last executing test programs: 8m24.214109852s ago: executing program 4 (id=283): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="610506"], 0xad) 8m24.136418467s ago: executing program 4 (id=285): ioctl$EVIOCSABS20(0xffffffffffffffff, 0x40044591, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x110, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @loopback, 0x7ffff, 0x6, 0x0, 0x0, 0x6, 0x40000010}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 8m23.830239331s ago: executing program 4 (id=286): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 8m23.624912432s ago: executing program 4 (id=288): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)='p:t-st/event1 ./file0:0x0 arg2=$', 0x20) 8m23.567888667s ago: executing program 4 (id=290): ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 8m23.369958127s ago: executing program 4 (id=292): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 8m8.268090432s ago: executing program 32 (id=292): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 3m29.142485248s ago: executing program 1 (id=2025): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r4, 0x0, 0x0, 0x2000, 0x0, 0x0) r5 = epoll_create(0x3ba) epoll_wait(r5, &(0x7f0000000080), 0x0, 0xfffffffc) epoll_pwait2(r5, &(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x4040800) r6 = gettid() r7 = getpgid(r6) tgkill(r6, r7, 0x9) 3m27.76737588s ago: executing program 1 (id=2029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206010800000000000000000300000614000780080011400000000805001500000000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d6163"], 0x5c}}, 0x24000042) 3m24.926764471s ago: executing program 1 (id=2036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 3m19.888986803s ago: executing program 1 (id=2051): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32, @ANYBLOB="4c992f8541f740f3c3f0e5c10be205b2e2efea948f299ecc874d52f2a3dd28064423c0af5352b2ebe7876b48ac38b237ce6f3cfd71408cb5dd89f54f1704cdc303e22891d98e43634184f7eeddbe1b3a6c6db62a0a4d89a108d41a2e4697fc43592a16b714697d362a8c33cf8f79f10d041fff13eb18c18c93db48e61cf6c420e6affc53525efdd8aa15901ac9481b1ff2d4ade5c96d175b29e788759469d57dc6043df354c98c6800ad608cf9bca4a5af573e93553004b11f1fbaf860ff1ec7635cfb9cbbb817537704790661d4bc3a4cdf5a249cd4f7c3454991dbad555ff400"/238], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="400011"], 0x14) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000004c0)=ANY=[@ANYBLOB="120110010000001004160180400001020301090269000301050007080b000101072009090400000001012000096a82e724010900010900810904010000010220000904010101010220000905010920000801010825018030070800090402000001022000090402010101022000090582091000020505082501800c0f010046aac0b7d5f024f94eaf968e7c19d525097d9a9f49cf7a227529a4eca2ee30b029fa7c5feadd8724e92bcaf071c6ad17d2cd002fdb82b9096f0d3d6b801179030a5583a668ca335494929c1894c9d47fe8f33eca29b0b850cee04f6fe6c35bbc409e8b68"], 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r3, &(0x7f0000000b80)="eb67", 0x2) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18090000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004001f"], 0x38}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x100) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0xdc, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0xffffffffffffffd4, 0xf, 0x6b}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000011}, 0x11) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f060300000000000000000000000003050001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000003c0)=""/129, 0x81) 3m15.698518367s ago: executing program 1 (id=2061): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020"], 0x80}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc020000000000000000000000000000008004d52b0000000a00000000000000000000000000000000000000000000000200"/180], 0x108}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) r1 = socket$netlink(0x10, 0x3, 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m15.445895016s ago: executing program 1 (id=2064): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 3m0.23960331s ago: executing program 33 (id=2064): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 2m49.96233109s ago: executing program 2 (id=2149): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, &(0x7f00000002c0)}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 2m49.32103355s ago: executing program 2 (id=2151): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r4 = epoll_create(0x3ba) epoll_wait(r4, &(0x7f0000000080), 0x0, 0xfffffffc) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000001}) epoll_pwait2(r4, &(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) fchdir(0xffffffffffffffff) r5 = gettid() r6 = getpgid(r5) tgkill(r5, r6, 0x9) 2m47.494085792s ago: executing program 2 (id=2156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) fallocate(r2, 0x1, 0x0, 0x1000000) 2m43.726749551s ago: executing program 2 (id=2171): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x2, 0x8b, 0x1b, 0x5, 0xffffffd0, {0x0, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2m43.618055633s ago: executing program 2 (id=2172): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa14c31ed56ad59300", 0x23}, 0x48, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r4}, 0xc) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) keyctl$clear(0x7, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, &(0x7f00000005c0)="cf893a27cf870237524bb6a98b187b682889534afc06078db0d8444d4a947c2ec298409ee8aa9a304db506b368c45120cec349dabd0e2e91a35e14dad2723a2004d68e6ec19ebfa9dae82b3d733c77a82605442afaf5a70ac7977bef8a91f8dc1811d0806ee44e5179c41e5d1e6a6739f5f26abfbcc7faf677bf40df316e9ba3bdcb6d9824f3523789e15b1faeedaeb5fa947caab3c4e25f04b40567df5669851f3f65f153770c933440cf4b05de2a8b2aa2abfc0909b7071300e50307bfea8c8d78", &(0x7f00000006c0)="b3ff0cb1dbb27555fd1685962fb6243ae4af8ca28b13982cde21e67f00983937b668399084eb57212c56a8a82a3295b05edb3eadf87e2f") socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r7, {0x3, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r8 = fanotify_init(0x2, 0x8000) fanotify_mark(r8, 0x105, 0x40001032, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) read$FUSE(r8, &(0x7f0000000b00)={0x2020}, 0x2020) 2m42.661433748s ago: executing program 2 (id=2178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp', 0x3) 2m27.58084917s ago: executing program 34 (id=2178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp', 0x3) 25.036689784s ago: executing program 5 (id=2641): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) fsopen(&(0x7f0000000180)='proc\x00', 0x1) 24.768498213s ago: executing program 5 (id=2642): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480), 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 24.552273854s ago: executing program 5 (id=2647): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x801, 0x0) listen(r3, 0x540) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r6) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4c010) syz_genetlink_get_family_id$nl80211(0x0, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000d0000000001000026a03a3a33ae6a6130000000002c000000030a01080000000000000000010000000900010073797a30000000000900030073797a320000000014000000060a010400000000000000000100000014000000110001"], 0x88}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r7, &(0x7f0000002680)=[{{&(0x7f0000000300)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)="04603451b8363160dffd3c7b3ca4df787fe2b6b9361c152f9a7136015396ff71033e3de9f2411e8d0644c58032c7552ac29d9eab9e4c5856e1da453803f0293d1cd170daf62df050525fecb332bfbab90e0f47c1fcc276479e471310", 0x5c}], 0x1, &(0x7f00000007c0)=[{0xc0, 0x112, 0xa9aa, "a1349f08b99b7e3dc970ec62e7616e96e431e62cf99fdd294d48dd1d6b1dd4b7861444a3d918bd2027aad670d233d524bdfc3f017dcaa13e5386a2f342ab583902990a61bc4ef8da3451f02101f9bd8b8dc7700799d908826ae7882c43b333a39444b377494dc2dcebcf24579c732a47df101d8f938d95176188c844124a6956d0b12069fc6fe97bc6b95b3c6844a4d24c8fd61d5c8ea72c039ec43ec7027eff96755e868a54aed9493f3b"}, {0x68, 0x18b, 0x7e, "0476b6382ea7dfba291ff8691f1115a4247516c2e87999ac36d8d56c7c379052b88d0fc0076d0e299459b565d4897f50182da43db8407edca05ff45adf765eb53e5983cdcb0601b287bbec589fb0a534ea6a4d3b31"}, {0x40, 0x112, 0x3, "30bf49f5912d03c02e3c24b695396a75fb59670f0c98032599606fc17dcdd2cddc7a394729255f9213f665"}, {0xb0, 0x112, 0x5, "0b6e94d758b99145631bf614bf73e74d68c6c80f69e1a6ca98a36771167ecf620cad5586e7f361348ca94ecde814fa3a33a43e5052d56289d40af62713225d6b021b26c290eccc8c38fe0c0cde293ff9a798c21b430efd1f139008d92d4161903c12796d9d42783e1c47508585bdb4955cf9511069e17736c6cbeaadfd68ea0a290169c95e74234b35b04dc4cd3db41285dbaf00c004f375294b93"}, {0xe8, 0x3a, 0x8001, "f20ab302ff32cfe7db5acd6f194dd66048f0dee861f47b42760eea9307f74c3b1e1ff4da68d28816eb8889ecf957fc95de024d3e48022f24ebbe1d54128e29d7e955f324830ba0280bcf0e4ac4e0747faa672a1bef6313517a59a87083c2600571fbc9adc226e45180647b5bf7beba2827299501220e5e51109bb0a4e57b86b55e51ade70a4a2f3bef89b683c6591bc885f289e8504ab2b6398db9463193fd2d9b8b6d1557e3621b379f530c48c389a9571aff6f13a5b732c2648e20ee5ef641a1b3574380227b043d7c0b36d10a116dbf1e2c65"}, {0x60, 0x10e, 0x8000, "cd0677eb53aa6d5266d1e35da632a318f597c4866b215be4e01524a0edc7c383f30b9ea91920079bb91035732138b6db002ea908576d9e29dff3016211468baae98a6934ecd7aab4711ded"}], 0x360}}, {{0x0, 0x0, &(0x7f0000000b40), 0x0, &(0x7f0000000b80)=[{0x38, 0x117, 0x4, "3522d12d681116929ff7d611ef2b58cd47e86b438eab72d5443db1afdee04b4eeb"}, {0x58, 0x102, 0x1, "e7e01d805a5af83eafb9a422a0fd972d731f83177cf712549acc4b2855c6c16c03f07e145bdfe009311cefc8c6a84172593bd3f2af4fe4351a989557c066628992dcdb991fcd3c97"}, {0x98, 0x196, 0x8, "2c9e89d004c0da441bc95afef1dd10ead2921ec46c46fa686cf94df4144e85703534156c853c20d8fc9efe7607d85481f8a6ed93fe3050f3a4d0659460548b78d83fe3fbc5e296831378d65b8198d8cb8aa31163b0f5f8487f2f8e14223485d94512cbf3bdc170b474173155c2b5de7287b70331493beb0b7df9653c92fad0da1322f527c4a2925d"}, {0xd0, 0x10f, 0x5, "6eb94036985f74d4760c988a38aebb6739c2831dbf3e0928d3d58b5def07146152457aced998fd08cf20435fa70c04754f0ee979ce99679dc9f191eeae9b686e6d0ae11b72e2ec4ab3e19b650be23d733058b5c500bf73afc975db0c36830aa38f9d9dcb528b570800437ca762a2012bea1f297df8a27533228dd89da04a2c111910866212872c26138939e166c66e98eb398cf1388350bc4400aa4ddb3eb767c8129a21c88dee548161913f77a88e406a773c564a5063b7761cc623"}, {0x1010, 0x102, 0x202b4141, "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"}, {0xc0, 0x104, 0x7f, "7668723dcf641e5eeb4c830aa8748958a92a25bf717029be9725b63b33afe81498bc64d5ff45f5c44a5186b3eabde500fe47b7ec9837104f048a489ba91f5c255d89162a8c3bbf08bfbaba256af3fd3162f865d97aafb7206ac558f17f231a32a1031b66ff826bd09a0642fbd710252ca8df90b6da96615bd15aba5449c79b4d2a1c79bd4dbedc064e05d31d7853eb8355846eb4bf67cb8109bd4bfacbf480542de85ee0fdf93ebfc0ea2bdcb5b189a0"}], 0x12c8}}, {{&(0x7f0000001e80)=@pppoe={0x18, 0x0, {0x3, @random="e4564d1a74c9", 'vlan0\x00'}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001f00)="0a5cb23eb59e4feb543f8dc97ded8c534a7c4ba228135bf3357809fcf38537e9a091255804d672a9d47e643ce89e588e7473fb93191f1dd14c3ac350c08c7bce4cacea959ecec850aa0cd0235158c950cd3b39d0ee3f9898cf49323f12f21ae1933ea03147396d0d5e680fb8b75388767901751465ed1101fc4224d6caeca5f62be62ba58a757d31c561e228308750776a80c2f1d44f41ab6851be22e7088fdd7cc1c14a4a3baa4ed6e35aec", 0xac}, {&(0x7f0000001fc0)="3d85a33e640fe6bc80b2f9dd099910ba2fac2442a760a23f6a50fff1b80eb3a460745e2470e99df8a9ae7593b020715f3637190128a153f256e2c7ea8fa5741329df9eb19061dfba34a11fc8285ef7620c48a7a9d92f26aebb01ca79", 0x5c}, {&(0x7f0000002040)="61dc4dcc44983a2c5ecf6f5178aa059fee664afa9298a80374d32a18a671b028a53a97e653ad37292b6a55446581691135fd767a5ed92c4cca56fe7c4e136b327f1552903e37d340b2063b7dc5d06832be36fff6293777ae6859352fa6d2ac668d35de12164f127d81a26e7b93291b669a5757d192c8f123d8a11db99911f6b29a2a5e1a0efcf33bebe6a3033147468f739cfb7528377a2df96cd128c32e4ba69fb494b8f471325ed366b2ace3a0e13d69aec4388dfb4a10e404389e921419e915457748ce620485ff", 0xc9}, {&(0x7f0000002140)="8c2c7716725f1a9ac8176d1afff10e88f0436840db258e28992443d4f5f57149c76dfa760e1a6cda76c1b68e889ac458f95f8abac9bcc69df071757d51ca34bf17381f071766af6a459783bd81e23e2310df7587a9abb244c58718fc315c320b16a0b070e99065739b0537d78a8101d83ac783362e74fe23be432f", 0x7b}, {&(0x7f00000021c0)="1f3fbaa845a7df897104cff4d6232c0745c84643bef58609b24a98524bd3a29ed23f2c9958e3502ec6046b1b2685265520d2b77bc774f40fca5365ace70e", 0x3e}, {&(0x7f0000002200)="0a5a9d7281e6d649b0adcabc8c96f3742683a00fe041d83446177612c5c8b50367d521668732f334e93baa9f6c31cfc1659bf46ab4e3af394cf3e95b11e1465c755c00bfdf402ba3ed59d782b7c52a63a3bcb4c78edde0dd8b9d67afc66742cdabd74bf71e58e65072e35fed23cbd9cc353f8c57b394bdaa3f86a7720f3a93a161936f45e975e108455113b4e8a2ca267726ecc4678cc5d3da2e357b663058d1d33150d5bee0c4b36d66db0b5313241c9abc14c39ac82e1603fde4f20b2ca1ca0099bfe642771ba7fdee6ade35680a9982bb71a6832c56b69d092035f39b59bd", 0xe0}, {&(0x7f0000002300)="ac5bd00445e24155bfa7ccb678b1ddc2fd1de7141ab1a24451ef7b998653218dfc716b89292c91f8b265f3a12af4758c1c87d377158183ee7dc2c713b8458fb65e46df37016bbdc6de6cfbf85cd5143cae9b66450984fcb92b42daac62eb81018fc10cb542013e17c2fd2f9bdf6d6b0f9bea3e5b399fe195c3685bc85cabea4c28648952091405ca601b988f05fcf77eebacb210dbc2a4413354d678bd6d177df60577cc4aa689968c7647d926b57b7d848a60bdaf6a49d7137d691d5653ee3c5e2481268deb4849346c75b948153b712cfa4d095ed8b13bd001c45ceb89953223dd06", 0xe3}], 0x7}}, {{&(0x7f00000024c0)=@xdp={0x2c, 0x1, 0x0, 0x7}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002540)="8c580d15c9cdfb3d861cd9d8cd18614dab8d825ab01fe97acfd3f153d44dd757bb716f8f476d5c0b60f185335cd3391c6ca6f9d7460957a71a84089059fc03853c68f92ad054b691687d3e3a24f52df78cdd626ab024aa81e08162ad63ddb2f5f69e8c5f1aeee94d0ce6da0fa5390ade9082c0880be76a9e215a5bcfefdf4bfa2c693cbe98218b189029d19bf7db1d5d061e9fe7fa176c44ae652398dd58618131d9b5b0193d90e5a76dbda34e82b63b5dc5b604ab0842cb8ed8a8cdc01207b5ca3c045fb22b53f8109caf42642060339084e0", 0xd3}], 0x1}}], 0x4, 0x0) 23.006927002s ago: executing program 5 (id=2651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) listen(0xffffffffffffffff, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r4, 0x409, 0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000000, 0x13, r4, 0xeff74000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 18.845338319s ago: executing program 5 (id=2672): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f2409020200", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000700000000040014001a80100004800c000580"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) 14.915504169s ago: executing program 5 (id=2683): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='u\a0', 0x3) 6.480711243s ago: executing program 7 (id=2714): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000380)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) 6.284095197s ago: executing program 7 (id=2716): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000700000000040014001a80100004800c000580"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) 5.994058413s ago: executing program 6 (id=2717): ioctl$EVIOCSABS20(0xffffffffffffffff, 0x40044591, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @loopback, 0x7ffff, 0x6, 0x0, 0x0, 0x6, 0x40000010}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.927099773s ago: executing program 6 (id=2718): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x2, 0xa3f1, 0xfffffffffffffff9, 0x50ff, 0x9, 0x8, 0x22}) 5.744713245s ago: executing program 6 (id=2719): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, 0x0, 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x18, 0x1000) 4.515100137s ago: executing program 6 (id=2723): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 4.37870835s ago: executing program 6 (id=2724): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000600)={{0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x7, 0x0, 0x0}, 0x1, &(0x7f0000000540)=[{0x1, 0x0, 0x0, &(0x7f00000003c0)="7abf264b66549b707ba22a7ed23ea3dc5539a6d339611e0dbff3445fb8ea874ceeaa406980d7eeb9a014db7079e145e056a322c883b9214cd196057af573542762c69bb8469386eb36f58ad6ca0237", 0x4f}]}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7105b808030000740000"], 0xbb) 4.244121852s ago: executing program 6 (id=2725): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32, @ANYBLOB="4c992f8541f740f3c3f0e5c10be205b2e2efea948f299ecc874d52f2a3dd28064423c0af5352b2ebe7876b48ac38b237ce6f3cfd71408cb5dd89f54f1704cdc303e22891d98e43634184f7eeddbe1b3a6c6db62a0a4d89a108d41a2e4697fc43592a16b714697d362a8c33cf8f79f10d041fff13eb18c18c93db48e61cf6c420e6affc53525efdd8aa15901ac9481b1ff2d4ade5c96d175b29e788759469d57dc6043df354c98c6800ad608cf9bca4a5af573e93553004b11f1fbaf860ff1ec7635cfb9cbbb817537704790661d4bc3a4cdf5a249cd4f7c3454991dbad555ff400"/238], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="400011"], 0x14) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000004c0)=ANY=[@ANYBLOB="120110010000001004160180400001020301090269000301050007080b000101072009090400000001012000096a82e724010900010900810904010000010220000904010101010220000905010920000801010825018030070800090402000001022000090402010101022000090582091000020505082501800c0f010046aac0b7d5f024f94eaf968e7c19d525097d9a9f49cf7a227529a4eca2ee30b029fa7c5feadd8724e92bcaf071c6ad17d2cd002fdb82b9096f0d3d6b801179030a5583a668ca335494929c1894c9d47fe8f33eca29b0b850cee04f6fe6c35bbc409e8b68"], 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r3, &(0x7f0000000b80)="eb67", 0x2) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004001f"], 0x38}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x100) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0xdc, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0xffffffffffffffd4, 0xf, 0x6b}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000011}, 