd70d8cfbe78ea35d157f414245b55a7083c6c62882166827b8e8565efaedcb9b530d9ddc96975a500dd92afa9305cfdde6b1de0fe2b1487c137beb406a4045eb69402abe777d9dd0a8f2a9ec6d23f4ab0cb30bb9a5879bcf86813204abf9009897c1b7bd6022e3a89e923e2cce5e4ad8901f9dfe3c0e82c9fe5c7a2b954b7d74b8e34b3b395c81333721db84ad54b00451595313fc6cf7bd18ccb088fee9498b6b55202ff71776316a1357f4ee6040dd4a91cae74086d7a9affa84005ceeda7fa68eeab65ec5af5afc5abe20796ecdd776ccf38fcba48cf7c9e5b7015bcdd031b726d8e09130588ec12136babb637067ecb666754bdc6fab2297809cb2734acf097d5770cd5ed3752c1b5e2a5b1c2f99851df26e3e38ecd37d57d829ec81d26b3cd91e6a0ec133a55150177c7a665e6f98060c0dbccc0aa2e71a7bfe26ad8e3755298e63098e29181d032b381298efdcb2adbdeab59476196fd1cea2371b6751be502d4eaa5d5e84aebef47d86da8f818809375ac2334b0cc7bb8017785134552f8f62708a58a51e9a3d7ee7d0370058746a296195121e9a019a79e07781f1b4e4987833d536555ffd2d1d94e167f07239886e48d7e88546642de3a91793fcbd6711afbd5c67d9f23723103a994e376ea87b5bdb1f10ee3914f474efb30a9730106a275440c639c65c48bb724c1dcd0d126c38582d99c2f84bfc218af2eccd3421d31a15cb177bc9cf415fa0a775f00454da6b0ec2bb9c31674dbd2551013f5cdd8d636726bbbac96cf767a8786feea81c325eefd31d72f05e5183fdf39bd84ae3480c902bf1e79ee0b5730db57f888af9951b6e81b697d897e1dbb18591b4c6e93ea8a47958f18c98b1131458928ceb188579af651384176c051def6b5276e38f25e5cdf11c8459e5f2b6141d482f1a070d9f4521d2d4b89a857ee927162369989e28a0de32e2c68caa86e6046b2cfd67f0521eba7106dbe12f32c98de1008734f045ce6abb9123d9a359b208616b8ddc050fecccde31d74eb14fa58617c3ef51f4b69438a043255af0782144630ee88a647d24c0388351920dd0b95c95a83863329b2f70a4ca2d0ba3f010ea33ca17c5ecba5a9ca3c02ac45342bc8f82f597933f91c9d47116988b256d37931ed8b528d01d2f0bb2b383af24f9c37649a0a6cff512f0202cab3311940c3f606403c50049be586d9b9c093561522581ff4f91075105e8cd552cc3f4f60b36ceb42b39e4dcade7dc652b6fe371da00952afdc8c436ef877199b8d6678481"}}, &(0x7f0000001980)) r1 = syz_io_uring_setup(0x8000671f, &(0x7f0000000400)={0x0, 0x9e89, 0x20000, 0x10000000, 0x3c1, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r5, 0x40086f52, &(0x7f0000000180)={0xe, &(0x7f00000001c0)=[{0x5, '\x00', @data, 0x7ffffffd}]}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000010001bc0000000000fdffffff8500000005000000032973850000001100000095000000fd4345e97399e40e79abdd718145607c874257f9a5e720af20ea1fb0298d8846e9c1a6de005726d14cda4edb5fe332360383d32c6f7374441ae1ba920dcb60e27125a6a66f87022f42f8d76137429718dfc8584d68403bf8736b0c5a570d14ccbb5aae75eeb222b482022e7292367ee646ef8e44a3d91ce697dfda42975ada6558e5d7f14b46e10863a95598dda3f18e8a301c1f4b31413d28f2f339c9c09015bed6f8d6672b40eec468aa1f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000140)="9b7d589f668f4113c16a6297df66", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x1, r6, 0x0, 0x0, 0x0, 0x80000}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x2) mkdirat(r8, &(0x7f00000001c0)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/cells\x00', 0x2, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x8010, r9, 0x466a4000) personality(0x4100001) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000001180)=0x1ffffff) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r10, 0x0) ioctl$SNDCTL_DSP_SYNC(r10, 0x5001, 0x0) io_uring_enter(r1, 0x126, 0x74d, 0x29, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x80201, 0x88) 26.934417125s ago: executing program 5 (id=2303): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 26.152948024s ago: executing program 5 (id=2304): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) 25.169202653s ago: executing program 0 (id=2305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800e97802000000000000000a00000000000000080005", @ANYRES32], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@eol]}}}}}}, 0x3a) 25.158783026s ago: executing program 8 (id=2306): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x1000000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') 24.175486727s ago: executing program 8 (id=2307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f79"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, 0xffffffffffffffff, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x2000}) r4 = syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x353}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 24.011888666s ago: executing program 5 (id=2308): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x48000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r3, 0x0, r1, 0x4000000, 0x4, 0x85, 0x81, 0x8000, 0x7ffffffe, 0x7, 0x3, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r5 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800406c0000006800005711907800000000640101028300d5ac14141100000000ac141420ac1414ff00000009ac14142700000007e000000200007ffcac14141300000002e0000002000000007f00000100000005ac1414aa0000000dac1414410000000064010102000000039400000082004a98fa9a6004ec57d202274e234e240000907860020001b70a5ec4314006ed254e1885595936def817ace630836a1af75906f20fcac8aa2c6c52ca76613ce9422f75f6be4f8b349e80f4e9bddee766dc1eb2cf6a06084fdfed700891d6b5bdb821bfbc9304d4b1db9d221b974a9b7cae678c19898e2c153eb880de8504b97b601f8a548862dd2cfc1b3e43814c9a82749feb2b02fd55ef8957a2fa6bdbcc11902df9616064ee6cf1775518429bca6baef233f0d00ca704a9d550f04258246c7aa09434a7bfbdbf4f39c90d6ad5db876fc2da811bd57b847a51e49e6708d45586affe7678c9af4c2b01c8500ab0158caa06ec632ccce79186e2913ecbedf28bb242ac8cccf2feca955ca658c338a4ce78f8f7c39eca6f5d54028498c423919dfd8c42c9f1713fbc928f1f4e5e93514d5377326e759e2bac291b8e2ca6419502d91cec823d49cc00"/469], 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2000) ioctl$NBD_SET_TIMEOUT(r6, 0xab09, 0x80) r7 = openat$apparmor_thread_current(0xffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x187) r8 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x101240, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7, {0x339}}, './file0\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x13, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x9}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 17.975560968s ago: executing program 0 (id=2309): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_open_dev$usbmon(&(0x7f00000008c0), 0x5, 0x800) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) memfd_create(0x0, 0x0) pipe2(0x0, 0x0) socket$inet(0x2, 0x80000, 0x9cf) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) readv(r1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) 17.7694679s ago: executing program 5 (id=2310): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060009"], 0x38}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r3, r4) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) read(r6, &(0x7f0000000500)=""/1024, 0x400) read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) write$vhost_msg_v2(r5, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\x06\x00[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x2, 0x11b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000053d2) 17.627902315s ago: executing program 0 (id=2311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcfff7ff000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000f185000000950000efff000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r1, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x10001, 0xc}, 0x8) bind$bt_sco(r2, &(0x7f0000000400), 0x8) listen(r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0800}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='0', 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010028cbc2e610dbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x42000}, 0x4000000) pipe2(&(0x7f0000000340), 0x80000) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r7, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7f3139f404000000027263aa876dd358", "cfa400", "7f7d0a00"}, 0xfffffffd, 0xd}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 13.914976116s ago: executing program 5 (id=2312): bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_io_uring_setup(0x28a0, &(0x7f0000000800)={0x0, 0xcf6d, 0x80, 0x0, 0x3c7}, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000a80)={0x1, 0xf, 0x7}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14}, 0x8f) r2 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0xf5ff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(r3, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x20000020, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x9, &(0x7f0000000040)) listen(r2, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x2, @ANYRES32=0x41424344, @ANYBLOB="5018100090780dd4"], 0x0) 0s ago: executing program 36 (id=2307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f79"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, 0xffffffffffffffff, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x2000}) r4 = syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x353}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) kernel console output (not intermixed with test programs): T38] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 585.891054][ T38] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 586.105085][ T30] audit: type=1800 audit(1786402453.441:25): pid=11833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1735" name="enable" dev="configfs" ino=33576 res=0 errno=0 [ 586.345397][T11840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1739'. [ 586.375408][T11840] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 586.375429][T11840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 586.375531][T11840] vhci_hcd vhci_hcd.0: Device attached [ 586.377286][ T5616] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 586.528712][ T5616] usb 3-1: not running at top speed; connect to a high speed hub [ 586.528774][ T5616] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 586.529924][ T5616] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 586.529969][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.565657][ T5616] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 586.592438][ T5616] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 586.618178][ T5803] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 586.794836][ T5616] usb 3-1: USB disconnect, device number 26 [ 586.846251][ T5616] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 586.854299][ T5616] garmin_gps 3-1:1.0: device disconnected [ 586.889260][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 587.015401][T11857] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 587.018491][T11857] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 587.018587][T11857] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 587.800371][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 587.849617][T11843] vhci_hcd: connection reset by peer [ 587.856379][ T1151] vhci_hcd vhci_hcd.3: stop threads [ 587.856401][ T1151] vhci_hcd vhci_hcd.3: release socket [ 587.856456][ T1151] vhci_hcd vhci_hcd.3: disconnect device [ 587.912351][ T1151] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 587.914664][ T1151] (NULL device *): queue 0 connect admin queue failed (-111). [ 587.914693][ T1151] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 587.914710][ T1151] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 589.983926][T11874] random: crng reseeded on system resumption [ 589.990162][ T1166] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 590.047136][ T1166] (NULL device *): queue 0 connect admin queue failed (-111). [ 590.047350][ T1166] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 590.047459][ T1166] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 590.326169][T11869] syzkaller0: entered promiscuous mode [ 590.332595][T11869] syzkaller0: entered allmulticast mode [ 590.993434][T11874] input: syz0 as /devices/virtual/input/input24 [ 591.706979][ T30] audit: type=1800 audit(1786402459.041:26): pid=11884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1750" name="enable" dev="configfs" ino=32545 res=0 errno=0 [ 591.737368][ T5803] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 592.075346][ T5934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 592.077474][ T5934] (NULL device *): queue 0 connect admin queue failed (-111). [ 592.077498][ T5934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 592.077515][ T5934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 594.158022][ T5925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 594.169392][ T5925] (NULL device *): queue 0 connect admin queue failed (-111). [ 594.169424][ T5925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 594.169441][ T5925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 595.151888][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1752'. [ 595.262287][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 595.277158][T11915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.278191][T11915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.362478][T11918] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 595.362787][T11918] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 595.363015][T11918] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 596.237917][ T5927] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 596.260622][ T5927] (NULL device *): queue 0 connect admin queue failed (-111). [ 596.273286][ T5927] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 596.289755][ T5927] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 596.849753][T11930] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 596.926354][T11933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1758'. [ 597.009344][T11933] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 597.009374][T11933] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 597.009484][T11933] vhci_hcd vhci_hcd.0: Device attached [ 597.247279][ T25] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 598.310714][ T67] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 598.311290][ T67] (NULL device *): queue 0 connect admin queue failed (-111). [ 598.311392][ T67] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 598.311481][ T67] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 598.707125][T11935] vhci_hcd: connection reset by peer [ 598.713291][ T5925] vhci_hcd vhci_hcd.2: stop threads [ 598.713322][ T5925] vhci_hcd vhci_hcd.2: release socket [ 598.713390][ T5925] vhci_hcd vhci_hcd.2: disconnect device [ 598.885029][ T30] audit: type=1800 audit(1786402466.221:27): pid=11947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1763" name="enable" dev="configfs" ino=32736 res=0 errno=0 [ 598.950872][T11934] syz.0.1759 (11934) used greatest stack depth: 19080 bytes left [ 599.288979][T11930] syz.0.1759 (11930) used greatest stack depth: 17288 bytes left [ 599.581132][T11953] syzkaller0: entered promiscuous mode [ 599.587482][T11953] syzkaller0: entered allmulticast mode [ 599.764536][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 599.829125][T11969] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 599.829225][T11969] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 599.829261][T11969] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 600.027746][ T5832] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 600.193065][ T5832] usb 5-1: not running at top speed; connect to a high speed hub [ 600.202561][ T5832] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 600.236547][ T5832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 600.249614][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.388048][ T5927] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 600.405479][ T5927] (NULL device *): queue 0 connect admin queue failed (-111). [ 600.405619][ T5927] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 600.405703][ T5927] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 600.550635][ T5832] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 600.696358][ T5832] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 600.820116][ T5832] usb 5-1: USB disconnect, device number 21 [ 600.868653][ T5832] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 600.890370][ T5832] garmin_gps 5-1:1.0: device disconnected [ 601.085130][T11981] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 601.108885][T11981] binder: 11979:11981 ioctl c0306201 200000000040 returned -22 [ 602.377296][ T25] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 602.477792][ T1151] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 602.478030][ T1151] (NULL device *): queue 0 connect admin queue failed (-111). [ 602.478050][ T1151] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 602.478067][ T1151] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 604.547540][ T5927] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 604.548174][ T5927] (NULL device *): queue 0 connect admin queue failed (-111). [ 604.548208][ T5927] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 604.548227][ T5927] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 605.870943][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1770'. [ 606.159301][T12013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.161231][T12013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.448186][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1782'. [ 606.530181][T12019] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 606.540609][T12019] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 606.540646][T12019] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 606.627854][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 606.684130][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 606.684202][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 606.684312][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 