last executing test programs: 26.461332333s ago: executing program 3 (id=751): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) 23.474093658s ago: executing program 3 (id=753): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4902, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x500, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000800000000029500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) unlink(0x0) 22.362055546s ago: executing program 2 (id=755): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000001200)={0x23, 0x2, 0xc, 0x21}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r2, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x3}, 0xf) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000001a00010e25bd70000000000002000000ff00000000000000"], 0x1c}}, 0x844) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) 17.376435192s ago: executing program 2 (id=760): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1f, {[@global=@item_012={0x0, 0x1, 0x9}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, '%'}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4]}}, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895d"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)=""/231) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000080)={0x53, 0xe1, 0x7, {0xff11, 0xffff}, {0x4, 0x5}, @const={0x4, {0x4, 0x6, 0x4, 0x4}}}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000040)=0x7) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x0, 0xa}, 0x0, 0x0}) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) 17.371742122s ago: executing program 4 (id=761): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = mq_open(0x0, 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x20) write(r2, &(0x7f0000000200)='md0\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x509000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000100), &(0x7f00000001c0)=0xc) write(r3, &(0x7f0000000280)='externa', 0x7) write(0xffffffffffffffff, &(0x7f0000000400)='65536', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/layout\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x8000) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80800) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) 15.704955464s ago: executing program 0 (id=762): openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setitimer(0x3, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f0000000380)) socket$inet6(0xa, 0x802, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x8001, 0x1}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x3b) 14.216050022s ago: executing program 3 (id=763): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) 14.199326402s ago: executing program 0 (id=764): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x400c4d06, &(0x7f0000000340)="b7e3") close(r3) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000180)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xe4c, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) 14.191234783s ago: executing program 4 (id=765): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.594003087s ago: executing program 2 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002040)={0x18, 0x0, &(0x7f0000000380)=[@request_death, @decrefs], 0x0, 0x0, &(0x7f0000001040)}) 13.579150107s ago: executing program 4 (id=767): socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642", @ANYRES8=r0, @ANYRES64=r0], 0x97) 13.236809776s ago: executing program 3 (id=769): preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x107280) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x80, 0x40e0, 0xc}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) 13.0959869s ago: executing program 4 (id=770): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r3, 0x0, 0x0, 0x46, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r5}) close(r6) 8.698282081s ago: executing program 1 (id=775): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = mq_open(0x0, 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x20) write(r2, &(0x7f0000000200)='md0\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x509000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000100), &(0x7f00000001c0)=0xc) write(r3, &(0x7f0000000280)='externa', 0x7) write(0xffffffffffffffff, &(0x7f0000000400)='65536', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/layout\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x8000) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80800) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) 8.246391262s ago: executing program 3 (id=776): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1f, {[@global=@item_012={0x0, 0x1, 0x9}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, '%'}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4]}}, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895d"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)=""/231) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000080)={0x53, 0xe1, 0x7, {0xff11, 0xffff}, {0x4, 0x5}, @const={0x4, {0x4, 0x6, 0x4, 0x4}}}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000040)=0x7) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x0, 0xa}, 0x0, 0x0}) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6c5552018161391"], 0x0) 7.726339865s ago: executing program 2 (id=777): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)}) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) 7.683655376s ago: executing program 1 (id=778): syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0x1d6000) write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 7.257473817s ago: executing program 4 (id=779): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) 6.387012208s ago: executing program 2 (id=780): socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_clone3(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xaf123e30d406ff1, 0x2010, 0xffffffffffffffff, 0xe414c000) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000280), 0x4, 0x40) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000600)=0x1) 6.371298039s ago: executing program 4 (id=781): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r3, 0xfffd) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 6.235879323s ago: executing program 0 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x120) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000005efce0000000620ff7f09000400edc387aeffa840c3d071b926e1ef5c60246cd3564726b84f302e2a9fc7aa31724c2086d970"], 0x12) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() syz_usb_connect(0x5, 0x90, &(0x7f0000000340)=ANY=[@ANYBLOB="12011003c6b7bb10d816137283b80102030109027e0001047f007f090400000698ce71010624060000f605240008000d240f01000000000200f8ff0c09058010000400f90909000e100800fd050a0905040810000721740725010400010009050100400009f20709050d102000097a03020f0725010c09010009058c162000f6ff0307250108f500000725010c06f408"], &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x6, 0x4, 0x0, 0xff, 0x5}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "edc0078e0eb2199a57374be4a78b92fc"}]}, 0x1, [{0x0, 0x0}]}) socket$inet_mptcp(0x2, 0x1, 0x106) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x6f, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0xfc, 0xf0, 0x6, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, ' '}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x3, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x20}, @ncm={0x6, 0x24, 0x1a, 0xa401, 0x2}, @mdlm_detail={0xc, 0x24, 0x13, 0x7, "c008055ea3d9f22f"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xea, 0x3, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x6, 0x14}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0xc5, 0x9}}}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0x7, 0x0, 0xf8, 0x10, 0x6}, 0x0, 0x0, 0x8, [{0x6e, &(0x7f00000005c0)=@string={0x6e, 0x3, "cfd1e42929256b45bb469deb581df8c75ca4cd7f85e4ae1681b392497f8e21071df5cb188717ae47717fe5248b4f18f2ff4b98ba270a763f04e65a8f92ce6d942d5a7870b1eee43fa6e57cbb8ddaf37a3a0e4a8d560c1a9a768ef91523872a8a3aa0120d6120135bc0375141"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x340a}}, {0x8e, &(0x7f0000000680)=@string={0x8e, 0x3, "895d30adc3435bcb538254775b992fd5466f78aa7ef900d054f672f2bd5dc99612667df3144094f08ac3c280473a29f0684b424c5ca4c82b515d7d69ebea6faf948d5b7eb0fb22d924e8a7619d8be88267fd3e48918461121e6c56b3bdebd2b1928a61467d0f751ab17fb707d0fa5a18bcbd14435831456c00ecccc3a68f61cddcb359e5d9b2e3a7fdab7269"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x441}}, {0xd8, &(0x7f0000000880)=@string={0xd8, 0x3, "95dd24367562f98bfc6938cb8134a4a60d1bad7f63ff499a36ea2529ebd1284b94da8c5de6c59fd35537252b4c293d5fab5bbd7155a9cf4fb98e92e3909f8c6b19b6d2f356c4e7fde7147c8a57ac3d3056145b0d097457525212e5b603bd57e990dab84ca155ceb94f652775b311e13bda88cf4e9cd22b4921553eeb435efb3ad2b499d8d2ba73642ab614d04b561411f16d336cb008d8539d5921baff836ebfe5f389034a22936d80dd55a9246f9c93b9218aee51d50fb8720e4b1f65c60c02f4c3b75908354e0573a823147a71684be3d7e2cc8464"}}, {0xd9, &(0x7f0000000980)=@string={0xd9, 0x3, "377c68e515a7575b87131bb2f07f812cbc7619b1c004a950bbce9a6c64be04139aa5d90fb5ed26828122598451459bf27b21f0844b885e92e2d8e4eb0958b6c416728fe102a69a052ae5c0785737ca9621b33bc998738285872a8733b7ce99007fd6222bf9a5f06518b0247bb479e3b4fd294be5295672d3cbbbb369b57d6df92aa0d85fcf79d5a37d152669236ada2a93fe753c3d0e1c2ad03ea0a16773766f9db5b7f73ccb6c573de2ca2ca3bad343232ae94377f55f8f8d520cc9bdf181c32e6ac1e50d2715f45df7eaa9eb60ff793415bfbbc0011a"}}]}) 3.505916481s ago: executing program 1 (id=783): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @flat=@handle={0x73682a85, 0x10b, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) 3.485655002s ago: executing program 2 (id=784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_NAT_IPV4_MIN={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x6558, 0x8}}}}}}, 0x2e) 2.452047188s ago: executing program 0 (id=785): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4902, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x500, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000800000000029500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) unlink(0x0) 2.319059771s ago: executing program 1 (id=786): preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x107280) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x80, 0x40e0, 0xc}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) 1.901978821s ago: executing program 0 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002040)={0x18, 0x0, &(0x7f0000000380)=[@request_death, @decrefs], 0x0, 0x0, &(0x7f0000001040)}) 1.151274421s ago: executing program 1 (id=788): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = mq_open(0x0, 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x20) write(r2, &(0x7f0000000200)='md0\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x509000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000100), &(0x7f00000001c0)=0xc) write(r3, &(0x7f0000000280)='externa', 0x7) write(0xffffffffffffffff, &(0x7f0000000400)='65536', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/layout\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x8000) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80800) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) 67.536008ms ago: executing program 3 (id=789): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 44.313458ms ago: executing program 0 (id=790): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_open_pts(r1, 0x80) 0s ago: executing program 1 (id=791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dvb_demux(0x0, 0x0, 0x700) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000500)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000d000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000e9000000b702000014000000b7033eecc200000083000000bf0900000000000055090100000000009500000000000000182400", @ANYRES32=r0, @ANYBLOB="00000000020000009500000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f9ffffff85000000060000001864000009000000000000000700000006e503009843000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000070fb0000000000003c0a0000b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0x1, 0x6d, &(0x7f0000000700)=""/109, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000007c0)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000800)=[{0x1, 0x3, 0x4, 0xf}, {0x1, 0x5, 0x4, 0x4}, {0x1, 0x3, 0x4, 0x1}, {0x3, 0x5, 0xa, 0x3}, {0x3, 0x5, 0x5, 0x3}, {0x5, 0x3, 0xe, 0x6}]}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000940)={r5, r0}, 0xc) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) kernel console output (not intermixed with test programs): d mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.182170][ T1292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.192352][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.202454][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.213122][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.224702][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.232708][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.243244][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.255172][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.265930][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.279044][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.289838][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.301397][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.311237][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.328937][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.343325][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.355140][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.365844][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.377828][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.389045][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.400021][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.409810][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.418967][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.419660][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 