0x11) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f060300000000000000000000000003050001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000003c0)=""/129, 0x81) 4.028447226s ago: executing program 3 (id=2728): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 3.976321349s ago: executing program 3 (id=2729): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x2, 0xa3f1, 0xfffffffffffffff9, 0x50ff, 0x9, 0x8, 0x22}) 3.944128207s ago: executing program 3 (id=2730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="050b002200000000000024"], 0x14}}, 0x0) 3.898297945s ago: executing program 3 (id=2731): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10000001}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) fchdir(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="06f100001000010000000000000000000000000a580000002563bd0a03020001000000e0ffff01080000090002d17f1af0296264084653fb3357bcab609e43efc22bcc828ef0f1b4b32792db9d9e7a45ed2e03def2a1c47c9a7decb50fb1d35eb65a3fd8ae459e18d42fa8f53be1103abe7f3b43f01c8474c031e4700b"], 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x4040800) r5 = getpgid(0x0) tgkill(0x0, r5, 0x9) 2.974657159s ago: executing program 3 (id=2732): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000380)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a2c0)=""/102384, 0x18ff0) r4 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0xfffffff8, 0x3800, 0x0, 0x13, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r4, 0x20, &(0x7f0000000100)={0x0, 0xd301bdb9, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000000240)="a8fdd1253920a26320a6ec985a63f6712cae42e908dd9dda97feb9db0f59f8ff287c", 0x22, 0x0, 0x0, 0x9217}, 0x0, {0x2, 0xffffffff}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r4, 0x24, &(0x7f0000000400)={0x0, 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)="70ab65ee2e7209cf5f6c69613d3d31905c3844bb54f3c151fa", 0x6d) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4004800) gettid() r5 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 2.952821735s ago: executing program 7 (id=2733): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) close(0x3) 2.877119032s ago: executing program 0 (id=2734): r0 = userfaultfd(0x80001) syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', &(0x7f0000000200), 0x0, 0x0) 2.692998936s ago: executing program 7 (id=2735): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000600)={{0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x7, 0x0, 0x0}, 0x1, &(0x7f0000000540)=[{0x1, 0x0, 0x0, &(0x7f00000003c0)="7abf264b66549b707ba22a7ed23ea3dc5539a6d339611e0dbff3445fb8ea874ceeaa406980d7eeb9a014db7079e145e056a322c883b9214cd196057af573542762c69bb8469386eb36f58ad6ca0237", 0x4f}]}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7105b808030000740000"], 0xbb) 2.294423476s ago: executing program 0 (id=2736): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/72, 0x48}, 0x81}], 0x2, 0x20000020, 0x0) 1.999783173s ago: executing program 0 (id=2737): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.87910259s ago: executing program 0 (id=2738): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f00000002c0)='6', 0x1) modify_ldt$write(0x1, &(0x7f0000000040)={0x1fff, 0x0, 0x400}, 0x10) 1.310539889s ago: executing program 3 (id=2739): unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18c1000000000000000000000000000085100000020000002000000000e2ff009500007b0000000095000000000000009700695e75c4f957325cae4adb1810a3a44f5935f643b9a37656be672fa084950a7fb0d26ef569fd0cc4ef9ae593be96320df502265ffd3efcf81b22cd75435d944865ab885692714ae35a403770d9f294f37474293c6fb7f5ec29fc7d150770111cc765d93fe02afd311261db192210bef4caa9719a0c355962e7e2d56bfe8d2c4be53915f859abba8817e0a172cb5f2a563cd84eb90dfbb82a5b3e2601ff13f73590ec71748a133d448318c3d80e2b110725dc961407a46e32817b4866ddc88acb9e42951c9c3c"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc0140) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000080)={0x8, 0x6, 0x9, 0x9, 0x1}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x404c840) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, 0x0) getsockopt$inet_int(r2, 0x0, 0x22, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) read(r0, 0x0, 0x0) 1.279746178s ago: executing program 7 (id=2740): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x2, 0xa3f1, 0xfffffffffffffff9, 0x50ff, 0x9, 0x8, 0x22}) 1.275920416s ago: executing program 0 (id=2741): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = geteuid() mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x62432550) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='ecryptfs\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x80, {0xc, 0x40200, 0x0, {0x7ffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x6, 0x5, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1010000, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r1, @ANYBLOB="b72a6c08f974da438fa5653dbc40d1c55b7dedbff9e024abcb", @ANYRESDEC, @ANYBLOB="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", @ANYRESDEC=r6, @ANYBLOB=',\x00']) write$FUSE_ATTR(r0, 0x0, 0xfc92) 1.162636848s ago: executing program 7 (id=2742): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 0s ago: executing program 0 (id=2743): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000700000000040014001a80100004800c000580"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) kernel console output (not intermixed with test programs): 707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.767018][ T5707] usb 6-1: Product: syz [ 364.767027][ T5707] usb 6-1: Manufacturer: syz [ 364.767034][ T5707] usb 6-1: SerialNumber: syz [ 364.772610][T11672] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 364.782318][ T5707] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 364.837402][ T5707] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 364.854737][ T5707] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 364.926509][ T10] usb 2-1: USB disconnect, device number 14 [ 364.975641][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.990079][ T31] audit: type=1800 audit(1789382866.192:605): pid=11680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1961" name=8006 dev="sda1" ino=2049 res=0 errno=0 [ 364.997444][ T25] usb 6-1: USB disconnect, device number 17 [ 365.025275][ T25] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 365.043314][ T25] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 365.050598][ T25] ti_usb_3410_5052 6-1:2.0: device disconnected [ 365.352247][T11686] Device name cannot be null; rc = [-22] [ 366.144882][T11691] siw: device registration error -23 [ 366.490932][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 366.652372][ T10] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 366.672026][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 366.700783][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.700988][ T10] usb 3-1: Product: syz [ 366.701154][ T10] usb 3-1: Manufacturer: syz [ 366.701315][ T10] usb 3-1: SerialNumber: syz [ 366.779448][T11701] netlink: 'syz.1.1968': attribute type 10 has an invalid length. [ 366.984875][ T10] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 366.984929][ T10] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -71! [ 366.984968][ T10] speedtch 3-1:1.0: probe with driver speedtch failed with error -71 [ 367.021363][ T10] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 367.021750][ T10] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -71! [ 367.021790][ T10] speedtch 3-1:1.1: probe with driver speedtch failed with error -71 [ 367.058196][ T10] usb 3-1: USB disconnect, device number 13 [ 368.300663][ T52] Bluetooth: hci0: connection err: -111 [ 368.354674][T11726] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 368.907442][T11729] Device name cannot be null; rc = [-22] [ 369.569333][T11740] siw: device registration error -23 [ 369.902901][ T56] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 369.906229][T11752] netlink: 'syz.1.1982': attribute type 10 has an invalid length. [ 369.978639][T11756] Set syz1 is full, maxelem 65536 reached [ 370.053350][ T56] usb 6-1: Using ep0 maxpacket: 16 [ 370.055146][ T56] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 370.058329][ T56] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.058350][ T56] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.077356][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.077377][ T56] usb 6-1: Product: syz [ 370.077390][ T56] usb 6-1: Manufacturer: syz [ 370.077404][ T56] usb 6-1: SerialNumber: syz [ 370.418949][T11759] NFSD: Failed to start, no listeners configured. [ 370.431251][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1979'. [ 371.777863][ T52] Bluetooth: hci1: connection err: -111 [ 372.364523][ T56] usb 6-1: USB disconnect, device number 18 [ 372.748304][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.073621][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.073707][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.427951][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 375.573197][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 375.607070][ T25] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 375.611240][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.611265][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.666112][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.666143][ T25] usb 2-1: Product: syz [ 375.666182][ T25] usb 2-1: Manufacturer: syz [ 375.666245][ T25] usb 2-1: SerialNumber: syz [ 376.084736][ T25] usb 2-1: unit 6 not found! [ 376.084892][ T25] usb 2-1: unit 4 not found! [ 376.436931][ T25] usb 2-1: USB disconnect, device number 15 [ 377.085290][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.831087][T11832] svc: failed to register lockdv1 RPC service (errno 111). [ 377.831272][T11832] lockd_up: makesock failed, error=-111 [ 379.603158][T11832] svc: failed to register nfsdv3 RPC service (errno 512). [ 379.603548][T11832] svc: failed to register nfsaclv3 RPC service (errno 512). [ 379.603582][T11832] failed to unregister tcp with rpcbind [ 379.603737][T11832] svc: failed to register nfsdv3 RPC service (errno 97). [ 379.603751][T11832] svc: failed to register nfsaclv3 RPC service (errno 97). [ 379.603762][T11832] failed to unregister tcp with rpcbind [ 380.638494][ T52] Bluetooth: hci1: connection err: -111 [ 381.845296][T11867] svc: failed to register lockdv1 RPC service (errno 111). [ 381.953332][T11870] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 381.953356][T11870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 381.955585][T11870] vhci_hcd vhci_hcd.0: Device attached [ 381.956109][T11871] vhci_hcd: connection closed [ 381.956776][T11230] vhci_hcd vhci_hcd.1: stop threads [ 381.956796][T11230] vhci_hcd vhci_hcd.1: release socket [ 381.956812][T11230] vhci_hcd vhci_hcd.1: disconnect device [ 382.087699][T11867] svc: failed to register nfsdv3 RPC service (errno 111). [ 382.089848][T11867] svc: failed to register nfsaclv3 RPC service (errno 111). [ 382.089864][T11867] failed to unregister tcp with rpcbind [ 382.090063][T11867] svc: failed to register nfsdv3 RPC service (errno 97). [ 382.090079][T11867] svc: failed to register nfsaclv3 RPC service (errno 97). [ 382.090092][T11867] failed to unregister tcp with rpcbind [ 384.656350][T11900] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 384.673925][T11900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.992951][ T31] audit: type=1326 audit(1789382886.142:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.0.2031" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa0af9e159 code=0x0 [ 385.905364][T11909] Device name cannot be null; rc = [-22] [ 387.322165][T11921] siw: device registration error -23 [ 387.403959][ T5707] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 388.361473][ T5707] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 388.362736][ T5707] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 388.362758][ T5707] usb 1-1: config 1 has no interface number 0 [ 388.368628][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.368646][ T5707] usb 1-1: Product: syz [ 388.368658][ T5707] usb 1-1: Manufacturer: syz [ 388.368671][ T5707] usb 1-1: SerialNumber: syz [ 388.390446][ T5707] usb 1-1: cannot find UAC_HEADER [ 388.564920][ T5707] snd-usb-audio 1-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 388.629024][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.183954][T11936] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 389.184088][T11936] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 389.184212][T11936] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 389.184328][T11936] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 389.184442][T11936] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 389.184502][T11936] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 390.175348][T11943] Device name cannot be null; rc = [-22] [ 390.715172][ T5707] usb 1-1: USB disconnect, device number 12 [ 391.529417][ T5613] Bluetooth: hci5: command 0x0c1a tx timeout [ 391.529450][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 391.529473][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 391.529494][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 391.529588][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 393.148965][T11959] NFSD: Failed to start, no listeners configured. [ 393.443105][ T56] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 393.592882][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 393.595453][ T56] usb 2-1: Using ep0 maxpacket: 16 [ 393.596423][ T56] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 393.597731][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.597752][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.604328][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.604348][ T56] usb 2-1: Product: syz [ 393.604360][ T56] usb 2-1: Manufacturer: syz [ 393.604372][ T56] usb 2-1: SerialNumber: syz [ 393.710391][T11980] overlayfs: failed to resolve 'lower1': -2 [ 395.095775][T11988] Device name cannot be null; rc = [-22] [ 395.598629][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 395.772914][ T56] usb 2-1: USB disconnect, device number 16 [ 395.840857][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.935766][T11997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2057'. [ 396.133437][ T25] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 396.284630][ T25] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 396.312321][ T25] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 396.328760][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.328775][ T25] usb 6-1: Product: syz [ 396.328784][ T25] usb 6-1: Manufacturer: syz [ 396.328792][ T25] usb 6-1: SerialNumber: syz [ 396.615427][ T25] speedtch 6-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 396.615482][ T25] speedtch 6-1:1.0: usbatm_usb_probe: bind failed: -71! [ 396.615521][ T25] speedtch 6-1:1.0: probe with driver speedtch failed with error -71 [ 396.656276][ T25] speedtch 6-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 396.660082][ T25] speedtch 6-1:1.1: usbatm_usb_probe: bind failed: -71! [ 396.660131][ T25] speedtch 6-1:1.1: probe with driver speedtch failed with error -71 [ 396.694432][ T25] usb 6-1: USB disconnect, device number 19 [ 396.932969][ T56] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 397.103849][ T56] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 397.104763][ T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.104789][ T56] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 397.104804][ T56] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 397.104824][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.524923][ T52] Bluetooth: hci4: connection err: -111 [ 397.941069][ T56] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 397.941093][ T56] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 397.941104][ T56] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 397.947633][ T56] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 397.954636][ T56] usb 1-1: USB disconnect, device number 13 [ 400.223127][ T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 400.394371][ T25] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 400.395403][ T25] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 117, changing to 10 [ 400.395431][ T25] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26378, setting to 1024 [ 400.396417][ T25] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 117, changing to 10 [ 400.396442][ T25] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26378, setting to 1024 [ 400.398448][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.398468][ T25] usb 4-1: Product: syz [ 400.398480][ T25] usb 4-1: Manufacturer: syz [ 400.398493][ T25] usb 4-1: SerialNumber: syz [ 400.462854][T12031] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 400.496394][ T25] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 400.512414][ T25] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 400.524196][ T25] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 400.743168][ T25] usb 4-1: USB disconnect, device number 22 [ 400.838369][ T25] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 401.121013][ T25] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 401.138909][ T25] ti_usb_3410_5052 4-1:2.0: device disconnected [ 401.420255][T12047] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2073'. [ 402.163074][ T52] Bluetooth: hci4: connection err: -111 [ 402.612880][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 402.816847][ T25] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 