607.607764][T12025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.619301][T12025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.708461][ T1151] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 608.741900][ T1151] (NULL device *): queue 0 connect admin queue failed (-111). [ 608.755756][ T1151] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 608.755849][ T1151] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 609.937245][T12016] loop7: detected capacity change from 0 to 16384 [ 610.178950][T12044] syzkaller0: entered promiscuous mode [ 610.184917][T12044] syzkaller0: entered allmulticast mode [ 610.196592][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 610.794029][ T5927] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 610.807132][ T5927] (NULL device *): queue 0 connect admin queue failed (-111). [ 610.815197][ T5927] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 610.824610][ T5927] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 611.227436][ T991] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 611.390483][ T991] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 611.391994][ T991] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.394597][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.394659][ T991] usb 5-1: Product: syz [ 611.394688][ T991] usb 5-1: Manufacturer: syz [ 611.394705][ T991] usb 5-1: SerialNumber: syz [ 611.416940][ T991] pl2303 5-1:1.0: required endpoints missing [ 611.612299][ T991] usb 5-1: USB disconnect, device number 22 [ 612.314511][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1797'. [ 612.415848][T12075] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 612.426383][T12075] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 612.435287][T12075] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 613.091484][ T5925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 613.133363][ T5925] (NULL device *): queue 0 connect admin queue failed (-111). [ 613.133438][ T5925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 613.150021][ T5925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 615.187754][ T1151] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 615.204850][ T1151] (NULL device *): queue 0 connect admin queue failed (-111). [ 615.212819][ T1151] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 615.220794][ T1151] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 615.418601][ T30] audit: type=1800 audit(1786402482.751:28): pid=12087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1801" name="enable" dev="configfs" ino=34419 res=0 errno=0 [ 616.267375][ T5760] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 616.439440][ T5760] usb 5-1: not running at top speed; connect to a high speed hub [ 616.439473][ T5760] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 616.457665][ T5760] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 616.457714][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.941304][T12084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1802'. [ 617.267574][ T5934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 617.268067][ T5934] (NULL device *): queue 0 connect admin queue failed (-111). [ 617.268172][ T5934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 617.268229][ T5934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 617.537063][ T5760] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 618.241139][ T5760] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 618.245418][ T5760] usb 5-1: USB disconnect, device number 23 [ 618.251927][ T5760] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 618.252625][ T5760] garmin_gps 5-1:1.0: device disconnected [ 618.453888][T12105] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 619.118012][ T5724] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 619.290743][ T5724] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 619.294859][ T5724] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.298527][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.298553][ T5724] usb 5-1: Product: syz [ 619.298566][ T5724] usb 5-1: Manufacturer: syz [ 619.298579][ T5724] usb 5-1: SerialNumber: syz [ 619.325691][ T5724] pl2303 5-1:1.0: required endpoints missing [ 619.350553][ T1151] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 619.365193][ T1151] (NULL device *): queue 0 connect admin queue failed (-111). [ 619.365248][ T1151] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 619.365265][ T1151] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 619.523167][ T2252] usb 5-1: USB disconnect, device number 24 [ 619.788101][T12116] syzkaller0: entered promiscuous mode [ 619.793904][T12116] syzkaller0: entered allmulticast mode [ 621.276697][ T25] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 621.427517][ T5934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 621.440955][ T5934] (NULL device *): queue 0 connect admin queue failed (-111). [ 621.441002][ T5934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 621.441034][ T5934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 621.467692][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 621.475794][ T25] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 621.502333][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 621.502392][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.529025][ T25] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 621.557657][ T25] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 621.860892][ T5724] usb 5-1: USB disconnect, device number 25 [ 621.884131][ T5724] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 621.893785][ T5724] garmin_gps 5-1:1.0: device disconnected [ 622.581924][T12157] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 623.509416][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 623.510831][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 623.510858][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 623.510873][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 624.389573][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.389682][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.520227][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 625.592743][ T7472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 625.595171][ T7472] (NULL device *): queue 0 connect admin queue failed (-111). [ 625.595219][ T7472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 625.595237][ T7472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 625.624148][T12171] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 625.624172][T12171] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 625.624183][T12171] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 626.584840][T12137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1812'. [ 627.225457][T12180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.235626][T12180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.447875][ T991] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 627.622321][ T991] usb 3-1: unable to get BOS descriptor or descriptor too short [ 627.631699][ T991] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 627.660981][ T991] usb 3-1: config 189 has an invalid interface number: 127 but max is 0 [ 627.671176][ T991] usb 3-1: config 189 has no interface number 0 [ 627.680874][ T44] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 627.700486][ T44] (NULL device *): queue 0 connect admin queue failed (-111). [ 627.700575][ T44] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 627.700661][ T44] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 627.732300][ T991] usb 3-1: config 189 interface 127 has no altsetting 0 [ 627.770617][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.770702][ T991] usb 3-1: Product: syz [ 627.786059][ T991] usb 3-1: Manufacturer: syz [ 627.793433][ T991] usb 3-1: SerialNumber: syz [ 628.220186][ T991] usbserial_generic 3-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 628.220232][ T991] usbserial_generic 3-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 628.220290][ T991] usbserial_generic 3-1:189.127: device has no bulk endpoints [ 628.230873][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.231363][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.265469][ T991] safe_serial 3-1:189.127: safe_serial converter detected [ 628.265600][ T991] safe_serial 3-1:189.127: probe with driver safe_serial failed with error -22 [ 628.294940][ T991] usb 3-1: USB disconnect, device number 27 [ 628.390495][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 628.407382][ T2252] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 628.567815][ T2252] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 628.568823][ T2252] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 628.568856][ T2252] usb 5-1: config 0 interface 0 has no altsetting 0 [ 628.571269][ T2252] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 628.571300][ T2252] usb 5-1: Product: syz [ 628.571314][ T2252] usb 5-1: Manufacturer: syz [ 628.571330][ T2252] usb 5-1: SerialNumber: syz [ 628.574470][ T2252] usb 5-1: config 0 descriptor?? [ 628.583043][ T2252] usb 5-1: selecting invalid altsetting 0 [ 629.198890][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 629.259457][T12204] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 629.259682][T12204] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 629.259772][T12204] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 629.758194][ T44] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 629.765221][ T44] (NULL device *): queue 0 connect admin queue failed (-111). [ 629.765252][ T44] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 629.765269][ T44] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 630.379615][ T5832] usb 5-1: USB disconnect, device number 26 [ 630.379634][ C0] usb 5-1: Unable to submit urb #1: -19 at snd_usb_queue_pending_output_urbs [ 630.380193][T12184] usb 5-1: cannot submit urb 0, error -19: no device [ 630.380535][T12184] usb 5-1: cannot submit urb 0, error -19: no device [ 630.380952][T12184] usb 5-1: cannot submit urb 0, error -19: no device [ 630.381263][T12184] usb 5-1: cannot submit urb 0, error -19: no device [ 630.382269][T12184] usb 5-1: cannot submit urb 0, error -19: no device [ 630.382722][T12184] usb 5-1: cannot submit urb 0, error -19: no device [ 630.383031][T12184] usb 5-1: cannot submit urb 0, error -19: no device [ 630.383355][T12184] usb 5-1: cannot submit urb 0, error -19: no device [ 630.384244][T12184] usb 5-1: cannot submit urb 0, error -19: no device [ 630.384609][T12184] usb 5-1: cannot submit urb 0, error -19: no device [ 630.384934][T12184] usb 5-1: cannot submit urb 0, error -19: no device [ 630.757959][T12211] syzkaller0: entered promiscuous mode [ 630.763751][T12211] syzkaller0: entered allmulticast mode [ 631.711182][T12226] capability: warning: `syz.4.1842' uses deprecated v2 capabilities in a way that may be insecure [ 631.737207][T12228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.739440][T12228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.833707][ T5927] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 631.834028][ T5927] (NULL device *): queue 0 connect admin queue failed (-111). [ 631.834076][ T5927] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 631.834096][ T5927] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 632.010681][ T2252] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 632.202750][ T2252] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 632.213583][ T2252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.224617][ T2252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.240082][ T2252] usb 3-1: config 0 descriptor?? [ 632.371126][T12233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.371541][T12233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.477082][ T2252] usbhid 3-1:0.0: can't add hid device: -71 [ 632.477330][ T2252] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 632.494678][ T2252] usb 3-1: USB disconnect, device number 28 [ 633.019505][ T2252] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 633.028053][ T5832] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 633.115769][T12241] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 633.191064][ T5832] usb 5-1: unable to get BOS descriptor or descriptor too short [ 633.191187][ T5832] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 633.210494][ T2252] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 633.222837][ T2252] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 633.233933][ T2252] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 633.234037][ T2252] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.266278][ T2252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.266375][ T2252] usb 3-1: Product: syz [ 633.266454][ T2252] usb 3-1: Manufacturer: syz [ 633.266521][ T2252] usb 3-1: SerialNumber: syz [ 633.331255][ T5832] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 633.331304][ T5832] usb 5-1: config 189 has no interface number 0 [ 633.331334][ T5832] usb 5-1: config 189 interface 127 has no altsetting 0 [ 633.403062][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.403110][ T5832] usb 5-1: Product: syz [ 633.403141][ T5832] usb 5-1: Manufacturer: syz [ 633.403153][ T5832] usb 5-1: SerialNumber: syz [ 633.907762][ T44] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 633.908786][ T5832] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 633.908828][ T5832] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 633.908885][ T5832] usbserial_generic 5-1:189.127: device has no bulk endpoints [ 633.910137][ T5832] safe_serial 5-1:189.127: safe_serial converter detected [ 633.910299][ T5832] safe_serial 5-1:189.127: probe with driver safe_serial failed with error -22 [ 633.921087][ T5832] usb 5-1: USB disconnect, device number 27 [ 633.972958][ T44] (NULL device *): queue 0 connect admin queue failed (-111). [ 633.973015][ T44] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 633.973032][ T44] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 635.709097][ T2252] usb 3-1: USB disconnect, device number 29 [ 635.988532][ T5925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 635.990985][ T5925] (NULL device *): queue 0 connect admin queue failed (-111). [ 635.993298][ T5925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 635.994417][ T5925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 636.453923][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'. [ 636.531375][T12254] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 636.540332][T12254] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 636.540439][T12254] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 638.068282][ T44] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 638.068948][ T44] (NULL device *): queue 0 connect admin queue failed (-111). [ 638.069028][ T44] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 638.069112][ T44] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 639.010274][ T5760] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 639.179673][ T5760] usb 5-1: not running at top speed; connect to a high speed hub [ 639.179726][ T5760] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 639.198618][ T5760] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 639.213273][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.238539][ T5760] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 639.254850][ T5760] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 639.487962][ T5760] usb 5-1: USB disconnect, device number 28 [ 639.530463][ T5760] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 639.542581][ T5760] garmin_gps 5-1:1.0: device disconnected [ 639.711467][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1838'. [ 640.151727][ T5925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 640.173380][ T5925] (NULL device *): queue 0 connect admin queue failed (-111). [ 640.182414][ T5925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 640.182617][ T5925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 640.752903][T12290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.753438][T12290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.059762][T12301] syzkaller0: entered promiscuous mode [ 641.059806][T12301] syzkaller0: entered allmulticast mode [ 641.112347][T12301] netlink: 'syz.1.1864': attribute type 2 has an invalid length. [ 641.112392][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 641.251176][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'. [ 641.381404][T12312] syzkaller0: entered promiscuous mode [ 641.381442][T12312] syzkaller0: entered allmulticast mode [ 642.227575][ T5927] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 642.228177][ T5927] (NULL device *): queue 0 connect admin queue failed (-111). [ 642.228218][ T5927] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 642.228252][ T5927] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 642.571361][ T5723] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 642.752983][ T5723] usb 2-1: not running at top speed; connect to a high speed hub [ 642.753070][ T5723] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 642.754248][ T5723] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 642.754294][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.760932][ T5723] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 642.767012][ T5723] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 643.288178][ T5760] usb 2-1: USB disconnect, device number 20 [ 643.561738][ T5760] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 