last executing test programs: 14m38.792054181s ago: executing program 0 (id=618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/165, 0xa5, 0x1, 0x0}, &(0x7f0000000180)=0x22) 14m30.266782138s ago: executing program 0 (id=635): openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 14m30.113486071s ago: executing program 0 (id=637): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e040a260c"], 0x7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 14m28.783653401s ago: executing program 0 (id=638): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 14m27.30777132s ago: executing program 0 (id=640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xccd02, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = dup(r3) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) chdir(0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) listen(0xffffffffffffffff, 0x0) 14m19.87345995s ago: executing program 0 (id=652): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 14m4.040652576s ago: executing program 32 (id=652): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 11m59.927638293s ago: executing program 4 (id=820): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffbfff, 0x1, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0xffc, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xc07, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x15a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x8000, 0x10000000, 0x146, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r7, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @remote, 0x4}, 0x1c) socket(0x1d, 0x3, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae5", 0x2aa, r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) 11m54.606727134s ago: executing program 4 (id=826): getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000400)={0x3d, 0xb804, 0x6}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{@quota}]}) 11m52.913505794s ago: executing program 4 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187013, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3eaa0000000000007910b8000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) write(r4, &(0x7f0000000400)='!*:', 0x3) 11m47.581838359s ago: executing program 4 (id=833): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd8ed, 0x0, 0x2, 0x156}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) unshare(0x24020400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000100)={0x0, 0x2}) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r6, &(0x7f00000057c0)="25ae84d5f4b8b24f39e37535d26895bbc335d98fe2a8ab74038a901607cbb1442e3bb54bf9e81ce3b18df758c807a94f60aa40b7a34929adf477dac518c67731", 0x40) 11m41.088452032s ago: executing program 4 (id=839): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 11m39.420312168s ago: executing program 4 (id=841): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x3, 0x1001, 0x0, 0x0, 0x0, 0xc000}) r2 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000080)={0x1, @output={0x0, 0x0, {0xfe}, 0x0, 0xfd3}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x3c}, @TCA_CAKE_RTT={0x8, 0x7, 0x8}]}}]}, 0x44}}, 0x800) r6 = syz_open_dev$video(&(0x7f0000000000), 0x48b, 0x40800) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000380)=@mmap={0xe1, 0x8, 0x4, 0x2, 0xdc, {0x77359400}, {0x3, 0xb, 0x5f, 0x6c, 0x8, 0x2, "65dbfabd"}, 0xf5c5, 0x1, {}, 0x6}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000880)=""/103, 0x67, 0x18) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), r9, 0x0, 0x1, 0x4}}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r11, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x20, 0x70bd29, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4) 11m23.475234922s ago: executing program 33 (id=841): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x3, 0x1001, 0x0, 0x0, 0x0, 0xc000}) r2 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000080)={0x1, @output={0x0, 0x0, {0xfe}, 0x0, 0xfd3}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x3c}, @TCA_CAKE_RTT={0x8, 0x7, 0x8}]}}]}, 0x44}}, 0x800) r6 = syz_open_dev$video(&(0x7f0000000000), 0x48b, 0x40800) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000380)=@mmap={0xe1, 0x8, 0x4, 0x2, 0xdc, {0x77359400}, {0x3, 0xb, 0x5f, 0x6c, 0x8, 0x2, "65dbfabd"}, 0xf5c5, 0x1, {}, 0x6}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000880)=""/103, 0x67, 0x18) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), r9, 0x0, 0x1, 0x4}}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r11, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x20, 0x70bd29, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1m11.973925756s ago: executing program 3 (id=2082): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='0x1d6b', 0x6) 1m11.422532287s ago: executing program 3 (id=2087): ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 1m11.139530201s ago: executing program 3 (id=2089): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-XwwX\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0x5, 0x800000}) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1m10.78950964s ago: executing program 3 (id=2092): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) getpgid(r0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x810, r1, 0x108000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x4, 0x1, 0x5, 0x5360, 0x7}, 0x8, 0x5, 0xab2e, 0x0, 0x400001, 0x101, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0xa, 0x3, 0x87) sendto(r2, &(0x7f00000003c0)="e1118ce4769b", 0x6, 0x800, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m10.610014491s ago: executing program 3 (id=2094): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=', 0x5) 1m10.570120155s ago: executing program 3 (id=2095): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2', 0x5) 55.089197141s ago: executing program 34 (id=2095): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tcp 2', 0x5) 6.574843589s ago: executing program 7 (id=2367): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x7) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f00000001c0)) 6.123653203s ago: executing program 7 (id=2372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x2, 0x0, 0x108, 0x0}, {0x1, 0x0, 0x27a6, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x6ea1b2336c7fc070, 0x0, 0x200007f, 0x0}, {0x2, 0x0, 0x85a2, 0x0}, {0x1, 0x0, 0xa, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x80000001, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x3f, 0x0}, {0x3, 0x0, 0xd09f, 0x0}]}) 5.445605377s ago: executing program 7 (id=2378): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x123e02, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 5.390239991s ago: executing program 5 (id=2379): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 4.595293355s ago: executing program 7 (id=2382): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) eventfd(0x0) 4.01737875s ago: executing program 7 (id=2386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) 3.162521057s ago: executing program 5 (id=2388): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_madvise(r1, 0x0, 0x0, 0xc, 0x0) 3.102127721s ago: executing program 7 (id=2389): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200f05"], 0x0, 0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20) syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 2.859838488s ago: executing program 5 (id=2393): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}}) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) getgroups(0xfffffffffffffd80, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x3, r7, 0x3, 0x80000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x5421, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x51) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) close(r9) 2.200508929s ago: executing program 1 (id=2398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.028371814s ago: executing program 6 (id=2400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [{0xc0010141, 0x0, 0xfffffffffffffffd}, {0x229}]}) 1.845616898s ago: executing program 1 (id=2401): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 1.753091322s ago: executing program 1 (id=2404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000000, 0x9, 0x5, 0x1, 0x8, 0xfffff8b8, 0x7}]}) 1.698122941s ago: executing program 5 (id=2405): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x1f, 0x1, 0x32}) 1.668878999s ago: executing program 6 (id=2406): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) 1.461770639s ago: executing program 6 (id=2408): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x4, 0x7, 0xe, 0x5, 0x11, "3e0000000100"}) 1.346587431s ago: executing program 6 (id=2410): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="0200000103000000", 0x8) 1.307152817s ago: executing program 1 (id=2411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.262147775s ago: executing program 2 (id=2412): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/tcp_fastopen\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='10', 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 1.23139678s ago: executing program 2 (id=2413): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 1.202516268s ago: executing program 5 (id=2414): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='./mnt\x00', 0x0, 0x0) 1.187404675s ago: executing program 6 (id=2415): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}}) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r4, 0x402, 0xd) getgroups(0xfffffffffffffd80, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x3, r7, 0x3, 0x80000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x5421, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x51) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) close(r9) 1.012353563s ago: executing program 1 (id=2416): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './mnt/file0', [], 0xa, "c2bc5dfb33c2199b3febec6003b6ac1d07388becfecc8163b0b3567218ca093586ce717188bef0ba"}, 0x37) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 1.010450174s ago: executing program 5 (id=2417): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a905f070900be0083000000"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 960.178331ms ago: executing program 1 (id=2418): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) writev(0xffffffffffffffff, 0x0, 0x0) close(0x3) 508.408073ms ago: executing program 2 (id=2419): mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/config.gz\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r0, &(0x7f0000000600), 0x1000) 342.831346ms ago: executing program 2 (id=2420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xf}, {0x400000b1, 0x0, 0x4000000000000008}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 189.730839ms ago: executing program 2 (id=2421): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) 108.22246ms ago: executing program 6 (id=2422): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 0s ago: executing program 2 (id=2423): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0x7ff, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) io_setup(0x205, &(0x7f0000002500)=0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_getevents(r0, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}) kernel console output (not intermixed with test programs): ve_0): Releasing backup interface [ 857.574978][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.675701][ T1460] bond0 (unregistering): Released all slaves [ 858.246883][T10673] netlink: 564 bytes leftover after parsing attributes in process `syz.2.1168'. [ 858.663728][T10397] hsr_slave_0: entered promiscuous mode [ 858.665196][T10397] hsr_slave_1: entered promiscuous mode [ 858.666306][T10397] debugfs: 'hsr0' already exists in 'hsr' [ 858.666332][T10397] Cannot create hsr debugfs directory [ 863.278885][T10693] Can't find a SQUASHFS superblock on nullb0 [ 863.673203][ T1460] hsr_slave_0: left promiscuous mode [ 863.722222][ T1460] hsr_slave_1: left promiscuous mode [ 863.723575][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.763343][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.632475][T10717] 9p: Bad value for 'rfdno' [ 865.729375][T10717] fuse: Bad value for 'fd' [ 866.040038][T10628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 866.090905][T10628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 866.109047][T10628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 866.110271][T10628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 866.134260][T10628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 866.512931][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 866.614733][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 868.372329][ T5594] Bluetooth: hci1: command tx timeout [ 869.086750][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 869.134288][T10625] lo speed is unknown, defaulting to 1000 [ 869.158204][T10748] capability: warning: `syz.3.1179' uses 32-bit capabilities (legacy support in use) [ 869.188603][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 869.313621][T10748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.412756][T10758] sctp: [Deprecated]: syz.2.1180 (pid 10758) Use of int in max_burst socket option deprecated. [ 869.412756][T10758] Use struct sctp_assoc_value instead [ 869.696554][T10751] netlink: 'syz.1.1176': attribute type 10 has an invalid length. [ 869.700339][T10751] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.700654][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.981794][T10751] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.013850][T10751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.014277][T10751] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.014613][T10751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.117018][T10751] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 870.299896][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.299983][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.452524][ T5594] Bluetooth: hci1: command tx timeout [ 871.946021][T10771] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 872.535472][ T5594] Bluetooth: hci1: command tx timeout [ 872.548691][T10718] lo speed is unknown, defaulting to 1000 [ 872.611646][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 874.612683][ T5594] Bluetooth: hci1: command tx timeout [ 876.898365][T10821] autofs: Unknown parameter 'dns_resolver' [ 878.457183][ T9220] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 878.625173][ T9220] usb 2-1: device descriptor read/64, error -71 [ 879.066408][ T9220] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 879.205230][ T9220] usb 2-1: device descriptor read/64, error -71 [ 879.324869][ T9220] usb usb2-port1: attempt power cycle [ 879.793243][ T9220] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 880.033182][ T9220] usb 2-1: device not accepting address 17, error -71 [ 880.529884][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 881.697376][T10718] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.697612][T10718] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.697834][T10718] bridge_slave_0: entered allmulticast mode [ 881.700838][T10718] bridge_slave_0: entered promiscuous mode [ 881.763147][T10718] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.763302][T10718] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.763530][T10718] bridge_slave_1: entered allmulticast mode [ 881.767098][T10718] bridge_slave_1: entered promiscuous mode [ 881.911232][T10718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.966609][T10718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.667493][T10879] autofs: Unknown parameter 'dns_resolver' [ 887.814266][ T5594] Bluetooth: hci3: unexpected event for opcode 0x203d [ 888.131273][T10902] binder: 10894:10902 ioctl c0306201 200000000080 returned -14 [ 888.155010][T10902] binder: BINDER_SET_CONTEXT_MGR already set [ 888.155075][T10902] binder: 10894:10902 ioctl 4018620d 200000000040 returned -16 [ 890.228081][T10909] autofs: Unknown parameter 'dns_resolver' [ 