last executing test programs: 5m22.232948299s ago: executing program 2 (id=525): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x140}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 5m20.031402665s ago: executing program 2 (id=530): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 5m12.788303584s ago: executing program 2 (id=533): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) 5m12.459332133s ago: executing program 2 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0x33, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000200)=0xf0) close_range(r2, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x803, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) stat(0x0, &(0x7f0000000600)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) 5m9.918368036s ago: executing program 2 (id=542): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x140}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 5m4.047062628s ago: executing program 2 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 4m48.726552399s ago: executing program 32 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 2m50.759408339s ago: executing program 0 (id=779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"]) 2m49.822902162s ago: executing program 0 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0xa0000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, 0x0) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) close_range(r1, r3, 0x0) 2m48.115450414s ago: executing program 0 (id=784): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000300)={0xcf77, 0x5}) 2m46.635237218s ago: executing program 0 (id=787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 2m46.577519572s ago: executing program 5 (id=788): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x100003}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) 2m46.007384977s ago: executing program 5 (id=790): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)) 2m45.412448448s ago: executing program 5 (id=792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0xa}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xd, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) 2m45.252113504s ago: executing program 0 (id=794): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r5}, 0x10, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES64=0x0, @ANYBLOB="9b6fe674316b0389ca747053e23a08f8a66c303fcdca7df71ee180b21f7966a0446240507938e02917c5212a9f28e26f36a45c81a6d591035bb5ee69549324bdb800ba2a2daaada3c9efa8b3f30a6e01d6ca8b18b384208691", @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fa010000c6e8b912ce"], 0x48}, 0x2}, 0x20000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) write$sndseq(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 2m43.440849115s ago: executing program 0 (id=798): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x1, 0x10000, 0x8001, 0x6, 0x2}) 2m43.231344718s ago: executing program 5 (id=799): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2m42.902280355s ago: executing program 5 (id=801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r1, 0x4) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 2m41.971169231s ago: executing program 5 (id=802): syz_open_dev$video4linux(0x0, 0x80000004, 0x800) openat$comedi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/comedi5\x00', 0x7c1843, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0x214) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='./file0\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x7e, 0x1000, 0x5c8, 0xa, 0x6}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x2d}], 0x20, 0x40, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000480)={0x0, 0x141, 0x5400000000000}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={0x3, @bcast}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="3a0e020000000000fc010000000000000000ffff00000000fc020000000000000000000000000005fe880000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000bbfc0200070000000000000000000000000000000008000000000000000000000011db699eed51b1abab8bc715340c0d336472292a527ad64265b736bc541016f860855c81a06e243c0421d63c3f1a6bbb81043d066b57b64ba3470b59e6eb22a2468ac97215ff3422d925cb9304419193054e52ba7be9467f3185784de5626fc86f43adf7c6e624cec9a22bd4e8735662588fce9a05cebd9ee164abf06b220cb6a7543d5ceeb6f9798d5515c114c9652ae91b8f17c1338c373d3cbcd53d0160756d88a0e4ae20b7fc0a591f83115b1e252549fd7dc0a657c1d6e019f9765f66a06f2c84352b92c4ce62b24021dcab0798ba654841ae96f70673a3e1cc10696a6ea45deabe2d066d3bf81ce04a0c24dc893e"], 0x78) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)=@multiplanar_fd={0x10000, 0x3, 0x4, 0x4000, 0x6, {0x77359400}, {0x5, 0x0, 0x0, 0x5e, 0x4, 0x7, "c2609f2b"}, 0xac6e, 0x4, {&(0x7f0000000700)=[{0x1, 0xc, {}, 0x1}, {0x0, 0x8, {}, 0xf63}]}, 0x10010}) 2m28.027639812s ago: executing program 33 (id=798): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x1, 0x10000, 0x8001, 0x6, 0x2}) 2m26.817969615s ago: executing program 34 (id=802): syz_open_dev$video4linux(0x0, 0x80000004, 0x800) openat$comedi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/comedi5\x00', 0x7c1843, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0x214) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='./file0\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x7e, 0x1000, 0x5c8, 0xa, 0x6}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x2d}], 0x20, 0x40, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000480)={0x0, 0x141, 0x5400000000000}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={0x3, @bcast}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x78) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)=@multiplanar_fd={0x10000, 0x3, 0x4, 0x4000, 0x6, {0x77359400}, {0x5, 0x0, 0x0, 0x5e, 0x4, 0x7, "c2609f2b"}, 0xac6e, 0x4, {&(0x7f0000000700)=[{0x1, 0xc, {}, 0x1}, {0x0, 0x8, {}, 0xf63}]}, 0x10010}) 1m9.516502365s ago: executing program 4 (id=964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000280)={0xfffffff2, 0x1, &(0x7f0000000180)=[0x401], 0x0, 0x0, 0x0}) 1m8.233548174s ago: executing program 4 (id=966): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f00000006c0)="432bbcf494dcbffd318cdf5b9b9cb2d8c8002eb4b4c2dbb909b3647b3732fe82db268150dde9219c1a536fd1546745c691abc550a9fa4a26e6f587ac75f97000e7819d088280ec753df1d4eeae77f76087"}) 1m8.028879234s ago: executing program 4 (id=967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000500)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m7.916771924s ago: executing program 4 (id=968): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x18d8, &(0x7f0000000100)={0x0, 0x2, 0x8, 0x0, 0x25b}, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x404200, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, 0x0, 0x4000080) 1m5.942124894s ago: executing program 4 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32, @ANYBLOB="0000000000008000280012"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 1m3.206526662s ago: executing program 4 (id=976): openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fanotify_init(0x2, 0x1) fanotify_mark(r5, 0x80, 0x8001018, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'batadv_slave_0\x00', &(0x7f0000000580)=@ethtool_rxnfc={0x2e, 0x5, 0x2, {0xb, @sctp_ip4_spec={@multicast1, @local, 0x4e23, 0x4e23, 0x1}, {0x0, @remote, 0x2, 0x5, [0x2, 0x6]}, @sctp_ip4_spec={@local, @multicast2, 0x4e22, 0x4e24, 0x3}, {0x0, @random="50f8c8c3abaf", 0x1232, 0x8a2, [0xbb21, 0x3]}, 0x5, 0x80000000}, 0x2, [0xe3, 0x3714]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sysinfo(&(0x7f0000000340)=""/193) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 46.883514768s ago: executing program 35 (id=976): openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fanotify_init(0x2, 0x1) fanotify_mark(r5, 0x80, 0x8001018, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'batadv_slave_0\x00', &(0x7f0000000580)=@ethtool_rxnfc={0x2e, 0x5, 0x2, {0xb, @sctp_ip4_spec={@multicast1, @local, 0x4e23, 0x4e23, 0x1}, {0x0, @remote, 0x2, 0x5, [0x2, 0x6]}, @sctp_ip4_spec={@local, @multicast2, 0x4e22, 0x4e24, 0x3}, {0x0, @random="50f8c8c3abaf", 0x1232, 0x8a2, [0xbb21, 0x3]}, 0x5, 0x80000000}, 0x2, [0xe3, 0x3714]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sysinfo(&(0x7f0000000340)=""/193) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 16.843298717s ago: executing program 7 (id=1046): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f00000006c0)="432bbcf494dcbffd318cdf5b9b9cb2d8c8002eb4b4c2dbb909b3647b3732fe82db268150dde9219c1a536fd1546745c691abc550a9fa4a26e6f587ac75f97000e7819d088280ec753df1d4eeae77f76087"}) 16.171786288s ago: executing program 7 (id=1049): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 14.856639068s ago: executing program 7 (id=1054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'caif0\x00', 0x800}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b00010000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d0182da772f17ad4178f2a23c115f1e6450865a9eb53604c795d1febf02bd35bb1369296594bd997e7ab532e1fed2ee31d50d0276627d24d4b7270e95ee3b787247c892dfab7b9b66cb881fc1e8ceb14806ae93978f"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0\x00') 8.709858418s ago: executing program 6 (id=1065): r0 = syz_open_dev$video4linux(&(0x7f000001fb80), 0x101, 0x100c02) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, 0x0) 8.37231788s ago: executing program 6 (id=1066): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) gettid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20001) timer_create(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000100), 0xfffffd79) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) 8.191516683s ago: executing program 3 (id=1068): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 7.791974743s ago: executing program 3 (id=1070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6.312117124s ago: executing program 7 (id=1072): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) 6.26340126s ago: executing program 3 (id=1073): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000040)={0x0}) 5.891398787s ago: executing program 7 (id=1075): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.846669576s ago: executing program 6 (id=1076): r0 = syz_open_dev$video4linux(&(0x7f000001fb80), 0x101, 0x100c02) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, 0x0) 5.738495633s ago: executing program 3 (id=1077): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x48002, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x10001, 0x8, "008ef14ba278887cb0baba08431799317e6324"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 5.591199559s ago: executing program 6 (id=1078): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) sendmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xa, 0x4000815}, 0x4000080) close(r0) 5.558625861s ago: executing program 1 (id=1079): 5.305443745s ago: executing program 6 (id=1080): syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d00000001090212000100000000090400d2cf0905a7"], 0x0) 5.213130271s ago: executing program 1 (id=1081): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0xfff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) 4.708107453s ago: executing program 7 (id=1082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'caif0\x00', 0x800}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b00010000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d0182da772f17ad4178f2a23c115f1e6450865a9eb53604c795d1febf02bd35bb1369296594bd997e7ab532e1fed2ee31d50d0276627d24d4b7270e95ee3b787247c892dfab7b9b66cb881fc1e8ceb14806ae93978f"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0\x00') 4.556337516s ago: executing program 8 (id=994): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000008380), 0x400000000000174, 0x4008890) 4.011901135s ago: executing program 1 (id=1083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.851067234s ago: executing program 8 (id=1084): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000abef32450d6986aeb4d7f"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r4 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b03, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$audion(&(0x7f0000000300), 0x13cb, 0x101400) 3.666677106s ago: executing program 6 (id=1085): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) gettid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20001) timer_create(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000100), 0xfffffd79) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) 3.555303328s ago: executing program 1 (id=1086): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x80000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x21c) 2.356678362s ago: executing program 1 (id=1087): r0 = syz_open_dev$video4linux(&(0x7f000001fb80), 0x101, 0x100c02) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, 0x0) 2.099444348s ago: executing program 1 (id=1088): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) 1.781338326s ago: executing program 3 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x1}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @string=&(0x7f0000000180)=0xa3}}) 0s ago: executing program 3 (id=1090): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) sendmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xa, 0x4000815}, 0x4000080) close(r0) kernel console output (not intermixed with test programs): id=0 ses=4294967295 subj=_ pid=6414 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f7eeec9 code=0x7ffc0000 [ 177.104274][ T1798] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 178.212055][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 178.314071][ T1798] usb 5-1: USB disconnect, device number 3 [ 178.375354][ T9] usb 3-1: device descriptor read/64, error -71 [ 178.633990][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 178.805381][ T9] usb 3-1: device descriptor read/64, error -71 [ 178.962256][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.984944][ T9] usb usb3-port1: attempt power cycle [ 179.395506][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 179.593246][ T9] usb 3-1: device descriptor read/8, error -71 [ 179.832946][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.155398][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.156141][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 180.191348][ T9] usb 3-1: device descriptor read/8, error -71 [ 180.296463][ T9] usb usb3-port1: unable to enumerate USB device [ 180.510999][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.320256][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.055375][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 189.559146][ T6544] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.904129][ T6550] netlink: 144 bytes leftover after parsing attributes in process `syz.4.202'. [ 190.405516][ T5948] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.545410][ T5948] usb 5-1: device descriptor read/64, error -71 [ 190.785402][ T5948] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 190.977200][ T5948] usb 5-1: device descriptor read/64, error -71 [ 191.104815][ T5948] usb usb5-port1: attempt power cycle [ 191.696050][ T5948] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.718106][ T5948] usb 5-1: device descriptor read/8, error -71 [ 192.880031][ T5948] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 192.916217][ T5948] usb 5-1: device descriptor read/8, error -71 [ 193.026658][ T5948] usb usb5-port1: unable to enumerate USB device [ 193.166405][ T6581] binder: 6579:6581 ioctl 40046205 0 returned -22 [ 194.062017][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 