last executing test programs: 2m36.909152706s ago: executing program 1 (id=1261): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000128, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r6 = socket(0x2b, 0x6, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e22, 0xfffffffd, @local}, 0x0, {[0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x9]}}, 0x5c) r7 = socket$inet6(0xa, 0x400000000001, 0x7fffffff) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r8, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x3, 0x400182}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r9 = syz_open_dev$cec(&(0x7f00000029c0), 0x0, 0x20b41) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000002a00)={"8ae484be", 0x3, 0x5, 0x3, 0x3, 0x2, "3446c9426366e6dd08ca51320aa57b", 'ng].', "2baa0d1a", "7895169a", ["efa3f1a1691f20cdf2dca736", "b862fe2ddf691f3de8c3a97d", "324b9b52e04bd98dc0047012", "c99790e23a4e91a9a8e22bcf"]}) 2m31.528165518s ago: executing program 1 (id=1275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xa, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x41}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x1}, 0x5) 2m30.686582215s ago: executing program 1 (id=1280): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)=ANY=[@ANYRES8=r3], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) process_vm_readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000180)=""/87, 0x57}], 0x2, &(0x7f0000002040)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/192, 0xc0}, {0x0}], 0x3, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2505"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m29.666147237s ago: executing program 1 (id=1284): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400040000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d614404208000240000000010c0001004e465155455545"], 0xd0}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x7) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@newtfilter={0x168c, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1650, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x108c, 0x2, [@m_vlan={0x1088, 0x4, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x36c, 0x9, 0x10000000, 0x8000}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x1000, 0x2, 0xd, 0xffffff00}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_ACT={0x118, 0x2, [@m_skbmod={0x40, 0xa, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0x9, 0x6, "51ae17358d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0xd4, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0xa8, 0x6, "09cbff9b523c06de5ddf48db5aee2f1e08145a648dfe13da77e96b3472518bcc19116c945eb9dfd1e5f2be5bd376a3776e041c0d5186b835e347d8a2bed71816daf33d4e0e71a11e8b17ac41c0985547d284312e94b801d460960243b437224a42e6f4f2aa87e2a8f1e8221a0b76bccccfb1f0973fd512a5ec835369c8cdeba4cbb2840949625e37bbd6ed3a70625cca6a1105d8329b8f7a958db3c0dc7652ede5bf989d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x498, 0x2, [@m_nat={0x1bc, 0x2, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x40, 0x8, 0xa14, 0xdf64}, @rand_addr=0x64010101, @rand_addr=0x64010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdf9, 0x0, 0x20000000, 0x7, 0xfffffff6}, @multicast1, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xbb, 0x200, 0x7, 0x3, 0x40}, @local, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x4, 0x8, 0x0, 0x6}, @multicast1, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x7fffffff, 0x1, 0x10000, 0x7fff}, @multicast1, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x7, 0x4, 0x100}, @remote, @private=0xa010101, 0xff}}]}, {0xa4, 0x6, "6055269b10ca0d82e61aaa8a4e8cb3d062738b917d055d18cc085615aa9a0cfeae7d8040a02a4beeef9291c005db6f4b5cf17f8e39032009502d1f4593bf051d9daf6e1e7c6c44aedf816da58b4cbadf3f53ee55abb21520288ab7584a4756ed23faccf8c56d56bf56ec88769ee455c12c0a370065c46b475129828fa682d1923f27316e34c7272cf3ee1e42ba6f6194d122fb804394573378e268435f685aec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0xe0, 0x14, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfffa}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0xc}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x90000000, 0x823, 0x20000000, 0x7, 0x8}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x40}]}, {0x82, 0x6, "0f22e32c3863e05311aa662b32b8a2330fad222bc296b73b0d03557ac9db7728dcdd0e5250e78bfe5a596fbc1eff493f71c29b8cccc4498ff1555fdcf16e68bf7f6880a8d34c3a1fad3d55d7411c5fd819124e04d5bf913391409c6d3ca8ad34c2b6ce1cb583c1b74c86eac89dab0d751a9e59fcb1c0b12c4e3264160171"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0xc0, 0x1, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x8, 0xfffffffb, 0x4}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x11ef, 0x10, 0x10000000, 0x6, 0x785fd4f}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x2, 0xffff, 0xff}, 0x33}}]}, {0x40, 0x6, "3da34d93aaab866432a790d700d5195e09fe33e30bf68458e3fa67053f59d9ea26eea8948d01fcda82694820c8d6cf6f5d052c30247082cc6aeb8cea"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x138, 0x7, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x100, 0x81, 0x20000000, 0xec, 0xfffffffd}, 0x2}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x5e, 0x3, 0x1}, 0x3}}]}, {0xbc, 0x6, "cd5f8ca5355050dc2118b0acc3b891e7597763e320c3a9cbb30cf9513498e6477df22859ccf178542874e040245eecfb2fd9cb10182acd8f57c540040f02cd05e3390af54116c88552fad3560336c1ff7b2746ec2a8363066a3226667268b150a149a2c455507c15e917c72c52297afd7e4e98f5b88f3e9e505c928c2b4c0139afc26eaf935b562924ff7999ae16365847a34a9ae624d5803b7a2f244f14b53329f57e4672f7947ca49e22ab80f2c70fc6cfeb0aac347401"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}]}, 0x168c}, 0x1, 0x0, 0x0, 0x810}, 0x4040814) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="34001c000000040005000000040600150002000000100016800c000880070001800400"/49], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x2a00, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r7 = syz_ublk_setup_io_uring(0x7e6, &(0x7f0000000400)={0x0, 0x80a834, 0x8, 0x5, 0x38e, 0x0, r2}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000580)) mmap$IORING_OFF_CQ_RING(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x4, 0x10010, r7, 0x8000000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) mbind(&(0x7f000019b000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000200)=0xffffffffffffffff, 0x8000008, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x246082, 0x24) 2m27.733398209s ago: executing program 1 (id=1291): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xdc0, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf}, 0x3e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000100)="f8", 0x1, 0xfffffffffffffffe) keyctl$search(0xa, r3, &(0x7f00000001c0)='user\x00', 0x0, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="3103fc1f0002000000400800000008000300", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r1, 0x125f, 0x0) 2m27.594695993s ago: executing program 1 (id=1293): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6c, @private=0xa010100, 0x4e22, 0x6, 'rr\x00', 0x11, 0x1, 0x71}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socket(0x2, 0x80805, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000200)=0xdc, 0x7, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x105800) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x3, 0x4, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000180)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xebq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfd\x8b\x93o9:\x00\x80\xe1^\xc8\xe9\x83') setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x40}, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) 2m12.236604013s ago: executing program 32 (id=1293): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6c, @private=0xa010100, 0x4e22, 0x6, 'rr\x00', 0x11, 0x1, 0x71}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socket(0x2, 0x80805, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000200)=0xdc, 0x7, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x105800) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x3, 0x4, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000180)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xebq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfd\x8b\x93o9:\x00\x80\xe1^\xc8\xe9\x83') setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x40}, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) 7.680218747s ago: executing program 0 (id=1793): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x109040, 0x0) r0 = io_uring_setup(0x36b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000003c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9402000090f900330a010d00"], 0x4a) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1a3) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x40086603, &(0x7f0000000040)) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0xee00, 0x0, r5) fcntl$setlease(r3, 0x400, 0x0) 7.480978273s ago: executing program 4 (id=1795): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r5, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) 6.214099203s ago: executing program 2 (id=1797): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 5.767061487s ago: executing program 0 (id=1798): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000880)={0x430, 0x3f4, 0x100, 0x70bd28, 0x25dfdbfb, {0x10, 0x1, 0x0, [0x2, 0x5, 0x8, 0x3, 0x1ff, 0x6689, 0xee, 0x8, 0x6, 0x6, 0x100, 0x89, 0x0, 0x5, 0xa, 0x8, 0x9, 0x1000, 0xdf9, 0xa3, 0x2, 0x5, 0x2, 0x8, 0x1, 0x1, 0xe, 0x9, 0x5e4, 0x7f, 0x8, 0x1ff, 0x4, 0xffffffff, 0x9, 0x1, 0x2, 0x9, 0x4, 0xa, 0x2, 0xb, 0x80000001, 0x1, 0x6, 0x0, 0xffff31ae, 0x3, 0x2, 0x0, 0x3, 0x3, 0x101, 0x7, 0x6, 0x0, 0x2, 0xf90, 0x2, 0xe, 0x77, 0xffff716b, 0x9, 0x3], [0xe09d, 0x3, 0x3ff, 0x4, 0x200, 0x4, 0xfffff801, 0x400, 0xfff, 0x1, 0x71, 0x8, 0x9, 0x495, 0x1, 0x9, 0x10, 0x5, 0x10000, 0x81, 0xea, 0x8, 0x6a, 0xffffffff, 0xc, 0x2, 0x9, 0x4, 0xfff, 0xc, 0x7fffffff, 0x8, 0x1b, 0x5, 0x0, 0x7, 0x8, 0xfffffff8, 0x2, 0x4, 0x4, 0x80, 0x9, 0x9, 0x1, 0x2, 0x200, 0x2, 0x7, 0xffffffb3, 0xb, 0x8, 0x10001, 0x4, 0x10000, 0x3, 0x7305, 0x6, 0xffffffff, 0x9, 0x4, 0x6, 0xea, 0x2], [0x9, 0x3, 0x7fffffff, 0x800, 0x134, 0x7, 0x5, 0x9, 0x7, 0xffff, 0x65, 0x2, 0x4, 0xfffffffc, 0x8, 0x100, 0x7, 0x8, 0x1e5, 0xffffff29, 0x1, 0x8, 0xe39d, 0x7, 0xfffffffe, 0x9, 0xd, 0x81, 0xa, 0x4, 0x7, 0x8000, 0x2, 0xac73, 0x1, 0x8, 0x6, 0x8, 0x2d1, 0x4c7, 0x40, 0x4, 0x6, 0x8, 0xa0, 0x3, 0x1, 0x9, 0x7, 0x3, 0x7, 0x3, 0x7, 0x9, 0x87c2d669, 0x7, 0x3ff, 0x0, 0x8, 0x80000001, 0x1, 0x80, 0x7ff, 0x2], [0x8001, 0x6, 0xc, 0x7fffffff, 0x40, 0x7, 0x7, 0x2, 0xc26, 0x7fff, 0xb8, 0x200, 0xfffffe01, 0x231a, 0x8, 0xf7, 0x4, 0x2, 0x6, 0x80, 0x7, 0x81, 0xa, 0xa7, 0x80000000, 0xfffffff7, 0x9, 0x0, 0x5, 0xfffffffd, 0x8, 0x9, 0xfff, 0x800, 0xfff, 0x524, 0x9, 0x2, 0x6, 0x9, 0x21b, 0x0, 0x9, 0x21bc, 0x3878, 0x9, 0x4d06, 0x100, 0xfffffffa, 0xd, 0x1, 0x0, 0x3, 0x9, 0x7, 0xaa, 0x5, 0x1, 0x3ff, 0x2, 0x280, 0x7, 0x4, 0x7f], 0xf, ['/dev/nullb0\x00', 'P.\x00']}, [""]}, 0x430}, 0x1, 0x0, 0x0, 0x8804}, 0x64044080) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) syz_open_dev$loop(0x0, 0xfffffffffffffffc, 0x101200) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x10, &(0x7f0000000100)='barrier') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 5.706571679s ago: executing program 4 (id=1799): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r1, 0x211d9572}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000300)={r2}, &(0x7f00000003c0)=0x8) 5.612459582s ago: executing program 3 (id=1800): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r1, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0) close(r5) close(r4) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x100, r6}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r3, 0x0) close(r3) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 4.680878262s ago: executing program 4 (id=1801): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r0, &(0x7f0000000240)=""/157, 0x9d) 4.637154693s ago: executing program 3 (id=1802): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 4.634211803s ago: executing program 2 (id=1803): bind$x25(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) 4.517337477s ago: executing program 3 (id=1804): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6c, @private=0xa010100, 0x4e22, 0x6, 'rr\x00', 0x11, 0x1, 0x71}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x84000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x105800) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x3, 0x4, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3]}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000180)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xebq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfd\x8b\x93o9:\x00\x80\xe1^\xc8\xe9\x83') socket$nl_netfilter(0x10, 0x3, 0xc) 4.364519532s ago: executing program 0 (id=1805): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0x7}, {0x16, 0x2, 0x9}]}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) bind$can_j1939(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xb, 0x10}, {0x3, 0xfff3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r3) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r8, 0x4) 4.306824584s ago: executing program 4 (id=1806): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, 0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@delqdisc={0x58, 0x26, 0x1, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xf, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x35, 0xff, 0x7fffffff, 0x4, 0x33d7ef31, 0xe, 0x3, 0x6, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10b) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000004010500ff020000000000000000000000000001000000003300000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000073500000000000000000000000000000000eb"], 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x8000003d) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002e0067ea25bd7000fcdbdf250b0000000a000200"], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1) 3.062421053s ago: executing program 2 (id=1807): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x109040, 0x0) r0 = io_uring_setup(0x36b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000003c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9402000090f900330a010d00"], 0x4a) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1a3) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x40086603, &(0x7f0000000040)) fstat(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r5, 0x0) fcntl$setlease(r3, 0x400, 0x0) 3.000674495s ago: executing program 3 (id=1808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4080) 1.2766615s ago: executing program 4 (id=1809): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x6, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f021}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r6, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x3, 0xffffffffffffffff], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42e700, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.27618353s ago: executing program 2 (id=1810): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x100) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={"34e17141", 0x200, 0x5, 0x8, 0x2, 0x6d, "8a86ccfd751b15dac5ddb6f309fe93", "2f2c30e1", '\x00', "f119ab00", ["fcffcd46ca70da7b00", "1400", "681218fcfcdc175ade9e1fc0", "cbeab43dbb74b96740431a04"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000002c0)={0x7, 0x9, 0x3, 0x0, 0x100004, 0x7, "2aa0d9f7b163121cf016148eaa7c593f", 0xfb, 0x1, 0x3, 0x6, 0x3, 0x9a, 0x7c}) 1.191632542s ago: executing program 3 (id=1811): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 950.40705ms ago: executing program 2 (id=1812): syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101701) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000009c0), 0xa0001, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 858.163013ms ago: executing program 0 (id=1813): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000880)={0x430, 0x3f4, 0x100, 0x70bd28, 0x25dfdbfb, {0x10, 0x1, 0x0, [0x2, 0x5, 0x8, 0x3, 0x1ff, 0x6689, 0xee, 0x8, 0x6, 0x6, 0x100, 0x89, 0x0, 0x5, 0xa, 0x8, 0x9, 0x1000, 0xdf9, 0xa3, 0x2, 0x5, 0x2, 0x8, 0x1, 0x1, 0xe, 0x9, 0x5e4, 0x7f, 0x8, 0x1ff, 0x4, 0xffffffff, 0x9, 0x1, 0x2, 0x9, 0x4, 0xa, 0x2, 0xb, 0x80000001, 0x1, 0x6, 0x0, 0xffff31ae, 0x3, 0x2, 0x0, 0x3, 0x3, 0x101, 0x7, 0x6, 0x0, 0x2, 0xf90, 0x2, 0xe, 0x77, 0xffff716b, 0x9, 0x3], [0xe09d, 0x3, 0x3ff, 0x4, 0x200, 0x4, 0xfffff801, 0x400, 0xfff, 0x1, 0x71, 0x8, 0x9, 0x495, 0x1, 0x9, 0x10, 0x5, 0x10000, 0x81, 0xea, 0x8, 0x6a, 0xffffffff, 0xc, 0x2, 0x9, 0x4, 0xfff, 0xc, 0x7fffffff, 0x8, 0x1b, 0x5, 0x0, 0x7, 0x8, 0xfffffff8, 0x2, 0x4, 0x4, 0x80, 0x9, 0x9, 0x1, 0x2, 0x200, 0x2, 0x7, 0xffffffb3, 0xb, 0x8, 0x10001, 0x4, 0x10000, 0x3, 0x7305, 0x6, 0xffffffff, 0x9, 0x4, 0x6, 0xea, 0x2], [0x9, 0x3, 0x7fffffff, 0x800, 0x134, 0x7, 0x5, 0x9, 0x7, 0xffff, 0x65, 0x2, 0x4, 0xfffffffc, 0x8, 0x100, 0x7, 0x8, 0x1e5, 0xffffff29, 0x1, 0x8, 0xe39d, 0x7, 0xfffffffe, 0x9, 0xd, 0x81, 0xa, 0x4, 0x7, 0x8000, 0x2, 0xac73, 0x1, 0x8, 0x6, 0x8, 0x2d1, 0x4c7, 0x40, 0x4, 0x6, 0x8, 0xa0, 0x3, 0x1, 0x9, 0x7, 0x3, 0x7, 0x3, 0x7, 0x9, 0x87c2d669, 0x7, 0x3ff, 0x0, 0x8, 0x80000001, 0x1, 0x80, 0x7ff, 0x2], [0x8001, 0x6, 0xc, 0x7fffffff, 0x40, 0x7, 0x7, 0x2, 0xc26, 0x7fff, 0xb8, 0x200, 0xfffffe01, 0x231a, 0x8, 0xf7, 0x4, 0x2, 0x6, 0x80, 0x7, 0x81, 0xa, 0xa7, 0x80000000, 0xfffffff7, 0x9, 0x0, 0x5, 0xfffffffd, 0x8, 0x9, 0xfff, 0x800, 0xfff, 0x524, 0x9, 0x2, 0x6, 0x9, 0x21b, 0x0, 0x9, 0x21bc, 0x3878, 0x9, 0x4d06, 0x100, 0xfffffffa, 0xd, 0x1, 0x0, 0x3, 0x9, 0x7, 0xaa, 0x5, 0x1, 0x3ff, 0x2, 0x280, 0x7, 0x4, 0x7f], 0xf, ['/dev/nullb0\x00', 'P.