890.269302][T10625] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.269463][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.269682][T10625] bridge_slave_0: entered allmulticast mode [ 890.284061][T10625] bridge_slave_0: entered promiscuous mode [ 891.795388][T10718] team0: Port device team_slave_0 added [ 891.799623][T10625] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.799768][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.800004][T10625] bridge_slave_1: entered allmulticast mode [ 891.839247][T10625] bridge_slave_1: entered promiscuous mode [ 891.979265][T10718] team0: Port device team_slave_1 added [ 893.647443][ T38] audit: type=1800 audit(1789362637.714:91): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.3.1208" name="/" dev="sockfs" ino=28472 res=0 errno=0 [ 894.682970][T10625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.689537][T10718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.689563][T10718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.689596][T10718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.764471][T10625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.765755][T10718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.765773][T10718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.765805][T10718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.441402][ T5247] 8021q: adding VLAN 0 to HW filter on device eth11 [ 895.463990][T10625] team0: Port device team_slave_0 added [ 895.539193][T10625] team0: Port device team_slave_1 added [ 895.763666][T10718] hsr_slave_0: entered promiscuous mode [ 895.765506][T10718] hsr_slave_1: entered promiscuous mode [ 897.148523][T10718] debugfs: 'hsr0' already exists in 'hsr' [ 897.247947][T10718] Cannot create hsr debugfs directory [ 897.564798][T10625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.564818][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.564843][T10625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.644732][T10625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.644793][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.644877][T10625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.213676][ T38] audit: type=1800 audit(1789362642.184:92): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1211" name="syzkaller0" dev="sda1" ino=2054 res=0 errno=0 [ 899.783615][T10625] hsr_slave_0: entered promiscuous mode [ 899.786160][T10625] hsr_slave_1: entered promiscuous mode [ 899.786789][T10625] debugfs: 'hsr0' already exists in 'hsr' [ 899.786807][T10625] Cannot create hsr debugfs directory [ 900.243873][T10967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1215'. [ 901.604456][T10961] overlay: Unknown parameter '/' [ 901.663033][T10963] overlayfs: missing 'workdir' [ 903.008923][T10981] autofs: Unknown parameter 'dns_resolver' [ 904.161590][T11001] binder: BINDER_SET_CONTEXT_MGR already set [ 904.161640][T11001] binder: 10991:11001 ioctl 4018620d 200000000040 returned -16 [ 905.606885][T11004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.756579][ T5247] 8021q: adding VLAN 0 to HW filter on device eth12 [ 906.408207][T10628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 906.504504][T10628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 906.509021][T10628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 906.554084][T10628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 906.558102][T10628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 906.877987][ T1460] bridge_slave_1: left allmulticast mode [ 906.878042][ T1460] bridge_slave_1: left promiscuous mode [ 906.878335][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.103238][ T38] audit: type=1326 audit(1789362651.244:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11023 comm="syz.3.1223" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff88e36e159 code=0x0 [ 907.210505][ T13] IPVS: starting estimator thread 0... [ 907.236185][ T1460] bridge_slave_0: left allmulticast mode [ 907.236215][ T1460] bridge_slave_0: left promiscuous mode [ 907.238704][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.302967][T11033] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1225'. [ 907.322250][T11031] IPVS: using max 9 ests per chain, 21600 per kthread [ 907.494299][T11038] forcing mempool usage for swap_add_folio+0x489/0xb40 [ 908.712653][ T1460] bridge_slave_1: left allmulticast mode [ 908.712700][ T1460] bridge_slave_1: left promiscuous mode [ 908.713021][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.083432][ T5594] Bluetooth: hci4: command tx timeout [ 909.989498][ T1460] bridge_slave_0: left allmulticast mode [ 909.989539][ T1460] bridge_slave_0: left promiscuous mode [ 909.989783][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.662962][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.723133][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.770639][ T1460] bond0 (unregistering): Released all slaves [ 911.102683][ T5594] Bluetooth: hci4: command tx timeout [ 911.868670][T11057] syz.2.1230 (11057): drop_caches: 2 [ 912.416020][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.463158][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.514567][ T1460] bond0 (unregistering): Released all slaves [ 913.172148][ T5594] Bluetooth: hci4: command tx timeout [ 915.320614][ T5594] Bluetooth: hci4: command tx timeout [ 916.715935][T11076] overlay: Unknown parameter 'fsmagic' [ 916.942077][ T1000] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 917.099048][ T1000] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 917.119129][ T1000] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 917.119162][ T1000] usb 2-1: config 0 has no interface number 0 [ 917.119215][ T1000] usb 2-1: config 0 interface 41 has no altsetting 0 [ 917.160483][ T1000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.160517][ T1000] usb 2-1: Product: syz [ 917.160534][ T1000] usb 2-1: Manufacturer: syz [ 917.160551][ T1000] usb 2-1: SerialNumber: syz [ 917.204674][ T1000] usb 2-1: config 0 descriptor?? [ 917.425684][ T1000] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 917.478152][ T1000] usb 2-1: USB disconnect, device number 19 [ 918.539282][T11098] syz.2.1239 (11098): drop_caches: 2 [ 923.736077][T11130] FAULT_INJECTION: forcing a failure. [ 923.736077][T11130] name failslab, interval 1, probability 1, space 0, times 0 [ 923.736124][T11130] CPU: 1 UID: 0 PID: 11130 Comm: syz.2.1245 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 923.736158][T11130] Tainted: [L]=SOFTLOCKUP [ 923.736168][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 923.736183][T11130] Call Trace: [ 923.736192][T11130] [ 923.736202][T11130] dump_stack_lvl+0xe8/0x150 [ 923.736244][T11130] should_fail_ex+0x46b/0x600 [ 923.736277][T11130] ? __d_alloc+0x37/0x6f0 [ 923.736307][T11130] should_failslab+0xa8/0x100 [ 923.736346][T11130] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 923.736381][T11130] ? __d_alloc+0x37/0x6f0 [ 923.736414][T11130] __d_alloc+0x37/0x6f0 [ 923.736448][T11130] d_alloc_pseudo+0x21/0xc0 [ 923.736477][T11130] alloc_path_pseudo+0x107/0x220 [ 923.736517][T11130] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 923.736552][T11130] ? rt_spin_lock+0x1e2/0x400 [ 923.736589][T11130] alloc_file_pseudo+0xa8/0x1e0 [ 923.736629][T11130] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 923.736669][T11130] ? alloc_fd+0x654/0x6d0 [ 923.736698][T11130] sock_alloc_file+0xb8/0x2f0 [ 923.736805][T11130] ? __sys_socket+0x12b/0x1b0 [ 923.736839][T11130] __sys_socket+0x13f/0x1b0 [ 923.736876][T11130] __x64_sys_socket+0x7a/0x90 [ 923.736910][T11130] do_syscall_64+0x166/0x520 [ 923.736943][T11130] ? trace_irq_disable+0x3b/0x140 [ 923.736974][T11130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.736998][T11130] ? clear_bhb_loop+0x70/0xc0 [ 923.737027][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.737051][T11130] RIP: 0033:0x7f5ec744e159 [ 923.737074][T11130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.737094][T11130] RSP: 002b:00007f5ec56a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 923.737121][T11130] RAX: ffffffffffffffda RBX: 00007f5ec76d5fa0 RCX: 00007f5ec744e159 [ 923.737138][T11130] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 923.737154][T11130] RBP: 00007f5ec74e503b R08: 0000000000000000 R09: 0000000000000000 [ 923.737169][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.737184][T11130] R13: 00007f5ec76d6038 R14: 00007f5ec76d5fa0 R15: 00007ffc66f98a18 [ 923.737221][T11130] [ 926.462146][ T9220] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 926.471484][T11014] lo speed is unknown, defaulting to 1000 [ 926.604908][T10628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 926.686354][T10628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 926.721187][T10628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 926.751652][T10628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 926.769566][T10628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 926.775700][ T9220] usb 2-1: unable to get BOS descriptor or descriptor too short [ 926.775760][ T9220] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 926.782941][ T9220] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7 [ 926.786012][ T9220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.786042][ T9220] usb 2-1: Product: syz [ 926.786058][ T9220] usb 2-1: Manufacturer: syz [ 926.786075][ T9220] usb 2-1: SerialNumber: syz [ 927.324409][ T9220] usb 2-1: unit 1 not found! [ 927.324512][ T9220] usb 2-1: unit 8 not found! [ 929.380917][T10628] Bluetooth: hci5: command tx timeout [ 930.863957][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 930.970104][ T9220] usb 2-1: USB disconnect, device number 20 [ 931.128164][ T1460] hsr_slave_0: left promiscuous mode [ 931.234128][ T1460] hsr_slave_1: left promiscuous mode [ 931.372179][T11174] Bluetooth: ISO socket layer initialized [ 931.529212][T10628] Bluetooth: hci5: command tx timeout [ 931.838966][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.839580][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.714502][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.756980][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.787671][T11138] udevd[11138]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 932.824928][T11180] FAULT_INJECTION: forcing a failure. [ 932.824928][T11180] name failslab, interval 1, probability 1, space 0, times 0 [ 932.824970][T11180] CPU: 1 UID: 0 PID: 11180 Comm: syz.3.1254 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 932.825004][T11180] Tainted: [L]=SOFTLOCKUP [ 932.825012][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 932.825027][T11180] Call Trace: [ 932.825036][T11180] [ 932.825047][T11180] dump_stack_lvl+0xe8/0x150 [ 932.825089][T11180] should_fail_ex+0x46b/0x600 [ 932.825127][T11180] should_failslab+0xa8/0x100 [ 932.825163][T11180] ? vm_area_dup+0x28/0x750 [ 932.825197][T11180] kmem_cache_alloc_noprof+0x9e/0x690 [ 932.825228][T11180] ? vm_area_dup+0x28/0x750 [ 932.825269][T11180] vm_area_dup+0x28/0x750 [ 932.825300][T11180] ? __split_vma+0x1b7/0xa00 [ 932.825329][T11180] __split_vma+0x1d7/0xa00 [ 932.825356][T11180] ? finish_task_switch+0x40e/0xc60 [ 932.825384][T11180] ? lockdep_hardirqs_on+0x7b/0x110 [ 932.825500][T11180] ? __pfx___split_vma+0x10/0x10 [ 932.825535][T11180] ? __lock_acquire+0x747/0x2de0 [ 932.825585][T11180] vma_modify+0x8b7/0x2060 [ 932.825639][T11180] vma_modify_flags+0x2a4/0x3c0 [ 932.825680][T11180] ? __pfx_vma_modify_flags+0x10/0x10 [ 932.825732][T11180] ? __futex_wait+0x35a/0x410 [ 932.825774][T11180] mlock_fixup+0x40f/0x940 [ 932.825808][T11180] ? __pfx_mlock_fixup+0x10/0x10 [ 932.825836][T11180] ? mas_find+0x6d9/0xcb0 [ 932.825910][T11180] apply_vma_lock_flags+0x350/0x4a0 [ 932.825943][T11180] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 932.825990][T11180] ? do_mlock+0x169/0x730 [ 932.826016][T11180] do_mlock+0x54d/0x730 [ 932.826039][T11180] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 932.826073][T11180] ? __pfx_do_mlock+0x10/0x10 [ 932.826102][T11180] ? ksys_write+0x248/0x270 [ 932.826129][T11180] ? __pfx___se_sys_futex+0x10/0x10 [ 932.826153][T11180] ? __pfx_ksys_write+0x10/0x10 [ 932.826187][T11180] __x64_sys_mlock+0x77/0xa0 [ 932.826211][T11180] do_syscall_64+0x166/0x520 [ 932.826242][T11180] ? trace_irq_disable+0x3b/0x140 [ 932.826271][T11180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.826295][T11180] ? clear_bhb_loop+0x70/0xc0 [ 932.826323][T11180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.826345][T11180] RIP: 0033:0x7ff88e36e159 [ 932.826369][T11180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.826390][T11180] RSP: 002b:00007ff88c5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 932.826416][T11180] RAX: ffffffffffffffda RBX: 00007ff88e5f5fa0 RCX: 00007ff88e36e159 [ 932.826434][T11180] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 932.826451][T11180] RBP: 00007ff88e40503b R08: 0000000000000000 R09: 0000000000000000 [ 932.826467][T11180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.826482][T11180] R13: 00007ff88e5f6038 R14: 00007ff88e5f5fa0 R15: 00007ffc3294b788 [ 932.826519][T11180] [ 933.578940][T10628] Bluetooth: hci5: command tx timeout [ 934.427112][T11189] syz.1.1256 (11189): drop_caches: 2 [ 935.239322][ T1460] hsr_slave_0: left promiscuous mode [ 935.273646][ T1460] hsr_slave_1: left promiscuous mode [ 935.274949][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.301626][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.592209][ T9220] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 935.713110][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 935.732027][T10628] Bluetooth: hci5: command tx timeout [ 935.756245][ T9220] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 935.757585][ T9220] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.757652][ T9220] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 935.760365][ T9220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.760386][ T9220] usb 2-1: Product: syz [ 935.760399][ T9220] usb 2-1: Manufacturer: syz [ 935.760411][ T9220] usb 2-1: SerialNumber: syz [ 935.816568][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 935.874335][ T9220] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 935.876560][ T9220] gspca_mr97310a: reg write [21] error -8 [ 935.876833][ T9220] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -8 [ 936.084733][ T5708] usb 2-1: USB disconnect, device number 21 [ 938.833428][T11229] syz.1.1269 (11229): drop_caches: 2 [ 939.649814][T11227] UBIFS error (pid: 11227): cannot open "ubi0:testvol", error -19 [ 940.123283][ T5708] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 940.272055][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 940.288117][ T5708] usb 2-1: unable to get BOS descriptor or descriptor too short [ 940.288180][ T5708] usb 2-1: New USB device found, idVendor=238b, idProduct=c9bf, bcdDevice=1a.42 [ 940.290379][ T5708] usb 2-1: config 3 has an invalid interface number: 130 but max is 0 [ 940.290408][ T5708] usb 2-1: config 3 has no interface number 0 [ 940.290442][ T5708] usb 2-1: config 3 interface 130 has no altsetting 0 [ 940.333904][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.333935][ T5708] usb 2-1: Product: syz [ 940.333952][ T5708] usb 2-1: Manufacturer: syz [ 940.333969][ T5708] usb 2-1: SerialNumber: syz [ 940.432993][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 940.503287][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 940.623101][ T5708] rndis_host 2-1:3.130: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 940.656016][ T5708] usb 2-1: USB disconnect, device number 22 [ 942.998997][T10628] Bluetooth: hci2: unexpected event for opcode 0x201c [ 943.176970][ T9220] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 943.360866][T11144] lo speed is unknown, defaulting to 1000 [ 944.431581][ T38] audit: type=1800 audit(1789362688.544:94): pid=11285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1290" name="syzkaller0" dev="sda1" ino=2054 res=0 errno=0 [ 945.851298][ T9220] usb 2-1: Using ep0 maxpacket: 32 [ 945.856060][ T9220] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=f1.fe [ 945.857689][ T9220] usb 2-1: config 245 has an invalid interface number: 142 but max is 0 [ 945.857719][ T9220] usb 2-1: config 245 has no interface number 0 [ 945.857755][ T9220] usb 2-1: config 245 interface 142 has no altsetting 0 [ 945.860976][ T9220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.861043][ T9220] usb 2-1: Product: syz [ 945.861088][ T9220] usb 2-1: Manufacturer: syz [ 945.861131][ T9220] usb 2-1: SerialNumber: syz [ 946.062181][ T9220] usb 2-1: can't set config #245, error -71 [ 946.258620][ T9220] usb 2-1: USB disconnect, device number 23 [ 949.068898][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.069034][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.069233][T11014] bridge_slave_0: entered allmulticast mode [ 949.072337][T11014] bridge_slave_0: entered promiscuous mode [ 949.167533][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.167670][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.167909][T11014] bridge_slave_1: entered allmulticast mode [ 949.182890][T11014] bridge_slave_1: entered promiscuous mode [ 949.472547][ T5247] 8021q: adding VLAN 0 to HW filter on device eth14 [ 949.530568][T11014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.971118][T11014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.035185][T11014] team0: Port device team_slave_0 added [ 950.039668][T11014] team0: Port device team_slave_1 added [ 950.339156][T11014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.339177][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.339209][T11014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.426139][T11014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.426160][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.426190][T11014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.610813][T11014] hsr_slave_0: entered promiscuous mode [ 950.613605][T11014] hsr_slave_1: entered promiscuous mode [ 951.082970][ T1460] bridge_slave_1: left allmulticast mode [ 951.083012][ T1460] bridge_slave_1: left promiscuous mode [ 951.083302][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.263300][ T1460] bridge_slave_0: left allmulticast mode [ 951.263331][ T1460] bridge_slave_0: left promiscuous mode [ 951.263690][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.513979][ T1460] bridge_slave_1: left allmulticast mode [ 951.514023][ T1460] bridge_slave_1: left promiscuous mode [ 951.514288][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.633301][ T1460] bridge_slave_0: left allmulticast mode [ 951.633331][ T1460] bridge_slave_0: left promiscuous mode [ 951.633674][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.013337][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.113070][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.174874][ T1460] bond0 (unregistering): Released all slaves [ 952.462751][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.562741][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.623955][ T1460] bond0 (unregistering): Released all slaves [ 952.793849][ T5247] 8021q: adding VLAN 0 to HW filter on device eth15 [ 952.899770][T11144] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.899984][T11144] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.900148][T11144] bridge_slave_0: entered allmulticast mode [ 952.923560][T11144] bridge_slave_0: entered promiscuous mode [ 953.007129][T11144] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.007267][T11144] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.007479][T11144] bridge_slave_1: entered allmulticast mode [ 953.018974][T11144] bridge_slave_1: entered promiscuous mode [ 953.181688][T11144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.197897][T11144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.295030][T11144] team0: Port device team_slave_0 added [ 953.298813][T11144] team0: Port device team_slave_1 added [ 953.615404][T11144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.615426][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.615458][T11144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.619168][T11144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.619187][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.619217][T11144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.705041][ T1460] hsr_slave_0: left promiscuous mode [ 954.727195][ T1460] hsr_slave_1: left promiscuous mode [ 954.728472][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.776785][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.852322][ T1460] hsr_slave_0: left promiscuous mode [ 954.892212][ T1460] hsr_slave_1: left promiscuous mode [ 954.893571][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.933034][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.523608][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 955.582864][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 955.996727][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 956.054386][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 956.345245][T11144] hsr_slave_0: entered promiscuous mode [ 956.357758][T11144] hsr_slave_1: entered promiscuous mode [ 956.358905][T11144] debugfs: 'hsr0' already exists in 'hsr' [ 956.358934][T11144] Cannot create hsr debugfs directory [ 958.461110][T11014] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 958.573284][T11014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 958.574473][T11014] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 958.735014][T11014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 958.751393][T11014] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 958.828641][T11014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 958.831294][T11014] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 958.887222][T11014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 959.590388][T11144] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 959.634668][T11144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 959.685700][T11144] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 959.715908][T11144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 959.718826][T11144] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 959.766047][T11144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 959.769378][T11144] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 959.795892][T11144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 959.898294][T11014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.946646][T11014] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.975214][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.975356][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.000574][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.000703][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.135409][T11144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.244228][T11144] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.283896][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.284039][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.368029][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.368274][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.089395][T11014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.288487][T11144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.610195][T11014] veth0_vlan: entered promiscuous mode [ 961.658930][T11014] veth1_vlan: entered promiscuous mode [ 961.780691][T11014] veth0_macvtap: entered promiscuous mode [ 961.811139][T11014] veth1_macvtap: entered promiscuous mode [ 961.887916][T11014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.902516][T11144] veth0_vlan: entered promiscuous mode [ 961.908777][T11014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.934942][T11144] veth1_vlan: entered promiscuous mode [ 962.857761][T11144] veth0_macvtap: entered promiscuous mode [ 962.899904][T11144] veth1_macvtap: entered promiscuous mode [ 962.932236][T10138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.932262][T10138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.014221][ T128] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.014622][ T128] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.015281][ T128] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.019639][T11144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.124161][T11144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.145000][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.145026][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.117398][T10138] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.297550][ T5708] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 964.656182][ T3370] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.912800][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 964.913799][ T5708] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 964.926423][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.970901][ T5708] usb 2-1: config 0 descriptor?? [ 965.004085][ T5708] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 965.142433][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.142658][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.302724][ T5708] gspca_sonixj: reg_w1 err -71 [ 965.302852][ T5708] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 965.406636][ T5708] usb 2-1: USB disconnect, device number 24 [ 965.634518][T10628] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 965.936205][ T38] audit: type=1800 audit(1789362709.874:95): pid=11539 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1301" name="syzkaller0" dev="sda1" ino=2054 res=0 errno=0 [ 967.110104][T10628] Bluetooth: hci3: unexpected subevent 0x37 length: 25 > 13 [ 967.327645][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.327669][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.345791][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.492097][ T5708] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 967.668188][ T5708] usb 7-1: unable to get BOS descriptor or descriptor too short [ 967.668252][ T5708] usb 7-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=41.d7 [ 967.679011][ T5708] usb 7-1: config 127 has an invalid interface number: 118 but max is 0 [ 967.679043][ T5708] usb 7-1: config 127 has no interface number 0 [ 967.679105][ T5708] usb 7-1: config 127 interface 118 altsetting 6 endpoint 0x6 has invalid maxpacket 32, setting to 8 [ 967.679141][ T5708] usb 7-1: config 127 interface 118 altsetting 6 endpoint 0x7 is Bulk; changing to Interrupt [ 967.679167][ T5708] usb 7-1: config 127 interface 118 has no altsetting 0 [ 967.742318][ T5708] usb 7-1: string descriptor 0 read error: -22 [ 967.742482][ T5708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.827104][T11545] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 967.827291][T11545] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 967.851108][ T5708] cypress_m8 7-1:127.118: HID->COM RS232 Adapter converter detected [ 967.870624][ T5708] cyphidcom ttyUSB0: required endpoint is missing [ 968.057466][ T5846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.057490][ T5846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.079235][ T9334] usb 7-1: USB disconnect, device number 2 [ 968.127360][ T9334] cypress_m8 7-1:127.118: device disconnected [ 968.620369][T11572] syz.1.1317 (11572): drop_caches: 2 [ 970.617772][T11573] autofs: Unknown parameter 'dns_resolver' [ 972.669289][T11580] FAULT_INJECTION: forcing a failure. [ 972.669289][T11580] name failslab, interval 1, probability 1, space 0, times 0 [ 972.669338][T11580] CPU: 1 UID: 0 PID: 11580 Comm: syz.3.1320 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 972.669370][T11580] Tainted: [L]=SOFTLOCKUP [ 972.669378][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 972.669393][T11580] Call Trace: [ 972.669401][T11580] [ 972.669412][T11580] dump_stack_lvl+0xe8/0x150 [ 972.669454][T11580] should_fail_ex+0x46b/0x600 [ 972.669492][T11580] should_failslab+0xa8/0x100 [ 972.669528][T11580] ? security_inode_alloc+0x39/0x310 [ 972.669549][T11580] kmem_cache_alloc_noprof+0x9e/0x690 [ 972.669586][T11580] ? security_inode_alloc+0x39/0x310 [ 972.669615][T11580] security_inode_alloc+0x39/0x310 [ 972.669641][T11580] inode_init_always_gfp+0x983/0xd40 [ 972.669683][T11580] ? __pfx_sock_alloc_inode+0x10/0x10 [ 972.669790][T11580] alloc_inode+0x82/0x1b0 [ 972.669814][T11580] __sock_create+0x12d/0x9d0 [ 972.669856][T11580] __sys_socket+0xd6/0x1b0 [ 972.669901][T11580] __x64_sys_socket+0x7a/0x90 [ 972.669935][T11580] do_syscall_64+0x166/0x520 [ 972.669969][T11580] ? trace_irq_disable+0x3b/0x140 [ 972.669998][T11580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.670023][T11580] ? clear_bhb_loop+0x70/0xc0 [ 972.670052][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.670076][T11580] RIP: 0033:0x7ff88e36e159 [ 972.670099][T11580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.670118][T11580] RSP: 002b:00007ff88c5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 972.670143][T11580] RAX: ffffffffffffffda RBX: 00007ff88e5f5fa0 RCX: 00007ff88e36e159 [ 972.670160][T11580] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 972.670175][T11580] RBP: 00007ff88e40503b R08: 0000000000000000 R09: 0000000000000000 [ 972.670190][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.670205][T11580] R13: 00007ff88e5f6038 R14: 00007ff88e5f5fa0 R15: 00007ffc3294b788 [ 972.670243][T11580] [ 972.670293][T11580] socket: no more sockets [ 977.969459][T10628] Bluetooth: hci2: unexpected event for opcode 0x200a [ 978.042092][T11532] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 978.193587][T11532] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 978.195309][T11532] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.195336][T11532] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 978.195376][T11532] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 978.195402][T11532] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 978.197009][T11532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 978.197036][T11532] usb 2-1: SerialNumber: syz [ 978.525988][T11532] usb 2-1: 0:2 : does not exist [ 978.526178][T11532] usb 2-1: unit 5 not found! [ 978.652610][T11532] usb 2-1: USB disconnect, device number 25 [ 979.858970][T11138] udevd[11138]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 979.959786][T11663] autofs: Unknown parameter 'dns_resolver' [ 980.097142][T10628] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 980.633175][T11683] syz.5.1358 (11683): drop_caches: 2 [ 982.223663][T10628] Bluetooth: hci3: unexpected event for opcode 0x202f [ 983.615696][T11711] autofs: Unknown parameter 'dns_resolver' [ 983.808628][T11714] comedi comedi0: rti800: I/O base address not correctly aligned [ 983.971035][T11715] comedi comedi3: pcl818: I/O base address not correctly aligned [ 984.060360][ T5846] IPVS: starting estimator thread 0... [ 984.202580][T11719] IPVS: using max 8 ests per chain, 19200 per kthread [ 985.333393][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 985.337923][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 985.338186][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 985.338781][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 985.340517][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 986.051501][T11760] netlink: 'syz.2.1393': attribute type 2 has an invalid length. [ 986.200026][T11764] usb usb1: usbfs: process 11764 (syz.5.1395) did not claim interface 63 before use [ 987.597887][T10628] Bluetooth: hci2: unexpected event for opcode 0x202f [ 988.899009][T11776] autofs: Unknown parameter 'dns_resolver' [ 989.227172][T11785] comedi comedi1: rti802: I/O base address not correctly aligned [ 990.427677][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 990.430498][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 990.430761][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 990.430961][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 990.431122][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 