last executing test programs: 8m50.115335509s ago: executing program 0 (id=136): mkdir(0x0, 0x8) r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt(r0, 0x1, 0x9, &(0x7f0000000200)="3f14b0f1", 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) syz_usb_connect(0x3, 0x26, 0x0, 0x0) 8m48.927255122s ago: executing program 0 (id=140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) 8m48.088004841s ago: executing program 0 (id=144): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x7040, 0x0) read$FUSE(r4, 0x0, 0x0) 8m39.24385515s ago: executing program 0 (id=156): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x6d007ee5}, 0x8) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r5, r6, 0x0, 0x1) 8m37.387831851s ago: executing program 0 (id=160): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x10001, 0xc5fb, @value=0x3}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f0000000180)=[{0x7, 0x4, 0x20, 0x1000}]}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffba83) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r7 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r7}) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66", 0x5, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 8m33.777202771s ago: executing program 0 (id=163): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001100)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x290, 0x1a0, 0x1a0, 0x380, 0xd0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff, 0xffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'tunl0\x00', 'vcan0\x00', {}, {}, 0x87, 0x3, 0x2, 0x60}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc8}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@empty, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x290}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x40000, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x100, 0x4152, 0xff, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffffa, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x3c, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) 8m18.402898393s ago: executing program 32 (id=163): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001100)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x290, 0x1a0, 0x1a0, 0x380, 0xd0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff, 0xffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'tunl0\x00', 'vcan0\x00', {}, {}, 0x87, 0x3, 0x2, 0x60}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc8}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@empty, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x290}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x40000, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x100, 0x4152, 0xff, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffffa, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x3c, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) 8m10.306899364s ago: executing program 1 (id=192): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x7040, 0x0) read$FUSE(r3, 0x0, 0x0) 8m8.433281305s ago: executing program 1 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x1000f) 8m1.522016862s ago: executing program 1 (id=203): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x7040, 0x0) read$FUSE(r3, 0x0, 0x0) 8m0.004004449s ago: executing program 1 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000005}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) 7m58.769264533s ago: executing program 1 (id=206): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 7m57.005394103s ago: executing program 1 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 7m40.842736904s ago: executing program 33 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4m36.814131512s ago: executing program 5 (id=505): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) preadv2(r1, &(0x7f0000001d40)=[{&(0x7f0000000400)=""/216, 0xd8}], 0x1, 0xfffffffd, 0x8, 0x2) 4m25.769644656s ago: executing program 5 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x4}, 0xb1}}}, 0x7) sendmsg(r3, &(0x7f0000000cc0)={&(0x7f0000000900)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @remote}, 0x0, 0x2, 0x1, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)}, 0x0) symlink(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0\x00') lgetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x48, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'sha224-avx2\x00'}}, &(0x7f0000000e40), 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x1fffffd}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) 4m24.630856079s ago: executing program 5 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) read$FUSE(r3, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) r6 = geteuid() r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="1b0000001a005f0014f9f507000909008100030000000000", 0x18) r8 = getgid() r9 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r9, 0x0, 0x0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r10, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r10, &(0x7f0000000100)={0x78, 0x0, r11, {0x2000000007, 0x0, 0x0, {0x10000, 0xffffffffffffffff, 0x58, 0xbbf7, 0x400, 0x3, 0x2, 0x0, 0x8000, 0xa000, 0x9fffffff, r12, r13, 0x0, 0x200, 0x1000000}}}, 0x78) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002400)={0x150, 0x0, r5, [{{0x6, 0x1, 0x6, 0x9, 0x5, 0x9, {0x1, 0x9, 0x1, 0xffffffffffffff2d, 0x80, 0xd20f, 0x0, 0x8, 0x6, 0x8000, 0x5, r6, r8, 0x2000000, 0x8}}, {0x6, 0x5, 0x0, 0x7}}, {{0x4, 0x1, 0xeb, 0x7ff, 0x7, 0x10, {0x0, 0x9, 0x3, 0x4aee560c, 0x9, 0xac1, 0x8000, 0x1, 0xf, 0x6000, 0x3, 0x0, r13, 0x10000, 0x9}}, {0x6, 0x0, 0xd, 0x2, 'security.ima\x00'}}]}, 0x150) lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000180)=@v2={0x6, 0x3, 0xc, 0x4, 0x81, "b253ec84fe55c20c3bd07a0e7fa3fed03ca01d7a2408205baf3f67c2eeacda73d1f7f4b24bfb93784a9b563bf265201fe62afdd0696cb3fb0dab5b7477c2074dcb9a58ba36044b5522a084663a6d1cf1bb2aed009b23cd81e9f436457b079c836142516fc53d0a14edab8b60c5e2f731668cbb0c8b8296c6a28cfc9fceefcabdca"}, 0x8a, 0x0) 4m22.275467225s ago: executing program 5 (id=526): syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x20, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, 0xffffffffffffffff, 0x0, 0x0, 0xffffeffffffffffe}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 4m17.907073084s ago: executing program 5 (id=533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) chmod(&(0x7f0000000040)='.\x00', 0x35e) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 4m16.231887383s ago: executing program 5 (id=534): bind$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0xa2043, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000340)={0xe939, r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r5}) 4m1.090895802s ago: executing program 34 (id=534): bind$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0xa2043, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000340)={0xe939, r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r5}) 2m49.691754511s ago: executing program 3 (id=667): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000340)=""/88) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0xa0000000}) 2m48.813944451s ago: executing program 3 (id=668): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0x8000, 0x1, 0x800000c1}) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x162281) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) read$char_usb(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m47.648876224s ago: executing program 3 (id=669): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_dev$hidraw(0x0, 0x4, 0x400001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) ioctl$HIDIOCGRDESC(r0, 0x90044802, 0x0) 2m46.001373772s ago: executing program 3 (id=671): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x7040, 0x0) read$FUSE(r4, 0x0, 0x0) 2m43.828426296s ago: executing program 3 (id=676): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chmod(&(0x7f0000000040)='.\x00', 0x35e) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 2m38.17418215s ago: executing program 3 (id=679): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x10001, 0xc5fb, @value=0x3}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f0000000180)=[{0x7, 0x4, 0x20, 0x1000}]}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) 2m21.562225516s ago: executing program 35 (id=679): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x10001, 0xc5fb, @value=0x3}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f0000000180)=[{0x7, 0x4, 0x20, 0x1000}]}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) 1m0.406185064s ago: executing program 6 (id=838): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x7040, 0x0) read$FUSE(r4, 0x0, 0x0) 58.236651168s ago: executing program 6 (id=840): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x9, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f00000002c0)) ioctl$FITHAW(r4, 0xc0045878) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x8003}, 0xff97, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000012c0)={{0x0, 0x3938700}}, &(0x7f0000001300)) ioctl$FIONCLEX(r3, 0x5450) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)) timer_gettime(0x0, 0x0) 56.629100506s ago: executing program 8 (id=843): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x10, 0xd, 0x200, 0x0}) 56.27411089s ago: executing program 8 (id=844): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c000200"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 54.309762072s ago: executing program 8 (id=848): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) ptrace(0x10, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x10040) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x25}}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5}]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x894b, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000600)=""/207, 0xcf, 0x0) ptrace$setregset(0x4205, r0, 0x1, 0x0) 52.146934576s ago: executing program 6 (id=850): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x7040, 0x0) read$FUSE(r4, 0x0, 0x0) 52.146301276s ago: executing program 2 (id=851): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 50.742816242s ago: executing program 6 (id=852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b", 0x23}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 50.544949384s ago: executing program 2 (id=853): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80801) pselect6(0x40, &(0x7f0000000180)={0x6, 0x6, 0x1, 0xba15, 0x9, 0x3, 0x8, 0x9}, &(0x7f0000000200)={0x8, 0x2, 0x8, 0x4, 0x80000001, 0x4000000006, 0x400000eefb, 0x4000008}, 0x0, 0x0, 0x0) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f00000000c0)=""/248, 0xf8, 0x20, 0x0, 0x0) 50.367954226s ago: executing program 8 (id=855): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, 0x0, 0x0) close(r0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1db002, 0x100) sendfile(r4, 0xffffffffffffffff, 0x0, 0x60000000000000) 49.251679929s ago: executing program 8 (id=856): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0xb, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1f, 0x4, 0x40, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) r4 = fsopen(&(0x7f0000000180)='ubifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 47.449583939s ago: executing program 8 (id=859): unshare(0x20000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0xea5bc50b6199d77e) socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket(0xa, 0x5, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) r4 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008011}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000180)={0x3e}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) 44.823911368s ago: executing program 2 (id=864): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='tunl0\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x9, 0x0, &(0x7f0000000400)=0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f00000002c0)) ioctl$FITHAW(r5, 0xc0045878) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x8003}, 0xff97, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00000012c0)={{0x0, 0x3938700}}, &(0x7f0000001300)) ioctl$FIONCLEX(r4, 0x5450) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) timer_gettime(0x0, 0x0) io_submit(r8, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r7, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 44.296149904s ago: executing program 7 (id=865): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) ptrace(0x10, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x10040) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x25}}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5}]}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x894b, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000600)=""/207, 0xcf, 0x0) ptrace$setregset(0x4205, r0, 0x1, 0x0) 43.152997746s ago: executing program 6 (id=866): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, 0x0, 0x0) close(r0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1db002, 0x100) sendfile(r4, 0xffffffffffffffff, 0x0, 0x60000000000000) 42.87605272s ago: executing program 2 (id=867): syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x20, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x8014, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB=',vFd', @ANYRESHEX, @ANYBLOB]) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, 0xffffffffffffffff, 0x0, 0x0, 0xffffeffffffffffe}]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 42.088124149s ago: executing program 6 (id=868): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 41.680087233s ago: executing program 7 (id=869): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0xb, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1f, 0x4, 0x40, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) r4 = fsopen(&(0x7f0000000180)='ubifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 39.804597194s ago: executing program 7 (id=871): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write$6lowpan_control(r2, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 38.178437173s ago: executing program 7 (id=872): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e04114098af000000190902120001000000"], 0x0) 36.466707621s ago: executing program 2 (id=875): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 36.167984935s ago: executing program 2 (id=876): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x5, 0x0, &(0x7f0000000280)=0xffffffffffffffa2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) 34.445316594s ago: executing program 7 (id=877): openat$rfkill(0xffffffffffffff9c, 0x0, 0x101800, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = syz_open_dev$sg(0x0, 0x0, 0x88003) ioctl$FIBMAP(r1, 0x1, 0x0) 34.245724856s ago: executing program 7 (id=878): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x20}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000028c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000002900)={{0x3, 0x1, 0x1, 0x3, 0x7e05}}) r4 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0xfffffffd, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x5, '\x00', @ptr=0x2}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) ioctl$KVM_GET_TSC_KHZ_cpu(r7, 0xaea3) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$KVM_SET_SREGS2(r7, 0x4140aecd, &(0x7f0000000280)={{0xeeef0000, 0x1, 0x1e, 0x4, 0x7, 0xce, 0x6, 0x7f, 0x7, 0x8, 0xe}, {0x26000, 0x4000, 0xa, 0x8, 0x6, 0x97, 0x40, 0xf5, 0x7, 0x2, 0x0, 0x9}, {0x9000, 0x4000, 0xc, 0x0, 0x0, 0x11, 0x7, 0x3, 0x1, 0x2, 0xfb, 0x1}, {0x2, 0x5000, 0xc, 0x81, 0xe, 0x9, 0x3, 0xe5, 0x80, 0x3c, 0x4, 0xa}, {0xeeef0000, 0x0, 0x1a, 0x8, 0x7, 0x9, 0x81, 0x2, 0x3, 0x0, 0x5, 0x8}, {0x4, 0x10000, 0x0, 0x7, 0xa2, 0x1b, 0x4, 0x8, 0x14, 0x10, 0x4, 0xff}, {0x58000, 0x9000, 0x7, 0xf9, 0x4, 0xb6, 0xb, 0x1, 0x7, 0x0, 0xae, 0x5}, {0xeeef0000, 0x7000, 0x8, 0x2, 0x0, 0xe, 0x81, 0x5, 0x8, 0x4, 0xb, 0xc4}, {0x0, 0x2}, {0x100000, 0x6}, 0x80000000, 0x0, 0x71000, 0x440409, 0x0, 0x100, 0x0, 0x0, [0x100000000, 0x1, 0x5, 0x5]}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMAXCID(r2, 0x4004743c, 0x0) 32.19764486s ago: executing program 36 (id=859): unshare(0x20000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0xea5bc50b6199d77e) socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket(0xa, 0x5, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) r4 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008011}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000180)={0x3e}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) 26.921426839s ago: executing program 37 (id=868): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 26.913636978s ago: executing program 4 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timerfd_create(0x1, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) socket(0xa, 0x3, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) 25.607779653s ago: executing program 4 (id=885): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 22.406746839s ago: executing program 4 (id=886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chmod(&(0x7f0000000040)='.