402.817700][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.817739][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 402.817763][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 402.817798][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.837221][ T25] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 403.837245][ T25] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 403.837256][ T25] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 403.839683][ T25] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 403.876944][ T25] usb 1-1: USB disconnect, device number 14 [ 403.938902][T12067] device-mapper: ioctl: Invalid target message parameters. [ 403.939511][T12067] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 405.109349][T12093] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 405.365364][T12096] md: md0 stopped. [ 405.424977][T12093] md: invalid raid superblock magic on ram1 [ 405.424987][T12093] md: ram1 does not have a valid v0.0 superblock, not importing! [ 405.425026][T12093] md: md_import_device returned -22 [ 405.903396][ T52] Bluetooth: hci1: connection err: -111 [ 406.528320][T12102] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 406.637085][ T1013] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 406.669111][T12102] nvme nvme0: creating 2 I/O queues. [ 406.671444][T12102] nvme nvme0: new ctrl: "testnqn" [ 407.362750][T12074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.194057][ T31] audit: type=1400 audit(1789382909.372:607): avc: denied { write } for pid=12116 comm="syz.5.2097" name="configs" dev="configfs" ino=16303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 408.241892][ T31] audit: type=1400 audit(1789382909.442:608): avc: denied { write } for pid=12116 comm="syz.5.2097" name="functions" dev="configfs" ino=16302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 408.337962][ T31] audit: type=1400 audit(1789382909.522:609): avc: denied { write } for pid=12116 comm="syz.5.2097" name="c.1" dev="configfs" ino=31770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 408.688129][T12119] Config c/1 of g1 needs at least one function. [ 408.729667][T12119] udc dummy_udc.0: failed to start g1: -22 [ 408.729756][T12119] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 408.899673][T12119] UDC core: g1: couldn't find an available UDC or it's busy [ 409.907614][T12134] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2103'. [ 410.304120][ T5707] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 410.463554][ T5707] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 410.464513][ T5707] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 410.464543][ T5707] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 410.464575][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.473735][ T5707] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 410.517942][ T5707] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 410.667054][T12137] device-mapper: ioctl: Invalid target message parameters. [ 410.667414][T12137] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 410.772730][T12140] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 410.773346][T12140] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 410.788492][T12140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.788613][T12140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 410.788729][T12140] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 410.796974][T12140] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 410.797020][T12140] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 410.876215][T12143] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 410.879205][T12143] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.879397][T12143] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 410.879559][T12143] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 410.879715][T12143] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 412.067447][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 412.080172][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 412.089281][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 412.101465][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 412.111783][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 412.531709][T12183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.621102][ T5739] usb 4-1: USB disconnect, device number 23 [ 412.621294][T12169] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.621418][T12169] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.621511][T12169] bridge_slave_0: entered allmulticast mode [ 412.650723][T12169] bridge_slave_0: entered promiscuous mode [ 412.654934][T12169] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.657022][T12169] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.657108][T12169] bridge_slave_1: entered allmulticast mode [ 412.658740][T12169] bridge_slave_1: entered promiscuous mode [ 412.682565][T12169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.686469][T12169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.706824][T12169] team0: Port device team_slave_0 added [ 412.709380][T12169] team0: Port device team_slave_1 added [ 412.730589][ T5739] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 412.731094][ T5739] spcp8x5 4-1:1.0: device disconnected [ 412.763709][T12169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.763722][T12169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.763743][T12169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.764978][T12169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.764989][T12169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.765009][T12169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.633886][ T4927] Bluetooth: hci5: command 0x0c1a tx timeout [ 413.633921][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 413.633943][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 413.633963][ T4927] Bluetooth: hci1: command 0x0c1a tx timeout [ 413.633985][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 413.777736][T12145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.852602][T12169] hsr_slave_0: entered promiscuous mode [ 413.860683][T12169] hsr_slave_1: entered promiscuous mode [ 413.862887][T12169] debugfs: 'hsr0' already exists in 'hsr' [ 413.862903][T12169] Cannot create hsr debugfs directory [ 414.203217][ T52] Bluetooth: hci2: command tx timeout [ 414.653758][T12169] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 414.661670][T12169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.662480][T12169] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 414.691955][T12169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.692781][T12169] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 414.726754][T12169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.729105][T12169] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 414.752067][T12169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.088053][T12169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.142585][T12169] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.151336][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.151420][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.156145][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.156216][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.822143][ T52] Bluetooth: hci4: connection err: -111 [ 415.822187][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 415.822215][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 416.233547][ T4927] Bluetooth: hci2: command tx timeout [ 416.393504][ T31] audit: type=1400 audit(1789382917.592:610): avc: denied { write } for pid=12244 comm="syz.3.2127" name="c.1" dev="configfs" ino=31770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 416.398315][T12245] Config c/1 of g1 needs at least one function. [ 416.398367][T12245] udc usbip-vudc.0: failed to start g1: -22 [ 416.398378][T12245] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 416.398683][T12245] UDC core: g1: couldn't find an available UDC or it's busy [ 416.545683][T12251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.589274][T12169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.810631][T12169] veth0_vlan: entered promiscuous mode [ 416.828046][T12169] veth1_vlan: entered promiscuous mode [ 416.877169][T12169] veth0_macvtap: entered promiscuous mode [ 416.883878][T12169] veth1_macvtap: entered promiscuous mode [ 416.914003][T12169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.925634][T12169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.966389][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.966419][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.966445][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.966469][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.165834][ T31] audit: type=1400 audit(1789382918.372:611): avc: denied { write } for pid=12267 comm="syz.5.2133" name="c.1" dev="configfs" ino=31770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 417.166063][ T31] audit: type=1400 audit(1789382918.372:612): avc: denied { write } for pid=12267 comm="syz.5.2133" name="c.1" dev="configfs" ino=31770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 417.341944][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 417.483000][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 417.484774][ T25] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 417.487743][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.487823][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.561452][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.561656][ T25] usb 3-1: Product: syz [ 417.561770][ T25] usb 3-1: Manufacturer: syz [ 417.561888][ T25] usb 3-1: SerialNumber: syz [ 417.707432][ T5707] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 417.828577][ T25] usb 3-1: unit 6 not found! [ 417.846573][ T25] usb 3-1: USB disconnect, device number 14 [ 417.856978][ T5601] udevd[5601]: setting owner of /dev/bus/usb/003/014 to uid=0, gid=0 failed: No such file or directory [ 417.870363][ T5707] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 417.870389][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.897537][ T5707] usb 1-1: Dual-Role OTG device on HNP port [ 417.897726][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.900195][ C0] configfs-gadget.g1 gadget.0: Using interface 0 [ 417.921344][ T5707] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 2 vid 0x0000 pid 0x0000 [ 418.312938][ T4927] Bluetooth: hci2: command tx timeout [ 418.364323][T12278] gadgetfs: bound to dummy_udc driver [ 418.469524][ T31] audit: type=1800 audit(1789382919.672:613): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2136" name="ep1in-bulk" dev="gadgetfs" ino=32397 res=0 errno=0 [ 418.572335][ T31] audit: type=1400 audit(1789382919.772:614): avc: denied { ioctl } for pid=12277 comm="syz.2.2136" path="socket:[32423]" dev="sockfs" ino=32423 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.604282][ T25] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 418.604451][ C1] gadgetfs: connected [ 418.604541][ T25] gadgetfs: disconnected [ 418.753008][ C1] gadgetfs: connected [ 418.753608][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 418.753827][ T25] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 418.753845][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.755233][ C1] gadgetfs: configuration #1 [ 419.216722][T12238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.358976][T11230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.358994][T11230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.360831][T12277] gadgetfs: suspended from state 3 [ 419.365408][T12277] gadgetfs: disconnected [ 419.385674][ T25] usb 2-1: can't set config #1, error -71 [ 419.396999][ T25] usb 2-1: USB disconnect, device number 17 [ 419.970166][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 420.193640][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 420.264127][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 420.264144][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 420.264164][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.301002][ T1427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.301038][ T1427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.315054][ T10] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 420.337323][ T10] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 420.394070][ T4927] Bluetooth: hci2: command tx timeout [ 420.419347][T12295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.955609][T12320] xt_HMARK: spi-set and port-set can't be combined [ 422.476384][ T31] audit: type=1400 audit(1789382923.682:615): avc: denied { write } for pid=12321 comm="syz.2.2149" name="c.1" dev="configfs" ino=31770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 422.590372][ T25] usb 1-1: USB disconnect, device number 15 [ 422.729153][ T25] usblp0: removed [ 423.225490][T12326] Device name cannot be null; rc = [-22] [ 424.280532][ T5800] usb 4-1: USB disconnect, device number 24 [ 424.310452][ T5800] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 424.310963][ T5800] spcp8x5 4-1:1.0: device disconnected [ 425.212152][ T31] audit: type=1400 audit(1789382926.412:616): avc: denied { write } for pid=12342 comm="syz.0.2157" name="functions" dev="configfs" ino=16302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 426.706973][ T4927] Bluetooth: hci0: connection err: -111 [ 426.839379][T12367] xt_HMARK: spi-set and port-set can't be combined [ 426.984550][T12352] Can't find ip_set type hash:je;,net [ 427.123143][ T31] audit: type=1400 audit(1789382928.322:617): avc: denied { map } for pid=12368 comm="syz.5.2166" path="socket:[31397]" dev="sockfs" ino=31397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 427.287015][T12372] Device name cannot be null; rc = [-22] [ 428.002626][ T31] audit: type=1400 audit(1789382929.202:618): avc: denied { read append } for pid=12377 comm="syz.0.2168" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 428.009139][ T31] audit: type=1400 audit(1789382929.212:619): avc: denied { open } for pid=12377 comm="syz.0.2168" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 428.551690][ T31] audit: type=1400 audit(1789382929.752:620): avc: denied { create } for pid=12396 comm="syz.3.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 428.819167][T12406] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2174'. [ 428.975177][T12411] xt_HMARK: spi-set and port-set can't be combined [ 429.824301][ T31] audit: type=1400 audit(1789382931.022:621): avc: denied { setopt } for pid=12412 comm="syz.3.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 430.103607][ T4927] Bluetooth: hci2: connection err: -111 [ 431.162686][T12382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.763153][T12441] netlink: 'syz.5.2186': attribute type 1 has an invalid length. [ 433.408509][ T31] audit: type=1326 audit(1789382934.462:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.5.2186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa16b39e159 code=0x0 [ 433.418981][T12441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.363403][ T4927] Bluetooth: hci2: connection err: -111 [ 434.395382][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.395448][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.409634][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 434.612375][ T25] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 434.623812][ T25] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 434.623837][ T25] usb 4-1: config 1 has no interface number 0 [ 434.627412][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.627434][ T25] usb 4-1: Product: syz [ 434.627455][ T25] usb 4-1: Manufacturer: syz [ 434.627468][ T25] usb 4-1: SerialNumber: syz [ 434.688966][ T25] usb 4-1: 3:1 : does not exist [ 434.688986][ T25] usb 4-1: 3:2 : does not exist [ 435.192909][ T31] audit: type=1400 audit(1789382936.352:623): avc: denied { write } for pid=12487 comm="syz.5.2198" name="c.1" dev="configfs" ino=31770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 435.192960][ T31] audit: type=1400 audit(1789382936.352:624): avc: denied { write } for pid=12487 comm="syz.5.2198" name="c.1" dev="configfs" ino=31770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 435.318951][ T43] nvmet: Created nvm controller 2 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 435.349864][T12485] nvme nvme1: creating 2 I/O queues. [ 435.526015][T12485] nvme nvme1: new ctrl: "testnqn" [ 435.794156][T12498] xt_HMARK: spi-set and port-set can't be combined [ 436.605201][T12501] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 437.032362][T12508] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 437.045864][T12508] udc dummy_udc.0: failed to start g1: -19 [ 437.048739][T12508] UDC core: g1: couldn't find an available UDC or it's busy [ 437.080770][ T10] usb 4-1: USB disconnect, device number 25 [ 437.551464][T12516] Device name cannot be null; rc = [-22] [ 437.871562][ T4927] Bluetooth: hci2: connection err: -111 [ 439.181518][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 439.343357][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 439.344233][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.344254][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 439.346371][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.346393][ T10] usb 7-1: Product: syz [ 439.346407][ T10] usb 7-1: Manufacturer: syz [ 439.346420][ T10] usb 7-1: SerialNumber: syz [ 439.352180][ T10] usb 7-1: config 0 descriptor?? [ 439.562391][T12526] program