990.644884][T11795] netlink: 'syz.6.1407': attribute type 2 has an invalid length. [ 991.391085][T10628] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 992.641859][T11821] autofs: Unknown parameter 'dns_resolver' [ 993.810127][T11831] netlink: 'syz.6.1423': attribute type 2 has an invalid length. [ 993.828599][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.828675][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.879204][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 993.889472][T11836] 9pnet_virtio: no channels available for device syz [ 994.390722][T11853] netlink: 'syz.1.1435': attribute type 1 has an invalid length. [ 994.591541][T11862] @0Ù: renamed from bond_slave_1 (while UP) [ 995.516691][T11866] autofs: Unknown parameter 'dns_resolver' [ 995.678691][T11869] tmpfs: Bad value for 'mpol' [ 996.229482][T10628] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 996.229898][T10628] Bluetooth: hci2: Injecting HCI hardware error event [ 996.244033][T10628] Bluetooth: hci2: hardware error 0x00 [ 999.171254][T10628] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 999.237424][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'. [ 999.274800][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'. [ 999.275282][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'. [ 999.365615][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'. [ 1001.647687][T11911] autofs: Unknown parameter 'dns_resolver' [ 1004.482880][T11938] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1006.398533][T11942] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1466'. [ 1008.878158][T11952] autofs: Unknown parameter 'dns_resolver' [ 1013.821967][T11996] autofs: Unknown parameter 'dns_resolver' [ 1016.970012][T12020] autofs: Unknown parameter 'dns_resolver' [ 1020.855865][T12044] autofs: Unknown parameter 'dns_resolver' [ 1023.258270][T12073] autofs: Unknown parameter 'dns_resolver' [ 1025.477337][T12081] autofs: Unknown parameter 'dns_resolver' [ 1027.015449][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 1027.063592][T11601] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1027.464260][T12099] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1029.184758][T12132] comedi: No check for data length of config insn id 7 is implemented [ 1029.184780][T12132] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1029.184795][T12132] comedi: Assuming n=15 is correct [ 1029.762705][T12159] comedi comedi4: commands at RT priority not supported in this driver [ 1029.923041][T12163] syz.2.1549 (12163): drop_caches: 2 [ 1030.938297][T11601] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1030.989022][T12170] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1553'. [ 1031.092211][T11601] usb 7-1: Using ep0 maxpacket: 32 [ 1031.092437][T10628] Bluetooth: hci4: command 0x0406 tx timeout [ 1031.104236][T11601] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1031.105815][T11601] usb 7-1: config index 0 descriptor too short (expected 27632, got 27) [ 1031.105844][T11601] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1031.105868][T11601] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.105890][T11601] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1031.105913][T11601] usb 7-1: config 1 has no interface number 0 [ 1031.105963][T11601] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.201509][T11601] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1031.366422][T12179] MTD: Couldn't look up './mnt': -15 [ 1031.469257][T11601] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 1031.469799][T11601] snd_usb_pod 7-1:1.1: invalid control EP [ 1031.469819][T11601] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 1031.470161][T11601] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1031.500988][T11601] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1031.703030][T11520] usb 7-1: USB disconnect, device number 3 [ 1033.173329][T12208] netlink: 'syz.3.1572': attribute type 35 has an invalid length. [ 1033.456730][ T5594] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 1036.782006][T12236] syz.1.1580 (12236): drop_caches: 2 [ 1038.008288][T12243] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1038.009078][T12243] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1040.228118][T12274] syz.2.1597 (12274): drop_caches: 2 [ 1043.721121][T12292] dummy0: entered promiscuous mode [ 1043.721152][T12292] dummy0: entered allmulticast mode [ 1043.721370][T12292] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1043.925784][T12299] genirq: Flags mismatch irq 8. 00202001 (comedi_parport) vs. 00202001 (rtc0) [ 1044.440585][T12315] syz.2.1614 (12315): drop_caches: 2 [ 1045.957964][T12322] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1046.022385][ T5700] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1046.183829][ T5700] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1046.189559][ T5700] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1046.189593][ T5700] usb 6-1: config 0 has no interface number 0 [ 1046.225619][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.225650][ T5700] usb 6-1: Product: syz [ 1046.225667][ T5700] usb 6-1: Manufacturer: syz [ 1046.225683][ T5700] usb 6-1: SerialNumber: syz [ 1046.290410][ T5700] usb 6-1: config 0 descriptor?? [ 1046.387424][ T5700] usb 6-1: selecting invalid altsetting 1 [ 1047.450041][ T5700] dvb_ttusb_budget: ttusb_init_controller: error [ 1047.450553][ T5700] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1047.678073][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 1047.701289][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 1047.701561][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 1047.701759][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 1047.730145][T12353] 9pnet_virtio: no channels available for device syz [ 1047.730776][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 1051.631261][ T5700] DVB: Unable to find symbol stv0299_attach() [ 1052.099291][ T5700] DVB: Unable to find symbol tda8083_attach() [ 1052.099311][ T5700] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1052.172289][ T5700] usb 6-1: USB disconnect, device number 2 [ 1052.263329][T11601] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1052.412942][T11601] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1052.421568][T11601] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.421641][T11601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1052.421682][T11601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1052.421815][T11601] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1052.481778][T11601] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1052.481803][T11601] usb 2-1: Manufacturer: syz [ 1052.503808][T12411] 9pnet_virtio: no channels available for device syz [ 1052.590799][T11601] usb 2-1: config 0 descriptor?? [ 1053.002057][T11601] rc_core: IR keymap rc-hauppauge not found [ 1053.002082][T11601] Registered IR keymap rc-empty [ 1053.006206][T11601] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1053.034513][T11601] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1053.115627][T11601] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1053.144962][T11601] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 1053.199238][T11601] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1053.212428][T11601] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1053.232449][T11601] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1053.252352][T11601] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1053.272413][T11601] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1053.292536][T11601] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1053.313466][T11601] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1053.332399][T11601] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1053.352583][T11601] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1053.413973][T11601] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1054.495407][ T5594] Bluetooth: hci5: command 0x0406 tx timeout [ 1054.633687][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.633764][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.717464][T11601] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1054.717495][T11601] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1054.745936][T11601] usb 2-1: USB disconnect, device number 27 [ 1054.786495][T12435] netlink: 'syz.6.1664': attribute type 10 has an invalid length. [ 1054.945285][T12435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.761230][T12435] team0: Port device bond0 added [ 1056.149358][T12451] option changes via remount are deprecated (pid=12449 comm=syz.5.1670) [ 1056.207836][T12448] 9pnet_virtio: no channels available for device syz [ 1059.128969][T12485] jffs2: notice: (12485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1059.181826][T12488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1685'. [ 1060.553225][T12510] 9pnet_virtio: no channels available for device syz [ 1060.847371][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 1065.495350][T12555] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1065.495393][T12555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.951973][T12565] autofs: Unknown parameter 'dns_resolver' [ 1067.232801][T12551] tipc: Started in network mode [ 1067.232826][T12551] tipc: Node identity 1000001, cluster identity 4369 [ 1067.232842][T12551] tipc: Node number set to 16777217 [ 1067.409986][T12580] 9pnet_virtio: no channels available for device syz [ 1068.143369][T12551] tipc: Cannot configure node identity twice [ 1068.314113][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1721'. [ 1070.400478][T12592] syz.2.1727 (12592): drop_caches: 2 [ 1071.730154][T12602] autofs: Unknown parameter 'dns_resolver' [ 1072.512146][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1072.717473][ T31] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1072.719122][ T31] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1072.719151][ T31] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1072.719172][ T31] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.719194][ T31] usb 6-1: config 220 has no interface number 2 [ 1072.719269][ T31] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1072.719299][ T31] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1072.719320][ T31] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1072.719341][ T31] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1072.728437][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.728468][ T31] usb 6-1: Product: syz [ 1072.728484][ T31] usb 6-1: Manufacturer: syz [ 1072.728500][ T31] usb 6-1: SerialNumber: syz [ 1072.793220][T12627] syz.6.1741 (12627): drop_caches: 2 [ 1072.972481][ T31] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1072.972528][ T31] uvcvideo 6-1:220.0: No valid video chain found. [ 1072.972601][ T31] usb 6-1: selecting invalid altsetting 0 [ 1072.985130][ T31] usb 6-1: selecting invalid altsetting 0 [ 1072.985166][ T31] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1073.069440][ T31] usb 6-1: USB disconnect, device number 3 [ 1073.231064][T12632] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000 [ 1074.329973][T12639] 9pnet_virtio: no channels available for device syz [ 1074.600112][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 1076.627247][T12655] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1753'. [ 1076.627350][T12655] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1753'. [ 1076.981310][T12664] 9pnet_virtio: no channels available for device syz [ 1079.924380][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1080.072251][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 1080.073237][ T31] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1080.084120][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.084209][ T31] usb 7-1: Product: syz [ 1080.084251][ T31] usb 7-1: Manufacturer: syz [ 1080.084293][ T31] usb 7-1: SerialNumber: syz [ 1080.128229][ T31] usb 7-1: config 0 descriptor?? [ 1080.159740][ T31] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 1080.444525][ T31] usb 7-1: clie_3_5_startup: get config number failed: -71 [ 1080.444695][ T31] visor 7-1:0.0: probe with driver visor failed with error -71 [ 1080.485181][ T31] usb 7-1: USB disconnect, device number 4 [ 1080.543930][T12691] smc: net device lo applied user defined pnetid SYZ0 [ 1081.136561][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 1081.157019][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 1081.173069][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 1081.194362][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 1081.229782][T12699] 9pnet_virtio: no channels available for device syz [ 1081.239198][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 1083.852072][T12716] 9pnet_virtio: no channels available for device syz [ 1084.093765][ T38] audit: type=1326 audit(1789362828.234:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12724 comm="syz.5.1780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1261fe159 code=0x7ffc0000 [ 1084.095631][ T38] audit: type=1326 audit(1789362828.244:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12724 comm="syz.5.1780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1261fe159 code=0x7ffc0000 [ 1084.098914][ T38] audit: type=1326 audit(1789362828.244:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12724 comm="syz.5.1780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe1261fe159 code=0x7ffc0000 [ 1084.099206][ T38] audit: type=1326 audit(1789362828.244:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12724 comm="syz.5.1780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1261fe159 code=0x7ffc0000 [ 1084.099498][ T38] audit: type=1326 audit(1789362828.244:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12724 comm="syz.5.1780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1261fe159 code=0x7ffc0000 [ 1084.100098][ T38] audit: type=1326 audit(1789362828.244:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12724 comm="syz.5.1780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe1261fe159 code=0x7ffc0000 [ 1084.101018][ T38] audit: type=1326 audit(1789362828.244:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12724 comm="syz.5.1780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1261fe159 code=0x7ffc0000 [ 1085.816332][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1787'. [ 1086.192051][T11601] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1086.244887][T12754] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1086.342074][T11601] usb 2-1: Using ep0 maxpacket: 16 [ 1086.343083][T11601] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=5f.c5 [ 1086.344530][T11601] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.349559][T11601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.349587][T11601] usb 2-1: Product: syz [ 1086.349604][T11601] usb 2-1: Manufacturer: syz [ 1086.349620][T11601] usb 2-1: SerialNumber: syz [ 1086.358501][T12758] 9pnet_virtio: no channels available for device syz [ 1086.791463][T11601] usb 2-1: USB disconnect, device number 28 [ 1086.833859][T11138] udevd[11138]: setting mode of /dev/bus/usb/002/028 to 020664 failed: No such file or directory [ 1086.834067][T11138] udevd[11138]: setting owner of /dev/bus/usb/002/028 to uid=0, gid=0 failed: No such file or directory [ 1086.862058][ T1000] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1086.923552][T11138] udevd[11138]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1087.032793][ T1000] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1087.035699][ T1000] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.035740][ T1000] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1087.035771][ T1000] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1087.035809][ T1000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.110240][ T1000] usb 7-1: config 0 descriptor?? [ 1087.401076][T12779] xt_cluster: you have exceeded the maximum number of cluster nodes (2621472 > 32) [ 1087.568489][ T1000] hid-multitouch 0003:0EEF:72C4.0003: ignoring exceeding usage max [ 1087.570625][ T1000] hid-multitouch 0003:0EEF:72C4.0003: unbalanced collection at end of report description [ 1087.571671][ T1000] hid-multitouch 0003:0EEF:72C4.0003: probe with driver hid-multitouch failed with error -22 [ 1087.747940][ T1000] usb 7-1: USB disconnect, device number 5 [ 1088.333303][T12800] autofs: Unknown parameter 'dns_resolver' [ 1089.267549][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 1089.294846][T12818] comedi: No check for data length of config insn id 64 is implemented [ 1089.294868][T12818] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1089.294883][T12818] comedi: Assuming n=15 is correct [ 1089.412264][ T843] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1089.614690][ T843] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1089.616017][ T843] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1089.616051][ T843] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1089.616082][ T843] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1089.619480][ T843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.619508][ T843] usb 2-1: Product: syz [ 1089.619525][ T843] usb 2-1: Manufacturer: syz [ 1089.619541][ T843] usb 2-1: SerialNumber: syz [ 1089.805468][ T843] usb 2-1: config 0 descriptor?? [ 1089.822493][T12814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1089.822608][T12814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1089.932783][ T843] usb 2-1: ucan: probing device on interface #0 [ 1090.574172][T12844] autofs: Unknown parameter 'dns_resolver' [ 1091.268534][ T843] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 1091.358613][ T843] usb 2-1: USB disconnect, device number 29 [ 1091.704290][T12856] syz.2.1835 (12856): drop_caches: 2 [ 1092.712120][T11601] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1092.862007][T11601] usb 6-1: Using ep0 maxpacket: 8 [ 1092.865502][T11601] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1092.868888][T11601] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 186, changing to 11 [ 1092.868927][T11601] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1092.868957][T11601] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1092.868995][T11601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.935906][T11601] usb 6-1: config 0 descriptor?? [ 1093.012037][ T843] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1093.162296][ T843] usb 2-1: Using ep0 maxpacket: 32 [ 1093.163476][ T843] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1093.165284][ T843] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.165317][ T843] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.168835][ T843] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1093.168863][ T843] usb 2-1: Product: syz [ 1093.168880][ T843] usb 2-1: Manufacturer: syz [ 1093.212687][ T843] hub 2-1:4.0: USB hub found [ 1093.417049][ T843] hub 2-1:4.0: 2 ports detected [ 1093.551777][T12877] autofs: Unknown parameter 'dns_resolver' [ 1093.850048][T11601] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0909.0004/input/input14 [ 1094.057474][ T843] hub 2-1:4.0: set hub depth failed [ 1094.086069][ T843] usb 2-1: USB disconnect, device number 30 [ 1094.160823][T12886] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1850'. [ 1095.766815][ T38] audit: type=1326 audit(1789362839.914:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12887 comm="syz.3.1851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e36e159 code=0x7ffc0000 [ 1095.770447][ T38] audit: type=1326 audit(1789362839.914:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12887 comm="syz.3.1851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff88e36e159 code=0x7ffc0000 [ 1095.824761][ T38] audit: type=1326 audit(1789362839.914:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12887 comm="syz.3.1851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e36e159 code=0x7ffc0000 [ 1095.827051][ T38] audit: type=1326 audit(1789362839.974:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12887 comm="syz.3.1851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e36e159 code=0x7ffc0000 [ 1095.827383][ T38] audit: type=1326 audit(1789362839.974:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12887 comm="syz.3.1851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff88e36e159 code=0x7ffc0000 [ 1095.829252][ T38] audit: type=1326 audit(1789362839.974:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12887 comm="syz.3.1851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e36e159 code=0x7ffc0000 [ 1095.829601][ T38] audit: type=1326 audit(1789362839.974:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12887 comm="syz.3.1851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e36e159 code=0x7ffc0000 [ 1096.190251][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1849'. [ 1096.203374][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1849'. [ 1096.203827][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1849'. [ 1096.235938][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1849'. [ 1096.253697][T12899] 9pnet_virtio: no channels available for device syz [ 1096.760136][T12912] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1860'. [ 1096.761343][T12912] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1860'. [ 1097.352113][T12915] autofs: Unknown parameter 'dns_resolver' [ 1099.994598][T11601] uclogic 0003:28BD:0909.0004: input,hidraw0: USB HID v40.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.5-1/input0 [ 1100.029153][ T38] audit: type=1326 audit(1789362844.174:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12951 comm="syz.1.1874" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937556e159 code=0x7ffc0000 [ 1100.031047][ T38] audit: type=1326 audit(1789362844.174:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12951 comm="syz.1.1874" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937556e159 code=0x7ffc0000 [ 1100.084649][ T38] audit: type=1326 audit(1789362844.234:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12951 comm="syz.1.1874" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f937556e159 code=0x7ffc0000 [ 1100.101636][T11601] usb 6-1: USB disconnect, device number 4 [ 1100.267797][T12948] fido_id[12948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1100.834776][T12965] autofs: Unknown parameter 'dns_resolver' [ 1102.332056][T11601] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1102.485995][T11601] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1102.487269][T11601] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.487439][T11601] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1102.491017][T11601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.491047][T11601] usb 6-1: Product: syz [ 1102.491064][T11601] usb 6-1: Manufacturer: syz [ 1102.491080][T11601] usb 6-1: SerialNumber: syz [ 1102.612150][ T5700] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1103.145274][T13003] autofs: Unknown parameter 'dns_resolver' [ 1104.049146][ T5700] usb 2-1: not running at top speed; connect to a high speed hub [ 1104.049201][ T5700] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1104.050791][ T5700] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1104.050820][ T5700] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.050842][ T5700] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1104.050908][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.056530][ T5700] usb 2-1: config 0 descriptor?? [ 1104.129502][ T5700] uvcvideo 2-1:0.0: Found UVC 9.00 device (046d:0825) [ 1104.328460][T11601] snd-usb-caiaq 6-1:1.0: can't set alt interface. [ 1104.328502][T11601] usb 6-1: unable to init card! (ret=-5) [ 1104.328967][T11601] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 1104.514418][T11601] usb 6-1: USB disconnect, device number 5 [ 1104.796546][ T5700] uvcvideo 2-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 1104.803714][ T5700] uvcvideo 2-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1104.803809][ T5700] uvcvideo 2-1:0.1: Failed to initialize the device (-71). [ 1104.804578][ T5700] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -71 [ 1104.936153][ T5700] usb 2-1: USB disconnect, device number 31 [ 1106.463097][T13047] syz.1.1908 (13047): drop_caches: 2 [ 1106.466645][T13048] tipc: Enabling of bearer rejected, failed to enable media [ 1108.132073][ T5700] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1108.925354][ T5700] usb 6-1: Using ep0 maxpacket: 32 [ 1108.926384][ T5700] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1108.930514][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.930546][ T5700] usb 6-1: Product: syz [ 1108.930562][ T5700] usb 6-1: Manufacturer: syz [ 1108.930576][ T5700] usb 6-1: SerialNumber: syz [ 1108.974530][ T5700] usb 6-1: config 0 descriptor?? [ 1108.980394][ T5700] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1110.684068][ T5700] gspca_ov534_9: reg_w failed -110 [ 1110.833536][T13101] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1111.002023][ T5700] gspca_ov534_9: Unknown sensor 0000 [ 1111.002146][ T5700] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 1111.066396][ T5700] usb 6-1: USB disconnect, device number 6 [ 1111.097849][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1937'. [ 1112.352388][T11601] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1112.352876][T11601] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1112.353315][T11601] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1112.353819][T11601] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1112.353845][T11601] rtc rtc0: __rtc_set_alarm: err=-22 [ 1113.407501][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1947'. [ 1113.407529][T13132] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1947'. [ 1116.368211][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.368278][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.917648][T11601] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1117.072786][T11601] usb 7-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1117.077700][T11601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.077821][T11601] usb 7-1: Product: syz [ 1117.077840][T11601] usb 7-1: Manufacturer: syz [ 1117.077858][T11601] usb 7-1: SerialNumber: syz [ 1117.135358][T11601] usb 7-1: config 0 descriptor?? [ 1117.215677][T11601] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1117.380361][T11601] gspca_m5602: Failed to find a sensor [ 1117.380379][T11601] ALi m5602 7-1:0.0: ALi m5602 webcam failed [ 1117.400949][T11601] usb 7-1: USB disconnect, device number 6 [ 1117.492222][T11520] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1117.643071][T11520] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1117.647786][T11520] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1117.647819][T11520] usb 2-1: Product: syz [ 1117.647836][T11520] usb 2-1: SerialNumber: syz [ 1117.682756][T11520] usb 2-1: config 0 descriptor?? [ 1117.922099][ T5700] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1117.926116][T11520] hso 2-1:0.0: Failed to find BULK eps [ 1118.079273][ T5700] usb 7-1: Using ep0 maxpacket: 8 [ 1118.088437][ T5700] usb 7-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1119.243605][ T5700] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.243635][ T5700] usb 7-1: Product: syz [ 1119.243650][ T5700] usb 7-1: Manufacturer: syz [ 1119.243664][ T5700] usb 7-1: SerialNumber: syz [ 1119.253144][ T5700] usb 7-1: config 0 descriptor?? [ 1119.261147][ T5700] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1119.331594][T11601] usb 2-1: USB disconnect, device number 32 [ 1119.683619][ T5700] gspca_m5602: Failed to find a sensor [ 1119.683637][ T5700] ALi m5602 7-1:0.0: ALi m5602 webcam failed [ 1119.687037][ T5700] usb 7-1: USB disconnect, device number 7 [ 1121.802130][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1987'. [ 1122.123806][T11520] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1123.230002][T11520] usb 7-1: Using ep0 maxpacket: 16 [ 1123.451085][T11520] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1123.452638][T11520] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.452711][T11520] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.452741][T11520] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1123.452789][T11520] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.594497][T11520] usb 7-1: config 0 descriptor?? [ 1126.260327][T11520] usbhid 7-1:0.0: can't add hid device: -71 [ 1126.260465][T11520] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1126.382808][T11520] usb 7-1: USB disconnect, device number 8 [ 1126.456937][ T843] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1126.613586][ T843] usb 2-1: Using ep0 maxpacket: 16 [ 1127.778195][ T843] usb 2-1: device descriptor read/all, error -71 [ 1128.137309][T13276] 9p: Bad value for 'wfdno' [ 1133.108727][T13309] autofs: Unknown parameter 'dns_resolver' [ 1133.549195][ T38] kauditd_printk_skb: 11 callbacks suppressed [ 1133.549218][ T38] audit: type=1800 audit(1789362877.694:124): pid=13311 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2020" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2702 res=0 errno=0 [ 1136.906804][T13349] Format for deleting device is "id" (uint). [ 1137.427478][ T1000] kernel read not supported for file /swradio2 (pid: 1000 comm: kworker/1:2) [ 1137.477223][T13359] program syz.1.2034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1137.572159][T13353] autofs: Unknown parameter 'dns_resolver' [ 1139.402045][ T5700] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1139.544000][T13383] jffs2: notice: (13383) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1139.564611][ T5700] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 1139.595840][ T5700] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.595882][ T5700] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1139.595920][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.675068][ T5700] usb 2-1: config 0 descriptor?? [ 1140.195629][ T5700] hid_parser_main: 7 callbacks suppressed [ 1140.195661][ T5700] itetech 0003:06CB:73F5.0005: unknown main item tag 0x0 [ 1140.195694][ T5700] itetech 0003:06CB:73F5.0005: unknown main item tag 0x0 [ 1140.195730][ T5700] itetech 0003:06CB:73F5.0005: unknown main item tag 0x0 [ 1140.195750][ T5700] itetech 0003:06CB:73F5.0005: unknown main item tag 0x0 [ 1140.195769][ T5700] itetech 0003:06CB:73F5.0005: unknown main item tag 0x0 [ 1140.195788][ T5700] itetech 0003:06CB:73F5.0005: unknown main item tag 0x0 [ 1140.195807][ T5700] itetech 0003:06CB:73F5.0005: unknown main item tag 0x0 [ 1140.195825][ T5700] itetech 0003:06CB:73F5.0005: unknown main item tag 0x0 [ 1140.196009][ T5700] itetech 0003:06CB:73F5.0005: unknown main item tag 0x0 [ 1140.196030][ T5700] itetech 0003:06CB:73F5.0005: unknown main item tag 0x0 [ 1140.454266][ T5700] itetech 0003:06CB:73F5.0005: hidraw0: USB HID v0.03 Device [HID 06cb:73f5] on usb-dummy_hcd.1-1/input0 [ 1140.588202][ T5700] usb 2-1: USB disconnect, device number 35 [ 1140.759850][T13403] fido_id[13403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1146.627596][ T843] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1146.792143][ T843] usb 7-1: Using ep0 maxpacket: 8 [ 1146.794066][ T843] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1146.796016][ T843] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1146.796061][ T843] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1146.796110][ T843] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1146.796142][ T843] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1146.796171][ T843] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1146.796200][ T843] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1146.796230][ T843] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1146.796261][ T843] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1146.868077][ T843] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1146.868128][ T843] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1146.868228][ T843] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1146.868305][ T843] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1146.868390][ T843] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1146.868465][ T843] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1146.868522][ T843] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1146.868573][ T843] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1146.949041][ T843] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1146.949152][ T843] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1146.949270][ T843] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1146.949363][ T843] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1146.949431][ T843] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1146.949506][ T843] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1146.949580][ T843] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1146.949664][ T843] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1146.986173][ T843] usb 7-1: string descriptor 0 read error: -22 [ 1146.986830][ T843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.560712][ T843] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1147.744953][ T843] usb 7-1: USB disconnect, device number 9 [ 1148.363658][T11520] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1148.589299][T11520] usb 2-1: Using ep0 maxpacket: 16 [ 1148.590181][T11520] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1148.607658][T11520] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.607719][T11520] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.607769][T11520] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1148.626314][T11520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1148.626396][T11520] usb 2-1: SerialNumber: syz [ 1148.787007][T11520] hub 2-1:1.0: bad descriptor, ignoring hub [ 1148.787112][T11520] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1148.789220][T11520] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1148.854206][T13538] syz.5.2104 (13538): drop_caches: 2 [ 1149.101542][ T31] usb 2-1: USB disconnect, device number 36 [ 1149.222033][T11520] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1149.377494][T11520] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1149.395099][T11520] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.395129][T11520] usb 7-1: Product: syz [ 1149.395139][T11520] usb 7-1: Manufacturer: syz [ 1149.395151][T11520] usb 7-1: SerialNumber: syz [ 1150.601243][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'. [ 1150.608149][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'. [ 1150.609774][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'. [ 1150.679354][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'. [ 1150.738009][T13562] 9pnet_virtio: no channels available for device syz [ 1151.755185][T11520] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1151.755391][T11520] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1153.488745][T11520] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1153.547237][T11520] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1153.645457][T11520] usb 7-1: USB disconnect, device number 10 [ 1153.912794][T13572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1154.112049][T13581] syz.6.2118 (13581): drop_caches: 2 [ 1154.122064][ T5708] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1154.282852][ T5708] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1154.284151][ T5708] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.284211][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.289701][ T5708] usb 6-1: config 0 descriptor?? [ 1154.296208][ T5708] pwc: Askey VC010 type 2 USB webcam detected. [ 1154.505363][T13589] 9p: Bad value for 'rfdno' [ 1154.716057][ T5708] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1154.937662][ T5708] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1154.938104][ T5708] pwc: recv_control_msg error -71 req 04 val 1000 [ 1154.938525][ T5708] pwc: recv_control_msg error -71 req 04 val 1300 [ 1154.938907][ T5708] pwc: recv_control_msg error -71 req 04 val 1400 [ 1154.942598][ T5708] pwc: recv_control_msg error -71 req 02 val 2000 [ 1154.943461][ T5708] pwc: recv_control_msg error -71 req 02 val 2100 [ 1154.943973][ T5708] pwc: recv_control_msg error -71 req 04 val 1500 [ 1154.944446][ T5708] pwc: recv_control_msg error -71 req 02 val 2500 [ 1154.944922][ T5708] pwc: recv_control_msg error -71 req 02 val 2400 [ 1154.945394][ T5708] pwc: recv_control_msg error -71 req 02 val 2600 [ 1154.945889][ T5708] pwc: recv_control_msg error -71 req 02 val 2900 [ 1154.946330][ T5708] pwc: recv_control_msg error -71 req 02 val 2800 [ 1154.947166][ T5708] pwc: recv_control_msg error -71 req 04 val 1100 [ 1154.947628][ T5708] pwc: recv_control_msg error -71 req 04 val 1200 [ 1154.976032][ T5708] pwc: Registered as video103. [ 1154.981435][ T5708] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 1155.171990][ T5708] usb 6-1: USB disconnect, device number 7 [ 1155.338315][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2129'. [ 1155.550484][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2129'. [ 1155.784897][T13614] 9pnet_virtio: no channels available for device syz [ 1158.544117][T13593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.544370][T13593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.886371][T13593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.946802][T13593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.502233][T13645] syz.5.2134 (13645): drop_caches: 2 [ 1161.350079][T13652] netlink: 'syz.5.2137': attribute type 2 has an invalid length. [ 1162.055981][T13657] syz.5.2138 (13657): drop_caches: 2 [ 1162.630153][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2128'. [ 1162.646784][ T843] lo speed is unknown, defaulting to 1000 [ 1162.646833][ T843] sz1: Port: 1 Link DOWN [ 1162.652580][ T1173] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.652671][ T1173] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.652871][ T1173] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.652945][ T1173] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.670466][ T3370] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.670574][ T3370] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.670685][ T3370] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.670774][ T3370] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.800640][T13601] lo speed is unknown, defaulting to 1000 [ 1163.088158][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 1163.088668][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 1163.088925][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 1163.089136][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 1163.093343][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 1163.099942][T13665] 9pnet_virtio: no channels available for device syz [ 1163.188113][ T5594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1163.243041][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1163.268339][ T5594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1163.282239][ T5594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1163.286477][ T5594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1164.204999][T13691] netlink: 'syz.1.2148': attribute type 2 has an invalid length. [ 1164.257585][T13689] syz.2.2147 (13689): drop_caches: 2 [ 1164.792953][ T9334] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1164.890825][T13663] lo speed is unknown, defaulting to 1000 [ 1164.942198][ T9334] usb 2-1: Using ep0 maxpacket: 32 [ 1164.943417][ T9334] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1164.947778][ T9334] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1164.947809][ T9334] usb 2-1: config 0 has no interface number 0 [ 1164.961123][ T9334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.961156][ T9334] usb 2-1: Product: syz [ 1164.961172][ T9334] usb 2-1: Manufacturer: syz [ 1164.961190][ T9334] usb 2-1: SerialNumber: syz [ 1165.022420][ T9334] usb 2-1: config 0 descriptor?? [ 1165.089832][ T9334] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1165.502025][T13670] Bluetooth: hci1: command tx timeout [ 1165.781756][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1165.817345][ T9334] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1165.842120][T13601] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1165.881726][ T9334] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1165.903939][ T9334] usb 2-1: USB disconnect, device number 37 [ 1165.945216][ T9334] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1165.968805][ T9334] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1165.970963][ T9334] quatech2 2-1:0.51: device disconnected [ 1166.023214][T13601] usb 6-1: Using ep0 maxpacket: 16 [ 1166.024177][T13601] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1166.028919][T13601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.028950][T13601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.028967][T13601] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1166.028998][T13601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.228809][T13601] usb 6-1: config 0 descriptor?? [ 1166.762267][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'. [ 1166.767791][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'. [ 1166.771517][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'. [ 1166.774792][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'. [ 1166.812824][T13712] 9pnet_virtio: no channels available for device syz [ 1167.572208][T13670] Bluetooth: hci1: command tx timeout [ 1169.652013][T13670] Bluetooth: hci1: command tx timeout [ 1169.874262][T13601] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1169.941031][T13601] usb 6-1: USB disconnect, device number 8 [ 1170.176130][T13723] netlink: 'syz.6.2158': attribute type 2 has an invalid length. [ 1170.230951][T13721] fido_id[13721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1171.745084][T13670] Bluetooth: hci1: command tx timeout [ 1171.832722][T13757] __nla_validate_parse: 1 callbacks suppressed [ 1171.832745][T13757] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2170'. [ 1171.833841][T13757] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2170'. [ 1171.980795][T13759] netlink: 'syz.1.2171': attribute type 2 has an invalid length. [ 1172.156073][T13749] syz.2.2166 (13749): drop_caches: 2 [ 1172.517242][T13772] jffs2: notice: (13772) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1172.819019][T13663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.819225][T13663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.819398][T13663] bridge_slave_0: entered allmulticast mode [ 1172.822306][T13663] bridge_slave_0: entered promiscuous mode [ 1172.855359][T13663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.855525][T13663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.855804][T13663] bridge_slave_1: entered allmulticast mode [ 1172.894286][T13663] bridge_slave_1: entered promiscuous mode [ 1173.064134][T13785] binder: 13784:13785 ioctl c0306201 2000000001c0 returned -22 [ 1173.106899][T13663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.145879][T13663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.203021][T13663] team0: Port device team_slave_0 added [ 1173.206836][T13663] team0: Port device team_slave_1 added [ 1173.262149][T13663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.262171][T13663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.262202][T13663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.264724][T13663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.264742][T13663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.264773][T13663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.527040][T13790] netlink: 'syz.5.2183': attribute type 2 has an invalid length. [ 1173.564642][T13663] hsr_slave_0: entered promiscuous mode [ 1173.566314][T13663] hsr_slave_1: entered promiscuous mode [ 1173.567526][T13663] debugfs: 'hsr0' already exists in 'hsr' [ 1173.567555][T13663] Cannot create hsr debugfs directory [ 1175.664948][T13808] binder: 13807:13808 ioctl c018620c 0 returned -14 [ 1175.893142][T13812] loop6: detected capacity change from 0 to 524288000 [ 1176.027910][T13817] nbd1: detected capacity change from 0 to 63 [ 1176.187471][T13670] block nbd1: Receive control failed (result -104) [ 1176.254117][ T249] block nbd1: Dead connection, failed to find a fallback [ 1176.254150][ T249] block nbd1: shutting down sockets [ 1176.284141][ T249] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 1176.284739][ T249] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1176.318370][ T249] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1176.926386][T13826] netlink: 'syz.1.2196': attribute type 2 has an invalid length. [ 1177.499429][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.499507][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.485446][T13848] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1178.963024][T13857] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2204'. [ 1179.215344][T13865] netlink: 'syz.2.2206': attribute type 2 has an invalid length. [ 1180.550305][T13896] netlink: 'syz.2.2218': attribute type 2 has an invalid length. [ 1180.892830][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 1180.894661][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 1180.895051][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 1180.895351][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 1180.897985][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 1181.006329][T13910] 9pnet_virtio: no channels available for device syz [ 1181.607253][T13663] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1183.628391][T13663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1183.730021][T13663] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1183.884861][T13918] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2224'. [ 1183.944258][T13663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1183.968799][T13663] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1184.041131][T13663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1184.217424][T13663] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1184.294974][T13663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1184.750890][T13663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.874726][T13663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.952060][ T9334] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1185.057177][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.058938][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.120143][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.126167][ T9334] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1185.127732][ T9334] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.223614][ T9334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.223647][ T9334] usb 2-1: Product: syz [ 1185.223663][ T9334] usb 2-1: Manufacturer: syz [ 1185.223679][ T9334] usb 2-1: SerialNumber: syz [ 1185.299460][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.302139][ T9334] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1185.302984][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 87 [ 1185.303203][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 1185.439315][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1185.439391][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 1185.439717][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1185.439780][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1185.439841][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 85 [ 1185.439900][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 5 [ 1185.531881][ T9334] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1185.535168][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 83 [ 1185.535249][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1185.535330][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 