last executing test programs: 13.850041822s ago: executing program 3 (id=2297): socket$kcm(0x10, 0x2, 0x0) fsopen(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0xc, &(0x7f0000000880)=ANY=[@ANYRES32], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8a75e69ef6d55a55, '\x00', 0x0, @flow_dissector=0x7c9ad37a5afa30db, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500003000000000000102"], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0xb277, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mlockall(0x7) 13.441152775s ago: executing program 2 (id=2299): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[], 0x1c}], 0x1}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 12.516352591s ago: executing program 3 (id=2301): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48241, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd448d1e7cbdaf3657d0f34e790c85bdba7931791f6d13318815e115000000000000000242f5b01bc4834608a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "2063569a"}}) 11.963787266s ago: executing program 2 (id=2303): socket$inet6(0xa, 0x5, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x0, {}, {0xffffffffffffffff}, 0x4}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x7, 0x0, 0xfffffffe, 0x3fffe, 0xfffffffd, 0xfefffffc}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 11.146718152s ago: executing program 3 (id=2305): socket$kcm(0x10, 0x2, 0x0) fsopen(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xdfff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe65f, 0x4, 0x9, 0x3, 0x807ffd, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x10001, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0xf6e0, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce4, 0x1ff, 0xffff, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x2, 0x61dc, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffb]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0xc, &(0x7f0000000880)=ANY=[@ANYRES32], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8a75e69ef6d55a55, '\x00', 0x0, @flow_dissector=0x7c9ad37a5afa30db, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500003000000000000102"], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mlockall(0x7) 10.664421081s ago: executing program 2 (id=2306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 9.402586814s ago: executing program 0 (id=2307): prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140800002f000101000000000000800004000080"], 0x14}], 0x200000000000008a}, 0x0) fcntl$setlease(r1, 0x400, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000117940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000117b40)={{0x0, 0x2, 0x7, 0x1, 0x7fff, 0xf, 0x2, 0x10001, 0x9, 0x89a4, 0x1, 0x3, 0x8, 0x2, 0xad6c}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000118b40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r7}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {0x0, r6}], 0x3, "3159bda0ec6bbf"}) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xfec9}, 0x0, &(0x7f00000043c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) prctl$PR_MCE_KILL(0x21, 0x558f06e60675d7d5, 0x1) io_uring_enter(r8, 0xdb4, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r10, &(0x7f0000000300)=[{&(0x7f0000000240)=""/51, 0x33}], 0x1, 0x5, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000119b40)={{0x0, 0x6, 0x6, 0x8, 0x800, 0xff, 0x2d33, 0x8, 0x6, 0x4, 0x8, 0x0, 0x3, 0x6, 0x3}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f000011ab40)) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 9.218414329s ago: executing program 1 (id=2308): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x800002, 0x10, 0xffffffffffffffff, 0x61083000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'wg2\x00', 0x200}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd(0x1a52) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x66, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x8, 0x58, 0xe2, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0xb, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x200, 0x0, 0x5, 0x1, 0x1, 0x2}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r4}, 0x10) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) open_tree(0xffffffffffffffff, 0x0, 0x89901) r5 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r5, 0x8001af71, &(0x7f0000000180)) sendfile(r3, r3, 0x0, 0x200000) 6.2634606s ago: executing program 1 (id=2309): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x60, 0x0) 6.160512848s ago: executing program 2 (id=2310): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) socket(0x840000000002, 0x3, 0xfa) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) shutdown(r0, 0x2) 5.937304536s ago: executing program 3 (id=2311): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[], 0x1c}], 0x1}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa06"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 5.544325278s ago: executing program 2 (id=2312): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = io_uring_setup(0x58e1, &(0x7f0000000440)={0x0, 0x61d6, 0x2000, 0x1, 0x258}) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c) syz_io_uring_setup(0x487, &(0x7f0000000380)={0x0, 0x8009010, 0x100, 0x4, 0x165, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close(r5) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045540, &(0x7f0000000080)) socket(0x200000000000011, 0x2, 0x1) 5.51940376s ago: executing program 0 (id=2313): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000000)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000e80b00000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300190000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 5.279520049s ago: executing program 3 (id=2314): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c) write$binfmt_aout(r3, 0x0, 0xfdef) syz_io_uring_setup(0x487, &(0x7f0000000380)={0x0, 0x8009010, 0x100, 0x4, 0x165}, &(0x7f0000000000), &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000080)) 4.840835085s ago: executing program 1 (id=2315): openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x9, 0x0, @vifc_lcl_addr=@local, @multicast1=0xe0000300}, 0x10) socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) 4.601576055s ago: executing program 0 (id=2316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000280)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@huge_within_size}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xcfe8, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100), &(0x7f00000003c0)) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x110, @tick=0x1, 0x78, {0x4, 0x1}, 0x3a, 0x0, 0x2}) 3.854073166s ago: executing program 1 (id=2317): socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x81, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, r1}) 2.720649728s ago: executing program 0 (id=2318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) 2.284079013s ago: executing program 0 (id=2319): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f2cf12e9e0f6da6b0b14dd039e1daffb1e08625f7b70db28371e21685b3ce4ed4108bf39fa4f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x3, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8230}, 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r10, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x81, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r11, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 1.581361781s ago: executing program 3 (id=2320): socket$kcm(0x10, 0x2, 0x0) fsopen(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xdfff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe65f, 0x4, 0x9, 0x3, 0x807ffd, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x10001, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0xf6e0, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce4, 0x1ff, 0xffff, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x2, 0x61dc, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffb]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0xc, &(0x7f0000000880)=ANY=[@ANYRES32], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8a75e69ef6d55a55, '\x00', 0x0, @flow_dissector=0x7c9ad37a5afa30db, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500003000000000000102"], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mlockall(0x7) 1.46048937s ago: executing program 1 (id=2321): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_usb_disconnect(0xffffffffffffffff) socket(0x840000000002, 0x3, 0xfa) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) shutdown(r0, 0x2) 1.327532131s ago: executing program 2 (id=2322): prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140800002f000101000000000000800004000080"], 0x14}], 0x200000000000008a}, 0x0) fcntl$setlease(r1, 0x400, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000117940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000117b40)={{0x0, 0x2, 0x7, 0x1, 0x7fff, 0xf, 0x2, 0x10001, 0x9, 0x89a4, 0x1, 0x3, 0x8, 0x2, 0xad6c}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000118b40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r7}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {0x0, r6}], 0x3, "3159bda0ec6bbf"}) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xfec9}, 0x0, &(0x7f00000043c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) prctl$PR_MCE_KILL(0x21, 0x558f06e60675d7d5, 0x1) io_uring_enter(r8, 0xdb4, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r10, &(0x7f0000000300)=[{&(0x7f0000000240)=""/51, 0x33}], 0x1, 0x5, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000119b40)={{0x0, 0x6, 0x6, 0x8, 0x800, 0xff, 0x2d33, 0x8, 0x6, 0x4, 0x8, 0x0, 0x3, 0x6, 0x3}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f000011ab40)) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 390.037858ms ago: executing program 1 (id=2323): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x60, 0x0) 0s ago: executing program 0 (id=2324): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000000)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000e80b00000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300190000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) kernel console output (not intermixed with test programs): vhci_device speed not set [ 428.246909][ T9839] fuse: Unknown parameter 'fd0x0000000000000004' [ 428.694654][ T9844] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.778795][ T9847] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 428.787882][ T9847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1205'. [ 428.885503][ T9847] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 428.937564][ T9847] team0: Failed to send options change via netlink (err -105) [ 428.963029][ T9847] team0: Port device geneve0 added [ 429.199450][ T9844] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.353507][ T9844] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.549052][ T9844] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.716811][ T5814] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 429.821575][ T9844] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.852023][ T9844] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.879068][ T9844] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.912146][ T5814] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 429.925623][ T5814] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 429.932989][ T9844] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.941667][ T5814] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.963180][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.014503][ T9862] random: crng reseeded on system resumption [ 430.024637][ T9853] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 430.149588][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 430.192808][ T5814] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 430.346845][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 430.355693][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.371952][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.383035][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.393864][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.440384][ T6425] usb 4-1: USB disconnect, device number 22 [ 430.557837][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.659776][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.974374][ T23] usb 3-1: usb_control_msg returned -71 [ 430.991774][ T23] usbtmc 3-1:16.0: can't read capabilities [ 431.031050][ T23] usb 3-1: USB disconnect, device number 11 [ 431.315590][ T9869] fuse: Unknown parameter 'fd0x0000000000000004' [ 431.577878][ T9875] fuse: Unknown parameter 'group_id00000000000000000000' [ 433.156701][ T5814] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 433.872268][ T5814] usb 2-1: Using ep0 maxpacket: 32 [ 433.887907][ T5814] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 433.925095][ T5814] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 433.938890][ T9897] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 433.961410][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 433.963847][ T9897] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 433.991754][ T5814] usb 2-1: Product: syz [ 433.995954][ T5814] usb 2-1: Manufacturer: syz [ 434.016636][ T5814] usb 2-1: SerialNumber: syz [ 434.047523][ T5814] usb 2-1: config 0 descriptor?? [ 434.053166][ T9891] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.136715][ T9899] fuse: Unknown parameter 'fd0x0000000000000004' [ 435.619278][ T5814] usb 2-1: USB disconnect, device number 26 [ 438.070985][ T5814] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 438.308636][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 438.349910][ T5814] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 438.363030][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.436548][ T5814] usb 2-1: Product: syz [ 438.448798][ T5814] usb 2-1: Manufacturer: syz [ 438.455425][ T5814] usb 2-1: SerialNumber: syz [ 438.726381][ T5814] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 439.560530][ T8] usb 2-1: USB disconnect, device number 27 [ 439.569019][ T8] usblp0: removed [ 440.271046][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.278151][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.984912][ T9978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.203367][ T9978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.340710][ T9978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.473456][ T9978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.639854][ T9978] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.703058][ T9978] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.802228][ T9978] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.833590][ T9978] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.820590][T10244] netlink: 'syz.0.1323': attribute type 10 has an invalid length. [ 461.852922][T10246] fuse: Bad value for 'fd' [ 461.879738][T10241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.154999][T10253] loop2: detected capacity change from 0 to 1024 [ 462.276938][T10253] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 463.327693][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 463.327736][ T28] audit: type=1326 audit(1754009122.776:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 463.474792][ T28] audit: type=1326 audit(1754009122.776:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 463.501902][ T28] audit: type=1326 audit(1754009122.776:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 463.706922][ T28] audit: type=1326 audit(1754009122.776:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 463.870633][ T28] audit: type=1326 audit(1754009122.776:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 463.921702][ T28] audit: type=1326 audit(1754009122.776:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 463.945475][ T28] audit: type=1326 audit(1754009122.776:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 464.013728][ T28] audit: type=1326 audit(1754009122.776:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 464.043036][ T28] audit: type=1326 audit(1754009122.776:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 464.475399][ T28] audit: type=1326 audit(1754009122.776:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10252 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 465.227497][T10283] fuse: Bad value for 'fd' [ 465.768873][T10294] loop1: detected capacity change from 0 to 1024 [ 465.796526][T10294] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 466.258121][T10294] loop1: detected capacity change from 0 to 32768 [ 466.265206][T10294] XFS: ikeep mount option is deprecated. [ 466.698117][T10294] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 466.842692][T10294] XFS (loop1): Ending clean mount [ 466.856290][T10294] XFS (loop1): Quotacheck needed: Please wait. [ 466.941098][T10294] XFS (loop1): Quotacheck: Done. [ 467.777065][ T5781] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 471.219943][T10354] loop1: detected capacity change from 0 to 1024 [ 471.257096][T10354] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 471.688305][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 471.688321][ T28] audit: type=1326 audit(1754009131.696:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 472.194664][ T28] audit: type=1326 audit(1754009131.726:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 472.217481][ T28] audit: type=1326 audit(1754009131.726:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 472.246482][ T28] audit: type=1326 audit(1754009131.726:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 472.273893][ T28] audit: type=1326 audit(1754009131.726:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 472.396518][ T28] audit: type=1326 audit(1754009131.726:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 472.495287][ T28] audit: type=1326 audit(1754009131.726:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 472.686789][ T28] audit: type=1326 audit(1754009131.726:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 472.709573][ T28] audit: type=1326 audit(1754009131.726:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 472.736568][ T28] audit: type=1326 audit(1754009131.726:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 474.938290][T10366] kvm: kvm [10360]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 475.146950][T10366] kvm: kvm [10360]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 475.155543][T10366] kvm: kvm [10360]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 477.251744][T10413] random: crng reseeded on system resumption [ 479.065402][T10436] loop3: detected capacity change from 0 to 1024 [ 479.207678][T10436] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 479.698729][T10436] loop3: detected capacity change from 0 to 32768 [ 479.705692][T10436] XFS: ikeep mount option is deprecated. [ 479.744509][T10436] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 480.012770][T10436] XFS (loop3): Ending clean mount [ 480.024020][T10436] XFS (loop3): Quotacheck needed: Please wait. [ 480.075165][T10450] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1378'. [ 480.093263][T10436] XFS (loop3): Quotacheck: Done. [ 480.402812][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 480.402853][ T28] audit: type=1326 audit(1754009140.406:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 482.170568][ T28] audit: type=1326 audit(1754009140.436:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 482.269353][ T28] audit: type=1326 audit(1754009140.436:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 482.347311][ T28] audit: type=1326 audit(1754009140.436:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 482.405304][ T28] audit: type=1326 audit(1754009140.436:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 482.428118][ T5814] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 482.532197][ T28] audit: type=1326 audit(1754009140.436:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 482.646525][ T28] audit: type=1326 audit(1754009140.436:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 482.686489][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 482.709763][ T5814] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 482.726862][ T28] audit: type=1326 audit(1754009140.446:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 482.756593][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.790058][ T5814] usb 1-1: Product: syz [ 482.810297][ T5814] usb 1-1: Manufacturer: syz [ 482.822380][ T5814] usb 1-1: SerialNumber: syz [ 482.837673][ T28] audit: type=1326 audit(1754009140.446:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 482.876155][ T28] audit: type=1326 audit(1754009140.446:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10435 comm="syz.3.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 482.940775][ T5783] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 483.081909][ T5814] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 485.268607][ T8] usb 1-1: USB disconnect, device number 22 [ 485.288704][ T8] usblp0: removed [ 485.853088][T10488] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1387'. [ 486.602703][T10495] loop0: detected capacity change from 0 to 1024 [ 486.648635][T10495] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 487.294008][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 487.294062][ T28] audit: type=1326 audit(1754009147.226:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.0.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 488.144456][ T28] audit: type=1326 audit(1754009147.226:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.0.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 490.191289][ T28] audit: type=1326 audit(1754009150.146:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.2.1395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x0 [ 490.295382][T10537] tipc: Started in network mode [ 490.313742][T10537] tipc: Node identity 7, cluster identity 4711 [ 490.339349][T10537] tipc: Node number set to 7 [ 491.230978][T10546] loop3: detected capacity change from 0 to 1024 [ 491.288351][T10546] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 491.762608][ T28] audit: type=1326 audit(1754009151.766:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 493.466984][ T28] audit: type=1326 audit(1754009151.766:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 493.575873][ T28] audit: type=1326 audit(1754009151.796:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 493.646594][ T28] audit: type=1326 audit(1754009151.796:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 493.669291][ T28] audit: type=1326 audit(1754009151.796:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 493.696043][ T28] audit: type=1326 audit(1754009151.796:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 493.719472][ T28] audit: type=1326 audit(1754009151.796:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 493.780379][ T28] audit: type=1326 audit(1754009151.796:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 493.847072][ T28] audit: type=1326 audit(1754009151.796:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 493.956887][ T28] audit: type=1326 audit(1754009151.796:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 493.980542][ T28] audit: type=1326 audit(1754009151.796:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 494.264717][T10561] tipc: Started in network mode [ 494.290905][T10561] tipc: Node identity 6238febe40f6, cluster identity 4711 [ 494.344441][T10561] tipc: Enabled bearer , priority 0 [ 494.451144][T10563] syzkaller0: entered promiscuous mode [ 494.458945][T10567] fuse: Bad value for 'rootmode' [ 494.500663][T10563] syzkaller0: entered allmulticast mode [ 494.894734][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1408'. [ 495.309691][T10561] tipc: Resetting bearer [ 495.512880][ T5814] tipc: Node number set to 583990974 [ 495.741604][T10560] tipc: Resetting bearer [ 495.922482][T10560] tipc: Disabling bearer [ 496.171468][T10587] loop0: detected capacity change from 0 to 1024 [ 496.212323][T10587] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 496.549284][T10587] loop0: detected capacity change from 0 to 32768 [ 496.556515][T10587] XFS: ikeep mount option is deprecated. [ 496.627724][T10587] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 496.709801][T10587] XFS (loop0): Ending clean mount [ 496.718259][T10587] XFS (loop0): Quotacheck needed: Please wait. [ 496.801847][T10587] XFS (loop0): Quotacheck: Done. [ 497.446827][ T5782] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 498.136354][T10611] fuse: Unknown parameter 'use00000000000000000000' [ 499.246709][ T6425] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 499.338518][T10618] mmap: syz.2.1420 (10618) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 499.454207][T10618] wg1 speed is unknown, defaulting to 1000 [ 499.456588][ T6425] usb 4-1: Using ep0 maxpacket: 8 [ 499.482573][ T6425] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 499.757963][ T6425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.766012][ T6425] usb 4-1: Product: syz [ 499.770557][ T6425] usb 4-1: Manufacturer: syz [ 499.775197][ T6425] usb 4-1: SerialNumber: syz [ 499.903491][T10627] loop0: detected capacity change from 0 to 1024 [ 499.917661][T10627] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 500.037657][ T6425] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 500.244489][T10627] loop0: detected capacity change from 0 to 32768 [ 500.251631][T10627] XFS: ikeep mount option is deprecated. [ 500.288326][T10627] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 500.379684][T10627] XFS (loop0): Ending clean mount [ 500.392879][T10627] XFS (loop0): Quotacheck needed: Please wait. [ 500.451817][T10627] XFS (loop0): Quotacheck: Done. [ 500.538174][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 500.538228][ T28] audit: type=1326 audit(1754009160.546:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 500.748335][ T28] audit: type=1326 audit(1754009160.576:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 500.901581][ T28] audit: type=1326 audit(1754009160.576:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 501.059455][ T28] audit: type=1326 audit(1754009160.576:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 501.118514][ T28] audit: type=1326 audit(1754009160.576:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 501.263099][ T28] audit: type=1326 audit(1754009160.576:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 501.285957][ T28] audit: type=1326 audit(1754009160.576:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 501.309204][ T28] audit: type=1326 audit(1754009160.576:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 501.332007][ T28] audit: type=1326 audit(1754009160.576:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 501.354772][ T28] audit: type=1326 audit(1754009160.576:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 501.408786][ T5782] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 501.711758][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.719402][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.003965][ T23] usb 4-1: USB disconnect, device number 23 [ 502.045540][ T23] usblp0: removed [ 502.100879][T10652] fuse: Unknown parameter 'use00000000000000000000' [ 504.752376][T10692] fuse: Unknown