643.562158][ T5760] garmin_gps 2-1:1.0: device disconnected [ 644.087293][ T5760] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 644.122904][T12346] binder: 12345:12346 ioctl c0306201 200000000040 returned -11 [ 644.124794][T12346] binder: 12345:12346 ioctl c0306201 200000000640 returned -22 [ 644.247314][ T5760] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 644.259623][ T5760] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 644.267945][ T5760] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.267991][ T5760] usb 3-1: config 0 has no interface number 0 [ 644.268039][ T5760] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 644.268060][ T5760] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.268101][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.271610][ T5760] usb 3-1: config 0 descriptor?? [ 644.285999][ T5760] ldusb 3-1:0.55: Interrupt in endpoint not found [ 644.311312][ T44] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 644.364707][ T44] (NULL device *): queue 0 connect admin queue failed (-111). [ 644.364758][ T44] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 644.364774][ T44] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 644.853432][ T5723] usb 3-1: USB disconnect, device number 30 [ 646.395172][ T1174] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 646.397321][ T1174] (NULL device *): queue 0 connect admin queue failed (-111). [ 646.397347][ T1174] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 646.397364][ T1174] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 648.137309][ T25] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 648.253285][T12381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.263729][T12381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.310940][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 648.312080][ T25] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 648.312112][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 648.314025][ T25] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 648.314050][ T25] usb 3-1: Product: syz [ 648.314063][ T25] usb 3-1: Manufacturer: syz [ 648.314077][ T25] usb 3-1: SerialNumber: syz [ 648.316984][ T25] usb 3-1: config 0 descriptor?? [ 648.325667][ T25] usb 3-1: selecting invalid altsetting 0 [ 648.469127][ T44] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 648.469341][ T44] (NULL device *): queue 0 connect admin queue failed (-111). [ 648.469378][ T44] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 648.469398][ T44] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 648.818727][ T5760] usb 3-1: USB disconnect, device number 31 [ 648.819320][T12394] usb 3-1: cannot submit urb 0, error -19: no device [ 648.820045][T12394] usb 3-1: cannot submit urb 0, error -19: no device [ 649.867712][ T2252] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 650.035818][ T2252] usb 5-1: not running at top speed; connect to a high speed hub [ 650.047552][ T2252] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 650.174085][ T2252] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 650.189021][ T2252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.442031][ T2252] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 650.557612][ T1174] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 650.577679][ T1174] (NULL device *): queue 0 connect admin queue failed (-111). [ 650.577750][ T1174] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 650.577769][ T1174] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 650.603466][ T2252] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 650.683587][ T2252] usb 5-1: USB disconnect, device number 29 [ 650.713372][ T2252] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 650.714130][ T2252] garmin_gps 5-1:1.0: device disconnected [ 650.964102][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 650.997555][ T5724] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 651.152256][ T5724] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 651.153764][ T5724] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.155988][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.156013][ T5724] usb 4-1: Product: syz [ 651.156027][ T5724] usb 4-1: Manufacturer: syz [ 651.156041][ T5724] usb 4-1: SerialNumber: syz [ 651.191994][ T5724] pl2303 4-1:1.0: required endpoints missing [ 651.240033][T12445] syzkaller0: entered promiscuous mode [ 651.245798][T12445] syzkaller0: entered allmulticast mode [ 651.399383][ T25] usb 4-1: USB disconnect, device number 28 [ 651.537677][T12458] input: syz0 as /devices/virtual/input/input25 [ 651.595230][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 652.388130][ T25] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 652.582150][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 652.591925][ T25] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 652.652157][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 652.652373][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.693507][ T5925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 652.762153][ T5925] (NULL device *): queue 0 connect admin queue failed (-111). [ 652.762269][ T5925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 652.778972][ T5925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 652.984572][ T25] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 653.430673][ T25] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 654.535398][ T5832] usb 3-1: USB disconnect, device number 32 [ 654.538500][T12477] syzkaller0: entered promiscuous mode [ 654.538521][T12477] syzkaller0: entered allmulticast mode [ 654.591448][ T5832] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 654.603833][ T5832] garmin_gps 3-1:1.0: device disconnected [ 654.716227][T12487] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1934'. [ 654.787378][ T1174] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 654.787538][ T1174] (NULL device *): queue 0 connect admin queue failed (-111). [ 654.787572][ T1174] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 654.787591][ T1174] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 655.167430][ T5724] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 655.320627][ T5724] usb 5-1: unable to get BOS descriptor or descriptor too short [ 655.320699][ T5724] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 655.321642][ T5724] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 655.321665][ T5724] usb 5-1: config 189 has no interface number 0 [ 655.321692][ T5724] usb 5-1: config 189 interface 127 has no altsetting 0 [ 655.323552][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.323574][ T5724] usb 5-1: Product: syz [ 655.323587][ T5724] usb 5-1: Manufacturer: syz [ 655.323602][ T5724] usb 5-1: SerialNumber: syz [ 655.437311][ T5760] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 655.572222][ T5724] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 655.572276][ T5724] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 655.572336][ T5724] usbserial_generic 5-1:189.127: device has no bulk endpoints [ 655.573028][ T5724] safe_serial 5-1:189.127: safe_serial converter detected [ 655.573175][ T5724] safe_serial 5-1:189.127: probe with driver safe_serial failed with error -22 [ 655.589154][ T5760] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 655.590299][ T5760] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 655.590324][ T5760] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.590343][ T5760] usb 3-1: config 0 has no interface number 0 [ 655.590377][ T5760] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 655.590398][ T5760] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.590436][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.627232][ T5724] usb 5-1: USB disconnect, device number 30 [ 655.629545][ T5760] usb 3-1: config 0 descriptor?? [ 655.671995][ T5760] ldusb 3-1:0.55: Interrupt in endpoint not found [ 655.962921][ T5760] usb 3-1: USB disconnect, device number 33 [ 656.886534][ T1174] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 656.971593][ T1174] (NULL device *): queue 0 connect admin queue failed (-111). [ 656.971637][ T1174] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 656.971669][ T1174] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 657.084697][T12522] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1946'. [ 657.119291][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1947'. [ 657.193813][T12531] syzkaller0: entered promiscuous mode [ 657.193865][T12531] syzkaller0: entered allmulticast mode [ 657.708124][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 657.762655][ T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 657.921755][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 657.921817][ T25] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 657.923046][ T25] usb 2-1: config 189 has an invalid interface number: 127 but max is 0 [ 657.923070][ T25] usb 2-1: config 189 has no interface number 0 [ 657.923096][ T25] usb 2-1: config 189 interface 127 has no altsetting 0 [ 657.929238][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.929264][ T25] usb 2-1: Product: syz [ 657.929279][ T25] usb 2-1: Manufacturer: syz [ 657.929292][ T25] usb 2-1: SerialNumber: syz [ 657.978448][T12552] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1959'. [ 658.141810][ T25] usbserial_generic 2-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 658.141865][ T25] usbserial_generic 2-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 658.141904][ T25] usbserial_generic 2-1:189.127: device has no bulk endpoints [ 658.142640][ T25] safe_serial 2-1:189.127: safe_serial converter detected [ 658.142781][ T25] safe_serial 2-1:189.127: probe with driver safe_serial failed with error -22 [ 658.163519][ T25] usb 2-1: USB disconnect, device number 21 [ 658.356662][T12563] syzkaller0: entered promiscuous mode [ 658.363789][T12563] syzkaller0: entered allmulticast mode [ 659.029243][ T5927] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 659.033536][ T5927] (NULL device *): queue 0 connect admin queue failed (-111). [ 659.033565][ T5927] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 659.033582][ T5927] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 659.751872][T12589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.752291][T12589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.136050][T12597] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 660.171251][T12597] ublk6: read batch cmd buffer failed [ 660.172104][T12597] ublk6: read batch cmd buffer failed [ 661.076737][T12608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.077371][T12608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.110863][ T7472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 661.129156][ T7472] (NULL device *): queue 0 connect admin queue failed (-111). [ 661.129200][ T7472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 661.129240][ T7472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 662.161108][T12619] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 662.612114][T12629] syzkaller0: entered promiscuous mode [ 662.612165][T12629] syzkaller0: entered allmulticast mode [ 662.634725][ T5616] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 662.875571][ T5616] usb 2-1: not running at top speed; connect to a high speed hub [ 662.875677][ T5616] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 662.876669][ T5616] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 662.876713][ T5616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.948673][ T5616] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 663.008378][T12633] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 663.041548][T12633] ublk7: read batch cmd buffer failed [ 663.042624][T12633] ublk7: read batch cmd buffer failed [ 663.188908][ T5927] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 663.189552][ T5927] (NULL device *): queue 0 connect admin queue failed (-111). [ 663.191933][ T5927] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 663.192904][ T5927] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 663.595484][ T5616] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 663.712801][ T5616] usb 2-1: USB disconnect, device number 22 [ 663.730598][ T5616] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 663.731381][ T5616] garmin_gps 2-1:1.0: device disconnected [ 664.030706][T12641] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 665.010615][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1996'. [ 665.269529][ T5925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 665.274904][ T5925] (NULL device *): queue 0 connect admin queue failed (-111). [ 665.275036][ T5925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 665.275058][ T5925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 665.344922][T12658] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 665.384820][T12658] binder: 12654:12658 ioctl c0306201 200000000040 returned -22 [ 666.457507][T12671] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 666.459914][T12668] binder: 12667:12668 ioctl c0306201 200000000040 returned -22 [ 666.460358][T12668] binder: 12667:12668 ioctl c0306201 200000000640 returned -22 [ 667.348041][ T1151] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 667.348201][ T1151] (NULL device *): queue 0 connect admin queue failed (-111). [ 667.348221][ T1151] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 667.348237][ T1151] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 667.662828][T12686] binder: 12680:12686 ioctl c0306201 200000000040 returned -14 [ 668.329019][T12697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 668.602887][T12705] syzkaller0: entered promiscuous mode [ 668.602918][T12705] syzkaller0: entered allmulticast mode [ 668.931713][T12716] binder: 12715:12716 ioctl c0306201 200000000040 returned -22 [ 668.949653][T12716] binder: 12715:12716 ioctl c0306201 200000000640 returned -22 [ 669.187656][T12725] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 669.218744][T12725] binder: 12720:12725 ioctl c0306201 200000000040 returned -22 [ 669.428287][ T5927] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 669.441991][ T5927] (NULL device *): queue 0 connect admin queue failed (-111). [ 669.451940][ T5927] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 669.452032][ T5927] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 670.410115][T12733] binder: 12729:12733 ioctl c0306201 0 returned -14 [ 671.591407][ T5628] Bluetooth: hci1: unexpected event for opcode 0x200a [ 671.628877][ T5925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 671.658369][ T5925] (NULL device *): queue 0 connect admin queue failed (-111). [ 671.658574][ T5925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 671.668177][ T5925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 673.747377][ T44] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 673.760598][ T44] (NULL device *): queue 0 connect admin queue failed (-111). [ 673.760627][ T44] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 673.760644][ T44] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 676.687194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 676.995648][ T67] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 677.907320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 678.439097][ C1] sched: DL replenish lagged too much [ 678.535219][ T67] (NULL device *): queue 0 connect admin queue failed (-111). [ 678.535278][ T67] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 678.535312][ T67] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 679.773864][T12766] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 679.776114][T12766] binder: 12762:12766 ioctl c0306201 200000000040 returned -22 [ 680.583810][ T5940] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 680.603964][ T5940] (NULL device *): queue 0 connect admin queue failed (-111). [ 680.604023][ T5940] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 680.604044][ T5940] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 680.773502][ T5628] Bluetooth: hci4: unexpected event for opcode 0x200a [ 682.217324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 683.122444][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 683.146167][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 683.146228][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 683.146250][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 683.664321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #388!!! [ 683.682032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2ca!!! [ 683.724460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 683.742110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 683.785118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c8!!! [ 683.802927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 685.478993][ T5934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 685.497679][ T5934] (NULL device *): queue 0 connect admin queue failed (-111). [ 685.505331][ T5934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 685.505354][ T5934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 685.829640][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.829719][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.493322][T12826] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 687.624584][T12826] binder: 12821:12826 ioctl c0306201 200000000040 returned -22 [ 687.994717][ T7472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 688.643788][ T5628] Bluetooth: hci1: unexpected event for opcode 0x200a [ 688.651516][ T7472] (NULL device *): queue 0 connect admin queue failed (-111). [ 688.651545][ T7472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 688.651561][ T7472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 690.713365][ T5927] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 690.748789][ T5927] (NULL device *): queue 0 connect admin queue failed (-111). [ 690.748834][ T5927] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 690.748866][ T5927] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 691.588509][T12863] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 691.593209][T12863] ublk4: read batch cmd buffer failed [ 691.593375][T12863] ublk4: read batch cmd buffer failed [ 691.894664][ T5628] Bluetooth: hci0: unexpected event for opcode 0x200a [ 692.307406][ T5724] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 692.458844][ T5724] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 692.489061][ T5724] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 692.489108][ T5724] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.489130][ T5724] usb 2-1: config 0 has no interface number 0 [ 692.489172][ T5724] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 692.489197][ T5724] usb 2-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 692.489241][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.573754][ T5724] usb 2-1: config 0 descriptor?? [ 692.594496][ T5724] ldusb 2-1:0.55: Interrupt in endpoint not found [ 692.793618][ T67] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 692.806940][ T67] (NULL device *): queue 0 connect admin queue failed (-111). [ 692.806981][ T67] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 692.807011][ T67] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 692.861395][ T5760] usb 2-1: USB disconnect, device number 23 [ 694.999418][ T7472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 695.025546][ T7472] (NULL device *): queue 0 connect admin queue failed (-111). [ 695.025601][ T7472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 695.025622][ T7472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 697.688547][ T1174] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 699.585301][ T1174] (NULL device *): queue 0 connect admin queue failed (-111). [ 699.595656][ T1174] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 699.605654][ T1174] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 700.963282][T12922] input: syz0 as /devices/virtual/input/input26 [ 701.882646][ T142] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 701.954392][ T142] (NULL device *): queue 0 connect admin queue failed (-111). [ 701.954439][ T142] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 701.954472][ T142] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 703.017474][ T5628] Bluetooth: hci3: unexpected event for opcode 0x200a [ 703.990405][ T1166] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 704.008763][ T1166] (NULL device *): queue 0 connect admin queue failed (-111). [ 704.008808][ T1166] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 704.008850][ T1166] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 706.379742][ T1174] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 707.184022][ T1174] (NULL device *): queue 0 connect admin queue failed (-111). [ 707.184068][ T1174] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 707.184101][ T1174] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 707.887106][T12968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.887699][T12968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.480076][ T1151] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 710.578781][ T1151] (NULL device *): queue 0 connect admin queue failed (-111). [ 710.578830][ T1151] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 710.578851][ T1151] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 712.738171][ T38] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 712.947708][ T38] (NULL device *): queue 0 connect admin queue failed (-111). [ 712.947756][ T38] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 712.947789][ T38] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 714.228382][ T2252] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 715.027678][ T67] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 715.042595][ T67] (NULL device *): queue 0 connect admin queue failed (-111). [ 715.042637][ T67] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 715.042669][ T67] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 717.125297][ T1166] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 717.142853][ T1166] (NULL device *): queue 0 connect admin queue failed (-111). [ 717.142898][ T1166] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 717.142945][ T1166] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 719.422536][ T114] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 719.477729][ T114] (NULL device *): queue 0 connect admin queue failed (-111). [ 719.477771][ T114] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 719.477792][ T114] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 721.552443][ T114] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 721.602021][ T114] (NULL device *): queue 0 connect admin queue failed (-111). [ 721.602069][ T114] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 721.602103][ T114] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 723.676032][ T67] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 723.862724][ T67] (NULL device *): queue 0 connect admin queue failed (-111). [ 723.884357][ T67] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 723.896396][ T67] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 725.909218][ T7472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 725.929685][ T7472] (NULL device *): queue 0 connect admin queue failed (-111). [ 725.929730][ T7472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 725.929763][ T7472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 726.060656][T13097] binder: 13096:13097 ioctl c0306201 0 returned -14 [ 726.387619][ T5760] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 726.681425][ T5760] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 726.748398][ T5760] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.769916][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.769962][ T5760] usb 3-1: Product: syz [ 726.769993][ T5760] usb 3-1: Manufacturer: syz [ 726.770011][ T5760] usb 3-1: SerialNumber: syz [ 726.840063][ T5760] pl2303 3-1:1.0: required endpoints missing [ 728.270225][T13009] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 729.047423][T13009] (NULL device *): queue 0 connect admin queue failed (-111). [ 729.047471][T13009] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 729.047507][T13009] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 729.736398][ T2252] usb 3-1: USB disconnect, device number 34 [ 731.113172][T13009] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 731.126819][T13009] (NULL device *): queue 0 connect admin queue failed (-111). [ 731.126863][T13009] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 731.126894][T13009] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 732.294009][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 732.312893][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 732.323472][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 732.334567][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 732.353348][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 732.510435][T13120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.528470][T13120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.188022][ T1151] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 733.204006][ T1151] (NULL device *): queue 0 connect admin queue failed (-111). [ 733.204037][ T1151] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 733.204056][ T1151] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 734.467365][ T52] Bluetooth: hci5: command tx timeout [ 735.245441][T13140] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 735.246353][T13140] binder: 13137:13140 ioctl c0306201 200000000040 returned -22 [ 735.271610][T12923] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 735.334527][T12923] (NULL device *): queue 0 connect admin queue failed (-111). [ 735.334576][T12923] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 735.334608][T12923] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 735.388596][T13143] binder: 13141:13143 ioctl c0306201 0 returned -14 [ 736.014491][ T5625] syz_tun (unregistering): left allmulticast mode [ 736.549400][ T52] Bluetooth: hci5: command tx timeout [ 737.478889][ T7473] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 738.700251][ T52] Bluetooth: hci5: command tx timeout [ 738.869851][ T7473] (NULL device *): queue 0 connect admin queue failed (-111). [ 738.881830][ T7473] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 738.891302][ T7473] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 740.787443][ T52] Bluetooth: hci5: command tx timeout [ 740.963183][ T7472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 740.976077][ T7472] (NULL device *): queue 0 connect admin queue failed (-111). [ 740.983785][ T7472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 740.983810][ T7472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 741.499352][ T5760] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 741.669234][ T5760] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 741.692052][ T5760] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.760201][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.770147][ T5760] usb 3-1: Product: syz [ 741.770193][ T5760] usb 3-1: Manufacturer: syz [ 741.770211][ T5760] usb 3-1: SerialNumber: syz [ 741.807309][ T5760] pl2303 3-1:1.0: required endpoints missing [ 742.013071][ T5760] usb 3-1: USB disconnect, device number 35 [ 743.213084][ T5934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 744.302214][ T5934] (NULL device *): queue 0 connect admin queue failed (-111). [ 744.302267][ T5934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 744.302288][ T5934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 746.339932][ T5934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 746.397207][ T5934] (NULL device *): queue 0 connect admin queue failed (-111). [ 746.404915][ T5934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 746.413255][ T5934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 747.269156][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.275655][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.467377][ T67] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 748.584697][ T67] (NULL device *): queue 0 connect admin queue failed (-111). [ 748.584749][ T67] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 748.584783][ T67] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 748.712114][T13182] binder: 13180:13182 ioctl c0306201 0 returned -14 [ 750.675538][ T5937] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 750.958771][ T5937] (NULL device *): queue 0 connect admin queue failed (-111). [ 750.958817][ T5937] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 750.958850][ T5937] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 754.484200][ T38] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 756.406900][ T38] (NULL device *): queue 0 connect admin queue failed (-111). [ 756.406946][ T38] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 756.406980][ T38] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 758.468546][ T142] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 758.507346][ T142] (NULL device *): queue 0 connect admin queue failed (-111). [ 758.515107][ T142] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 758.515131][ T142] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 759.287564][ T2252] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 759.321624][T13117] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.321771][T13117] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.333908][T13117] bridge_slave_0: entered allmulticast mode [ 759.447955][ T2252] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 759.448008][T13117] bridge_slave_0: entered promiscuous mode [ 759.466298][ T2252] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 759.466341][ T2252] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.466374][ T2252] usb 4-1: config 0 has no interface number 0 [ 759.466423][ T2252] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 759.466447][ T2252] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.466491][ T2252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.536442][ T2252] usb 4-1: config 0 descriptor?? [ 759.557838][ T2252] ldusb 4-1:0.55: Interrupt in endpoint not found [ 759.836815][ T5760] usb 4-1: USB disconnect, device number 30 [ 759.876908][T13117] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.877037][T13117] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.878826][T13117] bridge_slave_1: entered allmulticast mode [ 759.906328][T13117] bridge_slave_1: entered promiscuous mode [ 760.007899][T13117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.027394][T13117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.594719][ T5932] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 760.684206][ T5932] (NULL device *): queue 0 connect admin queue failed (-111). [ 760.684255][ T5932] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 760.684301][ T5932] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 762.151919][T13117] team0: Port device team_slave_0 added [ 762.177934][T13117] team0: Port device team_slave_1 added [ 762.301575][T13117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.317707][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.317763][T13117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.451731][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2147'. [ 762.453376][T13262] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 762.453425][T13262] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 762.453454][T13262] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 762.627348][T13117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.634461][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.634493][T13117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.030241][ T114] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 763.625852][ T114] (NULL device *): queue 0 connect admin queue failed (-111). [ 763.625897][ T114] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 763.625919][ T114] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 765.707587][ T114] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 765.727388][ T114] (NULL device *): queue 0 connect admin queue failed (-111). [ 765.727430][ T114] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 765.727459][ T114] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 766.530115][T13117] hsr_slave_0: entered promiscuous mode [ 766.559216][T13117] hsr_slave_1: entered promiscuous mode [ 766.566017][T13117] debugfs: 'hsr0' already exists in 'hsr' [ 766.575230][T13117] Cannot create hsr debugfs directory [ 768.890123][ T5925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 769.602032][ T5925] (NULL device *): queue 0 connect admin queue failed (-111). [ 769.614184][ T5925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 769.626432][ T5925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 771.847705][ T67] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 771.847874][ T67] (NULL device *): queue 0 connect admin queue failed (-111). [ 771.847909][ T67] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 771.847930][ T67] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 773.053887][T13117] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 775.479907][T13009] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 775.807970][T13009] (NULL device *): queue 0 connect admin queue failed (-111). [ 775.808018][T13009] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 775.808051][T13009] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 775.840739][T13117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 775.849627][T13117] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 776.136244][T13117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 776.154662][T13117] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 776.236848][T13117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 776.249179][T13117] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 776.281720][T13117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 776.450171][ T30] audit: type=1800 audit(1786402643.791:29): pid=13335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2160" name="enable" dev="configfs" ino=41103 res=0 errno=0 [ 776.659019][T13117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.779061][T13117] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.841442][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.841563][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.895979][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.896105][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.036878][T13340] sg_write: data in/out 401408/1 bytes for SCSI command 0x0-- guessing data in; [ 777.036878][T13340] program syz.3.2159 not setting count and/or reply_len properly [ 777.225039][T13351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.830246][ T5940] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 777.852023][ T5940] (NULL device *): queue 0 connect admin queue failed (-111). [ 777.852069][ T5940] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 777.852103][ T5940] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 778.118969][T13344] Invalid ELF header magic: != ELF [ 779.928478][ T5937] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 782.917296][ T5937] (NULL device *): queue 0 connect admin queue failed (-111). [ 782.917341][ T5937] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 782.917404][ T5937] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 785.132830][T12923] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 785.246186][T12923] (NULL device *): queue 0 connect admin queue failed (-111). [ 785.246244][T12923] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 785.246266][T12923] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 787.267573][ T1151] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 787.283096][ T1151] (NULL device *): queue 0 connect admin queue failed (-111). [ 787.283138][ T1151] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 787.283159][ T1151] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 787.592173][T13401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.611932][T13401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.284152][T13414] syzkaller0: entered promiscuous mode [ 788.293450][T13414] syzkaller0: entered allmulticast mode [ 789.948294][ T3410] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 790.309595][ T3410] (NULL device *): queue 0 connect admin queue failed (-111). [ 790.309641][ T3410] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 790.309663][ T3410] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 793.020542][ T38] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 793.081398][ T38] (NULL device *): queue 0 connect admin queue failed (-111). [ 793.081446][ T38] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 793.081468][ T38] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 794.135247][ T30] audit: type=1800 audit(1786402661.471:30): pid=13427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2170" name="enable" dev="configfs" ino=41370 res=0 errno=0 [ 794.678110][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 794.693523][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 794.704667][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 794.734908][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 794.735657][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 795.108261][ T1166] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 795.109960][ T1166] (NULL device *): queue 0 connect admin queue failed (-111). [ 795.110002][ T1166] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 795.110023][ T1166] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 796.867307][ T52] Bluetooth: hci4: command tx timeout [ 798.789683][ T5934] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 798.825634][ T5934] (NULL device *): queue 0 connect admin queue failed (-111). [ 798.825682][ T5934] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 798.825715][ T5934] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 798.947292][ T52] Bluetooth: hci4: command tx timeout [ 801.041758][ T52] Bluetooth: hci4: command tx timeout [ 801.049397][ T1166] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 801.162507][ T1166] (NULL device *): queue 0 connect admin queue failed (-111). [ 801.162550][ T1166] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 801.162563][ T1166] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 801.678919][T13466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.777683][T13466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.502163][ T30] audit: type=1800 audit(1786402669.841:31): pid=13475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2181" name="enable" dev="configfs" ino=41558 res=0 errno=0 [ 803.107427][ T52] Bluetooth: hci4: command tx timeout [ 803.187803][ T5925] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 803.215733][ T5925] (NULL device *): queue 0 connect admin queue failed (-111). [ 803.223509][ T5925] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 803.233803][ T5925] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 803.294452][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 803.313868][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 803.323015][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 803.338208][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 803.376626][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 805.496887][ T3410] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 805.637414][ T52] Bluetooth: hci5: command tx timeout [ 805.723356][ T3410] (NULL device *): queue 0 connect admin queue failed (-111). [ 805.723403][ T3410] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 805.723424][ T3410] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 807.667216][ T52] Bluetooth: hci5: command tx timeout [ 808.231969][ T7472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 809.220078][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.220158][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.785941][ T52] Bluetooth: hci5: command tx timeout [ 810.147787][ T7472] (NULL device *): queue 0 connect admin queue failed (-111). [ 810.147861][ T7472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 810.147883][ T7472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 811.827204][ T52] Bluetooth: hci5: command tx timeout [ 812.613895][T13010] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 812.756387][T13010] (NULL device *): queue 0 connect admin queue failed (-111). [ 812.764355][T13010] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 812.772831][T13010] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 812.828096][T13533] sg_write: data in/out 401408/1 bytes for SCSI command 0x0-- guessing data in; [ 812.828096][T13533] program syz.4.2186 not setting count and/or reply_len properly [ 814.565224][T13396] syz_tun (unregistering): left allmulticast mode [ 814.787568][ T114] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 814.804163][ T114] (NULL device *): queue 0 connect admin queue failed (-111). [ 814.804195][ T114] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 814.804209][ T114] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 815.558319][ T2252] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 815.723358][T13433] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.723465][ T2252] usb 4-1: not running at top speed; connect to a high speed hub [ 815.723515][ T2252] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 815.754974][T13433] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.755207][T13433] bridge_slave_0: entered allmulticast mode [ 815.776650][ T2252] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 815.776717][ T2252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.818857][T13433] bridge_slave_0: entered promiscuous mode [ 815.839489][T13433] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.861227][T13433] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.861424][T13433] bridge_slave_1: entered allmulticast mode [ 815.881051][ T2252] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 815.893915][ T30] audit: type=1800 audit(1786402683.241:32): pid=13567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2192" name="enable" dev="configfs" ino=41823 res=0 errno=0 [ 815.917266][T13433] bridge_slave_1: entered promiscuous mode [ 815.953685][ T2252] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 816.195257][ T5724] usb 4-1: USB disconnect, device number 31 [ 816.253381][ T5724] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 816.282652][ T5724] garmin_gps 4-1:1.0: device disconnected [ 816.474911][T13433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.534381][T13433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.843555][T13433] team0: Port device team_slave_0 added [ 816.877706][ T142] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 816.894209][ T142] (NULL device *): queue 0 connect admin queue failed (-111). [ 816.894253][ T142] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 816.894286][ T142] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 816.953331][T13433] team0: Port device team_slave_1 added [ 818.614703][T13433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.614743][T13433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.614784][T13433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.334368][T12923] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 819.732915][T12923] (NULL device *): queue 0 connect admin queue failed (-111). [ 819.732965][T12923] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 819.733000][T12923] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 819.981117][T13433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.981156][T13433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.981186][T13433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.024048][ T5938] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 822.346347][ T5938] (NULL device *): queue 0 connect admin queue failed (-111). [ 822.358961][ T5938] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 822.405185][ T5938] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 824.710980][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 827.065691][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 827.074914][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 827.074963][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 828.171662][T13433] hsr_slave_0: entered promiscuous mode [ 828.195563][T13433] hsr_slave_1: entered promiscuous mode [ 828.213061][T13433] debugfs: 'hsr0' already exists in 'hsr' [ 828.213104][T13433] Cannot create hsr debugfs directory [ 828.379500][T13628] sg_write: data in/out 401408/1 bytes for SCSI command 0x0-- guessing data in; [ 828.379500][T13628] program syz.4.2201 not setting count and/or reply_len properly [ 828.768808][ T30] audit: type=1800 audit(1786402696.111:33): pid=13634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2202" name="enable" dev="configfs" ino=42081 res=0 errno=0 [ 829.108082][ T7472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 829.122541][ T7472] (NULL device *): queue 0 connect admin queue failed (-111). [ 829.122582][ T7472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 829.122603][ T7472] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 829.918246][T13640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.927424][T13640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.976234][T13483] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.984432][T13483] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.992996][T13483] bridge_slave_0: entered allmulticast mode [ 831.010647][T13483] bridge_slave_0: entered promiscuous mode [ 831.034562][T13483] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.045710][T13483] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.054943][T13483] bridge_slave_1: entered allmulticast mode [ 831.073381][T13483] bridge_slave_1: entered promiscuous mode [ 831.206663][ T7471] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 831.229375][ T7471] (NULL device *): queue 0 connect admin queue failed (-111). [ 831.229418][ T7471] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 831.229449][ T7471] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 832.331417][T13483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.249909][ T7472] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 834.275640][ T7472] (NULL device *): queue 0 connect admin queue failed (-111). [ 834.275690][ T7472] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 834.275723][ T7472] nvme nvme0: NVME-FC{0}: Max reconnect attempts (300) reached. [ 834.461699][ T7472] nvme nvme0: Removing ctrl: NQN "n" [ 834.604145][T13483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.304526][T13483] team0: Port device team_slave_0 added [ 837.341716][T13483] team0: Port device team_slave_1 added [ 838.812490][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 838.830670][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 838.846488][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 838.860009][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 838.868260][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 839.862944][T13483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.862986][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.863028][T13483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.929443][T13483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.929481][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.929524][T13483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.947331][ T5628] Bluetooth: hci0: command tx timeout [ 841.903285][ T5614] syz_tun (unregistering): left allmulticast mode [ 843.029058][ T5628] Bluetooth: hci0: command tx timeout [ 843.069375][T13483] hsr_slave_0: entered promiscuous mode [ 843.075514][T13483] hsr_slave_1: entered promiscuous mode [ 843.078475][T13483] debugfs: 'hsr0' already exists in 'hsr' [ 843.078503][T13483] Cannot create hsr debugfs directory [ 845.104497][T12921] bridge_slave_1: left allmulticast mode [ 845.104587][T12921] bridge_slave_1: left promiscuous mode [ 845.108040][T12921] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.129877][ T5628] Bluetooth: hci0: command tx timeout [ 845.266812][T12921] bridge_slave_0: left allmulticast mode [ 845.266859][T12921] bridge_slave_0: left promiscuous mode [ 845.267132][T12921] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.461573][ T5628] Bluetooth: hci0: command tx timeout [ 855.695031][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 855.714459][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 855.725286][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 855.739539][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 855.761406][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 857.348622][T12921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.384031][T12921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.405190][T12921] bond0 (unregistering): Released all slaves [ 857.827832][ T5628] Bluetooth: hci1: command tx timeout [ 858.246471][T12921] hsr_slave_0: left promiscuous mode [ 858.359855][T12921] hsr_slave_1: left promiscuous mode [ 858.360875][T12921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.450822][T12921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.720452][ T30] audit: type=1800 audit(1786402727.061:34): pid=13787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2226" name="enable" dev="configfs" ino=42742 res=0 errno=0 [ 859.897019][T12921] team0 (unregistering): Port device team_slave_1 removed [ 859.912773][ T52] Bluetooth: hci1: command tx timeout [ 859.980515][T12921] team0 (unregistering): Port device team_slave_0 removed [ 860.255298][T13791] input: syz0 as /devices/virtual/input/input27 [ 860.620915][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 861.060135][T13799] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 861.454657][T13799] binder: 13794:13799 ioctl c0306201 200000000040 returned -22 [ 862.001197][ T5628] Bluetooth: hci1: command tx timeout [ 864.068785][ T5628] Bluetooth: hci1: command tx timeout [ 864.321356][T13795] ublk0: read batch cmd buffer failed [ 864.321489][T13795] ublk0: read batch cmd buffer failed [ 864.942394][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2229'. [ 865.223134][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 865.241212][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 865.252944][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 865.268367][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 865.276330][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 865.665135][T13812] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 865.665213][T13812] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 865.665254][T13812] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 867.347204][ T5628] Bluetooth: hci6: command tx timeout [ 869.430732][ T5628] Bluetooth: hci6: command tx timeout [ 870.167730][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.174177][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.507708][ T5628] Bluetooth: hci6: command tx timeout [ 871.624018][T13686] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.624185][T13686] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.624373][T13686] bridge_slave_0: entered allmulticast mode [ 871.649159][T13686] bridge_slave_0: entered promiscuous mode [ 871.694557][T13686] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.694725][T13686] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.694880][T13686] bridge_slave_1: entered allmulticast mode [ 871.718101][T13686] bridge_slave_1: entered promiscuous mode [ 872.220408][T13686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.238431][T13686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.463674][T13686] team0: Port device team_slave_0 added [ 873.503422][T13686] team0: Port device team_slave_1 added [ 873.514900][T13747] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.515022][T13747] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.515202][T13747] bridge_slave_0: entered allmulticast mode [ 873.560569][T13747] bridge_slave_0: entered promiscuous mode [ 873.588077][ T5628] Bluetooth: hci6: command tx timeout [ 873.959893][T13898] Driver unsupported XDP return value 0 on prog (id 152) dev N/A, expect packet loss! [ 