1185.535418][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4 [ 1185.535494][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 86 [ 1185.535569][ T9334] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1185.560485][ T9334] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1185.713445][ T9334] usb 2-1: USB disconnect, device number 38 [ 1185.810824][ T9334] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1185.991433][ T9334] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1186.120993][ T9334] keyspan 2-1:1.0: device disconnected [ 1187.812887][T13663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.013530][T14040] netlink: 'syz.1.2267': attribute type 2 has an invalid length. [ 1190.309821][T13663] veth0_vlan: entered promiscuous mode [ 1190.377454][T13663] veth1_vlan: entered promiscuous mode [ 1190.664954][ T9334] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1190.738854][T13663] veth0_macvtap: entered promiscuous mode [ 1190.788047][T13663] veth1_macvtap: entered promiscuous mode [ 1190.824530][ T9334] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1190.825851][ T9334] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1190.825890][ T9334] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1190.825934][ T9334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.939081][T13663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.958297][ T9334] usb 7-1: config 0 descriptor?? [ 1191.008466][T13663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.324215][ T1118] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.642695][ T9334] wacom 0003:056A:0331.0007: hidraw0: USB HID v0.00 Joystick [HID 056a:0331] on usb-dummy_hcd.6-1/input0 [ 1192.019965][ T1460] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.030077][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.059144][T14070] netlink: 'syz.2.2280': attribute type 2 has an invalid length. [ 1192.149192][ T9334] usb 7-1: USB disconnect, device number 11 [ 1192.730725][T14071] fido_id[14071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1192.870012][T10138] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.250798][ T38] audit: type=1326 audit(1700006452.090:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14080 comm="syz.6.2284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa87e5be159 code=0x0 [ 1193.395164][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.395189][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.718973][T14089] FAULT_INJECTION: forcing a failure. [ 1193.718973][T14089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1193.719016][T14089] CPU: 1 UID: 0 PID: 14089 Comm: syz.2.2287 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1193.719049][T14089] Tainted: [L]=SOFTLOCKUP [ 1193.719057][T14089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1193.719072][T14089] Call Trace: [ 1193.719080][T14089] [ 1193.719089][T14089] dump_stack_lvl+0xe8/0x150 [ 1193.719142][T14089] should_fail_ex+0x46b/0x600 [ 1193.719178][T14089] _copy_from_user+0x2d/0xb0 [ 1193.719209][T14089] memdup_user+0x5e/0xd0 [ 1193.719230][T14089] strndup_user+0x68/0xd0 [ 1193.719250][T14089] __se_sys_request_key+0x1c4/0x350 [ 1193.719279][T14089] ? __pfx___se_sys_request_key+0x10/0x10 [ 1193.719319][T14089] do_syscall_64+0x166/0x520 [ 1193.719365][T14089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.719388][T14089] ? clear_bhb_loop+0x70/0xc0 [ 1193.719414][T14089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.719438][T14089] RIP: 0033:0x7f5ec744e159 [ 1193.719460][T14089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.719479][T14089] RSP: 002b:00007f5ec56a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1193.719502][T14089] RAX: ffffffffffffffda RBX: 00007f5ec76d5fa0 RCX: 00007f5ec744e159 [ 1193.719519][T14089] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 1193.719536][T14089] RBP: 00007f5ec74e503b R08: 0000000000000000 R09: 0000000000000000 [ 1193.719552][T14089] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 1193.719575][T14089] R13: 00007f5ec76d6038 R14: 00007f5ec76d5fa0 R15: 00007ffc66f98a18 [ 1193.719609][T14089] [ 1194.245776][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.245816][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.669431][T14101] Invalid logical block size (2709) [ 1194.972323][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 1195.728410][T14127] tun0: tun_chr_ioctl cmd 1074025675 [ 1195.728434][T14127] tun0: persist enabled [ 1195.752034][T14127] tun0: tun_chr_ioctl cmd 1074025675 [ 1195.752061][T14127] tun0: persist enabled [ 1195.841732][T14134] FAULT_INJECTION: forcing a failure. [ 1195.841732][T14134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1195.841777][T14134] CPU: 1 UID: 0 PID: 14134 Comm: syz.1.2305 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1195.841812][T14134] Tainted: [L]=SOFTLOCKUP [ 1195.841820][T14134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1195.841834][T14134] Call Trace: [ 1195.841844][T14134] [ 1195.841854][T14134] dump_stack_lvl+0xe8/0x150 [ 1195.841897][T14134] should_fail_ex+0x46b/0x600 [ 1195.841936][T14134] _copy_to_user+0x31/0xb0 [ 1195.841973][T14134] keyctl_capabilities+0x50/0x160 [ 1195.842008][T14134] __se_sys_keyctl+0x4cc/0x9d0 [ 1195.842042][T14134] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1195.842078][T14134] ? __pfx_do_futex+0x10/0x10 [ 1195.842101][T14134] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1195.842137][T14134] ? __se_sys_futex+0x3a8/0x450 [ 1195.842169][T14134] ? rcu_is_watching+0x16/0xb0 [ 1195.842211][T14134] ? __x64_sys_keyctl+0x20/0xc0 [ 1195.842244][T14134] do_syscall_64+0x166/0x520 [ 1195.842276][T14134] ? trace_irq_disable+0x3b/0x140 [ 1195.842304][T14134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.842329][T14134] ? clear_bhb_loop+0x70/0xc0 [ 1195.842357][T14134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.842381][T14134] RIP: 0033:0x7f937556e159 [ 1195.842412][T14134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.842432][T14134] RSP: 002b:00007f93737c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1195.842455][T14134] RAX: ffffffffffffffda RBX: 00007f93757f5fa0 RCX: 00007f937556e159 [ 1195.842473][T14134] RDX: 00000000fffffe0d RSI: 0000200000000000 RDI: 000000000000001f [ 1195.842490][T14134] RBP: 00007f937560503b R08: 0000000000000000 R09: 0000000000000000 [ 1195.842506][T14134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.842519][T14134] R13: 00007f93757f6038 R14: 00007f93757f5fa0 R15: 00007fff934a1448 [ 1195.842554][T14134] [ 1196.485673][T14130] input: syz1 as /devices/virtual/input/input19 [ 1199.661935][T13636] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1199.842834][T13636] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1199.844489][T13636] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1199.844522][T13636] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1199.848331][T13636] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.848367][T13636] usb 7-1: Product: syz [ 1199.848386][T13636] usb 7-1: Manufacturer: syz [ 1199.848405][T13636] usb 7-1: SerialNumber: syz [ 1200.199223][T13629] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1200.252039][T13601] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1200.367454][T13629] usb 2-1: not running at top speed; connect to a high speed hub [ 1200.367527][T13629] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1200.412869][T13601] usb 6-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 1200.414464][T13601] usb 6-1: config 253 has an invalid interface number: 130 but max is 0 [ 1200.414494][T13601] usb 6-1: config 253 has no interface number 0 [ 1200.414557][T13601] usb 6-1: config 253 interface 130 has no altsetting 0 [ 1200.417560][T13601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.417591][T13601] usb 6-1: Product: syz [ 1200.417608][T13601] usb 6-1: Manufacturer: syz [ 1200.417624][T13601] usb 6-1: SerialNumber: syz [ 1200.422651][T13629] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.423326][T13629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.717614][ C1] usb 7-1: invalid arpc response id received: 16 [ 1201.059300][T13629] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 1201.059462][T13629] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 1201.245723][T13636] usb 7-1: failed to send ARPC request 1: -71 [ 1201.246808][T13636] usb 7-1: failed to execute ARPC: -71 [ 1201.249597][T13636] usb 7-1: failed to set connected state for cport 0: -71 [ 1201.249624][T13636] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 1201.313332][T13601] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 1201.369284][T13636] usb 7-1: failed to send ARPC request 3: -71 [ 1201.370351][T13636] usb 7-1: failed to execute ARPC: -71 [ 1201.370535][T13636] usb 7-1: failed to clear cport 0: -71 [ 1201.370558][T13636] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 1201.572233][T13601] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1201.578057][T13601] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 1201.578151][T13601] usb 6-1: media controller created [ 1201.638849][T13629] usb 2-1: USB disconnect, device number 39 [ 1201.805358][T14194] Invalid argument reading file caps for ./file0 [ 1202.019868][T13636] es2_ap_driver 7-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1202.117116][T13601] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1202.262566][T13636] usb 7-1: USB disconnect, device number 12 [ 1203.922542][T13601] DVB: Unable to find symbol dib8000_attach() [ 1203.922560][T13601] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 1204.177155][T14221] FAULT_INJECTION: forcing a failure. [ 1204.177155][T14221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.177198][T14221] CPU: 1 UID: 0 PID: 14221 Comm: syz.1.2339 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1204.177231][T14221] Tainted: [L]=SOFTLOCKUP [ 1204.177241][T14221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1204.177255][T14221] Call Trace: [ 1204.177265][T14221] [ 1204.177284][T14221] dump_stack_lvl+0xe8/0x150 [ 1204.177324][T14221] should_fail_ex+0x46b/0x600 [ 1204.177363][T14221] strncpy_from_user+0x36/0x2c0 [ 1204.177396][T14221] path_removexattrat+0x130/0x760 [ 1204.177434][T14221] ? __pfx_path_removexattrat+0x10/0x10 [ 1204.177465][T14221] ? do_futex+0x3e7/0x4e0 [ 1204.177520][T14221] ? rcu_is_watching+0x16/0xb0 [ 1204.177573][T14221] __x64_sys_lremovexattr+0x65/0x80 [ 1204.177605][T14221] do_syscall_64+0x166/0x520 [ 1204.177638][T14221] ? trace_irq_disable+0x3b/0x140 [ 1204.177667][T14221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.177692][T14221] ? clear_bhb_loop+0x70/0xc0 [ 1204.177720][T14221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.177745][T14221] RIP: 0033:0x7f937556e159 [ 1204.177767][T14221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.177789][T14221] RSP: 002b:00007f93737c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 1204.177816][T14221] RAX: ffffffffffffffda RBX: 00007f93757f5fa0 RCX: 00007f937556e159 [ 1204.177834][T14221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1204.177849][T14221] RBP: 00007f937560503b R08: 0000000000000000 R09: 0000000000000000 [ 1204.177864][T14221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1204.177879][T14221] R13: 00007f93757f6038 R14: 00007f93757f5fa0 R15: 00007fff934a1448 [ 1204.177917][T14221] [ 1204.232003][T13636] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1204.380585][T13601] rc_core: IR keymap rc-dib0700-nec not found [ 1204.380609][T13601] Registered IR keymap rc-empty [ 1204.406245][T13636] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1204.406301][T13636] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1204.410573][T13636] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.410601][T13636] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1204.410645][T13636] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1204.410681][T13636] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1204.410719][T13636] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1204.410746][T13636] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1204.491221][T13636] usb 7-1: string descriptor 0 read error: -22 [ 1204.491640][T13636] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.520098][T13601] dvb-usb: could not initialize remote control. [ 1204.520117][T13601] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 1204.581375][T13601] usb 6-1: USB disconnect, device number 9 [ 1204.875975][T13601] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 1205.051565][T14227] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input21 [ 1205.609431][T13636] usb 7-1: 2:0: failed to get current value for ch 1 (-71) [ 1206.611193][T14239] jffs2: notice: (14239) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1206.842129][ T58] block nbd1: Possible stuck request ffff88802736e000: control (read@0,1024B). Runtime 30 seconds [ 1206.844854][ T58] block nbd1: Possible stuck request ffff88802736e1c0: control (read@1024,1024B). Runtime 30 seconds [ 1207.229307][T14255] FAULT_INJECTION: forcing a failure. [ 1207.229307][T14255] name failslab, interval 1, probability 1, space 0, times 0 [ 1207.229358][T14255] CPU: 0 UID: 0 PID: 14255 Comm: syz.5.2350 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1207.229392][T14255] Tainted: [L]=SOFTLOCKUP [ 1207.229401][T14255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1207.229416][T14255] Call Trace: [ 1207.229426][T14255] [ 1207.229436][T14255] dump_stack_lvl+0xe8/0x150 [ 1207.229477][T14255] should_fail_ex+0x46b/0x600 [ 1207.229515][T14255] should_failslab+0xa8/0x100 [ 1207.229551][T14255] ? prepare_creds+0x30/0x820 [ 1207.229578][T14255] kmem_cache_alloc_noprof+0x9e/0x690 [ 1207.229612][T14255] ? prepare_creds+0x30/0x820 [ 1207.229645][T14255] prepare_creds+0x30/0x820 [ 1207.229677][T14255] keyctl_set_reqkey_keyring+0x7e/0x1d0 [ 1207.229713][T14255] __se_sys_keyctl+0x667/0x9d0 [ 1207.229747][T14255] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1207.229781][T14255] ? __pfx_do_futex+0x10/0x10 [ 1207.229804][T14255] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1207.229838][T14255] ? __se_sys_futex+0x3a8/0x450 [ 1207.229874][T14255] ? rcu_is_watching+0x16/0xb0 [ 1207.229917][T14255] ? __x64_sys_keyctl+0x20/0xc0 [ 1207.229951][T14255] do_syscall_64+0x166/0x520 [ 1207.229983][T14255] ? trace_irq_disable+0x3b/0x140 [ 1207.230013][T14255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.230038][T14255] ? clear_bhb_loop+0x70/0xc0 [ 1207.230066][T14255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.230097][T14255] RIP: 0033:0x7fe1261fe159 [ 1207.230120][T14255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.230141][T14255] RSP: 002b:00007fe124456028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1207.230168][T14255] RAX: ffffffffffffffda RBX: 00007fe126485fa0 RCX: 00007fe1261fe159 [ 1207.230186][T14255] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 1207.230201][T14255] RBP: 00007fe12629503b R08: 0000000000000000 R09: 0000000000000000 [ 1207.230216][T14255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.230231][T14255] R13: 00007fe126486038 R14: 00007fe126485fa0 R15: 00007fff5942a1d8 [ 1207.230268][T14255] [ 1207.788310][T13636] usb 7-1: USB disconnect, device number 13 [ 1208.352063][T13636] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 1209.537196][T13601] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1209.639555][T13636] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1209.652022][T13636] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1209.652053][T13636] usb 7-1: config 0 has no interface number 0 [ 