56.428169][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.438537][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 56.449500][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.463786][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.473559][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.476036][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 56.491911][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.494444][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 56.504774][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.516932][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 56.521290][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.533424][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.562865][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.574541][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.584812][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.596230][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.606503][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.617317][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.627567][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.640474][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.657139][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.671504][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.681125][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.696710][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.705553][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.723618][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.738397][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.770115][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.792717][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.810969][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.831880][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.490803][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.501365][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.511775][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.523987][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.546332][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.580884][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.592743][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.594060][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.606801][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.611721][ T4268] trusted_key: encrypted_key: insufficient parameters specified [ 57.711141][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.813272][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.907253][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.916150][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.925437][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.489432][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 58.852971][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 59.045666][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 59.057648][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 59.074320][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 59.085725][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.097681][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.122194][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.157018][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.167001][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.174848][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.183322][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.199763][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.215376][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.226505][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.238391][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.249293][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.332734][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.356361][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.378095][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.956591][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 59.976596][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 59.996589][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.016597][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.036636][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 60.056651][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.066604][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.076598][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.106610][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.116597][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.487415][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.495279][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.527142][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.564970][ T4292] FAULT_INJECTION: forcing a failure. [ 60.564970][ T4292] name fail_futex, interval 1, probability 0, space 0, times 1 [ 60.624444][ T4292] CPU: 1 PID: 4292 Comm: syz.4.9 Not tainted syzkaller #0 [ 60.631621][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.641696][ T4292] Call Trace: [ 60.644965][ T4292] [ 60.647882][ T4292] dump_stack_lvl+0x188/0x250 [ 60.652567][ T4292] ? stack_trace_snprint+0xe0/0xe0 [ 60.657666][ T4292] ? show_regs_print_info+0x20/0x20 [ 60.662854][ T4292] ? load_image+0x410/0x410 [ 60.667361][ T4292] ? kasan_set_track+0x62/0x70 [ 60.672127][ T4292] ? kasan_set_track+0x4b/0x70 [ 60.676877][ T4292] ? kasan_set_free_info+0x1f/0x40 [ 60.681970][ T4292] ? ____kasan_slab_free+0xd5/0x110 [ 60.687152][ T4292] ? slab_free_freelist_hook+0xec/0x170 [ 60.692685][ T4292] ? kfree+0xef/0x2a0 [ 60.696651][ T4292] should_fail+0x383/0x4b0 [ 60.701056][ T4292] get_futex_key+0x1a1/0x12d0 [ 60.705719][ T4292] ? __lock_acquire+0x13b3/0x7d40 [ 60.710733][ T4292] ? futex_wait_restart+0x250/0x250 [ 60.715922][ T4292] futex_wake+0x101/0x540 [ 60.720243][ T4292] ? futex_wait+0x680/0x680 [ 60.724736][ T4292] ? verify_lock_unused+0x140/0x140 [ 60.729957][ T4292] ? verify_lock_unused+0x140/0x140 [ 60.735160][ T4292] do_futex+0xd83/0x12b0 [ 60.739389][ T4292] ? free_msg+0x42/0xb0 [ 60.743530][ T4292] ? kfree+0xef/0x2a0 [ 60.747506][ T4292] ? futex_exit_release+0x1c0/0x1c0 [ 60.752695][ T4292] ? __context_tracking_exit+0x4c/0x80 [ 60.758146][ T4292] __se_sys_futex+0x389/0x420 [ 60.762814][ T4292] ? __x64_sys_futex+0xf0/0xf0 [ 60.767600][ T4292] ? __x64_sys_futex+0x1d/0xf0 [ 60.772382][ T4292] do_syscall_64+0x4c/0xa0 [ 60.776788][ T4292] ? clear_bhb_loop+0x30/0x80 [ 60.781448][ T4292] ? clear_bhb_loop+0x30/0x80 [ 60.786131][ T4292] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.792027][ T4292] RIP: 0033:0x7f1e416d6159 [ 60.796434][ T4292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.816029][ T4292] RSP: 002b:00007f1e3f92e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 60.824445][ T4292] RAX: ffffffffffffffda RBX: 00007f1e4195dfa8 RCX: 00007f1e416d6159 [ 60.832431][ T4292] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e4195dfac [ 60.840393][ T4292] RBP: 00007f1e4195dfa0 R08: 001e6f2536532000 R09: 0000000000000000 [ 60.848352][ T4292] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 60.856307][ T4292] R13: 00007f1e4195e038 R14: 00007ffd38f2cff0 R15: 00007ffd38f2d0d8 [ 60.864274][ T4292] [ 60.897910][ T4296] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.272599][ T4309] binder: BINDER_SET_CONTEXT_MGR already set [ 61.279295][ T4309] binder: 4306:4309 ioctl 4018620d 200000000100 returned -16 [ 62.138274][ T4305] ======================================================= [ 62.138274][ T4305] WARNING: The mand mount option has been deprecated and [ 62.138274][ T4305] and is ignored by this kernel. Remove the mand [ 62.138274][ T4305] option from the mount to silence this warning. [ 62.138274][ T4305] ======================================================= [ 62.915417][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 62.928796][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 62.936547][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 62.944731][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 62.952357][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 62.961437][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 62.969892][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 62.978150][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 62.986871][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 62.996086][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 63.035893][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 63.043466][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 63.051505][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 63.058990][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 63.066398][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 63.073904][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 63.081370][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 63.096687][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 63.113002][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 64.203023][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 64.219496][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 64.561852][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 64.569781][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 64.572256][ T4333] FAULT_INJECTION: forcing a failure. [ 64.572256][ T4333] name fail_futex, interval 1, probability 0, space 0, times 0 [ 64.577389][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 64.598809][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 64.619777][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 64.632472][ T4333] CPU: 0 PID: 4333 Comm: syz.2.19 Not tainted syzkaller #0 [ 64.639717][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.649785][ T4333] Call Trace: [ 64.653092][ T4333] [ 64.656075][ T4333] dump_stack_lvl+0x188/0x250 [ 64.660770][ T4333] ? show_regs_print_info+0x20/0x20 [ 64.665979][ T4333] ? load_image+0x410/0x410 [ 64.670489][ T4333] ? release_pages+0x185f/0x1bd0 [ 64.675447][ T4333] ? lru_cache_disable+0x30/0x30 [ 64.680397][ T4333] should_fail+0x383/0x4b0 [ 64.684830][ T4333] get_futex_key+0x1a1/0x12d0 [ 64.689527][ T4333] ? __lock_acquire+0x13b3/0x7d40 [ 64.694569][ T4333] ? futex_wait_restart+0x250/0x250 [ 64.699787][ T4333] futex_wake+0x101/0x540 [ 64.704132][ T4333] ? futex_wait+0x680/0x680 [ 64.708647][ T4333] ? verify_lock_unused+0x140/0x140 [ 64.713854][ T4333] ? verify_lock_unused+0x140/0x140 [ 64.719064][ T4333] do_futex+0xd83/0x12b0 [ 64.723333][ T4333] ? futex_exit_release+0x1c0/0x1c0 [ 64.728542][ T4333] ? __context_tracking_exit+0x4c/0x80 [ 64.734011][ T4333] __se_sys_futex+0x389/0x420 [ 64.738694][ T4333] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 64.744680][ T4333] ? __x64_sys_futex+0xf0/0xf0 [ 64.749453][ T4333] ? __x64_sys_futex+0x1d/0xf0 [ 64.754220][ T4333] do_syscall_64+0x4c/0xa0 [ 64.758641][ T4333] ? clear_bhb_loop+0x30/0x80 [ 64.763329][ T4333] ? clear_bhb_loop+0x30/0x80 [ 64.768016][ T4333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.773919][ T4333] RIP: 0033:0x7f6bee9ea159 [ 64.778340][ T4333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.797953][ T4333] RSP: 002b:00007f6becc420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 64.806384][ T4333] RAX: ffffffffffffffda RBX: 00007f6beec71fa8 RCX: 00007f6bee9ea159 [ 64.814373][ T4333] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6beec71fac [ 64.822361][ T4333] RBP: 00007f6beec71fa0 R08: 001f07bb68340880 R09: 0000000000000000 [ 64.830338][ T4333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.838323][ T4333] R13: 00007f6beec72038 R14: 00007ffe28b694c0 R15: 00007ffe28b695a8 [ 64.846325][ T4333] [ 