198.105344][ T5949] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 198.255398][ T5949] usb 5-1: device descriptor read/64, error -71 [ 198.496317][ T5949] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 198.625416][ T5949] usb 5-1: device descriptor read/64, error -71 [ 199.817432][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.817486][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.873588][ T5949] usb usb5-port1: attempt power cycle [ 200.215305][ T5949] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 200.425289][ T5949] usb 5-1: device not accepting address 10, error -71 [ 200.946793][ T6650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.219738][ T6649] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 201.228634][ T6649] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 208.417130][ T5948] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 208.637397][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 208.645698][ T5948] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 208.645732][ T5948] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.645875][ T5948] usb 1-1: config 1 has no interface number 0 [ 208.645934][ T5948] usb 1-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.645965][ T5948] usb 1-1: config 1 interface 236 has no altsetting 0 [ 208.651393][ T5948] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 208.651554][ T5948] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.651577][ T5948] usb 1-1: config 1 has no interface number 0 [ 208.651633][ T5948] usb 1-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.651664][ T5948] usb 1-1: config 1 interface 236 has no altsetting 0 [ 208.658806][ T5948] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 208.658844][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.658868][ T5948] usb 1-1: Product: syz [ 208.658884][ T5948] usb 1-1: Manufacturer: syz [ 208.658901][ T5948] usb 1-1: SerialNumber: syz [ 208.902136][ T5949] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 209.055763][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 209.058315][ T5949] usb 5-1: config index 0 descriptor too short (expected 65530, got 72) [ 209.058334][ T5949] usb 5-1: config 191 has too many interfaces: 255, using maximum allowed: 32 [ 209.058349][ T5949] usb 5-1: config 191 has an invalid descriptor of length 0, skipping remainder of the config [ 209.058363][ T5949] usb 5-1: config 191 has 0 interfaces, different from the descriptor's value: 255 [ 209.061489][ T5949] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 209.061510][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.061524][ T5949] usb 5-1: Product: syz [ 209.061534][ T5949] usb 5-1: Manufacturer: syz [ 209.061545][ T5949] usb 5-1: SerialNumber: syz [ 209.170088][ T5948] ti_usb_3410_5052 1-1:1.236: required endpoints missing [ 209.358111][ T6674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'. [ 209.387389][ T5948] usb 1-1: USB disconnect, device number 4 [ 209.891487][ T5949] usb 5-1: USB disconnect, device number 12 [ 210.675461][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 210.909220][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.909253][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 210.909296][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 210.909319][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.987441][ T9] usb 3-1: config 0 descriptor?? [ 212.342747][ T9] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 212.342791][ T9] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 212.342820][ T9] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 212.342848][ T9] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 212.342876][ T9] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 212.354166][ T9] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 213.006745][ T9] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 213.006954][ T9] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 213.464733][ T9] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -71 [ 213.795787][ T9] usb 3-1: USB disconnect, device number 11 [ 214.932640][ T6705] fido_id[6705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 217.126455][ T5965] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 217.126459][ T5948] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 217.275308][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 217.275515][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 217.278227][ T5965] usb 1-1: config index 0 descriptor too short (expected 65530, got 72) [ 217.278248][ T5965] usb 1-1: config 191 has too many interfaces: 255, using maximum allowed: 32 [ 217.278270][ T5965] usb 1-1: config 191 has an invalid descriptor of length 0, skipping remainder of the config [ 217.278290][ T5965] usb 1-1: config 191 has 0 interfaces, different from the descriptor's value: 255 [ 217.284156][ T5965] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 217.284184][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.284204][ T5965] usb 1-1: Product: syz [ 217.284219][ T5965] usb 1-1: Manufacturer: syz [ 217.284233][ T5965] usb 1-1: SerialNumber: syz [ 217.382256][ T5948] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 217.382286][ T5948] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.382305][ T5948] usb 4-1: config 1 has no interface number 0 [ 217.382349][ T5948] usb 4-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.382369][ T5948] usb 4-1: config 1 interface 236 has no altsetting 0 [ 217.384874][ T5948] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 217.384902][ T5948] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.384921][ T5948] usb 4-1: config 1 has no interface number 0 [ 217.384971][ T5948] usb 4-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.384998][ T5948] usb 4-1: config 1 interface 236 has no altsetting 0 [ 217.405352][ T5948] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 217.405389][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.405404][ T5948] usb 4-1: Product: syz [ 217.405414][ T5948] usb 4-1: Manufacturer: syz [ 217.405424][ T5948] usb 4-1: SerialNumber: syz [ 217.585668][ T5948] ti_usb_3410_5052 4-1:1.236: required endpoints missing [ 217.823391][ T6728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.258'. [ 217.982766][ T5965] usb 1-1: USB disconnect, device number 5 [ 218.047144][ T31] usb 4-1: USB disconnect, device number 3 [ 226.085914][ T6759] usb usb5: usbfs: process 6759 (syz.3.267) did not claim interface 0 before use [ 227.211757][ T6749] Bluetooth: hci3: command 0x0406 tx timeout [ 227.212178][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.213353][ T6749] Bluetooth: hci4: command 0x0406 tx timeout [ 227.223703][ T6749] Bluetooth: hci2: command 0x0406 tx timeout [ 227.825874][ T6749] Bluetooth: hci0: command 0x0406 tx timeout [ 227.826199][ T6749] Bluetooth: hci1: command 0x0406 tx timeout [ 227.958932][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.525451][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 228.685359][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 228.688166][ T9] usb 1-1: config index 0 descriptor too short (expected 65530, got 72) [ 228.688186][ T9] usb 1-1: config 191 has too many interfaces: 255, using maximum allowed: 32 [ 228.688201][ T9] usb 1-1: config 191 has an invalid descriptor of length 0, skipping remainder of the config [ 228.688215][ T9] usb 1-1: config 191 has 0 interfaces, different from the descriptor's value: 255 [ 228.690883][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 228.690904][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.690918][ T9] usb 1-1: Product: syz [ 228.690928][ T9] usb 1-1: Manufacturer: syz [ 228.690938][ T9] usb 1-1: SerialNumber: syz [ 228.930554][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.047259][ T9] usb 1-1: USB disconnect, device number 6 [ 229.176994][ T6786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.360631][ T5948] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 229.515295][ T5948] usb 2-1: Using ep0 maxpacket: 32 [ 229.531461][ T5948] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 229.531489][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.531508][ T5948] usb 2-1: config 1 has no interface number 0 [ 229.531559][ T5948] usb 2-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.531586][ T5948] usb 2-1: config 1 interface 236 has no altsetting 0 [ 229.585813][ T5948] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 229.585845][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.585865][ T5948] usb 2-1: config 1 has no interface number 0 [ 229.585914][ T5948] usb 2-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.585942][ T5948] usb 2-1: config 1 interface 236 has no altsetting 0 [ 229.594864][ T5948] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 229.594886][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.594901][ T5948] usb 2-1: Product: syz [ 229.594911][ T5948] usb 2-1: Manufacturer: syz [ 229.594922][ T5948] usb 2-1: SerialNumber: syz [ 229.687393][ T5948] ti_usb_3410_5052 2-1:1.236: required endpoints missing [ 229.957227][ T5948] usb 2-1: USB disconnect, device number 4 [ 230.091594][ T6795] netlink: 36 bytes leftover after parsing attributes in process `syz.3.281'. [ 230.964158][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.293686][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.413908][ T6809] netlink: 'syz.0.286': attribute type 7 has an invalid length. [ 232.413927][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 238.381184][ T6845] netlink: 'syz.4.298': attribute type 7 has an invalid length. [ 238.381202][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 240.344714][ T6878] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 241.489655][ T6880] netlink: 'syz.0.310': attribute type 7 has an invalid length. [ 241.489672][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 243.558385][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 244.217752][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 244.235292][ T9] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 244.235314][ T9] usb 5-1: config 0 has no interface number 0 [ 244.235349][ T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 244.235374][ T9] usb 5-1: config 0 interface 196 has no altsetting 0 [ 244.239860][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 244.239882][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.239896][ T9] usb 5-1: Product: syz [ 244.239906][ T9] usb 5-1: Manufacturer: syz [ 244.239916][ T9] usb 5-1: SerialNumber: syz [ 244.248042][ T9] usb 5-1: config 0 descriptor?? [ 244.255968][ T6900] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 244.686696][ T9] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 244.686964][ T9] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 244.779845][ T9] usb 5-1: USB disconnect, device number 13 [ 245.185829][ T6910] No control pipe specified [ 246.514144][ T6928] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 246.718343][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.325'. [ 248.609260][ T6941] autofs: Bad value for 'fd' [ 249.365496][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 249.518454][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 249.520734][ T9] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 249.520754][ T9] usb 1-1: config 0 has no interface number 1 [ 249.523981][ T9] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 249.524002][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.524016][ T9] usb 1-1: Product: syz [ 249.524026][ T9] usb 1-1: Manufacturer: syz [ 249.524037][ T9] usb 1-1: SerialNumber: syz [ 249.772867][ T9] usb 1-1: config 0 descriptor?? [ 250.130644][ T9] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 250.185339][ T9] usb 1-1: USB disconnect, device number 7 [ 250.401362][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.767178][ T6958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.336'. [ 251.206739][ T6963] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.360451][ T6967] autofs: Bad value for 'fd' [ 256.995798][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 257.229689][ T6988] overlayfs: overlapping lowerdir path [ 259.035095][ T7011] usb usb5: usbfs: process 7011 (syz.2.351) did not claim interface 0 before use [ 259.396557][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.833180][ T7016] autofs: Bad value for 'fd' [ 260.098508][ T7021] program syz.0.355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.476322][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 260.894395][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.894469][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.965372][ T5949] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 261.292880][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 261.296066][ T5949] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 261.296097][ T5949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.296120][ T5949] usb 1-1: config 0 has no interface number 0 [ 261.301335][ T5949] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 261.301368][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.301391][ T5949] usb 1-1: Product: syz [ 261.301408][ T5949] usb 1-1: Manufacturer: syz [ 261.301425][ T5949] usb 1-1: SerialNumber: syz [ 261.443979][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.103214][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.128055][ T5949] usb 1-1: config 0 descriptor?? [ 262.171787][ T5949] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 262.171823][ T5949] uvcvideo 1-1:0.105: No valid video chain found. [ 262.525536][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.678497][ T7044] overlayfs: failed to resolve './file0': -2 [ 262.680353][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.788586][ T5965] usb 1-1: USB disconnect, device number 8 [ 263.305837][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.531613][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.804226][ T7051] autofs: Unknown parameter '0x0000000000000000' [ 265.295315][ T5949] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 265.445399][ T5949] usb 1-1: Using ep0 maxpacket: 32 [ 265.454639][ T5949] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 265.454667][ T5949] usb 1-1: config 0 has no interface number 0 [ 265.454717][ T5949] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 265.454745][ T5949] usb 1-1: config 0 interface 196 has no altsetting 0 [ 265.498796][ T5949] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 265.498829][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.498843][ T5949] usb 1-1: Product: syz [ 265.498853][ T5949] usb 1-1: Manufacturer: syz [ 265.498863][ T5949] usb 1-1: SerialNumber: syz [ 265.555661][ T5949] usb 1-1: config 0 descriptor?? [ 265.561788][ T7071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 266.782319][ T5949] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 266.782523][ T5949] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 266.897384][ T5949] usb 1-1: USB disconnect, device number 9 [ 267.485478][ T7081] autofs: Unknown parameter '0x0000000000000000' [ 267.984196][ T7084] netlink: 'syz.0.377': attribute type 7 has an invalid length. [ 267.984303][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 268.795321][ T5894] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 268.945373][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 268.949830][ T5894] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 268.949858][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.949877][ T5894] usb 1-1: config 0 has no interface number 0 [ 268.954748][ T5894] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 268.954791][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.954812][ T5894] usb 1-1: Product: syz [ 268.954826][ T5894] usb 1-1: Manufacturer: syz [ 268.954841][ T5894] usb 1-1: SerialNumber: syz [ 269.040779][ T5894] usb 1-1: config 0 descriptor?? [ 269.074828][ T5894] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 269.074864][ T5894] uvcvideo 1-1:0.105: No valid video chain found. [ 269.264535][ T5894] usb 1-1: USB disconnect, device number 10 [ 269.325064][ T7107] autofs: Unknown parameter '0x0000000000000000' [ 271.467217][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 272.475267][ T5965] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 272.625310][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 272.636201][ T5965] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 272.636227][ T5965] usb 1-1: config 0 has no interface number 1 [ 272.639800][ T5965] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 272.639833][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.639856][ T5965] usb 1-1: Product: syz [ 272.639873][ T5965] usb 1-1: Manufacturer: syz [ 272.639891][ T5965] usb 1-1: SerialNumber: syz [ 272.970715][ T5965] usb 1-1: config 0 descriptor?? [ 274.267803][ T5965] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 274.402100][ T5965] usb 1-1: USB disconnect, device number 11 [ 274.855356][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.390295][ T7150] fuse: Invalid rootmode [ 275.492620][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.400'. [ 278.559898][ T7182] mmap: syz.4.408 (7182) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 281.941110][ T7211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.293181][ T7219] program syz.2.