1209.652118][T13636] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1209.652143][T13636] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1209.652172][T13636] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1209.652199][T13636] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1209.652227][T13636] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1209.652253][T13636] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1209.652298][T13636] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.712893][T13601] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1209.739531][T13601] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.739590][T13601] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1209.739616][T13601] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1209.739643][T13601] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1209.739690][T13601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.889790][T13636] usb 7-1: config 0 descriptor?? [ 1209.922671][T14274] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1209.922849][T14274] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1210.124716][T13636] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1210.194526][T13636] usb 7-1: USB disconnect, device number 14 [ 1210.306896][T13636] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1210.343605][T14296] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2365'. [ 1210.815667][T14306] jffs2: notice: (14306) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1211.011478][T13601] gud 6-1:1.0: USB-1: Failed to add properties (ret=-71) [ 1211.011539][T13601] gud 6-1:1.0: Failed to get connectors (error=-71) [ 1211.011576][T13601] gud 6-1:1.0: probe with driver gud failed with error -71 [ 1211.197292][T13601] usb 6-1: USB disconnect, device number 10 [ 1212.174079][T13636] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1212.331946][T13636] usb 6-1: Using ep0 maxpacket: 8 [ 1212.334478][T13636] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1212.338873][T13636] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1212.338906][T13636] usb 6-1: config 179 has no interface number 0 [ 1212.338965][T13636] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1212.338997][T13636] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1212.339028][T13636] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1212.339057][T13636] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1212.339087][T13636] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1212.339134][T13636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.404305][T14331] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1212.649251][T14339] FAULT_INJECTION: forcing a failure. [ 1212.649251][T14339] name failslab, interval 1, probability 1, space 0, times 0 [ 1212.649297][T14339] CPU: 0 UID: 0 PID: 14339 Comm: syz.7.2382 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1212.649331][T14339] Tainted: [L]=SOFTLOCKUP [ 1212.649340][T14339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1212.649355][T14339] Call Trace: [ 1212.649366][T14339] [ 1212.649376][T14339] dump_stack_lvl+0xe8/0x150 [ 1212.649417][T14339] should_fail_ex+0x46b/0x600 [ 1212.649455][T14339] should_failslab+0xa8/0x100 [ 1212.649495][T14339] __kmalloc_cache_noprof+0xa1/0x680 [ 1212.649529][T14339] ? do_eventfd+0x79/0x2b0 [ 1212.649556][T14339] ? do_eventfd+0x79/0x2b0 [ 1212.649595][T14339] do_eventfd+0x79/0x2b0 [ 1212.649626][T14339] __x64_sys_eventfd+0x39/0x50 [ 1212.649652][T14339] do_syscall_64+0x166/0x520 [ 1212.649685][T14339] ? trace_irq_disable+0x3b/0x140 [ 1212.649715][T14339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.649740][T14339] ? clear_bhb_loop+0x70/0xc0 [ 1212.649769][T14339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.649793][T14339] RIP: 0033:0x7fd5503fe159 [ 1212.649816][T14339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1212.649836][T14339] RSP: 002b:00007fd54e656028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 1212.649862][T14339] RAX: ffffffffffffffda RBX: 00007fd550685fa0 RCX: 00007fd5503fe159 [ 1212.649880][T14339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1212.649894][T14339] RBP: 00007fd55049503b R08: 0000000000000000 R09: 0000000000000000 [ 1212.649909][T14339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1212.649923][T14339] R13: 00007fd550686038 R14: 00007fd550685fa0 R15: 00007ffcaf5fb538 [ 1212.649968][T14339] [ 1213.836870][T14349] netlink: 'syz.7.2386': attribute type 11 has an invalid length. [ 1213.836898][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2386'. [ 1214.010749][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1214.010832][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1214.011385][T13636] usb 6-1: USB disconnect, device number 11 [ 1214.653824][T14368] input: syz1 as /devices/virtual/input/input22 [ 1215.388656][T14384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2403'. [ 1215.951878][T14407] jffs2: notice: (14407) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1216.402210][ T9220] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1216.462079][T13601] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1216.553012][ T9220] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1216.554720][ T9220] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.554787][ T9220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.611891][T13601] usb 6-1: Using ep0 maxpacket: 16 [ 1216.612595][T13601] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1216.613849][T13601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.613884][T13601] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1216.613931][T13601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.690087][T13601] usb 6-1: config 0 descriptor?? [ 1216.723978][ T9220] as10x_usb: device has been detected [ 1216.726430][ T9220] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1217.026036][ T9220] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1217.123643][T13601] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 1217.135604][T13601] hid_parser_main: 14 callbacks suppressed [ 1217.135642][T13601] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1217.135672][T13601] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1217.135700][T13601] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1217.135726][T13601] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1217.135753][T13601] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1217.135779][T13601] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1217.135805][T13601] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1217.135833][T13601] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1217.135859][T13601] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1217.135887][T13601] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1217.270846][T14428] INFO: trying to register non-static key. [ 1217.276975][T14428] The code is fine but needs lockdep annotation, or maybe [ 1217.284135][T14428] you didn't initialize this object before use? [ 1217.290489][T14428] turning off the locking correctness validator. [ 1217.296863][T14428] CPU: 0 UID: 0 PID: 14428 Comm: syz.1.2418 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1217.308466][T14428] Tainted: [L]=SOFTLOCKUP [ 1217.312832][T14428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1217.322932][T14428] Call Trace: [ 1217.326262][T14428] [ 1217.329244][T14428] dump_stack_lvl+0xe8/0x150 [ 1217.333907][T14428] assign_lock_key+0x133/0x150 [ 1217.338808][T14428] register_lock_class+0xcc/0x2e0 [ 1217.343873][T14428] ? __lock_acquire+0x747/0x2de0 [ 1217.348847][T14428] __lock_acquire+0x10c/0x2de0 [ 1217.353674][T14428] ? __lock_acquire+0x747/0x2de0 [ 1217.358663][T14428] ? __lock_acquire+0x747/0x2de0 [ 1217.363647][T14428] lock_acquire+0x115/0x350 [ 1217.368182][T14428] ? as102_stream_ctrl+0x27/0xc0 [ 1217.373220][T14428] ? as102_stream_ctrl+0x27/0xc0 [ 1217.378220][T14428] ? as102_stream_ctrl+0x27/0xc0 [ 1217.383186][T14428] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1217.389351][T14428] ? as102_stream_ctrl+0x27/0xc0 [ 1217.394327][T14428] as102_stream_ctrl+0x27/0xc0 [ 1217.399132][T14428] __dvb_frontend_open+0x2ef/0xc40 [ 1217.404367][T14428] ? mutex_lock_nested+0x152/0x1d0 [ 1217.409549][T14428] ? __pfx_dvb_frontend_open+0x10/0x10 [ 1217.415039][T14428] dvb_device_open+0x258/0x350 [ 1217.419890][T14428] chrdev_open+0x4dc/0x600 [ 1217.424353][T14428] ? __pfx_chrdev_open+0x10/0x10 [ 1217.429330][T14428] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1217.435737][T14428] ? __pfx_chrdev_open+0x10/0x10 [ 1217.440723][T14428] do_dentry_open+0x849/0x1420 [ 1217.445554][T14428] vfs_open+0x3b/0x350 [ 1217.449683][T14428] ? path_openat+0x142d/0x1d60 [ 1217.454485][T14428] path_openat+0x1448/0x1d60 [ 1217.459242][T14428] do_file_open+0x23e/0x4a0 [ 1217.463862][T14428] ? __pfx_do_file_open+0x10/0x10 [ 1217.468952][T14428] ? alloc_fd+0x654/0x6d0 [ 1217.473320][T14428] do_sys_openat2+0x115/0x200 [ 1217.478756][T14428] ? __pfx_do_sys_openat2+0x10/0x10 [ 1217.483991][T14428] ? rcu_is_watching+0x16/0xb0 [ 1217.488791][T14428] __x64_sys_openat+0x138/0x170 [ 1217.493696][T14428] do_syscall_64+0x166/0x520 [ 1217.498325][T14428] ? trace_irq_disable+0x3b/0x140 [ 1217.503462][T14428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.509638][T14428] ? clear_bhb_loop+0x70/0xc0 [ 1217.514451][T14428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.520395][T14428] RIP: 0033:0x7f937552e98e [ 1217.524855][T14428] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1217.544680][T14428] RSP: 002b:00007f93737a4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1217.553123][T14428] RAX: ffffffffffffffda RBX: 00007f93737a56c0 RCX: 00007f937552e98e [ 1217.561118][T14428] RDX: 0000000000000802 RSI: 00007f93737a4c00 RDI: ffffffffffffff9c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1217.569121][T14428] RBP: 00007f93737a4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1217.577140][T14428] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1217.585152][T14428] R13: 00007f93757f6128 R14: 00007f93757f6090 R15: 00007fff934a1448 [ 1217.593223][T14428] [ 1217.597651][T13601] HID 045e:07da: Invalid code 65791 type 1 [ 1217.598090][T13601] HID 045e:07da: Invalid code 768 type 1 [ 1217.598107][T13601] HID 045e:07da: Invalid code 769 type 1 [ 1217.598122][T13601] HID 045e:07da: Invalid code 770 type 1 [ 1217.598136][T13601] HID 045e:07da: Invalid code 771 type 1 [ 1217.598150][T13601] HID 045e:07da: Invalid code 772 type 1 [ 1217.598172][T13601] HID 045e:07da: Invalid code 773 type 1 [ 1217.598187][T13601] HID 045e:07da: Invalid code 774 type 1 [ 1217.598202][T13601] HID 045e:07da: Invalid code 775 type 1 [ 1217.598215][T13601] HID 045e:07da: Invalid code 776 type 1 [ 1217.615107][T13601] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0008/input/input23 [ 1217.683004][T13601] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1217.768773][T14434] loop9: detected capacity change from 0 to 7 [ 1217.772472][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.772577][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1217.773406][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.773527][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1217.776492][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.776598][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1217.776887][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.777015][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1217.777352][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.777463][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1217.777702][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.777779][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1217.777979][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.778049][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1217.778149][T14434] ldm_validate_partition_table(): Disk read failed. [ 1217.778300][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.778376][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1217.778596][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.778695][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1217.778962][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.779029][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1217.779399][T14434] Dev loop9: unable to read RDB block 0 [ 1217.780156][ T9220] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:0: No space for directory leaf checksum. Please run e2fsck -D. [ 1217.780198][ T9220] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:0: checksumming directory block 0 [ 1217.780460][T14434] loop9: unable to read partition table [ 1217.780598][T14434] loop9: partition table beyond EOD, truncated [ 1217.780743][T14434] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1217.780766][ T9220] usb 2-1: loading /lib/firmware/updates/syzkaller/as102_data1_st.hex failed with error -74 [ 1217.780950][ T9220] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:0: No space for directory leaf checksum. Please run e2fsck -D. [ 1217.780978][ T9220] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:0: checksumming directory block 0 [ 1217.781579][ T9220] usb 2-1: loading /lib/firmware/updates/as102_data1_st.hex failed with error -74 [ 1217.781753][ T9220] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:0: No space for directory leaf checksum. Please run e2fsck -D. [ 1217.781924][ T9220] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:0: checksumming directory block 0 [ 1217.782306][ T9220] usb 2-1: loading /lib/firmware/syzkaller/as102_data1_st.hex failed with error -74 [ 1217.782564][ T9220] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:0: No space for directory leaf checksum. Please run e2fsck -D. [ 1217.782595][ T9220] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:0: checksumming directory block 0 [ 1217.783064][ T9220] usb 2-1: loading /lib/firmware/as102_data1_st.hex failed with error -74 [ 1217.783155][ T9220] usb 2-1: Direct firmware load for as102_data1_st.hex failed with error -74 [ 1217.783199][ T9220] usb 2-1: Falling back to sysfs fallback for: as102_data1_st.hex [ 1218.294690][T13636] usb 6-1: USB disconnect, device number 12 [ 1218.374919][T14435] fido_id[14435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1220.583285][ T67] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.803422][ T67] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.044092][ T67] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.253353][ T67] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.603364][ T67] bridge_slave_1: left allmulticast mode [ 1221.603395][ T67] bridge_slave_1: left promiscuous mode [ 1221.603670][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.772706][ T67] bridge_slave_0: left allmulticast mode [ 1221.772738][ T67] bridge_slave_0: left promiscuous mode [ 1221.772906][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.472587][ T67] team0: Port device bond0 removed [ 1222.512984][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1222.572458][ T67] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1222.593305][ T67] bond0 (unregistering): Released all slaves [ 1222.632998][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1223.205386][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1223.605856][ T5247] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1224.022056][ T67] hsr_slave_0: left promiscuous mode [ 1224.062007][ T67] hsr_slave_1: left promiscuous mode [ 1224.062659][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1224.062676][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.104206][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1224.104233][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1224.163448][ T67] veth1_macvtap: left promiscuous mode [ 1224.163499][ T67] veth0_macvtap: left promiscuous mode [ 1224.163605][ T67] veth1_vlan: left promiscuous mode [ 1224.163671][ T67] veth0_vlan: left promiscuous mode [ 1224.762401][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1224.802809][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1224.913779][ T5247] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1226.233275][ T67] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.453292][ T67] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.703245][ T67] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.913218][ T67] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0