\x00', 0x35e) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 20.571002459s ago: executing program 38 (id=876): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x5, 0x0, &(0x7f0000000280)=0xffffffffffffffa2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) 20.53994047s ago: executing program 4 (id=888): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x51, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000a40)={0xa, 0x6e24, 0x7fff, @mcast1, 0x9}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 18.121591437s ago: executing program 39 (id=878): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x20}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000028c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000002900)={{0x3, 0x1, 0x1, 0x3, 0x7e05}}) r4 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0xfffffffd, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x5, '\x00', @ptr=0x2}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) ioctl$KVM_GET_TSC_KHZ_cpu(r7, 0xaea3) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$KVM_SET_SREGS2(r7, 0x4140aecd, &(0x7f0000000280)={{0xeeef0000, 0x1, 0x1e, 0x4, 0x7, 0xce, 0x6, 0x7f, 0x7, 0x8, 0xe}, {0x26000, 0x4000, 0xa, 0x8, 0x6, 0x97, 0x40, 0xf5, 0x7, 0x2, 0x0, 0x9}, {0x9000, 0x4000, 0xc, 0x0, 0x0, 0x11, 0x7, 0x3, 0x1, 0x2, 0xfb, 0x1}, {0x2, 0x5000, 0xc, 0x81, 0xe, 0x9, 0x3, 0xe5, 0x80, 0x3c, 0x4, 0xa}, {0xeeef0000, 0x0, 0x1a, 0x8, 0x7, 0x9, 0x81, 0x2, 0x3, 0x0, 0x5, 0x8}, {0x4, 0x10000, 0x0, 0x7, 0xa2, 0x1b, 0x4, 0x8, 0x14, 0x10, 0x4, 0xff}, {0x58000, 0x9000, 0x7, 0xf9, 0x4, 0xb6, 0xb, 0x1, 0x7, 0x0, 0xae, 0x5}, {0xeeef0000, 0x7000, 0x8, 0x2, 0x0, 0xe, 0x81, 0x5, 0x8, 0x4, 0xb, 0xc4}, {0x0, 0x2}, {0x100000, 0x6}, 0x80000000, 0x0, 0x71000, 0x440409, 0x0, 0x100, 0x0, 0x0, [0x100000000, 0x1, 0x5, 0x5]}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMAXCID(r2, 0x4004743c, 0x0) 18.075945417s ago: executing program 4 (id=890): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r4 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x7040, 0x0) read$FUSE(r4, 0x0, 0x0) 15.622565955s ago: executing program 4 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008885}, 0x24040000) 0s ago: executing program 40 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008885}, 0x24040000) kernel console output (not intermixed with test programs): : batadv0: Removing interface: batadv_slave_1 [ 275.301449][ T4397] device bridge_slave_1 left promiscuous mode [ 275.315067][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.331739][ T4397] device bridge_slave_0 left promiscuous mode [ 275.361152][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.612872][ T5689] CUSE: info not properly terminated [ 276.695461][ T4397] device veth1_macvtap left promiscuous mode [ 276.701671][ T4397] device veth0_macvtap left promiscuous mode [ 276.792674][ T4397] device veth1_vlan left promiscuous mode [ 276.810259][ T4397] device veth0_vlan left promiscuous mode [ 277.025810][ T5700] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 277.033268][ T5700] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 277.046400][ T27] audit: type=1326 audit(1778513660.515:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 277.140352][ T27] audit: type=1326 audit(1778513660.515:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 277.206023][ T27] audit: type=1326 audit(1778513660.515:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 277.317460][ T27] audit: type=1326 audit(1778513660.515:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 277.341921][ T27] audit: type=1326 audit(1778513660.515:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 277.376216][ T27] audit: type=1326 audit(1778513660.515:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 277.401657][ T27] audit: type=1326 audit(1778513660.515:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 277.433322][ T27] audit: type=1326 audit(1778513660.515:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 278.109885][ T5702] loop4: detected capacity change from 0 to 16 [ 278.118964][ T5702] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 278.163694][ T5702] cramfs: wrong endianness [ 278.238558][ T4397] team0 (unregistering): Port device team_slave_1 removed [ 278.326219][ T4397] team0 (unregistering): Port device team_slave_0 removed [ 278.442453][ T4397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.542135][ T4397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.716972][ T5702] loop4: detected capacity change from 0 to 32768 [ 278.737145][ T5702] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.304 (5702) [ 278.753281][ T5702] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.763790][ T5702] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 278.772553][ T5702] BTRFS info (device loop4): using free space tree [ 278.980267][ T5702] BTRFS info (device loop4): enabling ssd optimizations [ 278.987579][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 279.138960][ T4272] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 279.151580][ T4397] bond0 (unregistering): Released all slaves [ 279.191413][ T14] usb 4-1: too many configurations: 25, using maximum allowed: 8 [ 279.266311][ T14] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 279.276550][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.301284][ T14] usb 4-1: config 0 descriptor?? [ 279.309352][ T5614] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (5614) [ 279.327501][ T14] pwc: Creative Labs Webcam Pro Ex detected. [ 279.333993][ T14] pwc: Warning: more than 1 configuration available. [ 279.458729][ T5241] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.468232][ T5241] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.477550][ T5241] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.486845][ T5241] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.565159][ T5708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.307'. [ 279.782759][ T14] pwc: Failed to set LED on/off time (-71) [ 279.797685][ T14] pwc: send_video_command error -71 [ 279.802980][ T14] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 279.834513][ T14] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 279.884580][ T14] usb 4-1: USB disconnect, device number 7 [ 280.225420][ T5407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.342290][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.407589][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.465383][ T5407] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.544434][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.582475][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.654348][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.661541][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.692547][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.725806][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.750542][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.779234][ T4460] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.786565][ T4460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.871642][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.894507][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.021200][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.059739][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.130228][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.190850][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.215847][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.248966][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.287871][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.297642][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.305987][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.307276][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.319972][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.336738][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.345128][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.404186][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.429143][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.475089][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.010253][ T4423] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.068545][ T5407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.108711][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.121723][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.234059][ T4423] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.332439][ T4423] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.538823][ T4423] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.777574][ T5777] CUSE: info not properly terminated [ 283.433755][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 283.564380][ T5758] chnl_net:caif_netlink_parms(): no params data found [ 283.951435][ T5789] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 283.959026][ T5789] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 283.982943][ T27] audit: type=1326 audit(1778513667.445:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.313" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 284.633991][ T27] audit: type=1326 audit(1778513667.445:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.313" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 284.706312][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.090047][ T27] audit: type=1326 audit(1778513667.445:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.313" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 285.224003][ T27] audit: type=1326 audit(1778513667.445:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.313" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 285.378163][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.437562][ T5758] device bridge_slave_0 entered promiscuous mode [ 285.463649][ T27] audit: type=1326 audit(1778513667.445:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.313" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 285.519658][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 285.530473][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.573804][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.582479][ T5758] device bridge_slave_1 entered promiscuous mode [ 285.591276][ T27] audit: type=1326 audit(1778513667.445:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.3.313" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 286.866462][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.973662][ T5827] CUSE: info not properly terminated [ 286.997243][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.603646][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 287.691418][ T5758] team0: Port device team_slave_0 added [ 287.769677][ T5758] team0: Port device team_slave_1 added [ 287.848090][ T22] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 287.856242][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.863226][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.889863][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.903306][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.924005][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.970787][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.988066][ T4935] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 288.025391][ T22] usb 5-1: device descriptor read/64, error -71 [ 288.050905][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.069237][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.143621][ T4935] usb 3-1: device descriptor read/64, error -71 [ 288.187472][ T5758] device hsr_slave_0 entered promiscuous mode [ 288.194623][ T5758] device hsr_slave_1 entered promiscuous mode [ 288.201382][ T5758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.209790][ T5758] Cannot create hsr debugfs directory [ 288.234305][ T4423] device hsr_slave_0 left promiscuous mode [ 288.241429][ T4423] device hsr_slave_1 left promiscuous mode [ 288.261184][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.273666][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.289986][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.304054][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.309471][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 288.322354][ T4423] device bridge_slave_1 left promiscuous mode [ 288.342032][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.354480][ T4423] device bridge_slave_0 left promiscuous mode [ 288.360807][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.412197][ T4423] device veth1_macvtap left promiscuous mode [ 288.419403][ T4935] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 288.428816][ T4423] device veth0_macvtap left promiscuous mode [ 288.443987][ T4423] device veth1_vlan left promiscuous mode [ 288.460061][ T4423] device veth0_vlan left promiscuous mode [ 288.483656][ T22] usb 5-1: device descriptor read/64, error -71 [ 288.583801][ T4935] usb 3-1: device descriptor read/64, error -71 [ 288.603825][ T22] usb usb5-port1: attempt power cycle [ 288.711412][ T4935] usb usb3-port1: attempt power cycle [ 289.134100][ T4935] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 289.159676][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 289.184277][ T22] usb 5-1: device descriptor read/8, error -71 [ 289.203989][ T4935] usb 3-1: device descriptor read/8, error -71 [ 289.291920][ T5849] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 289.299466][ T5849] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 289.324339][ T27] audit: type=1326 audit(1778513672.785:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 289.493827][ T4935] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 289.545869][ T4935] usb 3-1: device descriptor read/8, error -71 [ 289.581512][ T27] audit: type=1326 audit(1778513672.785:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 289.745292][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 289.757180][ T4935] usb usb3-port1: unable to enumerate USB device [ 289.885228][ T27] audit: type=1326 audit(1778513672.785:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 289.909442][ T27] audit: type=1326 audit(1778513672.785:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 289.935811][ T27] audit: type=1326 audit(1778513672.785:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 289.960736][ T27] audit: type=1326 audit(1778513672.785:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.3.326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f968fd9cdd9 code=0x7ffc0000 [ 290.144371][ T22] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 290.194311][ T22] usb 5-1: device descriptor read/8, error -71 [ 290.280443][ T4423] team0 (unregistering): Port device team_slave_1 removed [ 290.323803][ T22] usb usb5-port1: unable to enumerate USB device [ 290.369525][ T4423] team0 (unregistering): Port device team_slave_0 removed [ 290.446740][ T4423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.527087][ T4423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.438738][ T27] audit: type=1326 audit(1778513674.865:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.4.329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e2eb9cdd9 code=0x0 [ 291.720109][ T5869] CUSE: info not properly terminated [ 293.123282][ T5874] netlink: 96 bytes leftover after parsing attributes in process `syz.4.333'. [ 294.360117][ T5879] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 294.367700][ T5879] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 294.543996][ T27] audit: type=1326 audit(1778513677.855:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 295.050144][ T27] audit: type=1326 audit(1778513677.855:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 295.112958][ T4423] bond0 (unregistering): Released all slaves [ 295.207828][ T27] audit: type=1326 audit(1778513677.855:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 295.343828][ T27] audit: type=1326 audit(1778513677.855:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 296.884401][ T27] audit: type=1326 audit(1778513677.855:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 296.929781][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.946587][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.954353][ T27] audit: type=1326 audit(1778513677.855:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 297.082237][ T5407] device veth0_vlan entered promiscuous mode [ 297.135090][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.338'. [ 297.192745][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.246306][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.309062][ T5407] device veth1_vlan entered promiscuous mode [ 297.536752][ T5407] device veth0_macvtap entered promiscuous mode [ 297.575169][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.598614][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.661780][ T5407] device veth1_macvtap entered promiscuous mode [ 297.716899][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.772730][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.803463][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.853568][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.903669][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.939205][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.003184][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.041930][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.059991][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.089423][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.110023][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.121818][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.137212][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.150909][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.213244][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.244513][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.275066][ T5407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.308978][ T5407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.334081][ T5407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.342993][ T5407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.353070][ T4935] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 298.556609][ T4935] usb 3-1: Using ep0 maxpacket: 32 [ 298.566552][ T4935] usb 3-1: no configurations [ 298.593093][ T4935] usb 3-1: can't read configurations, error -22 [ 298.611506][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.649027][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.699325][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.754037][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.762272][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.806552][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.814310][ T4935] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 298.883283][ T5758] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 298.908374][ T5758] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 298.940869][ T5758] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 298.997723][ T5758] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 299.013919][ T4935] usb 3-1: Using ep0 maxpacket: 32 [ 299.020940][ T4935] usb 3-1: no configurations [ 299.039551][ T4935] usb 3-1: can't read configurations, error -22 [ 299.063685][ T4935] usb usb3-port1: attempt power cycle [ 299.284214][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.336177][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.364012][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.379740][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.478990][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.488531][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.507061][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.514354][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.523013][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.236094][ T4935] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 300.252253][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.284581][ T4935] usb 3-1: Using ep0 maxpacket: 32 [ 300.290972][ T4935] usb 3-1: no configurations [ 300.314099][ T4935] usb 3-1: can't read configurations, error -22 [ 300.339039][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.346252][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.485466][ T4935] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 300.545489][ T4935] usb 3-1: Using ep0 maxpacket: 32 [ 300.614751][ T4935] usb 3-1: no configurations [ 300.664869][ T4935] usb 3-1: can't read configurations, error -22 [ 300.751261][ T4935] usb usb3-port1: unable to enumerate USB device [ 300.867753][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.192185][ T5924] CUSE: info not properly terminated [ 301.803996][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.813068][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.888221][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.917601][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.024765][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 302.125185][ T5758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.264776][ T5758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.635217][ T5933] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 302.642632][ T5933] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.654875][ T27] audit: type=1326 audit(1778513686.115:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.5.344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 304.616599][ T5939] netlink: 96 bytes leftover after parsing attributes in process `syz.2.343'. [ 305.534634][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.573817][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.614076][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.618639][ T27] audit: type=1326 audit(1778513686.115:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.5.344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 305.655726][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.674949][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.710952][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.720516][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.772150][ T27] audit: type=1326 audit(1778513686.115:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.5.344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 305.935569][ T27] audit: type=1326 audit(1778513686.115:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.5.344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 306.063559][ T27] audit: type=1326 audit(1778513686.115:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.5.344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 306.276871][ T27] audit: type=1326 