syz.6.2212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.565263][ T5720] usb 7-1: USB disconnect, device number 2 [ 440.110955][T12544] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 440.136047][T11326] nvmet: Created nvm controller 3 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 440.137260][T12544] nvme nvme2: creating 2 I/O queues. [ 440.140119][T12544] nvme nvme2: new ctrl: "testnqn" [ 440.157970][ T25] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 440.243414][ T5720] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 440.288865][T12551] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 440.304107][ T25] usb 6-1: device descriptor read/64, error -71 [ 440.393395][ T5720] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 440.394239][ T5720] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 440.394259][ T5720] usb 1-1: config 1 has no interface number 0 [ 440.396022][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.396041][ T5720] usb 1-1: Product: syz [ 440.396054][ T5720] usb 1-1: Manufacturer: syz [ 440.396066][ T5720] usb 1-1: SerialNumber: syz [ 440.403168][ T5720] usb 1-1: 3:1 : does not exist [ 440.403186][ T5720] usb 1-1: 3:2 : does not exist [ 440.583564][ T25] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 440.695149][T12556] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 440.713346][ T25] usb 6-1: device descriptor read/64, error -71 [ 440.773594][T12558] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 440.823162][ T25] usb usb6-port1: attempt power cycle [ 441.172909][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 441.195088][ T25] usb 6-1: device descriptor read/8, error -71 [ 441.433455][ T25] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 441.456611][ T25] usb 6-1: device descriptor read/8, error -71 [ 441.564815][ T25] usb usb6-port1: unable to enumerate USB device [ 443.141301][T12569] netlink: 'syz.3.2226': attribute type 1 has an invalid length. [ 443.144545][ T5720] usb 1-1: USB disconnect, device number 16 [ 443.234523][T12569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.441919][ T31] audit: type=1326 audit(1789382944.642:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.3.2226" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c1479e159 code=0x0 [ 444.698861][ T4927] Bluetooth: hci4: Invalid handle: 0x6161 > 0x0eff [ 444.781795][T12592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 444.781955][T12592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 444.782083][T12592] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 444.782208][T12592] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 444.793903][T12592] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 444.794054][T12592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 444.794119][T12592] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 444.835393][T12592] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 444.881201][ T4927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 444.890365][ T4927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 444.893077][ T4927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 444.993209][ T31] audit: type=1400 audit(1789382946.202:626): avc: denied { read } for pid=12599 comm="syz.6.2227" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 444.995029][ T31] audit: type=1400 audit(1789382946.202:627): avc: denied { open } for pid=12599 comm="syz.6.2227" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 445.052009][ T4927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 445.067330][ T4927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 445.229682][ T4927] Bluetooth: hci5: connection err: -111 [ 446.792879][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 446.792917][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 446.792938][ T4927] Bluetooth: hci1: command 0x0c1a tx timeout [ 446.792959][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 446.873132][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 446.873139][ T4927] Bluetooth: hci5: command 0x0c1a tx timeout [ 446.994382][T12620] md: could not open device unknown-block(0,0). [ 446.994429][T12620] md: error, md_import_device() returned -6 [ 447.789040][ T52] Bluetooth: hci6: command tx timeout [ 448.187245][ T5720] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 448.335168][ T5720] usb 7-1: Using ep0 maxpacket: 16 [ 448.340871][ T5720] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 448.346607][ T5720] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.346626][ T5720] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.353945][ T5720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.353964][ T5720] usb 7-1: Product: syz [ 448.353977][ T5720] usb 7-1: Manufacturer: syz [ 448.353988][ T5720] usb 7-1: SerialNumber: syz [ 448.401181][T12649] netlink: 'syz.0.2245': attribute type 1 has an invalid length. [ 448.441803][T12649] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.602538][T12596] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.602695][T12596] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.608839][T12596] bridge_slave_0: entered allmulticast mode [ 448.610188][T12596] bridge_slave_0: entered promiscuous mode [ 448.635006][T12596] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.635103][T12596] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.635222][T12596] bridge_slave_1: entered allmulticast mode [ 448.637090][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2242'. [ 448.638405][T12596] bridge_slave_1: entered promiscuous mode [ 448.772959][ T31] audit: type=1326 audit(1789382949.932:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.0.2245" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa0af9e159 code=0x0 [ 448.953141][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 449.044487][T12596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.079474][T12596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.231159][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 449.287755][T12596] team0: Port device team_slave_0 added [ 449.289978][T12596] team0: Port device team_slave_1 added [ 449.312004][T12596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.312026][T12596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.312048][T12596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.314190][T12596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.314202][T12596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.314222][T12596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.383645][ T5720] usb 7-1: USB disconnect, device number 3 [ 449.440136][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.448036][ T10] usb 4-1: device descriptor read/64, error -71 [ 449.476530][T12666] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 449.493505][T12596] hsr_slave_0: entered promiscuous mode [ 449.494279][T12596] hsr_slave_1: entered promiscuous mode [ 449.494775][T12596] debugfs: 'hsr0' already exists in 'hsr' [ 449.494790][T12596] Cannot create hsr debugfs directory [ 449.527249][ T43] nvmet: Created nvm controller 4 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 449.532042][T12666] nvme nvme3: creating 2 I/O queues. [ 449.558235][T12666] nvme nvme3: new ctrl: "testnqn" [ 449.705966][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 449.746295][T12596] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 449.749468][T12596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.750199][T12596] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 449.774741][T12596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.775550][T12596] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 449.779806][T12596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.780492][T12596] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 449.825098][T12596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.833711][ T52] Bluetooth: hci6: command tx timeout [ 449.854206][ T10] usb 4-1: device descriptor read/64, error -71 [ 450.029689][ T10] usb usb4-port1: attempt power cycle [ 450.073016][T12596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.095572][ T52] Bluetooth: hci2: connection err: -111 [ 450.099850][T12596] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.105241][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.105313][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.110035][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.110105][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.523134][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 450.553893][ T10] usb 4-1: device descriptor read/8, error -71 [ 450.883522][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 450.904870][ T10] usb 4-1: device descriptor read/8, error -71 [ 451.013470][ T10] usb usb4-port1: unable to enumerate USB device [ 451.033260][ T4927] Bluetooth: hci2: command 0x0c1a tx timeout [ 451.070729][T12596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.148593][T12708] netlink: 'syz.5.2257': attribute type 1 has an invalid length. [ 451.172164][T12708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 451.378864][ T31] audit: type=1326 audit(1789382952.582:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12707 comm="syz.5.2257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa16b39e159 code=0x0 [ 451.646473][T12596] veth0_vlan: entered promiscuous mode [ 451.913160][ T52] Bluetooth: hci6: command tx timeout [ 452.194795][T12596] veth1_vlan: entered promiscuous mode [ 452.493367][T12596] veth0_macvtap: entered promiscuous mode [ 452.510530][T12596] veth1_macvtap: entered promiscuous mode [ 452.621504][T12596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.669338][T12737] xt_HMARK: spi-set and port-set can't be combined [ 452.820818][T12596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.016234][T11326] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.057479][T11326] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.058275][T11326] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.058955][T11326] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.400324][T12743] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2265'. [ 453.999472][ T52] Bluetooth: hci6: command tx timeout [ 454.413946][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.414487][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.890314][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.890334][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.887129][T12772] netlink: 'syz.5.2271': attribute type 1 has an invalid length. [ 457.945669][T12772] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.978674][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 458.130783][ T31] audit: type=1326 audit(1789382959.332:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.5.2271" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa16b39e159 code=0x0 [ 458.240902][T12781] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 458.254281][ T5720] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 458.267297][ T43] nvmet: Created nvm controller 5 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 458.268238][T12781] nvme nvme4: creating 2 I/O queues. [ 458.284939][T12781] nvme nvme4: new ctrl: "testnqn" [ 458.414998][ T5720] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 458.438733][ T5720] usb 1-1: config index 0 descriptor too short (expected 10586, got 58) [ 458.438761][ T5720] usb 1-1: config 1 has too many interfaces: 48, using maximum allowed: 32 [ 458.438787][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.438814][ T5720] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 48 [ 458.438918][ T5720] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 458.439036][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.525725][T12786] xt_HMARK: spi-set and port-set can't be combined [ 458.697404][ T5720] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -22 [ 460.060870][ T5720] usb 1-1: USB disconnect, device number 17 [ 460.108393][T12796] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2277'. [ 460.699030][T12804] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 461.752968][T12816] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 462.011118][ T12] nvmet: Created nvm controller 6 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 462.028672][T12816] nvme nvme5: creating 2 I/O queues. [ 462.041600][T12816] nvme nvme5: new ctrl: "testnqn" [ 462.237101][ T52] Bluetooth: hci0: connection err: -111 [ 462.805629][T12828] xt_HMARK: spi-set and port-set can't be combined [ 463.785790][T11230] nvmet: Created nvm controller 7 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 463.790318][T12833] nvme nvme6: creating 2 I/O queues. [ 463.825479][T12833] nvme nvme6: new ctrl: "testnqn" [ 463.866497][T12837] netlink: 'syz.3.2293': attribute type 1 has an invalid length. [ 463.956941][T12837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.104179][ T31] audit: type=1326 audit(1789382965.312:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.3.2293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c1479e159 code=0x0 [ 464.161430][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2294'. [ 464.413101][ T5720] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 465.263343][ T5720] usb 8-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 465.264253][ T5720] usb 8-1: config index 0 descriptor too short (expected 10586, got 58) [ 465.264275][ T5720] usb 8-1: config 1 has too many interfaces: 48, using maximum allowed: 32 [ 465.264294][ T5720] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.264312][ T5720] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 48 [ 465.264345][ T5720] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.264378][ T5720] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.348592][ T5720] ims_pcu 8-1:1.0: probe with driver ims_pcu failed with error -22 [ 465.417498][T12856] nvme_fabrics: missing parameter 'transport=%s' [ 465.417514][T12856] nvme_fabrics: missing parameter 'nqn=%s' [ 465.598082][ T5738] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 465.656302][ T5800] usb 8-1: USB disconnect, device number 2 [ 466.440639][ T5738] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 466.452509][ T5738] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.452535][ T5738] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 466.452550][ T5738] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 466.452570][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.893177][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 467.989993][ T5738] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 467.990018][ T5738] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 467.990029][ T5738] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 468.026745][ T5738] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 468.043212][ T25] usb 7-1: device descriptor read/64, error -71 [ 468.059202][ T5738] usb 6-1: USB disconnect, device number 24 [ 468.302983][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 468.474492][ T25] usb 7-1: device descriptor read/64, error -71 [ 468.584037][ T25] usb usb7-port1: attempt power cycle [ 468.602753][T12884] netlink: 'syz.7.2309': attribute type 1 has an invalid length. [ 468.814148][ T31] audit: type=1326 audit(1789382970.022:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12883 comm="syz.7.2309" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbc619e159 code=0x0 [ 469.484909][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 469.515037][ T25] usb 7-1: device descriptor read/8, error -71 [ 469.826872][T12892] nvme_fabrics: missing parameter 'transport=%s' [ 469.826889][T12892] nvme_fabrics: missing parameter 'nqn=%s' [ 470.156214][T12898] Device name cannot be null; rc = [-22] [ 471.944770][T12916] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 472.037486][ T4370] nvmet: Created nvm controller 8 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 472.041007][T12916] nvme nvme7: creating 2 I/O queues. [ 474.042003][T12916] nvme nvme7: new ctrl: "testnqn" [ 474.106589][T12922] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2319'. [ 474.264349][T12924] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 474.303828][T12924] md: array md0 already initialised! [ 474.410358][T12924] md0: Warning: Device ram1 is misaligned [ 474.410430][T12924] md/raid0:md0: too few disks (1 of 124) - aborting! [ 474.410471][T12924] md: pers->run() failed ... [ 474.413589][T12928] md: md0 stopped. [ 474.914685][T12936] Device name cannot be null; rc = [-22] [ 475.584187][T12944] device-mapper: ioctl: Invalid target message parameters. [ 475.654613][T12944] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 480.247067][T12971] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 481.671803][T12988] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2338'. [ 482.084739][T12987] gadgetfs: bound to dummy_udc driver [ 482.195136][ T31] audit: type=1800 audit(1789382983.402:633): pid=12992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2332" name="ep1in-bulk" dev="gadgetfs" ino=36366 res=0 errno=0 [ 482.323591][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 482.323795][ C0] gadgetfs: connected [ 482.326693][ T10] gadgetfs: disconnected [ 482.372850][ T5800] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 482.426663][T12996] device-mapper: ioctl: Invalid target message parameters. [ 482.447921][ T31] audit: type=1400 audit(1789382983.652:634): avc: denied { ioctl } for pid=12995 comm="syz.5.2340" path="socket:[36413]" dev="sockfs" ino=36413 