\x00']}, [""]}, 0x430}, 0x1, 0x0, 0x0, 0x8804}, 0x64044080) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) syz_open_dev$loop(0x0, 0xfffffffffffffffc, 0x101200) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x10, &(0x7f0000000100)='barrier') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 324.80429ms ago: executing program 0 (id=1814): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) r1 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r1, &(0x7f0000003ac0)={0x2020}, 0x2023) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x509) close(r4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46018e"], 0x78) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB="0000610a000000009a1800000000000000000000007d", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x161480, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @empty, 0x4e20, 0x3, 'wlc\x00', 0x3, 0xa7e, 0x100070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, 0x0, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0x100, 0x40000000}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 269.918052ms ago: executing program 2 (id=1815): bind$x25(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) 269.116712ms ago: executing program 3 (id=1816): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) 196.165224ms ago: executing program 4 (id=1817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 0 (id=1818): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) kernel console output (not intermixed with test programs): C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.891556][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.902337][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.911480][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.920607][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.929731][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.940560][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.005528][ T5815] libceph: connect (1)[c::]:6789 error -97 [ 456.011610][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 456.565457][ T5833] libceph: connect (1)[c::]:6789 error -97 [ 456.585283][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 457.333526][ T9961] ceph: No mds server is up or the cluster is laggy [ 457.430030][ T5787] block nbd1: Receive control failed (result -104) [ 457.445200][ T5814] usb 1-1: USB disconnect, device number 13 [ 457.487444][ T1151] block nbd0: Possible stuck request ffff888022040000: control (read@0,1024B). Runtime 30 seconds [ 457.500544][ T1151] block nbd0: Possible stuck request ffff888022040200: control (read@1024,1024B). Runtime 30 seconds [ 457.511596][ T1151] block nbd0: Possible stuck request ffff888022040400: control (read@2048,1024B). Runtime 30 seconds [ 457.522666][ T1151] block nbd0: Possible stuck request ffff888022040600: control (read@3072,1024B). Runtime 30 seconds [ 458.072935][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 458.100538][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'. [ 458.126441][T10029] block nbd2: shutting down sockets [ 460.116231][ T5774] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 460.615438][ T5774] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 460.644985][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.653035][ T5774] usb 4-1: Product: syz [ 460.664698][ T5774] usb 4-1: Manufacturer: syz [ 460.681620][ T5774] usb 4-1: SerialNumber: syz [ 460.696561][ T5774] usb 4-1: config 0 descriptor?? [ 460.703946][ T5774] ch341 4-1:0.0: ch341-uart converter detected [ 461.075698][ T5774] usb 4-1: failed to receive control message: -121 [ 461.147688][ T5774] ch341-uart: probe of ttyUSB0 failed with error -121 [ 461.570474][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'. [ 461.615408][T10078] block nbd2: shutting down sockets [ 462.232559][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 462.386520][T10091] syzkaller0: entered promiscuous mode [ 462.392234][T10091] syzkaller0: entered allmulticast mode [ 462.408135][T10091] tipc: Enabled bearer , priority 0 [ 462.422925][T10091] tipc: Resetting bearer [ 462.431359][T10090] tipc: Resetting bearer [ 462.449851][T10090] tipc: Disabling bearer [ 462.552769][ T5833] usb 4-1: USB disconnect, device number 13 [ 462.562377][ T5833] ch341 4-1:0.0: device disconnected [ 462.703342][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 462.735670][T10102] block nbd2: shutting down sockets [ 462.808240][T10106] fuse: Unknown parameter 'grou00000000000000000000' [ 463.164599][T10118] syzkaller0: entered promiscuous mode [ 463.170369][T10118] syzkaller0: entered allmulticast mode [ 463.203634][T10118] tipc: Enabled bearer , priority 0 [ 463.279212][T10118] tipc: Resetting bearer [ 463.374834][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 463.504670][T10117] tipc: Resetting bearer [ 463.620033][T10117] tipc: Disabling bearer [ 463.844664][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'. [ 463.877442][T10130] block nbd2: shutting down sockets [ 463.975248][ T5774] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 464.183161][ T5774] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 464.192657][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.214936][ T5774] usb 4-1: Product: syz [ 464.219243][ T5774] usb 4-1: Manufacturer: syz [ 464.223867][ T5774] usb 4-1: SerialNumber: syz [ 464.247073][ T5774] usb 4-1: config 0 descriptor?? [ 464.254398][ T5774] ch341 4-1:0.0: ch341-uart converter detected [ 464.423427][T10148] syzkaller0: entered promiscuous mode [ 464.435439][T10152] fuse: Unknown parameter 'grou00000000000000000000' [ 464.442457][T10148] syzkaller0: entered allmulticast mode [ 464.618232][ T5774] usb 4-1: failed to receive control message: -121 [ 464.618531][T10148] tipc: Enabled bearer , priority 0 [ 464.773698][T10154] tipc: Resetting bearer [ 464.962147][T10147] tipc: Resetting bearer [ 465.201356][T10147] tipc: Disabling bearer [ 465.278534][ T5774] ch341-uart: probe of ttyUSB0 failed with error -121 [ 465.437721][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 465.465599][T10160] block nbd2: shutting down sockets [ 465.741659][T10169] syzkaller0: entered promiscuous mode [ 465.755017][T10169] syzkaller0: entered allmulticast mode [ 465.766751][T10169] tipc: Enabled bearer , priority 0 [ 465.775511][T10168] tipc: Resetting bearer [ 465.818127][T10168] tipc: Disabling bearer [ 466.246400][T10179] binder: 10178:10179 ioctl 4018620d 0 returned -22 [ 466.370722][T10185] syzkaller0: entered promiscuous mode [ 466.377327][T10185] syzkaller0: entered allmulticast mode [ 466.387169][T10185] tipc: Enabled bearer , priority 0 [ 466.402492][T10185] tipc: Resetting bearer [ 466.410024][T10184] tipc: Resetting bearer [ 466.433219][T10184] tipc: Disabling bearer [ 466.726429][ T5833] usb 4-1: USB disconnect, device number 14 [ 466.747513][ T5833] ch341 4-1:0.0: device disconnected [ 466.885517][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1138'. [ 466.965705][T10199] block nbd2: shutting down sockets [ 467.019199][T10203] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1139'. [ 468.276211][T10205] binder: 10204:10205 ioctl 4018620d 0 returned -22 [ 468.765853][ T5814] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 469.081878][ T5814] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 469.099430][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.108479][ T5814] usb 2-1: Product: syz [ 469.112820][ T5814] usb 2-1: Manufacturer: syz [ 469.118355][ T5814] usb 2-1: SerialNumber: syz [ 469.129951][ T5814] usb 2-1: config 0 descriptor?? [ 469.138068][ T5814] ch341 2-1:0.0: ch341-uart converter detected [ 469.341303][ T5814] usb 2-1: failed to receive control message: -121 [ 469.348173][ T5814] ch341-uart: probe of ttyUSB0 failed with error -121 [ 469.510279][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 469.566195][T10234] block nbd2: shutting down sockets [ 470.356442][T10239] binder: 10238:10239 ioctl 4018620d 0 returned -22 [ 471.792183][ T28] usb 2-1: USB disconnect, device number 16 [ 471.847295][T10256] syzkaller0: entered promiscuous mode [ 471.852919][T10256] syzkaller0: entered allmulticast mode [ 471.888126][ T28] ch341 2-1:0.0: device disconnected [ 471.910305][T10256] tipc: Enabled bearer , priority 0 [ 471.974267][T10256] tipc: Resetting bearer [ 472.003521][T10254] tipc: Resetting bearer [ 472.059802][T10254] tipc: Disabling bearer [ 472.171692][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1162'. [ 472.986770][T10264] block nbd2: shutting down sockets [ 473.257671][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 473.672001][T10272] binder: 10271:10272 ioctl c0306201 0 returned -14 [ 475.879492][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 475.926289][T10295] block nbd2: shutting down sockets [ 477.076010][T10313] binder: 10312:10313 ioctl c0306201 0 returned -14 [ 478.372787][T10335] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 478.555837][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'. [ 479.342051][ T27] audit: type=1326 audit(1781369580.293:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10339 comm="syz.1.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f927699ce59 code=0x0 [ 480.115016][ T27] audit: type=1326 audit(1781369581.063:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.1179" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bb119ce59 code=0x0 [ 480.287833][T10348] binder: 10347:10348 ioctl c0306201 0 returned -14 [ 483.748073][T10383] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 483.754613][T10383] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 483.762523][T10383] vhci_hcd vhci_hcd.0: Device attached [ 484.355995][ T9031] usb 38-1: SetAddress Request (14) to port 0 [ 484.448932][ T9031] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 484.582850][T10384] vhci_hcd: connection closed [ 484.583892][ T12] vhci_hcd: stop threads [ 484.730833][ T12] vhci_hcd: release socket [ 484.774966][ T12] vhci_hcd: disconnect device [ 485.691227][ T1151] block nbd1: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 30 seconds [ 486.584673][T10413] fuse: Bad value for 'user_id' [ 486.831125][T10421] syzkaller0: entered promiscuous mode [ 486.841819][T10421] syzkaller0: entered allmulticast mode [ 486.883628][T10425] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 486.943472][T10421] tipc: Enabled bearer , priority 0 [ 487.064265][T10421] tipc: Resetting bearer [ 487.342409][T10420] tipc: Resetting bearer [ 487.819557][ T1151] block nbd0: Possible stuck request ffff888022040000: control (read@0,1024B). Runtime 60 seconds [ 487.835026][ T1151] block nbd0: Possible stuck request ffff888022040200: control (read@1024,1024B). Runtime 60 seconds [ 487.847857][ T1151] block nbd0: Possible stuck request ffff888022040400: control (read@2048,1024B). Runtime 60 seconds [ 487.859142][ T1151] block nbd0: Possible stuck request ffff888022040600: control (read@3072,1024B). Runtime 60 seconds [ 487.929287][T10420] tipc: Disabling bearer [ 488.020697][T10438] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0) [ 488.968531][ T27] audit: type=1326 audit(1781369589.923:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.1.1205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f927699ce59 code=0x0 [ 489.075824][T10443] fuse: Bad value for 'user_id' [ 489.623022][T10449] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 489.629613][T10449] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 489.637520][T10449] vhci_hcd vhci_hcd.0: Device attached [ 489.735074][ T9031] usb 38-1: device descriptor read/8, error -110 [ 490.027853][ T28] usb 40-1: SetAddress Request (27) to port 0 [ 490.034804][ T28] usb 40-1: new SuperSpeed USB device number 27 using vhci_hcd [ 490.299074][ T9031] usb usb38-port1: attempt power cycle [ 490.305869][T10451] vhci_hcd: connection reset by peer [ 490.313545][ T4533] vhci_hcd: stop threads [ 490.317910][ T4533] vhci_hcd: release socket [ 490.324040][ T4533] vhci_hcd: disconnect device [ 490.674054][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 491.192501][ T9031] usb usb38-port1: unable to enumerate USB device [ 491.217473][T10469] block nbd2: shutting down sockets [ 491.614182][T10477] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0) [ 492.075543][T10480] fuse: Bad value for 'fd' [ 492.839655][T10496] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 493.958949][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 494.762724][ T27] audit: type=1326 audit(1781369595.703:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.3.1230" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bb119ce59 code=0x0 [ 494.786238][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.856167][T10508] block nbd2: shutting down sockets [ 495.317701][ T28] usb 40-1: device descriptor read/8, error -110 [ 495.560912][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 495.756048][ T28] usb usb40-port1: attempt power cycle [ 496.372726][T10533] PKCS7: Unknown OID: [4] 0.0 [ 496.377775][T10533] PKCS7: Only support pkcs7_signedData type [ 496.678037][T10530] xt_policy: output policy not valid in PREROUTING and INPUT [ 496.719244][ T28] usb usb40-port1: unable to enumerate USB device [ 498.048271][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 498.248600][T10558] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 499.019579][ T27] audit: type=1326 audit(1781369599.973:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.2.1246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0c139ce59 code=0x0 [ 501.505096][ T5779] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 501.646998][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.653500][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.704832][ T5833] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 501.712958][ T5779] usb 1-1: Using ep0 maxpacket: 8 [ 501.740359][ T5779] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 501.751239][ T5779] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 501.769815][ T5779] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 501.845472][ T5779] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 501.877960][ T5779] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.925261][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 501.946612][ T5779] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 501.977822][ T5833] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 502.021532][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.039528][ T5833] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 502.081159][ T5833] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 502.094463][ T5833] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 502.105049][ T5833] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.119671][ T5833] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 502.129190][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.145308][ T9031] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 502.299755][ T5779] usb 1-1: GET_CAPABILITIES returned 0 [ 502.311599][ T5779] usbtmc 1-1:16.0: can't read capabilities [ 502.357922][T10586] syzkaller0: entered promiscuous mode [ 502.363454][T10586] syzkaller0: entered allmulticast mode [ 502.401451][ T9031] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.408780][T10581] nbd2: detected capacity change from 0 to 127 [ 502.415484][ T9031] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.430276][ T9031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.431054][ T5833] usb 3-1: GET_CAPABILITIES returned 0 [ 502.438451][ T9031] usb 4-1: Product: syz [ 502.438469][ T9031] usb 4-1: Manufacturer: syz [ 502.438484][ T9031] usb 4-1: SerialNumber: syz [ 502.445572][ T5833] usbtmc 3-1:16.0: can't read capabilities [ 502.509736][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.518932][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.528058][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.537226][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.549609][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.558830][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.567969][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.580160][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.589300][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.598391][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.607458][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.613855][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.622970][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.637259][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.646388][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.655474][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.665678][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.674815][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 