parameter 'use00000000000000000000' [ 504.762593][T10682] syzkaller0: entered promiscuous mode [ 504.772579][T10682] syzkaller0: entered allmulticast mode [ 504.778283][ T5823] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 504.968598][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 504.982992][ T5823] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 505.004597][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.015554][ T5823] usb 3-1: Product: syz [ 505.024344][ T5823] usb 3-1: Manufacturer: syz [ 505.029563][ T5823] usb 3-1: SerialNumber: syz [ 505.258181][ T5823] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 508.751275][T10702] tipc: Enabling of bearer rejected, failed to enable media [ 509.945163][T10736] fuse: Unknown parameter 'user_i00000000000000000000' [ 512.487778][ T8] usb 3-1: USB disconnect, device number 12 [ 512.507491][ T8] usblp0: removed [ 517.526482][ T54] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 517.726542][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 517.749561][ T54] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 517.760418][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.809220][ T54] usb 2-1: Product: syz [ 517.857908][ T54] usb 2-1: Manufacturer: syz [ 517.862532][ T54] usb 2-1: SerialNumber: syz [ 518.157974][ T54] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 518.250590][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1461'. [ 520.549282][ T6425] usb 2-1: USB disconnect, device number 28 [ 521.107565][ T6425] usblp0: removed [ 521.331846][T10820] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 521.344264][T10820] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 521.361081][T10820] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 523.636775][ T23] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 523.838854][ T23] usb 4-1: config 0 has no interfaces? [ 523.892056][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 523.922954][ T23] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 524.073082][ T23] usb 4-1: Manufacturer: syz [ 524.141599][ T23] usb 4-1: config 0 descriptor?? [ 526.026653][ T23] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 526.226485][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 526.252011][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 526.293224][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.326520][ T23] usb 2-1: Product: syz [ 526.333593][ T23] usb 2-1: Manufacturer: syz [ 526.339087][ T23] usb 2-1: SerialNumber: syz [ 526.619562][ T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 526.813658][T10858] fuse: Unknown parameter 'user_id00000000000000000000' [ 526.814292][ T23] usb 4-1: USB disconnect, device number 24 [ 527.745379][T10868] macsec0: entered promiscuous mode [ 527.765985][T10868] macsec0: entered allmulticast mode [ 527.796236][T10868] veth1_macvtap: entered allmulticast mode [ 527.828117][T10872] process 'syz.0.1482' launched './file0' with NULL argv: empty string added [ 528.823543][ T54] usb 2-1: USB disconnect, device number 29 [ 528.888251][ T54] usblp0: removed [ 530.676503][ T6425] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 530.872552][ T6425] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 530.900525][ T6425] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 530.940684][ T6425] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 530.964167][ T6425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.994737][ T6425] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 531.017154][ T6425] usb 2-1: invalid MIDI out EP 0 [ 531.178736][ T6425] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 531.197314][ T9680] udevd[9680]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.276832][ T6425] usb 2-1: USB disconnect, device number 30 [ 531.402488][T10909] fuse: Bad value for 'fd' [ 531.760542][T10917] infiniband syz1: set active [ 531.778475][T10917] bridge_slave_0: left allmulticast mode [ 531.809460][T10917] bridge_slave_0: left promiscuous mode [ 531.815385][T10917] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.855938][T10917] bridge_slave_1: left allmulticast mode [ 531.872749][T10917] bridge_slave_1: left promiscuous mode [ 531.881053][T10917] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.976177][T10917] bond0: (slave bond_slave_0): Releasing backup interface [ 532.158333][T10917] bond0: (slave bond_slave_1): Releasing backup interface [ 532.228590][T10917] team0: Port device team_slave_0 removed [ 532.325827][T10917] team0: Port device team_slave_1 removed [ 532.337526][T10917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.345191][T10917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.378980][T10917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.406906][T10917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.481187][ T5823] wg1 speed is unknown, defaulting to 1000 [ 532.505602][T10921] team0: Mode changed to "broadcast" [ 532.617059][T10922] vlan0: entered promiscuous mode [ 532.684493][T10922] team0: Port device vlan0 added [ 532.708525][T10925] tipc: Enabled bearer , priority 0 [ 538.426585][ T23] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 538.638185][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 538.657640][ T23] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 538.677808][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 538.693754][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.717289][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 538.725494][ T23] usb 2-1: invalid MIDI out EP 0 [ 539.146267][ T23] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 539.189736][ T8] usb 2-1: USB disconnect, device number 31 [ 539.231789][ T9680] udevd[9680]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.842699][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'. [ 539.846057][T11006] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1524'. [ 541.799806][T11033] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1532'. [ 542.016543][T11035] loop0: detected capacity change from 0 to 1024 [ 542.096863][T11035] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 542.402579][T11035] loop0: detected capacity change from 0 to 32768 [ 542.409469][T11035] XFS: ikeep mount option is deprecated. [ 542.466166][T11035] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 542.595495][T11035] XFS (loop0): Ending clean mount [ 542.605833][T11035] XFS (loop0): Quotacheck needed: Please wait. [ 542.626056][T11048] fuse: Unknown parameter '0x0000000000000004' [ 542.705145][T11035] XFS (loop0): Quotacheck: Done. [ 544.424852][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 544.424868][ T28] audit: type=1326 audit(1754009202.786:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 544.476260][ T28] audit: type=1326 audit(1754009202.786:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 544.498740][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.505894][ T28] audit: type=1326 audit(1754009202.796:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 544.529216][ T28] audit: type=1326 audit(1754009202.796:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 544.551653][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.663100][ T28] audit: type=1326 audit(1754009202.796:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 544.723495][ T28] audit: type=1326 audit(1754009202.796:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 544.961250][ T28] audit: type=1326 audit(1754009202.796:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 544.983763][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.990873][ T28] audit: type=1326 audit(1754009202.796:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 545.013854][ T28] audit: type=1326 audit(1754009202.796:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 545.036284][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.044981][ T28] audit: type=1326 audit(1754009202.796:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.0.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 545.067479][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.155432][ T5782] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 546.161671][T11068] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1542'. [ 546.692707][T11079] syz.2.1545: attempt to access beyond end of device [ 546.692707][T11079] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 546.711306][T11079] syz.2.1545: attempt to access beyond end of device [ 546.711306][T11079] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 546.724838][T11079] Mount JFS Failure: -5 [ 547.324488][T11089] fuse: Unknown parameter '0x0000000000000004' [ 547.672268][T11091] loop0: detected capacity change from 0 to 1024 [ 547.800065][T11091] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 548.127636][T11091] loop0: detected capacity change from 0 to 32768 [ 548.134528][T11091] XFS: ikeep mount option is deprecated. [ 548.382994][T11091] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 549.202264][T11091] XFS (loop0): Ending clean mount [ 549.212384][T11091] XFS (loop0): Quotacheck needed: Please wait. [ 549.480847][T11091] XFS (loop0): Quotacheck: Done. [ 549.591622][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 549.591672][ T28] audit: type=1326 audit(1754009209.556:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 551.273339][ T28] audit: type=1326 audit(1754009209.556:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 551.297079][ T28] audit: type=1326 audit(1754009209.556:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 551.319676][ T28] audit: type=1326 audit(1754009209.556:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 551.342544][ T28] audit: type=1326 audit(1754009209.556:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 551.365076][ T28] audit: type=1326 audit(1754009209.556:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 551.393393][ T28] audit: type=1326 audit(1754009209.556:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 551.427885][ T28] audit: type=1326 audit(1754009209.556:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 551.490548][ T28] audit: type=1326 audit(1754009209.556:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 551.595172][ T28] audit: type=1326 audit(1754009209.566:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4cbf58eb69 code=0x7ffc0000 [ 551.856942][ T5782] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 552.114462][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1555'. [ 553.250785][T11131] fuse: Unknown parameter '0x0000000000000004' [ 555.883200][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 555.883295][ T28] audit: type=1326 audit(1754009215.886:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 556.217311][ T28] audit: type=1326 audit(1754009215.886:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 557.107854][ T28] audit: type=1326 audit(1754009215.926:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 557.957364][ T28] audit: type=1326 audit(1754009215.926:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 557.980186][ T28] audit: type=1326 audit(1754009215.926:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 558.002879][ T28] audit: type=1326 audit(1754009215.936:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 558.025782][ T28] audit: type=1326 audit(1754009215.936:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 558.088091][ T28] audit: type=1326 audit(1754009215.936:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 558.117130][ T28] audit: type=1326 audit(1754009215.936:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 558.142364][ T28] audit: type=1326 audit(1754009215.936:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 558.730517][T11176] tipc: Started in network mode [ 558.750446][T11176] tipc: Node identity 92005e0fc07a, cluster identity 4711 [ 558.768519][T11176] tipc: Enabled bearer , priority 0 [ 558.836963][T11177] syzkaller0: entered promiscuous mode [ 558.863617][T11177] syzkaller0: entered allmulticast mode [ 558.901792][T11176] tipc: Resetting bearer [ 558.924743][T11175] tipc: Resetting bearer [ 558.964408][T11175] tipc: Disabling bearer [ 560.587166][ T54] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 560.656634][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 560.800159][ T54] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 560.826520][ T54] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 560.846458][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 560.851644][ T54] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 560.876937][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.889783][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 560.907367][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.933509][T11192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 560.933906][ T8] usb 1-1: Product: syz [ 560.952016][ T8] usb 1-1: Manufacturer: syz [ 560.959821][ T54] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 560.972287][ T8] usb 1-1: SerialNumber: syz [ 561.174872][ T6425] usb 3-1: USB disconnect, device number 13 [ 561.227801][ T8] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 561.294110][T11200] loop1: detected capacity change from 0 to 1024 [ 561.302371][T11200] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 561.566715][T11200] loop1: detected capacity change from 0 to 32768 [ 561.573932][T11200] XFS: ikeep mount option is deprecated. [ 561.594213][T11200] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 561.635247][T11200] XFS (loop1): Ending clean mount [ 561.644795][T11200] XFS (loop1): Quotacheck needed: Please wait. [ 561.675002][T11200] XFS (loop1): Quotacheck: Done. [ 561.757268][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 561.757653][ T28] audit: type=1326 audit(1754009221.766:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 562.062080][ T28] audit: type=1326 audit(1754009221.766:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 562.190300][ T28] audit: type=1326 audit(1754009221.766:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 562.212820][ T28] audit: type=1326 audit(1754009221.766:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 562.236182][ T28] audit: type=1326 audit(1754009221.766:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 562.259207][ T28] audit: type=1326 audit(1754009221.796:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 562.282151][ T28] audit: type=1326 audit(1754009221.796:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 562.305129][ T28] audit: type=1326 audit(1754009221.796:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 562.328300][ T28] audit: type=1326 audit(1754009221.796:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 562.404867][ T5781] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 562.419525][ T28] audit: type=1326 audit(1754009221.796:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 563.071769][T11216] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 563.078420][T11216] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 563.086686][T11216] vhci_hcd vhci_hcd.0: Device attached [ 563.191994][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.211234][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.258916][T11219] vhci_hcd: connection closed [ 563.273330][ T5964] vhci_hcd: stop threads [ 563.352852][ T5964] vhci_hcd: release socket [ 563.416770][ T54] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 563.442681][ T5964] vhci_hcd: disconnect device [ 564.654772][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 566.566506][ T23] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 566.810323][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 566.824789][ T23] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 566.843117][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 566.852601][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.880307][T11243] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 566.923849][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 567.214853][ T23] usb 2-1: USB disconnect, device number 32 [ 568.084402][ C1] usblp0: nonzero write bulk status received: -71 [ 568.091674][ T23] usb 1-1: USB disconnect, device number 23 [ 568.146679][ T5980] usblp0: removed [ 568.197169][T11252] fuse: Unknown parameter 'fd0x0000000000000004' [ 568.556779][ T23] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 568.564844][ T5980] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 568.666704][ T54] vhci_hcd: vhci_device speed not set [ 568.756651][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 568.830667][ T5980] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 569.586869][ T23] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 569.606618][ T5980] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 569.633021][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.658931][ T5980] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 569.673529][ T23] usb 1-1: config 0 has no interface number 0 [ 569.706752][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.720129][ T23] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 569.731908][ T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 569.742384][T11256] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 569.749767][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.759612][ T5980] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 569.773610][ T23] usb 1-1: config 0 descriptor?? [ 569.785026][ T23] ldusb 1-1:0.55: Interrupt in endpoint not found [ 569.840382][T11269] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1595'. [ 569.917549][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 569.982779][T11256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1591'. [ 570.025298][T11256] netlink: 'syz.3.1591': attribute type 2 has an invalid length. [ 570.053081][T11256] netlink: 'syz.3.1591': attribute type 1 has an invalid length. [ 570.103323][ T23] usb 1-1: USB disconnect, device number 24 [ 570.270350][ T54] usb 4-1: USB disconnect, device number 25 [ 570.456564][ T5980] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 570.682781][ T5980] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 570.694811][ T5980] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 570.723493][ T5980] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 570.736530][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.773874][T11276] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 570.802306][ T5980] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 571.414601][ T5980] usb 3-1: USB disconnect, device number 14 [ 571.790640][T11286] fuse: Unknown parameter 'fd0x0000000000000004' [ 571.836539][ T5830] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 572.056525][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 572.066294][ T5830] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 572.066313][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.066324][ T5830] usb 4-1: Product: syz [ 572.066574][ T5830] usb 4-1: Manufacturer: syz [ 572.066588][ T5830] usb 4-1: SerialNumber: syz [ 572.281167][ T5830] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 573.177772][ T5830] usb 4-1: USB disconnect, device number 26 [ 573.230442][ T5830] usblp0: removed [ 573.689650][T11308] tipc: Enabled bearer , priority 0 [ 573.812212][T11308] syzkaller0: entered promiscuous mode [ 573.930702][T11308] syzkaller0: entered allmulticast mode [ 573.956772][T11308] tipc: Resetting bearer [ 574.016013][T11307] tipc: Resetting bearer [ 578.591180][T11340] loop2: detected capacity change from 0 to 1024 [ 578.614763][T11340] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 578.934943][T11340] loop2: detected capacity change from 0 to 32768 [ 578.942152][T11340] XFS: ikeep mount option is deprecated. [ 578.994594][T11340] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 579.143503][T11340] XFS (loop2): Ending clean mount [ 579.158717][T11340] XFS (loop2): Quotacheck needed: Please wait. [ 579.303247][T11340] XFS (loop2): Quotacheck: Done. [ 579.393164][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 579.393178][ T28] audit: type=1326 audit(1754009239.396:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 579.614850][ T28] audit: type=1326 audit(1754009239.396:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 579.650673][ T28] audit: type=1326 audit(1754009239.396:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 579.691442][ T28] audit: type=1326 audit(1754009239.396:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 579.731272][ T28] audit: type=1326 audit(1754009239.396:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 579.754727][ T28] audit: type=1326 audit(1754009239.396:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 579.778283][ T28] audit: type=1326 audit(1754009239.396:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 579.809598][ T28] audit: type=1326 audit(1754009239.396:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 579.832200][ T28] audit: type=1326 audit(1754009239.396:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 579.855206][ T28] audit: type=1326 audit(1754009239.396:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11339 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 579.911472][ T5784] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 580.536457][ T27] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 580.730410][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 580.781858][ T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 580.791293][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.799801][ T27] usb 3-1: Product: syz [ 580.804068][ T27] usb 3-1: Manufacturer: syz [ 580.809438][ T27] usb 3-1: SerialNumber: syz [ 580.886869][T11307] tipc: Disabling bearer [ 580.895089][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1609'. [ 581.039027][ T27] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 582.504701][T11379] loop1: detected capacity change from 0 to 1024 [ 582.514924][T11379] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 584.589376][ T28] kauditd_printk_skb: 278 callbacks suppressed [ 584.589431][ T28] audit: type=1326 audit(1754009244.326:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bd2585b27 code=0x7ffc0000 [ 584.812163][ T28] audit: type=1326 audit(1754009244.326:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0bd252ad69 code=0x7ffc0000 [ 584.836443][ T28] audit: type=1326 audit(1754009244.326:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bd2585b27 code=0x7ffc0000 [ 584.860025][ T28] audit: type=1326 audit(1754009244.326:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0bd252ad69 code=0x7ffc0000 [ 584.883381][ T28] audit: type=1326 audit(1754009244.326:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bd2585b27 code=0x7ffc0000 [ 584.907228][ T54] usb 3-1: USB disconnect, device number 15 [ 584.938898][ T54] usblp0: removed [ 584.984679][ T28] audit: type=1326 audit(1754009244.326:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0bd252ad69 code=0x7ffc0000 [ 585.057446][ T28] audit: type=1326 audit(1754009244.336:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 585.095658][ T28] audit: type=1326 audit(1754009244.336:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bd2585b27 code=0x7ffc0000 [ 585.119538][ T28] audit: type=1326 audit(1754009244.336:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0bd252ad69 code=0x7ffc0000 [ 585.142765][ T28] audit: type=1326 audit(1754009244.336:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 585.417181][ T5830] IPVS: starting estimator thread 0... [ 585.446509][ T54] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 585.766226][T11395] IPVS: using max 18 ests per chain, 43200 per kthread [ 586.348319][ T54] usb 3-1: config 0 has no interfaces? [ 586.355566][ T54] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 586.376408][ T54] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 586.385008][ T54] usb 3-1: Manufacturer: syz [ 586.393727][ T54] usb 3-1: config 0 descriptor?? [ 586.965358][T11407] tipc: Started in network mode [ 586.971062][T11407] tipc: Node identity 7, cluster identity 4711 [ 586.983300][T11407] tipc: Node number set to 7 [ 588.035962][T11421] loop1: detected capacity change from 0 to 1024 [ 588.056826][T11421] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 588.332961][ T6425] usb 3-1: USB disconnect, device number 16 [ 590.071097][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 590.071113][ T28] audit: type=1326 audit(1754009248.506:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.1.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bd2585b27 code=0x7ffc0000 [ 590.200027][ T28] audit: type=1326 audit(1754009248.506:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.1.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0bd252ad69 code=0x7ffc0000 [ 590.412552][ T28] audit: type=1326 audit(1754009248.506:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.1.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 590.491561][ T28] audit: type=1326 audit(1754009248.516:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.1.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bd2585b27 code=0x7ffc0000 [ 590.554874][ T28] audit: type=1326 audit(1754009248.516:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.1.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0bd252ad69 code=0x7ffc0000 [ 590.796629][ T28] audit: type=1326 audit(1754009248.516:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.1.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 590.894001][ T28] audit: type=1326 audit(1754009248.526:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.1.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bd2585b27 code=0x7ffc0000 [ 590.956517][ T28] audit: type=1326 audit(1754009248.526:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.1.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0bd252ad69 code=0x7ffc0000 [ 591.176513][ T28] audit: type=1326 audit(1754009248.526:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.1.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 591.214571][ T28] audit: type=1326 audit(1754009248.536:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11419 comm="syz.1.