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 482.473272][ C0] gadgetfs: connected [ 482.474821][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 482.475094][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 482.475122][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.477248][ C0] gadgetfs: configuration #1 [ 482.493419][T12996] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 482.553320][ T5800] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 482.554171][ T5800] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 482.555888][ T5800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.555910][ T5800] usb 7-1: Product: syz [ 482.555924][ T5800] usb 7-1: Manufacturer: syz [ 482.555937][ T5800] usb 7-1: SerialNumber: syz [ 483.841729][ T5800] speedtch 7-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 483.841792][ T5800] speedtch 7-1:1.0: usbatm_usb_probe: bind failed: -71! [ 483.841833][ T5800] speedtch 7-1:1.0: probe with driver speedtch failed with error -71 [ 484.652712][ T5800] speedtch 7-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 484.653133][ T5800] speedtch 7-1:1.1: usbatm_usb_probe: bind failed: -71! [ 484.653169][ T5800] speedtch 7-1:1.1: probe with driver speedtch failed with error -71 [ 484.656321][ T5800] usb 7-1: USB disconnect, device number 8 [ 485.751141][T12993] gadgetfs: suspended from state 3 [ 485.751360][ T10] usb 1-1: can't set config #1, error -71 [ 485.752291][T12993] gadgetfs: disconnected [ 485.770928][ T10] usb 1-1: USB disconnect, device number 18 [ 486.012679][T13027] nvme_fabrics: missing parameter 'nqn=%s' [ 487.173740][T13036] lo: entered allmulticast mode [ 487.180446][T13034] lo: left allmulticast mode [ 487.298177][T13038] device-mapper: ioctl: Invalid target message parameters. [ 487.301755][T13042] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 487.365608][T13041] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 487.367806][ T1427] nvmet: Created nvm controller 9 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 487.372421][T13042] nvme nvme8: creating 2 I/O queues. [ 487.409916][T13042] nvme nvme8: new ctrl: "testnqn" [ 488.737047][T13059] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 488.828654][T13059] md: md0 stopped. [ 489.105163][T13064] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 489.980934][T13066] gadgetfs: bound to dummy_udc driver [ 490.145806][ T31] audit: type=1800 audit(1789382991.352:635): pid=13072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2358" name="ep1in-bulk" dev="gadgetfs" ino=35576 res=0 errno=0 [ 490.286775][ T5800] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 490.287140][ C1] gadgetfs: connected [ 490.287482][ T5800] gadgetfs: disconnected [ 490.453399][ C1] gadgetfs: connected [ 490.456957][ T5800] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 490.460053][ T5800] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 490.490405][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.619504][ C1] gadgetfs: configuration #1 [ 490.670316][T13065] gadgetfs: suspended from state 3 [ 490.670443][T13065] gadgetfs: disconnected [ 490.671449][ T5800] usb 1-1: can't set config #1, error -71 [ 490.684159][T13070] nvme_fabrics: missing parameter 'nqn=%s' [ 490.700015][ T5800] usb 1-1: USB disconnect, device number 19 [ 490.902275][T13084] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 490.918947][T13085] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 490.919049][T13085] block device autoloading is deprecated and will be removed. [ 490.922524][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2364'. [ 490.932868][ T5720] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 491.905153][ T5720] usb 7-1: unable to get BOS descriptor or descriptor too short [ 491.905178][ T5720] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 491.906090][ T5720] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.906110][ T5720] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.908368][ T5720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.908769][ T5720] usb 7-1: Product: syz [ 491.908950][ T5720] usb 7-1: Manufacturer: syz [ 491.908963][ T5720] usb 7-1: SerialNumber: syz [ 491.925744][ T5720] usb 7-1: selecting invalid altsetting 1 [ 491.952998][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 492.001630][ T5720] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 492.042302][T13084] md/raid10:md0: not enough operational mirrors. [ 492.050477][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.065611][T13084] md: pers->run() failed ... [ 492.067104][T13085] md: md0 stopped. [ 492.103345][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 492.105454][ T10] usb 6-1: config index 0 descriptor too short (expected 10586, got 58) [ 492.105467][ T10] usb 6-1: config 1 has too many interfaces: 48, using maximum allowed: 32 [ 492.105478][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.105488][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 48 [ 492.105508][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 492.105528][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.117913][ T10] ims_pcu 6-1:1.0: probe with driver ims_pcu failed with error -22 [ 492.230882][T13096] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2367'. [ 492.458006][ T5720] usb 6-1: USB disconnect, device number 25 [ 492.546514][T13102] syzkaller0: entered promiscuous mode [ 492.546548][T13102] syzkaller0: entered allmulticast mode [ 492.871010][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2361'. [ 492.975631][T13110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.996641][T13110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.070069][T13109] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 493.525410][ T1478] nvmet: Created nvm controller 10 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 493.550551][T13109] nvme nvme9: creating 2 I/O queues. [ 493.557419][T13109] nvme nvme9: new ctrl: "testnqn" [ 493.841831][T11230] nvmet: connect request for invalid subsystem t! [ 493.841893][T13118] nvme nvme10: Connect Invalid Data Parameter, subsysnqn "t" [ 494.425787][ T25] usb 7-1: USB disconnect, device number 9 [ 495.738352][T13133] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 495.826028][T13136] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 495.836718][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.836758][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.956008][T13136] md: md0 stopped. [ 495.969332][T13137] md: invalid raid superblock magic on ram1 [ 495.969346][T13137] md: ram1 does not have a valid v0.90 superblock, not importing! [ 495.969398][T13137] md: md_import_device returned -22 [ 496.487424][ T52] Bluetooth: hci6: Invalid handle: 0x6161 > 0x0eff [ 496.949450][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2383'. [ 497.045636][T13161] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 497.057024][T13155] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 497.301939][T13146] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 497.304677][T13146] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 497.304791][T13146] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 497.304892][T13146] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 497.304993][T13146] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 497.305098][T13146] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 497.305198][T13146] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 497.305240][T13146] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 497.349185][T13146] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 497.628168][T13171] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 497.653738][ T5720] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 497.792553][ T1427] nvmet: Created nvm controller 11 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 497.800054][T13171] nvme nvme10: creating 2 I/O queues. [ 497.803665][ T5720] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 497.804782][ T5720] usb 4-1: config index 0 descriptor too short (expected 10586, got 58) [ 497.804805][ T5720] usb 4-1: config 1 has too many interfaces: 48, using maximum allowed: 32 [ 497.804824][ T5720] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.804842][ T5720] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 48 [ 497.804877][ T5720] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 497.804911][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.816722][ T5720] ims_pcu 4-1:1.0: probe with driver ims_pcu failed with error -22 [ 497.817714][T13171] nvme nvme10: new ctrl: "testnqn" [ 497.980190][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 498.050894][T13182] lo: entered allmulticast mode [ 498.071407][T13181] lo: left allmulticast mode [ 498.148585][ T25] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 498.173433][ T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.173527][ T25] usb 8-1: config 0 has no interfaces? [ 498.232300][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.241545][ T25] usb 8-1: Product: syz [ 498.241590][ T25] usb 8-1: Manufacturer: syz [ 498.241618][ T25] usb 8-1: SerialNumber: syz [ 498.269866][ T25] usb 8-1: config 0 descriptor?? [ 498.392139][ T5720] usb 4-1: USB disconnect, device number 30 [ 498.624280][T13174] program syz.7.2386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.632382][ T10] usb 8-1: USB disconnect, device number 3 [ 498.643149][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 498.835797][T11326] nvmet: connect request for invalid subsystem t! [ 498.836058][T13184] nvme nvme11: Connect Invalid Data Parameter, subsysnqn "t" [ 499.044694][T13190] lo: entered allmulticast mode [ 499.078338][T13189] lo: left allmulticast mode [ 499.360292][ T4927] Bluetooth: hci2: command 0x0c1a tx timeout [ 499.360322][ T4927] Bluetooth: hci5: command 0x0c1a tx timeout [ 499.360341][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 499.360362][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 499.360380][ T4927] Bluetooth: hci1: command 0x0c1a tx timeout [ 499.360431][ T52] Bluetooth: hci6: command 0x0c1a tx timeout [ 499.510622][ T52] Bluetooth: hci5: Invalid handle: 0x6161 > 0x0eff [ 499.519192][T13197] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 499.605888][T13210] fuse: Bad value for 'fd' [ 500.323361][T13201] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 500.325397][T13201] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 500.325770][T13201] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 500.325881][T13201] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 500.325982][T13201] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 500.326590][T13201] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 500.326710][T13201] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 500.497818][T13224] lo: entered allmulticast mode [ 500.513992][T13227] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 500.545226][T13222] lo: left allmulticast mode [ 500.623563][T11326] nvmet: Created nvm controller 12 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 500.649214][T13227] nvme nvme11: creating 2 I/O queues. [ 500.890307][T13227] nvme nvme11: new ctrl: "testnqn" [ 501.593183][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 501.776672][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2406'. [ 502.037870][ T43] nvmet: Created nvm controller 13 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:5aff841a-34ab-4d23-9f11-3e2650917357. [ 502.040960][T13235] nvme nvme12: creating 2 I/O queues. [ 502.079668][T13235] nvme nvme12: new ctrl: "testnqn" [ 502.123118][ T56] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 502.413454][ T5613] Bluetooth: hci6: command 0x0c1a tx timeout [ 502.413545][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 502.413615][ T5613] Bluetooth: hci5: command 0x0c1a tx timeout [ 502.414891][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 502.414979][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 502.419407][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 502.872986][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 502.893365][ T56] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 502.894338][ T56] usb 4-1: config index 0 descriptor too short (expected 10586, got 58) [ 502.894361][ T56] usb 4-1: config 1 has too many interfaces: 48, using maximum allowed: 32 [ 502.894379][ T56] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.894397][ T56] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 48 [ 502.894431][ T56] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.894464][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.912133][ T56] ims_pcu 4-1:1.0: probe with driver ims_pcu failed with error -22 [ 503.023297][ T10] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 503.024196][ T10] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 503.027430][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.027452][ T10] usb 7-1: Product: syz [ 503.027466][ T10] usb 7-1: Manufacturer: syz [ 503.027480][ T10] usb 7-1: SerialNumber: syz [ 503.241823][T13259] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2415'. [ 503.669799][ T10] speedtch 7-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 503.669853][ T10] speedtch 7-1:1.0: usbatm_usb_probe: bind failed: -71! [ 503.669893][ T10] speedtch 7-1:1.0: probe with driver speedtch failed with error -71 [ 503.705078][ T10] speedtch 7-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 503.705474][ T10] speedtch 7-1:1.1: usbatm_usb_probe: bind failed: -71! [ 503.705515][ T10] speedtch 7-1:1.1: probe with driver speedtch failed with error -71 [ 503.711844][ T10] usb 7-1: USB disconnect, device number 10 [ 503.732152][ T56] usb 4-1: USB disconnect, device number 31 [ 503.915062][ T4927] Bluetooth: hci6: Invalid handle: 0x6161 > 0x0eff [ 504.474502][T13251] Bluetooth: hci6: command 0x0c1a tx timeout [ 505.003285][T13265] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 505.003469][T13265] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 505.003598][T13265] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 505.003714][T13265] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 505.003830][T13265] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 505.003946][T13265] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 505.004063][T13265] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 507.390823][ T4927] Bluetooth: hci6: command 0x0c1a tx timeout [ 507.390858][ T4927] Bluetooth: hci2: command 0x0c1a tx timeout [ 507.390881][ T4927] Bluetooth: hci5: command 0x0c1a tx timeout [ 507.390903][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 507.390926][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 507.390947][ T4927] Bluetooth: hci1: command 0x0c1a tx timeout [ 507.390969][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 507.481291][T13285] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 508.082017][T13251] Bluetooth: hci0: connection err: -111 [ 512.012858][ T1478] nvmet: connect request for invalid subsystem test! [ 512.013133][T13321] nvme nvme13: Connect Invalid Data Parameter, subsysnqn "test" [ 512.013772][T13333] md: md0 stopped. [ 512.361710][T13337] syzkaller0: entered promiscuous mode [ 512.361732][T13337] syzkaller0: entered allmulticast mode [ 512.377326][ T31] audit: type=1400 audit(1789383013.582:636): avc: denied { write } for pid=13336 comm="syz.6.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 513.380839][T13251] Bluetooth: hci5: connection err: -111 [ 514.165622][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2446'. [ 515.192850][ T5814] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 515.345916][ T5814] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 515.348616][ T5814] usb 6-1: config index 0 descriptor too short (expected 10586, got 58) [ 515.348647][ T5814] usb 6-1: config 1 has too many interfaces: 48, using maximum allowed: 32 [ 515.348666][ T5814] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.348682][ T5814] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 48 [ 515.348725][ T5814] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.348758][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.369275][ T5814] ims_pcu 6-1:1.0: probe with driver ims_pcu failed with error -22 [ 516.216664][ T5814] usb 6-1: USB disconnect, device number 26 [ 517.037530][T13383] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2455'. [ 517.368491][T13393] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2457'. [ 518.350376][T13400] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2459'. [ 521.417284][T13419] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2466'. [ 521.554132][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2454'. [ 521.586765][ T43] nvmet: connect request for invalid subsystem testnq! [ 521.588046][T13421] nvme nvme13: Connect Invalid Data Parameter, subsysnqn "testnq" [ 522.289303][T13438] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2470'. [ 524.026359][T13448] Can't find ip_set type hash:ip,m [ 525.166598][T13460] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2472'. [ 526.022838][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 526.187262][ T10] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 526.205632][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 117, changing to 10 [ 526.205660][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26378, setting to 1024 [ 526.210147][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 117, changing to 10 [ 526.210163][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26378, setting to 1024 [ 526.276603][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.276617][ T10] usb 1-1: Product: syz [ 526.276626][ T10] usb 1-1: Manufacturer: syz [ 526.276635][ T10] usb 1-1: SerialNumber: syz [ 526.305689][T13478] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.308885][ T10] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 526.312429][ T10] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 526.336239][ T10] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 526.525650][ T5738] usb 1-1: USB disconnect, device number 20 [ 526.548539][ T5738] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 526.567813][ T5738] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 526.568511][ T5738] ti_usb_3410_5052 1-1:2.0: device disconnected [ 527.507002][T13491] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2483'. [ 528.455801][T13500] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2489'. [ 528.990636][T13512] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2491'. [ 530.594874][T13520] Can't find ip_set type hash:ip,m [ 531.982448][T13548] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 533.157954][T13563] siw: device registration error -23 [ 534.116586][T13572] siw: device registration error -23 [ 535.094639][T13578] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 535.119122][ T31] audit: type=1400 audit(1789383036.322:637): avc: denied { bind } for pid=13579 comm="syz.7.