502.694614][ T5833] usb 1-1: USB disconnect, device number 14 [ 502.700649][ T28] libceph: connect (1)[c::]:6789 error -97 [ 502.700806][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 502.955336][ T28] libceph: connect (1)[c::]:6789 error -97 [ 502.963856][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 503.100793][ T9031] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 503.107116][ T9031] cdc_ncm 4-1:1.0: bind() failure [ 503.116169][ T9031] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 503.123128][ T9031] cdc_ncm 4-1:1.1: bind() failure [ 503.133416][ T9031] usb 4-1: USB disconnect, device number 15 [ 503.485462][ T9031] libceph: connect (1)[c::]:6789 error -97 [ 503.499935][ T9031] libceph: mon0 (1)[c::]:6789 connect error [ 503.810303][T10607] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 504.291113][ T27] audit: type=1326 audit(1781369605.243:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.1.1261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f927699ce59 code=0x0 [ 504.431403][T10581] ceph: No mds server is up or the cluster is laggy [ 506.095023][ T5787] block nbd2: Receive control failed (result -104) [ 506.134365][ T5774] usb 3-1: USB disconnect, device number 22 [ 506.338801][T10621] syzkaller0: entered promiscuous mode [ 506.349928][T10621] syzkaller0: entered allmulticast mode [ 507.967882][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'. [ 508.885150][T10646] block nbd3: shutting down sockets [ 509.205205][ T5774] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 509.395038][ T5774] usb 3-1: Using ep0 maxpacket: 8 [ 509.395792][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'. [ 509.406454][ T5774] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 509.420141][ T5774] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 509.431487][ T5774] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 509.441966][ T5774] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 509.452351][ T5774] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.492462][ T5774] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 509.538579][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.588301][T10658] syzkaller0: entered promiscuous mode [ 509.607940][T10658] syzkaller0: entered allmulticast mode [ 509.806540][T10653] nbd3: detected capacity change from 0 to 127 [ 509.829195][ T5774] usb 3-1: GET_CAPABILITIES returned 0 [ 509.841594][ T5774] usbtmc 3-1:16.0: can't read capabilities [ 510.058595][ T8] libceph: connect (1)[c::]:6789 error -97 [ 510.067948][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 510.127066][T10677] PKCS7: Unknown OID: [4] 0.0 [ 510.131869][T10677] PKCS7: Only support pkcs7_signedData type [ 510.152481][T10677] xt_policy: output policy not valid in PREROUTING and INPUT [ 510.977218][ T5815] libceph: connect (1)[c::]:6789 error -97 [ 511.025596][T10684] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 511.034097][T10684] netlink: 'syz.3.1283': attribute type 4 has an invalid length. [ 511.103712][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 511.195117][T10683] block nbd4: shutting down sockets [ 511.715161][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 511.924008][T10653] ceph: No mds server is up or the cluster is laggy [ 512.125724][ T5787] block nbd3: Receive control failed (result -104) [ 512.137036][ T8] usb 3-1: USB disconnect, device number 23 [ 512.724298][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'. [ 513.147287][T10713] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 513.943042][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1294'. [ 513.986961][T10718] block nbd4: shutting down sockets [ 514.868660][ T9031] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 514.917000][T10728] binder: 10727:10728 ioctl c0306201 200000000700 returned -14 [ 515.015094][ T787] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 515.061779][ T9031] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.078486][ T9031] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.094349][ T9031] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.102735][ T9031] usb 3-1: Product: syz [ 515.111874][ T9031] usb 3-1: Manufacturer: syz [ 515.116870][ T9031] usb 3-1: SerialNumber: syz [ 515.215149][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 515.228092][ T787] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 515.242359][ T787] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 515.252899][ T787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 515.268568][ T787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 515.280406][ T787] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.294233][ T787] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 515.303828][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.374015][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 515.593017][ T787] usb 1-1: GET_CAPABILITIES returned 0 [ 515.598624][ T787] usbtmc 1-1:16.0: can't read capabilities [ 515.607466][T10724] nbd4: detected capacity change from 0 to 127 [ 515.806987][ T8] libceph: connect (1)[c::]:6789 error -97 [ 515.820793][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 515.883809][ T1151] block nbd1: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 60 seconds [ 516.087217][ T8] libceph: connect (1)[c::]:6789 error -97 [ 516.093340][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 516.152160][ T9031] cdc_ncm 3-1:1.0: bind() failure [ 516.163013][ T9031] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 516.172327][ T9031] cdc_ncm 3-1:1.1: bind() failure [ 516.181643][ T9031] usb 3-1: USB disconnect, device number 24 [ 516.458294][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 516.632562][ T8] libceph: connect (1)[c::]:6789 error -97 [ 516.639677][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 517.745647][T10724] ceph: No mds server is up or the cluster is laggy [ 517.930329][ T787] usb 1-1: USB disconnect, device number 15 [ 517.936462][ T5787] block nbd4: Receive control failed (result -104) [ 517.956907][ T5779] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 518.160831][ T5779] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 518.184984][ T5779] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 518.199096][ T5779] usb 3-1: config 2 interface 0 has no altsetting 0 [ 518.210022][ T5779] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 518.235064][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.243308][ T5779] usb 3-1: Product: syz [ 518.253436][ T5779] usb 3-1: Manufacturer: syz [ 518.258558][ T5779] usb 3-1: SerialNumber: syz [ 518.410456][ T1151] block nbd0: Possible stuck request ffff888022040000: control (read@0,1024B). Runtime 90 seconds [ 518.421273][ T1151] block nbd0: Possible stuck request ffff888022040200: control (read@1024,1024B). Runtime 90 seconds [ 518.434961][ T1151] block nbd0: Possible stuck request ffff888022040400: control (read@2048,1024B). Runtime 90 seconds [ 518.446024][ T1151] block nbd0: Possible stuck request ffff888022040600: control (read@3072,1024B). Runtime 90 seconds [ 518.565927][T10767] bridge1: entered promiscuous mode [ 518.584156][T10767] bridge1: entered allmulticast mode [ 518.623779][T10767] team0: Port device bridge1 added [ 518.634065][T10768] bridge0: port 3(team0) entered blocking state [ 518.642516][T10768] bridge0: port 3(team0) entered disabled state [ 518.649214][T10768] team0: entered allmulticast mode [ 518.654468][T10768] team_slave_0: entered allmulticast mode [ 518.660726][T10768] team_slave_1: entered allmulticast mode [ 518.668965][T10768] team0: entered promiscuous mode [ 518.674156][T10768] team_slave_0: entered promiscuous mode [ 518.680428][T10768] team_slave_1: entered promiscuous mode [ 518.688629][T10768] bridge0: port 3(team0) entered blocking state [ 518.696206][T10768] bridge0: port 3(team0) entered forwarding state [ 518.899606][ T5779] ims_pcu 3-1:2.0: Missing CDC union descriptor [ 518.906660][ T5779] ims_pcu: probe of 3-1:2.0 failed with error -22 [ 518.916578][ T5779] usb 3-1: USB disconnect, device number 25 [ 519.922505][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1314'. [ 520.345167][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1316'. [ 521.601102][T10800] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 522.560282][T10815] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 522.566844][T10815] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 522.575283][T10815] vhci_hcd vhci_hcd.0: Device attached [ 523.475112][ T8] usb 38-1: SetAddress Request (18) to port 0 [ 523.481427][ T8] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 523.808714][T10816] vhci_hcd: connection reset by peer [ 523.820734][ T12] vhci_hcd: stop threads [ 524.031716][ T12] vhci_hcd: release socket [ 524.036677][ T12] vhci_hcd: disconnect device [ 525.610160][T10838] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 525.820250][T10843] binder: BINDER_SET_CONTEXT_MGR already set [ 525.826631][T10843] binder: 10842:10843 ioctl 4018620d 200000004a80 returned -16 [ 526.324997][ T5833] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 526.507165][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 526.522334][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.537865][ T5833] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 526.548077][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.580031][ T5833] usb 3-1: config 0 descriptor?? [ 526.639733][T10853] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 526.646316][T10853] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 526.654387][T10853] vhci_hcd vhci_hcd.0: Device attached [ 527.006881][ T5815] usb 34-1: SetAddress Request (11) to port 0 [ 527.013468][ T5815] usb 34-1: new SuperSpeed USB device number 11 using vhci_hcd [ 527.589067][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 527.599986][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 527.608306][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 527.623846][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 527.632877][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 527.661034][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 527.676895][T10859] binder: 10856:10859 ioctl c018620c 200000000140 returned -1 [ 527.714489][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 527.785192][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 527.848269][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 527.934981][T10854] vhci_hcd: connection reset by peer [ 527.940819][ T4533] vhci_hcd: stop threads [ 527.941298][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 527.945162][ T4533] vhci_hcd: release socket [ 527.945234][ T4533] vhci_hcd: disconnect device [ 528.262222][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.303732][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.335006][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.342395][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.389929][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.429710][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.455045][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.462283][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.505236][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.524604][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.534713][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.559161][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.573912][T10869] syzkaller0: entered promiscuous mode [ 528.578910][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.583702][T10869] syzkaller0: entered allmulticast mode [ 528.595246][ T8] usb 38-1: device descriptor read/8, error -110 [ 528.605080][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.632729][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.644956][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.667060][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.674371][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.695014][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.702374][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.714543][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.743666][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 528.779998][T10873] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 529.584994][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 529.618255][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 529.665027][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 529.672305][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 529.733852][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 529.761737][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 529.798019][ T8] usb usb38-port1: attempt power cycle [ 529.841058][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 529.885412][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 529.898891][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 529.901641][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 529.918135][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 529.937259][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 529.949305][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 529.958867][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 530.133573][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 530.168340][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 530.178563][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 530.193291][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 530.203899][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 530.215567][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 530.256949][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 530.393694][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 530.457744][ T8] usb usb38-port1: unable to enumerate USB device [ 530.625078][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 530.810287][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 530.817862][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 530.825376][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 530.832854][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 530.840589][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 530.848232][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 530.934333][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.223432][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.246241][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.253527][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.281524][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.311566][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.342417][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.349915][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.384392][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.425008][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.432294][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.466607][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.488179][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.508864][T10878] chnl_net:caif_netlink_parms(): no params data found [ 531.521518][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.547081][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.575110][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.582390][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.613140][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.635193][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.652662][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.665012][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.672940][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.680352][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.687677][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.701093][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.708703][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.716467][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.725349][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.729071][T10878] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.733687][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.804367][T10878] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.813951][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.824384][T10878] bridge_slave_0: entered allmulticast mode [ 531.972906][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 531.976360][T10878] bridge_slave_0: entered promiscuous mode [ 532.100675][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.107012][T10878] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.134606][T10878] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.143732][T10878] bridge_slave_1: entered allmulticast mode [ 532.161669][T10878] bridge_slave_1: entered promiscuous mode [ 532.161925][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.299897][ T5815] usb 34-1: device descriptor read/8, error -110 [ 532.307794][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.319714][T10878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.333203][T10878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.371858][T10878] team0: Port device team_slave_0 added [ 532.382239][T10878] team0: Port device team_slave_1 added [ 532.435665][ T5787] Bluetooth: hci4: command tx timeout [ 532.533888][T10878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.541207][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.656982][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.664804][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.680678][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.716358][T10878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.727180][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.734417][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.742633][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.751178][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.762209][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.773757][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'. [ 532.786784][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.794022][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.819714][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.825522][T10878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.832688][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.841259][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.845288][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.853668][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.890361][T10878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.891699][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.915116][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.923087][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.935359][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.942776][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 532.956109][ T5815] usb usb34-port1: attempt power cycle [ 532.962235][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.016374][ T55] block nbd2: Possible stuck request ffff8880220e0000: control (read@0,1024B). Runtime 30 seconds [ 533.027209][ T55] block nbd2: Possible stuck request ffff8880220e0200: control (read@1024,1024B). Runtime 30 seconds [ 533.039399][T10920] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 533.047057][ T55] block nbd2: Possible stuck request ffff8880220e0400: control (read@2048,1024B). Runtime 30 seconds [ 533.059788][ T55] block nbd2: Possible stuck request ffff8880220e0600: control (read@3072,1024B). Runtime 30 seconds [ 533.084200][T10912] syzkaller0: entered promiscuous mode [ 533.112541][T10912] syzkaller0: entered allmulticast mode [ 533.118875][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.156003][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.246762][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.298988][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.347097][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.392645][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.460437][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.505794][T10878] hsr_slave_0: entered promiscuous mode [ 533.520554][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.586871][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.598787][T10878] hsr_slave_1: entered promiscuous mode [ 533.609344][ T5815] usb usb34-port1: unable to enumerate USB device [ 533.663165][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.691282][T10878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.732246][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.756354][T10878] Cannot create hsr debugfs directory [ 533.785214][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.815640][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.832727][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.840816][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.848396][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.855834][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.863095][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.870725][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.878203][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.885613][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.892962][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.900366][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.908023][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.915480][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.922726][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.944646][T10922] binder: 10921:10922 ioctl c0306201 200000000700 returned -14 [ 533.953659][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.975215][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 533.994986][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.002267][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.045195][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.079810][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.106550][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.152322][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.815611][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.822896][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.825174][ T5787] Bluetooth: hci4: command tx timeout [ 534.830814][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.843373][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.851441][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.864997][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.905017][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 534.975753][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.021688][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.057403][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.095078][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.115454][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.133592][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.158574][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.176667][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.183949][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.214471][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.222978][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.230609][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.248436][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.258834][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.274960][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.302611][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.310012][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.327586][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.338047][T10878] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 535.344973][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.356100][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.383849][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.385909][T10878] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 535.404999][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.422691][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.443058][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.463370][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.475162][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.485799][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.487274][T10878] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 535.509791][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.550933][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.580038][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.619146][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.635077][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.642555][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.650448][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.657972][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.665623][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.673975][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.684400][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.693681][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.704448][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.748661][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.760214][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.770425][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.781433][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.792082][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.803649][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.813564][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.839196][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.864206][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.886744][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.910702][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.932981][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.944147][T10878] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 535.968365][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 535.998156][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.031410][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.082541][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.112333][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.148918][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.172877][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.181808][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.203984][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.225111][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.242724][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.260853][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.284636][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.296872][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.312936][T10878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.323179][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.351656][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.361784][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.395018][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.398237][T10878] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.411250][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.421752][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.442003][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.449222][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.460670][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.482988][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.486757][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.491028][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.497367][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.520515][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.915170][ T5787] Bluetooth: hci4: command tx timeout [ 536.951734][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.997665][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 536.998881][T10878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 537.017013][T10878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.033735][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 537.070388][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 537.073673][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 537.084521][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 537.097619][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 537.131824][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 537.147658][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 537.162057][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 537.177833][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 537.189629][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 537.200754][ T5833] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 537.267867][T10951] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 537.967778][ T5833] megaworld 0003:07B5:0312.0003: hidraw0: USB HID v0.01 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 537.980300][ T5833] megaworld 0003:07B5:0312.0003: no inputs found [ 537.996971][ T5833] usb 3-1: USB disconnect, device number 26 [ 538.317727][T10952] fido_id[10952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 538.417899][T10878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.743877][T10976] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 538.750452][T10976] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 538.758567][T10976] vhci_hcd vhci_hcd.0: Device attached [ 538.904960][ T5779] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 539.119904][ T5787] Bluetooth: hci4: command tx timeout [ 539.196626][ T9031] usb 40-1: SetAddress Request (31) to port 0 [ 539.258864][ T9031] usb 40-1: new SuperSpeed USB device number 31 using vhci_hcd [ 539.594442][T10977] vhci_hcd: connection reset by peer [ 539.683701][ T4533] vhci_hcd: stop threads [ 539.728122][ T4533] vhci_hcd: release socket [ 539.771490][ T4533] vhci_hcd: disconnect device [ 540.041317][ T55] block nbd3: Possible stuck request ffff888022148000: control (read@0,1024B). Runtime 30 seconds [ 540.052093][ T55] block nbd3: Possible stuck request ffff888022148200: control (read@1024,1024B). Runtime 30 seconds [ 540.056220][T10985] fuse: Unknown parameter 'user_id00000000000000000000' [ 540.063112][ T55] block nbd3: Possible stuck request ffff888022148400: control (read@2048,1024B). Runtime 30 seconds [ 540.080987][ T55] block nbd3: Possible stuck request ffff888022148600: control (read@3072,1024B). Runtime 30 seconds [ 540.216663][ T5779] usb 1-1: Using ep0 maxpacket: 8 [ 540.242215][ T5779] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 540.266502][ T5779] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.281151][T10878] veth0_vlan: entered promiscuous mode [ 540.303630][ T5779] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 540.322260][T10878] veth1_vlan: entered promiscuous mode [ 540.329672][ T5779] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 540.362702][ T5779] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.449549][ T5779] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 540.458015][T10878] veth0_macvtap: entered promiscuous mode [ 540.799275][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.006675][T10878] veth1_macvtap: entered promiscuous mode [ 541.234109][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.246574][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.257815][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.268646][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.281097][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.299325][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.311932][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.325227][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.348377][T10878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.382251][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'. [ 541.716568][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.728339][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.738272][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.753185][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.787092][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.805180][ T5779] usb 1-1: GET_CAPABILITIES returned 0 [ 541.810727][ T5779] usbtmc 1-1:16.0: can't read capabilities [ 541.829888][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.864116][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.881994][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.898576][T10970] nbd5: detected capacity change from 0 to 127 [ 541.913033][T10878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.977027][T10878] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.997908][T10878] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.009041][T10878] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.014433][ T5779] usb 1-1: USB disconnect, device number 16 [ 542.017949][ T5787] block nbd5: Receive control failed (result -104) [ 542.038144][T10878] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.211640][ T4853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.225003][ T4853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.287796][T11006] syzkaller0: entered promiscuous mode [ 542.293301][T11006] syzkaller0: entered allmulticast mode [ 542.302373][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.317144][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.824508][T11016] syzkaller0: entered promiscuous mode [ 542.839966][T11016] syzkaller0: entered allmulticast mode [ 544.445583][ T9031] usb 40-1: device descriptor read/8, error -110 [ 544.457656][T11028] syzkaller0: entered promiscuous mode [ 544.539750][T11028] syzkaller0: entered allmulticast mode [ 544.697807][T11033] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 544.876021][ T9031] usb usb40-port1: attempt power cycle [ 544.949946][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'. [ 544.974813][T11048] fuse: Bad value for 'fd' [ 545.025201][T11043] block nbd6: shutting down sockets [ 545.354737][ T5774] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 545.805114][ T55] block nbd4: Possible stuck request ffff8880221f0000: control (read@0,4096B). Runtime 30 seconds [ 546.142385][T11058] syzkaller0: entered promiscuous mode [ 546.149346][T11058] syzkaller0: entered allmulticast mode [ 546.181443][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 546.190621][ T5774] usb 1-1: device descriptor read/all, error -71 [ 546.317137][ T9031] usb usb40-port1: unable to enumerate USB device [ 546.527054][T11069] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 546.551536][ T1151] block nbd1: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 90 seconds [ 546.594546][ T8] IPVS: starting estimator thread 0... [ 546.720349][T11071] IPVS: using max 17 ests per chain, 40800 per kthread [ 547.566226][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1397'. [ 547.645208][T11089] block nbd6: shutting down sockets [ 549.130842][ T1151] block nbd0: Possible stuck request ffff888022040000: control (read@0,1024B). Runtime 120 seconds [ 549.142092][ T1151] block nbd0: Possible stuck request ffff888022040200: control (read@1024,1024B). Runtime 120 seconds [ 549.147044][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 549.153202][ T1151] block nbd0: Possible stuck request ffff888022040400: control (read@2048,1024B). Runtime 120 seconds [ 549.173221][ T1151] block nbd0: Possible stuck request ffff888022040600: control (read@3072,1024B). Runtime 120 seconds [ 550.281158][T11110] syzkaller0: entered promiscuous mode [ 550.321966][T11110] syzkaller0: entered allmulticast mode [ 550.713695][T11118] syzkaller0: entered promiscuous mode [ 550.730951][T11118] syzkaller0: entered allmulticast mode [ 550.807239][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'. [ 550.845526][T11124] block nbd6: shutting down sockets [ 551.041937][T11128] fuse: Unknown parameter '00000000000000000003' [ 553.573806][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1419'. [ 553.625736][T11155] block nbd6: shutting down sockets [ 553.637707][T11153] syzkaller0: entered promiscuous mode [ 553.643579][T11153] syzkaller0: entered allmulticast mode [ 553.965860][T11167] syzkaller0: entered promiscuous mode [ 553.984977][T11167] syzkaller0: entered allmulticast mode [ 554.762822][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 555.850884][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'. [ 555.905915][T11191] block nbd6: shutting down sockets [ 556.013853][T11198] syzkaller0: entered promiscuous mode [ 556.024684][T11198] syzkaller0: entered allmulticast mode [ 556.930553][T11204] syzkaller0: entered promiscuous mode [ 556.977740][T11204] syzkaller0: entered allmulticast mode [ 557.235247][T11218] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 557.241814][T11218] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 557.249812][T11218] vhci_hcd vhci_hcd.0: Device attached [ 559.062466][T11225] overlayfs: failed to resolve './file1': -2 [ 559.452190][T11219] vhci_hcd: connection closed [ 559.468436][ T4533] vhci_hcd: stop threads [ 559.480342][ T4533] vhci_hcd: release socket [ 559.571520][ T8] usb 42-1: SetAddress Request (2) to port 0 [ 559.619193][T11218] netdevsim netdevsim4 ªªªªª»: renamed from netdevsim0 (while UP) [ 559.827920][ T8] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 559.839121][ T4533] vhci_hcd: disconnect device [ 559.990907][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 560.005073][ T8] usb 42-1: enqueue for inactive port 0 [ 560.022741][T11232] fuse: Bad value for 'fd' [ 560.116765][T11237] 9pnet_fd: Insufficient options for proto=fd [ 560.135394][T11237] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1441'. [ 560.137059][T11234] kvm: Disabled LAPIC found during irq injection [ 560.361135][T11246] syzkaller0: entered promiscuous mode [ 560.367327][T11246] syzkaller0: entered allmulticast mode [ 560.446286][ T8] usb usb42-port1: attempt power cycle [ 560.453036][ T5779] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 560.661572][ T5779] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 560.670971][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.680387][ T5779] usb 4-1: Product: syz [ 560.685770][ T5779] usb 4-1: Manufacturer: syz [ 560.690468][ T5779] usb 4-1: SerialNumber: syz [ 560.700355][ T5779] usb 4-1: config 0 descriptor?? [ 561.106499][ T8] usb usb42-port1: unable to enumerate USB device [ 561.116007][ T5779] usb 4-1: Firmware: major: 219, minor: 184, hardware type: UNKNOWN (145) [ 561.307029][T11259] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 561.396052][ T5779] usb 4-1: failed to fetch extended address, random address set [ 561.456079][ T5779] usb 4-1: atusb_probe: initialization failed, error = -524 [ 561.533782][ T5779] atusb: probe of 4-1:0.0 failed with error -524 [ 561.752693][ T5779] usb 4-1: USB disconnect, device number 16 [ 562.236882][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 562.720118][T11265] fuse: Bad value for 'fd' [ 562.912144][T11273] syzkaller0: entered promiscuous mode [ 562.935006][T11273] syzkaller0: entered allmulticast mode [ 563.839175][T11277] tmpfs: Bad value for 'mpol' [ 564.353321][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.360668][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.385023][ T55] block nbd2: Possible stuck request ffff8880220e0000: control (read@0,1024B). Runtime 60 seconds [ 564.397343][ T55] block nbd2: Possible stuck request ffff8880220e0200: control (read@1024,1024B). Runtime 60 seconds [ 564.408354][ T55] block nbd2: Possible stuck request ffff8880220e0400: control (read@2048,1024B). Runtime 60 seconds [ 564.419890][ T55] block nbd2: Possible stuck request ffff8880220e0600: control (read@3072,1024B). Runtime 60 seconds [ 565.068970][T11288] fuse: Bad value for 'fd' [ 565.226881][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 565.557834][T11303] syzkaller0: entered promiscuous mode [ 565.583976][T11303] syzkaller0: entered allmulticast mode [ 566.659634][T11316] binder: 11315:11316 ioctl c018620c 200000000140 returned -1 [ 568.092099][T11324] fuse: Bad value for 'group_id' [ 568.175844][T11328] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1474'. [ 568.404196][T11336] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 569.411898][T11341] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 569.506182][T11347] fuse: Bad value for 'group_id' [ 569.725056][ T28] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 569.786327][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1485'. [ 569.845692][T11355] block nbd6: shutting down sockets [ 569.937559][ T28] usb 4-1: unable to get BOS descriptor or descriptor too short [ 569.950216][ T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.971451][ T28] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 569.998456][ T28] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 570.087964][T11363] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 570.094558][T11363] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 570.102860][T11363] vhci_hcd vhci_hcd.0: Device attached [ 570.162735][ T55] block nbd3: Possible stuck request ffff888022148000: control (read@0,1024B). Runtime 60 seconds [ 570.179187][ T55] block nbd3: Possible stuck request ffff888022148200: control (read@1024,1024B). Runtime 60 seconds [ 570.200960][ T55] block nbd3: Possible stuck request ffff888022148400: control (read@2048,1024B). Runtime 60 seconds [ 570.214023][ T55] block nbd3: Possible stuck request ffff888022148600: control (read@3072,1024B). Runtime 60 seconds [ 570.647746][ T5815] usb 38-1: SetAddress Request (22) to port 0 [ 570.710722][ T5815] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 570.757970][ T28] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 570.998369][T11364] vhci_hcd: connection reset by peer [ 571.161163][T11037] vhci_hcd: stop threads [ 571.217461][T11037] vhci_hcd: release socket [ 571.270394][T11037] vhci_hcd: disconnect device [ 571.440531][ T28] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 571.451443][ T28] usb 4-1: config 1 interface 1 has no altsetting 0 [ 571.462603][ T28] usb 4-1: string descriptor 0 read error: -22 [ 571.469362][ T28] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 571.478844][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.593755][T11373] fuse: Bad value for 'group_id' [ 572.035534][ T9313] block nbd5: Possible stuck request ffff888022230000: control (read@0,4096B). Runtime 30 seconds [ 572.554423][T11376] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 572.628689][ T28] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 572.660581][ T28] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 572.717095][ T28] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 572.728130][ T28] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 572.747381][ T28] usb 4-1: USB disconnect, device number 17 [ 572.819407][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1496'. [ 572.865486][T11388] block nbd6: shutting down sockets [ 573.080866][T11395] syz.3.1498[11395]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 575.364222][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1506'. [ 575.395717][T11421] block nbd6: shutting down sockets [ 575.616782][T11427] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 575.885462][ T5815] usb 38-1: device descriptor read/8, error -110 [ 575.892094][ T55] block nbd4: Possible stuck request ffff8880221f0000: control (read@0,4096B). Runtime 60 seconds [ 576.865988][ T5815] usb usb38-port1: attempt power cycle [ 578.194965][ T1151] block nbd1: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 120 seconds [ 578.475981][ T5815] usb usb38-port1: unable to enumerate USB device [ 578.937169][T11460] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 579.586706][ T9031] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 579.727396][ T1151] block nbd0: Possible stuck request ffff888022040000: control (read@0,1024B). Runtime 150 seconds [ 579.738783][ T1151] block nbd0: Possible stuck request ffff888022040200: control (read@1024,1024B). Runtime 150 seconds [ 579.750501][ T1151] block nbd0: Possible stuck request ffff888022040400: control (read@2048,1024B). Runtime 150 seconds [ 579.795006][ T9031] usb 1-1: Using ep0 maxpacket: 32 [ 579.853967][ T9031] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 579.935717][ T1151] block nbd0: Possible stuck request ffff888022040600: control (read@3072,1024B). Runtime 150 seconds [ 580.213136][ T9031] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice= 6.12 [ 580.222511][ T9031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.284067][ T9031] usb 1-1: Product: syz [ 580.306280][ T9031] usb 1-1: Manufacturer: syz [ 580.315199][ T9031] usb 1-1: SerialNumber: syz [ 580.485205][T11481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 580.525663][T11481] block nbd6: shutting down sockets [ 580.569533][ T9031] rtl8150 1-1:7.0: couldn't find required endpoints [ 580.588543][ T9031] rtl8150: probe of 1-1:7.0 failed with error -5 [ 580.613522][ T9031] usb 1-1: USB disconnect, device number 19 [ 580.624544][T11484] vxcan0: tx address claim with dlc 0 [ 581.485057][ T5833] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 581.505037][T11502] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 581.516839][T11504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'. [ 581.565431][T11504] block nbd6: shutting down sockets [ 582.472209][ T5833] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 582.490213][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.525977][ T5833] usb 1-1: Product: syz [ 582.530333][ T5833] usb 1-1: Manufacturer: syz [ 582.535220][ T5833] usb 1-1: SerialNumber: syz [ 582.558663][ T5833] usb 1-1: config 0 descriptor?? [ 582.575866][ T5833] hub 1-1:0.0: bad descriptor, ignoring hub [ 582.581826][ T5833] hub: probe of 1-1:0.0 failed with error -5 [ 582.795738][ T5833] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 582.864233][ T5833] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 582.876668][ T5833] dib0700: firmware download failed at 7 with -22 [ 582.953486][ T5833] usb 1-1: USB disconnect, device number 20 [ 582.973412][T11514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1543'. [ 584.213741][T11536] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 584.222050][T11536] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 585.130526][T11543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1553'. [ 585.237914][T11550] binder: 11548:11550 ioctl c018620c 200000000140 returned -1 [ 585.616224][T11565] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 585.845543][T11571] syzkaller0: entered promiscuous mode [ 585.854251][T11571] syzkaller0: entered allmulticast mode [ 585.889675][T11571] tipc: Enabled bearer , priority 0 [ 585.927763][T11571] tipc: Resetting bearer [ 585.970631][T11570] tipc: Resetting bearer [ 586.021830][T11570] tipc: Disabling bearer [ 587.625579][T11583] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 588.237447][T11585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1564'. [ 588.555368][T11595] fuse: Unknown parameter 'grou00000000000000000000' [ 588.634774][T11599] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 588.845140][ T787] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 590.699453][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 590.736563][ T787] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 590.750539][ T787] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.821923][ T787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.869262][ T787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.918419][ T787] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.943491][T11621] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.017331][ T787] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 591.071955][T11621] bridge_slave_0 (unregistering): left allmulticast mode [ 591.079543][T11621] bridge_slave_0 (unregistering): left promiscuous mode [ 591.086909][T11621] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.128125][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.168853][T11628] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 591.564728][T11626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1574'. [ 591.596683][ T787] usb 1-1: usb_control_msg returned -71 [ 591.609760][ T787] usbtmc 1-1:16.0: can't read capabilities [ 591.651497][ T787] usb 1-1: USB disconnect, device number 21 [ 591.681191][T11630] fuse: Bad value for 'fd' [ 591.836340][T11634] fuse: Unknown parameter 'grou00000000000000000000' [ 592.065613][T11639] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 592.669350][T11649] binder: 11648:11649 ioctl 4018620d 0 returned -22 [ 593.636549][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 593.652766][T11656] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 593.815853][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1587'. [ 593.870355][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 593.959175][ T787] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 594.012225][ T787] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 594.068027][ T787] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 594.094427][ T787] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 594.115243][ T787] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.128526][ T787] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 594.269593][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.918176][ T55] block nbd2: Possible stuck request ffff8880220e0000: control (read@0,1024B). Runtime 90 seconds [ 595.527807][ T55] block nbd2: Possible stuck request ffff8880220e0200: control (read@1024,1024B). Runtime 90 seconds [ 595.580864][ T55] block nbd2: Possible stuck request ffff8880220e0400: control (read@2048,1024B). Runtime 90 seconds [ 595.662778][ T55] block nbd2: Possible stuck request ffff8880220e0600: control (read@3072,1024B). Runtime 90 seconds [ 595.966345][ T787] usb 5-1: usb_control_msg returned -71 [ 595.972003][ T787] usbtmc 5-1:16.0: can't read capabilities [ 596.071920][T11682] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 596.078501][T11682] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 596.086557][T11682] vhci_hcd vhci_hcd.0: Device attached [ 596.631658][ T5815] usb 34-1: SetAddress Request (15) to port 0 [ 596.731148][ T5815] usb 34-1: new SuperSpeed USB device number 15 using vhci_hcd [ 596.927117][ T787] usb 5-1: USB disconnect, device number 2 [ 597.058021][T11684] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 597.104495][T11683] vhci_hcd: connection closed [ 597.208056][T11673] vhci_hcd: stop threads [ 597.342321][T11673] vhci_hcd: release socket [ 597.401687][T11673] vhci_hcd: disconnect device [ 597.484595][T11691] syzkaller0: entered promiscuous mode [ 597.493248][T11691] syzkaller0: entered allmulticast mode [ 597.511061][T11692] tipc: Enabling of bearer rejected, failed to enable media [ 599.199251][T11711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1599'. [ 600.195277][ T55] block nbd3: Possible stuck request ffff888022148000: control (read@0,1024B). Runtime 90 seconds [ 600.206310][ T55] block nbd3: Possible stuck request ffff888022148200: control (read@1024,1024B). Runtime 90 seconds [ 600.226278][ T55] block nbd3: Possible stuck request ffff888022148400: control (read@2048,1024B). Runtime 90 seconds [ 600.245277][ T55] block nbd3: Possible stuck request ffff888022148600: control (read@3072,1024B). Runtime 90 seconds [ 601.068957][ T5779] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 601.178861][T11735] syzkaller0: entered promiscuous mode [ 601.184399][T11735] syzkaller0: entered allmulticast mode [ 601.205517][T11735] tipc: Enabling of bearer rejected, failed to enable media [ 601.257959][ T23] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 601.270062][ T5779] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.284980][ T5779] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 601.297109][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.346711][ T5779] usb 5-1: config 0 descriptor?? [ 601.485902][ T5779] pwc: Askey VC010 type 2 USB webcam detected. [ 601.504248][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.515274][ T23] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 601.565006][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.609163][ T23] usb 1-1: config 0 descriptor?? [ 601.697996][ T23] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 601.875904][T11742] syzkaller0: entered promiscuous mode [ 601.881504][T11742] syzkaller0: entered allmulticast mode [ 601.896874][T11742] tipc: Enabling of bearer rejected, failed to enable media [ 601.959697][ T5815] usb 34-1: device descriptor read/8, error -110 [ 601.970943][T11730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.003864][T11730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.028905][ T5779] pwc: recv_control_msg error -32 req 02 val 2b00 [ 602.038968][ T5779] pwc: recv_control_msg error -32 req 02 val 2700 [ 602.051899][ T28] usb 1-1: USB disconnect, device number 22 [ 602.057664][ T5779] pwc: recv_control_msg error -71 req 02 val 2c00 [ 602.066545][ T5779] pwc: recv_control_msg error -71 req 04 val 1000 [ 602.091048][ T5779] pwc: recv_control_msg error -71 req 04 val 1300 [ 602.104374][T11744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1609'. [ 602.130059][ T55] block nbd5: Possible stuck request ffff888022230000: control (read@0,4096B). Runtime 60 seconds [ 602.142122][ T5779] pwc: recv_control_msg error -71 req 04 val 1400 [ 602.154569][ T5779] pwc: recv_control_msg error -71 req 02 val 2000 [ 602.161731][ T5779] pwc: recv_control_msg error -71 req 02 val 2100 [ 602.171032][ T5779] pwc: recv_control_msg error -71 req 04 val 1500 [ 602.178182][ T5779] pwc: recv_control_msg error -71 req 02 val 2500 [ 602.185255][ T5779] pwc: recv_control_msg error -71 req 02 val 2400 [ 602.209011][ T5779] pwc: recv_control_msg error -71 req 02 val 2600 [ 602.216138][ T5779] pwc: recv_control_msg error -71 req 02 val 2900 [ 602.223177][ T5779] pwc: recv_control_msg error -71 req 02 val 2800 [ 602.230507][ T5779] pwc: recv_control_msg error -71 req 04 val 1100 [ 602.230980][ T5779] pwc: recv_control_msg error -71 req 04 val 1200 [ 602.259551][ T5779] pwc: Registered as video103. [ 602.271905][ T5779] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 602.305892][ T5779] usb 5-1: USB disconnect, device number 3 [ 602.387106][ T5815] usb usb34-port1: attempt power cycle [ 602.501455][T11758] binder: 11757:11758 ioctl c018620c 200000000140 returned -1 [ 603.050982][ T5815] usb usb34-port1: unable to enumerate USB device [ 603.141461][T11764] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 603.608856][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 604.009152][T11772] syzkaller0: entered promiscuous mode [ 604.028152][T11772] syzkaller0: entered allmulticast mode [ 604.062520][T11772] tipc: Enabling of bearer rejected, failed to enable media [ 604.264209][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1618'. [ 604.279680][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 604.510020][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.607542][ T8] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 604.639014][ T8] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 604.681146][ T8] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 604.735157][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 604.756475][ T8] usb 1-1: config 1 interface 1 has no altsetting 0 [ 604.768160][ T8] usb 1-1: string descriptor 0 read error: -22 [ 604.774486][ T8] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 604.785968][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.840006][T11781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1619'. [ 605.265192][ T8] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 605.571052][ T8] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 605.585115][ T9031] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 605.588028][ T8] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 605.616157][ T8] usb 1-1: USB disconnect, device number 23 [ 605.789718][ T9031] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 605.800134][ T9031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.815240][ T9031] usb 4-1: config 0 descriptor?? [ 605.829938][ T9031] cp210x 4-1:0.0: cp210x converter detected [ 605.855086][ T28] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 605.955366][ T55] block nbd4: Possible stuck request ffff8880221f0000: control (read@0,4096B). Runtime 90 seconds [ 606.047468][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.057743][ T28] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 606.067034][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.077596][ T28] usb 3-1: config 0 descriptor?? [ 606.086540][ T28] pwc: Askey VC010 type 2 USB webcam detected. [ 606.149696][T11801] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 606.520171][ T9031] usb 4-1: cp210x converter now attached to ttyUSB0 [ 606.678933][ T28] pwc: recv_control_msg error -32 req 02 val 2b00 [ 606.755768][ T9031] usb 4-1: USB disconnect, device number 18 [ 606.793691][ T28] pwc: recv_control_msg error -32 req 02 val 2700 [ 606.917306][ T28] pwc: recv_control_msg error -71 req 02 val 2c00 [ 607.022148][ T28] pwc: recv_control_msg error -71 req 04 val 1000 [ 607.054499][ T9031] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 607.062699][ T28] pwc: recv_control_msg error -71 req 04 val 1300 [ 607.082764][ T28] pwc: recv_control_msg error -71 req 04 val 1400 [ 607.093218][T11804] syzkaller0: entered promiscuous mode [ 607.099862][T11804] syzkaller0: entered allmulticast mode [ 607.111959][T11804] tipc: Enabling of bearer rejected, failed to enable media [ 607.134483][ T9031] cp210x 4-1:0.0: device disconnected [ 607.141878][ T28] pwc: recv_control_msg error -71 req 02 val 2000 [ 607.154154][ T28] pwc: recv_control_msg error -71 req 02 val 2100 [ 607.182310][ T28] pwc: recv_control_msg error -71 req 04 val 1500 [ 607.195169][ T28] pwc: recv_control_msg error -71 req 02 val 2500 [ 607.202147][ T28] pwc: recv_control_msg error -71 req 02 val 2400 [ 607.216192][ T28] pwc: recv_control_msg error -71 req 02 val 2600 [ 607.223119][ T28] pwc: recv_control_msg error -71 req 02 val 2900 [ 607.236314][ T28] pwc: recv_control_msg error -71 req 02 val 2800 [ 607.243337][ T28] pwc: recv_control_msg error -71 req 04 val 1100 [ 607.258576][ T28] pwc: recv_control_msg error -71 req 04 val 1200 [ 607.285875][ T28] pwc: Registered as video103. [ 607.309922][ T28] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 607.401701][ T28] usb 3-1: USB disconnect, device number 27 [ 607.768181][T11817] syzkaller0: entered promiscuous mode [ 607.783669][T11817] syzkaller0: entered allmulticast mode [ 607.812232][T11812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1629'. [ 607.832675][T11817] tipc: Enabling of bearer rejected, failed to enable media [ 608.253958][T11839] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 609.540214][ T1151] block nbd1: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 150 seconds [ 609.797616][ T1151] block nbd0: Possible stuck request ffff888022040000: control (read@0,1024B). Runtime 180 seconds [ 609.808592][ T1151] block nbd0: Possible stuck request ffff888022040200: control (read@1024,1024B). Runtime 180 seconds [ 609.820620][ T1151] block nbd0: Possible stuck request ffff888022040400: control (read@2048,1024B). Runtime 180 seconds [ 609.905066][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 609.955242][ T1151] block nbd0: Possible stuck request ffff888022040600: control (read@3072,1024B). Runtime 180 seconds [ 610.089505][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.156540][ T8] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 610.180019][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.199590][ T8] usb 1-1: config 0 descriptor?? [ 610.244584][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 610.570987][T11858] syzkaller0: entered promiscuous mode [ 610.583307][T11858] syzkaller0: entered allmulticast mode [ 610.625778][T11858] tipc: Enabling of bearer rejected, failed to enable media [ 610.656452][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 610.684377][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 610.736392][ T8] pwc: recv_control_msg error -71 req 02 val 2c00 [ 610.760555][ T8] pwc: recv_control_msg error -71 req 04 val 1000 [ 610.786599][ T8] pwc: recv_control_msg error -71 req 04 val 1300 [ 610.798782][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 610.809649][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 610.823916][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 610.848330][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 610.868637][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 610.890130][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 610.906320][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 610.919671][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 610.941681][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 610.963340][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 610.970905][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 610.981276][T11867] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 610.982321][ T8] pwc: Registered as video103. [ 611.030963][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 611.074636][ T8] usb 1-1: USB disconnect, device number 24 [ 611.327419][T11872] syzkaller0: entered promiscuous mode [ 611.333029][T11872] syzkaller0: entered allmulticast mode [ 612.025126][ T5815] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 612.217251][ T5815] usb 5-1: unable to get BOS descriptor or descriptor too short [ 612.230925][ T5815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.251704][ T5815] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 612.268107][ T5815] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 612.279670][ T5815] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 612.312017][ T5815] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 612.343112][ T5815] usb 5-1: config 1 interface 1 has no altsetting 0 [ 612.357204][ T5815] usb 5-1: string descriptor 0 read error: -22 [ 612.363699][ T5815] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 612.381604][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.695410][ T5779] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 613.025078][ T5779] usb 4-1: Using ep0 maxpacket: 8 [ 613.033376][ T5779] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 613.042706][ T5779] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 613.058437][ T5779] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 613.083501][ T5779] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 613.105011][ T5779] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.141409][ T5779] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 613.152779][T11899] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 613.166554][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.174783][ T5815] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 613.401075][ T5815] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 613.423301][ T5779] usb 4-1: GET_CAPABILITIES returned 0 [ 613.430220][ T5779] usbtmc 4-1:16.0: can't read capabilities [ 613.440802][ T5815] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 613.477943][ T5815] usb 5-1: USB disconnect, device number 4 [ 613.601342][T11908] syzkaller0: entered promiscuous mode [ 613.607152][T11908] syzkaller0: entered allmulticast mode [ 613.636335][ T5779] usb 4-1: USB disconnect, device number 19 [ 614.094926][ T5815] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 614.478211][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.588252][ T5815] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 614.682048][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.737272][ T5815] usb 1-1: config 0 descriptor?? [ 614.750944][ T5815] pwc: Askey VC010 type 2 USB webcam detected. [ 615.152329][ T5815] pwc: recv_control_msg error -32 req 02 val 2b00 [ 615.626930][ T5815] pwc: recv_control_msg error -71 req 02 val 2c00 [ 615.643865][ T5815] pwc: recv_control_msg error -71 req 04 val 1000 [ 615.655804][ T5815] pwc: recv_control_msg error -71 req 04 val 1300 [ 615.662721][ T5815] pwc: recv_control_msg error -71 req 04 val 1400 [ 615.675319][ T5815] pwc: recv_control_msg error -71 req 02 val 2000 [ 615.713158][ T5815] pwc: recv_control_msg error -71 req 02 val 2100 [ 615.739485][ T5815] pwc: recv_control_msg error -71 req 04 val 1500 [ 615.749156][ T5815] pwc: recv_control_msg error -71 req 02 val 2500 [ 615.771066][ T5815] pwc: recv_control_msg error -71 req 02 val 2400 [ 615.779516][ T5815] pwc: recv_control_msg error -71 req 02 val 2600 [ 615.805014][ T5815] pwc: recv_control_msg error -71 req 02 val 2900 [ 615.824976][ T5815] pwc: recv_control_msg error -71 req 02 val 2800 [ 615.850387][ T5815] pwc: recv_control_msg error -71 req 04 val 1100 [ 615.879906][ T5815] pwc: recv_control_msg error -71 req 04 val 1200 [ 615.894182][T11932] syzkaller0: entered promiscuous mode [ 615.901046][ T5815] pwc: Registered as video103. [ 615.906886][T11932] syzkaller0: entered allmulticast mode [ 615.944398][ T5815] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 616.033206][ T5815] usb 1-1: USB disconnect, device number 25 [ 616.045336][T11934] binder: 11933:11934 ioctl c018620c 200000000140 returned -1 [ 616.414176][T11943] syzkaller0: entered promiscuous mode [ 616.421112][T11943] syzkaller0: entered allmulticast mode [ 616.624980][ T5815] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 616.804928][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 616.814528][ T5815] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 616.839322][ T5815] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 616.859224][ T5815] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 616.899099][ T5815] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 616.937607][ T5815] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.970539][ T5815] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 617.017812][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.345232][ T5815] usb 1-1: GET_CAPABILITIES returned 0 [ 617.350890][ T5815] usbtmc 1-1:16.0: can't read capabilities [ 617.539961][ T787] usb 1-1: USB disconnect, device number 26 [ 618.498474][T11963] syzkaller0: entered promiscuous mode [ 618.504004][T11963] syzkaller0: entered allmulticast mode [ 618.634323][T11969] binder: 11968:11969 ioctl c018620c 200000000140 returned -1 [ 618.649663][T11967] fuse: root generation should be zero [ 619.093320][T11976] syzkaller0: entered promiscuous mode [ 619.099060][T11976] syzkaller0: entered allmulticast mode [ 619.602584][ T787] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 620.211731][T11990] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 620.218313][T11990] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 620.226315][T11990] vhci_hcd vhci_hcd.0: Device attached [ 620.267274][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.527272][ T787] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 620.625377][ T5815] usb 42-1: SetAddress Request (6) to port 0 [ 620.774657][ T5815] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 621.862159][T11991] vhci_hcd: connection closed [ 622.096298][T11673] vhci_hcd: stop threads [ 622.155143][T11673] vhci_hcd: release socket [ 622.159808][T11673] vhci_hcd: disconnect device [ 622.405340][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.417134][ T787] usb 4-1: config 0 descriptor?? [ 622.435030][ T787] usb 4-1: can't set config #0, error -71 [ 622.444482][ T787] usb 4-1: USB disconnect, device number 20 [ 622.495657][T12010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1691'. [ 622.536213][T12008] syzkaller0: entered promiscuous mode [ 622.566610][T12008] syzkaller0: entered allmulticast mode [ 623.201887][T12023] binder: 12022:12023 ioctl c018620c 200000000140 returned -1 [ 624.519853][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.528080][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.875037][ T28] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 624.929650][T12047] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 624.936219][T12047] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 