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bd2585b27 code=0x7ffc0000 [ 592.020945][T11448] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1644'. [ 592.693777][T11460] loop3: detected capacity change from 0 to 1024 [ 592.713893][T11460] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 592.942264][T11460] loop3: detected capacity change from 0 to 32768 [ 592.949153][T11460] XFS: ikeep mount option is deprecated. [ 592.978008][T11460] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 593.033842][T11460] XFS (loop3): Ending clean mount [ 593.052489][T11460] XFS (loop3): Quotacheck needed: Please wait. [ 593.112316][T11460] XFS (loop3): Quotacheck: Done. [ 595.059967][ T5783] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 596.097601][ T6425] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 596.946841][ T6425] usb 1-1: Using ep0 maxpacket: 8 [ 597.012943][ T6425] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 597.023794][ T6425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.032509][ T6425] usb 1-1: Product: syz [ 597.046427][ T6425] usb 1-1: Manufacturer: syz [ 597.051312][ T6425] usb 1-1: SerialNumber: syz [ 597.224024][T11495] loop3: detected capacity change from 0 to 1024 [ 597.245133][T11495] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 597.298789][ T6425] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 597.517731][T11495] loop3: detected capacity change from 0 to 32768 [ 597.524771][T11495] XFS: ikeep mount option is deprecated. [ 597.585298][T11495] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 597.769981][T11495] XFS (loop3): Ending clean mount [ 597.778190][T11495] XFS (loop3): Quotacheck needed: Please wait. [ 597.858216][T11495] XFS (loop3): Quotacheck: Done. [ 597.926131][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 597.926184][ T28] audit: type=1326 audit(1754009257.926:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 598.455545][ T28] audit: type=1326 audit(1754009257.956:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 598.486480][ T28] audit: type=1326 audit(1754009257.966:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 598.509137][ T28] audit: type=1326 audit(1754009257.966:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 598.531831][ T28] audit: type=1326 audit(1754009257.966:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 598.556217][ T28] audit: type=1326 audit(1754009257.966:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 598.578914][ T28] audit: type=1326 audit(1754009257.966:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 598.602333][ T28] audit: type=1326 audit(1754009257.966:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 598.636086][ T28] audit: type=1326 audit(1754009257.966:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 598.662168][ T28] audit: type=1326 audit(1754009257.966:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e7b8eb69 code=0x7ffc0000 [ 598.690367][ T5783] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 599.367820][ T5830] usb 1-1: USB disconnect, device number 25 [ 599.406598][ T5830] usblp0: removed [ 607.898852][ T5830] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 609.158498][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 609.177354][ T5830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 609.188761][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.272740][ T5830] usb 3-1: Product: syz [ 609.281680][ T5830] usb 3-1: Manufacturer: syz [ 609.297060][ T5830] usb 3-1: SerialNumber: syz [ 610.814580][T11609] ceph: No mds server is up or the cluster is laggy [ 610.863247][ T23] libceph: connect (1)[c::]:6789 error -101 [ 610.988913][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 610.997662][ T5830] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 611.160210][ T5830] usb 3-1: USB disconnect, device number 17 [ 611.257878][ T5830] usblp0: removed [ 613.634610][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1691'. [ 614.996718][ T27] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 615.226471][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 615.251107][ T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 615.261725][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.271749][ T27] usb 3-1: Product: syz [ 615.276404][ T27] usb 3-1: Manufacturer: syz [ 615.281482][ T27] usb 3-1: SerialNumber: syz [ 616.035798][T11673] tipc: Enabled bearer , priority 0 [ 616.079562][T11672] tipc: Disabling bearer [ 617.876927][ T27] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 617.901117][ T27] usb 3-1: USB disconnect, device number 18 [ 617.937503][ T27] usblp0: removed [ 618.050664][T11710] tipc: Enabled bearer , priority 0 [ 618.089136][T11709] tipc: Disabling bearer [ 618.810877][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 618.810892][ T28] audit: type=1326 audit(1754009278.796:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.1.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 618.861930][ T28] audit: type=1326 audit(1754009278.796:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.1.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 618.903013][ T28] audit: type=1326 audit(1754009278.796:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.1.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 618.947968][ T28] audit: type=1326 audit(1754009278.796:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.1.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 618.975453][ T28] audit: type=1326 audit(1754009278.796:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.1.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 618.998905][ T28] audit: type=1326 audit(1754009278.796:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.1.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 619.041932][ T28] audit: type=1326 audit(1754009278.796:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.1.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 619.105540][ T28] audit: type=1326 audit(1754009278.796:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.1.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 619.134084][ T28] audit: type=1326 audit(1754009278.796:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.1.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 619.166704][ T28] audit: type=1326 audit(1754009278.796:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.1.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 621.616716][T11759] dvmrp8: entered allmulticast mode [ 623.834258][T11778] [U] : [ 623.837497][T11778] [U] [ 623.840220][T11778] [U] [ 623.842939][T11778] [U] [ 623.846208][T11778] [U] [ 623.848922][T11778] [U] [ 623.851624][T11778] [U] [ 623.854334][T11778] [U] [ 623.857559][T11778] [U] [ 623.860272][T11778] [U] [ 623.862983][T11778] [U] [ 623.865695][T11778] [U] [ 623.868767][T11778] [U] [ 623.871482][T11778] [U] [ 623.874275][T11778] [U] [ 623.876981][T11778] [U] [ 623.880320][T11778] [U] [ 623.883048][T11778] [U] [ 623.885768][T11778] [U] [ 623.888475][T11778] [U] [ 623.915249][T11778] [U] [ 623.917997][T11778] [U] [ 623.920701][T11778] [U] [ 623.923399][T11778] [U] [ 623.926529][T11778] [U] [ 623.929500][T11778] [U] [ 623.932205][T11778] [U] [ 623.934918][T11778] [U] [ 623.938038][T11778] [U] [ 623.940742][T11778] [U] [ 623.943441][T11778] [U] [ 623.946267][T11778] [U] [ 623.949386][T11778] [U] [ 623.952108][T11778] [U] [ 623.954818][T11778] [U] [ 623.957522][T11778] [U] [ 623.960602][T11778] [U] [ 623.963320][T11778] [U] [ 623.966037][T11778] [U] [ 623.968753][T11778] [U] [ 623.992328][T11778] [U] [ 623.995081][T11778] [U] [ 623.997833][T11778] [U] [ 624.000540][T11778] [U] [ 624.003553][T11778] [U] [ 624.006260][T11778] [U] [ 624.008959][T11778] [U] [ 624.011657][T11778] [U] [ 624.014777][T11778] [U] [ 624.017487][T11778] [U] [ 624.020187][T11778] [U] [ 624.022898][T11778] [U] [ 624.025980][T11778] [U] [ 624.028693][T11778] [U] [ 624.031390][T11778] [U] [ 624.034105][T11778] [U] [ 624.038272][T11778] [U] [ 624.041005][T11778] [U] [ 624.043721][T11778] [U] [ 624.046419][T11778] [U] [ 624.049575][T11778] [U] [ 624.052281][T11778] [U] [ 624.054980][T11778] [U] [ 624.057692][T11778] [U] [ 624.060972][T11778] [U] [ 624.063763][T11778] [U] [ 624.066460][T11778] [U] [ 624.069165][T11778] [U] [ 624.074542][T11778] [U] [ 624.077247][T11778] [U] [ 624.079988][T11778] [U] [ 624.082793][T11778] [U] [ 624.086215][T11778] [U] [ 624.088943][T11778] [U] [ 624.091645][T11778] [U] [ 624.094349][T11778] [U] [ 624.097576][T11778] [U] [ 624.100296][T11778] [U] [ 624.102996][T11778] [U] [ 624.105703][T11778] [U] [ 624.109014][T11778] [U] [ 624.111722][T11778] [U] [ 624.114421][T11778] [U] [ 624.117121][T11778] [U] [ 624.120518][T11778] [U] [ 624.123257][T11778] [U] [ 624.125967][T11778] [U] [ 624.128667][T11778] [U] [ 624.131876][T11778] [U] [ 624.134592][T11778] [U] [ 624.137299][T11778] [U] [ 624.140018][T11778] [U] [ 624.143227][T11778] [U] [ 624.145942][T11778] [U] [ 624.148656][T11778] [U] [ 624.151364][T11778] [U] [ 624.154575][T11778] [U] [ 624.157279][T11778] [U] [ 624.159979][T11778] [U] [ 624.162683][T11778] [U] [ 624.165771][T11778] [U] [ 624.168492][T11778] [U] [ 624.171195][T11778] [U] [ 624.173896][T11778] [U] [ 624.177177][T11778] [U] [ 624.179887][T11778] [U] [ 624.182586][T11778] [U] [ 624.185288][T11778] [U] [ 624.188557][T11778] [U] [ 624.191262][T11778] [U] [ 624.193966][T11778] [U] [ 624.196661][T11778] [U] [ 624.199878][T11778] [U] [ 624.202580][T11778] [U] [ 624.205276][T11778] [U] [ 624.207983][T11778] [U] [ 624.211113][T11778] [U] [ 624.213817][T11778] [U] [ 624.216527][T11778] [U] [ 624.219231][T11778] [U] [ 624.222635][T11778] [U] [ 624.225362][T11778] [U] [ 624.228064][T11778] [U] [ 624.230769][T11778] [U] [ 624.233983][T11778] [U] [ 624.236706][T11778] [U] [ 624.239408][T11778] [U] [ 624.587521][T11774] [U] [ 624.591952][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.598672][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.834136][T11793] syzkaller0: entered promiscuous mode [ 625.848676][T11793] syzkaller0: entered allmulticast mode [ 625.937547][T11790] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 625.944112][T11790] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 625.980914][T11790] vhci_hcd vhci_hcd.0: Device attached [ 625.989403][T11792] vhci_hcd: connection closed [ 625.990827][ T3434] vhci_hcd: stop threads [ 626.057211][T11797] kvm: kvm [11796]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 626.106382][ T3434] vhci_hcd: release socket [ 626.110864][ T3434] vhci_hcd: disconnect device [ 627.344495][T11806] loop2: detected capacity change from 0 to 1024 [ 627.362895][T11806] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 627.836781][ T28] kauditd_printk_skb: 264 callbacks suppressed [ 627.836831][ T28] audit: type=1326 audit(1754009287.836:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 629.524197][ T28] audit: type=1326 audit(1754009287.866:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 629.547858][ T28] audit: type=1326 audit(1754009287.876:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 629.570504][ T28] audit: type=1326 audit(1754009287.876:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 629.594317][ T28] audit: type=1326 audit(1754009287.876:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 629.618616][ T28] audit: type=1326 audit(1754009287.876:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 629.641256][ T28] audit: type=1326 audit(1754009287.876:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 629.664515][ T28] audit: type=1326 audit(1754009287.876:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 629.687897][ T28] audit: type=1326 audit(1754009287.876:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 629.816503][ T28] audit: type=1326 audit(1754009287.876:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 629.838975][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.966515][ T5823] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 632.169823][ T5823] usb 1-1: config 0 has no interfaces? [ 632.192460][ T5823] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 632.246413][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.262872][ T5823] usb 1-1: Product: syz [ 632.267534][ T5823] usb 1-1: Manufacturer: syz [ 632.272151][ T5823] usb 1-1: SerialNumber: syz [ 632.282823][ T5823] usb 1-1: config 0 descriptor?? [ 634.792540][T11846] loop2: detected capacity change from 0 to 1024 [ 634.861098][T11846] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 635.235450][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 635.235471][ T28] audit: type=1326 audit(1754009295.236:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 635.869802][ T28] audit: type=1326 audit(1754009295.276:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 636.087354][ T28] audit: type=1326 audit(1754009295.276:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 636.135337][ T5830] usb 1-1: USB disconnect, device number 26 [ 636.149104][ T28] audit: type=1326 audit(1754009295.276:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 636.184164][ T28] audit: type=1326 audit(1754009295.276:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 636.218484][ T28] audit: type=1326 audit(1754009295.276:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 636.243196][ T28] audit: type=1326 audit(1754009295.276:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 636.357181][ T28] audit: type=1326 audit(1754009295.276:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 636.411020][ T28] audit: type=1326 audit(1754009295.276:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 636.477066][ T28] audit: type=1326 audit(1754009295.276:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11845 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f629998eb69 code=0x7ffc0000 [ 636.562270][T11859] syzkaller0: entered promiscuous mode [ 636.568142][T11859] syzkaller0: entered allmulticast mode [ 637.493083][T11866] netlink: set zone limit has 8 unknown bytes [ 640.387924][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 640.387940][ T28] audit: type=1326 audit(1754009300.386:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 640.440487][ T28] audit: type=1326 audit(1754009300.386:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 640.516703][ T28] audit: type=1326 audit(1754009300.386:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 640.599645][ T28] audit: type=1326 audit(1754009300.386:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 640.633046][ T28] audit: type=1326 audit(1754009300.386:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 640.666120][ T28] audit: type=1326 audit(1754009300.386:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 640.714125][ T28] audit: type=1326 audit(1754009300.386:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 640.748024][ T28] audit: type=1326 audit(1754009300.386:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 640.840658][ T28] audit: type=1326 audit(1754009300.386:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 640.908681][ T28] audit: type=1326 audit(1754009300.386:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.1.