65.059268][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.091972][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.119291][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.136803][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.152142][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.168566][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.182385][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.203547][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.211345][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.224462][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.233709][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.247276][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.254817][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.271519][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.281537][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.292545][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.302405][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.313355][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.323246][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.334226][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.344064][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.354931][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.364945][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.379849][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.389704][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.400652][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.410477][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.421408][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.431271][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.442260][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.453525][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.464585][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.476205][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.491068][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.499891][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.511886][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.520701][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.532733][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.541521][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.553492][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.562326][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.574332][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.584998][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.598138][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.605570][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.620289][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.630164][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.641448][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.651255][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.662183][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.672066][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.684761][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.702536][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.711472][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.723463][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.732231][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.744304][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.753144][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.765215][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.773994][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.783009][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.790542][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.797988][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.805375][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.812867][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.820287][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.827789][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.835180][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.842658][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.850215][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.857673][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.865063][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.872570][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.880003][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.888188][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.895621][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.903041][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.910502][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.917934][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.925318][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.933507][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.940977][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.948426][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.955818][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.963252][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.971918][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.979363][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.987529][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 65.994950][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.002379][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.009826][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.017285][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.024677][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.032151][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.040113][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.047604][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.055016][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.062481][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.069923][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.077367][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.084741][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.100034][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.107573][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.114979][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.122498][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.129955][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.137407][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.144816][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.152332][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.159780][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.167708][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.175111][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.182554][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.189982][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.198236][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.205647][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.213081][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.220525][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.227992][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.235389][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.242817][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.250603][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.258320][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.265735][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.273170][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.280610][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.288050][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.295934][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.303386][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.310816][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.318277][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.325671][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.333477][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.340931][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.348380][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.355767][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.363202][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.370652][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.378185][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.385581][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.393055][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.401006][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.408496][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.415885][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.423328][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.430740][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.438196][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.445607][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.453031][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.460449][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.467898][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.475302][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.482724][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.490506][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.498661][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.506066][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.513511][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.520953][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.528424][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.535812][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.543287][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.550704][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.558177][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.565573][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.573019][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.580485][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.587931][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.595316][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.603347][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.611141][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.618617][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.626005][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.633428][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.640876][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.648515][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.656000][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.663430][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.670868][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.678374][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.685765][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.693211][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.700626][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.708766][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.716170][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.723640][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.733542][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.741024][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.748442][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.755819][ T4232] hid-generic 684B:0002:0002.0001: unknown main item tag 0x0 [ 66.782830][ T4232] hid-generic 684B:0002:0002.0001: hidraw0: HID v0.08 Device [syz0] on syz1 [ 66.841281][ T4346] ip_tables: iptables: counters copy to user failed while replacing table [ 66.914457][ T4346] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 66.960617][ T4344] fido_id[4344]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.147416][ T4352] Device name cannot be null; rc = [-22] [ 68.764364][ T4358] sched: RT throttling activated [ 70.211821][ T4240] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 71.418015][ T4388] netlink: 44 bytes leftover after parsing attributes in process `syz.0.33'. [ 71.428254][ T4388] netlink: 232 bytes leftover after parsing attributes in process `syz.0.33'. [ 71.437280][ T4388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 71.493727][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.500317][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.569769][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.162509][ T4411] FAULT_INJECTION: forcing a failure. [ 72.162509][ T4411] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 72.177831][ T4411] CPU: 0 PID: 4411 Comm: syz.4.42 Not tainted syzkaller #0 [ 72.180298][ T4240] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 72.185062][ T4411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.185338][ T4411] Call Trace: [ 72.185348][ T4411] [ 72.198956][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.204805][ T4411] dump_stack_lvl+0x188/0x250 [ 72.204837][ T4411] ? show_regs_print_info+0x20/0x20 [ 72.204853][ T4411] ? load_image+0x410/0x410 [ 72.204878][ T4411] should_fail+0x383/0x4b0 [ 72.237780][ T4411] prepare_alloc_pages+0x1e3/0x5b0 [ 72.242915][ T4411] __alloc_pages+0x11b/0x480 [ 72.247518][ T4411] ? zone_statistics+0x170/0x170 [ 72.252469][ T4411] ? rcu_lock_acquire+0x30/0x30 [ 72.257330][ T4411] ? alloc_pages+0x452/0x560 [ 72.261933][ T4411] __get_free_pages+0x8/0x30 [ 72.266528][ T4411] __tlb_remove_page_size+0x1f2/0x3f0 [ 72.271914][ T4411] unmap_page_range+0xfcf/0x2410 [ 72.276889][ T4411] unmap_vmas+0x131/0x250 [ 72.281231][ T4411] ? unmap_page_range+0x2410/0x2410 [ 72.286433][ T4411] ? __mutex_lock_common+0x435/0x2400 [ 72.291819][ T4411] ? exit_mm_release+0x16/0x30 [ 72.296599][ T4411] exit_mmap+0x3b9/0x640 [ 72.299301][ T4240] usb 4-1: selecting invalid altsetting 3 [ 72.300857][ T4411] ? vm_brk+0x20/0x20 [ 72.310772][ T4411] ? uprobe_clear_state+0x2f6/0x460 [ 72.315984][ T4411] __mmput+0x115/0x390 [ 72.317228][ T4240] comedi comedi5: could not set alternate setting 3 in high speed [ 72.320060][ T4411] exit_mm+0x632/0x7b0 [ 72.320079][ T4411] ? perf_pmu_migrate_context+0xb70/0xb70 [ 72.320103][ T4411] ? do_exit+0x2110/0x2110 [ 72.320117][ T4411] ? __ia32_sys_timer_delete+0x40/0x40 [ 72.320133][ T4411] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 72.320156][ T4411] ? tty_audit_exit+0x149/0x1f0 [ 72.320176][ T4411] do_exit+0x5b8/0x2110 [ 72.320198][ T4411] ? put_task_struct+0x80/0x80 [ 72.333059][ T4240] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 72.337750][ T4411] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 72.337785][ T4411] ? _raw_spin_lock_irq+0xb7/0xf0 [ 72.337806][ T4411] do_group_exit+0x12c/0x2f0 [ 72.368559][ T4240] usbduxsigma: probe of 4-1:128.0 failed with error -22 [ 72.375759][ T4411] ? lockdep_hardirqs_on+0x94/0x140 [ 72.375791][ T4411] get_signal+0x7eb/0x12e0 [ 72.375823][ T4411] arch_do_signal_or_restart+0xe6/0x12a0 [ 72.375854][ T4411] ? futex_exit_release+0x1c0/0x1c0 [ 72.375874][ T4411] ? get_sigframe_size+0x10/0x10 [ 72.375890][ T4411] ? __context_tracking_exit+0x4c/0x80 [ 72.429487][ T4411] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 72.435493][ T4411] ? exit_to_user_mode_loop+0x3b/0x130 [ 72.440965][ T4411] exit_to_user_mode_loop+0x9e/0x130 [ 72.446254][ T4411] exit_to_user_mode_prepare+0xee/0x180 [ 72.451803][ T4411] syscall_exit_to_user_mode+0x16/0x40 [ 72.457267][ T4411] do_syscall_64+0x58/0xa0 [ 72.461690][ T4411] ? clear_bhb_loop+0x30/0x80 [ 72.466378][ T4411] ? clear_bhb_loop+0x30/0x80 [ 72.471079][ T4411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.476983][ T4411] RIP: 0033:0x7f1e416d6159 [ 72.481408][ T4411] Code: Unable to access opcode bytes at RIP 0x7f1e416d612f. [ 72.488774][ T4411] RSP: 002b:00007f1e3f92e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 72.497198][ T4411] RAX: 0000000000000001 RBX: 00007f1e4195dfa8 RCX: 00007f1e416d6159 [ 72.505179][ T4411] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e4195dfac [ 72.513163][ T4411] RBP: 00007f1e4195dfa0 R08: 002e8efa049f5e80 R09: 0000000000000000 [ 72.521145][ T4411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.529128][ T4411] R13: 00007f1e4195e038 R14: 00007ffd38f2cff0 R15: 00007ffd38f2d0d8 [ 72.537125][ T4411] [ 74.093309][ T21] usb 4-1: USB disconnect, device number 2 [ 76.561447][ T4201] Bluetooth: hci2: Dropping invalid advertising data [ 76.568862][ T4201] Bluetooth: hci2: Malicious advertising data. [ 77.120211][ T1325] cfg80211: failed to load regulatory.db [ 77.277343][ T4450] process 'syz.0.52' launched './file0' with NULL argv: empty string added [ 77.806413][ T4443] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 77.846738][ T4443] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 77.866437][ T4443] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 77.973260][ T4443] Error parsing options; rc = [-22] [ 81.811028][ T4504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'. [ 84.293265][ T4521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 88.475927][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.716874][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.724356][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.007306][ T4553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.81'. [ 90.568607][ T4565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 92.482064][ T4573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.87'. [ 92.537241][ T4573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.87'. [ 92.684218][ T4573] device ip6gretap0 entered promiscuous mode [ 92.760832][ T4573] device syz_tun entered promiscuous mode [ 92.870739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 98.431544][ T4614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 98.841202][ T1325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.078182][ T4659] Device name cannot be null; rc = [-22] [ 106.094799][ T4665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 106.889935][ T26] audit: type=1326 audit(1791052399.893:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4666 comm="syz.1.113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 110.798161][ T4706] Device name cannot be null; rc = [-22] [ 111.591622][ T4708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.124'. [ 114.808464][ T4741] block device autoloading is deprecated and will be removed. [ 115.665167][ T4764] Device name cannot be null; rc = [-22] [ 115.707663][ T26] audit: type=1326 audit(1791052664.315:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.1.126" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 116.404733][ T4766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.136'. [ 119.846447][ T4811] netlink: 'syz.3.146': attribute type 4 has an invalid length. [ 120.754193][ T4818] Device name cannot be null; rc = [-22] [ 121.602805][ T4822] FAULT_INJECTION: forcing a failure. [ 121.602805][ T4822] name failslab, interval 1, probability 0, space 0, times 1 [ 121.649012][ T4822] CPU: 0 PID: 4822 Comm: syz.3.150 Not tainted syzkaller #0 [ 121.656314][ T4822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.666367][ T4822] Call Trace: [ 121.669643][ T4822] [ 121.672573][ T4822] dump_stack_lvl+0x188/0x250 [ 121.677262][ T4822] ? show_regs_print_info+0x20/0x20 [ 121.682468][ T4822] ? load_image+0x410/0x410 [ 121.686972][ T4822] ? __might_sleep+0xf0/0xf0 [ 121.691565][ T4822] ? __lock_acquire+0x7d40/0x7d40 [ 121.696599][ T4822] should_fail+0x383/0x4b0 [ 121.701018][ T4822] should_failslab+0x5/0x20 [ 121.705522][ T4822] slab_pre_alloc_hook+0x51/0xc0 [ 121.710461][ T4822] ? alloc_dax+0xbf/0x5a0 [ 121.714796][ T4822] __kmalloc_track_caller+0x69/0x330 [ 121.720081][ T4822] ? alloc_dax+0xbf/0x5a0 [ 121.724416][ T4822] kstrdup+0x32/0x70 [ 121.728315][ T4822] alloc_dax+0xbf/0x5a0 [ 121.732478][ T4822] ? run_dax+0x30/0x30 [ 121.736547][ T4822] ? __raw_spin_lock_init+0x41/0x100 [ 121.741846][ T4822] dm_create+0xabe/0xf90 [ 121.746100][ T4822] dev_create+0x12e/0x2c0 [ 121.750435][ T4822] ? list_devices+0x820/0x820 [ 121.755114][ T4822] ? __might_fault+0xb3/0x110 [ 121.759796][ T4822] ? _copy_from_user+0x111/0x170 [ 121.764741][ T4822] dm_ctl_ioctl+0x947/0xd00 [ 121.769256][ T4822] ? list_devices+0x820/0x820 [ 121.773939][ T4822] ? dm_poll+0x120/0x120 [ 121.778221][ T4822] ? bpf_lsm_file_ioctl+0x5/0x10 [ 121.783164][ T4822] ? security_file_ioctl+0x7c/0xa0 [ 121.788283][ T4822] ? dm_poll+0x120/0x120 [ 121.792532][ T4822] __se_sys_ioctl+0xfa/0x170 [ 121.797128][ T4822] do_syscall_64+0x4c/0xa0 [ 121.801549][ T4822] ? clear_bhb_loop+0x30/0x80 [ 121.806235][ T4822] ? clear_bhb_loop+0x30/0x80 [ 121.810921][ T4822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.816814][ T4822] RIP: 0033:0x7f202a6ae159 [ 121.821233][ T4822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.840839][ T4822] RSP: 002b:00007f2028906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.849253][ T4822] RAX: ffffffffffffffda RBX: 00007f202a935fa0 RCX: 00007f202a6ae159 [ 121.857227][ T4822] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 121.865202][ T4822] RBP: 00007f202a74506b R08: 0000000000000000 R09: 0000000000000000 [ 121.873179][ T4822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.881150][ T4822] R13: 00007f202a936038 R14: 00007f202a935fa0 R15: 00007ffe7100ed98 [ 121.889136][ T4822] [ 122.095469][ T26] audit: type=1326 audit(1791052670.283:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.0.151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effa04a7159 code=0x0 [ 126.124042][ T4860] Device name cannot be null; rc = [-22] [ 127.855532][ T26] audit: type=1326 audit(1791052675.631:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.1.163" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 128.103752][ T4876] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 128.670451][ T4881] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 128.670451][ T4881] [ 128.684631][ T4881] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 128.697604][ T4881] CIFS: Attempting to mount \\127.0.0.1\share [ 130.010233][ T4881] CIFS: VFS: cifs_mount failed w/return code = -112 [ 135.756105][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.924288][ T4964] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 136.020725][ T26] audit: type=1326 audit(1791052683.301:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.2.188" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bee9ea159 code=0x0 [ 136.343890][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 136.868419][ T13] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 136.954996][ T4977] Zero length message leads to an empty skb [ 136.990983][ T4973] ceph: No mds server is up or the cluster is laggy [ 137.006370][ T4176] libceph: connect (1)[c::]:6789 error -101 [ 137.075635][ T4176] libceph: mon0 (1)[c::]:6789 connect error [ 137.198104][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.204457][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.511107][ T13] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 137.520981][ T13] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 137.529457][ T13] usb 5-1: Product: syz [ 137.535259][ T13] usb 5-1: Manufacturer: syz [ 137.539958][ T13] usb 5-1: SerialNumber: syz [ 137.550305][ T13] usb 5-1: config 0 descriptor?? [ 137.574336][ T4950] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.706337][ T4232] usb 5-1: USB disconnect, device number 2 [ 140.893443][ T26] audit: type=1326 audit(1791052687.866:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5007 comm="syz.4.201" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e416d6159 code=0x0 [ 141.348773][ T5021] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 141.348773][ T5021] [ 141.362698][ T5021] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 141.375875][ T5021] CIFS: Attempting to mount \\127.0.0.1\share [ 141.901043][ T5021] CIFS: VFS: cifs_mount failed w/return code = -112 [ 144.276293][ T4176] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.672383][ T4176] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 144.703656][ T4176] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.748304][ T4176] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 144.773179][ T4176] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.800278][ T4176] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.970387][ T4176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.029267][ T4176] usb 1-1: invalid MIDI out EP 0 [ 146.232149][ T26] audit: type=1326 audit(1791052948.850:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5064 comm="syz.3.216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f202a6ae159 code=0x0 [ 146.265848][ T26] audit: type=1326 audit(1791052948.887:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.2.215" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bee9ea159 code=0x0 [ 146.669777][ T4176] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 146.683414][ T4176] usb 1-1: USB disconnect, device number 3 [ 147.579342][ T5080] syz.0.217 uses obsolete (PF_INET,SOCK_PACKET) [ 147.669122][ T5090] udevd[5090]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.706105][ T5118] netdevsim netdevsim30 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.976752][ T26] audit: type=1326 audit(1791052953.293:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.1.229" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 151.321706][ T26] audit: type=1326 audit(1791053209.570:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5122 comm="syz.3.230" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f202a6ae159 code=0x0 [ 151.485965][ T5118] netdevsim netdevsim30 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.641702][ T26] audit: type=1326 audit(1791053467.789:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5162 comm="syz.0.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effa04a7159 code=0x0 [ 154.479473][ T26] audit: type=1326 audit(1791053468.575:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.1.243" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 154.820785][ T5184] overlayfs: missing 'lowerdir' [ 158.915784][ T5208] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 158.915784][ T5208] [ 158.929577][ T5208] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 158.942368][ T5208] CIFS: Attempting to mount \\127.0.0.1\share [ 159.815943][ T5208] CIFS: VFS: cifs_mount failed w/return code = -112 [ 160.066708][ T26] audit: type=1326 audit(1791053729.664:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.0.254" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effa04a7159 code=0x0 [ 160.845269][ T5219] loop7: detected capacity change from 0 to 7 [ 160.866704][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.877827][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 160.909121][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.920112][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 160.951658][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.962618][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 161.039676][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.050666][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 161.192811][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.203795][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 161.212588][ T26] audit: type=1326 audit(1791053730.786:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.1.256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 161.728612][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.739576][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 161.868225][ T13] libceph: connect (1)[c::]:6789 error -101 [ 161.887057][ T5237] ceph: No mds server is up or the cluster is laggy [ 161.896485][ T4201] Bluetooth: hci0: unexpected event for opcode 0x200a [ 161.901726][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 161.915665][ T5243] overlayfs: missing 'lowerdir' [ 161.987893][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.998854][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.007655][ T5219] ldm_validate_partition_table(): Disk read failed. [ 162.087206][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.098139][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.106429][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.117355][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.138107][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.149013][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.161752][ T5219] Dev loop7: unable to read RDB block 0 [ 162.186786][ T5219] loop7: unable to read partition table [ 162.192527][ T5219] loop7: partition table beyond EOD, truncated [ 162.198815][ T5219] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 163.439752][ T5265] device syzkaller0 entered promiscuous mode [ 163.957794][ T4261] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 164.013197][ T26] audit: type=1326 audit(1791053989.491:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.0.