874.165753][T13686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.165787][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.214027][T13686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.215562][T13747] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.215665][T13747] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.215839][T13747] bridge_slave_1: entered allmulticast mode [ 874.259508][T13747] bridge_slave_1: entered promiscuous mode [ 874.303722][T13686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.313247][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.344060][T13686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.626976][T13747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.485560][T13747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.005271][T13686] hsr_slave_0: entered promiscuous mode [ 880.015714][T13686] hsr_slave_1: entered promiscuous mode [ 880.026554][T13686] debugfs: 'hsr0' already exists in 'hsr' [ 880.026610][T13686] Cannot create hsr debugfs directory [ 880.076221][T13747] team0: Port device team_slave_0 added [ 880.136447][T13747] team0: Port device team_slave_1 added [ 880.264390][T13747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.264426][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.264466][T13747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.844723][T13747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.844759][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.844799][T13747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.721208][T13930] binder: 13929:13930 ioctl c0306201 200000000640 returned -22 [ 882.272399][ T3344] bridge_slave_1: left allmulticast mode [ 882.278753][ T3344] bridge_slave_1: left promiscuous mode [ 882.285100][ T3344] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.469202][ T3344] bridge_slave_0: left allmulticast mode [ 882.475005][ T3344] bridge_slave_0: left promiscuous mode [ 882.545209][ T3344] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.892370][ T3344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.975223][ T3344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.025177][ T3344] bond0 (unregistering): Released all slaves [ 883.121190][T13747] hsr_slave_0: entered promiscuous mode [ 883.129647][T13747] hsr_slave_1: entered promiscuous mode [ 883.136430][T13747] debugfs: 'hsr0' already exists in 'hsr' [ 883.143832][T13747] Cannot create hsr debugfs directory [ 883.679569][ T3344] hsr_slave_0: left promiscuous mode [ 883.695070][ T3344] hsr_slave_1: left promiscuous mode [ 883.696018][ T3344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.713182][ T3344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.215603][ T3344] team0 (unregistering): Port device team_slave_1 removed [ 884.293830][ T3344] team0 (unregistering): Port device team_slave_0 removed [ 884.531938][T13809] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.532010][T13809] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.532129][T13809] bridge_slave_0: entered allmulticast mode [ 884.533091][T13809] bridge_slave_0: entered promiscuous mode [ 884.642133][T13809] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.642332][T13809] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.642502][T13809] bridge_slave_1: entered allmulticast mode [ 884.669796][T13809] bridge_slave_1: entered promiscuous mode [ 884.828008][T13809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.873611][T13809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.194128][T13809] team0: Port device team_slave_0 added [ 885.218832][T13809] team0: Port device team_slave_1 added [ 885.261569][T13686] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 885.345886][T13686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 885.375187][T13686] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 885.421170][T13686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 885.422123][T13809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.422157][T13809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.422186][T13809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.424663][T13809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.424682][T13809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.424727][T13809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.944115][T13686] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 885.969230][T13686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 886.492137][T13686] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 886.532436][T13686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 887.251983][T13809] hsr_slave_0: entered promiscuous mode [ 887.275062][T13809] hsr_slave_1: entered promiscuous mode [ 887.282173][T13809] debugfs: 'hsr0' already exists in 'hsr' [ 887.289272][T13809] Cannot create hsr debugfs directory [ 887.364091][T13969] syzkaller0: entered promiscuous mode [ 887.372605][T13969] syzkaller0: entered allmulticast mode [ 887.518700][ T3344] bridge_slave_1: left allmulticast mode [ 887.518760][ T3344] bridge_slave_1: left promiscuous mode [ 887.519061][ T3344] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.546683][ T3344] bridge_slave_0: left allmulticast mode [ 887.553530][ T3344] bridge_slave_0: left promiscuous mode [ 887.559900][ T3344] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.803446][ T3344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.828557][ T3344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.860378][ T3344] bond0 (unregistering): Released all slaves [ 895.185031][T13121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 895.197371][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 895.214874][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 895.223671][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 895.237617][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 897.360748][ T52] Bluetooth: hci4: command tx timeout [ 899.438671][ T52] Bluetooth: hci4: command tx timeout [ 900.944531][T13747] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 900.987442][T13747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 901.042392][ T3344] hsr_slave_0: left promiscuous mode [ 901.051709][ T3344] hsr_slave_1: left promiscuous mode [ 901.052608][ T3344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.059949][ T3344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.508633][ T52] Bluetooth: hci4: command tx timeout [ 901.750561][ T3344] team0 (unregistering): Port device team_slave_1 removed [ 901.823776][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 901.845726][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 901.859853][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 901.873519][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 901.888106][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 901.972480][ T3344] team0 (unregistering): Port device team_slave_0 removed [ 902.270584][T13747] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 902.296608][T13747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 902.313154][T13747] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 902.338704][T13747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 902.586013][T13747] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 902.605079][T13747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 903.597511][ T5628] Bluetooth: hci4: command tx timeout [ 903.950107][T13960] syz_tun (unregistering): left allmulticast mode [ 903.999222][ T5628] Bluetooth: hci0: command tx timeout [ 904.167027][T13809] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 904.194588][T13809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 904.289441][T13809] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 904.304140][T13809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 904.331758][T13809] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 904.352439][T13809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 904.370793][T13809] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 904.394322][T13809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 904.516831][T13747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.859027][T14007] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.873848][T14007] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.874059][T14007] bridge_slave_0: entered allmulticast mode [ 904.938003][T14007] bridge_slave_0: entered promiscuous mode [ 904.958072][T14007] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.958192][T14007] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.958378][T14007] bridge_slave_1: entered allmulticast mode [ 904.988460][T14007] bridge_slave_1: entered promiscuous mode [ 905.018144][T13747] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.162452][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.162574][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.212492][T14007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.351995][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.352118][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.373381][T14007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.555944][T14007] team0: Port device team_slave_0 added [ 905.569766][T14007] team0: Port device team_slave_1 added [ 905.655401][T14007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.662872][T14007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.690093][T14007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.705072][T14007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.713900][T14007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.740799][T14007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.803426][T14007] hsr_slave_0: entered promiscuous mode [ 905.810514][T14007] hsr_slave_1: entered promiscuous mode [ 905.817673][T14007] debugfs: 'hsr0' already exists in 'hsr' [ 905.823632][T14007] Cannot create hsr debugfs directory [ 905.840541][T13997] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.840658][T13997] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.840816][T13997] bridge_slave_0: entered allmulticast mode [ 905.867584][T13997] bridge_slave_0: entered promiscuous mode [ 905.911909][T13997] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.912073][T13997] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.912250][T13997] bridge_slave_1: entered allmulticast mode [ 905.937176][T13997] bridge_slave_1: entered promiscuous mode [ 906.082913][ T5628] Bluetooth: hci0: command tx timeout [ 906.130616][T13997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.144324][T13997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.231368][T13997] team0: Port device team_slave_0 added [ 906.343508][T13997] team0: Port device team_slave_1 added [ 906.435822][T13997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.443942][T13997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.470913][T13997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.515231][T13997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.523191][T13997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.550028][T13997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.805496][T13997] hsr_slave_0: entered promiscuous mode [ 906.821635][T13997] hsr_slave_1: entered promiscuous mode [ 906.832117][T13997] debugfs: 'hsr0' already exists in 'hsr' [ 906.849220][T13997] Cannot create hsr debugfs directory [ 906.947490][T13809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.190811][T13809] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.743033][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.743154][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.768749][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.768872][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.147468][ T5628] Bluetooth: hci0: command tx timeout [ 909.343071][T14007] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 909.416988][T14007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 909.435611][T14007] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 909.563808][T14007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.573803][T14007] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 909.601437][T14007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.755875][T13809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 909.795544][T14007] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 909.953293][T14007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 910.253327][ T5628] Bluetooth: hci0: command tx timeout [ 910.316376][T13747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.257690][T14007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.392190][T14007] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.439818][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.439939][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.482522][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.482644][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.122957][T13747] veth0_vlan: entered promiscuous mode [ 912.178804][T13747] veth1_vlan: entered promiscuous mode [ 912.520461][T13809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.675214][T14107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.685845][T14107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.897410][T13747] veth0_macvtap: entered promiscuous mode [ 912.910352][T13747] veth1_macvtap: entered promiscuous mode [ 913.156360][T13747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.256584][T13747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.468396][ T5934] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.477812][ T5934] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.477861][ T5934] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.477895][ T5934] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.692462][T14118] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 913.692491][T14118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 913.711397][T14118] vhci_hcd vhci_hcd.0: Device attached [ 914.075620][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.075658][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.228128][T13738] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 914.345231][ T5938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.345269][ T5938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.496561][T14007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.864674][T14119] vhci_hcd: connection reset by peer [ 914.872426][ T38] vhci_hcd vhci_hcd.0: stop threads [ 914.872452][ T38] vhci_hcd vhci_hcd.0: release socket [ 914.872494][ T38] vhci_hcd vhci_hcd.0: disconnect device [ 914.920952][T13809] veth0_vlan: entered promiscuous mode [ 916.141163][T13809] veth1_vlan: entered promiscuous mode [ 917.333571][T13809] veth0_macvtap: entered promiscuous mode [ 917.361589][T13809] veth1_macvtap: entered promiscuous mode [ 917.418220][T13809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.477656][T13809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.617860][ T1174] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.617943][ T1174] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.617992][ T1174] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.618027][ T1174] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.209560][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.209600][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.915673][T13738] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 924.731824][T14007] veth0_vlan: entered promiscuous mode [ 924.769913][T14007] veth1_vlan: entered promiscuous mode [ 924.846734][T14007] veth0_macvtap: entered promiscuous mode [ 924.879971][T14007] veth1_macvtap: entered promiscuous mode [ 924.933365][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 924.944155][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 924.957556][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 924.986903][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 924.998802][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 925.091016][T14007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.149154][T14007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.207812][ T5937] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.218763][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.220638][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.220676][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.112993][ T52] Bluetooth: hci3: command tx timeout [ 929.191247][ T52] Bluetooth: hci3: command tx timeout [ 930.043248][T14172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.052411][T14172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.156398][ T3344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.164522][ T3344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.266147][ T7472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.274306][ T7472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.664601][ T52] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 930.954448][T14183] kAFS: No cell specified [ 931.267442][ T52] Bluetooth: hci3: command tx timeout [ 931.590521][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.596953][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.347450][ T52] Bluetooth: hci3: command tx timeout [ 936.811135][T12921] bridge_slave_1: left allmulticast mode [ 936.811180][T12921] bridge_slave_1: left promiscuous mode [ 936.811429][T12921] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.862072][T12921] bridge_slave_0: left allmulticast mode [ 936.872068][T12921] bridge_slave_0: left promiscuous mode [ 936.890781][T12921] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.391828][T12921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.445965][T12921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.482291][T12921] bond0 (unregistering): Released all slaves [ 938.676051][T14203] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input28 [ 940.860952][T12921] hsr_slave_0: left promiscuous mode [ 940.876048][T12921] hsr_slave_1: left promiscuous mode [ 940.888406][T12921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.050787][T12921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.577270][T13738] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 942.734790][T13738] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 942.752167][T13738] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 942.752220][T13738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.752243][T13738] usb 6-1: config 0 has no interface number 0 [ 942.752284][T13738] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 942.752307][T13738] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.752351][T13738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.823740][T13738] usb 6-1: config 0 descriptor?? [ 942.833416][T12921] team0 (unregistering): Port device team_slave_1 removed [ 942.866720][T13738] ldusb 6-1:0.55: Interrupt in endpoint not found [ 942.948235][T12921] team0 (unregistering): Port device team_slave_0 removed [ 943.567392][ T5724] usb 6-1: USB disconnect, device number 2 [ 944.494975][T14248] netlink: 'syz.5.2287': attribute type 10 has an invalid length. [ 954.774424][T14248] team0: Port device dummy0 added [ 954.830600][T13997] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 954.951414][T13997] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 954.960883][T14153] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.960996][T14153] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.961159][T14153] bridge_slave_0: entered allmulticast mode [ 954.985626][T14153] bridge_slave_0: entered promiscuous mode [ 955.002628][T14153] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.014248][T14153] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.024199][T14153] bridge_slave_1: entered allmulticast mode [ 955.044380][T14153] bridge_slave_1: entered promiscuous mode [ 955.345999][T14153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.364119][T14153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.456924][T14153] team0: Port device team_slave_0 added [ 955.472614][T14153] team0: Port device team_slave_1 added [ 955.622710][T14153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.635895][T14153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.677166][T14153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.692066][T14153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.699598][T14153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.729725][T14153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.067113][T14153] hsr_slave_0: entered promiscuous mode [ 956.077792][T14153] hsr_slave_1: entered promiscuous mode [ 956.088984][T14153] debugfs: 'hsr0' already exists in 'hsr' [ 956.089022][T14153] Cannot create hsr debugfs directory [ 956.327859][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 956.343926][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 956.368176][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 956.383622][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 956.392714][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 957.294311][T14282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.309518][T14282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.999095][T14153] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.550121][ T5628] Bluetooth: hci5: command tx timeout [ 960.629392][ T5628] Bluetooth: hci5: command tx timeout [ 962.332871][T14153] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.709171][ T5628] Bluetooth: hci5: command tx timeout [ 963.586847][T14269] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.598716][T14269] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.606603][T14269] bridge_slave_0: entered allmulticast mode [ 963.620853][T14269] bridge_slave_0: entered promiscuous mode [ 963.632102][T14269] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.642211][T14269] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.651428][T14269] bridge_slave_1: entered allmulticast mode [ 963.662731][T14269] bridge_slave_1: entered promiscuous mode [ 963.723567][T14269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.738077][T14269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.791527][T14269] team0: Port device team_slave_0 added [ 963.800748][T14269] team0: Port device team_slave_1 added [ 963.842529][T14269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.849877][T14269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.881024][T14269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.899325][T14269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.908622][T14269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.936605][T14269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.994626][T14269] hsr_slave_0: entered promiscuous mode [ 964.001542][T14269] hsr_slave_1: entered promiscuous mode [ 964.008475][T14269] debugfs: 'hsr0' already exists in 'hsr' [ 964.014545][T14269] Cannot create hsr debugfs directory [ 964.787220][ T5628] Bluetooth: hci5: command tx timeout [ 966.253487][T14153] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.407220][T13738] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 968.722737][T13738] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 973.332169][T13738] usb 9-1: unable to read config index 0 descriptor/all [ 973.332239][T13738] usb 9-1: can't read configurations, error -71 [ 973.583076][T14153] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.664259][T14153] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 977.781291][T14153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 977.792249][T14153] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 977.812471][T14153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 977.828806][T14153] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 977.884012][T14343] smpboot: CPU 1 is now offline [ 977.895541][T14153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 980.983564][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 994.047897][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.069638][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1025.854248][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1054.595305][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.606247][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1068.089817][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 1116.413496][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.426917][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1137.998028][ T31] INFO: task kworker/u8:8:1151 blocked for more than 144 seconds. [ 1138.016759][ T31] Tainted: G L syzkaller #0 [ 1138.026478][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1138.035247][ T31] task:kworker/u8:8 state:D stack:22552 pid:1151 tgid:1151 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1138.053010][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 1138.071280][ T31] Call Trace: [ 1138.081187][ T31] [ 1138.090671][ T31] __schedule+0x1b2a/0x59a0 [ 1138.100061][ T31] ? __pfx___schedule+0x10/0x10 [ 1138.109282][ T31] ? schedule+0x90/0x2b0 [ 1138.119698][ T31] schedule+0x164/0x2b0 [ 1138.129953][ T31] schedule_preempt_disabled+0x13/0x30 [ 1138.139284][ T31] __mutex_lock+0x7bf/0x1550 [ 1138.148503][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1138.157897][ T31] ? addrconf_dad_work+0x116/0x15c0 [ 1138.167176][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1138.185669][ T31] ? rcu_is_watching+0x15/0xb0 [ 1138.195011][ T31] addrconf_dad_work+0x116/0x15c0 [ 1138.204285][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1138.214640][ T31] ? rcu_is_watching+0x15/0xb0 [ 1138.225296][ T31] ? process_scheduled_works+0x97e/0x1630 [ 1138.234660][ T31] process_scheduled_works+0xc4e/0x1630 [ 1138.244629][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1138.253963][ T31] ? assign_work+0x3cf/0x5d0 [ 1138.263623][ T31] worker_thread+0xa47/0xfb0 [ 1138.273278][ T31] kthread+0x388/0x470 [ 1138.282649][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1138.291851][ T31] ? __pfx_kthread+0x10/0x10 [ 1138.301236][ T31] ret_from_fork+0x514/0xb70 [ 1138.310534][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1138.320844][ T31] ? __switch_to+0xc89/0x1420 [ 1138.331263][ T31] ? __pfx_kthread+0x10/0x10 [ 1138.340474][ T31] ret_from_fork_asm+0x1a/0x30 [ 1138.349796][ T31] [ 1138.359054][ T31] INFO: task kworker/0:4:5723 blocked for more than 144 seconds. [ 1138.367852][ T31] Tainted: G L syzkaller #0 [ 1138.385238][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1138.393983][ T31] task:kworker/0:4 state:D stack:22648 pid:5723 tgid:5723 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1138.411682][ T31] Workqueue: events netdev_work_proc [ 1138.431668][ T31] Call Trace: [ 1138.440805][ T31] [ 1138.450006][ T31] __schedule+0x1b2a/0x59a0 [ 1138.459274][ T31] ? __pfx___schedule+0x10/0x10 [ 1138.468397][ T31] ? schedule+0x90/0x2b0 [ 1138.477545][ T31] schedule+0x164/0x2b0 [ 1138.495824][ T31] schedule_preempt_disabled+0x13/0x30 [ 1138.504965][ T31] __mutex_lock+0x7bf/0x1550 [ 1138.514263][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1138.524526][ T31] ? netdev_work_proc+0x6f/0x770 [ 1138.535402][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1138.544731][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1138.554020][ T31] netdev_work_proc+0x6f/0x770 [ 1138.563479][ T31] ? __pfx_netdev_work_proc+0x10/0x10 [ 1138.572598][ T31] ? rcu_is_watching+0x15/0xb0 [ 1138.582228][ T31] ? process_scheduled_works+0x97e/0x1630 [ 1138.591392][ T31] process_scheduled_works+0xc4e/0x1630 [ 1138.600565][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1138.609692][ T31] ? assign_work+0x3cf/0x5d0 [ 1138.619130][ T31] worker_thread+0xa47/0xfb0 [ 1138.629764][ T31] kthread+0x388/0x470 [ 1138.639724][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1138.649363][ T31] ? __pfx_kthread+0x10/0x10 [ 1138.658674][ T31] ret_from_fork+0x514/0xb70 [ 1138.667852][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1138.677183][ T31] ? __switch_to+0xc89/0x1420 [ 1138.695947][ T31] ? __pfx_kthread+0x10/0x10 [ 1138.705059][ T31] ret_from_fork_asm+0x1a/0x30 [ 1138.714312][ T31] [ 1138.723835][ T31] INFO: task syz-executor:14153 blocked for more than 144 seconds. [ 1138.733664][ T31] Tainted: G L syzkaller #0 [ 1138.743442][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1138.752298][ T31] task:syz-executor state:D stack:22704 pid:14153 tgid:14153 ppid:14149 task_flags:0x400140 flags:0x00080000 [ 1138.770026][ T31] Call Trace: [ 1138.779276][ T31] [ 1138.788455][ T31] __schedule+0x1b2a/0x59a0 [ 1138.797987][ T31] ? __pfx___schedule+0x10/0x10 [ 1138.807732][ T31] ? schedule+0x90/0x2b0 [ 1138.817577][ T31] schedule+0x164/0x2b0 [ 1138.828204][ T31] schedule_preempt_disabled+0x13/0x30 [ 1138.839141][ T31] __mutex_lock+0x7bf/0x1550 [ 1138.848468][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1138.858261][ T31] ? rtnl_newlink+0xc10/0x1c30 [ 1138.868114][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1138.877393][ T31] ? ns_capable+0x89/0xe0 [ 1138.896182][ T31] ? rtnl_nets_add+0x16c/0x300 [ 1138.905598][ T31] ? refcount_inc+0x46/0x70 [ 1138.915423][ T31] rtnl_newlink+0xc10/0x1c30 [ 1138.925160][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1138.936723][ T31] ? __lock_acquire+0x6df/0x2e50 [ 1138.947296][ T31] ? __lock_acquire+0x6df/0x2e50 [ 1138.966104][ T31] ? __lock_acquire+0x6df/0x2e50 [ 1138.975245][ T31] ? lock_acquire+0x115/0x350 [ 1138.984805][ T31] ? lock_acquire+0x115/0x350 [ 1138.994033][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1139.003255][ T31] ? __lock_acquire+0x6df/0x2e50 [ 1139.012861][ T31] ? kernel_text_address+0xa5/0xe0 [ 1139.022001][ T31] ? __kernel_text_address+0xd/0x30 [ 1139.031217][ T31] ? unwind_get_return_address+0x4d/0x90 [ 1139.041434][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1139.051641][ T31] ? arch_stack_walk+0xfb/0x150 [ 1139.061397][ T31] ? lock_acquire+0x115/0x350 [ 1139.070711][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1139.080029][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1139.089226][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 1139.098672][ T31] ? netlink_sendmsg+0x5d4/0xb40 [ 1139.107999][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1139.117214][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1139.136451][ T31] ? __lock_acquire+0x6df/0x2e50 [ 1139.146707][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1139.155833][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1139.165014][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1139.174122][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1139.183380][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1139.192542][ T31] netlink_unicast+0x7bb/0x940 [ 1139.201702][ T31] netlink_sendmsg+0x813/0xb40 [ 1139.210939][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.220156][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1139.229354][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.239696][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1139.249845][ T31] __sys_sendto+0x408/0x5a0 [ 1139.259099][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1139.268285][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1139.277932][ T31] ? fput_close_sync+0x11f/0x240 [ 1139.287509][ T31] ? kmem_cache_free+0x46d/0x650 [ 1139.305883][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1139.315057][ T31] __x64_sys_sendto+0xde/0x100 [ 1139.324193][ T31] do_syscall_64+0x166/0x510 [ 1139.333355][ T31] ? trace_irq_disable+0x3b/0x140 [ 1139.343610][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.353717][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1139.362983][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.372156][ T31] RIP: 0033:0x7efea9d5e90e [ 1140.719166][ T31] RSP: 002b:00007ffc79068218 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1140.719215][ T31] RAX: ffffffffffffffda RBX: 000055557dbf2500 RCX: 00007efea9d5e90e [ 1140.719223][ T31] RDX: 0000000000000030 RSI: 00007efeaab53610 RDI: 0000000000000006 [ 1140.719230][ T31] RBP: 0000000000000001 R08: 00007ffc79068294 R09: 000000000000000c [ 1140.719236][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1140.719243][ T31] R13: 0000000000000000 R14: 00007efeaab53610 R15: 0000000000000000 [ 1140.719261][ T31] [ 1140.719281][ T31] [ 1140.719281][ T31] Showing all locks held in the system: [ 1140.719290][ T31] locks held by kthreadd/2: 1, last CPU#0: [ 1140.719400][ T31] #0: ffffffff8eca4870 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1140.719503][ T31] locks held by kworker/u8:0/12: 3, last CPU#0: [ 1140.719511][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.719541][ T31] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.719567][ T31] #2: ffff888055d307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1140.719661][ T31] locks held by pr/ttyS0/16: 1, last CPU#0: [ 1140.719669][ T31] #0: ffffffff8ea363f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1140.719696][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1140.719704][ T31] #0: ffffffff8eb5c820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1140.719743][ T31] locks held by kworker/u8:2/38: 3, last CPU#0: [ 1140.719750][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.719778][ T31] #1: ffffc90000ae7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.719805][ T31] #2: ffff8880567a07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1140.719832][ T31] locks held by kworker/u8:3/44: 3, last CPU#0: [ 1140.719839][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.719866][ T31] #1: ffffc90000b47c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.719893][ T31] #2: ffff8880556907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1140.719921][ T31] locks held by kworker/u9:0/52: 5, on CPU#0: [ 1140.719928][ T31] #0: ffff88805544f940 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.719954][ T31] #1: ffffc90000bc7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.719987][ T31] #2: ffff888055c1cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1140.720068][ T31] #3: ffff888055c1c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1140.720094][ T31] #4: ffffffff901c5040 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1140.720149][ T31] locks held by kworker/u8:4/67: 2, last CPU#0: [ 1140.720157][ T31] #0: ffff8880346de940 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720186][ T31] #1: ffffc9000202fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720212][ T31] locks held by kswapd0/86: 1, last CPU#0: [ 1140.720219][ T31] #0: ffffffff8ec88800 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa08/0x32c0 [ 1140.720257][ T31] locks held by kworker/u8:5/114: 4, last CPU#0: [ 1140.720264][ T31] #0: ffff888029bc9940 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720293][ T31] #1: ffffc90002677c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720319][ T31] #2: ffff88807f2e1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1140.720391][ T31] #3: ffff88807719b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1140.720421][ T31] locks held by kworker/u8:6/142: 