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd258eb69 code=0x7ffc0000 [ 643.567221][T11905] loop0: detected capacity change from 0 to 1024 [ 643.597725][T11905] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 645.395698][T11915] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1775'. [ 645.406615][T11913] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1775'. [ 652.153289][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 653.566636][T11996] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1799'. [ 654.452933][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'. [ 654.478375][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'. [ 655.974925][ T5830] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 656.183605][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.215110][ T5830] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 656.506512][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 656.932500][ T5830] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 656.963085][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.048230][ T5830] usb 3-1: config 0 descriptor?? [ 657.113575][ T5830] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 657.136962][ T5830] dvb-usb: bulk message failed: -22 (3/0) [ 657.173130][ T5830] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 657.197215][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'. [ 657.270993][ T5830] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 657.278615][ T5830] usb 3-1: media controller created [ 657.289803][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 657.428094][ T5830] dvb-usb: bulk message failed: -22 (6/0) [ 657.433918][ T5830] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 657.510585][T12045] dvb-usb: bulk message failed: -22 (4/0) [ 658.181115][ T5830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 658.211609][ T5830] dvb-usb: schedule remote query interval to 150 msecs. [ 658.223401][ T5830] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 658.238687][T12047] overlayfs: failed to clone lowerpath [ 658.376490][ T5830] dvb-usb: bulk message failed: -22 (1/0) [ 658.376545][ T5830] dvb-usb: error while querying for an remote control event. [ 658.569096][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 658.588492][ T54] dvb-usb: error while querying for an remote control event. [ 658.756618][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 658.763491][ T54] dvb-usb: error while querying for an remote control event. [ 658.936603][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 658.951544][ T54] dvb-usb: error while querying for an remote control event. [ 659.118665][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 659.125719][ T54] dvb-usb: error while querying for an remote control event. [ 659.235175][ T27] usb 3-1: USB disconnect, device number 19 [ 659.318570][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 659.520984][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 661.656558][ T5830] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 662.507604][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 662.539008][ T5830] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 662.586276][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.610991][ T5830] usb 1-1: Product: syz [ 662.623901][ T5830] usb 1-1: Manufacturer: syz [ 662.636364][ T5830] usb 1-1: SerialNumber: syz [ 662.696612][T12106] kvm: kvm [12105]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 662.725568][T12106] kvm: kvm [12105]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 662.789872][T12108] bridge0: port 3(team0) entered blocking state [ 662.796738][T12106] kvm: kvm [12105]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 662.805566][T12108] bridge0: port 3(team0) entered disabled state [ 662.818402][T12108] team0: entered allmulticast mode [ 662.823771][T12106] kvm_intel: kvm [12105]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 662.838394][T12108] team_slave_0: entered allmulticast mode [ 662.892707][ T5830] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 662.934355][T12108] team_slave_1: entered allmulticast mode [ 662.960802][T12108] team0: entered promiscuous mode [ 662.965924][T12108] team_slave_0: entered promiscuous mode [ 662.975531][T12108] team_slave_1: entered promiscuous mode [ 662.983417][T12108] bridge0: port 3(team0) entered blocking state [ 662.989865][T12108] bridge0: port 3(team0) entered forwarding state [ 663.202123][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 664.666673][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 664.684066][ T27] usb 1-1: USB disconnect, device number 27 [ 664.756989][ T27] usblp0: removed [ 667.636799][ T27] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 668.036423][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 668.052075][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 668.064317][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.087351][ T27] usb 1-1: Product: syz [ 668.091884][ T27] usb 1-1: Manufacturer: syz [ 668.097721][ T27] usb 1-1: SerialNumber: syz [ 668.711762][ T27] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 670.068861][T12181] Bluetooth: MGMT ver 1.22 [ 670.345283][ T5830] usb 1-1: USB disconnect, device number 28 [ 670.352832][ T5830] usblp0: removed [ 671.584273][T12210] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 672.502651][T12224] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 672.509311][T12224] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 672.517192][T12224] vhci_hcd vhci_hcd.0: Device attached [ 672.704187][ T2053] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 672.879351][ T5830] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 673.096666][T12225] vhci_hcd: connection reset by peer [ 673.166118][ T5976] vhci_hcd: stop threads [ 673.203678][ T5976] vhci_hcd: release socket [ 673.243195][ T5976] vhci_hcd: disconnect device [ 673.786575][ T2053] usb 3-1: Using ep0 maxpacket: 8 [ 673.808601][ T2053] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 673.818078][ T2053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.826493][ T2053] usb 3-1: Product: syz [ 673.831310][ T2053] usb 3-1: Manufacturer: syz [ 673.836361][ T2053] usb 3-1: SerialNumber: syz [ 674.231748][ T2053] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 675.655405][ T5980] usb 3-1: USB disconnect, device number 20 [ 675.701042][ T5980] usblp0: removed [ 676.318693][T12261] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 676.325254][T12261] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 676.348765][T12261] vhci_hcd vhci_hcd.0: Device attached [ 676.510205][T12263] vhci_hcd: connection closed [ 676.510733][ T5968] vhci_hcd: stop threads [ 676.526036][ T5968] vhci_hcd: release socket [ 676.530938][ T5968] vhci_hcd: disconnect device [ 676.546871][ T54] vhci_hcd: vhci_device speed not set [ 678.116433][ T5830] vhci_hcd: vhci_device speed not set [ 678.167390][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'. [ 678.586458][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 680.119027][ T5830] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 680.326717][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 680.536405][ T5830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 680.567297][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.591930][ T5830] usb 3-1: Product: syz [ 680.596117][ T5830] usb 3-1: Manufacturer: syz [ 680.625366][ T5830] usb 3-1: SerialNumber: syz [ 680.856700][ T5830] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 680.911286][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 681.175032][T12329] syzkaller0: entered promiscuous mode [ 681.180966][T12329] syzkaller0: entered allmulticast mode [ 681.616615][ T5980] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 681.816848][ T5980] usb 1-1: Using ep0 maxpacket: 8 [ 681.834977][ T5980] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 681.858140][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.867026][ T5980] usb 1-1: Product: syz [ 681.874451][ T5980] usb 1-1: Manufacturer: syz [ 681.889594][ T5980] usb 1-1: SerialNumber: syz [ 682.154935][ T5980] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 682.684443][ T5980] usb 3-1: USB disconnect, device number 21 [ 683.276464][ T5980] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 683.756448][ T5980] usb 3-1: device descriptor read/64, error -71 [ 684.146464][ T5980] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 684.281960][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 684.306735][ T5980] usb 3-1: device descriptor read/64, error -71 [ 684.341131][T12342] usblp0: removed [ 684.349733][ T8] usb 1-1: USB disconnect, device number 29 [ 684.361042][ T8] usblp1: removed [ 684.436590][ T5980] usb usb3-port1: attempt power cycle [ 685.006413][ T5980] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 685.057269][ T5980] usb 3-1: device descriptor read/8, error -71 [ 685.769327][ T5980] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 686.343714][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.360151][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.158924][ T5980] usb 3-1: device descriptor read/8, error -71 [ 687.405699][ T5980] usb usb3-port1: unable to enumerate USB device [ 687.439242][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 688.213363][ T5830] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 688.416514][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 688.437247][ T5830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 688.481755][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.540289][ T5830] usb 3-1: Product: syz [ 688.544663][ T5830] usb 3-1: Manufacturer: syz [ 688.555294][ T5830] usb 3-1: SerialNumber: syz [ 688.784161][ T5830] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 690.175119][T12409] bridge0: port 1(team0) entered blocking state [ 690.181841][T12409] bridge0: port 1(team0) entered disabled state [ 690.188888][T12409] team0: entered allmulticast mode [ 690.194057][T12409] vlan0: entered allmulticast mode [ 690.199367][T12409] veth0_vlan: entered allmulticast mode [ 690.211422][T12409] team0: entered promiscuous mode [ 690.222014][T12409] bridge0: port 1(team0) entered blocking state [ 690.228443][T12409] bridge0: port 1(team0) entered forwarding state [ 690.896852][ T6425] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 691.056383][ T6425] usb 1-1: device descriptor read/64, error -71 [ 691.326504][ T6425] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 691.486439][ T6425] usb 1-1: device descriptor read/64, error -71 [ 691.522266][T12414] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1926'. [ 691.542310][T12414] netlink: 'syz.1.1926': attribute type 2 has an invalid length. [ 691.550259][T12414] netlink: 'syz.1.1926': attribute type 1 has an invalid length. [ 691.617406][ T6425] usb usb1-port1: attempt power cycle [ 692.098106][ T6425] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 692.437040][ T6425] usb 1-1: device descriptor read/8, error -71 [ 692.746815][ T6425] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 693.475588][ T6425] usb 1-1: device descriptor read/8, error -71 [ 693.597905][ T6425] usb usb1-port1: unable to enumerate USB device [ 693.617343][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1930'. [ 696.211221][ T5980] usb 3-1: USB disconnect, device number 26 [ 696.588508][ T5980] usblp0: removed [ 699.060251][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'. [ 699.916569][ T5830] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 700.566956][ T5980] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 700.686383][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 700.733797][ T5830] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 700.755468][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.763940][ T5830] usb 1-1: Product: syz [ 700.768273][ T5830] usb 1-1: Manufacturer: syz [ 700.772883][ T5830] usb 1-1: SerialNumber: syz [ 700.776401][ T5980] usb 3-1: Using ep0 maxpacket: 8 [ 700.788237][ T5980] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 700.802856][ T5980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.813417][ T5980] usb 3-1: Product: syz [ 700.818189][ T5980] usb 3-1: Manufacturer: syz [ 700.823154][ T5980] usb 3-1: SerialNumber: syz [ 700.996067][ T5830] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 701.052664][ T5980] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 702.665267][ T5830] usb 1-1: USB disconnect, device number 34 [ 702.697443][ T5830] usblp0: removed [ 702.713420][ T23] usb 3-1: USB disconnect, device number 27 [ 702.777205][ T23] usblp1: removed [ 702.815768][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 707.086587][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 708.158339][T12565] tipc: Enabled bearer , priority 0 [ 709.034493][T12564] tipc: Disabling bearer [ 710.575763][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'. [ 710.587699][ T6425] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 710.905292][ T6425] usb 4-1: Using ep0 maxpacket: 8 [ 711.730019][ T6425] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 711.739590][ T6425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.747663][ T6425] usb 4-1: Product: syz [ 711.751826][ T6425] usb 4-1: Manufacturer: syz [ 711.756627][ T6425] usb 4-1: SerialNumber: syz [ 711.834055][T12600] tipc: Enabling of bearer rejected, failed to enable media [ 711.986851][ T6425] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 713.948069][ T5814] usb 4-1: USB disconnect, device number 27 [ 713.976776][ T5814] usblp0: removed [ 714.276418][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 714.426870][ T8] usb 3-1: device descriptor read/64, error -71 [ 715.767854][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 715.819381][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'. [ 715.941309][T12643] tipc: Enabled bearer , priority 0 [ 715.961073][T12642] tipc: Disabling bearer [ 716.026581][ T8] usb 3-1: device descriptor read/64, error -71 [ 716.288481][ T8] usb usb3-port1: attempt power cycle [ 716.776518][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 717.176754][ T6425] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 717.379886][ T6425] usb 1-1: Using ep0 maxpacket: 8 [ 717.402770][ T6425] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 717.466164][ T6425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.583373][ T6425] usb 1-1: Product: syz [ 717.589631][ T6425] usb 1-1: Manufacturer: syz [ 717.594278][ T6425] usb 1-1: SerialNumber: syz [ 717.646573][ T8] usb 3-1: device not accepting address 30, error -71 [ 717.909471][ T6425] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 719.751895][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2001'. [ 722.203084][ C1] usblp0: nonzero write bulk status received: -71 [ 722.210627][ T5980] usb 1-1: USB disconnect, device number 35 [ 722.324902][T12674] usblp0: removed [ 722.936389][ T5980] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 723.155968][ T5980] usb 1-1: no configurations [ 723.182725][ T5980] usb 1-1: can't read configurations, error -22 [ 723.436760][ T5980] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 723.677938][ T5980] usb 1-1: no configurations [ 723.715740][ T5980] usb 1-1: can't read configurations, error -22 [ 723.786239][ T5980] usb usb1-port1: attempt power cycle [ 724.416565][ T5980] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 724.458721][ T5980] usb 1-1: no configurations [ 724.496492][ T5980] usb 1-1: can't read configurations, error -22 [ 724.646700][ T5980] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 724.689567][ T5980] usb 1-1: no configurations [ 724.694180][ T5980] usb 1-1: can't read configurations, error -22 [ 724.714503][ T5980] usb usb1-port1: unable to enumerate USB device [ 725.106920][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 728.282089][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2022'. [ 733.416174][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2033'. [ 743.606489][ T5980] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 744.006737][ T5980] usb 4-1: Using ep0 maxpacket: 8 [ 744.069027][ T5980] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 744.100446][ T5980] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 744.116640][ T5980] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 744.129534][ T5980] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.148761][ T5980] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 744.160371][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.487592][ T5980] usbtmc 4-1:16.0: bulk endpoints not found [ 746.696556][ T54] usb 4-1: USB disconnect, device number 28 [ 747.468979][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.475627][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.037699][T12933] tipc: Enabled bearer , priority 0 [ 748.090919][T12933] tipc: Resetting bearer [ 748.114798][T12932] tipc: Disabling bearer [ 753.866598][ T8] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 754.078909][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 754.109057][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 754.127118][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.149297][ T8] usb 1-1: Product: syz [ 754.160887][ T8] usb 1-1: Manufacturer: syz [ 754.173436][ T8] usb 1-1: SerialNumber: syz [ 754.946000][ T8] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 756.749295][T13035] tipc: Enabled bearer , priority 0 [ 756.767415][T13035] syzkaller0: entered promiscuous mode [ 756.772890][T13035] syzkaller0: entered allmulticast mode [ 756.839802][T13034] tipc: Resetting bearer [ 756.869628][T13034] tipc: Disabling bearer [ 757.248850][ T8] usb 1-1: USB disconnect, device number 40 [ 757.318987][ T8] usblp0: removed [ 759.461276][T13066] tipc: Enabling of bearer rejected, failed to enable media [ 760.330166][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 761.386706][T13090] dvmrp8: entered allmulticast mode [ 764.297328][T13109] tipc: Enabled bearer , priority 0 [ 764.320511][T13109] syzkaller0: entered promiscuous mode [ 764.325996][T13109] syzkaller0: entered allmulticast mode [ 764.762439][T13108] tipc: Resetting bearer [ 764.964537][T13108] tipc: Disabling bearer [ 765.221901][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 765.426467][ T54] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 765.676674][ T54] usb 1-1: Using ep0 maxpacket: 8 [ 765.731416][ T54] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 765.802316][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.900683][ T54] usb 1-1: Product: syz [ 766.107195][ T54] usb 1-1: Manufacturer: syz [ 766.113010][ T54] usb 1-1: SerialNumber: syz [ 766.786748][ T54] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 768.120901][T13158] tipc: Enabled bearer , priority 0 [ 768.165614][T13158] syzkaller0: entered promiscuous mode [ 768.181057][T13158] syzkaller0: entered allmulticast mode [ 768.298223][ T54] usb 1-1: USB disconnect, device number 41 [ 768.309739][ T54] usblp0: removed [ 768.488451][T13157] tipc: Resetting bearer [ 768.589031][T13157] tipc: Disabling bearer [ 768.663576][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2132'. [ 772.176604][ T5830] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 772.446474][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 772.479396][ T5830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 772.522670][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.672337][ T5830] usb 3-1: Product: syz [ 772.685887][ T5830] usb 3-1: Manufacturer: syz [ 772.696077][ T5830] usb 3-1: SerialNumber: syz [ 772.974615][ T5830] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 773.282770][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2143'. [ 773.444140][T13200] tipc: Enabled bearer , priority 0 [ 773.469418][T13200] syzkaller0: entered promiscuous mode [ 773.476416][T13200] syzkaller0: entered allmulticast mode [ 773.559000][T13199] tipc: Resetting bearer [ 773.592751][T13199] tipc: Disabling bearer [ 775.398080][ T54] usb 3-1: USB disconnect, device number 32 [ 775.449631][ T54] usblp0: removed [ 775.937547][T13229] netlink: set zone limit has 8 unknown bytes [ 776.820958][T13236] tipc: Enabling of bearer rejected, failed to enable media [ 776.921806][T13232] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 776.928383][T13232] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 776.945285][T13232] vhci_hcd vhci_hcd.0: Device attached [ 777.096360][T13234] vhci_hcd: connection closed [ 777.096935][ T3434] vhci_hcd: stop threads [ 777.110878][ T3434] vhci_hcd: release socket [ 777.115851][ T3434] vhci_hcd: disconnect device [ 777.156473][ T6425] vhci_hcd: vhci_device speed not set [ 778.696609][ T5980] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 778.926380][ T5980] usb 1-1: Using ep0 maxpacket: 8 [ 779.033630][ T5980] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 779.044005][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.053265][ T5980] usb 1-1: Product: syz [ 779.064179][ T5980] usb 1-1: Manufacturer: syz [ 779.093904][ T5980] usb 1-1: SerialNumber: syz [ 779.419833][ T5980] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 779.795371][T13276] tipc: Enabling of bearer rejected, failed to enable media [ 781.806598][ T5830] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 782.530103][ T54] usb 1-1: USB disconnect, device number 42 [ 783.117915][ T2053] usblp0: removed [ 783.126353][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 783.149841][ T5830] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 783.186954][ T5830] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 783.206876][ T5830] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 783.218125][ T5830] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 783.233606][ T5830] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 784.401480][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.428778][ T5830] usb 3-1: usb_control_msg returned -71 [ 784.441930][ T5830] usbtmc 3-1:16.0: can't read capabilities [ 784.454342][ T5830] usb 3-1: USB disconnect, device number 33 [ 784.938474][T13314] tipc: Enabled bearer , priority 0 [ 784.964062][T13314] tipc: Resetting bearer [ 785.082778][T13313] tipc: Disabling bearer [ 787.272546][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2184'. [ 787.491108][ T5814] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 787.792137][ T5814] usb 4-1: Using ep0 maxpacket: 8 [ 787.888537][ T5814] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 787.944040][ T5814] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 788.015220][ T5814] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 788.114162][ T5814] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 788.232588][ T5814] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 788.326397][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.696504][ T5814] usb 4-1: usb_control_msg returned -32 [ 788.839030][ T5814] usbtmc 4-1:16.0: can't read capabilities [ 789.104688][ T5814] usb 4-1: USB disconnect, device number 29 [ 792.183025][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2198'. [ 793.719423][ T2053] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 795.175915][ T2053] usb 4-1: Using ep0 maxpacket: 8 [ 795.237158][ T2053] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 795.259730][ T2053] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 795.276421][ T2053] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 795.297945][ T2053] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.336396][ T2053] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 795.369192][ T2053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.737774][ T2053] usb 4-1: usb_control_msg returned -32 [ 795.778537][ T2053] usbtmc 4-1:16.0: can't read capabilities [ 795.868347][ T2053] usb 4-1: USB disconnect, device number 30 [ 801.176471][ T2053] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 801.376342][ T2053] usb 3-1: Using ep0 maxpacket: 8 [ 801.402169][ T2053] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 801.413395][ T2053] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 801.423359][ T2053] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 801.433968][ T2053] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 801.448513][ T2053] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 801.457831][ T2053] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.786991][ T2053] usb 3-1: usb_control_msg returned -32 [ 801.826362][ T2053] usbtmc 3-1:16.0: can't read capabilities [ 801.965798][ T2053] usb 3-1: USB disconnect, device number 34 [ 804.412692][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2224'. [ 804.991415][T13475] syzkaller0: entered promiscuous mode [ 804.997658][T13475] syzkaller0: entered allmulticast mode [ 805.277666][ T2053] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 805.356545][ T5830] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 805.468952][ T2053] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 805.480008][ T2053] usb 3-1: can't read configurations, error -61 [ 805.606440][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 805.619394][ T5830] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 805.629350][ T5830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 805.640073][ T5830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 805.651065][ T2053] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 805.651477][ T5830] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.676347][ T5830] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 805.685543][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.874312][ T2053] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 805.887442][ T2053] usb 3-1: can't read configurations, error -61 [ 805.894983][ T2053] usb usb3-port1: attempt power cycle [ 805.908177][ T5830] usb 1-1: usb_control_msg returned -32 [ 805.913835][ T5830] usbtmc 1-1:16.0: can't read capabilities [ 805.940209][ T5830] usb 1-1: USB disconnect, device number 43 [ 806.336330][ T2053] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 806.399115][ T2053] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 806.414428][ T2053] usb 3-1: can't read configurations, error -61 [ 806.646337][ T2053] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 806.719640][ T2053] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 806.830481][ T2053] usb 3-1: can't read configurations, error -61 [ 806.859364][ T2053] usb usb3-port1: unable to enumerate USB device [ 806.960753][T13493] tmpfs: Bad value for 'mpol' [ 808.957280][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.965329][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.921268][T13525] syzkaller0: entered promiscuous mode [ 812.927549][T13525] syzkaller0: entered allmulticast mode [ 816.010434][T12018] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 