audit(1778513686.125:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.5.344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 306.434626][ T5956] CUSE: info not properly terminated [ 307.013884][ T27] audit: type=1326 audit(1778513686.125:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.5.344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 307.151408][ T27] audit: type=1326 audit(1778513686.125:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.5.344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 307.513919][ T5728] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 307.544274][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.551931][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.600360][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.728675][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 307.735517][ T5728] usb 6-1: no configurations [ 307.740171][ T5728] usb 6-1: can't read configurations, error -22 [ 307.933846][ T5728] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 308.154521][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 308.180502][ T5728] usb 6-1: no configurations [ 308.210330][ T5728] usb 6-1: can't read configurations, error -22 [ 308.233798][ T5728] usb usb6-port1: attempt power cycle [ 308.851592][ T5728] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 308.946195][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 309.017210][ T5728] usb 6-1: no configurations [ 309.077382][ T5728] usb 6-1: can't read configurations, error -22 [ 310.104061][ T5728] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 310.154875][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 310.160644][ T5728] usb 6-1: no configurations [ 310.183672][ T5728] usb 6-1: can't read configurations, error -22 [ 310.211397][ T5728] usb usb6-port1: unable to enumerate USB device [ 310.948401][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 311.002776][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 311.394327][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.420189][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.481457][ T5758] device veth0_vlan entered promiscuous mode [ 311.507147][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.556520][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.609184][ T5758] device veth1_vlan entered promiscuous mode [ 311.744777][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 311.784692][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 312.378819][ T6004] netlink: 96 bytes leftover after parsing attributes in process `syz.2.357'. [ 313.344211][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.395090][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.462192][ T5758] device veth0_macvtap entered promiscuous mode [ 313.493904][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 313.528893][ T5758] device veth1_macvtap entered promiscuous mode [ 313.584225][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.623618][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.696871][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.728134][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.763758][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.799008][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.947093][ T6011] input: syz0 as /devices/virtual/input/input6 [ 314.037149][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.077094][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.111158][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.142254][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.563620][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.626018][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.820254][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.870375][ T6020] CUSE: info not properly terminated [ 315.522692][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.549666][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.581735][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.632566][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.648243][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.683426][ T5758] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.724068][ T5758] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.732842][ T5758] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.834930][ T5758] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.973704][ T3599] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 317.104441][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.116937][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.123310][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.164222][ T3599] usb 4-1: Using ep0 maxpacket: 32 [ 317.170304][ T3599] usb 4-1: no configurations [ 317.175294][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.186632][ T3599] usb 4-1: can't read configurations, error -22 [ 317.197161][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.205532][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.241134][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 317.268788][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 317.387839][ T3599] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 317.593852][ T3599] usb 4-1: Using ep0 maxpacket: 32 [ 317.609731][ T3599] usb 4-1: no configurations [ 317.628633][ T3599] usb 4-1: can't read configurations, error -22 [ 317.664278][ T3599] usb usb4-port1: attempt power cycle [ 318.332875][ T6046] netlink: 96 bytes leftover after parsing attributes in process `syz.6.367'. [ 319.333791][ T3599] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 319.394138][ T3599] usb 4-1: device descriptor read/8, error -71 [ 319.690905][ T6055] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 319.698583][ T6055] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 319.723784][ T27] audit: type=1326 audit(1778513703.185:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.2.358" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 320.402533][ T27] audit: type=1326 audit(1778513703.185:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.2.358" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 320.569302][ T27] audit: type=1326 audit(1778513703.185:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.2.358" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 320.623544][ T27] audit: type=1326 audit(1778513703.185:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.2.358" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 320.760221][ T6058] input: syz0 as /devices/virtual/input/input7 [ 320.993878][ T27] audit: type=1326 audit(1778513703.185:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.2.358" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 321.023844][ T27] audit: type=1326 audit(1778513703.185:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.2.358" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 321.351479][ T6065] CUSE: info not properly terminated [ 325.174716][ T6094] netlink: 96 bytes leftover after parsing attributes in process `syz.3.378'. [ 327.122834][ T6105] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 327.130532][ T6105] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 327.383875][ T27] audit: type=1326 audit(1778513710.615:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.4.380" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 327.616018][ T27] audit: type=1326 audit(1778513710.615:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.4.380" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 327.773551][ T27] audit: type=1326 audit(1778513710.615:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.4.380" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 327.953756][ T27] audit: type=1326 audit(1778513710.615:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.4.380" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 328.057189][ T27] audit: type=1326 audit(1778513710.615:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.4.380" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 328.279141][ T27] audit: type=1326 audit(1778513710.625:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.4.380" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 328.305494][ T6111] input: syz0 as /devices/virtual/input/input8 [ 328.555536][ T6116] binder_alloc: 6115: pid 6115 spamming oneway? 2 buffers allocated for a total size of 5120 [ 328.637090][ T6116] binder_alloc: 6115: pid 6115 spamming oneway? 3 buffers allocated for a total size of 5128 [ 329.073754][ T5496] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 329.343655][ T5496] usb 4-1: Using ep0 maxpacket: 32 [ 329.350811][ T5496] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.562380][ T5496] usb 4-1: config 0 has no interfaces? [ 329.583620][ T5496] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 329.583650][ T5496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.583671][ T5496] usb 4-1: Product: syz [ 329.583683][ T5496] usb 4-1: Manufacturer: syz [ 329.583697][ T5496] usb 4-1: SerialNumber: syz [ 329.587929][ T5496] usb 4-1: config 0 descriptor?? [ 330.907505][ T5496] usb 4-1: USB disconnect, device number 12 [ 332.947482][ T6164] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 332.955058][ T6164] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 333.000892][ T27] audit: type=1326 audit(1778513716.465:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.6.391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 333.090401][ T27] audit: type=1326 audit(1778513716.465:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.6.391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 333.275172][ T27] audit: type=1326 audit(1778513716.515:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.6.391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 333.594485][ T6167] input: syz0 as /devices/virtual/input/input9 [ 333.803592][ T27] audit: type=1326 audit(1778513716.515:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.6.391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 333.923723][ T27] audit: type=1326 audit(1778513716.515:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.6.391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 334.039142][ T27] audit: type=1326 audit(1778513716.515:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.6.391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 334.146341][ T27] audit: type=1326 audit(1778513716.515:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.6.391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 334.323836][ T5496] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 334.556331][ T5496] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 334.608606][ T5496] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 334.628328][ T5496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.681664][ T5496] usb 3-1: config 0 descriptor?? [ 334.690583][ T27] audit: type=1326 audit(1778513716.515:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.6.391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 334.735316][ T5496] pwc: Creative Labs Webcam Pro Ex detected. [ 334.765818][ T5496] pwc: Warning: more than 1 configuration available. [ 334.934173][ T6171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.394'. [ 335.070538][ T5496] pwc: Failed to set LED on/off time (-71) [ 335.091906][ T5496] pwc: send_video_command error -71 [ 335.132895][ T5496] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 335.189843][ T5496] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 335.221767][ T5496] usb 3-1: USB disconnect, device number 12 [ 335.303636][ T1183] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 335.493668][ T1183] usb 4-1: device descriptor read/64, error -71 [ 336.493698][ T1183] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 336.673773][ T1183] usb 4-1: device descriptor read/64, error -71 [ 336.803742][ T1183] usb usb4-port1: attempt power cycle [ 337.228988][ T1183] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 337.280056][ T1183] usb 4-1: device descriptor read/8, error -71 [ 337.559006][ T1183] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 337.605380][ T1183] usb 4-1: device descriptor read/8, error -71 [ 337.723984][ T1183] usb usb4-port1: unable to enumerate USB device [ 338.010738][ T6215] input: syz0 as /devices/virtual/input/input10 [ 338.520543][ T6224] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.530211][ T6224] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.539018][ T6224] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.547787][ T6224] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.559485][ T6224] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.568451][ T6224] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.577460][ T6224] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.586361][ T6224] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.443659][ T6240] Unsupported ieee802154 address type: 0 [ 342.360133][ T6256] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 342.367688][ T6256] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 342.376989][ T27] audit: type=1326 audit(1778513725.845:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.411" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 342.497071][ T27] audit: type=1326 audit(1778513725.845:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.411" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 342.695349][ T27] audit: type=1326 audit(1778513725.845:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.411" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 342.761161][ T27] audit: type=1326 audit(1778513725.845:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.411" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 342.817939][ T27] audit: type=1326 audit(1778513725.845:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.411" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 342.979741][ T27] audit: type=1326 audit(1778513725.845:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.411" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 343.223718][ T27] audit: type=1326 audit(1778513725.855:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.411" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 343.882004][ T27] audit: type=1326 audit(1778513725.855:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.2.411" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 345.354259][ T6283] input: syz0 as /devices/virtual/input/input11 [ 345.974578][ T6290] netlink: 36 bytes leftover after parsing attributes in process `syz.4.418'. [ 352.233804][ T6319] netlink: 96 bytes leftover after parsing attributes in process `syz.2.428'. [ 354.370743][ T6340] CUSE: info not properly terminated [ 358.327065][ T6359] input: syz0 as /devices/virtual/input/input12 [ 363.019691][ T6395] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 363.027469][ T6395] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 363.059419][ T27] audit: type=1326 audit(1778513746.525:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 363.222334][ T27] audit: type=1326 audit(1778513746.525:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 363.265484][ T27] audit: type=1326 audit(1778513746.525:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 363.474337][ T27] audit: type=1326 audit(1778513746.525:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 363.505990][ T27] audit: type=1326 audit(1778513746.525:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 363.757390][ T6400] netlink: 224 bytes leftover after parsing attributes in process `syz.3.442'. [ 364.613897][ T6403] netlink: 96 bytes leftover after parsing attributes in process `syz.2.439'. [ 364.952501][ T27] audit: type=1326 audit(1778513746.525:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 364.983834][ T27] audit: type=1326 audit(1778513746.525:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 365.029642][ T27] audit: type=1326 audit(1778513746.525:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.6.435" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 366.910612][ T6424] mmap: syz.4.446 (6424) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 370.963718][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 372.609628][ T6464] UBIFS error (pid: 6464): cannot open "c:::", error -22 [ 373.803889][ T6478] netlink: 96 bytes leftover after parsing attributes in process `syz.6.454'. [ 374.034342][ T4378] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 374.213600][ T4378] usb 6-1: Using ep0 maxpacket: 32 [ 374.220583][ T4378] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.271376][ T4378] usb 6-1: config 0 has no interfaces? [ 374.301560][ T4378] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 374.382708][ T4378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.423646][ T4378] usb 6-1: Product: syz [ 374.427887][ T4378] usb 6-1: Manufacturer: syz [ 374.454090][ T4378] usb 6-1: SerialNumber: syz [ 374.497615][ T4378] usb 6-1: config 0 descriptor?? [ 376.040026][ T3599] usb 6-1: USB disconnect, device number 6 [ 376.423605][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 376.613708][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 376.624535][ T22] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 376.653604][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.733164][ T22] usb 5-1: Product: syz [ 376.775845][ T22] usb 5-1: Manufacturer: syz [ 376.780886][ T22] usb 5-1: SerialNumber: syz [ 377.434400][ T6515] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 377.441851][ T6515] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 377.455433][ T27] audit: type=1326 audit(1778513760.915:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.5.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 377.745895][ T27] audit: type=1326 audit(1778513760.915:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.5.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 377.770354][ T27] audit: type=1326 audit(1778513760.915:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.5.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 377.813667][ T27] audit: type=1326 audit(1778513760.915:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.5.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 378.000187][ T27] audit: type=1326 audit(1778513760.925:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.5.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 378.085316][ T22] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 378.558157][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.564682][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.793901][ T27] audit: type=1326 audit(1778513760.925:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.5.