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 535.154854][T13578] md: md0 stopped. [ 537.646265][T13593] Can't find ip_set type hash:ip,m [ 538.036448][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 538.143482][T13251] Bluetooth: hci4: connection err: -111 [ 538.960923][T13613] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2521'. [ 539.250823][T13624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.332830][ T5814] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 539.486822][ T5814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 539.486862][ T5814] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 539.487747][ T5814] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.487766][ T5814] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.489773][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.489794][ T5814] usb 4-1: Product: syz [ 539.489808][ T5814] usb 4-1: Manufacturer: syz [ 539.489822][ T5814] usb 4-1: SerialNumber: syz [ 539.515724][ T5814] usb 4-1: selecting invalid altsetting 1 [ 539.516214][ T5814] usb 4-1: unit 6 not found! [ 539.516228][ T5814] usb 4-1: unit 2 not found! [ 539.545545][ T5738] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 539.653300][ T5814] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 539.708787][ T5738] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 539.709692][ T5738] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 539.710536][ T5738] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 539.722083][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.722101][ T5738] usb 1-1: Product: syz [ 539.722113][ T5738] usb 1-1: Manufacturer: syz [ 539.722124][ T5738] usb 1-1: SerialNumber: syz [ 539.744282][ T5738] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 539.767891][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 539.768646][ T5738] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 539.787723][ T5738] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 540.008773][T13634] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 540.262860][ T5738] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 540.282675][T13636] netlink: 'syz.5.2529': attribute type 10 has an invalid length. [ 540.287971][T13636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.289455][T13636] team0: Port device netdevsim1 added [ 541.234766][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2522'. [ 541.237728][T13649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.238085][T13649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.248164][ T5738] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 541.254179][ T5738] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 541.255120][ T5738] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 541.259484][ T5738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.259502][ T5738] usb 7-1: Product: syz [ 541.259515][ T5738] usb 7-1: Manufacturer: syz [ 541.259526][ T5738] usb 7-1: SerialNumber: syz [ 541.275585][ T5738] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 541.281719][ T5738] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 541.293140][ T5738] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 542.470900][ T5738] usb 4-1: USB disconnect, device number 32 [ 542.602126][T13667] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.603243][T13667] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.807621][T13671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2537'. [ 543.201401][ T5738] usb 1-1: USB disconnect, device number 21 [ 543.237795][ T5738] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 543.265648][ T5738] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 543.267989][ T5738] ti_usb_3410_5052 1-1:2.0: device disconnected [ 543.302367][T13667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.312656][T13667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.512054][T13671] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 543.512075][T13671] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 543.513387][T13671] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 543.513462][ T31] audit: type=1400 audit(1789383044.712:638): avc: denied { firmware_load } for pid=13664 comm="syz.3.2537" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 543.515034][T11326] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.516400][T13441] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.516719][T13441] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.516771][T13441] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.739291][ T10] usb 7-1: USB disconnect, device number 11 [ 543.766666][ T10] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 543.786701][ T10] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 543.793796][ T10] ti_usb_3410_5052 7-1:2.0: device disconnected [ 545.856100][T13707] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2550'. [ 546.233615][T13687] bridge0: port 3(macvlan2) entered disabled state [ 546.233752][T13687] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.233956][T13687] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.887484][T13251] Bluetooth: hci2: connection err: -111 [ 547.417885][T13687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.458160][T13687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.007722][T13707] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 548.007757][T13707] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 548.007776][T13707] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 548.032906][T11326] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.032945][T11326] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.032975][T11326] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.033011][T11326] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.046879][T13746] Can't find ip_set type hash:ip,ma [ 553.770070][T13784] bond1: left allmulticast mode [ 554.060786][T13795] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2577'. [ 554.088768][T13794] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 554.154163][T13794] md: invalid raid superblock magic on ram1 [ 554.154177][T13794] md: ram1 does not have a valid v0.0 superblock, not importing! [ 554.154228][T13794] md: md_import_device returned -22 [ 554.161313][T13794] md: md0 stopped. [ 554.340892][ T31] audit: type=1400 audit(1789383055.542:639): avc: denied { write } for pid=13798 comm="syz.3.2579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=x25_socket permissive=1 [ 556.199747][ T31] audit: type=1800 audit(1789383057.402:640): pid=13823 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2585" name=8006 dev="sda1" ino=2049 res=0 errno=0 [ 556.202657][T13823] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 556.628475][ T31] audit: type=1400 audit(1789383057.832:641): avc: denied { write } for pid=13807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.002116][ T31] audit: type=1400 audit(1789383058.202:642): avc: denied { write } for pid=13846 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.541092][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.541140][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.774950][T13857] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 557.972019][T13862] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 559.181265][ T31] audit: type=1400 audit(1789383060.382:643): avc: denied { write } for pid=13855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.339340][T13886] Set syz1 is full, maxelem 65536 reached [ 559.508283][ T31] audit: type=1400 audit(1789383060.712:644): avc: denied { write } for pid=13887 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.748179][T13890] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 560.325166][T13904] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2606'. [ 560.406584][T13906] device-mapper: ioctl: Invalid target message parameters. [ 560.409569][T13906] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 561.146492][T13915] md: md0 stopped. [ 561.360522][T13919] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 561.360589][ T31] audit: type=1800 audit(1789383062.562:645): pid=13919 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2611" name=8006 dev="sda1" ino=2049 res=0 errno=0 [ 562.918085][ T31] audit: type=1400 audit(1789383064.122:646): avc: denied { bind } for pid=13938 comm="syz.7.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 563.088257][T13945] syzkaller0: entered promiscuous mode [ 563.088277][T13945] syzkaller0: entered allmulticast mode [ 563.281000][T13950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2625'. [ 565.337548][T13968] FAULT_INJECTION: forcing a failure. [ 565.337548][T13968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 565.337798][T13968] CPU: 0 UID: 0 PID: 13968 Comm: syz.7.2633 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.337826][T13968] Tainted: [L]=SOFTLOCKUP [ 565.337833][T13968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 565.337845][T13968] Call Trace: [ 565.337851][T13968] [ 565.337860][T13968] dump_stack_lvl+0x100/0x190 [ 565.337893][T13968] should_fail_ex.cold+0x5/0xa [ 565.337916][T13968] ? prepare_alloc_pages+0x16d/0x5b0 [ 565.337951][T13968] should_fail_alloc_page+0xeb/0x140 [ 565.337978][T13968] prepare_alloc_pages+0x1f0/0x5b0 [ 565.338004][T13968] ? do_raw_spin_lock+0x128/0x260 [ 565.338032][T13968] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 565.338057][T13968] ? do_raw_spin_unlock+0x145/0x1e0 [ 565.338084][T13968] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 565.338112][T13968] ? rcu_is_watching+0x13/0xc0 [ 565.338139][T13968] ? trace_hrtimer_start+0x77/0x220 [ 565.338168][T13968] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 565.338198][T13968] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 565.338223][T13968] ? find_held_lock+0x2b/0x80 [ 565.338251][T13968] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 565.338278][T13968] ? mark_held_locks+0x40/0x70 [ 565.338301][T13968] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 565.338327][T13968] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 565.338353][T13968] ? rcu_is_watching+0x13/0xc0 [ 565.338379][T13968] ? trace_sched_exit_tp+0x120/0x160 [ 565.338406][T13968] ? __schedule+0x126b/0x6920 [ 565.338431][T13968] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 565.338457][T13968] ? policy_nodemask+0xed/0x4f0 [ 565.338485][T13968] alloc_pages_mpol+0x201/0x550 [ 565.338514][T13968] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 565.338548][T13968] alloc_pages_noprof+0x1a/0x160 [ 565.338578][T13968] get_free_pages_noprof+0x10/0xb0 [ 565.338600][T13968] __kasan_populate_vmalloc+0xa0/0x210 [ 565.338628][T13968] alloc_vmap_area+0x95d/0x2bb0 [ 565.338657][T13968] ? kasan_save_track+0x14/0x30 [ 565.338691][T13968] ? __kasan_kmalloc+0xaa/0xb0 [ 565.338713][T13968] ? __pfx_alloc_vmap_area+0x10/0x10 [ 565.338737][T13968] ? stack_trace_save+0x8e/0xc0 [ 565.338755][T13968] ? __get_vm_area_node+0x124/0x350 [ 565.338782][T13968] __get_vm_area_node+0x1ed/0x350 [ 565.338810][T13968] __vmalloc_node_range_noprof+0x268/0x1420 [ 565.338837][T13968] ? alloc_ldt_struct+0x14f/0x1b0 [ 565.338860][T13968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.338889][T13968] ? alloc_ldt_struct+0x14f/0x1b0 [ 565.338918][T13968] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 565.338960][T13968] ? alloc_ldt_struct+0x14f/0x1b0 [ 565.338984][T13968] __vmalloc_node_noprof+0xad/0xf0 [ 565.339010][T13968] ? alloc_ldt_struct+0x14f/0x1b0 [ 565.339037][T13968] __vmalloc_noprof+0xa3/0x120 [ 565.339062][T13968] ? __pfx___vmalloc_noprof+0x10/0x10 [ 565.339088][T13968] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 565.339118][T13968] ? down_write_killable+0x152/0x240 [ 565.339148][T13968] ? alloc_ldt_struct+0x5d/0x1b0 [ 565.339177][T13968] alloc_ldt_struct+0x14f/0x1b0 [ 565.339202][T13968] write_ldt+0x62b/0xd40 [ 565.339231][T13968] ? __pfx_write_ldt+0x10/0x10 [ 565.339258][T13968] ? xfd_validate_state+0x129/0x190 [ 565.339287][T13968] __x64_sys_modify_ldt+0xb1/0x170 [ 565.339314][T13968] do_syscall_64+0x123/0x790 [ 565.339343][T13968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.339364][T13968] RIP: 0033:0x7fdbc619e159 [ 565.339380][T13968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.339399][T13968] RSP: 002b:00007fdbc7065028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 565.339419][T13968] RAX: ffffffffffffffda RBX: 00007fdbc6425fa0 RCX: 00007fdbc619e159 [ 565.339431][T13968] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 565.339442][T13968] RBP: 00007fdbc623503b R08: 0000000000000000 R09: 0000000000000000 [ 565.339453][T13968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.339464][T13968] R13: 00007fdbc6426038 R14: 00007fdbc6425fa0 R15: 00007ffd31f01c48 [ 565.339489][T13968] [ 565.484513][T13968] syz.7.2633: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 565.527295][T13968] CPU: 0 UID: 0 PID: 13968 Comm: syz.7.2633 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.527327][T13968] Tainted: [L]=SOFTLOCKUP [ 565.527335][T13968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 565.527346][T13968] Call Trace: [ 565.527356][T13968] [ 565.527364][T13968] dump_stack_lvl+0x100/0x190 [ 565.527397][T13968] warn_alloc.cold+0x9e/0xb2 [ 565.527421][T13968] ? __pfx_warn_alloc+0x10/0x10 [ 565.527449][T13968] ? lockdep_hardirqs_on+0x7d/0x110 [ 565.527478][T13968] ? __get_vm_area_node+0x2f0/0x350 [ 565.527508][T13968] ? __get_vm_area_node+0x22b/0x350 [ 565.527538][T13968] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 565.527564][T13968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.527593][T13968] ? alloc_ldt_struct+0x14f/0x1b0 [ 565.527624][T13968] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 565.527662][T13968] ? alloc_ldt_struct+0x14f/0x1b0 [ 565.527686][T13968] __vmalloc_node_noprof+0xad/0xf0 [ 565.527714][T13968] ? alloc_ldt_struct+0x14f/0x1b0 [ 565.527742][T13968] __vmalloc_noprof+0xa3/0x120 [ 565.527768][T13968] ? __pfx___vmalloc_noprof+0x10/0x10 [ 565.527794][T13968] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 565.527821][T13968] ? down_write_killable+0x152/0x240 [ 565.527850][T13968] ? alloc_ldt_struct+0x5d/0x1b0 [ 565.527879][T13968] alloc_ldt_struct+0x14f/0x1b0 [ 565.527904][T13968] write_ldt+0x62b/0xd40 [ 565.527939][T13968] ? __pfx_write_ldt+0x10/0x10 [ 565.527967][T13968] ? xfd_validate_state+0x129/0x190 [ 565.527996][T13968] __x64_sys_modify_ldt+0xb1/0x170 [ 565.528023][T13968] do_syscall_64+0x123/0x790 [ 565.528053][T13968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.528073][T13968] RIP: 0033:0x7fdbc619e159 [ 565.528091][T13968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.528110][T13968] RSP: 002b:00007fdbc7065028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 565.528130][T13968] RAX: ffffffffffffffda RBX: 00007fdbc6425fa0 RCX: 00007fdbc619e159 [ 565.528143][T13968] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 565.528155][T13968] RBP: 00007fdbc623503b R08: 0000000000000000 R09: 0000000000000000 [ 565.528168][T13968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.528179][T13968] R13: 00007fdbc6426038 R14: 00007fdbc6425fa0 R15: 00007ffd31f01c48 [ 565.528207][T13968] [ 565.757631][T13968] Mem-Info: [ 565.757693][T13968] active_anon:11843 inactive_anon:20935 isolated_anon:0 [ 565.757693][T13968] active_file:22324 inactive_file:6888 isolated_file:0 [ 565.757693][T13968] unevictable:0 dirty:345 writeback:0 [ 565.757693][T13968] slab_reclaimable:13600 slab_unreclaimable:106513 [ 565.757693][T13968] mapped:42923 shmem:19007 pagetables:1497 [ 565.757693][T13968] sec_pagetables:0 bounce:0 [ 565.757693][T13968] kernel_misc_reclaimable:0 [ 565.757693][T13968] free:1248070 free_pcp:32784 free_cma:0 [ 565.757749][T13968] Node 0 active_anon:47372kB inactive_anon:83740kB active_file:89288kB inactive_file:27360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171692kB dirty:1380kB writeback:0kB shmem:76028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14208kB pagetables:5832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 565.757806][T13968] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 565.757859][T13968] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.757969][T13968] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 