624.945731][T12047] vhci_hcd vhci_hcd.0: Device attached [ 625.516919][ T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.628788][ T28] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 625.715751][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.908469][T12048] vhci_hcd: connection reset by peer [ 625.966181][ T9313] block nbd2: Possible stuck request ffff8880220e0000: control (read@0,1024B). Runtime 120 seconds [ 625.977024][ T9313] block nbd2: Possible stuck request ffff8880220e0200: control (read@1024,1024B). Runtime 120 seconds [ 625.995696][ T28] usb 4-1: config 0 descriptor?? [ 626.013246][ T2968] vhci_hcd: stop threads [ 626.013678][ T9313] block nbd2: Possible stuck request ffff8880220e0400: control (read@2048,1024B). Runtime 120 seconds [ 626.030803][ T2968] vhci_hcd: release socket [ 626.073879][ T9313] block nbd2: Possible stuck request ffff8880220e0600: control (read@3072,1024B). Runtime 120 seconds [ 626.096427][ T2968] vhci_hcd: disconnect device [ 626.122372][ T28] pwc: Askey VC010 type 2 USB webcam detected. [ 626.594502][T12056] syzkaller0: entered promiscuous mode [ 626.605662][ T28] pwc: recv_control_msg error -32 req 02 val 2b00 [ 626.664844][T12056] syzkaller0: entered allmulticast mode [ 626.683065][ T5815] usb 42-1: device descriptor read/8, error -110 [ 626.822706][ T28] pwc: recv_control_msg error -71 req 02 val 2c00 [ 626.869845][ T28] pwc: recv_control_msg error -71 req 04 val 1000 [ 626.878350][ T28] pwc: recv_control_msg error -71 req 04 val 1300 [ 626.890167][ T28] pwc: recv_control_msg error -71 req 04 val 1400 [ 626.933571][ T28] pwc: recv_control_msg error -71 req 02 val 2000 [ 626.945106][ T28] pwc: recv_control_msg error -71 req 02 val 2100 [ 626.951986][ T28] pwc: recv_control_msg error -71 req 04 val 1500 [ 626.959019][ T28] pwc: recv_control_msg error -71 req 02 val 2500 [ 626.969100][ T28] pwc: recv_control_msg error -71 req 02 val 2400 [ 627.032394][ T28] pwc: recv_control_msg error -71 req 02 val 2600 [ 627.088083][ T28] pwc: recv_control_msg error -71 req 02 val 2900 [ 627.096973][ T28] pwc: recv_control_msg error -71 req 02 val 2800 [ 627.106204][ T28] pwc: recv_control_msg error -71 req 04 val 1100 [ 627.110869][ T5815] usb usb42-port1: attempt power cycle [ 627.113102][ T28] pwc: recv_control_msg error -71 req 04 val 1200 [ 627.146049][ T28] pwc: Registered as video103. [ 627.197902][ T28] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 627.266982][ T28] usb 4-1: USB disconnect, device number 21 [ 627.785878][ T5815] usb usb42-port1: unable to enumerate USB device [ 628.763526][T12088] syzkaller0: entered promiscuous mode [ 628.769567][T12088] syzkaller0: entered allmulticast mode [ 629.035033][ T28] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 629.268090][ T28] usb 1-1: unable to get BOS descriptor or descriptor too short [ 629.281489][ T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.305030][ T28] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 629.331879][ T28] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 629.343187][ T28] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 629.356699][ T28] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 629.367902][ T28] usb 1-1: config 1 interface 1 has no altsetting 0 [ 629.393912][ T28] usb 1-1: string descriptor 0 read error: -22 [ 629.414918][ T28] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 629.448935][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.296286][ T55] block nbd3: Possible stuck request ffff888022148000: control (read@0,1024B). Runtime 120 seconds [ 630.309093][ T55] block nbd3: Possible stuck request ffff888022148200: control (read@1024,1024B). Runtime 120 seconds [ 630.321527][ T55] block nbd3: Possible stuck request ffff888022148400: control (read@2048,1024B). Runtime 120 seconds [ 630.334430][ T55] block nbd3: Possible stuck request ffff888022148600: control (read@3072,1024B). Runtime 120 seconds [ 630.738472][ T28] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 630.781083][ T28] usb 1-1: Warning! Unlikely big volume range (=24475), cval->res is probably wrong. [ 630.849330][ T28] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = -24475/0/1 [ 630.945032][ T28] usb 1-1: USB disconnect, device number 27 [ 631.700381][T12122] syzkaller0: entered promiscuous mode [ 631.707033][T12122] syzkaller0: entered allmulticast mode [ 631.818184][T12125] fuse: Unknown parameter 'group_id00000000000000000000' [ 632.198519][ T55] block nbd5: Possible stuck request ffff888022230000: control (read@0,4096B). Runtime 90 seconds [ 632.744936][ T5774] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 632.967659][ T5774] usb 5-1: unable to get BOS descriptor or descriptor too short [ 633.013842][ T5774] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.044494][ T5774] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 633.079195][ T5774] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 633.114978][ T5774] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 633.148560][ T5774] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 633.508604][ T5774] usb 5-1: config 1 interface 1 has no altsetting 0 [ 633.816974][T12141] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 633.823553][T12141] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 633.831479][T12141] vhci_hcd vhci_hcd.0: Device attached [ 634.214617][T12144] vhci_hcd: connection closed [ 634.225184][ T5774] usb 5-1: string descriptor 0 read error: -22 [ 634.251753][T11037] vhci_hcd: stop threads [ 634.309350][T11037] vhci_hcd: release socket [ 634.351085][T11037] vhci_hcd: disconnect device [ 634.356267][ T787] usb 40-1: SetAddress Request (35) to port 0 [ 634.409389][ T5774] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 634.422747][ T787] usb 40-1: new SuperSpeed USB device number 35 using vhci_hcd [ 634.515066][ T5774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.561881][ T787] usb 40-1: enqueue for inactive port 0 [ 635.096073][ T787] usb usb40-port1: attempt power cycle [ 635.335752][T12156] syzkaller0: entered promiscuous mode [ 635.345559][T12156] syzkaller0: entered allmulticast mode [ 635.353096][T12158] fuse: Unknown parameter 'group_id00000000000000000000' [ 636.044894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 636.274837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 636.353417][ T55] block nbd4: Possible stuck request ffff8880221f0000: control (read@0,4096B). Runtime 120 seconds [ 636.418500][ T5774] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 636.482705][ T5774] usb 5-1: Warning! Unlikely big volume range (=24475), cval->res is probably wrong. [ 636.494934][ T5833] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 636.537718][ T5774] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = -24475/0/1 [ 636.600613][ T787] usb usb40-port1: unable to enumerate USB device [ 636.632147][ T5774] usb 5-1: USB disconnect, device number 5 [ 636.695493][T12164] binder: 12163:12164 ioctl c018620c 200000000140 returned -1 [ 636.696159][ T5833] usb 3-1: no configurations [ 636.710163][ T5833] usb 3-1: can't read configurations, error -22 [ 636.916625][ T5833] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 637.227739][T12166] syzkaller0: entered promiscuous mode [ 637.258778][T12166] syzkaller0: entered allmulticast mode [ 637.421119][ T5833] usb 3-1: no configurations [ 637.426283][ T5833] usb 3-1: can't read configurations, error -22 [ 637.453171][ T5833] usb usb3-port1: attempt power cycle [ 637.875023][ T5833] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 637.920774][T12183] fuse: Unknown parameter 'group_id00000000000000000000' [ 637.929253][ T5833] usb 3-1: no configurations [ 637.934477][ T5833] usb 3-1: can't read configurations, error -22 [ 638.105645][ T5833] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 638.152664][ T5833] usb 3-1: no configurations [ 638.157480][ T5833] usb 3-1: can't read configurations, error -22 [ 638.180258][ T5833] usb usb3-port1: unable to enumerate USB device [ 638.322724][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1746'. [ 639.629201][T12214] binder: 12211:12214 ioctl c018620c 200000000140 returned -1 [ 639.902783][ T1151] block nbd1: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 180 seconds [ 639.902929][ T9140] block nbd0: Possible stuck request ffff888022040000: control (read@0,1024B). Runtime 210 seconds [ 639.928734][ T9140] block nbd0: Possible stuck request ffff888022040200: control (read@1024,1024B). Runtime 210 seconds [ 639.942330][ T9140] block nbd0: Possible stuck request ffff888022040400: control (read@2048,1024B). Runtime 210 seconds [ 640.015472][ T9140] block nbd0: Possible stuck request ffff888022040600: control (read@3072,1024B). Runtime 210 seconds [ 641.603694][T12234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1755'. [ 641.995197][ T5833] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 642.184515][ T5833] usb 5-1: no configurations [ 642.189696][ T5833] usb 5-1: can't read configurations, error -22 [ 642.345000][ T5833] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 642.535786][ T5833] usb 5-1: no configurations [ 642.548079][ T5833] usb 5-1: can't read configurations, error -22 [ 642.564707][ T5833] usb usb5-port1: attempt power cycle [ 642.768357][ T787] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 643.525704][T12254] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 644.374915][ T5833] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 644.396349][ T787] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 7 [ 644.414854][ T787] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 172, changing to 7 [ 644.430070][ T5833] usb 5-1: no configurations [ 644.436576][ T5833] usb 5-1: can't read configurations, error -22 [ 644.439230][ T787] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 644.453899][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.462161][ T787] usb 1-1: Product: syz [ 644.466592][ T787] usb 1-1: Manufacturer: syz [ 644.471294][ T787] usb 1-1: SerialNumber: syz [ 644.625192][ T5833] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 644.668509][ T5833] usb 5-1: no configurations [ 644.673354][ T5833] usb 5-1: can't read configurations, error -22 [ 644.680544][ T5833] usb usb5-port1: unable to enumerate USB device [ 644.765105][ T787] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 644.813532][ T787] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 644.896631][ T787] usb 1-1: USB disconnect, device number 28 [ 645.954278][T12278] syzkaller0: entered promiscuous mode [ 645.969998][T12278] syzkaller0: entered allmulticast mode [ 646.112089][T12282] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 647.054249][T12291] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 647.205055][ T787] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 647.424392][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.451451][ T787] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 647.488504][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.560840][ T787] usb 1-1: config 0 descriptor?? [ 647.595653][ T787] pwc: Askey VC010 type 2 USB webcam detected. [ 648.001919][ T787] pwc: recv_control_msg error -32 req 02 val 2b00 [ 648.021237][ T787] pwc: recv_control_msg error -32 req 02 val 2700 [ 648.276737][ T787] pwc: recv_control_msg error -71 req 04 val 1000 [ 648.844862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 649.075000][ T787] pwc: recv_control_msg error -71 req 04 val 1300 [ 649.105104][ T787] pwc: recv_control_msg error -71 req 04 val 1400 [ 649.136380][ T787] pwc: recv_control_msg error -71 req 02 val 2000 [ 649.152841][ T787] pwc: recv_control_msg error -71 req 02 val 2100 [ 649.173169][ T787] pwc: recv_control_msg error -71 req 04 val 1500 [ 649.202112][ T787] pwc: recv_control_msg error -71 req 02 val 2500 [ 649.217629][ T787] pwc: recv_control_msg error -71 req 02 val 2400 [ 649.233117][T12318] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 649.234901][ T787] pwc: recv_control_msg error -71 req 02 val 2600 [ 649.255760][ T787] pwc: recv_control_msg error -71 req 02 val 2900 [ 649.263682][ T787] pwc: recv_control_msg error -71 req 02 val 2800 [ 649.281763][ T787] pwc: recv_control_msg error -71 req 04 val 1100 [ 649.296346][ T787] pwc: recv_control_msg error -71 req 04 val 1200 [ 649.314462][ T787] pwc: Registered as video103. [ 649.344208][ T787] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 649.372562][ T787] usb 1-1: USB disconnect, device number 29 [ 649.475079][ T5774] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 650.348529][T12330] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 650.372269][ T5774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 650.400190][ T5774] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.441488][ T5774] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 650.478195][ T5774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.602432][ T5774] usb 5-1: config 0 descriptor?? [ 651.221402][T12336] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 651.282413][T12341] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 651.305665][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.362238][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.392342][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.417323][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.428426][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.442517][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.453460][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.468381][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.484693][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.504434][T12347] binder: BINDER_SET_CONTEXT_MGR already set [ 651.522591][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.535008][T12347] binder: 12346:12347 ioctl 4018620d 200000004a80 returned -16 [ 651.564464][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.581217][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.619537][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.642138][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.662124][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.679354][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.698326][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.715333][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.730618][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.746841][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.757277][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.770348][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.783218][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.791640][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.827559][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.841082][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.848595][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.862180][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.869595][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.881751][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.891319][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.898991][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.906566][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.913889][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.921828][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.929490][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.936988][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.944302][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.951628][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.959516][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 651.979536][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.002696][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.011129][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.018801][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.028355][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.037455][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.044752][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.053538][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.061036][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.085057][ T5815] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 652.193593][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.201407][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.209417][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.216734][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.224289][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.231685][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.238964][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.246446][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.253682][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x2 [ 652.277338][ T5815] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 652.292033][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.304504][ T5815] usb 3-1: config 0 descriptor?? [ 