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effa04a7159 code=0x0 [ 164.813283][ T4261] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 165.187692][ T26] audit: type=1326 audit(1791053990.323:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5280 comm="syz.1.268" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 165.362600][ T5291] overlayfs: missing 'lowerdir' [ 165.482835][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.504702][ T4261] usb 3-1: config 0 descriptor?? [ 166.021616][ T5267] udc-core: couldn't find an available UDC or it's busy [ 166.043985][ T5267] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.327444][ T5311] udc-core: couldn't find an available UDC or it's busy [ 166.555946][ T4176] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.577618][ T5311] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.691465][ T4261] hackrf 3-1:0.0: usb_control_msg() failed -32 request 0f [ 166.699583][ T4261] hackrf 3-1:0.0: Could not detect board [ 166.705417][ T4261] hackrf: probe of 3-1:0.0 failed with error -32 [ 166.755291][ T5311] udc-core: couldn't find an available UDC or it's busy [ 166.768099][ T5311] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 167.731845][ T4176] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.747230][ T4176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.769298][ T4176] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.782126][ T4176] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.804016][ T4176] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 167.827909][ T4176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.983307][ T7] usb 3-1: USB disconnect, device number 3 [ 168.004114][ T5327] Device name cannot be null; rc = [-22] [ 168.793811][ T26] audit: type=1326 audit(1791053993.691:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5332 comm="syz.3.282" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f202a6ae159 code=0x0 [ 168.797543][ T4176] gud 1-1:1.0: No supported pixel formats found [ 168.852186][ T4176] gud: probe of 1-1:1.0 failed with error -22 [ 169.456242][ T4230] libceph: connect (1)[c::]:6789 error -101 [ 169.469462][ T5343] ceph: No mds server is up or the cluster is laggy [ 169.483641][ T5346] overlayfs: missing 'lowerdir' [ 169.501104][ T4230] libceph: mon0 (1)[c::]:6789 connect error [ 170.475871][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 170.483461][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 170.568782][ T4176] usb 1-1: USB disconnect, device number 4 [ 170.853165][ T4261] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 171.227316][ T4261] usb 5-1: Using ep0 maxpacket: 16 [ 171.665804][ T4261] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 171.686974][ T4261] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.709679][ T4261] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.726232][ T4261] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 171.815316][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 171.911714][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.940541][ T4261] usb 5-1: config 0 descriptor?? [ 172.142546][ T5378] Device name cannot be null; rc = [-22] [ 172.382181][ T26] audit: type=1326 audit(1791053997.180:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5375 comm="syz.2.293" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bee9ea159 code=0x0 [ 172.724377][ T4230] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 172.781211][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.798868][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.807257][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.822426][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.830792][ T4230] usb 2-1: config 0 descriptor?? [ 172.847223][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.855023][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.863430][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.870802][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.880124][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.887788][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.894867][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.902612][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.909999][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.917586][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.924701][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.932444][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.939862][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.947199][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.954671][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.970109][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.988319][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 172.999159][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 173.018374][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 173.034155][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 173.044807][ T4261] cypress 0003:04B4:0001.0002: unknown main item tag 0x0 [ 173.094091][ T4261] cypress 0003:04B4:0001.0002: hidraw0: USB HID vff.fc Device [HID 04b4:0001] on usb-dummy_hcd.4-1/input0 [ 173.118369][ T4261] usb 5-1: USB disconnect, device number 3 [ 174.214602][ T4230] hackrf 2-1:0.0: usb_control_msg() failed -110 request 0f [ 174.227020][ T5369] udc-core: couldn't find an available UDC or it's busy [ 174.230140][ T4230] hackrf 2-1:0.0: Could not detect board [ 174.242212][ T4230] hackrf: probe of 2-1:0.0 failed with error -110 [ 174.252980][ T5369] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 174.385611][ T5391] loop7: detected capacity change from 0 to 7 [ 174.395325][ C0] print_req_error: 5 callbacks suppressed [ 174.395339][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.411966][ C0] buffer_io_error: 5 callbacks suppressed [ 174.411978][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 175.351217][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.362135][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 175.370190][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.381147][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 175.411307][ T5389] fido_id[5389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 175.541539][ T5402] binder: BINDER_SET_CONTEXT_MGR already set [ 175.547686][ T5402] binder: 5400:5402 ioctl 4018620d 200000000100 returned -16 [ 176.333117][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.344031][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.352633][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.363572][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.477164][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.488121][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.497599][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.508532][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.516391][ T5391] ldm_validate_partition_table(): Disk read failed. [ 176.540717][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.551647][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.583480][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.594440][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.616863][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.627824][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.639917][ T5391] Dev loop7: unable to read RDB block 0 [ 176.762821][ T5391] loop7: unable to read partition table [ 176.768785][ T5391] loop7: partition table beyond EOD, truncated [ 176.774987][ T5391] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 181.235799][ T4176] usb 2-1: USB disconnect, device number 2 [ 181.363747][ T4201] Bluetooth: hci0: unexpected event for opcode 0x200a [ 183.377620][ T5447] binder: BINDER_SET_CONTEXT_MGR already set [ 183.419166][ T4577] Bluetooth: hci2: command 0x0406 tx timeout [ 183.426047][ T4577] Bluetooth: hci4: command 0x0406 tx timeout [ 183.454960][ T5447] binder: 5446:5447 ioctl 4018620d 200000004a80 returned -16 [ 183.486457][ T4577] Bluetooth: hci1: command 0x0406 tx timeout [ 183.511023][ T4577] Bluetooth: hci3: command 0x0406 tx timeout [ 183.787102][ T5458] binder: BINDER_SET_CONTEXT_MGR already set [ 183.793219][ T5458] binder: 5453:5458 ioctl 4018620d 200000000100 returned -16 [ 187.814088][ T4577] libceph: connect (1)[c::]:6789 error -101 [ 187.905169][ T5475] ceph: No mds server is up or the cluster is laggy [ 187.918469][ T4577] libceph: mon0 (1)[c::]:6789 connect error [ 193.762879][ T5512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.332'. [ 195.999785][ T5523] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 202.977305][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.983693][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 P-D devtmpfs./dev/console[ 203.603089][ T5564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.344'. [ 204.548455][ T5566] netlink: 44 bytes leftover after parsing attributes in process `syz.1.343'. [ 204.563405][ T5566] netlink: 232 bytes leftover after parsing attributes in process `syz.1.343'. [ 208.076557][ C0] print_req_error: 10 callbacks suppressed [ 208.076574][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.093388][ C0] buffer_io_error: 10 callbacks suppressed [ 208.093404][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 208.164184][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.175123][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 208.188718][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.199669][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 208.294417][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.305388][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 208.328730][ T5581] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 208.328730][ T5581] [ 208.342495][ T5581] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 208.360231][ T5581] CIFS: Attempting to mount \\127.0.0.1\share [ 208.650099][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.661058][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 208.683115][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.694071][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 208.709706][ T5581] CIFS: VFS: Error connecting to socket. Aborting operation. [ 208.717215][ T5581] CIFS: VFS: cifs_mount failed w/return code = -4 [ 208.811069][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.822016][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 208.832356][ T3559] ldm_validate_partition_table(): Disk read failed. [ 208.873778][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.884739][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 208.923189][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.934670][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 208.943816][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 208.958897][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.969868][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 208.982655][ T3559] Dev loop7: unable to read RDB block 0 [ 209.003585][ T3559] loop7: unable to read partition table [ 209.033191][ T3559] loop7: partition table beyond EOD, truncated [ 209.628071][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 209.703064][ T13] usb 4-1: device descriptor read/all, error -71 [ 209.986559][ T5604] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 211.570692][ T5610] syz.0.357 (5610): /proc/5609/oom_adj is deprecated, please use /proc/5609/oom_score_adj instead. [ 211.784737][ T5616] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 212.792717][ T5607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.356'. [ 215.689958][ T1107] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 216.192114][ T1107] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 216.320521][ T1107] usb 3-1: config 0 has no interface number 0 [ 216.326784][ T1107] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 216.337000][ T1107] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.175986][ T1107] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 217.186655][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.218353][ T1107] usb 3-1: Product: syz [ 217.227378][ T5650] batman_adv: batadv0: Adding interface: syzkaller0 [ 217.284250][ T5652] binder: BINDER_SET_CONTEXT_MGR already set [ 217.290301][ T5652] binder: 5648:5652 ioctl 4018620d 200000000100 returned -16 [ 217.485619][ T1107] usb 3-1: Manufacturer: syz [ 217.496309][ T1107] usb 3-1: SerialNumber: syz [ 217.504884][ T1107] usb 3-1: config 0 descriptor?? [ 217.539850][ T5623] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 217.604005][ T5650] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.644882][ T5658] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 217.644882][ T5658] [ 217.658937][ T5658] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 217.671913][ T5658] CIFS: Attempting to mount \\127.0.0.1\share [ 218.501368][ T5650] batman_adv: batadv0: Interface activated: syzkaller0 [ 218.528516][ T1107] usb 3-1: can't set config #0, error -71 [ 218.737537][ T5658] CIFS: VFS: cifs_mount failed w/return code = -512 [ 218.776155][ T1107] usb 3-1: USB disconnect, device number 4 [ 218.887235][ T5649] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 219.084526][ T5649] batman_adv: batadv0: Removing interface: syzkaller0 [ 219.517974][ T5650] syz.0.367 (5650) used greatest stack depth: 20688 bytes left [ 219.554536][ T5675] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 220.004069][ T26] audit: type=1326 audit(1791054297.861:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5679 comm="syz.1.373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 221.491889][ T5698] netlink: 'syz.3.378': attribute type 4 has an invalid length. [ 224.579610][ T5716] loop7: detected capacity change from 0 to 7 [ 224.746518][ C0] print_req_error: 5 callbacks suppressed [ 224.746535][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.763301][ C0] buffer_io_error: 5 callbacks suppressed [ 224.763331][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 225.826043][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.837010][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 225.846657][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.857730][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 