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 378.840738][ T22] usb 5-1: USB disconnect, device number 9 [ 380.023659][ T6534] UBIFS error (pid: 6534): cannot open "c:::", error -22 [ 380.933945][ T6529] netlink: 96 bytes leftover after parsing attributes in process `syz.2.465'. [ 383.243586][ T4419] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 383.483787][ T4419] usb 4-1: Using ep0 maxpacket: 32 [ 383.491981][ T4419] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.527343][ T4419] usb 4-1: config 0 has no interfaces? [ 383.555734][ T4419] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 383.582006][ T4419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.642003][ T4419] usb 4-1: Product: syz [ 383.671473][ T4419] usb 4-1: Manufacturer: syz [ 383.698093][ T4419] usb 4-1: SerialNumber: syz [ 383.716557][ T4419] usb 4-1: config 0 descriptor?? [ 385.077611][ T4378] usb 4-1: USB disconnect, device number 17 [ 385.469364][ T6603] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 385.477017][ T6603] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 385.491231][ T27] audit: type=1326 audit(1778513768.955:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.5.474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 385.540443][ T27] audit: type=1326 audit(1778513768.955:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.5.474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 385.660133][ T27] audit: type=1326 audit(1778513768.955:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.5.474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 385.684807][ T4378] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 385.800707][ T27] audit: type=1326 audit(1778513768.955:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.5.474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 385.883618][ T4378] usb 4-1: Using ep0 maxpacket: 32 [ 385.893124][ T4378] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 385.954105][ T4378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.972448][ T27] audit: type=1326 audit(1778513768.955:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.5.474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 386.109766][ T4378] usb 4-1: selecting invalid altsetting 3 [ 386.143599][ T27] audit: type=1326 audit(1778513768.955:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.5.474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111239cdd9 code=0x7ffc0000 [ 386.178205][ T4378] comedi comedi5: could not set alternate setting 3 in high speed [ 386.223601][ T4378] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 386.300395][ T4378] usbduxsigma: probe of 4-1:128.0 failed with error -22 [ 386.323506][ T6607] UBIFS error (pid: 6607): cannot open "(null)", error -22 [ 386.387282][ T4378] usb 4-1: USB disconnect, device number 18 [ 387.813993][ T6615] netlink: 96 bytes leftover after parsing attributes in process `syz.4.479'. [ 391.915613][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.6.487'. [ 392.173749][ T3599] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 392.194381][ T6653] CUSE: info not properly terminated [ 392.443822][ T3599] usb 6-1: Using ep0 maxpacket: 32 [ 392.458266][ T3599] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 133, changing to 11 [ 392.609722][ T3599] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57441, setting to 1024 [ 392.753742][ T3599] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 392.814388][ T3599] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 392.873642][ T3599] usb 6-1: Product: syz [ 392.934441][ T3599] usb 6-1: Manufacturer: syz [ 392.996982][ T3599] hub 6-1:4.0: USB hub found [ 393.200617][ T3599] hub 6-1:4.0: 2 ports detected [ 395.639025][ T3599] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 395.657647][ T3599] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 395.779874][ T3599] usb 6-1: USB disconnect, device number 7 [ 396.563965][ T6669] netlink: 96 bytes leftover after parsing attributes in process `syz.5.491'. [ 398.086678][ T6690] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 398.243908][ T6690] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 398.296117][ T27] audit: type=1326 audit(1778513781.765:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.4.492" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 398.406690][ T27] audit: type=1326 audit(1778513781.795:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.4.492" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 399.118381][ T6706] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 399.126100][ T6706] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 399.136477][ T27] audit: type=1326 audit(1778513782.605:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 399.237741][ T27] audit: type=1326 audit(1778513782.605:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 399.389736][ T27] audit: type=1326 audit(1778513782.605:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 399.554689][ T27] audit: type=1326 audit(1778513782.605:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 399.663684][ T27] audit: type=1326 audit(1778513782.605:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 400.593660][ T27] audit: type=1326 audit(1778513782.625:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 400.618386][ T27] audit: type=1326 audit(1778513782.625:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 400.646631][ T27] audit: type=1326 audit(1778513782.625:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.2.496" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 401.036993][ T6721] CUSE: info not properly terminated [ 404.203989][ T6731] netlink: 96 bytes leftover after parsing attributes in process `syz.3.504'. [ 405.573821][ T3599] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 405.765945][ T3599] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 405.803509][ T3599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.872452][ T3599] usb 5-1: config 0 descriptor?? [ 406.313115][ T6739] netlink: 'syz.4.506': attribute type 1 has an invalid length. [ 406.365809][ T6739] netlink: 'syz.4.506': attribute type 2 has an invalid length. [ 406.450342][ T3599] ath6kl: Failed to submit usb control message: -71 [ 406.465569][ T3599] ath6kl: unable to send the bmi data to the device: -71 [ 406.490495][ T3599] ath6kl: Unable to send get target info: -71 [ 406.523044][ T3599] ath6kl: Failed to init ath6kl core: -71 [ 406.561063][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 406.616799][ T3599] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 406.649059][ T3599] usb 5-1: USB disconnect, device number 10 [ 409.634231][ T6776] CUSE: info not properly terminated [ 410.530228][ T6778] netlink: 224 bytes leftover after parsing attributes in process `syz.4.514'. [ 413.153989][ T6787] netlink: 96 bytes leftover after parsing attributes in process `syz.4.517'. [ 415.698738][ T27] audit: type=1326 audit(1778513799.165:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.3.524" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f968fd9cdd9 code=0x0 [ 417.292727][ T6825] CUSE: info not properly terminated [ 427.593567][ T6878] CUSE: info not properly terminated [ 428.036305][ T6874] UBIFS error (pid: 6874): cannot open "c:::", error -22 [ 429.714725][ T6891] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 430.115939][ T6891] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 431.490593][ T27] audit: type=1326 audit(1778513814.955:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.6.532" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 431.754266][ T27] audit: type=1326 audit(1778513814.955:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.6.532" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 431.933726][ T27] audit: type=1326 audit(1778513814.985:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.6.532" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 432.031529][ T27] audit: type=1326 audit(1778513814.985:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.6.532" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 432.443668][ T27] audit: type=1326 audit(1778513814.985:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.6.532" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 432.542624][ T27] audit: type=1326 audit(1778513814.985:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.6.532" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 432.680315][ T27] audit: type=1326 audit(1778513814.985:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.6.532" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 432.831067][ T27] audit: type=1326 audit(1778513814.985:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.6.532" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e799cdd9 code=0x7ffc0000 [ 433.588046][ T6919] netlink: 96 bytes leftover after parsing attributes in process `syz.4.544'. [ 436.481655][ T6943] CUSE: info not properly terminated [ 438.803648][ T6950] UBIFS error (pid: 6950): cannot open "c:::", error -22 [ 440.284174][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.303996][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.150947][ T6967] netlink: 96 bytes leftover after parsing attributes in process `syz.6.555'. [ 442.474730][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.484664][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.505429][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.513703][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.522305][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 442.530409][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 444.633613][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 444.965406][ T4460] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.097416][ T6976] chnl_net:caif_netlink_parms(): no params data found [ 445.318617][ T4460] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.584775][ T4460] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.866160][ T4460] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.244082][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.274332][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.310624][ T6976] device bridge_slave_0 entered promiscuous mode [ 446.391159][ T6976] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.469273][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.562120][ T6976] device bridge_slave_1 entered promiscuous mode [ 446.638975][ T6976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.723964][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 446.735148][ T6976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.121670][ T6976] team0: Port device team_slave_0 added [ 448.179364][ T6976] team0: Port device team_slave_1 added [ 448.282775][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.299625][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.384143][ T7028] CUSE: info not properly terminated [ 448.863728][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 449.129328][ T6976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.265339][ T27] audit: type=1326 audit(1778513832.735:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.4.564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e2eb9cdd9 code=0x0 [ 449.305072][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.312095][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.769694][ T7037] input: syz0 as /devices/virtual/input/input13 [ 450.595786][ T6976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.874146][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 450.939585][ T6976] device hsr_slave_0 entered promiscuous mode [ 450.995105][ T6976] device hsr_slave_1 entered promiscuous mode [ 451.003680][ T6976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.019856][ T6976] Cannot create hsr debugfs directory [ 453.635293][ T6976] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 453.696381][ T4460] device hsr_slave_0 left promiscuous mode [ 453.730734][ T4460] device hsr_slave_1 left promiscuous mode [ 453.802174][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.897611][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.974960][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.041820][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.090618][ T4460] device bridge_slave_1 left promiscuous mode [ 454.126619][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.175882][ T4460] device bridge_slave_0 left promiscuous mode [ 454.182276][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.474258][ T4460] device veth1_macvtap left promiscuous mode [ 454.480573][ T4460] device veth0_macvtap left promiscuous mode [ 454.502428][ T4460] device veth1_vlan left promiscuous mode [ 454.526239][ T4460] device veth0_vlan left promiscuous mode [ 455.763331][ T7092] CUSE: info not properly terminated [ 457.965462][ T27] audit: type=1326 audit(1778513841.435:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.4.576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e2eb9cdd9 code=0x0 [ 459.585028][ T4460] team0 (unregistering): Port device team_slave_1 removed [ 459.595516][ T7113] input: syz0 as /devices/virtual/input/input14 [ 459.816378][ T4460] team0 (unregistering): Port device team_slave_0 removed [ 460.549723][ T4460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.674097][ T7121] netlink: 224 bytes leftover after parsing attributes in process `syz.4.579'. [ 462.781414][ T4460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.946021][ T7132] CUSE: info not properly terminated [ 464.388440][ T4460] bond0 (unregistering): Released all slaves [ 465.045265][ T6976] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 465.179038][ T6976] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 466.282843][ T6976] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 467.374412][ T6976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.424651][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.591'. [ 467.815181][ T6976] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.899797][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.928382][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.987423][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 468.065532][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.114049][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.121294][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.206325][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.268649][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.322573][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.329830][ T4422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.473570][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.481795][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.586638][ T7154] input: syz0 as /devices/virtual/input/input15 [ 468.627421][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 468.628456][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 468.654302][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.655247][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.743316][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.744598][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.746087][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 469.008457][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.009400][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 469.010027][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.366508][ T27] audit: type=1326 audit(1778513852.835:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.4.588" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e2eb9cdd9 code=0x0 [ 469.674104][ T4319] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 469.866932][ T4319] usb 7-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 469.888040][ T4319] usb 7-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 469.963407][ T4319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.570324][ T7215] CUSE: info not properly terminated [ 470.652217][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.678012][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.726846][ T6976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.355707][ T5728] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 472.467655][ T4419] usb 7-1: USB disconnect, device number 2 [ 472.544676][ T5728] usb 4-1: Using ep0 maxpacket: 16 [ 472.553687][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 472.564300][ T5728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.604682][ T5728] usb 4-1: config 0 has no interfaces? [ 473.862720][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 473.912420][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.022158][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 474.054462][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.112850][ T6976] device veth0_vlan entered promiscuous mode [ 474.142088][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.180691][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.215779][ T5728] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 474.225530][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.234181][ T5728] usb 4-1: Product: syz [ 474.238418][ T5728] usb 4-1: Manufacturer: syz [ 474.243055][ T5728] usb 4-1: SerialNumber: syz [ 474.250788][ T5728] usb 4-1: config 0 descriptor?? [ 474.271474][ T6976] device veth1_vlan entered promiscuous mode [ 474.304237][ T14] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 474.333933][ T14] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 474.343510][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.366874][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 474.385458][ T14] usb 3-1: config 0 descriptor?? [ 474.390990][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 474.405768][ T14] pwc: Creative Labs Webcam Pro Ex detected. [ 474.411854][ T14] pwc: Warning: more than 1 configuration available. [ 474.419727][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 474.449287][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 474.472208][ T7245] input: syz0 as /devices/virtual/input/input16 [ 474.490487][ T6976] device veth0_macvtap entered promiscuous mode [ 474.596185][ T14] pwc: Failed to set LED on/off time (-71) [ 474.607681][ T14] pwc: send_video_command error -71 [ 474.607701][ T14] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 474.607789][ T14] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 474.619871][ T14] usb 3-1: USB disconnect, device number 13 [ 474.640765][ T6976] device veth1_macvtap entered promiscuous mode [ 474.864699][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 474.869707][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 474.907805][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.907830][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.907842][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.907857][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.909734][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.910657][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.949112][ T6976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.957444][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 474.969657][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 475.175879][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.176090][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.176181][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.176310][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.176625][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.176756][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.215337][ T6976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.470900][ T27] audit: type=1326 audit(1778513858.935:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.2.603" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f510fd9cdd9 code=0x0 [ 475.505506][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 475.534548][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 475.579961][ T6976] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.613670][ T6976] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.654968][ T4419] usb 4-1: USB disconnect, device number 19 [ 475.665032][ T6976] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.687259][ T6976] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.896607][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.905258][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.929822][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 475.999505][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.023667][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.160021][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 479.981253][ T7290] CUSE: info not properly terminated [ 482.113526][ T4419] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 482.493533][ T4419] usb 3-1: Using ep0 maxpacket: 8 [ 482.502627][ T4419] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 482.520631][ T4419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 482.543552][ T4419] usb 3-1: Product: syz [ 482.547875][ T4419] usb 3-1: Manufacturer: syz [ 482.552514][ T4419] usb 3-1: SerialNumber: syz [ 482.609616][ T4419] usb 3-1: config 0 descriptor?? [ 482.650010][ T4419] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 482.842514][ T4419] gspca_sn9c2028: read1 error -32 [ 482.850033][ T4419] gspca_sn9c2028: read1 error -32 [ 483.017778][ T7310] input: syz0 as /devices/virtual/input/input17 [ 483.085889][ T4419] usb 3-1: USB disconnect, device number 14 [ 484.173159][ T27] audit: type=1326 audit(1778513867.635:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.2.617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f510fd9cdd9 code=0x0 [ 486.598614][ T7366] CUSE: info not properly terminated [ 491.931120][ T7425] CUSE: info not properly terminated [ 496.040249][ T27] audit: type=1326 audit(1778513879.505:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.6.640" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2e799cdd9 code=0x0 [ 497.793170][ T7470] CUSE: info not properly terminated [ 501.438324][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.446743][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.340471][ T27] audit: type=1326 audit(1778513894.805:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.7.660" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8bf99cdd9 code=0x0 [ 513.983520][ T4319] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 514.143534][ T4319] usb 3-1: device descriptor read/64, error -71 [ 514.413678][ T4319] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 514.573639][ T4319] usb 3-1: device descriptor read/64, error -71 [ 514.693671][ T4319] usb usb3-port1: attempt power cycle [ 516.023697][ T4319] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 516.374267][ T4319] usb 3-1: device not accepting address 17, error -71 [ 518.088554][ T7619] Unsupported ieee802154 address type: 0 [ 519.708308][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 522.742395][ T7654] UBIFS error (pid: 7654): cannot open "c:::", error -22 [ 522.846767][ T7655] CUSE: info not properly terminated [ 525.114295][ T5728] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 526.533512][ T5728] usb 8-1: device descriptor read/64, error -71 [ 526.588743][ T7668] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 527.615805][ T5728] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 527.841051][ T5728] usb 8-1: device descriptor read/64, error -71 [ 527.964247][ T5728] usb usb8-port1: attempt power cycle [ 530.330746][ T27] audit: type=1326 audit(1778513913.795:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.6.685" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2e799cdd9 code=0x0 [ 532.320589][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 535.941347][ T7736] Unsupported ieee802154 address type: 0 [ 536.014162][ T7740] CUSE: info not properly terminated [ 537.514473][ T7752] tmpfs: Unknown parameter 'grpquota' [ 538.979842][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 538.989850][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 539.002352][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 539.014272][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 539.022290][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 539.029643][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 539.037522][ T14] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 539.243642][ T14] usb 7-1: device descriptor read/64, error -71 [ 539.683847][ T14] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 539.863631][ T14] usb 7-1: device descriptor read/64, error -71 [ 540.214935][ T14] usb usb7-port1: attempt power cycle [ 540.332258][ T27] audit: type=1326 audit(1778513923.795:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.2.703" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f510fd9cdd9 code=0x0 [ 540.534073][ T3599] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 540.751568][ T3599] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 540.918588][ T3599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.991620][ T3599] usb 5-1: config 0 descriptor?? [ 541.109041][ T7764] chnl_net:caif_netlink_parms(): no params data found [ 541.183747][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 541.515189][ T3599] ath6kl: Failed to submit usb control message: -71 [ 541.973590][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.704'. [ 542.132887][ T3599] ath6kl: unable to send the bmi data to the device: -71 [ 542.345786][ T3599] ath6kl: Unable to send get target info: -71 [ 542.425045][ T3599] ath6kl: Failed to init ath6kl core: -71 [ 542.621732][ T14] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 542.664906][ T14] usb 7-1: device descriptor read/8, error -71 [ 542.692027][ T3599] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 542.732004][ T3599] usb 5-1: USB disconnect, device number 11 [ 542.795592][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.802944][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.811847][ T7764] device bridge_slave_0 entered promiscuous mode [ 542.821167][ T7764] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.828889][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.838096][ T7764] device bridge_slave_1 entered promiscuous mode [ 542.976390][ T7764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.989295][ T7764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.022576][ T7764] team0: Port device team_slave_0 added [ 543.032383][ T7764] team0: Port device team_slave_1 added [ 543.058309][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.065449][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.115411][ T7764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.353794][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 545.332439][ T7817] CUSE: info not properly terminated [ 545.342750][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.363605][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.626807][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 546.014674][ T7764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.290387][ T27] audit: type=1326 audit(1778513929.755:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.4.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 546.314383][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.321910][ T7764] device hsr_slave_0 entered promiscuous mode [ 546.333573][ T27] audit: type=1326 audit(1778513929.795:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.4.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 546.380309][ T7764] device hsr_slave_1 entered promiscuous mode [ 546.381819][ T27] audit: type=1326 audit(1778513929.845:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.4.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 546.499665][ T27] audit: type=1326 audit(1778513929.875:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.4.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 546.693728][ T27] audit: type=1326 audit(1778513929.875:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.4.712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2eb9cdd9 code=0x7ffc0000 [ 546.864185][ T27] audit: type=1326 audit(1778513930.295:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.4.714" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e2eb9cdd9 code=0x0 [ 546.866769][ T7764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.896149][ T7764] Cannot create hsr debugfs directory [ 548.320969][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 548.545885][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.743759][ T14] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 549.173700][ T14] usb 7-1: device descriptor read/64, error -71 [ 549.587168][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.730241][ T14] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 550.820425][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.987821][ T14] usb 7-1: device descriptor read/64, error -71 [ 551.224343][ T14] usb usb7-port1: attempt power cycle [ 551.556185][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.967797][ T7764] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 552.017360][ T7871] CUSE: info not properly terminated [ 552.083131][ T7764] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 552.139101][ T7764] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 552.213795][ T7764] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 552.233989][ T27] audit: type=1326 audit(1778513935.705:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.6.724" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2e799cdd9 code=0x0 [ 553.964233][ T7764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.123352][ T7764] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.157800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 554.194877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 554.232421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 554.262204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 554.302888][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.310103][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.362391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 554.536141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 554.552937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.614081][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.621264][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.672896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 554.773438][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 554.824223][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 554.872463][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 554.910361][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 554.942354][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.962575][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.972363][ T5728] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 555.192541][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 555.214382][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 555.779847][ T7764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.841211][ T7764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 555.916840][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 555.958220][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 555.995584][ T5728] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 556.013489][ T5728] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.038447][ T5728] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.058958][ T5728] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 556.109428][ T5728] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 556.134428][ T5728] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 556.165099][ T5728] usb 8-1: Manufacturer: syz [ 557.130165][ T5728] usb 8-1: config 0 descriptor?? [ 557.701196][ T5728] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 557.717013][ T7927] CUSE: info not properly terminated [ 557.733725][ T5728] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 557.876131][ T5728] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 557.944207][ T27] audit: type=1326 audit(1778513941.415:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.2.734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f510fd9cdd9 code=0x0 [ 558.672174][ T3599] usb 8-1: USB disconnect, device number 5 [ 559.172917][ T7942] fido_id[7942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 559.605017][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 559.612696][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 559.676037][ T7764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.383614][ T5496] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 562.543702][ T5496] usb 7-1: device descriptor read/64, error -71 [ 562.687140][ T75] device hsr_slave_0 left promiscuous mode [ 562.823724][ T5496] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 562.878080][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.885327][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.994309][ T5496] usb 7-1: device descriptor read/64, error -71 [ 563.116621][ T5496] usb usb7-port1: attempt power cycle [ 564.472257][ T75] device hsr_slave_1 left promiscuous mode [ 564.533483][ T5496] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 564.576491][ T5496] usb 7-1: device descriptor read/8, error -71 [ 564.843731][ T5496] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 564.946795][ T5496] usb 7-1: device descriptor read/8, error -71 [ 565.034867][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 565.114952][ T5496] usb usb7-port1: unable to enumerate USB device [ 565.355603][ T27] audit: type=1326 audit(1778513948.825:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.2.744" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f510fd9cdd9 code=0x0 [ 565.948093][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.430066][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.499067][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.526362][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.583945][ T8001] capability: warning: `syz.2.747' uses deprecated v2 capabilities in a way that may be insecure [ 566.611521][ T75] device bridge_slave_1 left promiscuous mode [ 566.624769][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.654881][ T75] device bridge_slave_0 left promiscuous mode [ 566.661179][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.804016][ T75] device veth1_macvtap left promiscuous mode [ 566.810144][ T75] device veth0_macvtap left promiscuous mode [ 566.816737][ T75] device veth1_vlan left promiscuous mode [ 566.822644][ T75] device veth0_vlan left promiscuous mode [ 568.148734][ T4378] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 568.416034][ T8014] CUSE: info not properly terminated [ 570.006716][ T4378] usb 3-1: Using ep0 maxpacket: 8 [ 570.023766][ T4378] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 570.047554][ T4378] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 570.083499][ T4378] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 570.093339][ T4378] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 570.133014][ T4378] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.176830][ T4378] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 570.203667][ T4378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.235532][ T4378] usb 3-1: can't set config #16, error -71 [ 570.258945][ T4378] usb 3-1: USB disconnect, device number 19 [ 570.656706][ T4378] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 570.827492][ T4378] usb 3-1: device descriptor read/64, error -71 [ 571.040128][ T75] team0 (unregistering): Port device team_slave_1 removed [ 571.114062][ T4378] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 571.123904][ T75] team0 (unregistering): Port device team_slave_0 removed [ 571.161268][ T27] audit: type=1326 audit(1778513954.625:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.756" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e2eb9cdd9 code=0x0 [ 571.211059][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.791582][ T4378] usb 3-1: device descriptor read/64, error -71 [ 571.995609][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.093812][ T4378] usb usb3-port1: attempt power cycle [ 572.465060][ T75] bond0 (unregistering): Released all slaves [ 572.533813][ T4378] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 572.577199][ T4378] usb 3-1: device descriptor read/8, error -71 [ 573.030001][ T4378] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 573.064186][ T4378] usb 3-1: device descriptor read/8, error -71 [ 573.183919][ T4378] usb usb3-port1: unable to enumerate USB device [ 573.432774][ T8063] CUSE: info not properly terminated [ 573.840761][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 573.860195][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 575.450765][ T7764] device veth0_vlan entered promiscuous mode [ 575.466288][ T7764] device veth1_vlan entered promiscuous mode [ 575.514722][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 575.533800][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 575.590127][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 575.664017][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 575.717050][ T7764] device veth0_macvtap entered promiscuous mode [ 575.765364][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 575.784420][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 575.834231][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 575.871787][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 575.884367][ T8059] netlink: 96 bytes leftover after parsing attributes in process `syz.7.761'. [ 575.935151][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 575.972005][ T7764] device veth1_macvtap entered promiscuous mode [ 576.064400][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.107049][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.199453][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.263530][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.301367][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.352820][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.394688][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.402504][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 576.421400][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 576.454145][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 576.498551][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.539675][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.565345][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.587032][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.625062][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.653460][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.677317][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.694012][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 576.713245][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 576.747308][ T7764] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.775926][ T7764] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.795192][ T7764] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.829895][ T7764] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.876893][ T5562] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 577.064977][ T5562] usb 3-1: no configurations [ 577.069666][ T5562] usb 3-1: can't read configurations, error -22 [ 577.103870][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.119514][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.142922][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 577.209842][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.228344][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.243682][ T5562] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 577.274051][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 577.429225][ T27] audit: type=1326 audit(1778513960.895:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.6.766" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2e799cdd9 code=0x0 [ 577.456403][ T5562] usb 3-1: no configurations [ 577.461167][ T5562] usb 3-1: can't read configurations, error -22 [ 577.488728][ T5562] usb usb3-port1: attempt power cycle [ 578.865775][ T8114] hub 8-0:1.0: USB hub found [ 578.873257][ T8114] hub 8-0:1.0: 1 port detected [ 586.066183][ T8153] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 586.074015][ T8153] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 589.221563][ T8181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.787'. [ 589.731713][ T8190] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.789'. [ 591.883257][ T8267] UBIFS error (pid: 8267): cannot open "(null)", error -22 [ 592.363492][ T8162] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 592.740616][ T8162] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 592.792151][ T8162] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.974709][ T8162] usb 