652.349196][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.375652][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.436580][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.529326][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.551392][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.573080][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.665568][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.791764][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.897390][ T5815] cp210x 3-1:0.0: cp210x converter detected [ 652.935292][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 652.958663][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 652.989526][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.000526][ T5815] usb 3-1: cp210x converter now attached to ttyUSB0 [ 653.057542][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.129690][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.171163][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.188801][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.217443][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.230041][ T5815] usb 3-1: USB disconnect, device number 32 [ 653.233694][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.244548][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.252195][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.259660][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.266958][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.274374][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.281676][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.289403][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.296528][T12369] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 653.322596][ T5815] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 653.326033][T12370] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 653.342007][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.350858][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.371145][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 653.379016][ T5815] cp210x 3-1:0.0: device disconnected [ 654.094076][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.113631][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.127640][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.135551][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.143103][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.168409][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.195231][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.202762][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.210439][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.218238][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.225776][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.233265][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.240729][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.248413][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.256544][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.264030][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.272459][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.280274][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.287719][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.295418][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.302816][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.310288][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.317646][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.325092][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.332464][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.340297][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.347727][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.355248][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.362686][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.370496][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.378600][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.386026][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.393425][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.400784][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.408164][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.415808][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.423171][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.430546][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.437990][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.445442][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.452804][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.460429][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.467821][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.475638][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.483428][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.490858][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.617556][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.653847][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.711550][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.719501][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.727355][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.742393][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.784134][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.821240][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.830055][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.844427][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.866251][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.894183][ T5774] megaworld 0003:07B5:0312.0004: unknown main item tag 0x6 [ 654.898643][T12382] sctp: [Deprecated]: syz.4.1799 (pid 12382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.898643][T12382] Use struct sctp_sack_info instead [ 654.913403][ T5774] megaworld 0003:07B5:0312.0004: item fetching failed at offset 234/235 [ 655.615021][ T5774] megaworld 0003:07B5:0312.0004: parse failed [ 655.795524][ T5774] megaworld: probe of 0003:07B5:0312.0004 failed with error -22 [ 655.842098][ T5774] usb 5-1: USB disconnect, device number 10 [ 655.923093][T12392] overlayfs: failed to resolve './file1': -2 [ 656.148467][T12398] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 656.525006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 657.150980][ T55] block nbd2: Possible stuck request ffff8880220e0000: control (read@0,1024B). Runtime 150 seconds [ 657.161967][ T55] block nbd2: Possible stuck request ffff8880220e0200: control (read@1024,1024B). Runtime 150 seconds [ 657.173052][ T55] block nbd2: Possible stuck request ffff8880220e0400: control (read@2048,1024B). Runtime 150 seconds [ 657.184512][ T55] block nbd2: Possible stuck request ffff8880220e0600: control (read@3072,1024B). Runtime 150 seconds [ 657.425904][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 659.556005][T12424] random: crng reseeded on system resumption [ 660.344152][T12434] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 660.357063][ T55] block nbd3: Possible stuck request ffff888022148000: control (read@0,1024B). Runtime 150 seconds [ 660.367999][ T55] block nbd3: Possible stuck request ffff888022148200: control (read@1024,1024B). Runtime 150 seconds [ 660.379186][ T55] block nbd3: Possible stuck request ffff888022148400: control (read@2048,1024B). Runtime 150 seconds [ 660.390244][ T55] block nbd3: Possible stuck request ffff888022148600: control (read@3072,1024B). Runtime 150 seconds [ 660.611644][T12444] syzkaller0: entered promiscuous mode [ 660.617393][T12444] syzkaller0: entered allmulticast mode [ 661.006066][ T29] INFO: task syz.1.1293:10713 blocked for more than 143 seconds. [ 661.013982][ T29] Not tainted syzkaller #0 [ 661.155265][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.197775][ T29] task:syz.1.1293 state:D stack:24136 pid:10713 ppid:5770 flags:0x00004004 [ 661.209057][ T29] Call Trace: [ 661.212514][ T29] [ 661.218029][ T29] __schedule+0x1553/0x45a0 [ 661.222798][ T29] ? asan.module_dtor+0x20/0x20 [ 661.229315][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 661.247048][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 661.253903][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 661.260577][ T29] schedule+0xbd/0x170 [ 661.264959][ T29] schedule_preempt_disabled+0x13/0x20 [ 661.271048][ T29] __mutex_lock+0x6a9/0xcc0 [ 661.275738][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 661.280521][ T29] ? blkdev_get_by_dev+0x121/0x600 [ 661.285825][ T29] ? mutex_lock_nested+0x20/0x20 [ 661.290934][ T29] ? iput+0x343/0x920 [ 661.295204][ T29] ? ilookup+0x1c4/0x200 [ 661.299555][ T29] ? disk_block_events+0xa7/0x120 [ 661.304769][ T29] ? blkdev_get_by_dev+0x101/0x600 [ 661.310085][ T29] blkdev_get_by_dev+0x121/0x600 [ 661.315405][ T29] bdev_open_by_dev+0x77/0x100 [ 661.321507][ T29] setup_bdev_super+0x59/0x660 [ 661.328817][ T29] get_tree_bdev+0x346/0x520 [ 661.339560][ T29] ? vfs_parse_fs_string+0x170/0x170 [ 661.348677][ T29] ? xfs_mount_set_dax_mode+0x100/0x100 [ 661.356756][ T29] ? setup_bdev_super+0x660/0x660 [ 661.361954][ T29] ? apparmor_capable+0x137/0x1a0 [ 661.375526][ T29] ? bpf_lsm_capable+0x9/0x10 [ 661.391560][ T29] ? security_capable+0x89/0xb0 [ 661.405953][ T29] vfs_get_tree+0x8c/0x280 [ 661.410569][ T29] do_new_mount+0x24b/0xa40 [ 661.415232][ T29] __se_sys_mount+0x2e7/0x3d0 [ 661.420012][ T29] ? __x64_sys_mount+0xc0/0xc0 [ 661.424937][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 661.430356][ T29] ? __x64_sys_mount+0x20/0xc0 [ 661.435361][ T29] do_syscall_64+0x55/0xb0 [ 661.440099][ T29] ? clear_bhb_loop+0x40/0x90 [ 661.444998][ T29] ? clear_bhb_loop+0x40/0x90 [ 661.449839][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.455969][ T29] RIP: 0033:0x7f927699ce59 [ 661.460686][ T29] RSP: 002b:00007f9277892028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 661.469496][ T29] RAX: ffffffffffffffda RBX: 00007f9276c16090 RCX: 00007f927699ce59 [ 661.477832][ T29] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000200000000040 [ 661.486103][ T29] RBP: 00007f9276a32d6f R08: 0000200000000180 R09: 0000000000000000 [ 661.494189][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.502266][ T29] R13: 00007f9276c16128 R14: 00007f9276c16090 R15: 00007fff3f56f568 [ 661.510315][ T29] [ 661.513399][ T29] [ 661.513399][ T29] Showing all locks held in the system: [ 661.521337][ T29] 1 lock held by khungtaskd/29: [ 661.526349][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 661.537788][ T29] 2 locks held by getty/5526: [ 661.542662][ T29] #0: ffff88814d8800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 661.552550][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 661.562858][ T29] 1 lock held by udevd/5772: [ 661.567487][ T29] #0: ffff888021fc64c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 661.577576][ T29] 1 lock held by udevd/5782: [ 661.582171][ T29] #0: ffff88802202d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 661.592277][ T29] 1 lock held by udevd/5786: [ 661.596911][ T29] #0: ffff8880220034c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 661.607018][ T29] 2 locks held by kworker/0:7/5833: [ 661.612243][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 661.623347][ T29] #1: ffffc900048cfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 661.639005][ T29] 1 lock held by udevd/5888: [ 661.643612][ T29] #0: ffff888021fc14c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 661.654668][ T29] 1 lock held by udevd/6061: [ 661.660343][ T29] #0: ffff8880220284c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 661.670454][ T29] 1 lock held by syz.1.1293/10713: [ 661.675618][ T29] #0: ffff8880220034c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 661.685691][ T29] 1 lock held by udevd/10885: [ 661.690355][ T29] #0: ffff88802216b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 661.700414][ T29] 3 locks held by kworker/u4:0/11037: [ 661.705826][ T29] #0: ffff88802caa2938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 661.720646][ T29] #1: ffffc9001081fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 661.733530][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530 [ 661.743236][ T29] 3 locks held by kworker/u4:4/11673: [ 661.748996][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 661.760856][ T29] #1: ffffc9000b75fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 661.771922][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 661.781078][ T29] 1 lock held by syz.3.1816/12441: [ 661.786241][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 661.796108][ T29] 2 locks held by syz.4.1817/12443: [ 661.801325][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 661.810388][ T29] #1: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 661.821338][ T29] [ 661.823689][ T29] ============================================= [ 661.823689][ T29] [ 661.833306][ T29] NMI backtrace for cpu 1 [ 661.837676][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 661.844886][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.854951][ T29] Call Trace: [ 661.858271][ T29] [ 661.861198][ T29] dump_stack_lvl+0x18c/0x250 [ 661.865886][ T29] ? preempt_count_add+0x91/0x1a0 [ 661.870911][ T29] ? show_regs_print_info+0x20/0x20 [ 661.876106][ T29] ? load_image+0x420/0x420 [ 661.880609][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 661.885579][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 661.891726][ T29] ? _printk+0xde/0x130 [ 661.895874][ T29] ? load_image+0x420/0x420 [ 661.900369][ T29] ? load_image+0x420/0x420 [ 661.904865][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 661.910956][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 661.916935][ T29] watchdog+0xf3d/0xf80 [ 661.921101][ T29] ? watchdog+0x1e1/0xf80 [ 661.925433][ T29] kthread+0x2fa/0x390 [ 661.929493][ T29] ? hungtask_pm_notify+0x90/0x90 [ 661.934514][ T29] ? kthread_blkcg+0xd0/0xd0 [ 661.939094][ T29] ret_from_fork+0x48/0x80 [ 661.943504][ T29] ? kthread_blkcg+0xd0/0xd0 [ 661.948088][ T29] ret_from_fork_asm+0x11/0x20 [ 661.952889][ T29] [ 661.956322][ T29] Sending NMI from CPU 1 to CPUs 0: [ 661.961546][ C0] NMI backtrace for cpu 0 [ 661.961556][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 661.961570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.961578][ C0] RIP: 0010:set_next_entity+0xca/0x490 [ 661.961598][ C0] Code: fc 50 7f 00 49 c7 04 24 00 00 00 00 49 81 c7 90 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 8b 4c 89 ff e8 38 50 7f 00 eb 81 <4c> 8d 7b 48 4c 89 f8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 a7 01 00 [ 661.961684][ C0] RSP: 0018:ffffffff8ce07ad8 EFLAGS: 00000003 [ 661.961697][ C0] RAX: 1ffff110171c7835 RBX: ffff88807dbe3c80 RCX: ffff88807dbe3cb8 [ 661.961708][ C0] RDX: ffff8880b8e3cba0 RSI: ffff88807dbe3c80 RDI: ffff8880b8e3c140 [ 661.961718][ C0] RBP: dffffc0000000000 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 661.961728][ C0] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff8880b8e3cba0 [ 661.961738][ C0] R13: ffff8880b8e3cba0 R14: ffff8880b8e3c140 R15: ffff8880b8e3c1a8 [ 661.961749][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 661.961761][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.961770][ C0] CR2: 00007f3e1efea2f8 CR3: 000000007bd68000 CR4: 00000000003506f0 [ 661.961783][ C0] Call Trace: [ 661.961789][ C0] [ 661.961797][ C0] set_next_task_fair+0x1de/0x330 [ 661.961816][ C0] __schedule+0x3cb8/0x45a0 [ 661.961845][ C0] ? asan.module_dtor+0x20/0x20 [ 661.961863][ C0] ? flush_smp_call_function_queue+0x11e/0x250 [ 661.961882][ C0] ? tick_nohz_restart_sched_tick+0x200/0x200 [ 661.961904][ C0] schedule_idle+0x4e/0x80 [ 661.961919][ C0] do_idle+0x539/0x590 [ 661.961937][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 661.961958][ C0] ? do_idle+0x56d/0x590 [ 661.961974][ C0] cpu_startup_entry+0x43/0x60 [ 661.961990][ C0] rest_init+0x2e2/0x300 [ 661.962003][ C0] ? time_init+0x40/0x40 [ 661.962070][ C0] arch_call_rest_init+0xe/0x10 [ 661.962090][ C0] start_kernel+0x459/0x4e0 [ 661.962109][ C0] x86_64_start_reservations+0x2a/0x30 [ 661.962127][ C0] x86_64_start_kernel+0x60/0x60 [ 661.962143][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 661.962168][ C0] [ 662.173392][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 662.180285][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 662.187475][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.197527][ T29] Call Trace: [ 662.200799][ T29] [ 662.203725][ T29] dump_stack_lvl+0x18c/0x250 [ 662.208403][ T29] ? show_regs_print_info+0x20/0x20 [ 662.213596][ T29] ? load_image+0x420/0x420 [ 662.218097][ T29] panic+0x2dc/0x730 [ 662.221988][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 662.227790][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 662.232284][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 662.237822][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 662.243973][ T29] watchdog+0xf7c/0xf80 [ 662.248142][ T29] ? watchdog+0x1e1/0xf80 [ 662.252468][ T29] kthread+0x2fa/0x390 [ 662.256526][ T29] ? hungtask_pm_notify+0x90/0x90 [ 662.261547][ T29] ? kthread_blkcg+0xd0/0xd0 [ 662.266133][ T29] ret_from_fork+0x48/0x80 [ 662.270541][ T29] ? kthread_blkcg+0xd0/0xd0 [ 662.275137][ T29] ret_from_fork_asm+0x11/0x20 [ 662.279911][ T29] [ 662.283211][ T29] Kernel Offset: disabled [ 662.287544][ T29] Rebooting in 86400 seconds..