565.758197][T13968] Node 0 DMA32 free:1030164kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47372kB inactive_anon:83740kB active_file:89288kB inactive_file:27360kB unevictable:0kB writepending:1380kB zspages:0kB present:3129332kB managed:2530536kB mlocked:0kB bounce:0kB free_pcp:131136kB local_pcp:112504kB free_cma:0kB [ 565.758287][T13968] lowmem_reserve[]: 0 0 0 0 0 [ 565.758480][T13968] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.971033][T13968] lowmem_reserve[]: 0 0 0 0 0 [ 565.971262][T13968] Node 1 Normal free:3946756kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.971347][T13968] lowmem_reserve[]: 0 0 0 0 0 [ 565.971501][T13968] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 565.972056][T13968] Node 0 DMA32: 1403*4kB (UM) 627*8kB (UME) 281*16kB (UME) 362*32kB (UM) 9*64kB (UM) 279*128kB (UME) 218*256kB (UME) 82*512kB (UME) 17*1024kB (UME) 2*2048kB (U) 207*4096kB (M) = 1030164kB [ 566.184411][T13968] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 566.184914][T13968] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 3*16kB (UM) 6*32kB (UM) 8*64kB (UM) 2*128kB (UM) 3*256kB [ 566.271293][T13961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2612'. [ 566.280300][T13968] (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3946756kB [ 566.280363][T13968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.280377][T13968] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 566.280390][T13968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.280402][T13968] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 566.280415][T13968] 48175 total pagecache pages [ 566.280421][T13968] 10 pages in swap cache [ 566.280431][T13968] Free swap = 124956kB [ 566.280437][T13968] Total swap = 124996kB [ 566.280443][T13968] 2097051 pages RAM [ 566.280448][T13968] 0 pages HighMem/MovableOnly [ 566.280454][T13968] 432783 pages reserved [ 566.280459][T13968] 0 pages cma reserved [ 566.690341][T13979] syzkaller0: entered promiscuous mode [ 566.690361][T13979] syzkaller0: entered allmulticast mode [ 567.134288][T13990] FAULT_INJECTION: forcing a failure. [ 567.134288][T13990] name failslab, interval 1, probability 0, space 0, times 0 [ 567.134318][T13990] CPU: 0 UID: 0 PID: 13990 Comm: syz.5.2641 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.134343][T13990] Tainted: [L]=SOFTLOCKUP [ 567.134349][T13990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 567.134359][T13990] Call Trace: [ 567.134365][T13990] [ 567.134372][T13990] dump_stack_lvl+0x100/0x190 [ 567.134403][T13990] should_fail_ex.cold+0x5/0xa [ 567.134428][T13990] should_failslab+0xc2/0x120 [ 567.134452][T13990] __kmalloc_cache_noprof+0x91/0x6d0 [ 567.134477][T13990] ? proc_init_fs_context+0x329/0x620 [ 567.134503][T13990] ? fscontext_alloc_log+0x4a/0x1b0 [ 567.134526][T13990] fscontext_alloc_log+0x4a/0x1b0 [ 567.134546][T13990] __x64_sys_fsopen+0x159/0x220 [ 567.134568][T13990] do_syscall_64+0x123/0x790 [ 567.134594][T13990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.134614][T13990] RIP: 0033:0x7fa16b39e159 [ 567.134630][T13990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.134647][T13990] RSP: 002b:00007fa1695f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 567.134665][T13990] RAX: ffffffffffffffda RBX: 00007fa16b625fa0 RCX: 00007fa16b39e159 [ 567.134678][T13990] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 567.134690][T13990] RBP: 00007fa16b43503b R08: 0000000000000000 R09: 0000000000000000 [ 567.134702][T13990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.134713][T13990] R13: 00007fa16b626038 R14: 00007fa16b625fa0 R15: 00007fff1d5722b8 [ 567.134740][T13990] [ 568.340023][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2648'. [ 569.264123][T14013] Device name cannot be null; rc = [-22] [ 569.968784][T14024] syzkaller0: entered promiscuous mode [ 569.968805][T14024] syzkaller0: entered allmulticast mode [ 570.784479][T14043] device-mapper: ioctl: Invalid target message parameters. [ 570.998433][T14048] sg_write: data in/out 461547/217 bytes for SCSI command 0x0-- guessing data in; [ 570.998433][T14048] program syz.0.2663 not setting count and/or reply_len properly [ 571.645149][T14050] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2650'. [ 574.133578][T13724] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 574.287416][T13724] usb 7-1: Using ep0 maxpacket: 16 [ 574.287980][T13724] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 574.288835][T13724] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.288856][T13724] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.290593][T13724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.290612][T13724] usb 7-1: Product: syz [ 574.290625][T13724] usb 7-1: Manufacturer: syz [ 574.290639][T13724] usb 7-1: SerialNumber: syz [ 574.394647][T13004] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 574.499597][T14085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.554405][T13004] usb 6-1: unable to get BOS descriptor or descriptor too short [ 574.554442][T13004] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 574.556962][T13004] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.556982][T13004] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.560196][T13004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.560217][T13004] usb 6-1: Product: syz [ 574.560230][T13004] usb 6-1: Manufacturer: syz [ 574.560243][T13004] usb 6-1: SerialNumber: syz [ 574.580111][T13004] usb 6-1: selecting invalid altsetting 1 [ 574.583296][T13004] usb 6-1: unit 6 not found! [ 574.666472][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2668'. [ 574.734537][T13004] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 574.789376][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.842901][ T5707] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 575.707820][ T5707] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 575.708698][ T5707] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 575.709954][ T5707] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 575.711659][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.711680][ T5707] usb 1-1: Product: syz [ 575.711692][ T5707] usb 1-1: Manufacturer: syz [ 575.711706][ T5707] usb 1-1: SerialNumber: syz [ 575.785012][ T5707] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 575.811523][ T5707] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 575.827044][ T5707] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 575.852096][T13724] usb 7-1: USB disconnect, device number 12 [ 575.941595][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.049812][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2672'. [ 576.053027][T14103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.053903][T14103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.153960][T13644] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 577.163630][T13004] usb 6-1: USB disconnect, device number 27 [ 577.185887][T13644] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 577.190442][T13644] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.190481][T13644] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.190506][T13644] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 577.190540][T13644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.249918][T13644] spcp8x5 4-1:1.0: required endpoints missing [ 577.497734][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 577.497969][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 577.498158][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 577.498349][ C1] usb 1-1: ti_interrupt_callback - nonzero urb status, -71 [ 577.498367][ C1] usb 1-1: ti_interrupt_callback - resubmit interrupt urb failed, -19 [ 577.498389][T13644] usb 1-1: USB disconnect, device number 22 [ 577.499803][T14102] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -71 [ 577.499899][T14102] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -19 [ 577.499929][T14102] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -19 [ 577.500011][T14102] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -19 [ 577.615045][T13644] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 577.647074][T13644] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 577.647859][T13644] ti_usb_3410_5052 1-1:2.0: device disconnected [ 577.893675][T14128] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 577.893813][T14128] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 577.893938][T14128] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 577.894062][T14128] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 577.894185][T14128] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 577.894309][T14128] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 577.899017][T14128] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 577.899069][T14128] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 578.922659][T13251] Bluetooth: hci6: connection err: -111 [ 578.993056][T13644] usb 4-1: USB disconnect, device number 33 [ 579.353251][T14146] Device name cannot be null; rc = [-22] [ 579.923397][T13251] Bluetooth: hci2: command 0x0c1a tx timeout [ 579.923428][T13251] Bluetooth: hci5: command 0x0c1a tx timeout [ 579.923771][T13251] Bluetooth: hci4: command 0x0c1a tx timeout [ 579.923793][T13251] Bluetooth: hci3: command 0x0c1a tx timeout [ 579.923813][T13251] Bluetooth: hci1: command 0x0c1a tx timeout [ 579.923833][T13251] Bluetooth: hci0: command 0x0c1a tx timeout [ 579.950390][T14150] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.2692'. [ 579.993231][ T4927] Bluetooth: hci6: command 0x0c1a tx timeout [ 582.078251][ T4927] Bluetooth: hci6: command 0x0c1a tx timeout [ 582.652830][T13644] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 582.803283][T13644] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 582.804884][T13644] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.804921][T13644] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.804946][T13644] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 582.804980][T13644] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.881936][T12007] NFSD: Failed to start, no listeners configured. [ 582.901638][T13644] spcp8x5 8-1:1.0: required endpoints missing [ 583.152708][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2691'. [ 583.274722][T14178] netlink: 'syz.0.2701': attribute type 1 has an invalid length. [ 583.309829][T14178] 8021q: adding VLAN 0 to HW filter on device bond4 [ 583.645877][ T31] audit: type=1326 audit(1789383084.852:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14176 comm="syz.0.2701" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa0af9e159 code=0x0 [ 584.188161][ T31] audit: type=1800 audit(1789383085.392:648): pid=14197 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2705" name=8006 dev="sda1" ino=2049 res=0 errno=0 [ 584.188186][T14197] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 585.228099][T14204] siw: device registration error -23 [ 585.459146][T13644] usb 8-1: USB disconnect, device number 4 [ 585.731047][T14219] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 585.731197][T14219] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 585.731324][T14219] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 585.731453][T14219] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 585.731602][T14219] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 585.731924][T14219] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 585.737709][T14219] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 585.737759][T14219] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 585.739599][ T31] audit: type=1400 audit(1789383086.942:649): avc: denied { getopt } for pid=14217 comm="syz.6.2713" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 586.082816][ T5738] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 586.232655][T14235] syzkaller0: entered promiscuous mode [ 586.232673][T14235] syzkaller0: entered allmulticast mode [ 586.252267][ T5738] usb 8-1: unable to get BOS descriptor or descriptor too short [ 586.252305][ T5738] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 586.269908][ T5738] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.269928][ T5738] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 586.271605][ T5738] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.271624][ T5738] usb 8-1: Product: syz [ 586.271636][ T5738] usb 8-1: Manufacturer: syz [ 586.271648][ T5738] usb 8-1: SerialNumber: syz [ 586.332886][ T5738] usb 8-1: selecting invalid altsetting 1 [ 586.333427][ T5738] usb 8-1: unit 6 not found! [ 586.398551][ T5738] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 586.453065][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.217601][T14206] Set syz1 is full, maxelem 65536 reached [ 587.269264][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2716'. [ 587.270755][T14247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.271105][T14247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.620553][T14251] overlayfs: failed to resolve 'lower1': -2 [ 587.752954][T13251] Bluetooth: hci2: command 0x0c1a tx timeout [ 587.752985][T13251] Bluetooth: hci5: command 0x0c1a tx timeout [ 587.753006][T13251] Bluetooth: hci4: command 0x0c1a tx timeout [ 587.753026][T13251] Bluetooth: hci3: command 0x0c1a tx timeout [ 587.753046][T13251] Bluetooth: hci1: command 0x0c1a tx timeout [ 587.753066][T13251] Bluetooth: hci0: command 0x0c1a tx timeout [ 587.753126][ T4927] Bluetooth: hci6: command 0x0c1a tx timeout [ 588.193215][T13004] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 589.124584][ T5707] usb 8-1: USB disconnect, device number 5 [ 589.153295][T13004] usb 7-1: Using ep0 maxpacket: 16 [ 589.153978][T13004] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 589.156309][T13004] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.156331][T13004] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 589.158049][T13004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.158070][T13004] usb 7-1: Product: syz [ 589.158085][T13004] usb 7-1: Manufacturer: syz [ 589.158098][T13004] usb 7-1: SerialNumber: syz [ 589.500055][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2725'. [ 589.832883][ T4927] Bluetooth: hci6: command 0x0c1a tx timeout [ 590.264351][T14301] FAULT_INJECTION: forcing a failure. [ 590.264351][T14301] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 590.264387][T14301] CPU: 1 UID: 0 PID: 14301 Comm: syz.0.2738 Tainted: G L syzkaller #0 PREEMPT(full) [ 590.264413][T14301] Tainted: [L]=SOFTLOCKUP [ 590.264420][T14301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 590.264431][T14301] Call Trace: [ 590.264437][T14301] [ 590.264445][T14301] dump_stack_lvl+0x100/0x190 [ 590.264476][T14301] should_fail_ex.cold+0x5/0xa [ 590.264499][T14301] ? prepare_alloc_pages+0x16d/0x5b0 [ 590.264526][T14301] should_fail_alloc_page+0xeb/0x140 [ 590.264553][T14301] prepare_alloc_pages+0x1f0/0x5b0 [ 590.264582][T14301] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 590.264607][T14301] ? lock_acquire+0x1d1/0x380 [ 590.264627][T14301] ? is_bpf_text_address+0x25/0x1a0 [ 590.264653][T14301] ? find_held_lock+0x2b/0x80 [ 590.264680][T14301] ? is_bpf_text_address+0x8a/0x1a0 [ 590.264703][T14301] ? is_bpf_text_address+0x8a/0x1a0 [ 590.264728][T14301] ? bpf_ksym_find+0x128/0x1c0 [ 590.264756][T14301] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 590.264776][T14301] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 590.264794][T14301] ? is_bpf_text_address+0x94/0x1a0 [ 590.264822][T14301] ? __kernel_text_address+0xd/0x30 [ 590.264858][T14301] ? unwind_get_return_address+0x59/0xa0 [ 590.264886][T14301] ? arch_stack_walk+0xa6/0xf0 [ 590.264923][T14301] ? __pfx_stack_trace_save+0x10/0x10 [ 590.264943][T14301] ? stack_depot_save_flags+0x27/0x9f0 [ 590.264968][T14301] ? __lock_acquire+0x5c0/0x1f40 [ 590.264989][T14301] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 590.265013][T14301] ? policy_nodemask+0xed/0x4f0 [ 590.265042][T14301] alloc_pages_mpol+0x201/0x550 [ 590.265068][T14301] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 590.265101][T14301] alloc_pages_noprof+0x1a/0x160 [ 590.265133][T14301] get_free_pages_noprof+0x10/0xb0 [ 590.265155][T14301] __kasan_populate_vmalloc+0xa0/0x210 [ 590.265182][T14301] alloc_vmap_area+0x95d/0x2bb0 [ 590.265212][T14301] ? kasan_save_track+0x14/0x30 [ 590.265234][T14301] ? __kasan_kmalloc+0xaa/0xb0 [ 590.265255][T14301] ? __pfx_alloc_vmap_area+0x10/0x10 [ 590.265278][T14301] ? stack_trace_save+0x8e/0xc0 [ 590.265295][T14301] ? __get_vm_area_node+0x124/0x350 [ 590.265321][T14301] __get_vm_area_node+0x1ed/0x350 [ 590.265348][T14301] __vmalloc_node_range_noprof+0x268/0x1420 [ 590.265374][T14301] ? alloc_ldt_struct+0x14f/0x1b0 [ 590.265397][T14301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.265426][T14301] ? alloc_ldt_struct+0x14f/0x1b0 [ 590.265454][T14301] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 590.265489][T14301] ? alloc_ldt_struct+0x14f/0x1b0 [ 590.265512][T14301] __vmalloc_node_noprof+0xad/0xf0 [ 590.265537][T14301] ? alloc_ldt_struct+0x14f/0x1b0 [ 590.265563][T14301] __vmalloc_noprof+0xa3/0x120 [ 590.265587][T14301] ? __pfx___vmalloc_noprof+0x10/0x10 [ 590.265613][T14301] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 590.265642][T14301] ? down_write_killable+0x152/0x240 [ 590.265670][T14301] ? alloc_ldt_struct+0x5d/0x1b0 [ 590.265698][T14301] alloc_ldt_struct+0x14f/0x1b0 [ 590.265722][T14301] write_ldt+0x62b/0xd40 [ 590.265751][T14301] ? __pfx_write_ldt+0x10/0x10 [ 590.265778][T14301] ? xfd_validate_state+0x129/0x190 [ 590.265805][T14301] __x64_sys_modify_ldt+0xb1/0x170 [ 590.265837][T14301] do_syscall_64+0x123/0x790 [ 590.265865][T14301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.265885][T14301] RIP: 0033:0x7ffa0af9e159 [ 590.265901][T14301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.265919][T14301] RSP: 002b:00007ffa0be33028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 590.265938][T14301] RAX: ffffffffffffffda RBX: 00007ffa0b225fa0 RCX: 00007ffa0af9e159 [ 590.265951][T14301] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 590.265963][T14301] RBP: 00007ffa0b03503b R08: 0000000000000000 R09: 0000000000000000 [ 590.265974][T14301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.265985][T14301] R13: 00007ffa0b226038 R14: 00007ffa0b225fa0 R15: 00007fff65f78838 [ 590.266011][T14301] [ 590.266120][T14301] syz.0.2738: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 590.266177][T14301] CPU: 1 UID: 0 PID: 14301 Comm: syz.0.2738 Tainted: G L syzkaller #0 PREEMPT(full) [ 590.266202][T14301] Tainted: [L]=SOFTLOCKUP [ 590.266209][T14301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 590.266220][T14301] Call Trace: [ 590.266226][T14301] [ 590.266233][T14301] dump_stack_lvl+0x100/0x190 [ 590.266263][T14301] warn_alloc.cold+0x9e/0xb2 [ 590.266285][T14301] ? __pfx_warn_alloc+0x10/0x10 [ 590.266314][T14301] ? lockdep_hardirqs_on+0x7d/0x110 [ 590.266340][T14301] ? __get_vm_area_node+0x2f0/0x350 [ 590.266369][T14301] ? __get_vm_area_node+0x22b/0x350 [ 590.266398][T14301] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 590.266423][T14301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.266451][T14301] ? alloc_ldt_struct+0x14f/0x1b0 [ 590.266476][T14301] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 590.266507][T14301] ? alloc_ldt_struct+0x14f/0x1b0 [ 590.266526][T14301] __vmalloc_node_noprof+0xad/0xf0 [ 590.266547][T14301] ? alloc_ldt_struct+0x14f/0x1b0 [ 590.266570][T14301] __vmalloc_noprof+0xa3/0x120 [ 590.266593][T14301] ? __pfx___vmalloc_noprof+0x10/0x10 [ 590.266618][T14301] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 590.266646][T14301] ? down_write_killable+0x152/0x240 [ 590.266673][T14301] ? alloc_ldt_struct+0x5d/0x1b0 [ 590.266701][T14301] alloc_ldt_struct+0x14f/0x1b0 [ 590.266724][T14301] write_ldt+0x62b/0xd40 [ 590.266753][T14301] ? __pfx_write_ldt+0x10/0x10 [ 590.266778][T14301] ? xfd_validate_state+0x129/0x190 [ 590.266806][T14301] __x64_sys_modify_ldt+0xb1/0x170 [ 590.266837][T14301] do_syscall_64+0x123/0x790 [ 590.266865][T14301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.266883][T14301] RIP: 0033:0x7ffa0af9e159 ** replaying previous printk message ** [ 590.266883][T14301] RIP: 0033:0x7ffa0af9e159 [ 590.266898][T14301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.266915][T14301] RSP: 002b:00007ffa0be33028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 590.266933][T14301] RAX: ffffffffffffffda RBX: 00007ffa0b225fa0 RCX: 00007ffa0af9e159 [ 590.266945][T14301] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 590.266956][T14301] RBP: 00007ffa0b03503b R08: 0000000000000000 R09: 0000000000000000 [ 590.266967][T14301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.266978][T14301] R13: 00007ffa0b226038 R14: 00007ffa0b225fa0 R15: 00007fff65f78838 [ 590.267003][T14301] [ 590.323397][T13004] usb 7-1: USB disconnect, device number 13 [ 590.326265][T14301] Mem-Info: [ 590.326276][T14301] active_anon:11886 inactive_anon:12088 isolated_anon:0 [ 590.326276][T14301] active_file:20615 inactive_file:6815 isolated_file:0 [ 590.326276][T14301] unevictable:0 dirty:254 writeback:0 [ 590.326276][T14301] slab_reclaimable:13497 slab_unreclaimable:106707 [ 590.326276][T14301] mapped:49513 shmem:10086 pagetables:1627 [ 590.326276][T14301] sec_pagetables:0 bounce:0 [ 590.326276][T14301] kernel_misc_reclaimable:0 [ 590.326276][T14301] free:1271782 free_pcp:19317 free_cma:0 [ 590.326321][T14301] Node 0 active_anon:47544kB inactive_anon:48352kB active_file:82452kB inactive_file:27068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198052kB dirty:1016kB writeback:0kB shmem:40344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14468kB pagetables:6352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 590.326367][T14301] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 590.326410][T14301] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.326456][T14301] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 590.326485][T14301] Node 0 DMA32 free:1125012kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47544kB inactive_anon:48352kB active_file:82452kB inactive_file:27068kB unevictable:0kB writepending:1016kB zspages:0kB present:3129332kB managed:2530536kB mlocked:0kB bounce:0kB free_pcp:77300kB local_pcp:46720kB free_cma:0kB [ 590.326530][T14301] lowmem_reserve[]: 0 0 0 0 0 [ 590.326555][T14301] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.326594][T14301] lowmem_reserve[]: 0 0 0 0 0 [ 590.326619][T14301] Node 1 Normal free:3946756kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.326663][T14301] lowmem_reserve[]: 0 0 0 0 0 [ 590.326691][T14301] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 590.326792][T14301] Node 0 DMA32: 0*4kB 235*8kB (UME) 1089*16kB (UM) 1464*32kB (UM) 619*64kB (UM) 404*128kB (M) 217*256kB (UME) 83*512kB (UM) 17*1024kB (UME) 2*2048kB (U) 207*4096kB (M) = 1124904kB [ 590.326934][T14301] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 590.327016][T14301] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 3*16kB (UM) 6*32kB (UM) 8*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3946756kB [ 590.327154][T14301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.327168][T14301] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 590.327182][T14301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.327195][T14301] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 590.327208][T14301] 37520 total pagecache pages [ 590.327215][T14301] 8 pages in swap cache [ 590.327221][T14301] Free swap = 124972kB [ 590.327227][T14301] Total swap = 124996kB [ 590.327234][T14301] 2097051 pages RAM [ 590.327240][T14301] 0 pages HighMem/MovableOnly [ 590.646959][T14301] 432783 pages reserved [ 590.646971][T14301] 0 pages cma reserved [ 592.073042][ T32] INFO: task syz.2.2178:12416 blocked for more than 143 seconds. [ 592.073064][ T32] Tainted: G L syzkaller #0 [ 592.073074][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.073081][ T32] task:syz.2.2178 state:D stack:27944 pid:12416 tgid:12414 ppid:5609 task_flags:0x400140 flags:0x00080002 [ 592.073141][ T32] Call Trace: [ 592.073147][ T32] [ 592.073157][ T32] __schedule+0x1259/0x6920 [ 592.073182][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 592.073207][ T32] ? do_raw_spin_lock+0x128/0x260 [ 592.073233][ T32] ? __pfx___schedule+0x10/0x10 [ 592.073253][ T32] ? find_held_lock+0x2b/0x80 [ 592.073279][ T32] ? schedule+0x225/0x2c0 [ 592.073305][ T32] schedule+0xdd/0x2c0 [ 592.073326][ T32] schedule_preempt_disabled+0x13/0x30 [ 592.073347][ T32] __mutex_lock+0xccb/0x1bd0 [ 592.073372][ T32] ? write_ports+0xa5/0xcc0 [ 592.073396][ T32] ? nfsctl_transaction_write+0xcd/0x1a0 [ 592.073418][ T32] ? ksys_write+0x12a/0x250 [ 592.073436][ T32] ? do_syscall_64+0x123/0x790 [ 592.073463][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 592.073500][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 592.073524][ T32] ? write_ports+0xa5/0xcc0 [ 592.073545][ T32] write_ports+0xa5/0xcc0 [ 592.073569][ T32] ? __pfx_write_ports+0x10/0x10 [ 592.073592][ T32] ? lock_acquire+0x1d1/0x380 [ 592.073611][ T32] ? __might_fault+0xc5/0x140 [ 592.073638][ T32] ? find_held_lock+0x2b/0x80 [ 592.073661][ T32] ? __might_fault+0xc5/0x140 [ 592.073686][ T32] ? __might_fault+0xc5/0x140 [ 592.073714][ T32] ? __pfx_write_ports+0x10/0x10 [ 592.073739][ T32] ? _copy_from_user+0x59/0xd0 [ 592.073762][ T32] ? __pfx_write_ports+0x10/0x10 [ 592.073784][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 592.073808][ T32] vfs_write+0x2aa/0x1050 [ 592.073833][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 592.073855][ T32] ? lock_acquire+0x1d1/0x380 [ 592.073873][ T32] ? __fget_files+0x34/0x3d0 [ 592.073896][ T32] ? __pfx_vfs_write+0x10/0x10 [ 592.073913][ T32] ? find_held_lock+0x2b/0x80 [ 592.073939][ T32] ? __fget_files+0x215/0x3d0 [ 592.073966][ T32] ? __fget_files+0x21f/0x3d0 [ 592.073995][ T32] ksys_write+0x12a/0x250 [ 592.074013][ T32] ? __pfx_ksys_write+0x10/0x10 [ 592.074039][ T32] do_syscall_64+0x123/0x790 [ 592.074066][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.074085][ T32] RIP: 0033:0x7f8481f9e159 [ 592.074100][ T32] RSP: 002b:00007f84801f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 592.074118][ T32] RAX: ffffffffffffffda RBX: 00007f8482225fa0 RCX: 00007f8481f9e159 [ 592.074130][ T32] RDX: 0000000000000003 RSI: 00002000000000c0 RDI: 0000000000000003 [ 592.074141][ T32] RBP: 00007f848203503b R08: 0000000000000000 R09: 0000000000000000 [ 592.074152][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.074162][ T32] R13: 00007f8482226038 R14: 00007f8482225fa0 R15: 00007ffc8d9fe288 [ 592.074188][ T32] [ 592.074207][ T32] [ 592.074207][ T32] Showing all locks held in the system: [ 592.074215][ T32] locks held by pr/ttyS0/16: 1, last CPU#1: [ 592.074227][ T32] #0: ffffffff8edd8738 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 592.074276][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 592.074289][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 592.094944][ T32] locks held by kworker/u8:7/1013: 2, on CPU#1: [ 592.094956][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 592.095004][ T32] #1: ffffc90004c2fd08 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 592.095048][ T32] locks held by kworker/u8:8/1038: 2, on CPU#0: [ 592.095060][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 592.095109][ T32] #1: ffffc90004bbfd08 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 592.095174][ T32] locks held by getty/5365: 2, on CPU#1: [ 592.095186][ T32] #0: ffff8880384420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 592.095228][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 592.095290][ T32] locks held by syz-executor/5607: 2, last CPU#0: [ 592.095302][ T32] #0: ffff888032a4c460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 592.095361][ T32] #1: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 592.095411][ T32] locks held by syz-executor/5614: 2, last CPU#1: [ 592.095424][ T32] #0: ffff88807cf50460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 592.095475][ T32] #1: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: find_lock_entries+0x10f/0x1190 [ 592.095533][ T32] locks held by syz.1.2064/12007: 3, on CPU#1: [ 592.095547][ T32] #0: ffff88807418a9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 592.095594][ T32] #1: ffff888051418460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 592.095639][ T32] #2: ffffffff8f289400 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 592.095688][ T32] locks held by syz.2.2178/12416: 3, on CPU#1: [ 592.095701][ T32] #0: ffff88807d824ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 592.095747][ T32] #1: ffff88807f0f0460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 592.095793][ T32] #2: ffffffff8f289400 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 592.095851][ T32] locks held by kworker/1:1/13644: 2, last CPU#1: [ 592.095864][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 592.095914][ T32] #1: ffffc9000df8fd08 ((work_completion)(&p->wq)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 592.095965][ T32] locks held by syz.5.2683/14115: 3, on CPU#1: [ 592.095977][ T32] #0: ffff88807a375cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 592.096025][ T32] #1: ffff88801c108460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 592.096069][ T32] #2: ffffffff8f289400 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 592.096115][ T32] locks held by syz.7.2742/14309: 2, last CPU#1: [ 592.096128][ T32] #0: ffff8880377f5038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 592.096172][ T32] #1: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 592.096217][ T32] [ 592.096222][ T32] ============================================= [ 592.096222][ T32] [ 592.096229][ T32] NMI backtrace for cpu 0 [ 592.096242][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 592.096267][ T32] Tainted: [L]=SOFTLOCKUP [ 592.096273][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 592.096284][ T32] Call Trace: [ 592.096290][ T32] [ 592.096297][ T32] dump_stack_lvl+0x100/0x190 [ 592.096332][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 592.096361][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 592.096382][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 592.096405][ T32] sys_info+0x141/0x190 [ 592.096422][ T32] watchdog+0xcb1/0x1030 [ 592.096448][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 592.096470][ T32] ? __pfx_watchdog+0x10/0x10 [ 592.096491][ T32] ? __kthread_parkme+0x18f/0x230 [ 592.096516][ T32] ? kthread+0x13a/0x450 [ 592.096539][ T32] ? __pfx_watchdog+0x10/0x10 [ 592.096557][ T32] kthread+0x373/0x450 [ 592.096578][ T32] ? __pfx_kthread+0x10/0x10 [ 592.096602][ T32] ret_from_fork+0x730/0xd60 [ 592.096620][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 592.096640][ T32] ? __switch_to+0x800/0x10f0 [ 592.096661][ T32] ? __pfx_kthread+0x10/0x10 [ 592.096684][ T32] ret_from_fork_asm+0x1a/0x30 [ 592.096711][ T32] [ 592.096728][ T32] Sending NMI from CPU 0 to CPUs 1: [ 592.096747][ C1] NMI backtrace for cpu 1 [ 592.096759][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.096778][ C1] Tainted: [L]=SOFTLOCKUP [ 592.096782][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 592.096790][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 592.096807][ C1] Code: 4d 5b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 88 8e ce fc eb a2 e8 11 8f [ 592.096820][ C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 592.096837][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 592.096846][ C1] RDX: 00000000000003fd RSI: ffffffff85b0c7d0 RDI: ffffffff9bc6bca0 [ 592.096855][ C1] RBP: ffffffff9bc6bc60 R08: 0000000000000001 R09: 000000000000001f [ 592.096864][ C1] R10: 0000000000000000 R11: 205d313033343154 R12: 0000000000000000 [ 592.096872][ C1] R13: 0000000000000020 R14: fffffbfff378d7e9 R15: dffffc0000000000 [ 592.096881][ C1] FS: 0000000000000000(0000) GS:ffff888123c59000(0000) knlGS:0000000000000000 [ 592.096895][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.096905][ C1] CR2: 00007ffa0af87780 CR3: 000000000eb96000 CR4: 00000000003526f0 [ 592.096914][ C1] Call Trace: [ 592.096918][ C1] [ 592.096924][ C1] wait_for_lsr+0x13a/0x210 [ 592.096941][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 592.096959][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 592.096975][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 592.096990][ C1] serial8250_console_write+0xf46/0x1330 [ 592.097010][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 592.097028][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 592.097050][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 592.097073][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 592.097088][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 592.097101][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 592.097120][ C1] ? do_raw_spin_lock+0xb0/0x260 [ 592.097139][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 592.097156][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 592.097172][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 592.097185][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 592.097200][ C1] nbcon_kthread_func+0x613/0x7d0 [ 592.097214][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 592.097229][ C1] ? __kthread_parkme+0x18f/0x230 [ 592.097245][ C1] ? kthread+0x13a/0x450 [ 592.097262][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 592.097275][ C1] kthread+0x373/0x450 [ 592.097291][ C1] ? __pfx_kthread+0x10/0x10 [ 592.097309][ C1] ret_from_fork+0x730/0xd60 [ 592.097323][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 592.097339][ C1] ? __switch_to+0x800/0x10f0 [ 592.097356][ C1] ? __pfx_kthread+0x10/0x10 [ 592.097374][ C1] ret_from_fork_asm+0x1a/0x30 [ 592.097392][ C1] [ 592.099918][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 593.600370][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 593.611033][ T32] Tainted: [L]=SOFTLOCKUP [ 593.615345][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 593.625387][ T32] Call Trace: [ 593.628652][ T32] [ 593.631573][ T32] dump_stack_lvl+0x100/0x190 [ 593.636241][ T32] vpanic+0x553/0x970 [ 593.640207][ T32] ? __pfx_vpanic+0x10/0x10 [ 593.644708][ T32] panic+0xd1/0xe0 [ 593.648417][ T32] ? __pfx_panic+0x10/0x10 [ 593.652821][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 593.658966][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 593.665102][ T32] ? watchdog.cold+0x1ec/0x234 [ 593.669860][ T32] watchdog.cold+0x1fd/0x234 [ 593.674445][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 593.680240][ T32] ? __pfx_watchdog+0x10/0x10 [ 593.684912][ T32] ? __kthread_parkme+0x18f/0x230 [ 593.689933][ T32] ? kthread+0x13a/0x450 [ 593.694162][ T32] ? __pfx_watchdog+0x10/0x10 [ 593.698830][ T32] kthread+0x373/0x450 [ 593.702896][ T32] ? __pfx_kthread+0x10/0x10 [ 593.707480][ T32] ret_from_fork+0x730/0xd60 [ 593.712056][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 593.717160][ T32] ? __switch_to+0x800/0x10f0 [ 593.721823][ T32] ? __pfx_kthread+0x10/0x10 [ 593.726415][ T32] ret_from_fork_asm+0x1a/0x30 [ 593.731176][ T32] [ 593.734364][ T32] Kernel Offset: disabled [ 593.738663][ T32] Rebooting in 86400 seconds..