2, last CPU#0: [ 1140.720428][ T31] #0: ffff88803360a940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720454][ T31] #1: ffffc90002e37c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720488][ T31] locks held by kworker/u8:8/1151: 3, on CPU#0: [ 1140.720495][ T31] #0: ffff88803300c140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720521][ T31] #1: ffffc90004e1fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720547][ T31] #2: ffffffff9003cb00 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1140.720576][ T31] locks held by kworker/u8:9/1166: 4, last CPU#0: [ 1140.720584][ T31] #0: ffff888056792140 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720613][ T31] #1: ffffc9000512fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720639][ T31] #2: ffff88805bd31440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1140.720667][ T31] #3: ffff88805a411700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1140.720694][ T31] locks held by kworker/u8:10/1174: 3, last CPU#0: [ 1140.720702][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720728][ T31] #1: ffffc9000510fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720753][ T31] #2: ffff888070eb07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1140.720780][ T31] locks held by kworker/0:2/1222: 2, last CPU#0: [ 1140.720787][ T31] #0: ffff88801b02dd40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720813][ T31] #1: ffffc900051afc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720840][ T31] locks held by kworker/0:3/2252: 2, last CPU#0: [ 1140.720847][ T31] #0: ffffffff8eca4870 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1140.720872][ T31] #1: ffffffff8eb5c820 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1140.720909][ T31] locks held by kworker/u8:11/3344: 4, on CPU#0: [ 1140.720916][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720941][ T31] #1: ffffc9000df07c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.720967][ T31] #2: ffff888072d707a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1140.720999][ T31] #3: ffffffff8eb62be8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1140.721026][ T31] locks held by kworker/u8:12/3410: 4, last CPU#0: [ 1140.721034][ T31] #0: ffff88807fedf940 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.721060][ T31] #1: ffffc9000de67c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.721086][ T31] #2: ffff88807e5d9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1140.721114][ T31] #3: ffff88823beb49c8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1140.721143][ T31] locks held by klogd/4975: 1, last CPU#0: [ 1140.721150][ T31] #0: ffffffff8eb5c820 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 1140.721206][ T31] locks held by udevd/4986: 2, last CPU#0: [ 1140.721214][ T31] #0: ffffffff8f2e40f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 1140.721268][ T31] #1: ffffffff8eca4870 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1140.721294][ T31] locks held by dhcpcd/5280: 2, last CPU#0: [ 1140.721301][ T31] #0: ffffffff8f2e40f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 1140.721352][ T31] #1: ffffffff8eca4870 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1140.721378][ T31] locks held by dhcpcd/5281: 1, last CPU#0: [ 1140.721385][ T31] #0: ffffffff8eca4870 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1140.721410][ T31] locks held by crond/5355: 2, last CPU#0: [ 1140.721416][ T31] #0: ffffffff8eca4870 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1140.721441][ T31] #1: ffffffff8eb5c820 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1140.721466][ T31] locks held by getty/5373: 2, on CPU#1: [ 1140.721473][ T31] #0: ffff888035b150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1140.721544][ T31] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1140.721571][ T31] locks held by syz-executor/5603: 1, last CPU#0: [ 1140.721578][ T31] #0: ffffffff8eca4870 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1140.721604][ T31] locks held by kworker/u9:4/5628: 4, on CPU#0: [ 1140.721611][ T31] #0: ffff88806873a140 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.721637][ T31] #1: ffffc900042c7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.721663][ T31] #2: ffff888057808ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1140.721689][ T31] #3: ffff8880578080b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1140.721718][ T31] locks held by kworker/0:4/5723: 3, on CPU#0: [ 1140.721725][ T31] #0: ffff88801b02f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.721750][ T31] #1: ffffc900045afc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.721775][ T31] #2: ffffffff9003cb00 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 1140.721802][ T31] locks held by kworker/0:5/5724: 3, last CPU#0: [ 1140.721809][ T31] #0: ffff8880782cad40 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.721837][ T31] #1: ffffc900045bfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.721870][ T31] #2: ffff88805a410330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 1140.721901][ T31] locks held by kworker/0:7/5760: 4, last CPU#0: [ 1140.721908][ T31] #0: ffff888056e3c140 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.721937][ T31] #1: ffffc9000478fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.721969][ T31] #2: ffff88804c99d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 1140.722004][ T31] #3: ffff88804e18a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 1140.722033][ T31] locks held by kworker/u8:13/5925: 3, last CPU#0: [ 1140.722040][ T31] #0: ffff88807f4ae140 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722067][ T31] #1: ffffc90004f0fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722093][ T31] #2: ffff88804c99d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1140.722122][ T31] locks held by kworker/u8:14/5927: 3, last CPU#0: [ 1140.722129][ T31] #0: ffff88807e430940 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722157][ T31] #1: ffffc90004eefc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722183][ T31] #2: ffff8880315918e0 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 1140.722238][ T31] locks held by kworker/u8:16/5932: 2, last CPU#0: [ 1140.722245][ T31] #0: ffff888029bc9140 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722273][ T31] #1: ffffc90004f6fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722299][ T31] locks held by kworker/u8:17/5934: 3, last CPU#0: [ 1140.722306][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722332][ T31] #1: ffffc90004f8fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722357][ T31] #2: ffff8880565a07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1140.722384][ T31] locks held by kworker/u8:18/5937: 3, last CPU#0: [ 1140.722391][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722417][ T31] #1: ffffc90004ecfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722443][ T31] #2: ffff888055d207a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1140.722469][ T31] locks held by kworker/u8:19/5938: 4, last CPU#0: [ 1140.722478][ T31] #0: ffff888055014140 ((wq_completion)wg-kex-wg1#15){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722507][ T31] #1: ffffc90004d3fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722533][ T31] #2: ffff88807e335440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1140.722561][ T31] #3: ffff88802646c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1140.722589][ T31] locks held by kworker/u8:21/5940: 3, last CPU#0: [ 1140.722596][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722622][ T31] #1: ffffc90004d6fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722647][ T31] #2: ffff8880559507a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1140.722674][ T31] locks held by kworker/u8:22/7471: 3, last CPU#0: [ 1140.722681][ T31] #0: ffff88807e34c940 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722709][ T31] #1: ffffc90003837c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722735][ T31] #2: ffff88802c88f208 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 1140.722762][ T31] locks held by kworker/u8:23/7472: 3, last CPU#0: [ 1140.722770][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722795][ T31] #1: ffffc90003757c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722821][ T31] #2: ffff8880561207a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1140.722847][ T31] locks held by kworker/u8:24/7473: 4, last CPU#0: [ 1140.722854][ T31] #0: ffff8880535ad140 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722883][ T31] #1: ffffc90003737c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.722909][ T31] #2: ffff88807cc29440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1140.722937][ T31] #3: ffff88804e18aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1140.722966][ T31] locks held by kworker/u8:1/12920: 3, last CPU#0: [ 1140.722973][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723003][ T31] #1: ffffc90004a67c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723029][ T31] #2: ffff888029ca07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1140.723055][ T31] locks held by kworker/u8:7/12921: 4, last CPU#0: [ 1140.723062][ T31] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723088][ T31] #1: ffffc90004a17c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723113][ T31] #2: ffffffff9002df28 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1140.723168][ T31] #3: ffffffff8eca4870 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1140.723194][ T31] locks held by kworker/u8:15/12923: 3, last CPU#0: [ 1140.723202][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723227][ T31] #1: ffffc9000477fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723253][ T31] #2: ffff888056b407a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1140.723279][ T31] locks held by kworker/u8:20/13009: 4, last CPU#0: [ 1140.723286][ T31] #0: ffff8880297cb940 ((wq_completion)wg-kex-wg2#15){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723315][ T31] #1: ffffc90003867c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723341][ T31] #2: ffff8880327f9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1140.723369][ T31] #3: ffff88805a416640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1140.723397][ T31] locks held by kworker/u8:25/13010: 5, last CPU#0: [ 1140.723404][ T31] #0: ffff88801eebb140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723430][ T31] #1: ffffc90003887c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723456][ T31] #2: ffff888035fca0e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 1140.723490][ T31] #3: ffff888035fc8c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1140.723527][ T31] #4: ffffffff8eca4870 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1140.723552][ T31] locks held by kworker/u9:1/13121: 6, on CPU#0: [ 1140.723560][ T31] #0: ffff88804cece940 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723585][ T31] #1: ffffc90002537c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723611][ T31] #2: ffff88807d210ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1140.723638][ T31] #3: ffff88807d2100b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1140.723662][ T31] #4: ffffffff901c5040 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 1140.723686][ T31] #5: ffff8880552552f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 1140.723737][ T31] locks held by kworker/u8:26/13528: 4, last CPU#0: [ 1140.723745][ T31] #0: ffff888029bc8140 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723770][ T31] #1: ffffc900049efc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723796][ T31] #2: ffff8880343f1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1140.723824][ T31] #3: ffff888031597028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1140.723852][ T31] locks held by kworker/0:0/13738: 3, last CPU#0: [ 1140.723859][ T31] #0: ffff888061d5ed40 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723888][ T31] #1: ffffc9000dae7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723920][ T31] #2: ffff88802646a2c8 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 1140.723947][ T31] locks held by kworker/0:1/13739: 2, last CPU#0: [ 1140.723954][ T31] #0: ffff88801b02dd40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.723986][ T31] #1: ffffc900036b7c40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.724018][ T31] locks held by kworker/0:6/14117: 4, last CPU#0: [ 1140.724025][ T31] #0: ffff8880582f0940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.724052][ T31] #1: ffffc90003007c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.724084][ T31] #2: ffff888031595270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 1140.724112][ T31] #3: ffffffff8eca4870 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1140.724137][ T31] locks held by kworker/0:8/14148: 3, on CPU#0: [ 1140.724144][ T31] #0: ffff88801b02dd40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.724170][ T31] #1: ffffc90003037c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 1140.724195][ T31] #2: ffffffff9003cb00 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 1140.724245][ T31] locks held by syz-executor/14153: 1, on CPU#0: [ 1140.724253][ T31] #0: ffffffff9003cb00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1140.724278][ T31] locks held by syz-executor/14269: 7, last CPU#0: [ 1140.724285][ T31] #0: ffff8880120dc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1140.724311][ T31] #1: ffff888042f0c480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1140.724344][ T31] #2: ffff888029640d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1140.724373][ T31] #3: ffffffff8f8b4920 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1140.724441][ T31] #4: ffff88807ffe9128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1140.724505][ T31] #5: ffff88807ffec258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1140.724555][ T31] #6: ffffffff9003cb00 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1140.724606][ T31] locks held by syz.0.2311/14343: 7, last CPU#0: [ 1140.724614][ T31] #0: ffff888033ae9b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1140.724642][ T31] #1: ffff888029a56460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1140.724668][ T31] #2: ffff8880486a4080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1140.724694][ T31] #3: ffff88801f68eb48 (kn->active#83){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1140.724724][ T31] #4: ffffffff8f5ece40 (device_hotplug_lock){+.+.}-{4:4}, at: online_store+0xb0/0x1a0 [ 1140.724771][ T31] #5: ffff8880b8737eb8 (&dev->mutex){....}-{4:4}, at: device_offline+0x1b5/0x3c0 [ 1140.724795][ T31] #6: ffffffff8eca4870 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1140.724820][ T31] locks held by syz.5.2312/14350: 2, last CPU#0: [ 1140.724827][ T31] #0: ffff88807f351d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1140.724857][ T31] #1: ffffffff8eb5c820 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1140.724886][ T31] locks held by kworker/u8:27/14352: 1, last CPU#0: [ 1140.724893][ T31] #0: ffffffff8eca4870 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1140.724918][ T31] [ 1140.724921][ T31] ============================================= [ 1140.724921][ T31] [ 1140.724934][ T31] NMI backtrace for cpu 0 [ 1140.724951][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1140.724967][ T31] Tainted: [L]=SOFTLOCKUP [ 1140.724970][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1140.724982][ T31] Call Trace: [ 1140.724989][ T31] [ 1140.724994][ T31] dump_stack_lvl+0xe8/0x150 [ 1140.725009][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1140.725064][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1140.725087][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1140.725102][ T31] sys_info+0x135/0x170 [ 1140.725113][ T31] watchdog+0xfd7/0x1030 [ 1140.725140][ T31] ? watchdog+0x1c7/0x1030 [ 1140.725158][ T31] kthread+0x388/0x470 [ 1140.725169][ T31] ? __pfx_watchdog+0x10/0x10 [ 1140.725182][ T31] ? __pfx_kthread+0x10/0x10 [ 1140.725193][ T31] ret_from_fork+0x514/0xb70 [ 1140.725211][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1140.725225][ T31] ? __switch_to+0xc89/0x1420 [ 1140.725241][ T31] ? __pfx_kthread+0x10/0x10 [ 1140.725251][ T31] ret_from_fork_asm+0x1a/0x30 [ 1140.725273][ T31] [ 1140.725283][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1143.795126][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1143.805886][ T31] Tainted: [L]=SOFTLOCKUP [ 1143.810316][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1143.820379][ T31] Call Trace: [ 1143.823654][ T31] [ 1143.826567][ T31] vpanic+0x56c/0xa60 [ 1143.830606][ T31] ? __pfx_vpanic+0x10/0x10 [ 1143.835092][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 1143.840632][ T31] panic+0xc5/0xd0 [ 1143.844371][ T31] ? __pfx_panic+0x10/0x10 [ 1143.848965][ T31] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 1143.854098][ T31] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 1143.860253][ T31] watchdog+0x1030/0x1030 [ 1143.864609][ T31] ? watchdog+0x1c7/0x1030 [ 1143.869158][ T31] kthread+0x388/0x470 [ 1143.873241][ T31] ? __pfx_watchdog+0x10/0x10 [ 1143.877918][ T31] ? __pfx_kthread+0x10/0x10 [ 1143.882509][ T31] ret_from_fork+0x514/0xb70 [ 1143.887092][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1143.892230][ T31] ? __switch_to+0xc89/0x1420 [ 1143.896893][ T31] ? __pfx_kthread+0x10/0x10 [ 1143.901461][ T31] ret_from_fork_asm+0x1a/0x30 [ 1143.906215][ T31] [ 1143.909398][ T31] Kernel Offset: disabled [ 1143.913721][ T31] Rebooting in 86400 seconds..