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.076356][ T7244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.489308][ T7264] program syz.1.437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.609731][ T7265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'. [ 286.895841][ T7277] fuse: Bad value for 'rootmode' [ 291.835337][ T1798] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 292.018480][ T1798] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 292.018512][ T1798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.056752][ T1798] usb 5-1: config 0 descriptor?? [ 292.063014][ T1798] gspca_main: spca508-2.14.0 probing 8086:0110 [ 292.285287][ T1798] gspca_spca508: reg_read err -32 [ 292.286352][ T1798] gspca_spca508: reg_read err -32 [ 292.287307][ T1798] gspca_spca508: reg_read err -32 [ 292.617914][ T1798] gspca_spca508: reg_read err -71 [ 292.618317][ T1798] gspca_spca508: reg write: error -71 [ 292.618486][ T1798] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 292.923887][ T1798] usb 5-1: USB disconnect, device number 14 [ 297.635277][ T5948] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 298.075711][ T5948] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 298.075744][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.083962][ T5948] usb 3-1: config 0 descriptor?? [ 298.100468][ T5948] gspca_main: spca508-2.14.0 probing 8086:0110 [ 298.309775][ T5948] gspca_spca508: reg_read err -32 [ 298.313968][ T5948] gspca_spca508: reg_read err -32 [ 298.336175][ T5948] gspca_spca508: reg_read err -32 [ 298.871299][ T5948] gspca_spca508: reg_read err -71 [ 299.155899][ T5948] gspca_spca508: reg write: error -71 [ 299.155996][ T5948] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 300.667184][ T5948] usb 3-1: USB disconnect, device number 12 [ 306.439457][ T1798] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 306.598605][ T1798] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 306.598648][ T1798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.491905][ T1798] usb 2-1: config 0 descriptor?? [ 307.533758][ T1798] gspca_main: spca508-2.14.0 probing 8086:0110 [ 307.730498][ T1798] gspca_spca508: reg_read err -32 [ 307.731019][ T1798] gspca_spca508: reg_read err -32 [ 307.731543][ T1798] gspca_spca508: reg_read err -32 [ 307.933298][ T1798] gspca_spca508: reg_read err -71 [ 307.933619][ T1798] gspca_spca508: reg write: error -71 [ 307.933692][ T1798] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 307.940683][ T1798] usb 2-1: USB disconnect, device number 6 [ 310.704878][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.074811][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.230507][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.352769][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.610396][ T7481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.343410][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.343487][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.521744][ T7548] netlink: 'syz.3.523': attribute type 7 has an invalid length. [ 326.521761][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 326.815545][ T5894] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 326.965250][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 327.083704][ T5894] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.083727][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.083741][ T5894] usb 2-1: Product: syz [ 327.083751][ T5894] usb 2-1: Manufacturer: syz [ 327.083761][ T5894] usb 2-1: SerialNumber: syz [ 327.931547][ T5894] usb 2-1: config 0 descriptor?? [ 328.259624][ T5894] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 329.705962][ T5894] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 329.730885][ T7575] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 329.748688][ T7575] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 329.749102][ T5894] usb 2-1: USB disconnect, device number 7 [ 330.117640][ T7576] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 338.127869][ T7596] netlink: 'syz.2.537': attribute type 7 has an invalid length. [ 338.128114][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 348.013458][ T7619] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 348.014611][ T7619] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 349.624985][ T7625] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 351.737900][ T7657] usb usb5: usbfs: process 7657 (syz.0.553) did not claim interface 0 before use [ 351.852769][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.170922][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.963571][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'. [ 364.266937][ T7692] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 364.268154][ T7692] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 364.683603][ T7697] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 364.818406][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.852679][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.868604][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.883853][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.884885][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.255277][ T5823] Bluetooth: hci5: command tx timeout [ 368.589330][ T7738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.575'. [ 368.970548][ T7743] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 369.807100][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.903913][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.133791][ T7751] usb usb5: usbfs: process 7751 (syz.0.577) did not claim interface 0 before use [ 370.134308][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.332891][ T5823] Bluetooth: hci5: command tx timeout [ 370.699638][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.349203][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.582039][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.655176][ T7743] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 371.661711][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.963140][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.424224][ T5823] Bluetooth: hci5: command tx timeout [ 372.638351][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.864196][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.113854][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 374.254982][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.486008][ T5823] Bluetooth: hci5: command tx timeout [ 375.072034][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.089384][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.395695][ T7806] netlink: 'syz.4.595': attribute type 1 has an invalid length. [ 377.365604][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.101557][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.713438][ T7833] usb usb5: usbfs: process 7833 (syz.1.601) did not claim interface 0 before use [ 378.812158][ T7808] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 378.819199][ T7808] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 378.838462][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.906494][ T7811] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 379.907059][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.112925][ T7706] chnl_net:caif_netlink_parms(): no params data found [ 380.256584][ T7848] kAFS: No cell specified [ 380.778230][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.751739][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.751812][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.735631][ T7706] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.736309][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.739453][ T7706] bridge_slave_0: entered allmulticast mode [ 387.777927][ T7706] bridge_slave_0: entered promiscuous mode [ 388.025418][ T7706] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.025557][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.025832][ T7706] bridge_slave_1: entered allmulticast mode [ 388.098380][ T7706] bridge_slave_1: entered promiscuous mode [ 388.686622][ T7876] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 389.214819][ T7878] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 389.236065][ T7878] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 389.409795][ T7880] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 389.464495][ T7706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.483714][ T7706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.625578][ T5949] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 389.647208][ T68] bridge_slave_1: left allmulticast mode [ 389.647428][ T68] bridge_slave_1: left promiscuous mode [ 389.658995][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.805264][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 389.807083][ T5949] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 389.809248][ T5949] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 389.809268][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.809282][ T5949] usb 4-1: Product: syz [ 389.809293][ T5949] usb 4-1: Manufacturer: syz [ 389.809303][ T5949] usb 4-1: SerialNumber: syz [ 389.820279][ T5949] usb 4-1: config 0 descriptor?? [ 389.835351][ T68] bridge_slave_0: left allmulticast mode [ 389.835388][ T68] bridge_slave_0: left promiscuous mode [ 389.835712][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.866121][ T5949] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 389.866288][ T5949] usb 4-1: setting power ON [ 389.866310][ T5949] dvb-usb: bulk message failed: -22 (2/0) [ 389.949583][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.950466][ T5949] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 389.950524][ T5949] usb 4-1: media controller created [ 390.083942][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 390.215777][ T5949] usb 4-1: selecting invalid altsetting 6 [ 390.215803][ T5949] usb 4-1: digital interface selection failed (-22) [ 390.215835][ T5949] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 390.218458][ T5949] usb 4-1: setting power OFF [ 390.218480][ T5949] dvb-usb: bulk message failed: -22 (2/0) [ 390.218498][ T5949] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 390.218511][ T5949] (NULL device *): no alternate interface [ 390.276398][ T7901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.620'. [ 390.332860][ T37] audit: type=1326 audit(1759813853.908:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7889 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 390.340666][ T37] audit: type=1326 audit(1759813853.908:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7889 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 390.340732][ T37] audit: type=1326 audit(1759813853.908:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7889 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 390.340786][ T37] audit: type=1326 audit(1759813853.908:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7889 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 390.340839][ T37] audit: type=1326 audit(1759813853.908:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7889 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 390.446405][ T37] audit: type=1326 audit(1759813854.028:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7889 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 390.446850][ T37] audit: type=1326 audit(1759813854.028:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7889 comm="syz.0.