8-1: config 0 descriptor?? [ 593.404075][ T8287] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 593.411709][ T8287] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 593.574615][ T8162] ath6kl: Failed to submit usb control message: -71 [ 593.599189][ T8162] ath6kl: unable to send the bmi data to the device: -71 [ 593.636127][ T8162] ath6kl: Unable to send get target info: -71 [ 593.699038][ T8162] ath6kl: Failed to init ath6kl core: -71 [ 593.707721][ T8283] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.797'. [ 593.841145][ T8162] ath6kl_usb: probe of 8-1:0.0 failed with error -71 [ 593.900382][ T8162] usb 8-1: USB disconnect, device number 6 [ 595.266163][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.8.801'. [ 595.684986][ T8310] random: crng reseeded on system resumption [ 598.679873][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.8.801'. [ 601.053449][ T5562] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 602.743634][ T5562] usb 7-1: Using ep0 maxpacket: 32 [ 602.753086][ T5562] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 602.782984][ T5562] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.823902][ T5562] usb 7-1: Product: syz [ 602.828152][ T5562] usb 7-1: Manufacturer: syz [ 602.832799][ T5562] usb 7-1: SerialNumber: syz [ 602.874676][ T5562] usb 7-1: config 0 descriptor?? [ 602.897774][ T5562] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 602.920934][ T5562] dvb-usb: bulk message failed: -22 (4/0) [ 602.937657][ T5562] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 602.977001][ T5562] dvb-usb: bulk message failed: -22 (5/0) [ 602.996631][ T5562] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 603.096521][ T5562] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 603.131754][ T5494] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 603.204874][ T5562] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 603.223714][ T5562] usb 7-1: media controller created [ 603.482459][ T5562] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.886783][ T5562] usb 7-1: selecting invalid altsetting 3 [ 604.892630][ T5562] ttusb2: set interface to alts=3 failed [ 604.902393][ T5494] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 604.951931][ T5494] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 605.014632][ T5494] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 605.053447][ T5494] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.082121][ T5494] usb 9-1: Product: syz [ 605.102276][ T5494] usb 9-1: Manufacturer: syz [ 605.122567][ T5494] usb 9-1: SerialNumber: syz [ 605.159841][ T5494] usb 9-1: config 0 descriptor?? [ 605.178265][ T5494] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 605.190553][ T5562] DVB: Unable to find symbol tda10086_attach() [ 605.202655][ T5562] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 605.253607][ T5562] dvb-usb: bulk message failed: -22 (4/0) [ 605.268844][ T5562] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 605.306849][ T5562] dvb-usb: bulk message failed: -22 (5/0) [ 605.312760][ T5562] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 605.413498][ T5562] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 605.469708][ T5562] usb 7-1: USB disconnect, device number 14 [ 605.635839][ T5562] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 606.625656][ T5494] gspca_sunplus: reg_r err -71 [ 606.690644][ T5494] sunplus: probe of 9-1:0.0 failed with error -71 [ 607.026204][ T5494] usb 9-1: USB disconnect, device number 2 [ 611.579596][ T8402] autofs4:pid:8402:autofs_fill_super: called with bogus options [ 612.024478][ T8408] netlink: 224 bytes leftover after parsing attributes in process `syz.7.824'. [ 613.357552][ T8416] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 613.365278][ T8416] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 622.264751][ T8467] netlink: 224 bytes leftover after parsing attributes in process `syz.7.839'. [ 624.166645][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.8.844'. [ 624.344065][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.350432][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.323580][ T8500] UBIFS error (pid: 8500): cannot open "c:::", error -22 [ 627.139944][ T8522] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 627.155145][ T8522] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 628.137503][ T8528] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 628.144969][ T8528] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 628.158457][ T27] audit: type=1326 audit(1778514011.625:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.7.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bf99cdd9 code=0x7ffc0000 [ 628.243661][ T27] audit: type=1326 audit(1778514011.625:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.7.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bf99cdd9 code=0x7ffc0000 [ 628.271840][ T27] audit: type=1326 audit(1778514011.625:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.7.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7ff8bf99cdd9 code=0x7ffc0000 [ 628.358144][ T27] audit: type=1326 audit(1778514011.625:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.7.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bf99cdd9 code=0x7ffc0000 [ 628.402794][ T27] audit: type=1326 audit(1778514011.625:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.7.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bf99cdd9 code=0x7ffc0000 [ 629.473637][ T27] audit: type=1326 audit(1778514011.625:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.7.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7ff8bf99cdd9 code=0x7ffc0000 [ 629.548546][ T27] audit: type=1326 audit(1778514011.625:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.7.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bf99cdd9 code=0x7ffc0000 [ 629.653458][ T27] audit: type=1326 audit(1778514011.625:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.7.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bf99cdd9 code=0x7ffc0000 [ 630.979176][ T4935] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 631.215373][ T4935] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 631.248491][ T4935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.310404][ T4935] usb 8-1: config 0 descriptor?? [ 632.513578][ T8557] UBIFS error (pid: 8557): cannot open "c:::", error -22 [ 634.397416][ T8573] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 634.412024][ T8573] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 635.992486][ T8586] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 636.000603][ T8586] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 636.013040][ T27] audit: type=1326 audit(1778514019.475:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.2.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 637.144111][ T27] audit: type=1326 audit(1778514019.475:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.2.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 638.509605][ T27] audit: type=1326 audit(1778514019.475:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.2.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 638.564551][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.6.868'. [ 638.706442][ T27] audit: type=1326 audit(1778514019.475:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.2.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 639.177710][ T27] audit: type=1326 audit(1778514019.475:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.2.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 640.043567][ T8618] UBIFS error (pid: 8618): cannot open "c:::", error -22 [ 640.504455][ T27] audit: type=1326 audit(1778514019.475:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.2.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 640.596257][ T27] audit: type=1326 audit(1778514019.475:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.2.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 640.767170][ T27] audit: type=1326 audit(1778514019.475:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.2.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510fd9cdd9 code=0x7ffc0000 [ 646.372030][ T8659] syz.7.878 (8659) used obsolete PPPIOCDETACH ioctl [ 648.588067][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 648.600348][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 648.608654][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 648.621469][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 648.654748][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 648.664134][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 650.725194][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 653.235686][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 653.994652][ T4281] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 654.011434][ T4281] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 654.019566][ T4285] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 654.027645][ T4285] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 654.037390][ T4285] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 654.044963][ T4285] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 655.273870][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 656.073545][ T4289] Bluetooth: hci6: command 0x0409 tx timeout [ 657.354277][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 659.563441][ T4285] Bluetooth: hci6: command 0x041b tx timeout [ 662.045905][ T4285] Bluetooth: hci6: command 0x040f tx timeout [ 662.066454][ T4285] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 662.094204][ T4281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 662.133589][ T4281] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 662.144044][ T4281] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 662.151701][ T4281] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 662.167029][ T4281] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 662.233626][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 663.092499][ T4285] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 663.111677][ T4285] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 663.120767][ T4285] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 663.130361][ T4285] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 663.138897][ T4285] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 663.146818][ T4285] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 664.615925][ T4285] Bluetooth: hci6: command 0x0419 tx timeout [ 664.616311][ T4289] Bluetooth: hci7: command 0x0409 tx timeout [ 665.193643][ T4289] Bluetooth: hci8: command 0x0409 tx timeout [ 666.633824][ T4289] Bluetooth: hci7: command 0x041b tx timeout [ 667.273613][ T4289] Bluetooth: hci8: command 0x041b tx timeout [ 668.713895][ T4289] Bluetooth: hci7: command 0x040f tx timeout [ 669.353452][ T4289] Bluetooth: hci8: command 0x040f tx timeout [ 670.793926][ T4289] Bluetooth: hci7: command 0x0419 tx timeout [ 671.433548][ T4289] Bluetooth: hci8: command 0x0419 tx timeout [ 683.559358][ T4285] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 683.575095][ T4285] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 683.588878][ T4285] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 683.618077][ T4285] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 683.638967][ T4285] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 683.652134][ T4285] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 685.756944][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.763393][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.769996][ T4285] Bluetooth: hci9: command 0x0409 tx timeout [ 687.833505][ T4285] Bluetooth: hci9: command 0x041b tx timeout [ 689.913585][ T4285] Bluetooth: hci9: command 0x040f tx timeout [ 691.993575][ T4285] Bluetooth: hci9: command 0x0419 tx timeout [ 692.861050][ T3639] udevd[3639]: worker [8359] /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0 is taking a long time [ 713.039707][ T4289] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 713.055510][ T4289] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 713.075200][ T4289] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 713.126166][ T4289] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 713.154624][ T4289] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 713.167833][ T4289] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 714.337085][ T4285] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 714.349227][ T4285] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 714.358336][ T4285] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 714.369970][ T4285] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 714.379331][ T4285] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 714.387572][ T4285] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 715.353514][ T4285] Bluetooth: hci10: command 0x0409 tx timeout [ 716.474492][ T4285] Bluetooth: hci11: command 0x0409 tx timeout [ 717.433433][ T4285] Bluetooth: hci10: command 0x041b tx timeout [ 718.553511][ T4285] Bluetooth: hci11: command 0x041b tx timeout [ 719.513539][ T4285] Bluetooth: hci10: command 0x040f tx timeout [ 720.643483][ T4285] Bluetooth: hci11: command 0x040f tx timeout [ 721.067700][ T4289] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 721.083795][ T4289] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 721.094111][ T4289] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 721.103035][ T4289] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 721.114608][ T4289] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 721.122244][ T4289] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 721.594612][ T4289] Bluetooth: hci10: command 0x0419 tx timeout [ 722.721129][ T4289] Bluetooth: hci11: command 0x0419 tx timeout [ 723.037126][ T4285] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 723.048658][ T4285] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 723.057010][ T4285] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 723.066142][ T4285] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 723.073971][ T4285] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 723.081578][ T4285] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 723.193618][ T4285] Bluetooth: hci12: command 0x0409 tx timeout [ 725.113573][ T4285] Bluetooth: hci13: command 0x0409 tx timeout [ 725.273602][ T4285] Bluetooth: hci12: command 0x041b tx timeout [ 727.193625][ T4285] Bluetooth: hci13: command 0x041b tx timeout [ 727.353538][ T4285] Bluetooth: hci12: command 0x040f tx timeout [ 729.273800][ T4285] Bluetooth: hci13: command 0x040f tx timeout [ 729.443564][ T4285] Bluetooth: hci12: command 0x0419 tx timeout [ 731.353589][ T4285] Bluetooth: hci13: command 0x0419 tx timeout [ 744.530876][ T4289] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 744.555384][ T4289] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 744.571112][ T4289] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 744.597076][ T4289] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 744.622057][ T4289] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 744.654185][ T4289] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 746.713487][ T4289] Bluetooth: hci14: command 0x0409 tx timeout [ 747.208016][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.214424][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.793602][ T4289] Bluetooth: hci14: command 0x041b tx timeout [ 750.873411][ T4289] Bluetooth: hci14: command 0x040f tx timeout [ 752.953626][ T4289] Bluetooth: hci14: command 0x0419 tx timeout [ 773.256700][ T4289] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 773.281661][ T4289] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 773.302786][ T4289] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 773.343195][ T4289] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 773.378455][ T4289] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 773.393000][ T4289] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 774.893414][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 774.935708][ T4285] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 774.946515][ T4285] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 774.955779][ T4285] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 774.964184][ T4285] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 774.972026][ T4285] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 774.980145][ T4285] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 775.523568][ T4289] Bluetooth: hci15: command 0x0409 tx timeout [ 777.043657][ T4289] Bluetooth: hci16: command 0x0409 tx timeout [ 777.593525][ T4289] Bluetooth: hci15: command 0x041b tx timeout [ 779.113732][ T4281] Bluetooth: hci16: command 0x041b tx timeout [ 779.683701][ T4281] Bluetooth: hci15: command 0x040f tx timeout [ 780.003556][ T4281] Bluetooth: hci6: command 0x0406 tx timeout [ 781.193622][ T4281] Bluetooth: hci16: command 0x040f tx timeout [ 781.739096][ T4289] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 781.751554][ T4289] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 781.759498][ T4289] Bluetooth: hci15: command 0x0419 tx timeout [ 781.766091][ T4289] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 781.779672][ T8734] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 781.787465][ T8734] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 781.794898][ T8734] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 783.283624][ T4281] Bluetooth: hci16: command 0x0419 tx timeout [ 783.850510][ T4281] Bluetooth: hci17: command 0x0409 tx timeout [ 784.025487][ T8734] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 784.037959][ T8734] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 784.054086][ T8734] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 784.063099][ T8734] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 784.071527][ T8734] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 784.079162][ T8734] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 785.113691][ T8734] Bluetooth: hci7: command 0x0406 tx timeout [ 785.913375][ T8734] Bluetooth: hci17: command 0x041b tx timeout [ 786.153452][ T8734] Bluetooth: hci18: command 0x0409 tx timeout [ 787.993531][ T8734] Bluetooth: hci17: command 0x040f tx timeout [ 788.233535][ T4281] Bluetooth: hci18: command 0x041b tx timeout [ 790.073398][ T4281] Bluetooth: hci17: command 0x0419 tx timeout [ 790.233508][ T4281] Bluetooth: hci8: command 0x0406 tx timeout [ 790.313530][ T4281] Bluetooth: hci18: command 0x040f tx timeout [ 792.403508][ T4281] Bluetooth: hci18: command 0x0419 tx timeout [ 796.473614][ T28] INFO: task dhcpcd:3934 blocked for more than 143 seconds. [ 796.481010][ T28] Not tainted syzkaller #0 [ 796.501605][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 796.519991][ T28] task:dhcpcd state:D stack:20912 pid:3934 ppid:3933 flags:0x00004002 [ 796.562845][ T28] Call Trace: [ 796.577029][ T28] [ 796.580062][ T28] __schedule+0x11d1/0x40e0 [ 796.633472][ T28] ? __sched_text_start+0x8/0x8 [ 796.638433][ T28] ? __mutex_trylock_common+0x86/0x260 [ 796.683364][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 796.689636][ T28] schedule+0xb9/0x180 [ 796.724014][ T28] schedule_preempt_disabled+0xf/0x20 [ 796.729983][ T28] __mutex_lock+0x562/0xaf0 [ 796.773422][ T28] ? __mutex_lock+0x3b2/0xaf0 [ 796.778214][ T28] ? devinet_ioctl+0x288/0x1af0 [ 796.783268][ T28] ? mutex_lock_nested+0x10/0x10 [ 796.808571][ T28] ? bpf_lsm_capable+0x5/0x10 [ 796.835213][ T28] ? security_capable+0x85/0xb0 [ 796.840183][ T28] devinet_ioctl+0x288/0x1af0 [ 796.871135][ T28] ? get_user_ifreq+0x127/0x170 [ 796.904878][ T28] inet_ioctl+0x2fa/0x460 [ 796.909321][ T28] ? inet_shutdown+0x370/0x370 [ 796.933506][ T28] ? slab_free_freelist_hook+0x131/0x1a0 [ 796.939248][ T28] ? tomoyo_path_number_perm+0x4fb/0x650 [ 796.973462][ T28] ? __kmem_cache_free+0xb6/0x1f0 [ 796.978594][ T28] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 