225.865915][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.876862][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 226.079678][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.090660][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 226.143540][ T5725] binder: BINDER_SET_CONTEXT_MGR already set [ 226.149723][ T5725] binder: 5722:5725 ioctl 4018620d 200000000100 returned -16 [ 227.041049][ T26] audit: type=1326 audit(1791054559.667:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.4.384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e416d6159 code=0x0 [ 227.078435][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.089378][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 227.139501][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.150609][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 227.158474][ T5716] ldm_validate_partition_table(): Disk read failed. [ 227.258310][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.269278][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 227.916306][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.925903][ T5741] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 227.927366][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 227.962533][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.973514][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.362033][ T5716] Dev loop7: unable to read RDB block 0 [ 228.372308][ T5716] loop7: unable to read partition table [ 228.378061][ T5716] loop7: partition table beyond EOD, truncated [ 228.384284][ T5716] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 228.747072][ T5757] netlink: 'syz.4.392': attribute type 4 has an invalid length. [ 230.062680][ T26] audit: type=1326 audit(1791054819.246:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 232.993046][ T5785] Device name cannot be null; rc = [-22] [ 233.505277][ T5805] loop7: detected capacity change from 0 to 7 [ 234.029973][ C0] print_req_error: 5 callbacks suppressed [ 234.029988][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.046618][ C0] buffer_io_error: 5 callbacks suppressed [ 234.046626][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.089870][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.100783][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.127392][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.138302][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.583932][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.594906][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.615962][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.626903][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.635765][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.646699][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.660468][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.671367][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.679224][ T5805] ldm_validate_partition_table(): Disk read failed. [ 234.729673][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.740588][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.797486][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.808440][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.538244][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 235.549185][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.558226][ T5805] Dev loop7: unable to read RDB block 0 [ 235.569817][ T5805] loop7: unable to read partition table [ 235.575613][ T5805] loop7: partition table beyond EOD, truncated [ 235.581762][ T5805] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 237.381079][ T5849] netlink: 'syz.3.408': attribute type 4 has an invalid length. [ 238.416578][ T26] audit: type=1326 audit(1791055083.087:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.409" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bee9ea159 code=0x0 [ 240.211740][ T5871] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 241.282865][ T4261] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 241.594980][ T4261] usb 1-1: Using ep0 maxpacket: 8 [ 242.277206][ T4261] usb 1-1: unable to get BOS descriptor or descriptor too short [ 242.772904][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 242.907682][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.917628][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 242.929878][ T4261] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 242.940206][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 242.951162][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 243.153728][ T4261] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 243.173678][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.190931][ T4261] usb 1-1: Product: syz [ 243.274773][ T4261] usb 1-1: Manufacturer: syz [ 243.282179][ T4261] usb 1-1: SerialNumber: syz [ 243.301442][ T4261] usb 1-1: config 0 descriptor?? [ 243.335569][ T5875] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 244.034170][ T4261] usb 1-1: USB disconnect, device number 5 [ 244.373118][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.729707][ T26] audit: type=1326 audit(1791055346.864:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.1.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 247.413944][ T5932] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 251.921285][ T2388] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 253.063699][ T2388] usb 2-1: Using ep0 maxpacket: 8 [ 253.343837][ T2388] usb 2-1: unable to get BOS descriptor or descriptor too short [ 253.569684][ T2388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 253.581313][ T2388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.591423][ T2388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 253.602862][ T2388] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 253.613173][ T2388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 253.623319][ T2388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 254.335970][ T2388] usb 2-1: string descriptor 0 read error: -71 [ 254.392413][ T2388] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 254.594473][ T5977] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 254.597778][ T2388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.625168][ T2388] usb 2-1: config 0 descriptor?? [ 254.656859][ T2388] usb 2-1: can't set config #0, error -71 [ 254.665082][ T2388] usb 2-1: USB disconnect, device number 3 [ 255.344179][ T26] audit: type=1326 audit(1791055610.558:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.2.442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bee9ea159 code=0x0 [ 258.768686][ T6006] loop7: detected capacity change from 0 to 7 [ 258.777546][ C0] print_req_error: 5 callbacks suppressed [ 258.777571][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.794260][ C0] buffer_io_error: 5 callbacks suppressed [ 258.794275][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.808122][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.819041][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 258.858322][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.869339][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 259.328596][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.339558][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 259.398991][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.409996][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 259.519966][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.530956][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 259.540034][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.550969][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 259.558865][ T6006] ldm_validate_partition_table(): Disk read failed. [ 259.586030][ T6018] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 259.586030][ T6018] [ 259.599813][ T6018] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 259.612569][ T6018] CIFS: Attempting to mount \\127.0.0.1\share [ 259.810981][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.821953][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 259.830023][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.841129][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 259.884765][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.895704][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 259.921962][ T6018] CIFS: VFS: Error connecting to socket. Aborting operation. [ 259.930369][ T6018] CIFS: VFS: cifs_mount failed w/return code = -4 [ 259.991492][ T6006] Dev loop7: unable to read RDB block 0 [ 260.007253][ T6006] loop7: unable to read partition table [ 260.013147][ T6006] loop7: partition table beyond EOD, truncated [ 260.019390][ T6006] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 261.200546][ T26] audit: type=1326 audit(1791055872.002:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.2.459" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bee9ea159 code=0x0 [ 262.571259][ T13] libceph: connect (1)[c::]:6789 error -101 [ 262.579225][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 262.618601][ T6045] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 262.641421][ T6044] overlayfs: missing 'lowerdir' [ 262.706587][ T4261] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 262.861328][ T13] libceph: connect (1)[c::]:6789 error -101 [ 262.867963][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 262.963235][ T4261] usb 4-1: Using ep0 maxpacket: 8 [ 263.155679][ T4261] usb 4-1: unable to get BOS descriptor or descriptor too short [ 263.241300][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 263.252680][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 263.262356][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 263.273830][ T4261] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 263.284674][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 263.294376][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 263.424588][ T13] libceph: connect (1)[c::]:6789 error -101 [ 263.883426][ T6057] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 263.893851][ T4261] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 264.190464][ T6040] ceph: No mds server is up or the cluster is laggy [ 264.314702][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 264.565521][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.573992][ T4261] usb 4-1: Product: syz [ 264.582362][ T4261] usb 4-1: Manufacturer: syz [ 264.587490][ T4261] usb 4-1: SerialNumber: syz [ 264.603002][ T4261] usb 4-1: config 0 descriptor?? [ 264.634986][ T6036] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 265.539812][ T4261] usb 4-1: can't set config #0, error -71 [ 265.555479][ T4261] usb 4-1: USB disconnect, device number 5 [ 266.392248][ T26] audit: type=1326 audit(1791056132.889:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.0.472" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effa04a7159 code=0x0 [ 266.838998][ T6082] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 266.838998][ T6082] [ 266.979235][ T6082] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 267.089843][ T6082] CIFS: Attempting to mount \\127.0.0.1\share [ 268.189882][ T6082] CIFS: VFS: Error connecting to socket. Aborting operation. [ 268.219727][ T6082] CIFS: VFS: cifs_mount failed w/return code = -4 [ 268.535641][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.542028][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.001938][ T6098] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 270.633364][ T6114] Device name cannot be null; rc = [-22] [ 270.743525][ T6117] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 271.999029][ T26] audit: type=1326 audit(1791056394.310:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.3.484" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f202a6ae159 code=0x0 [ 272.274777][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 272.285391][ T6137] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 272.563447][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 272.747205][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 273.782155][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 274.822240][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 274.840407][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 274.851904][ T13] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 274.868790][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 274.890919][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 275.880075][ T13] usb 3-1: string descriptor 0 read error: -71 [ 275.886359][ T13] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 275.933257][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.647139][ T13] usb 3-1: config 0 descriptor?? [ 276.679300][ T13] usb 3-1: can't set config #0, error -71 [ 276.688979][ T13] usb 3-1: USB disconnect, device number 5 [ 276.834470][ T6167] Device name cannot be null; rc = [-22] [ 277.837804][ T6183] netlink: 48 bytes leftover after parsing attributes in process `syz.4.493'. [ 277.917494][ T26] audit: type=1326 audit(1791056655.547:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.497" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 279.929229][ T26] audit: type=1326 audit(1791056656.781:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.501" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bee9ea159 code=0x0 [ 280.207148][ T5529] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 280.656529][ T5529] usb 1-1: Using ep0 maxpacket: 8 [ 280.859614][ T5529] usb 1-1: unable to get BOS descriptor or descriptor too short [ 281.036694][ T5529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 281.048462][ T5529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 281.116914][ T5529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 281.154683][ T6215] Device name cannot be null; rc = [-22] [ 281.162721][ T5529] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 281.286080][ T5529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 281.296855][ T5529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 281.434531][ T26] audit: type=1326 audit(1791056915.329:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.1.510" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 282.569872][ T5529] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 282.644654][ T5529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.903744][ T5529] usb 1-1: config 0 descriptor?? [ 282.998406][ T5529] usb 1-1: can't set config #0, error -71 [ 283.117800][ T5529] usb 1-1: USB disconnect, device number 6 [ 283.994493][ T26] audit: type=1326 audit(1791056917.452:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.4.515" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e416d6159 code=0x0 [ 284.064540][ T6242] netlink: 48 bytes leftover after parsing attributes in process `syz.3.514'. [ 286.787367][ T26] audit: type=1326 audit(1791057176.339:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.0.521" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effa04a7159 code=0x0 [ 286.959079][ T6263] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 287.168129][ T6271] binder: BINDER_SET_CONTEXT_MGR already set [ 287.174159][ T6271] binder: 6270:6271 ioctl 4018620d 200000000100 returned -16 [ 289.038996][ T26] audit: type=1326 audit(1791057178.097:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.0.