816.027948][T12018] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 816.048957][T12018] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 816.063675][T12018] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 816.072061][T12018] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 816.079981][T12018] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 818.189938][T12018] Bluetooth: hci0: command tx timeout [ 818.658567][ T1126] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.822506][T13541] wg1 speed is unknown, defaulting to 1000 [ 818.923306][ T1126] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.136369][ T5830] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 819.142429][ T1126] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.271832][ T1126] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.566523][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 819.738508][ T5830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 819.751781][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.760154][ T5830] usb 3-1: Product: syz [ 819.764337][ T5830] usb 3-1: Manufacturer: syz [ 819.774301][ T5830] usb 3-1: SerialNumber: syz [ 820.025604][ T5830] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 820.398819][T12018] Bluetooth: hci0: command tx timeout [ 820.534039][ T1126] tipc: Left network mode [ 821.022401][T13541] chnl_net:caif_netlink_parms(): no params data found [ 821.775300][T13541] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.806100][T13541] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.821811][T13541] bridge_slave_0: entered allmulticast mode [ 821.848436][T13541] bridge_slave_0: entered promiscuous mode [ 821.967429][ T8] usb 3-1: USB disconnect, device number 39 [ 822.000201][ T54] usblp0: removed [ 822.390338][T13541] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.426574][T12018] Bluetooth: hci0: command tx timeout [ 822.889112][T13541] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.909740][T13541] bridge_slave_1: entered allmulticast mode [ 822.918943][T13541] bridge_slave_1: entered promiscuous mode [ 824.506370][T12018] Bluetooth: hci0: command tx timeout [ 825.206948][T13541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.274545][T13541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.352225][T13541] team0: Port device team_slave_0 added [ 826.382534][T13541] team0: Port device team_slave_1 added [ 826.570483][ T1126] dvmrp8 (unregistering): left allmulticast mode [ 826.709274][T13541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.736477][ T5980] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 826.736836][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.819851][T13541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.986423][ T5980] usb 4-1: Using ep0 maxpacket: 8 [ 827.018943][T13541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.036784][ T5980] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 827.063347][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.073548][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.100250][T13541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.116734][ T5980] usb 4-1: Product: syz [ 827.166663][ T5980] usb 4-1: Manufacturer: syz [ 827.173037][T13541] hsr_slave_0: entered promiscuous mode [ 827.194914][ T5980] usb 4-1: SerialNumber: syz [ 827.204389][T13541] hsr_slave_1: entered promiscuous mode [ 827.249766][T13541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.291637][T13541] Cannot create hsr debugfs directory [ 827.477849][ T5980] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 828.793943][ T1126] hsr_slave_0: left promiscuous mode [ 828.812733][ T1126] hsr_slave_1: left promiscuous mode [ 828.838734][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.850443][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.860860][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.868968][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.877853][ T1126] bridge_slave_1: left allmulticast mode [ 828.883714][ T1126] bridge_slave_1: left promiscuous mode [ 828.892203][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.910921][ T1126] bridge_slave_0: left allmulticast mode [ 828.917316][ T1126] bridge_slave_0: left promiscuous mode [ 828.923417][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.500198][ T1126] veth1_macvtap: left promiscuous mode [ 829.571980][ T1126] veth0_macvtap: left promiscuous mode [ 829.631444][ T1126] veth1_vlan: left promiscuous mode [ 829.686035][ T1126] veth0_vlan: left promiscuous mode [ 829.945203][ T23] usb 4-1: USB disconnect, device number 31 [ 829.953417][ T23] usblp0: removed [ 830.888328][ T1126] team0 (unregistering): Port device geneve0 removed [ 831.772188][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 831.829091][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 831.937759][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.063166][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.730014][ T1126] bond0 (unregistering): Released all slaves [ 838.391954][T13541] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 838.414096][T13541] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 838.434391][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2281'. [ 838.448337][T13541] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 838.468153][T13541] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 838.935961][T13541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.033919][T13541] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.054040][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.061298][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.126872][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.134209][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.785918][T13541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.874643][T13541] veth0_vlan: entered promiscuous mode [ 841.908376][T13541] veth1_vlan: entered promiscuous mode [ 842.321234][T13541] veth0_macvtap: entered promiscuous mode [ 842.449796][T13541] veth1_macvtap: entered promiscuous mode [ 842.761725][T13541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.772920][T13541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.782835][T13541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.796271][T13541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.808687][T13541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.819287][T13541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.830068][T13541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.841819][T13541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.852903][T13541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.869911][T13541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.893106][T13541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.956028][T13541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.991579][T13541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.026729][T13541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.305386][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.370691][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.820758][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.837269][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.049390][T13888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2299'. [ 849.111929][T13892] tipc: Enabled bearer , priority 0 [ 849.271712][T13892] tipc: Resetting bearer [ 849.701467][T13889] tipc: Disabling bearer [ 855.040388][T13926] wg2: entered allmulticast mode [ 857.005665][T13964] dvmrp8: entered allmulticast mode [ 870.349014][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.355533][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 968.306193][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 968.313164][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5976/1:b..l [ 968.321569][ C0] rcu: (detected by 0, t=10502 jiffies, g=80229, q=193 ncpus=2) [ 968.329271][ C0] task:kworker/u4:21 state:R running task stack:22072 pid:5976 ppid:2 flags:0x00004000 [ 968.341191][ C0] Workqueue: bat_events batadv_nc_worker [ 968.346850][ C0] Call Trace: [ 968.350114][ C0] [ 968.353041][ C0] __schedule+0x14d2/0x44d0 [ 968.357545][ C0] ? __bfs+0x5a0/0x5c0 [ 968.361658][ C0] ? asan.module_dtor+0x20/0x20 [ 968.366495][ C0] ? mark_lock+0x94/0x320 [ 968.371005][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 968.376978][ C0] ? preempt_schedule_irq+0xaa/0x140 [ 968.382310][ C0] preempt_schedule_irq+0xb5/0x140 [ 968.387425][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 968.393158][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 968.399063][ C0] irqentry_exit+0x67/0x70 [ 968.403476][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 968.409453][ C0] RIP: 0010:lock_acquire+0x1f2/0x410 [ 968.414726][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 968.434361][ C0] RSP: 0018:ffffc90004e6fa40 EFLAGS: 00000206 [ 968.440425][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 66439a5c1b968400 [ 968.448405][ C0] RDX: 0000000000000000 RSI: ffffffff8aaacbc0 RDI: ffffffff8afc6700 [ 968.456370][ C0] RBP: ffffc90004e6fb48 R08: dffffc0000000000 R09: 1ffffffff21b46a4 [ 968.464343][ C0] R10: dffffc0000000000 R11: fffffbfff21b46a5 R12: 1ffff920009cdf54 [ 968.472304][ C0] R13: ffffffff8cd2fba0 R14: 0000000000000246 R15: dffffc0000000000 [ 968.480293][ C0] ? batadv_nc_worker+0xd2/0x610 [ 968.485223][ C0] ? read_lock_is_recursive+0x20/0x20 [ 968.490592][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 968.496561][ C0] ? batadv_nc_worker+0xd2/0x610 [ 968.501487][ C0] batadv_nc_worker+0xef/0x610 [ 968.506250][ C0] ? batadv_nc_worker+0xd2/0x610 [ 968.511213][ C0] ? process_scheduled_works+0x957/0x15b0 [ 968.516934][ C0] process_scheduled_works+0xa45/0x15b0 [ 968.522626][ C0] ? assign_work+0x400/0x400 [ 968.527412][ C0] ? assign_work+0x39e/0x400 [ 968.532082][ C0] worker_thread+0xa55/0xfc0 [ 968.536673][ C0] kthread+0x2fa/0x390 [ 968.540744][ C0] ? pr_cont_work+0x560/0x560 [ 968.545448][ C0] ? kthread_blkcg+0xd0/0xd0 [ 968.550024][ C0] ret_from_fork+0x48/0x80 [ 968.554542][ C0] ? kthread_blkcg+0xd0/0xd0 [ 968.559118][ C0] ret_from_fork_asm+0x11/0x20 [ 968.563878][ C0] [ 968.566883][ C0] rcu: rcu_preempt kthread starved for 10287 jiffies! g80229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 968.578145][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 968.588096][ C0] rcu: RCU grace-period kthread stack dump: [ 968.593964][ C0] task:rcu_preempt state:R running task stack:27592 pid:17 ppid:2 flags:0x00004000 [ 968.604726][ C0] Call Trace: [ 968.608001][ C0] [ 968.610918][ C0] __schedule+0x14d2/0x44d0 [ 968.615443][ C0] ? asan.module_dtor+0x20/0x20 [ 968.620278][ C0] ? enqueue_timer+0x225/0x530 [ 968.625023][ C0] ? __mod_timer+0x984/0xdb0 [ 968.629601][ C0] schedule+0xbd/0x170 [ 968.633672][ C0] schedule_timeout+0x160/0x280 [ 968.638600][ C0] ? console_conditional_schedule+0x40/0x40 [ 968.644476][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 968.650358][ C0] ? update_process_times+0x1b0/0x1b0 [ 968.655718][ C0] ? prepare_to_swait_event+0x339/0x360 [ 968.661255][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 968.666095][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 968.672234][ C0] ? rcu_gp_init+0x1510/0x1510 [ 968.676985][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 968.681818][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 968.687002][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 968.692182][ C0] rcu_gp_kthread+0x99/0x380 [ 968.696760][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 968.701860][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 968.706785][ C0] ? __kthread_parkme+0x162/0x1c0 [ 968.711797][ C0] kthread+0x2fa/0x390 [ 968.715861][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 968.720972][ C0] ? kthread_blkcg+0xd0/0xd0 [ 968.725550][ C0] ret_from_fork+0x48/0x80 [ 968.729952][ C0] ? kthread_blkcg+0xd0/0xd0 [ 968.734527][ C0] ret_from_fork_asm+0x11/0x20 [ 968.739282][ C0] [ 968.742302][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 968.748704][ C0] Sending NMI from CPU 0 to CPUs 1: [ 968.753909][ C1] NMI backtrace for cpu 1 [ 968.753931][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.100-syzkaller #0 [ 968.753946][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 968.753954][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 968.753978][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 16 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 968.753992][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 968.754005][ C1] RAX: 27ca029c09d63600 RBX: ffffffff81619a5b RCX: 27ca029c09d63600 [ 968.754017][ C1] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6700 [ 968.754028][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 968.754039][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a7da8 [ 968.754050][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100364e780 [ 968.754060][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 968.754073][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 968.754084][ C1] CR2: 0000200000047000 CR3: 000000007c841000 CR4: 00000000003506e0 [ 968.754097][ C1] Call Trace: [ 968.754104][ C1] [ 968.754109][ C1] default_idle+0x13/0x20 [ 968.754128][ C1] default_idle_call+0x6c/0xa0 [ 968.754149][ C1] do_idle+0x1eb/0x510 [ 968.754169][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 968.754184][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 968.754203][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 968.754231][ C1] cpu_startup_entry+0x43/0x60 [ 968.754248][ C1] start_secondary+0xee/0xf0 [ 968.754263][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 968.754290][ C1]