797.013592][ T28] sock_do_ioctl+0xfb/0x320 [ 797.018192][ T28] ? sock_show_fdinfo+0xb0/0xb0 [ 797.023117][ T28] sock_ioctl+0x4d2/0x710 [ 797.063362][ T28] ? sock_poll+0x410/0x410 [ 797.068038][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 797.093497][ T28] ? fd_install+0x5c/0x4e0 [ 797.098022][ T28] ? lock_chain_count+0x20/0x20 [ 797.102931][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 797.142406][ T28] ? security_file_ioctl+0x7c/0xa0 [ 797.154136][ T28] ? sock_poll+0x410/0x410 [ 797.158722][ T28] __se_sys_ioctl+0xfa/0x170 [ 797.176644][ T28] do_syscall_64+0x4c/0xa0 [ 797.181157][ T28] ? clear_bhb_loop+0x60/0xb0 [ 797.198352][ T28] ? clear_bhb_loop+0x60/0xb0 [ 797.203132][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.220321][ T28] RIP: 0033:0x7f73fca57378 [ 797.231453][ T28] RSP: 002b:00007ffc2204d758 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.253441][ T28] RAX: ffffffffffffffda RBX: 000000000000002f RCX: 00007f73fca57378 [ 797.261583][ T28] RDX: 00007ffc2205d950 RSI: 0000000000008914 RDI: 000000000000002f [ 797.294198][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 797.302262][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2206daf0 [ 797.322715][ T28] R13: 00007f73fc9576c8 R14: 0000000000000028 R15: 0000000000008914 [ 797.337411][ T28] [ 797.340548][ T28] INFO: task kworker/u4:6:4325 blocked for more than 144 seconds. [ 797.359975][ T28] Not tainted syzkaller #0 [ 797.376771][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 797.398137][ T28] task:kworker/u4:6 state:D stack:23152 pid:4325 ppid:2 flags:0x00004000 [ 797.417299][ T28] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 797.431482][ T28] Call Trace: [ 797.442901][ T28] [ 797.457326][ T28] __schedule+0x11d1/0x40e0 [ 797.461946][ T28] ? __sched_text_start+0x8/0x8 [ 797.476143][ T28] ? kthread_data+0x4b/0xc0 [ 797.480757][ T28] ? wq_worker_sleeping+0x60/0x280 [ 797.503357][ T28] schedule+0xb9/0x180 [ 797.507532][ T28] schedule_timeout+0xbd/0x2d0 [ 797.512341][ T28] ? console_conditional_schedule+0x40/0x40 [ 797.534439][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 797.540527][ T28] ? lock_chain_count+0x20/0x20 [ 797.561310][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 797.577564][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 797.583208][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 797.604071][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 797.609446][ T28] ? wait_for_completion+0x276/0x5a0 [ 797.630905][ T28] wait_for_completion+0x2c7/0x5a0 [ 797.644377][ T28] ? io_schedule+0xd0/0xd0 [ 797.650333][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 797.670020][ T28] ? debug_object_active_state+0x6a/0x380 [ 797.691777][ T28] __synchronize_srcu+0x2b9/0x350 [ 797.704474][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 797.710284][ T28] ? rcu_read_lock_any_held+0x130/0x130 [ 797.731798][ T28] ? __rwlock_init+0x140/0x140 [ 797.742365][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 797.758159][ T28] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 797.770537][ T28] ? synchronize_srcu+0x192/0x1b0 [ 797.783214][ T28] ? process_one_work+0x7b0/0x1160 [ 797.799074][ T28] fsnotify_connector_destroy_workfn+0x40/0xa0 [ 797.811622][ T28] ? process_one_work+0x7b0/0x1160 [ 797.827430][ T28] process_one_work+0x8a2/0x1160 [ 797.832471][ T28] ? worker_detach_from_pool+0x240/0x240 [ 797.872208][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 797.882394][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 797.893250][ T28] ? kthread_data+0x4b/0xc0 [ 797.897917][ T28] worker_thread+0xaa2/0x1270 [ 797.902684][ T28] kthread+0x29d/0x330 [ 797.917775][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 797.922886][ T28] ? kthread_blkcg+0xd0/0xd0 [ 797.935878][ T28] ret_from_fork+0x1f/0x30 [ 797.940501][ T28] [ 797.952286][ T28] INFO: task kworker/u4:19:4895 blocked for more than 144 seconds. [ 797.980441][ T28] Not tainted syzkaller #0 [ 797.990710][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 798.009604][ T28] task:kworker/u4:19 state:D stack:23152 pid:4895 ppid:2 flags:0x00004000 [ 798.023945][ T28] Workqueue: events_unbound bpf_map_free_deferred [ 798.030450][ T28] Call Trace: [ 798.047411][ T28] [ 798.050417][ T28] __schedule+0x11d1/0x40e0 [ 798.067452][ T28] ? __sched_text_start+0x8/0x8 [ 798.072392][ T28] ? wq_worker_last_func+0x40/0x40 [ 798.092168][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 798.108655][ T28] ? kthread_data+0x4b/0xc0 [ 798.117820][ T28] ? wq_worker_sleeping+0x60/0x280 [ 798.123031][ T28] schedule+0xb9/0x180 [ 798.140334][ T28] synchronize_rcu_expedited+0x6e6/0x890 [ 798.152003][ T28] ? synchronize_rcu+0x3f0/0x3f0 [ 798.168469][ T28] ? mark_lock+0x94/0x320 [ 798.172899][ T28] ? __lock_acquire+0x12f4/0x7d10 [ 798.190985][ T28] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 798.207141][ T28] ? verify_lock_unused+0x140/0x140 [ 798.212453][ T28] ? wake_bit_function+0x200/0x200 [ 798.225939][ T28] synchronize_rcu+0x128/0x3f0 [ 798.230878][ T28] ? schedule_delayed_monitor_work+0x160/0x160 [ 798.249985][ T28] ? percpu_ref_put+0x1e/0x230 [ 798.259589][ T28] ? __lock_acquire+0x7d10/0x7d10 [ 798.276229][ T28] ? percpu_ref_put+0x1e/0x230 [ 798.281084][ T28] ? process_one_work+0x7b0/0x1160 [ 798.302488][ T28] sock_map_free+0x25/0x3c0 [ 798.311846][ T28] ? bpf_map_free_deferred+0xa3/0xf0 [ 798.329399][ T28] ? kfree+0x30/0x190 [ 798.338303][ T28] ? process_one_work+0x7b0/0x1160 [ 798.353995][ T28] process_one_work+0x8a2/0x1160 [ 798.359028][ T28] ? worker_detach_from_pool+0x240/0x240 [ 798.379138][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 798.390003][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 798.410527][ T28] ? kthread_data+0x4b/0xc0 [ 798.421411][ T28] worker_thread+0xaa2/0x1270 [ 798.435560][ T28] ? __kthread_parkme+0x162/0x1c0 [ 798.440703][ T28] kthread+0x29d/0x330 [ 798.458272][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 798.468511][ T28] ? kthread_blkcg+0xd0/0xd0 [ 798.473189][ T28] ret_from_fork+0x1f/0x30 [ 798.500333][ T28] [ 798.513990][ T28] INFO: task kworker/u4:29:8249 blocked for more than 145 seconds. [ 798.521950][ T28] Not tainted syzkaller #0 [ 798.543525][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 798.552268][ T28] task:kworker/u4:29 state:D stack:25392 pid:8249 ppid:2 flags:0x00004000 [ 798.579621][ T28] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 798.595942][ T28] Call Trace: [ 798.599298][ T28] [ 798.602276][ T28] __schedule+0x11d1/0x40e0 [ 798.616101][ T28] ? __sched_text_start+0x8/0x8 [ 798.621058][ T28] ? kthread_data+0x4b/0xc0 [ 798.628899][ T28] ? wq_worker_sleeping+0x60/0x280 [ 798.636248][ T28] schedule+0xb9/0x180 [ 798.640390][ T28] schedule_timeout+0xbd/0x2d0 [ 798.653257][ T28] ? console_conditional_schedule+0x40/0x40 [ 798.661478][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 798.695510][ T28] ? lock_chain_count+0x20/0x20 [ 798.700481][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 798.743327][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 798.749104][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 798.763363][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 798.768645][ T28] ? wait_for_completion+0x276/0x5a0 [ 798.808990][ T28] wait_for_completion+0x2c7/0x5a0 [ 798.814369][ T28] ? io_schedule+0xd0/0xd0 [ 798.818842][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 798.849392][ T28] ? debug_object_active_state+0x6a/0x380 [ 798.855259][ T28] __synchronize_srcu+0x2b9/0x350 [ 798.860341][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 798.893536][ T28] ? rcu_read_lock_any_held+0x130/0x130 [ 798.899201][ T28] ? __rwlock_init+0x140/0x140 [ 798.929125][ T28] ? synchronize_srcu+0x192/0x1b0 [ 798.934347][ T28] ? process_one_work+0x7b0/0x1160 [ 798.939685][ T28] fsnotify_mark_destroy_workfn+0x106/0x2f0 [ 798.963418][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 798.969668][ T28] ? fsnotify_connector_destroy_workfn+0xa0/0xa0 [ 798.993387][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 798.998689][ T28] ? process_one_work+0x7b0/0x1160 [ 799.023321][ T28] process_one_work+0x8a2/0x1160 [ 799.028395][ T28] ? worker_detach_from_pool+0x240/0x240 [ 799.051762][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 799.063383][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 799.069023][ T28] ? kthread_data+0x4b/0xc0 [ 799.083057][ T28] worker_thread+0xaa2/0x1270 [ 799.103363][ T28] kthread+0x29d/0x330 [ 799.110659][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 799.119140][ T28] ? kthread_blkcg+0xd0/0xd0 [ 799.135624][ T28] ret_from_fork+0x1f/0x30 [ 799.140142][ T28] [ 799.153336][ T28] INFO: task udevd:8359 blocked for more than 145 seconds. [ 799.160601][ T28] Not tainted syzkaller #0 [ 799.190526][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.223324][ T28] task:udevd state:D stack:25936 pid:8359 ppid:3639 flags:0x00004002 [ 799.232718][ T28] Call Trace: [ 799.258701][ T28] [ 799.261747][ T28] __schedule+0x11d1/0x40e0 [ 799.278710][ T28] ? __sched_text_start+0x8/0x8 [ 799.283695][ T28] ? __mutex_trylock_common+0x86/0x260 [ 799.333357][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 799.339630][ T28] schedule+0xb9/0x180 [ 799.378865][ T28] schedule_preempt_disabled+0xf/0x20 [ 799.384443][ T28] __mutex_lock+0x562/0xaf0 [ 799.403988][ T28] ? __mutex_lock+0x3b2/0xaf0 [ 799.408867][ T28] ? uevent_show+0x16c/0x320 [ 799.454460][ T28] ? mutex_lock_nested+0x10/0x10 [ 799.459525][ T28] uevent_show+0x16c/0x320 [ 799.493329][ T28] dev_attr_show+0x50/0xb0 [ 799.497946][ T28] sysfs_kf_seq_show+0x349/0x4b0 [ 799.502937][ T28] ? device_get_ownership+0xa0/0xa0 [ 799.523426][ T28] seq_read_iter+0x49b/0xd50 [ 799.528119][ T28] ? common_file_perm+0x171/0x1c0 [ 799.533198][ T28] vfs_read+0x4a7/0xa00 [ 799.573532][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 799.580194][ T28] ? kernel_read+0x1e0/0x1e0 [ 799.584913][ T28] ? __x64_sys_newfstat+0x19a/0x220 [ 799.590351][ T28] ? __fdget_pos+0x2b5/0x360 [ 799.623469][ T28] ksys_read+0x14c/0x250 [ 799.627823][ T28] ? vfs_write+0xa30/0xa30 [ 799.632296][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 799.663349][ T28] do_syscall_64+0x4c/0xa0 [ 799.667935][ T28] ? clear_bhb_loop+0x60/0xb0 [ 799.672661][ T28] ? clear_bhb_loop+0x60/0xb0 [ 799.723348][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 799.729342][ T28] RIP: 0033:0x7f54988a7407 [ 799.743409][ T28] RSP: 002b:00007fff1a3bc870 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 799.752109][ T28] RAX: ffffffffffffffda RBX: 00007f549906d880 RCX: 00007f54988a7407 [ 799.783487][ T28] RDX: 0000000000001000 RSI: 0000556c21484a00 RDI: 0000000000000008 [ 799.791569][ T28] RBP: 00007f54989efff0 R08: 0000000000000000 R09: 0000000000000000 [ 799.833612][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 799.841867][ T28] R13: 00007f54989efea0 R14: 0000000000000000 R15: 0000556c214827a0 [ 799.883595][ T28] [ 799.886742][ T28] INFO: task syz.8.859:8563 blocked for more than 146 seconds. [ 799.923322][ T28] Not tainted syzkaller #0 [ 799.928501][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.963393][ T28] task:syz.8.859 state:D stack:27568 pid:8563 ppid:7764 flags:0x00004004 [ 799.972698][ T28] Call Trace: [ 800.003787][ T28] [ 800.006817][ T28] __schedule+0x11d1/0x40e0 [ 800.011399][ T28] ? __sched_text_start+0x8/0x8 [ 800.049016][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 800.054193][ T28] ? prepare_to_wait_event+0x430/0x470 [ 800.083521][ T28] schedule+0xb9/0x180 [ 800.087703][ T28] synchronize_rcu_expedited+0x7ad/0x890 [ 800.093485][ T28] ? synchronize_rcu+0x3f0/0x3f0 [ 800.102611][ T28] ? wake_bit_function+0x200/0x200 [ 800.108374][ T28] ? lock_chain_count+0x20/0x20 [ 800.153479][ T28] ? namespace_unlock+0x1d7/0x430 [ 800.158609][ T28] ? __lock_acquire+0x7d10/0x7d10 [ 800.167012][ T28] ? __wake_up+0x12e/0x1a0 [ 800.171514][ T28] ? __wake_up_bit+0x210/0x210 [ 800.199354][ T28] ? shrink_dentry_list+0x688/0x6a0 [ 800.204786][ T28] ? up_write+0x1bb/0x420 [ 800.230818][ T28] namespace_unlock+0x23f/0x430 [ 800.235836][ T28] ? put_mnt_ns+0xd6/0x120 [ 800.273363][ T28] ? umount_tree+0xe20/0xe20 [ 800.278065][ T28] ? umount_mnt+0x2c0/0x2c0 [ 800.282711][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 800.308705][ T28] ? free_nsproxy+0x49/0x3c0 [ 800.322655][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 800.348509][ T28] ? free_nsproxy+0x49/0x3c0 [ 800.353204][ T28] put_mnt_ns+0xdb/0x120 [ 800.361261][ T28] free_nsproxy+0x49/0x3c0 [ 800.372075][ T28] do_exit+0x97d/0x2480 [ 800.378869][ T28] ? put_task_struct+0x80/0x80 [ 800.385763][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 800.391914][ T28] ? lock_chain_count+0x20/0x20 [ 800.397063][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 800.402148][ T28] do_group_exit+0x217/0x2d0 [ 800.407107][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 800.412374][ T28] get_signal+0x1272/0x1350 [ 800.417974][ T28] arch_do_signal_or_restart+0xc4/0x1350 [ 800.423915][ T28] ? vfs_read+0x800/0xa00 [ 800.428313][ T28] ? do_futex+0x310/0x320 [ 800.432696][ T28] ? kernel_read+0x1e0/0x1e0 [ 800.442070][ T28] ? get_sigframe_size+0x10/0x10 [ 800.450150][ T28] ? __ia32_sys_get_robust_list+0x100/0x100 [ 800.460798][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 800.468292][ T28] exit_to_user_mode_loop+0x70/0x110 [ 800.478021][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 800.492765][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 800.502793][ T28] do_syscall_64+0x58/0xa0 [ 800.509382][ T28] ? clear_bhb_loop+0x60/0xb0 [ 800.520114][ T28] ? clear_bhb_loop+0x60/0xb0 [ 800.526723][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 800.532678][ T28] RIP: 0033:0x7fca3519cdd9 [ 800.542511][ T28] RSP: 002b:00007fca35f940e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 800.552964][ T28] RAX: fffffffffffffe00 RBX: 00007fca35415fa8 RCX: 00007fca3519cdd9 [ 800.567205][ T28] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fca35415fa8 [ 800.577203][ T28] RBP: 00007fca35415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 800.590499][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.604546][ T28] R13: 00007fca35416038 R14: 00007ffc4370d510 R15: 00007ffc4370d5f8 [ 800.612632][ T28] [ 800.624574][ T28] INFO: task syz.8.859:8566 blocked for more than 147 seconds. [ 800.632200][ T28] Not tainted syzkaller #0 [ 800.641372][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 800.653178][ T28] task:syz.8.859 state:D stack:27856 pid:8566 ppid:7764 flags:0x00004004 [ 800.669783][ T28] Call Trace: [ 800.673127][ T28] [ 800.677054][ T28] __schedule+0x11d1/0x40e0 [ 800.681657][ T28] ? __sched_text_start+0x8/0x8 [ 800.692105][ T28] schedule+0xb9/0x180 [ 800.697044][ T28] schedule_timeout+0xbd/0x2d0 [ 800.701879][ T28] ? console_conditional_schedule+0x40/0x40 [ 800.716670][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 800.730213][ T28] ? lock_chain_count+0x20/0x20 [ 800.738565][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 800.746700][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 800.752315][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 800.761601][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 800.769172][ T28] ? wait_for_completion+0x276/0x5a0 [ 800.779261][ T28] wait_for_completion+0x2c7/0x5a0 [ 800.787470][ T28] ? io_schedule+0xd0/0xd0 [ 800.791973][ T28] ? try_to_wake_up+0x67c/0x1080 [ 800.810422][ T28] kvm_vm_create_worker_thread+0x19c/0x270 [ 800.818287][ T28] ? kvm_mmu_post_init_vm+0x90/0x90 [ 800.834858][ T28] ? hardware_disable_nolock+0x160/0x160 [ 800.840588][ T28] ? kvm_create_vm_debugfs+0x898/0x980 [ 800.853215][ T28] ? kvm_mmu_post_init_vm+0x90/0x90 [ 800.859527][ T28] ? __raw_spin_lock_init+0x41/0x100 [ 800.870415][ T28] kvm_mmu_post_init_vm+0x3e/0x90 [ 800.876896][ T28] kvm_dev_ioctl+0x1444/0x1800 [ 800.881746][ T28] ? hardware_enable_nolock+0x220/0x220 [ 800.894407][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 800.899440][ T28] ? security_file_ioctl+0x7c/0xa0 [ 800.909950][ T28] ? hardware_enable_nolock+0x220/0x220 [ 800.917595][ T28] __se_sys_ioctl+0xfa/0x170 [ 800.922269][ T28] do_syscall_64+0x4c/0xa0 [ 800.933403][ T28] ? clear_bhb_loop+0x60/0xb0 [ 800.938171][ T28] ? clear_bhb_loop+0x60/0xb0 [ 800.942905][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 800.968859][ T28] RIP: 0033:0x7fca3519cdd9 [ 800.976514][ T28] RSP: 002b:00007fca35f73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.990540][ T28] RAX: ffffffffffffffda RBX: 00007fca35416090 RCX: 00007fca3519cdd9 [ 801.000197][ T28] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 801.014261][ T28] RBP: 00007fca35232d69 R08: 0000000000000000 R09: 0000000000000000 [ 801.022323][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.041826][ T28] R13: 00007fca35416128 R14: 00007fca35416090 R15: 00007ffc4370d5f8 [ 801.051941][ T28] [ 801.062080][ T28] INFO: task kvm-nx-lpage-re:8568 blocked for more than 147 seconds. [ 801.078368][ T28] Not tainted syzkaller #0 [ 801.085996][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 801.099684][ T28] task:kvm-nx-lpage-re state:D stack:28752 pid:8568 ppid:2 flags:0x00004000 [ 801.111617][ T28] Call Trace: [ 801.123400][ T28] [ 801.126485][ T28] __schedule+0x11d1/0x40e0 [ 801.136181][ T28] ? __sched_text_start+0x8/0x8 [ 801.141110][ T28] ? __mutex_trylock_common+0x86/0x260 [ 801.150696][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 801.159823][ T28] schedule+0xb9/0x180 [ 801.169766][ T28] schedule_preempt_disabled+0xf/0x20 [ 801.179102][ T28] __mutex_lock+0x562/0xaf0 [ 801.189618][ T28] ? __mutex_lock+0x3b2/0xaf0 [ 801.198168][ T28] ? synchronize_rcu_expedited+0x3c0/0x890 [ 801.207429][ T28] ? mutex_lock_nested+0x10/0x10 [ 801.212437][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 801.221129][ T28] ? __rwlock_init+0x140/0x140 [ 801.229980][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 801.239494][ T28] synchronize_rcu_expedited+0x3c0/0x890 [ 801.248620][ T28] ? synchronize_rcu+0x3f0/0x3f0 [ 801.255993][ T28] ? mark_lock+0x94/0x320 [ 801.260400][ T28] ? __lock_acquire+0x13cf/0x7d10 [ 801.269672][ T28] ? __lock_acquire+0x13cf/0x7d10 [ 801.280407][ T28] synchronize_rcu+0x128/0x3f0 [ 801.290268][ T28] ? schedule_delayed_monitor_work+0x160/0x160 [ 801.300759][ T28] ? mark_lock+0x94/0x320 [ 801.309102][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 801.318539][ T28] ? lock_chain_count+0x20/0x20 [ 801.327548][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 801.332730][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 801.342639][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 801.352123][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 801.359921][ T28] rcu_sync_enter+0x221/0x350 [ 801.368743][ T28] ? rcu_sync_enter_start+0x80/0x80 [ 801.376318][ T28] ? read_lock_is_recursive+0x10/0x10 [ 801.381771][ T28] ? rcu_is_watching+0x11/0xa0 [ 801.396743][ T28] percpu_down_write+0x69/0x2f0 [ 801.401691][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 801.413641][ T28] cgroup_attach_task_all+0x2c/0xe0 [ 801.419024][ T28] kvm_vm_worker_thread+0xce/0x540 [ 801.428545][ T28] ? kvm_mmu_post_init_vm+0x90/0x90 [ 801.439090][ T28] kthread+0x29d/0x330 [ 801.443236][ T28] ? kvm_vm_create_worker_thread+0x270/0x270 [ 801.454468][ T28] ? kthread_blkcg+0xd0/0xd0 [ 801.459136][ T28] ret_from_fork+0x1f/0x30 [ 801.467741][ T28] [ 801.470882][ T28] INFO: task syz.6.868:8606 blocked for more than 148 seconds. [ 801.481455][ T28] Not tainted syzkaller #0 [ 801.489830][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 801.508541][ T28] task:syz.6.868 state:D stack:26224 pid:8606 ppid:5758 flags:0x00004004 [ 801.522423][ T28] Call Trace: [ 801.530233][ T28] [ 801.533236][ T28] __schedule+0x11d1/0x40e0 [ 801.538625][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 801.552972][ T28] ? __sched_text_start+0x8/0x8 [ 801.558076][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 801.563162][ T28] ? prepare_to_wait_event+0x430/0x470 [ 801.575056][ T28] schedule+0xb9/0x180 [ 801.579210][ T28] synchronize_rcu_expedited+0x7ad/0x890 [ 801.588880][ T28] ? synchronize_rcu+0x3f0/0x3f0 [ 801.596298][ T28] ? wake_bit_function+0x200/0x200 [ 801.601524][ T28] synchronize_rcu+0x128/0x3f0 [ 801.613452][ T28] ? schedule_delayed_monitor_work+0x160/0x160 [ 801.619783][ T28] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 801.635866][ T28] ? __might_sleep+0xd0/0xd0 [ 801.640537][ T28] ? mutex_unlock+0x10/0x10 [ 801.649556][ T28] ? __local_bh_enable_ip+0x136/0x1c0 [ 801.659166][ T28] ? _local_bh_enable+0xa0/0xa0 [ 801.667031][ T28] packet_release+0x98f/0xc40 [ 801.671789][ T28] sock_close+0xd5/0x240 [ 801.680129][ T28] ? sock_mmap+0x90/0x90 [ 801.686716][ T28] __fput+0x22c/0x920 [ 801.690766][ T28] task_work_run+0x1d0/0x260 [ 801.699524][ T28] ? task_work_cancel+0x220/0x220 [ 801.707517][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 801.713057][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 801.724648][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 801.730275][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 801.742969][ T28] do_syscall_64+0x58/0xa0 [ 801.751935][ T28] ? clear_bhb_loop+0x60/0xb0 [ 801.760246][ T28] ? clear_bhb_loop+0x60/0xb0 [ 801.768599][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.778045][ T28] RIP: 0033:0x7fa2e799cdd9 [ 801.782523][ T28] RSP: 002b:00007fff7e547df8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 801.794227][ T28] RAX: 0000000000000000 RBX: 00007fa2e7c17da0 RCX: 00007fa2e799cdd9 [ 801.802271][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 801.815572][ T28] RBP: 00007fa2e7c17da0 R08: 0000000000000006 R09: 0000000000000000 [ 801.829750][ T28] R10: 00007fa2e7c17cb0 R11: 0000000000000246 R12: 000000000009c091 [ 801.843124][ T28] R13: 00007fa2e7c1609c R14: 000000000009beae R15: 00007fff7e547f00 [ 801.858188][ T28] [ 801.861326][ T28] INFO: task dhcpcd:8622 blocked for more than 148 seconds. [ 801.872899][ T28] Not tainted syzkaller #0 [ 801.881020][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 801.895983][ T28] task:dhcpcd state:D stack:24944 pid:8622 ppid:3934 flags:0x00004002 [ 801.908321][ T28] Call Trace: [ 801.911664][ T28] [ 801.919025][ T28] __schedule+0x11d1/0x40e0 [ 801.925928][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 801.931923][ T28] ? __sched_text_start+0x8/0x8 [ 801.943570][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 801.950476][ T28] ? prepare_to_wait_event+0x430/0x470 [ 801.961994][ T28] schedule+0xb9/0x180 [ 801.970301][ T28] synchronize_rcu_expedited+0x7ad/0x890 [ 801.981996][ T28] ? synchronize_rcu+0x3f0/0x3f0 [ 801.989635][ T28] ? wake_bit_function+0x200/0x200 [ 802.007228][ T28] ? verify_lock_unused+0x140/0x140 [ 802.012515][ T28] ? verify_lock_unused+0x140/0x140 [ 802.024790][ T28] ? aa_sk_perm+0x950/0x950 [ 802.029391][ T28] ? __unregister_prot_hook+0x3f2/0x570 [ 802.039102][ T28] ? __might_sleep+0xd0/0xd0 [ 802.049517][ T28] ? __lock_acquire+0x7d10/0x7d10 [ 802.060755][ T28] ? packet_do_bind+0x96/0xce0 [ 802.067928][ T28] __unregister_prot_hook+0x3f7/0x570 [ 802.082204][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 802.090629][ T28] ? packet_do_bind+0x96/0xce0 [ 802.099518][ T28] packet_do_bind+0x519/0xce0 [ 802.107231][ T28] ? packet_do_bind+0x96/0xce0 [ 802.112062][ T28] __sys_bind+0x2e9/0x3e0 [ 802.120534][ T28] ? __ia32_sys_socketpair+0xb0/0xb0 [ 802.128251][ T28] __x64_sys_bind+0x76/0x80 [ 802.132820][ T28] do_syscall_64+0x4c/0xa0 [ 802.141473][ T28] ? clear_bhb_loop+0x60/0xb0 [ 802.149209][ T28] ? clear_bhb_loop+0x60/0xb0 [ 802.163457][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 802.169433][ T28] RIP: 0033:0x7f73fca5c2d7 [ 802.182148][ T28] RSP: 002b:00007ffc2204d5c8 EFLAGS: 00000213 ORIG_RAX: 0000000000000031 [ 802.193414][ T28] RAX: ffffffffffffffda RBX: 00005641dd052400 RCX: 00007f73fca5c2d7 [ 802.201460][ T28] RDX: 0000000000000014 RSI: 00007ffc2204d5e0 RDI: 0000000000000003 [ 802.216178][ T28] RBP: 00005641b8e214b0 R08: 00007f73fcb2bac0 R09: 0000000000000000 [ 802.227243][ T28] R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000 [ 802.239599][ T28] R13: 00005641dd04e2a0 R14: 0000000000000000 R15: 00005641b8e36ac0 [ 802.250695][ T28] [ 802.259284][ T28] [ 802.259284][ T28] Showing all locks held in the system: [ 802.272146][ T28] 1 lock held by rcu_tasks_kthre/12: [ 802.282392][ T28] #0: ffffffff8cb2df70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 802.301232][ T28] 1 lock held by rcu_tasks_trace/13: [ 802.307417][ T28] #0: ffffffff8cb2e790 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 802.325285][ T28] 1 lock held by khungtaskd/28: [ 802.330212][ T28] #0: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 802.346985][ T28] 1 lock held by dhcpcd/3934: [ 802.351736][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x288/0x1af0 [ 802.365203][ T28] 2 locks held by getty/4030: [ 802.370026][ T28] #0: ffff88802f724098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 802.388448][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 802.402354][ T28] 2 locks held by kworker/u4:6/4325: [ 802.414367][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 802.431353][ T28] #1: ffffc90004b4fd00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 802.448202][ T28] 3 locks held by kworker/1:9/4419: [ 802.454611][ T28] #0: ffff888017471938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 802.475477][ T28] #1: ffffc90004c1fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 802.492779][ T28] #2: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x8e/0xda0 [ 802.506052][ T28] 3 locks held by kworker/u4:19/4895: [ 802.511494][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 802.530120][ T28] #1: ffffc900032f7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 802.548267][ T28] #2: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 802.562452][ T28] 6 locks held by kworker/0:10/4935: [ 802.576071][ T28] 2 locks held by kworker/u4:29/8249: [ 802.581514][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 802.599521][ T28] #1: ffffc900037b7d00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 802.612029][ T28] 3 locks held by kworker/1:2/8313: [ 802.624313][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 802.642110][ T28] #1: ffffc90003a07d00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 802.654431][ T28] #2: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 802.672436][ T28] 4 locks held by udevd/8359: [ 802.680247][ T28] #0: ffff888079703790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 802.694308][ T28] #1: ffff888054d64088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x410 [ 802.710128][ T28] #2: ffff888055a153a8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0xae/0x410 [ 802.721466][ T28] #3: ffff888026979118 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 802.736402][ T28] 4 locks held by kvm-nx-lpage-re/8568: [ 802.742001][ T28] #0: ffffffff8cb56068 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x22/0xe0 [ 802.756997][ T28] #1: ffffffff8c9c9eb0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0xd/0x30 [ 802.772244][ T28] #2: ffffffff8cb56250 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x2c/0xe0 [ 802.790379][ T28] #3: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 802.803972][ T28] 1 lock held by syz.6.868/8606: [ 802.809144][ T28] #0: ffff88807133fa10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 802.826382][ T28] 1 lock held by dhcpcd/8622: [ 802.831108][ T28] #0: ffff88807eb94130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 802.849344][ T28] 2 locks held by syz.2.876/8642: [ 802.855597][ T28] #0: ffff8880272e5010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 802.873335][ T28] #1: ffff8880635a0130 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_unhash+0x26/0x2e0 [ 802.883202][ T28] 1 lock held by syz.7.878/8651: [ 802.894259][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x86/0x1f0 [ 802.903155][ T28] 1 lock held by kvm-nx-lpage-re/8656: [ 802.914681][ T28] #0: ffffffff8cb56068 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x22/0xe0 [ 802.930594][ T28] 1 lock held by syz-executor/8668: [ 802.938894][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 802.951811][ T28] 1 lock held by syz-executor/8681: [ 802.961843][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 802.981192][ T28] 1 lock held by syz-executor/8694: [ 802.988072][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 803.003782][ T28] 1 lock held by syz-executor/8699: [ 803.009049][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 803.025653][ T28] 2 locks held by syz.4.891/8706: [ 803.030732][ T28] #0: ffffffff8dda8310 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 803.051012][ T28] #1: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5b/0x930 [ 803.068786][ T28] 1 lock held by syz-executor/8708: [ 803.077503][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 803.095148][ T28] 1 lock held by syz-executor/8711: [ 803.100410][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 803.119560][ T28] 1 lock held by syz-executor/8714: [ 803.127343][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 803.141673][ T28] 1 lock held by syz-executor/8717: [ 803.149944][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 803.165085][ T28] 1 lock held by syz-executor/8720: [ 803.170340][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 803.188895][ T28] 1 lock held by syz-executor/8723: [ 803.203395][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 803.212912][ T28] 1 lock held by syz-executor/8726: [ 803.225521][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 803.239594][ T28] 1 lock held by syz-executor/8729: [ 803.248409][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 803.262237][ T28] 1 lock held by syz-executor/8732: [ 803.271604][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 803.285907][ T28] 1 lock held by syz-executor/8736: [ 803.291156][ T28] #0: ffffffff8dd47f28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 803.306917][ T28] [ 803.309309][ T28] ============================================= [ 803.309309][ T28] [ 803.323040][ T28] NMI backtrace for cpu 1 [ 803.327446][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 803.334683][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.344872][ T28] Call Trace: [ 803.348211][ T28] [ 803.351187][ T28] dump_stack_lvl+0x188/0x24e [ 803.355919][ T28] ? irq_work_queue+0xb8/0x140 [ 803.360755][ T28] ? show_regs_print_info+0x12/0x12 [ 803.366009][ T28] ? load_image+0x400/0x400 [ 803.370560][ T28] ? vprintk_emit+0x59f/0x6a0 [ 803.375296][ T28] ? printk_sprint+0x460/0x460 [ 803.380132][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 803.385166][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 803.391385][ T28] ? _printk+0xda/0x130 [ 803.395588][ T28] ? load_image+0x400/0x400 [ 803.400142][ T28] ? load_image+0x400/0x400 [ 803.404708][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 803.410833][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 803.416945][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 803.422986][ T28] watchdog+0xeee/0xf30 [ 803.427193][ T28] ? watchdog+0x1ed/0xf30 [ 803.431575][ T28] kthread+0x29d/0x330 [ 803.435680][ T28] ? hungtask_pm_notify+0x40/0x40 [ 803.440749][ T28] ? kthread_blkcg+0xd0/0xd0 [ 803.445383][ T28] ret_from_fork+0x1f/0x30 [ 803.449867][ T28] [ 803.453874][ T28] Sending NMI from CPU 1 to CPUs 0: [ 803.459153][ C0] NMI backtrace for cpu 0 [ 803.459164][ C0] CPU: 0 PID: 4935 Comm: kworker/0:10 Not tainted syzkaller #0 [ 803.459183][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.459195][ C0] Workqueue: usb_hub_wq hub_event [ 803.459223][ C0] RIP: 0010:preempt_count_add+0x7c/0x190 [ 803.459248][ C0] Code: e6 00 00 00 83 3d 83 16 67 15 00 75 11 65 8b 05 82 84 a9 7e 0f b6 c0 3d f5 00 00 00 73 58 65 8b 05 71 84 a9 7e 25 ff ff ff 7f <39> f8 75 42 48 8b 5c 24 18 48 89 df e8 c3 85 0c 00 85 c0 74 09 31 [ 803.459263][ C0] RSP: 0018:ffffc90003486730 EFLAGS: 00000202 [ 803.459279][ C0] RAX: 0000000000000001 RBX: ffffc90003486828 RCX: ffffffff96c00103 [ 803.459293][ C0] RDX: dffffc0000000000 RSI: ffffffff86253aff RDI: 0000000000000001 [ 803.459305][ C0] RBP: ffffc90003486870 R08: ffffc900034868f0 R09: 000000000000001d [ 803.459319][ C0] R10: dffffc0000000000 R11: fffff52000690d11 R12: ffffffff86253aff [ 803.459332][ C0] R13: ffffc90003487960 R14: dffffc0000000000 R15: dffffc0000000000 [ 803.459347][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 803.459363][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.459376][ C0] CR2: 00007fd608b45000 CR3: 000000007f6dc000 CR4: 00000000003526f0 [ 803.459393][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000007 [ 803.459406][ C0] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 803.459419][ C0] Call Trace: [ 803.459424][ C0] [ 803.459431][ C0] unwind_next_frame+0xaf/0x20b0 [ 803.459457][ C0] ? hub_event+0x2dcf/0x5560 [ 803.459485][ C0] ? stack_trace_save+0xf0/0xf0 [ 803.459509][ C0] arch_stack_walk+0x10c/0x140 [ 803.459540][ C0] ? hub_event+0x2dcf/0x5560 [ 803.459567][ C0] stack_trace_save+0xa6/0xf0 [ 803.459589][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 803.459611][ C0] ? __driver_probe_device+0x18c/0x330 [ 803.459635][ C0] ? __device_attach+0x2a8/0x480 [ 803.459658][ C0] ? bus_probe_device+0xbc/0x1e0 [ 803.459677][ C0] ? device_add+0xa00/0xfb0 [ 803.459693][ C0] ? usb_set_configuration+0x1991/0x1fd0 [ 803.459713][ C0] ? usb_generic_driver_probe+0x89/0x150 [ 803.459734][ C0] ? memset+0x1e/0x40 [ 803.459752][ C0] kasan_set_track+0x4b/0x70 [ 803.459775][ C0] ? kasan_set_track+0x4b/0x70 [ 803.459799][ C0] ? __kasan_kmalloc+0x8e/0xa0 [ 803.459824][ C0] ? __kmalloc+0xb0/0x240 [ 803.459850][ C0] ? usb_alloc_urb+0x3f/0x140 [ 803.459866][ C0] ? ath6kl_usb_post_recv_transfers+0x24f/0x6f0 [ 803.459889][ C0] ? ath6kl_usb_power_on+0x66/0x280 [ 803.459910][ C0] ? ath6kl_core_init+0x1d6/0x1090 [ 803.459930][ C0] ? ath6kl_usb_probe+0x144a/0x1540 [ 803.459950][ C0] ? usb_probe_interface+0x5c5/0xb20 [ 803.459971][ C0] ? really_probe+0x2aa/0xc70 [ 803.459993][ C0] ? __driver_probe_device+0x18c/0x330 [ 803.460017][ C0] ? driver_probe_device+0x4f/0x420 [ 803.460040][ C0] ? __device_attach_driver+0x2c6/0x510 [ 803.460064][ C0] ? bus_for_each_drv+0x184/0x210 [ 803.460084][ C0] ? __device_attach+0x2a8/0x480 [ 803.460106][ C0] ? bus_probe_device+0xbc/0x1e0 [ 803.460126][ C0] ? device_add+0xa00/0xfb0 [ 803.460141][ C0] ? usb_set_configuration+0x1991/0x1fd0 [ 803.460160][ C0] ? usb_generic_driver_probe+0x89/0x150 [ 803.460179][ C0] ? usb_probe_device+0x139/0x270 [ 803.460198][ C0] ? really_probe+0x2aa/0xc70 [ 803.460221][ C0] ? __driver_probe_device+0x18c/0x330 [ 803.460244][ C0] ? driver_probe_device+0x4f/0x420 [ 803.460268][ C0] ? __device_attach_driver+0x2c6/0x510 [ 803.460292][ C0] ? bus_for_each_drv+0x184/0x210 [ 803.460312][ C0] ? __device_attach+0x2a8/0x480 [ 803.460334][ C0] ? bus_probe_device+0xbc/0x1e0 [ 803.460354][ C0] ? device_add+0xa00/0xfb0 [ 803.460369][ C0] ? usb_new_device+0xd66/0x1650 [ 803.460392][ C0] ? hub_event+0x2dcf/0x5560 [ 803.460428][ C0] ? __kmem_cache_alloc_node+0x140/0x260 [ 803.460449][ C0] __kasan_kmalloc+0x8e/0xa0 [ 803.460475][ C0] ? usb_alloc_urb+0x3f/0x140 [ 803.460490][ C0] __kmalloc+0xb0/0x240 [ 803.460524][ C0] usb_alloc_urb+0x3f/0x140 [ 803.460542][ C0] ath6kl_usb_post_recv_transfers+0x24f/0x6f0 [ 803.460572][ C0] ath6kl_usb_power_on+0x66/0x280 [ 803.460595][ C0] ath6kl_core_init+0x1d6/0x1090 [ 803.460615][ C0] ? free_zapped_rcu+0x1f0/0x1f0 [ 803.460645][ C0] ? ath6kl_core_rx_complete+0x70/0x70 [ 803.460665][ C0] ? ath6kl_core_create+0x7d6/0x980 [ 803.460686][ C0] ? memcpy+0x3c/0x60 [ 803.460703][ C0] ? ath6kl_core_create+0x7d6/0x980 [ 803.460725][ C0] ath6kl_usb_probe+0x144a/0x1540 [ 803.460754][ C0] usb_probe_interface+0x5c5/0xb20 [ 803.460781][ C0] ? usb_register_driver+0x3d0/0x3d0 [ 803.460801][ C0] really_probe+0x2aa/0xc70 [ 803.460825][ C0] ? pm_runtime_barrier+0x147/0x1c0 [ 803.460849][ C0] __driver_probe_device+0x18c/0x330 [ 803.460874][ C0] driver_probe_device+0x4f/0x420 [ 803.460900][ C0] __device_attach_driver+0x2c6/0x510 [ 803.460924][ C0] ? coredump_store+0x90/0x90 [ 803.460948][ C0] bus_for_each_drv+0x184/0x210 [ 803.460969][ C0] ? coredump_store+0x90/0x90 [ 803.460992][ C0] ? subsys_find_device_by_id+0x360/0x360 [ 803.461019][ C0] __device_attach+0x2a8/0x480 [ 803.461043][ C0] ? device_attach+0x20/0x20 [ 803.461067][ C0] ? kobject_uevent_env+0x35f/0x8a0 [ 803.461090][ C0] bus_probe_device+0xbc/0x1e0 [ 803.461110][ C0] ? device_add+0x97c/0xfb0 [ 803.461128][ C0] device_add+0xa00/0xfb0 [ 803.461149][ C0] usb_set_configuration+0x1991/0x1fd0 [ 803.461182][ C0] usb_generic_driver_probe+0x89/0x150 [ 803.461203][ C0] usb_probe_device+0x139/0x270 [ 803.461224][ C0] ? usb_register_device_driver+0x230/0x230 [ 803.461245][ C0] really_probe+0x2aa/0xc70 [ 803.461270][ C0] ? pm_runtime_barrier+0x147/0x1c0 [ 803.461294][ C0] __driver_probe_device+0x18c/0x330 [ 803.461320][ C0] driver_probe_device+0x4f/0x420 [ 803.461352][ C0] __device_attach_driver+0x2c6/0x510 [ 803.461376][ C0] ? coredump_store+0x90/0x90 [ 803.461400][ C0] bus_for_each_drv+0x184/0x210 [ 803.461421][ C0] ? coredump_store+0x90/0x90 [ 803.461444][ C0] ? subsys_find_device_by_id+0x360/0x360 [ 803.461470][ C0] __device_attach+0x2a8/0x480 [ 803.461495][ C0] ? device_attach+0x20/0x20 [ 803.461516][ C0] ? __kmem_cache_free+0xb6/0x1f0 [ 803.461545][ C0] ? kobject_uevent_env+0x35f/0x8a0 [ 803.461567][ C0] bus_probe_device+0xbc/0x1e0 [ 803.461587][ C0] ? device_add+0x97c/0xfb0 [ 803.461605][ C0] device_add+0xa00/0xfb0 [ 803.461627][ C0] usb_new_device+0xd66/0x1650 [ 803.461661][ C0] ? lock_chain_count+0x20/0x20 [ 803.461685][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 803.461709][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 803.461730][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 803.461752][ C0] hub_event+0x2dcf/0x5560 [ 803.461799][ C0] ? hub_post_resume+0x120/0x120 [ 803.461824][ C0] ? read_lock_is_recursive+0x10/0x10 [ 803.461849][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 803.461870][ C0] ? _raw_spin_unlock+0x40/0x40 [ 803.461891][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 803.461912][ C0] ? process_one_work+0x7b0/0x1160 [ 803.461933][ C0] process_one_work+0x8a2/0x1160 [ 803.461961][ C0] ? worker_detach_from_pool+0x240/0x240 [ 803.461985][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 803.462004][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 803.462025][ C0] ? kthread_data+0x4b/0xc0 [ 803.462054][ C0] worker_thread+0xaa2/0x1270 [ 803.462079][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 803.462103][ C0] ? __kthread_parkme+0x162/0x1c0 [ 803.462133][ C0] kthread+0x29d/0x330 [ 803.462148][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 803.462169][ C0] ? kthread_blkcg+0xd0/0xd0 [ 803.462186][ C0] ret_from_fork+0x1f/0x30 [ 803.462217][ C0] [ 804.224330][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 804.231252][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 804.238486][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 804.248580][ T28] Call Trace: [ 804.251899][ T28] [ 804.254871][ T28] dump_stack_lvl+0x188/0x24e [ 804.259598][ T28] ? memcpy+0x3c/0x60 [ 804.263623][ T28] ? show_regs_print_info+0x12/0x12 [ 804.268876][ T28] ? load_image+0x400/0x400 [ 804.273437][ T28] panic+0x2e5/0x730 [ 804.277385][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 804.283083][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 804.287635][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 804.293244][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 804.299451][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 804.305665][ T28] watchdog+0xf2d/0xf30 [ 804.309875][ T28] ? watchdog+0x1ed/0xf30 [ 804.314252][ T28] kthread+0x29d/0x330 [ 804.318353][ T28] ? hungtask_pm_notify+0x40/0x40 [ 804.323440][ T28] ? kthread_blkcg+0xd0/0xd0 [ 804.328068][ T28] ret_from_fork+0x1f/0x30 [ 804.332583][ T28] [ 804.336244][ T28] Kernel Offset: disabled [ 804.340582][ T28] Rebooting in 86400 seconds..