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effa04a7159 code=0x0 [ 289.155579][ T2388] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 289.205695][ T6304] netlink: 48 bytes leftover after parsing attributes in process `syz.2.530'. [ 289.529400][ T2388] usb 2-1: Using ep0 maxpacket: 8 [ 290.839368][ T2388] usb 2-1: unable to get BOS descriptor or descriptor too short [ 291.440055][ T2388] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 291.464602][ T2388] usb 2-1: can't read configurations, error -71 [ 291.585576][ T6302] Device name cannot be null; rc = [-22] [ 292.664411][ T26] audit: type=1326 audit(1791057437.833:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.0.538" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effa04a7159 code=0x0 [ 295.119172][ T6343] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 295.119172][ T6343] [ 295.132958][ T6343] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 295.146094][ T6343] CIFS: Attempting to mount \\127.0.0.1\share [ 295.582526][ T6343] CIFS: VFS: cifs_mount failed w/return code = -112 [ 295.914200][ T6354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.545'. [ 298.136845][ T6367] Device name cannot be null; rc = [-22] [ 298.246473][ T4176] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 298.688041][ T26] audit: type=1326 audit(1791057699.197:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.0.549" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effa04a7159 code=0x0 [ 298.819481][ T4176] usb 2-1: Using ep0 maxpacket: 8 [ 299.974369][ T4176] usb 2-1: device descriptor read/all, error -71 [ 300.000367][ T6387] binder: BINDER_SET_CONTEXT_MGR already set [ 300.006570][ T6387] binder: 6379:6387 ioctl 4018620d 200000000100 returned -16 [ 301.604958][ T6397] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 302.331213][ T26] audit: type=1326 audit(1791057958.834:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.1.560" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 302.624510][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 304.272796][ T6437] binder: BINDER_SET_CONTEXT_MGR already set [ 304.278889][ T6437] binder: 6430:6437 ioctl 4018620d 200000000100 returned -16 [ 304.497057][ T6432] Device name cannot be null; rc = [-22] [ 305.094886][ T4176] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 305.529119][ T6455] binder: BINDER_SET_CONTEXT_MGR already set [ 305.535280][ T6455] binder: 6449:6455 ioctl 4018620d 200000000100 returned -16 [ 306.217765][ T26] audit: type=1326 audit(1791058217.856:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.1.572" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 306.241155][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.432688][ T4176] usb 3-1: Using ep0 maxpacket: 8 [ 306.455629][ T6461] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 306.645735][ T4176] usb 3-1: unable to get BOS descriptor or descriptor too short [ 307.773371][ T4176] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 307.842017][ T6472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.575'. [ 308.764158][ T4176] usb 3-1: can't read configurations, error -71 [ 311.008898][ T6500] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 311.008898][ T6500] [ 311.023403][ T6500] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 311.036782][ T6500] CIFS: Attempting to mount \\127.0.0.1\share [ 311.100280][ T6501] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 312.114381][ T6510] binder: BINDER_SET_CONTEXT_MGR already set [ 312.120486][ T6510] binder: 6505:6510 ioctl 4018620d 200000000100 returned -16 [ 312.852649][ T6500] CIFS: VFS: cifs_mount failed w/return code = -112 [ 312.984283][ T6516] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 313.797632][ T6521] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 317.215183][ T6543] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 319.272826][ T6560] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 321.003672][ T26] audit: type=1326 audit(1791058487.883:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.2.603" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bee9ea159 code=0x0 [ 322.720228][ T6586] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 325.605730][ T6613] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 326.155771][ T26] audit: type=1326 audit(1791058749.164:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.3.618" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f202a6ae159 code=0x0 [ 327.028300][ T6626] loop7: detected capacity change from 0 to 7 [ 327.038465][ C1] print_req_error: 5 callbacks suppressed [ 327.038478][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.055125][ C1] buffer_io_error: 5 callbacks suppressed [ 327.055133][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 327.072052][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.083008][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 327.438736][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.449673][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 327.467568][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.478546][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 327.525447][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.536459][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 327.544531][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.555446][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 328.016072][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.027024][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 328.035337][ T6626] ldm_validate_partition_table(): Disk read failed. [ 328.042782][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.053752][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 328.222083][ T6647] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 328.254070][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.265067][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 328.307972][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.318965][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 328.377153][ T6626] Dev loop7: unable to read RDB block 0 [ 328.400636][ T6626] loop7: unable to read partition table [ 328.406428][ T6626] loop7: partition table beyond EOD, truncated [ 328.412896][ T6626] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 328.599414][ T6656] Device name cannot be null; rc = [-22] [ 330.854442][ T26] audit: type=1326 audit(1791059009.344:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.1.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 331.622980][ T6696] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 332.501360][ T6701] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 332.863131][ T6709] Device name cannot be null; rc = [-22] [ 334.291332][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.297673][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.942750][ T26] audit: type=1326 audit(1791059270.320:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f202a6ae159 code=0x0 [ 336.578709][ T4176] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 337.829812][ T4176] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 337.838904][ T4176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.883911][ T4176] usb 5-1: config 0 descriptor?? [ 338.118971][ T6753] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 338.363695][ T6764] overlayfs: missing 'lowerdir' [ 338.509575][ T6737] udc-core: couldn't find an available UDC or it's busy [ 338.588640][ T6737] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 339.247218][ T6769] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 339.294177][ T4176] hackrf 5-1:0.0: usb_control_msg() failed -110 request 0f [ 340.069726][ T4176] hackrf 5-1:0.0: Could not detect board [ 340.075511][ T4176] hackrf: probe of 5-1:0.0 failed with error -110 [ 340.737534][ T26] audit: type=1326 audit(1791059530.779:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.0.655" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effa04a7159 code=0x0 [ 343.275367][ T6808] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 343.557746][ T6814] overlayfs: missing 'lowerdir' [ 343.701296][ T4230] usb 5-1: USB disconnect, device number 4 [ 345.622526][ T6824] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 347.523996][ T26] audit: type=1326 audit(1791059792.763:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.3.667" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f202a6ae159 code=0x0 [ 351.075429][ T6855] loop7: detected capacity change from 0 to 7 [ 351.096911][ C1] print_req_error: 10 callbacks suppressed [ 351.096928][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 351.113682][ C1] buffer_io_error: 10 callbacks suppressed [ 351.113694][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 351.127945][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 351.138887][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 351.165903][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 351.176838][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 351.185853][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 351.196780][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 351.278848][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 351.289779][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 351.405061][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 351.416032][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.235060][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 352.246004][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 352.254523][ T6855] ldm_validate_partition_table(): Disk read failed. [ 352.455451][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 352.466437][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 353.005263][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 353.016233][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 353.028809][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 353.039731][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 353.047920][ T6855] Dev loop7: unable to read RDB block 0 [ 353.065154][ T6855] loop7: unable to read partition table [ 353.070996][ T6855] loop7: partition table beyond EOD, truncated [ 353.077191][ T6855] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 353.419716][ T26] audit: type=1326 audit(1791060054.663:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.0.680" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effa04a7159 code=0x0 [ 353.543385][ T4273] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 354.192529][ T6885] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 355.041978][ T4273] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 355.087639][ T4273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.297112][ T4273] usb 2-1: config 0 descriptor?? [ 355.939770][ T6874] udc-core: couldn't find an available UDC or it's busy [ 356.020154][ T6874] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 356.356462][ T4273] hackrf 2-1:0.0: Board ID: 00 [ 357.807659][ T4273] hackrf 2-1:0.0: Firmware version: [ 357.853685][ T4273] hackrf 2-1:0.0: Registered as swradio24 [ 357.862054][ T4273] hackrf 2-1:0.0: Registered as swradio25 [ 357.868911][ T4273] hackrf 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 359.269640][ T5576] usb 2-1: USB disconnect, device number 8 [ 361.362394][ T26] audit: type=1326 audit(1791060318.092:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.692" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e416d6159 code=0x0 [ 364.460632][ T6949] binder: BINDER_SET_CONTEXT_MGR already set [ 364.466685][ T6949] binder: 6944:6949 ioctl 4018620d 200000000100 returned -16 [ 364.812629][ T4230] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 365.454953][ T6954] binder: BINDER_SET_CONTEXT_MGR already set [ 365.461016][ T6954] binder: 6952:6954 ioctl 4018620d 200000000100 returned -16 [ 365.508981][ T4230] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 366.251294][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.265396][ T6956] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 366.275298][ T4230] usb 5-1: config 0 descriptor?? [ 366.797027][ T26] audit: type=1326 audit(1791060579.178:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.1.703" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 367.179024][ T6947] udc-core: couldn't find an available UDC or it's busy [ 367.678949][ T6947] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 367.784657][ T4230] hackrf 5-1:0.0: usb_control_msg() failed -110 request 0f [ 367.791903][ T4230] hackrf 5-1:0.0: Could not detect board [ 367.857798][ T4230] hackrf: probe of 5-1:0.0 failed with error -110 [ 371.216808][ T2388] usb 5-1: USB disconnect, device number 5 [ 371.450535][ T7004] binder: BINDER_SET_CONTEXT_MGR already set [ 371.456638][ T7004] binder: 7000:7004 ioctl 4018620d 200000000100 returned -16 [ 372.581924][ T7007] binder: BINDER_SET_CONTEXT_MGR already set [ 372.588090][ T7007] binder: 7005:7007 ioctl 4018620d 200000000100 returned -16 [ 373.822796][ T26] audit: type=1326 audit(1791060841.747:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.4.714" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e416d6159 code=0x0 [ 377.654817][ T4240] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 377.919283][ T7050] binder: BINDER_SET_CONTEXT_MGR already set [ 377.925328][ T7050] binder: 7046:7050 ioctl 4018620d 200000000100 returned -16 [ 378.208405][ T4240] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 378.246114][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.364838][ T4240] usb 4-1: config 0 descriptor?? [ 378.743005][ T7055] binder: BINDER_SET_CONTEXT_MGR already set [ 378.749061][ T7055] binder: 7053:7055 ioctl 4018620d 200000000100 returned -16 [ 378.912774][ T7044] udc-core: couldn't find an available UDC or it's busy [ 378.948029][ T7044] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 379.113974][ T7057] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 379.288565][ T4240] hackrf 4-1:0.0: Board ID: 00 [ 379.293474][ T4240] hackrf 4-1:0.0: Firmware version: [ 379.454136][ T4240] hackrf 4-1:0.0: Registered as swradio24 [ 379.537094][ T4240] hackrf 4-1:0.0: Registered as swradio25 [ 379.543136][ T4240] hackrf 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 379.560763][ T7059] udc-core: couldn't find an available UDC or it's busy [ 380.052763][ T7059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 380.174043][ T7059] udc-core: couldn't find an available UDC or it's busy [ 380.443354][ T7059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 380.625458][ T26] audit: type=1326 audit(1791061104.114:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.2.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bee9ea159 code=0x0 [ 383.369142][ T5529] usb 4-1: USB disconnect, device number 6 [ 389.377816][ T26] audit: type=1326 audit(1791061367.937:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.1.739" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc982e27159 code=0x0 [ 392.009677][ T5576] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 393.107522][ T7146] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 393.196589][ T5576] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 393.566854][ T5576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.999078][ T5576] usb 1-1: config 0 descriptor?? [ 394.118039][ T5576] usb 1-1: can't set config #0, error -71 [ 394.203249][ T5576] usb 1-1: USB disconnect, device number 7 [ 396.545115][ T7160] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 398.652549][ T2388] libceph: connect (1)[c::]:6789 error -101 [ 398.669379][ T2388] libceph: mon0 (1)[c::]:6789 connect error [ 399.736175][ T7168] ima: policy update failed [ 400.022853][ T2388] libceph: connect (1)[c::]:6789 error -101 [ 400.242340][ T26] audit: type=1802 audit(1791061377.992:51): pid=7168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.755" res=0 errno=0 [ 400.260266][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.269581][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.848037][ T7174] ceph: No mds server is up or the cluster is laggy [ 401.961349][ T2388] libceph: mon0 (1)[c::]:6789 connect error [ 402.186028][ T7186] ceph: No mds server is up or the cluster is laggy [ 402.367076][ T5529] libceph: connect (1)[c::]:6789 error -101 [ 402.392573][ T5529] libceph: mon0 (1)[c::]:6789 connect error [ 402.581592][ T7191] libceph: connect (1)[c::]:6789 error -101 [ 402.945621][ T7191] libceph: mon0 (1)[c::]:6789 connect error [ 403.000772][ T5529] libceph: connect (1)[c::]:6789 error -101 [ 403.006787][ T5529] libceph: mon0 (1)[c::]:6789 connect error [ 404.933517][ T7204] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 406.474043][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 406.783407][ T7224] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 408.523956][ T1107] libceph: connect (1)[c::]:6789 error -101 [ 408.602630][ T1107] libceph: mon0 (1)[c::]:6789 connect error [ 408.669618][ T7240] ceph: No mds server is up or the cluster is laggy [ 412.065406][ T7280] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 413.175342][ T7287] blktrace: Concurrent blktraces are not allowed on loop0 [ 413.183907][ T2388] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 413.605052][ T2388] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 414.141939][ T2388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.169568][ T2388] usb 4-1: config 0 descriptor?? [ 414.807344][ T7283] udc-core: couldn't find an available UDC or it's busy [ 414.876896][ T4229] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 415.560976][ T2388] hackrf 4-1:0.0: usb_control_msg() failed -110 request 0f [ 415.568198][ T2388] hackrf 4-1:0.0: Could not detect board [ 415.950053][ T7283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 416.148743][ T2388] hackrf: probe of 4-1:0.0 failed with error -110 [ 416.993620][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 417.250164][ T4229] usb 1-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 418.062534][ T4229] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 418.083744][ T4229] usb 1-1: config 4 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 418.169543][ T4229] usb 1-1: string descriptor 0 read error: -71 [ 418.175821][ T4229] usb 1-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 418.190800][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.224681][ T4229] usb 1-1: can't set config #4, error -71 [ 418.263158][ T4229] usb 1-1: USB disconnect, device number 8 [ 419.582696][ T7333] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 420.526401][ T4229] usb 4-1: USB disconnect, device number 7 [ 420.991919][ T4229] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 421.630019][ T7334] [ 421.632388][ T7334] ====================================================== [ 421.639410][ T7334] WARNING: possible circular locking dependency detected [ 421.646451][ T7334] syzkaller #0 Not tainted [ 421.650862][ T7334] ------------------------------------------------------ [ 421.657871][ T7334] syz.4.781/7334 is trying to acquire lock: [ 421.663760][ T7334] ffff888074be9f98 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 421.675163][ T7334] [ 421.675163][ T7334] but task is already holding lock: [ 421.682524][ T7334] ffff888074be8120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 421.691503][ T7334] [ 421.691503][ T7334] which lock already depends on the new lock. [ 421.691503][ T7334] [ 421.701906][ T7334] [ 421.701906][ T7334] the existing dependency chain (in reverse order) is: [ 421.710925][ T7334] [ 421.710925][ T7334] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 421.718697][ T7334] lock_sock_nested+0x44/0x100 [ 421.723970][ T7334] smc_listen_out+0xd4/0x3c0 [ 421.729067][ T7334] smc_listen_work+0x52a/0xd10 [ 421.734336][ T7334] process_one_work+0x867/0xff0 [ 421.739691][ T7334] worker_thread+0xad7/0x12a0 [ 421.744880][ T7334] kthread+0x42e/0x520 [ 421.749480][ T7334] ret_from_fork+0x1f/0x30 [ 421.754430][ T7334] [ 421.754430][ T7334] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 421.764604][ T7334] __lock_acquire+0x38f7/0x7d40 [ 421.769995][ T7334] lock_acquire+0x19f/0x400 [ 421.775034][ T7334] __flush_work+0x116/0x210 [ 421.780069][ T7334] __cancel_work_timer+0x3f4/0x560 [ 421.785711][ T7334] smc_clcsock_release+0x5c/0xe0 [ 421.791182][ T7334] __smc_release+0x644/0x7b0 [ 421.796305][ T7334] smc_close_non_accepted+0xd1/0x1f0 [ 421.802103][ T7334] smc_close_active+0xae2/0xea0 [ 421.807459][ T7334] __smc_release+0x9c/0x7b0 [ 421.812467][ T7334] smc_release+0x2c1/0x520 [ 421.817384][ T7334] sock_close+0xbf/0x210 [ 421.822149][ T7334] __fput+0x212/0x8c0 [ 421.826652][ T7334] task_work_run+0x125/0x1a0 [ 421.831746][ T7334] exit_to_user_mode_loop+0x10f/0x130 [ 421.837622][ T7334] exit_to_user_mode_prepare+0xee/0x180 [ 421.843671][ T7334] syscall_exit_to_user_mode+0x16/0x40 [ 421.849631][ T7334] do_syscall_64+0x58/0xa0 [ 421.854651][ T7334] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 421.861054][ T7334] [ 421.861054][ T7334] other info that might help us debug this: [ 421.861054][ T7334] [ 421.871259][ T7334] Possible unsafe locking scenario: [ 421.871259][ T7334] [ 421.878687][ T7334] CPU0 CPU1 [ 421.884066][ T7334] ---- ---- [ 421.889407][ T7334] lock(sk_lock-AF_SMC/1); [ 421.893919][ T7334] lock((work_completion)(&new_smc->smc_listen_work)); [ 421.903482][ T7334] lock(sk_lock-AF_SMC/1); [ 421.910526][ T7334] lock((work_completion)(&new_smc->smc_listen_work)); [ 421.917450][ T7334] [ 421.917450][ T7334] *** DEADLOCK *** [ 421.917450][ T7334] [ 421.925577][ T7334] 2 locks held by syz.4.781/7334: [ 421.930581][ T7334] #0: ffff888074fc4a10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 421.940759][ T7334] #1: ffff888074be8120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 421.950142][ T7334] [ 421.950142][ T7334] stack backtrace: [ 421.956032][ T7334] CPU: 1 PID: 7334 Comm: syz.4.781 Not tainted syzkaller #0 [ 421.963298][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.973351][ T7334] Call Trace: [ 421.976618][ T7334] [ 421.979534][ T7334] dump_stack_lvl+0x188/0x250 [ 421.984215][ T7334] ? load_image+0x410/0x410 [ 421.988700][ T7334] ? show_regs_print_info+0x20/0x20 [ 421.993882][ T7334] ? print_circular_bug+0x12b/0x1a0 [ 421.999061][ T7334] check_noncircular+0x2f8/0x400 [ 422.004013][ T7334] ? deref_stack_reg+0xd0/0x120 [ 422.008860][ T7334] ? look_up_lock_class+0x71/0x110 [ 422.013972][ T7334] ? print_deadlock_bug+0x5d0/0x5d0 [ 422.019157][ T7334] ? lockdep_lock+0xf1/0x1f0 [ 422.023751][ T7334] ? lock_release+0xb5/0x8a0 [ 422.028328][ T7334] ? mark_lock+0x94/0x320 [ 422.032635][ T7334] ? _find_first_zero_bit+0xd1/0xf0 [ 422.037818][ T7334] __lock_acquire+0x38f7/0x7d40 [ 422.042654][ T7334] ? deref_stack_reg+0xd0/0x120 [ 422.047492][ T7334] ? verify_lock_unused+0x140/0x140 [ 422.052674][ T7334] ? mark_lock+0x94/0x320 [ 422.056994][ T7334] ? __lock_acquire+0x13b3/0x7d40 [ 422.062005][ T7334] ? lockdep_lock+0xf1/0x1f0 [ 422.066596][ T7334] lock_acquire+0x19f/0x400 [ 422.071084][ T7334] ? __flush_work+0xfa/0x210 [ 422.075659][ T7334] ? read_lock_is_recursive+0x10/0x10 [ 422.081018][ T7334] __flush_work+0x116/0x210 [ 422.085500][ T7334] ? __flush_work+0xfa/0x210 [ 422.090070][ T7334] ? flush_work+0x20/0x20 [ 422.094377][ T7334] ? try_to_grab_pending+0xfb/0x820 [ 422.099555][ T7334] ? mark_lock+0x94/0x320 [ 422.103971][ T7334] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 422.109946][ T7334] ? lock_chain_count+0x20/0x20 [ 422.114791][ T7334] ? mark_lock+0x94/0x320 [ 422.119104][ T7334] ? __cancel_work_timer+0x36a/0x560 [ 422.124365][ T7334] __cancel_work_timer+0x3f4/0x560 [ 422.129463][ T7334] ? cancel_work_sync+0x20/0x20 [ 422.134301][ T7334] ? __local_bh_enable_ip+0x136/0x1c0 [ 422.139648][ T7334] ? lockdep_hardirqs_on+0x94/0x140 [ 422.144829][ T7334] ? __local_bh_enable_ip+0x136/0x1c0 [ 422.150180][ T7334] ? _local_bh_enable+0xa0/0xa0 [ 422.155027][ T7334] smc_clcsock_release+0x5c/0xe0 [ 422.159948][ T7334] __smc_release+0x644/0x7b0 [ 422.164518][ T7334] smc_close_non_accepted+0xd1/0x1f0 [ 422.169784][ T7334] smc_close_active+0xae2/0xea0 [ 422.174616][ T7334] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 422.180226][ T7334] __smc_release+0x9c/0x7b0 [ 422.184711][ T7334] smc_release+0x2c1/0x520 [ 422.189104][ T7334] sock_close+0xbf/0x210 [ 422.193327][ T7334] ? sock_mmap+0x90/0x90 [ 422.197546][ T7334] __fput+0x212/0x8c0 [ 422.201507][ T7334] task_work_run+0x125/0x1a0 [ 422.206076][ T7334] exit_to_user_mode_loop+0x10f/0x130 [ 422.211445][ T7334] exit_to_user_mode_prepare+0xee/0x180 [ 422.217002][ T7334] syscall_exit_to_user_mode+0x16/0x40 [ 422.222450][ T7334] do_syscall_64+0x58/0xa0 [ 422.226872][ T7334] ? clear_bhb_loop+0x30/0x80 [ 422.231527][ T7334] ? clear_bhb_loop+0x30/0x80 [ 422.236183][ T7334] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 422.242059][ T7334] RIP: 0033:0x7f1e416d6159 [ 422.246453][ T7334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.266078][ T7334] RSP: 002b:00007ffd38f2d238 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 422.274478][ T7334] RAX: 0000000000000000 RBX: 00007f1e4195fda0 RCX: 00007f1e416d6159 [ 422.282443][ T7334] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 422.290399][ T7334] RBP: 00007f1e4195fda0 R08: 0000000000000006 R09: 0000000000000000 [ 422.298365][ T7334] R10: 00007f1e4195fcb0 R11: 0000000000000246 R12: 0000000000061454 [ 422.306322][ T7334] R13: 00007f1e4195e09c R14: 000000000006118b R15: 00007ffd38f2d340 [ 422.314300][ T7334] [ 422.424498][ T4229] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 422.472486][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.496075][ T4229] usb 4-1: Product: syz [ 422.509917][ T4229] usb 4-1: Manufacturer: syz [ 422.523109][ T4229] usb 4-1: SerialNumber: syz [ 422.545259][ T4229] usb 4-1: config 0 descriptor?? [ 422.597385][ T4229] hub 4-1:0.0: bad descriptor, ignoring hub [ 422.606134][ T4229] hub: probe of 4-1:0.0 failed with error -5 [ 422.627490][ T4229] f81232 4-1:0.0: f81534a converter detected [ 422.941131][ T4229] usb 4-1: f81534a converter now attached to ttyUSB0 [ 423.227335][ T7191] usb 4-1: USB disconnect, device number 8 [ 423.234195][ T7191] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 423.242917][ T7191] f81232 4-1:0.0: device disconnected