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 390.711756][ T5949] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 390.816707][ T5949] usb 4-1: USB disconnect, device number 4 [ 395.265276][ T5965] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 395.365875][ T68] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 395.415334][ T5965] usb 2-1: Using ep0 maxpacket: 8 [ 395.418363][ T5965] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 395.421375][ T5965] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 395.421402][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.421422][ T5965] usb 2-1: Product: syz [ 395.421436][ T5965] usb 2-1: Manufacturer: syz [ 395.421447][ T5965] usb 2-1: SerialNumber: syz [ 395.471427][ T5965] usb 2-1: config 0 descriptor?? [ 395.483370][ T5965] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 395.483409][ T5965] usb 2-1: setting power ON [ 395.483423][ T5965] dvb-usb: bulk message failed: -22 (2/0) [ 395.602489][ T5965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 395.615009][ T5965] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 395.623714][ T5965] usb 2-1: media controller created [ 395.670007][ T5965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 395.701248][ T5965] usb 2-1: selecting invalid altsetting 6 [ 395.701272][ T5965] usb 2-1: digital interface selection failed (-22) [ 395.701288][ T5965] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 395.703069][ T5965] usb 2-1: setting power OFF [ 395.703093][ T5965] dvb-usb: bulk message failed: -22 (2/0) [ 395.703111][ T5965] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 395.703124][ T5965] (NULL device *): no alternate interface [ 395.779486][ T5965] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 395.809167][ T5965] usb 2-1: USB disconnect, device number 8 [ 396.371988][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 396.395667][ T5894] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 396.585223][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 396.588946][ T5894] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 396.588974][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.589001][ T5894] usb 4-1: config 1 has no interface number 0 [ 396.589034][ T5894] usb 4-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 396.589053][ T5894] usb 4-1: config 1 interface 236 has no altsetting 0 [ 396.590260][ T5894] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 396.590284][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.590304][ T5894] usb 4-1: config 1 has no interface number 0 [ 396.590347][ T5894] usb 4-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 396.590367][ T5894] usb 4-1: config 1 interface 236 has no altsetting 0 [ 396.592997][ T5894] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 396.593023][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.593043][ T5894] usb 4-1: Product: syz [ 396.593053][ T5894] usb 4-1: Manufacturer: syz [ 396.593063][ T5894] usb 4-1: SerialNumber: syz [ 396.727960][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.733656][ T5894] ti_usb_3410_5052 4-1:1.236: required endpoints missing [ 396.847944][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.888899][ T68] bond0 (unregistering): Released all slaves [ 396.934806][ T7943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 396.941342][ T5948] usb 4-1: USB disconnect, device number 5 [ 396.946011][ T68] bond1 (unregistering): Released all slaves [ 397.396117][ T7706] team0: Port device team_slave_0 added [ 397.450661][ T7706] team0: Port device team_slave_1 added [ 401.827921][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.827935][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.827954][ T7706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.830656][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.830672][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.830699][ T7706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.788117][ T7706] hsr_slave_0: entered promiscuous mode [ 402.789633][ T7706] hsr_slave_1: entered promiscuous mode [ 402.790754][ T7706] debugfs: 'hsr0' already exists in 'hsr' [ 402.790779][ T7706] Cannot create hsr debugfs directory [ 403.075322][ T5887] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 403.225153][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 403.410069][ T5887] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 403.410099][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.410118][ T5887] usb 1-1: config 1 has no interface number 0 [ 403.410174][ T5887] usb 1-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.410202][ T5887] usb 1-1: config 1 interface 236 has no altsetting 0 [ 403.908543][ T5887] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 403.908574][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.908594][ T5887] usb 1-1: config 1 has no interface number 0 [ 403.908643][ T5887] usb 1-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.908670][ T5887] usb 1-1: config 1 interface 236 has no altsetting 0 [ 403.913876][ T5887] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 403.913907][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.913927][ T5887] usb 1-1: Product: syz [ 403.913943][ T5887] usb 1-1: Manufacturer: syz [ 403.913958][ T5887] usb 1-1: SerialNumber: syz [ 404.103346][ T5887] ti_usb_3410_5052 1-1:1.236: required endpoints missing [ 404.155842][ T68] hsr_slave_0: left promiscuous mode [ 404.254680][ T7992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.649'. [ 404.277379][ T5894] usb 1-1: USB disconnect, device number 12 [ 404.295922][ T68] hsr_slave_1: left promiscuous mode [ 404.297154][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.297305][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.397871][ T5948] IPVS: starting estimator thread 0... [ 404.438369][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.438397][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.498405][ T8005] IPVS: using max 11 ests per chain, 26400 per kthread [ 404.829611][ T68] veth1_macvtap: left promiscuous mode [ 404.829888][ T68] veth0_macvtap: left promiscuous mode [ 404.830198][ T68] veth1_vlan: left promiscuous mode [ 404.830556][ T68] veth0_vlan: left promiscuous mode [ 412.566451][ T5887] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 412.775259][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 412.780608][ T5887] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 412.780629][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.780642][ T5887] usb 4-1: config 1 has no interface number 0 [ 412.780674][ T5887] usb 4-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.780693][ T5887] usb 4-1: config 1 interface 236 has no altsetting 0 [ 412.815297][ T5887] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 412.815325][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.815345][ T5887] usb 4-1: config 1 has no interface number 0 [ 412.815395][ T5887] usb 4-1: config 1 interface 236 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.815430][ T5887] usb 4-1: config 1 interface 236 has no altsetting 0 [ 412.895351][ T5887] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 412.895382][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.895402][ T5887] usb 4-1: Product: syz [ 412.895416][ T5887] usb 4-1: Manufacturer: syz [ 412.895431][ T5887] usb 4-1: SerialNumber: syz [ 413.399164][ T5887] ti_usb_3410_5052 4-1:1.236: required endpoints missing [ 413.625416][ T8056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.665'. [ 413.631328][ T5948] usb 4-1: USB disconnect, device number 6 [ 413.786377][ T5949] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 413.976421][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 413.979535][ T5949] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 413.979567][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.710535][ T5949] pvrusb2: Hardware description: Terratec Grabster AV400 [ 414.710557][ T5949] pvrusb2: ********** [ 414.710565][ T5949] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 414.710583][ T5949] pvrusb2: Important functionality might not be entirely working. [ 414.710593][ T5949] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 414.710610][ T5949] pvrusb2: ********** [ 415.107283][ T2367] pvrusb2: Invalid write control endpoint [ 415.283151][ T8063] pvrusb2: Invalid write control endpoint [ 415.284782][ T5949] usb 1-1: USB disconnect, device number 13 [ 415.369076][ T2367] pvrusb2: Invalid write control endpoint [ 415.369092][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 415.369102][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 415.369111][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 415.369122][ T2367] pvrusb2: Device being rendered inoperable [ 415.410959][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 415.411755][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 415.461469][ T2367] pvrusb2: Attached sub-driver cx25840 [ 415.461487][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 415.461497][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 424.033648][ T68] team0 (unregistering): Port device team_slave_1 removed [ 424.145303][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.147995][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.149085][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.150443][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.151593][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.205256][ T5887] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 424.672007][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 424.739860][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 424.742886][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.766616][ T5887] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 424.766638][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.766652][ T5887] usb 5-1: Product: syz [ 424.766663][ T5887] usb 5-1: Manufacturer: syz [ 424.766674][ T5887] usb 5-1: SerialNumber: syz [ 424.826066][ T68] team0 (unregistering): Port device team_slave_0 removed [ 425.023223][ T5887] usb 5-1: USB disconnect, device number 15 [ 426.057710][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 426.245236][ T5823] Bluetooth: hci2: command tx timeout [ 426.959044][ T8148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.693'. [ 428.325216][ T5823] Bluetooth: hci2: command tx timeout [ 428.926948][ T5949] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 429.236129][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 429.238792][ T5949] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 429.238819][ T5949] usb 2-1: config 0 has no interface number 0 [ 429.238867][ T5949] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 429.238893][ T5949] usb 2-1: config 0 interface 196 has no altsetting 0 [ 429.242480][ T5949] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 429.242508][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.242529][ T5949] usb 2-1: Product: syz [ 429.242544][ T5949] usb 2-1: Manufacturer: syz [ 429.242559][ T5949] usb 2-1: SerialNumber: syz [ 430.279951][ T5949] usb 2-1: config 0 descriptor?? [ 430.281010][ T8157] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 430.405256][ T5823] Bluetooth: hci2: command tx timeout [ 431.197145][ T5949] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 431.584151][ T5949] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 431.611043][ T5949] usb 2-1: USB disconnect, device number 9 [ 432.603880][ T5823] Bluetooth: hci2: command tx timeout [ 434.315918][ T8194] sd 0:0:1:0: device reset [ 435.016408][ T8202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'. [ 435.287586][ T5949] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 435.715959][ T8214] fuse: Bad value for 'fd' [ 436.770091][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'. [ 438.244396][ T8225] tty tty4: ldisc open failed (-12), clearing slot 3 [ 438.346406][ T8127] chnl_net:caif_netlink_parms(): no params data found [ 438.795297][ T5887] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 439.141796][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 439.548768][ T5887] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 439.548799][ T5887] usb 5-1: config 0 has no interface number 0 [ 439.548855][ T5887] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 439.548881][ T5887] usb 5-1: config 0 interface 196 has no altsetting 0 [ 439.560438][ T5887] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 439.560469][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.560489][ T5887] usb 5-1: Product: syz [ 439.560504][ T5887] usb 5-1: Manufacturer: syz [ 439.560518][ T5887] usb 5-1: SerialNumber: syz [ 439.571463][ T5887] usb 5-1: config 0 descriptor?? [ 439.573046][ T8229] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 441.247884][ T5887] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 442.000531][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 444.398243][ T5887] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 444.584895][ T5887] usb 5-1: USB disconnect, device number 16 [ 444.839996][ T68] bridge_slave_1: left allmulticast mode [ 444.840018][ T68] bridge_slave_1: left promiscuous mode [ 444.840280][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.052184][ T8281] fuse: Bad value for 'fd' [ 445.090463][ T68] bridge_slave_0: left allmulticast mode [ 445.090495][ T68] bridge_slave_0: left promiscuous mode [ 445.091303][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.324321][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.324406][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.615637][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.795844][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.892365][ T68] bond0 (unregistering): Released all slaves [ 450.299699][ T5887] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 450.603836][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.727'. [ 450.666270][ T37] audit: type=1326 audit(1759813914.238:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f7eeec9 code=0x7ffc0000 [ 450.666386][ T37] audit: type=1326 audit(1759813914.248:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f7eeec9 code=0x7ffc0000 [ 450.675275][ T5887] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 450.773135][ T8127] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.773274][ T8127] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.773517][ T8127] bridge_slave_0: entered allmulticast mode [ 450.799994][ T8127] bridge_slave_0: entered promiscuous mode [ 450.825240][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 450.827084][ T5887] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 450.827104][ T5887] usb 5-1: config 0 has no interface number 0 [ 450.827140][ T5887] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 450.827158][ T5887] usb 5-1: config 0 interface 196 has no altsetting 0 [ 450.829139][ T5887] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 450.829158][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.829172][ T5887] usb 5-1: Product: syz [ 450.829183][ T5887] usb 5-1: Manufacturer: syz [ 450.829193][ T5887] usb 5-1: SerialNumber: syz [ 450.833849][ T5887] usb 5-1: config 0 descriptor?? [ 450.834595][ T8302] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 450.934732][ T37] audit: type=1326 audit(1759813914.348:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fd36f7eeec9 code=0x7ffc0000 [ 450.934794][ T37] audit: type=1326 audit(1759813914.508:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f7eeec9 code=0x7ffc0000 [ 450.978282][ T37] audit: type=1326 audit(1759813914.508:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36f7eeec9 code=0x7ffc0000 [ 450.988411][ T8127] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.988741][ T8127] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.989020][ T8127] bridge_slave_1: entered allmulticast mode [ 451.110471][ T8127] bridge_slave_1: entered promiscuous mode [ 452.072200][ T5887] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 452.302397][ T68] hsr_slave_0: left promiscuous mode [ 452.430622][ T68] hsr_slave_1: left promiscuous mode [ 452.435970][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.627585][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.292336][ T68] team0 (unregistering): Port device team_slave_1 removed [ 454.426028][ T68] team0 (unregistering): Port device team_slave_0 removed [ 454.982227][ T8335] binder_alloc: 8330: binder_alloc_buf, no vma [ 455.461866][ T5887] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 455.513939][ T5887] usb 5-1: USB disconnect, device number 17 [ 456.742244][ T8127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.825418][ T5823] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 457.013111][ T5887] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 457.056501][ T8127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.455219][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 460.455339][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 460.838907][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'. [ 462.118104][ T8127] team0: Port device team_slave_0 added [ 462.202676][ T8127] team0: Port device team_slave_1 added [ 463.946127][ T8127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.946146][ T8127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.946174][ T8127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.954601][ T8127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.954617][ T8127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.954644][ T8127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.272857][ T8391] 8021q: VLANs not supported on lo [ 464.659916][ T8127] hsr_slave_0: entered promiscuous mode [ 464.671862][ T8127] hsr_slave_1: entered promiscuous mode [ 464.680959][ T8127] debugfs: 'hsr0' already exists in 'hsr' [ 464.680979][ T8127] Cannot create hsr debugfs directory [ 465.019483][ T8399] process 'syz.3.751' launched './file2' with NULL argv: empty string added [ 465.072197][ T8399] netlink: 'syz.3.751': attribute type 10 has an invalid length. [ 465.298766][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.752'. [ 465.430857][ T37] audit: type=1326 audit(1759813928.998:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8400 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 465.430919][ T37] audit: type=1326 audit(1759813928.998:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8400 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 465.430956][ T37] audit: type=1326 audit(1759813928.998:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8400 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 465.430989][ T37] audit: type=1326 audit(1759813928.998:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8400 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 465.431020][ T37] audit: type=1326 audit(1759813928.998:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8400 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 465.431052][ T37] audit: type=1326 audit(1759813928.998:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8400 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 465.431083][ T37] audit: type=1326 audit(1759813928.998:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8400 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 465.431114][ T37] audit: type=1326 audit(1759813929.008:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8400 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7adeec9 code=0x7ffc0000 [ 465.785475][ T8398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.964550][ T8399] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 466.245330][ T5894] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 466.418024][ T5894] usb 5-1: too many endpoints for config 0 interface 0 altsetting 210: 207, using maximum allowed: 30 [ 466.418072][ T5894] usb 5-1: config 0 interface 0 altsetting 210 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 466.418100][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 466.418135][ T5894] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 466.418159][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.451772][ T5894] usb 5-1: config 0 descriptor?? [ 466.703128][ T5894] usb 5-1: string descriptor 0 read error: -71 [ 466.731268][ T5894] hub 5-1:0.0: bad descriptor, ignoring hub [ 466.731308][ T5894] hub 5-1:0.0: probe with driver hub failed with error -5 [ 466.818438][ T5894] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 467.005301][ T5965] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 467.026858][ T5894] usb 5-1: USB disconnect, device number 18 [ 467.161234][ T5965] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 467.161264][ T5965] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 467.161284][ T5965] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 467.161304][ T5965] usb 4-1: config 220 has no interface number 2 [ 467.161389][ T5965] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 467.161418][ T5965] usb 4-1: config 220 interface 0 has no altsetting 0 [ 467.161437][ T5965] usb 4-1: config 220 interface 76 has no altsetting 0 [ 467.161462][ T5965] usb 4-1: config 220 interface 1 has no altsetting 0 [ 467.164110][ T5965] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 467.164142][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.164161][ T5965] usb 4-1: Product: syz [ 467.164171][ T5965] usb 4-1: Manufacturer: syz [ 467.164181][ T5965] usb 4-1: SerialNumber: syz [ 467.628430][ T5965] usb 4-1: selecting invalid altsetting 0 [ 467.628933][ T5965] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 467.628965][ T5965] uvcvideo 4-1:220.0: No valid video chain found. [ 467.905263][ T5965] usb 4-1: selecting invalid altsetting 0 [ 467.905305][ T5965] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 467.930130][ T5965] usb 4-1: USB disconnect, device number 7 [ 468.443720][ T8127] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 468.500948][ T8127] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 468.608901][ T8127] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 469.828395][ T8127] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 470.020023][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.708073][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.265675][ T8127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.506703][ T8127] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.589113][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.589263][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.620232][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.634836][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.880519][ T5901] kernel write not supported for file /media3 (pid: 5901 comm: kworker/1:5) [ 473.123028][ T8127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.954283][ T8468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'. [ 474.235236][ T5894] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 474.385883][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 474.387855][ T5894] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 474.387875][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.524675][ T5894] pvrusb2: Hardware description: Terratec Grabster AV400 [ 474.524690][ T5894] pvrusb2: ********** [ 474.524695][ T5894] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 474.524703][ T5894] pvrusb2: Important functionality might not be entirely working. [ 474.524709][ T5894] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 474.524717][ T5894] pvrusb2: ********** [ 474.662234][ T2367] pvrusb2: Invalid write control endpoint [ 474.737976][ T8513] netlink: 148 bytes leftover after parsing attributes in process `syz.3.773'. [ 474.903354][ T5894] usb 1-1: USB disconnect, device number 14 [ 475.037285][ T2367] pvrusb2: Invalid write control endpoint [ 475.037297][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 475.037304][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 475.037323][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 475.037329][ T2367] pvrusb2: Device being rendered inoperable [ 475.037381][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 475.037420][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 475.149080][ T2367] pvrusb2: Attached sub-driver cx25840 [ 475.149101][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 475.149113][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 475.479191][ T8127] veth0_vlan: entered promiscuous mode [ 475.548062][ T8127] veth1_vlan: entered promiscuous mode [ 475.798094][ T8127] veth0_macvtap: entered promiscuous mode [ 475.828065][ T8127] veth1_macvtap: entered promiscuous mode [ 475.879996][ T8127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.893894][ T8127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.940122][ T8513] syz.3.773 (8513): drop_caches: 2 [ 475.944068][ T3614] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.944791][ T3614] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.973964][ T3614] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.986827][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.399888][ T2140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.399910][ T2140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.767617][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.767639][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.782364][ T8553] Bluetooth: MGMT ver 1.23 [ 483.247972][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 483.426925][ T8579] 9pnet_fd: Insufficient options for proto=fd [ 484.721483][ T8597] overlayfs: missing 'workdir' [ 496.867864][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 500.255303][ T5990] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 500.407132][ T5990] usb 5-1: Using ep0 maxpacket: 8 [ 500.408035][ T5990] usb 5-1: no configurations [ 500.408053][ T5990] usb 5-1: can't read configurations, error -22 [ 500.545951][ T5990] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 500.695156][ T5990] usb 5-1: Using ep0 maxpacket: 8 [ 500.696406][ T5990] usb 5-1: no configurations [ 500.696423][ T5990] usb 5-1: can't read configurations, error -22 [ 500.697141][ T5990] usb usb5-port1: attempt power cycle [ 501.165203][ T5990] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 501.186274][ T5990] usb 5-1: Using ep0 maxpacket: 8 [ 501.438968][ T5990] usb 5-1: no configurations [ 501.438989][ T5990] usb 5-1: can't read configurations, error -22 [ 501.592948][ T5990] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 501.662795][ T5990] usb 5-1: Using ep0 maxpacket: 8 [ 501.663650][ T5990] usb 5-1: no configurations [ 501.663666][ T5990] usb 5-1: can't read configurations, error -22 [ 501.664327][ T5990] usb usb5-port1: unable to enumerate USB device [ 502.508563][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.822'. [ 503.133218][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 503.163060][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 503.164748][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 503.181803][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 503.231460][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 505.022703][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 505.033897][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 505.055731][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 505.087111][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 505.104352][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 505.285197][ T5816] Bluetooth: hci5: command tx timeout [ 506.510112][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'. [ 506.649700][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.649752][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.590244][ T5823] Bluetooth: hci5: command tx timeout [ 510.590328][ T5816] Bluetooth: hci6: command tx timeout [ 512.655146][ T61] Bluetooth: hci5: command tx timeout [ 513.228819][ T61] Bluetooth: hci6: command tx timeout [ 514.013987][ T8743] chnl_net:caif_netlink_parms(): no params data found [ 514.224189][ T8793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.831'. [ 515.423172][ T61] Bluetooth: hci5: command tx timeout [ 515.423705][ T61] Bluetooth: hci6: command tx timeout [ 515.725321][ T5990] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 515.877852][ T5990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 515.877882][ T5990] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 515.877908][ T5990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 515.877930][ T5990] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 515.877967][ T5990] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 515.877990][ T5990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.956455][ T5990] usb 2-1: config 0 descriptor?? [ 516.192893][ T5990] hdpvr 2-1:0.0: unexpected answer of status request, len 42 [ 516.192928][ T5990] hdpvr 2-1:0.0: device init failed [ 516.193019][ T5990] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 516.965193][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.965332][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.965600][ T8743] bridge_slave_0: entered allmulticast mode [ 517.057735][ T8743] bridge_slave_0: entered promiscuous mode [ 517.179697][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.179838][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.180098][ T8743] bridge_slave_1: entered allmulticast mode [ 517.307668][ T8743] bridge_slave_1: entered promiscuous mode [ 517.445153][ T61] Bluetooth: hci6: command tx timeout [ 517.600777][ T8753] chnl_net:caif_netlink_parms(): no params data found [ 517.640015][ T8743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.645198][ T5990] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 517.703059][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.785162][ T5990] usb 4-1: device descriptor read/64, error -71 [ 518.045172][ T5990] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 518.135871][ T8743] team0: Port device team_slave_0 added [ 518.185273][ T5990] usb 4-1: device descriptor read/64, error -71 [ 518.194794][ T8743] team0: Port device team_slave_1 added [ 518.295920][ T5990] usb usb4-port1: attempt power cycle [ 518.621633][ T5887] usb 2-1: USB disconnect, device number 10 [ 518.646669][ T5990] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 518.666614][ T5990] usb 4-1: device descriptor read/8, error -71 [ 519.155242][ T5990] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 519.793288][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.793309][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.793337][ T8743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.794432][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.794584][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.795325][ T8753] bridge_slave_0: entered allmulticast mode [ 519.806049][ T8753] bridge_slave_0: entered promiscuous mode [ 519.820034][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.820052][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.820089][ T8743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.834998][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.838179][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.838449][ T8753] bridge_slave_1: entered allmulticast mode [ 520.009957][ T8753] bridge_slave_1: entered promiscuous mode [ 520.146423][ T5990] usb 4-1: device descriptor read/8, error -71 [ 520.265615][ T5990] usb usb4-port1: unable to enumerate USB device [ 520.700874][ T8753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.030736][ T8753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.338602][ T8845] binder: 8844:8845 ioctl c0306201 2000000016c0 returned -11 [ 521.578616][ T8743] hsr_slave_0: entered promiscuous mode [ 521.587327][ T8743] hsr_slave_1: entered promiscuous mode [ 521.601296][ T8743] debugfs: 'hsr0' already exists in 'hsr' [ 521.601327][ T8743] Cannot create hsr debugfs directory [ 521.889104][ T8753] team0: Port device team_slave_0 added [ 522.097673][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 522.171391][ T8753] team0: Port device team_slave_1 added [ 523.005201][ T5894] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 523.228639][ T5894] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 523.228670][ T5894] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 523.228690][ T5894] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 523.228709][ T5894] usb 4-1: config 220 has no interface number 2 [ 523.228799][ T5894] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 523.228827][ T5894] usb 4-1: config 220 interface 0 has no altsetting 0 [ 523.228846][ T5894] usb 4-1: config 220 interface 76 has no altsetting 0 [ 523.228865][ T5894] usb 4-1: config 220 interface 1 has no altsetting 0 [ 523.231988][ T5894] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 523.232017][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.232038][ T5894] usb 4-1: Product: syz [ 523.232053][ T5894] usb 4-1: Manufacturer: syz [ 523.232068][ T5894] usb 4-1: SerialNumber: syz [ 523.627210][ T5894] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 523.627237][ T5894] uvcvideo 4-1:220.0: No valid video chain found. [ 523.627284][ T5894] usb 4-1: selecting invalid altsetting 0 [ 523.936517][ T5894] usb 4-1: selecting invalid altsetting 0 [ 523.936575][ T5894] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 524.055178][ T5894] usb 4-1: USB disconnect, device number 12 [ 524.485833][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.845720][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.518896][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.479863][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.479881][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.479907][ T8753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.548754][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.548771][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.548798][ T8753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.725250][ T5990] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 526.855227][ T5990] usb 4-1: device descriptor read/64, error -71 [ 528.115282][ T5990] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 528.285472][ T5990] usb 4-1: device descriptor read/64, error -71 [ 528.368293][ T8753] hsr_slave_0: entered promiscuous mode [ 528.369798][ T8753] hsr_slave_1: entered promiscuous mode [ 528.370860][ T8753] debugfs: 'hsr0' already exists in 'hsr' [ 528.370886][ T8753] Cannot create hsr debugfs directory [ 528.405338][ T5990] usb usb4-port1: attempt power cycle [ 528.755787][ T5990] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 528.779634][ T5990] usb 4-1: device descriptor read/8, error -71 [ 529.025152][ T5990] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 529.047899][ T5990] usb 4-1: device descriptor read/8, error -71 [ 529.155729][ T5990] usb usb4-port1: unable to enumerate USB device [ 529.637524][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 529.637612][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 532.982564][ T8743] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 533.071707][ T8743] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 534.305432][ T8743] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 534.417420][ T8743] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 535.154097][ T8753] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 535.329780][ T8753] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 535.475364][ T8753] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 535.585222][ T8753] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 536.418427][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.679929][ T8743] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.768722][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.786189][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.471321][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.471475][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.844940][ T8753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.261903][ T8753] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.436810][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.443147][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.596637][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.596779][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.456448][ T8743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.743022][ T8753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.301875][ T8743] veth0_vlan: entered promiscuous mode [ 542.431803][ T8743] veth1_vlan: entered promiscuous mode [ 542.585399][ T8753] veth0_vlan: entered promiscuous mode [ 542.695747][ T8753] veth1_vlan: entered promiscuous mode [ 542.815875][ T8743] veth0_macvtap: entered promiscuous mode [ 542.904401][ T8743] veth1_macvtap: entered promiscuous mode [ 543.007643][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.097601][ T8743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.149927][ T8753] veth0_macvtap: entered promiscuous mode [ 543.206898][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.223938][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.241637][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.243318][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.378058][ T8753] veth1_macvtap: entered promiscuous mode [ 544.064222][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.180175][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.223985][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.345089][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.374869][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.440277][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.858959][ T61] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 544.997888][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.997909][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.771369][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.771389][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.774424][ T9012] syzkaller1: entered promiscuous mode [ 545.774441][ T9012] syzkaller1: entered allmulticast mode [ 547.671820][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.671843][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.994601][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.994622][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.381659][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 554.217419][ T61] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 557.405192][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 557.586994][ T31] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 557.587026][ T31] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 557.587046][ T31] usb 5-1: config 220 has no interface number 2 [ 557.587136][ T31] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 557.587179][ T31] usb 5-1: config 220 interface 0 has no altsetting 0 [ 557.587202][ T31] usb 5-1: config 220 interface 76 has no altsetting 0 [ 557.587220][ T31] usb 5-1: config 220 interface 1 has no altsetting 0 [ 557.590589][ T31] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 557.590620][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.590641][ T31] usb 5-1: Product: syz [ 557.590656][ T31] usb 5-1: Manufacturer: syz [ 557.590671][ T31] usb 5-1: SerialNumber: syz [ 557.867188][ T31] usb 5-1: selecting invalid altsetting 0 [ 557.867715][ T31] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 557.867745][ T31] uvcvideo 5-1:220.0: No valid video chain found. [ 557.965458][ T31] usb 5-1: selecting invalid altsetting 0 [ 557.965499][ T31] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 557.989815][ T31] usb 5-1: USB disconnect, device number 23 [ 558.225271][ T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 558.418546][ T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 558.418579][ T9] usb 2-1: config 1 has no interface number 0 [ 558.418706][ T9] usb 2-1: config 1 interface 105 has no altsetting 0 [ 558.432770][ T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 558.432806][ T9] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 558.432832][ T9] usb 2-1: Product: syz [ 558.432850][ T9] usb 2-1: Manufacturer: syz [ 558.432867][ T9] usb 2-1: SerialNumber: syz [ 559.355890][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 560.337042][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 560.532708][ T9] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 52:bf:a4:56:8d:af [ 560.578010][ T9] usb 2-1: USB disconnect, device number 11 [ 560.581640][ T9] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 561.015880][ T9] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 561.016028][ T9] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 561.016166][ T9] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 562.865241][ T8959] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 563.021609][ T8959] usb 2-1: Using ep0 maxpacket: 8 [ 563.064049][ T8959] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 563.064081][ T8959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.297941][ T8959] pvrusb2: Hardware description: Terratec Grabster AV400 [ 563.297955][ T8959] pvrusb2: ********** [ 563.297960][ T8959] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 563.297968][ T8959] pvrusb2: Important functionality might not be entirely working. [ 563.297973][ T8959] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 563.297981][ T8959] pvrusb2: ********** [ 563.735178][ T2367] pvrusb2: Invalid write control endpoint [ 563.951295][ T31] usb 2-1: USB disconnect, device number 12 [ 564.095568][ T2367] pvrusb2: Invalid write control endpoint [ 564.095585][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 564.095595][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 564.095604][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 564.095616][ T2367] pvrusb2: Device being rendered inoperable [ 564.095655][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 564.095711][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 564.116946][ T2367] pvrusb2: Attached sub-driver cx25840 [ 564.116973][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 564.116985][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 565.405247][ T8959] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 565.565268][ T8959] usb 4-1: Using ep0 maxpacket: 8 [ 565.568068][ T8959] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 565.568099][ T8959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.620257][ T8959] pvrusb2: Hardware description: Terratec Grabster AV400 [ 565.620277][ T8959] pvrusb2: ********** [ 565.620284][ T8959] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 565.620298][ T8959] pvrusb2: Important functionality might not be entirely working. [ 565.620308][ T8959] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 565.620321][ T8959] pvrusb2: ********** [ 565.814402][ T2367] pvrusb2: Invalid write control endpoint [ 566.019460][ T9138] pvrusb2: Invalid write control endpoint [ 566.024938][ T1798] usb 4-1: USB disconnect, device number 17 [ 566.126617][ T8959] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 566.158621][ T2367] pvrusb2: Invalid write control endpoint [ 566.158639][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 566.158650][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 566.158659][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 566.158671][ T2367] pvrusb2: Device being rendered inoperable [ 566.163377][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 566.163441][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 566.167541][ T2367] pvrusb2: Attached sub-driver cx25840 [ 566.167558][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 566.167570][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 566.324875][ T8959] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.324909][ T8959] usb 5-1: config 0 interface 0 has no altsetting 0 [ 566.324946][ T8959] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 566.324978][ T8959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.417138][ T8959] usb 5-1: config 0 descriptor?? [ 566.743303][ T8959] usbhid 5-1:0.0: can't add hid device: -71 [ 566.743460][ T8959] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 566.790794][ T8959] usb 5-1: USB disconnect, device number 24 [ 568.098481][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.098588][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.038830][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 569.195210][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 569.215239][ T31] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 569.215273][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.287259][ T31] pvrusb2: Hardware description: Terratec Grabster AV400 [ 569.287282][ T31] pvrusb2: ********** [ 569.287289][ T31] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 569.287303][ T31] pvrusb2: Important functionality might not be entirely working. [ 569.287314][ T31] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 569.287326][ T31] pvrusb2: ********** [ 569.501222][ T2367] pvrusb2: Invalid write control endpoint [ 569.780689][ T31] usb 7-1: USB disconnect, device number 2 [ 571.080191][ T2367] pvrusb2: Invalid write control endpoint [ 571.080218][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 571.080230][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 571.080239][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 571.080250][ T2367] pvrusb2: Device being rendered inoperable [ 571.120887][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 571.120972][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 571.139344][ T2367] pvrusb2: Attached sub-driver cx25840 [ 571.139360][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 571.139371][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 571.226949][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 571.405254][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 571.631354][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 571.631387][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.093066][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 572.093085][ T9] pvrusb2: ********** [ 572.093093][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 572.093107][ T9] pvrusb2: Important functionality might not be entirely working. [ 572.093116][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 572.093129][ T9] pvrusb2: ********** [ 572.365092][ T2367] pvrusb2: Invalid write control endpoint [ 572.646566][ T9192] pvrusb2: Invalid write control endpoint [ 572.651497][ T5894] usb 5-1: USB disconnect, device number 25 [ 573.115265][ T31] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 573.680060][ T31] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.680096][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 573.680132][ T31] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 573.680158][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.757477][ T31] usb 8-1: config 0 descriptor?? [ 574.014503][ T2367] pvrusb2: Invalid write control endpoint [ 574.014520][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 574.014530][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 574.014539][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 574.014551][ T2367] pvrusb2: Device being rendered inoperable [ 574.014582][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 574.014635][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 574.089257][ T31] usbhid 8-1:0.0: can't add hid device: -71 [ 574.089395][ T31] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 574.095531][ T2367] pvrusb2: Attached sub-driver cx25840 [ 574.095548][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 574.095561][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 574.261701][ T31] usb 8-1: USB disconnect, device number 2 [ 577.186398][ T9234] fuse: Bad value for 'group_id' [ 577.186422][ T9234] fuse: Bad value for 'group_id' [ 577.785228][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 577.948669][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 577.948702][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 577.948723][ T9] usb 5-1: config 220 has no interface number 2 [ 577.948805][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 577.948833][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 577.948852][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 577.948880][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 577.951952][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 577.951982][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.952004][ T9] usb 5-1: Product: syz [ 577.952019][ T9] usb 5-1: Manufacturer: syz [ 577.952034][ T9] usb 5-1: SerialNumber: syz [ 578.634105][ T9] usb 5-1: selecting invalid altsetting 0 [ 578.634650][ T9] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 578.634682][ T9] uvcvideo 5-1:220.0: No valid video chain found. [ 578.743480][ T9] usb 5-1: selecting invalid altsetting 0 [ 578.743520][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 578.838093][ T9] usb 5-1: USB disconnect, device number 26 [ 579.485395][ T5901] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 580.668095][ T5901] usb 7-1: Using ep0 maxpacket: 8 [ 580.689191][ T5901] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 580.689223][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.759392][ T5901] pvrusb2: Hardware description: Terratec Grabster AV400 [ 580.759412][ T5901] pvrusb2: ********** [ 580.759419][ T5901] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 580.759432][ T5901] pvrusb2: Important functionality might not be entirely working. [ 580.759441][ T5901] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 580.759454][ T5901] pvrusb2: ********** [ 581.002457][ T2367] pvrusb2: Invalid write control endpoint [ 581.458226][ T9249] pvrusb2: Invalid write control endpoint [ 581.463741][ T5887] usb 7-1: USB disconnect, device number 3 [ 582.474872][ T2367] pvrusb2: Invalid write control endpoint [ 582.474886][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 582.474893][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 582.474899][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 582.474906][ T2367] pvrusb2: Device being rendered inoperable [ 582.483812][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 582.483888][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 582.485519][ T2367] pvrusb2: Attached sub-driver cx25840 [ 582.485536][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 582.485549][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 584.915883][ T9285] fuse: Bad value for 'group_id' [ 584.915905][ T9285] fuse: Bad value for 'group_id' [ 588.495301][ T5990] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 588.675214][ T5990] usb 4-1: Using ep0 maxpacket: 8 [ 588.767708][ T5990] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 588.767742][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.157967][ T5990] pvrusb2: Hardware description: Terratec Grabster AV400 [ 589.157988][ T5990] pvrusb2: ********** [ 589.157996][ T5990] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 589.158009][ T5990] pvrusb2: Important functionality might not be entirely working. [ 589.158020][ T5990] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 589.158032][ T5990] pvrusb2: ********** [ 589.279727][ T2367] pvrusb2: Invalid write control endpoint [ 589.635310][ T9312] pvrusb2: Invalid write control endpoint [ 590.089812][ T1798] usb 4-1: USB disconnect, device number 18 [ 590.826126][ T2367] pvrusb2: Invalid write control endpoint [ 590.826146][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 590.826156][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 590.826166][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 590.826177][ T2367] pvrusb2: Device being rendered inoperable [ 590.826255][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 590.826314][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 590.827517][ T2367] pvrusb2: Attached sub-driver cx25840 [ 590.827530][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 590.827543][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 593.079395][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'. [ 593.266683][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'. [ 603.710574][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.996'. [ 604.478974][ T37] audit: type=1326 audit(1759814068.058:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9355 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa563eec9 code=0x7ffc0000 [ 604.479375][ T37] audit: type=1326 audit(1759814068.058:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9355 comm="syz.1.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa563eec9 code=0x7ffc0000 [ 606.363393][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 606.433418][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 606.450279][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 606.465528][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 606.471458][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 607.149620][ T8602] syz.0.798: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 607.150172][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.0.798 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 607.150198][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 607.150221][ T8602] Call Trace: [ 607.150231][ T8602] [ 607.150245][ T8602] dump_stack_lvl+0x189/0x250 [ 607.150289][ T8602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.150327][ T8602] ? __pfx__printk+0x10/0x10 [ 607.150355][ T8602] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 607.150388][ T8602] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 607.150423][ T8602] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 607.150459][ T8602] warn_alloc+0x22e/0x3b0 [ 607.150493][ T8602] ? __pfx_warn_alloc+0x10/0x10 [ 607.150525][ T8602] ? __get_vm_area_node+0x2bc/0x350 [ 607.150562][ T8602] ? relay_open_buf+0x215/0xe50 [ 607.150596][ T8602] __vmalloc_node_range_noprof+0x690/0x12d0 [ 607.150635][ T8602] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 607.150688][ T8602] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 607.150733][ T8602] ? rcu_is_watching+0x15/0xb0 [ 607.150765][ T8602] __kvmalloc_node_noprof+0x4a3/0x920 [ 607.150789][ T8602] ? relay_open_buf+0x215/0xe50 [ 607.150827][ T8602] ? __kmalloc_noprof+0x254/0x7d0 [ 607.150862][ T8602] ? relay_open_buf+0x215/0xe50 [ 607.150892][ T8602] ? relay_open_buf+0x17f/0xe50 [ 607.150930][ T8602] relay_open_buf+0x215/0xe50 [ 607.150980][ T8602] relay_open+0x427/0x920 [ 607.151019][ T8602] do_blk_trace_setup+0x561/0x980 [ 607.151055][ T8602] blk_trace_setup+0x116/0x1f0 [ 607.151085][ T8602] ? __pfx_blk_trace_setup+0x10/0x10 [ 607.151120][ T8602] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 607.151152][ T8602] blk_trace_ioctl+0x181/0x430 [ 607.151175][ T8602] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 607.151205][ T8602] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 607.151229][ T8602] ? smk_access+0x14c/0x4e0 [ 607.151270][ T8602] ? smk_tskacc+0x2fc/0x370 [ 607.151315][ T8602] ? __pfx_smack_file_ioctl+0x10/0x10 [ 607.151361][ T8602] blkdev_ioctl+0x420/0x6d0 [ 607.151389][ T8602] ? __pfx_blkdev_ioctl+0x10/0x10 [ 607.151410][ T8602] ? __fget_files+0x2a/0x420 [ 607.151436][ T8602] ? bpf_lsm_file_ioctl+0x9/0x20 [ 607.151463][ T8602] ? __pfx_blkdev_ioctl+0x10/0x10 [ 607.151487][ T8602] __se_sys_ioctl+0xfc/0x170 [ 607.151520][ T8602] do_syscall_64+0xfa/0x3b0 [ 607.151541][ T8602] ? lockdep_hardirqs_on+0x9c/0x150 [ 607.151575][ T8602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.151598][ T8602] ? clear_bhb_loop+0x60/0xb0 [ 607.151626][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.151647][ T8602] RIP: 0033:0x7f6df7adeec9 [ 607.151675][ T8602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.151695][ T8602] RSP: 002b:00007f6df5d46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.151718][ T8602] RAX: ffffffffffffffda RBX: 00007f6df7d35fa0 RCX: 00007f6df7adeec9 [ 607.151735][ T8602] RDX: 0000200000000100 RSI: 00000000c0481273 RDI: 0000000000000003 [ 607.151750][ T8602] RBP: 00007f6df7b61f91 R08: 0000000000000000 R09: 0000000000000000 [ 607.151764][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.151778][ T8602] R13: 00007f6df7d36038 R14: 00007f6df7d35fa0 R15: 00007ffdaa315798 [ 607.151819][ T8602] [ 607.151833][ T8602] Mem-Info: [ 607.151843][ T8602] active_anon:617 inactive_anon:9891 isolated_anon:0 [ 607.151843][ T8602] active_file:2067 inactive_file:3011 isolated_file:32 [ 607.151843][ T8602] unevictable:768 dirty:9 writeback:0 [ 607.151843][ T8602] slab_reclaimable:8502 slab_unreclaimable:112028 [ 607.151843][ T8602] mapped:47741 shmem:3926 pagetables:2602 [ 607.151843][ T8602] sec_pagetables:0 bounce:0 [ 607.151843][ T8602] kernel_misc_reclaimable:0 [ 607.151843][ T8602] free:738495 free_pcp:7768 free_cma:0 [ 607.151903][ T8602] Node 0 active_anon:2456kB inactive_anon:34060kB active_file:7008kB inactive_file:4720kB unevictable:1536kB isolated(anon):0kB isolated(file):128kB mapped:176668kB dirty:36kB writeback:0kB shmem:14048kB kernel_stack:13328kB pagetables:6868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 607.151953][ T8602] Node 1 active_anon:12kB inactive_anon:5504kB active_file:1260kB inactive_file:7324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:14296kB dirty:0kB writeback:0kB shmem:1656kB kernel_stack:588kB pagetables:3540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 607.152005][ T8602] Node 0 DMA free:10092kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:16kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:16kB free_cma:0kB [ 607.152070][ T8602] lowmem_reserve[]: 0 2516 2518 2518 2518 [ 607.152112][ T8602] Node 0 DMA32 free:20668kB boost:13560kB min:17504kB low:20052kB high:22600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2456kB inactive_anon:34044kB active_file:7008kB inactive_file:4720kB unevictable:1536kB writepending:36kB zspages:0kB present:3129332kB managed:2576580kB mlocked:0kB bounce:0kB free_pcp:376kB local_pcp:0kB free_cma:0kB [ 607.152180][ T8602] lowmem_reserve[]: 0 0 1 1 1 [ 607.152219][ T8602] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.152280][ T8602] lowmem_reserve[]: 0 0 0 0 0 [ 607.152318][ T8602] Node 1 Normal free:2923220kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:5504kB active_file:1260kB inactive_file:7324kB unevictable:1536kB writepending:0kB zspages:1844kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:30668kB local_pcp:11432kB free_cma:0kB [ 607.152386][ T8602] lowmem_reserve[]: 0 0 0 0 0 [ 607.152422][ T8602] Node 0 DMA: 1*4kB (M) 1*8kB (U) 0*16kB 3*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10092kB [ 607.152598][ T8602] Node 0 DMA32: 290*4kB (UM) 173*8kB (UME) 69*16kB (UME) 105*32kB (UME) 38*64kB (UME) 22*128kB (UME) 5*256kB (UM) 6*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 20704kB [ 607.152768][ T8602] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 607.152889][ T8602] Node 1 Normal: 5*4kB (ME) 5*8kB (ME) 4*16kB (ME) 7*32kB (UME) 11*64kB (ME) 43*128kB (UM) 19*256kB (UME) 11*512kB (ME) 12*1024kB (ME) 7*2048kB (UM) 703*4096kB (M) = 2923164kB [ 607.153076][ T8602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.153095][ T8602] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 607.153118][ T8602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.153136][ T8602] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 607.153154][ T8602] 9053 total pagecache pages [ 607.153166][ T8602] 3 pages in swap cache [ 607.153174][ T8602] Free swap = 121024kB [ 607.153183][ T8602] Total swap = 124996kB [ 607.153192][ T8602] 2097051 pages RAM [ 607.153201][ T8602] 0 pages HighMem/MovableOnly [ 607.153209][ T8602] 420816 pages reserved [ 607.153217][ T8602] 0 pages cma reserved [ 608.485314][ T5823] Bluetooth: hci4: command tx timeout [ 610.421189][ T9377] chnl_net:caif_netlink_parms(): no params data found [ 610.565253][ T5823] Bluetooth: hci4: command tx timeout [ 613.378477][ T5823] Bluetooth: hci4: command tx timeout [ 615.199088][ T9431] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1015'. [ 615.260642][ T37] audit: type=1326 audit(1759814078.838:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9428 comm="syz.7.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 615.260702][ T37] audit: type=1326 audit(1759814078.838:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9428 comm="syz.7.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 615.260750][ T37] audit: type=1326 audit(1759814078.838:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9428 comm="syz.7.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 615.260796][ T37] audit: type=1326 audit(1759814078.838:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9428 comm="syz.7.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 615.260840][ T37] audit: type=1326 audit(1759814078.838:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9428 comm="syz.7.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 615.260888][ T37] audit: type=1326 audit(1759814078.838:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9428 comm="syz.7.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 615.260937][ T37] audit: type=1326 audit(1759814078.838:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9428 comm="syz.7.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 615.260988][ T37] audit: type=1326 audit(1759814078.838:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9428 comm="syz.7.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 615.445205][ T5823] Bluetooth: hci4: command tx timeout [ 616.235526][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.235709][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.235993][ T9377] bridge_slave_0: entered allmulticast mode [ 616.238890][ T9377] bridge_slave_0: entered promiscuous mode [ 617.120337][ T9442] usb usb5: usbfs: process 9442 (syz.3.1017) did not claim interface 0 before use [ 617.212283][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.212414][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.212703][ T9377] bridge_slave_1: entered allmulticast mode [ 617.319261][ T9377] bridge_slave_1: entered promiscuous mode [ 619.459056][ T9377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.309347][ T9377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.782762][ T9377] team0: Port device team_slave_0 added [ 622.802418][ T9377] team0: Port device team_slave_1 added [ 622.874322][ T9481] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1030'. [ 622.978422][ T37] audit: type=1326 audit(1759814086.548:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9480 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb791eec9 code=0x7ffc0000 [ 623.008084][ T37] audit: type=1326 audit(1759814086.588:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9480 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fabb791eec9 code=0x7ffc0000 [ 623.008135][ T37] audit: type=1326 audit(1759814086.588:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9480 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb791eec9 code=0x7ffc0000 [ 623.008824][ T37] audit: type=1326 audit(1759814086.588:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9480 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fabb791eec9 code=0x7ffc0000 [ 623.008870][ T37] audit: type=1326 audit(1759814086.588:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9480 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb791eec9 code=0x7ffc0000 [ 623.009285][ T37] audit: type=1326 audit(1759814086.588:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9480 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb791eec9 code=0x7ffc0000 [ 624.151573][ T9377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.151594][ T9377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.151625][ T9377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.217686][ T9377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.217706][ T9377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.217737][ T9377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.509088][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 629.751121][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.751177][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.899006][ T9377] hsr_slave_0: entered promiscuous mode [ 629.900910][ T9377] hsr_slave_1: entered promiscuous mode [ 629.902037][ T9377] debugfs: 'hsr0' already exists in 'hsr' [ 629.902064][ T9377] Cannot create hsr debugfs directory [ 630.255165][ T5990] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 630.427722][ T5990] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 630.427744][ T5990] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 630.427759][ T5990] usb 2-1: config 220 has no interface number 2 [ 630.427813][ T5990] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 630.427833][ T5990] usb 2-1: config 220 interface 0 has no altsetting 0 [ 630.427846][ T5990] usb 2-1: config 220 interface 76 has no altsetting 0 [ 630.427868][ T5990] usb 2-1: config 220 interface 1 has no altsetting 0 [ 630.429824][ T5990] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 630.429844][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.429864][ T5990] usb 2-1: Product: syz [ 630.429875][ T5990] usb 2-1: Manufacturer: syz [ 630.429885][ T5990] usb 2-1: SerialNumber: syz [ 630.819260][ T5990] usb 2-1: selecting invalid altsetting 0 [ 630.841693][ T5990] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 630.841721][ T5990] uvcvideo 2-1:220.0: No valid video chain found. [ 630.915142][ T5990] usb 2-1: selecting invalid altsetting 0 [ 630.915182][ T5990] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 630.956318][ T5990] usb 2-1: USB disconnect, device number 13 [ 631.769168][ T5823] Bluetooth: hci6: command 0x0406 tx timeout [ 631.883863][ T9377] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 632.030822][ T9377] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 632.174211][ T9377] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 632.506899][ T9377] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 632.638504][ T9537] binder: 9536:9537 ioctl c0306201 0 returned -14 [ 632.644484][ T9537] binder: 9536:9537 ioctl c0306201 2000000016c0 returned -11 [ 633.299969][ T9377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.345245][ T5887] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 633.368708][ T9377] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.406657][ T9200] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.407978][ T9200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.448887][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.449105][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.509029][ T5887] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.509063][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 633.509098][ T5887] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 633.509123][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.561696][ T5887] usb 2-1: config 0 descriptor?? [ 633.826659][ T5887] usbhid 2-1:0.0: can't add hid device: -71 [ 633.826797][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 633.903472][ T5887] usb 2-1: USB disconnect, device number 14 [ 637.572742][ T9579] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1054'. [ 637.630087][ T37] audit: type=1326 audit(1759814101.208:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9569 comm="syz.7.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 637.630712][ T37] audit: type=1326 audit(1759814101.208:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9569 comm="syz.7.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 637.631121][ T37] audit: type=1326 audit(1759814101.208:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9569 comm="syz.7.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 637.631446][ T37] audit: type=1326 audit(1759814101.208:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9569 comm="syz.7.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 637.631918][ T37] audit: type=1326 audit(1759814101.208:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9569 comm="syz.7.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 637.632255][ T37] audit: type=1326 audit(1759814101.208:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9569 comm="syz.7.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 637.842628][ T37] audit: type=1326 audit(1759814101.208:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9569 comm="syz.7.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 637.842695][ T37] audit: type=1326 audit(1759814101.408:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9569 comm="syz.7.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 638.322665][ T9377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.864539][ T9597] warning: `syz.6.1060' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 639.252544][ T37] audit: type=1326 audit(1759814102.528:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9592 comm="syz.6.1060" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabb791eec9 code=0x0 [ 640.835132][ T31] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 640.998095][ T31] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.998119][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 640.998145][ T31] usb 7-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 640.998162][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.047843][ T31] usb 7-1: config 0 descriptor?? [ 641.463700][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 641.463838][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 641.487865][ T31] usb 7-1: USB disconnect, device number 4 [ 642.504048][ T9377] veth0_vlan: entered promiscuous mode [ 642.598020][ T9377] veth1_vlan: entered promiscuous mode [ 642.726589][ T37] audit: type=1326 audit(1759814106.308:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9628 comm="syz.7.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 642.765039][ T37] audit: type=1326 audit(1759814106.338:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9628 comm="syz.7.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 642.765100][ T37] audit: type=1326 audit(1759814106.338:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9628 comm="syz.7.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 642.765155][ T37] audit: type=1326 audit(1759814106.338:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9628 comm="syz.7.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 642.765202][ T37] audit: type=1326 audit(1759814106.338:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9628 comm="syz.7.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 642.801324][ T9377] veth0_macvtap: entered promiscuous mode [ 642.854292][ T9377] veth1_macvtap: entered promiscuous mode [ 642.881894][ T37] audit: type=1326 audit(1759814106.348:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9628 comm="syz.7.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 643.070780][ T9377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.163069][ T9377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.203260][ T3503] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.203569][ T3503] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.203796][ T3503] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.203860][ T3503] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.862747][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.862772][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.992657][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.992681][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.025433][ T5990] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 644.179825][ T5990] usb 7-1: too many endpoints for config 0 interface 0 altsetting 210: 207, using maximum allowed: 30 [ 644.179880][ T5990] usb 7-1: config 0 interface 0 altsetting 210 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 644.179910][ T5990] usb 7-1: config 0 interface 0 has no altsetting 0 [ 644.179945][ T5990] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 644.179968][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.197511][ T5990] usb 7-1: config 0 descriptor?? [ 644.212687][ T5990] hub 7-1:0.0: bad descriptor, ignoring hub [ 644.212734][ T5990] hub 7-1:0.0: probe with driver hub failed with error -5 [ 644.213965][ T5990] ums-realtek 7-1:0.0: USB Mass Storage device detected [ 644.476204][ T5990] usb 7-1: USB disconnect, device number 5 [ 644.616525][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1082'. [ 644.689091][ T37] audit: type=1326 audit(1759814108.268:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.7.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 644.689158][ T37] audit: type=1326 audit(1759814108.268:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.7.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 644.689207][ T37] audit: type=1326 audit(1759814108.268:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.7.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 644.689255][ T37] audit: type=1326 audit(1759814108.268:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.7.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c9ceec9 code=0x7ffc0000 [ 646.815186][ T5887] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 646.997277][ T5887] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.997307][ T5887] usb 7-1: config 0 interface 0 has no altsetting 0 [ 646.997332][ T5887] usb 7-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 646.997349][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.078220][ T5887] usb 7-1: config 0 descriptor?? [ 647.544397][ T5887] usbhid 7-1:0.0: can't add hid device: -71 [ 647.544588][ T5887] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 647.564279][ T5887] usb 7-1: USB disconnect, device number 6 [ 648.868889][ T38] INFO: task syz.5.802:8626 blocked for mor[ 648.868889][ T38] INFO: task syz.5.802:8626 blocked for more than 144 seconds. [ 648.868916][ T38] Not tainted syzkaller #0 [ 648.868926][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 648.868937][ T38] task:syz.5.802 state:D stack:26760 pid:8626 tgid:8624 ppid:8127 task_flags:0x400140 flags:0x00080003 [ 648.869006][ T38] Call Trace: [ 648.869013][ T38] [ 648.869027][ T38] __schedule+0x16f3/0x4c20 [ 648.869092][ T38] ? __pfx___schedule+0x10/0x10 [ 648.869148][ T38] rt_mutex_schedule+0x77/0xf0 [ 648.869178][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 648.869229][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 648.869261][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 648.869292][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 648.869322][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 648.869376][ T38] ? relay_open+0x3b8/0x920 [ 648.869403][ T38] mutex_lock_nested+0x16a/0x1d0 [ 648.869434][ T38] relay_open+0x3b8/0x920 [ 648.869471][ T38] do_blk_trace_setup+0x561/0x980 [ 648.869505][ T38] blk_trace_setup+0x116/0x1f0 [ 648.869534][ T38] ? __pfx_blk_trace_setup+0x10/0x10 [ 648.869568][ T38] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 648.869599][ T38] blk_trace_ioctl+0x181/0x430 [ 648.869621][ T38] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 648.869651][ T38] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 648.869674][ T38] ? smk_access+0x14c/0x4e0 [ 648.869719][ T38] ? smk_tskacc+0x2fc/0x370 [ 648.869763][ T38] ? __pfx_smack_file_ioctl+0x10/0x10 [ 648.869805][ T38] blkdev_ioctl+0x420/0x6d0 [ 648.869834][ T38] ? __pfx_blkdev_ioctl+0x10/0x10 [ 648.869854][ T38] ? __fget_files+0x2a/0x420 [ 648.869881][ T38] ? bpf_lsm_file_ioctl+0x9/0x20 [ 648.869906][ T38] ? __pfx_blkdev_ioctl+0x10/0x10 [ 648.869929][ T38] __se_sys_ioctl+0xfc/0x170 [ 648.869961][ T38] do_syscall_64+0xfa/0x3b0 [ 648.869982][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.870017][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.870041][ T38] ? clear_bhb_loop+0x60/0xb0 [ 648.870069][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.870092][ T38] RIP: 0033:0x7f1c1dadeec9 [ 648.870111][ T38] RSP: 002b:00007f1c1bd25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.870134][ T38] RAX: ffffffffffffffda RBX: 00007f1c1dd36090 RCX: 00007f1c1dadeec9 [ 648.870151][ T38] RDX: 00002000000004c0 RSI: 00000000c0481273 RDI: 0000000000000005 [ 648.870166][ T38] RBP: 00007f1c1db61f91 R08: 0000000000000000 R09: 0000000000000000 [ 648.870180][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.870194][ T38] R13: 00007f1c1dd36128 R14: 00007f1c1dd36090 R15: 00007ffe8a4c6e68 [ 648.870236][ T38] [ 648.870245][ T38] INFO: task syz.5.802:8627 blocked for more than 144 seconds. [ 648.870260][ T38] Not tainted syzkaller #0 [ 648.870271][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 648.870282][ T38] task:syz.5.802 state:D stack:27624 pid:8627 tgid:8624 ppid:8127 task_flags:0x400040 flags:0x00080002 [ 648.870349][ T38] Call Trace: [ 648.870357][ T38] [ 648.870370][ T38] __schedule+0x16f3/0x4c20 [ 648.870430][ T38] ? __pfx___schedule+0x10/0x10 [ 648.870489][ T38] rt_mutex_schedule+0x77/0xf0 [ 648.870518][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 648.870562][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 648.870595][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 648.870626][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 648.870656][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 648.870684][ T38] ? __lock_acquire+0xab9/0xd20 [ 648.870718][ T38] ? blk_trace_ioctl+0x1b9/0x430 [ 648.870745][ T38] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 648.870770][ T38] ? kasan_save_track+0x4f/0x80 [ 648.870802][ T38] ? kasan_save_track+0x3e/0x80 [ 648.870839][ T38] ? blk_trace_ioctl+0x1b9/0x430 [ 648.870861][ T38] mutex_lock_nested+0x16a/0x1d0 [ 648.870895][ T38] blk_trace_ioctl+0x1b9/0x430 [ 648.870922][ T38] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 648.870974][ T38] ? kasan_quarantine_put+0xdd/0x220 [ 648.871016][ T38] blkdev_common_ioctl+0xdf4/0x2560 [ 648.871042][ T38] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 648.871070][ T38] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 648.871096][ T38] ? do_vfs_ioctl+0xbeb/0x1440 [ 648.871130][ T38] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 648.871174][ T38] ? __lock_acquire+0xab9/0xd20 [ 648.871201][ T38] ? __asan_memset+0x22/0x50 [ 648.871238][ T38] ? smack_file_ioctl+0x24d/0x340 [ 648.871278][ T38] ? __pfx_smack_file_ioctl+0x10/0x10 [ 648.871322][ T38] blkdev_ioctl+0x4f9/0x6d0 [ 648.871349][ T38] ? __pfx_blkdev_ioctl+0x10/0x10 [ 648.871371][ T38] ? __fget_files+0x2a/0x420 [ 648.871396][ T38] ? bpf_lsm_file_ioctl+0x9/0x20 [ 648.871422][ T38] ? __pfx_blkdev_ioctl+0x10/0x10 [ 648.871445][ T38] __se_sys_ioctl+0xfc/0x170 [ 648.871478][ T38] do_syscall_64+0xfa/0x3b0 [ 648.871498][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.871533][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.871555][ T38] ? clear_bhb_loop+0x60/0xb0 [ 648.871584][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.871606][ T38] RIP: 0033:0x7f1c1dadeec9 [ 648.871624][ T38] RSP: 002b:00007f1c1bd04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.872862][ T38] RAX: ffffffffffffffda RBX: 00007f1c1dd36180 RCX: 00007f1c1dadeec9 [ 648.872885][ T38] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000005 [ 648.872900][ T38] RBP: 00007f1c1db61f91 R08: 0000000000000000 R09: 0000000000000000 [ 648.872914][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.872927][ T38] R13: 00007f1c1dd36218 R14: 00007f1c1dd36180 R15: 00007ffe8a4c6e68 [ 648.872963][ T38] [ 648.873011][ T38] [ 648.873011][ T38] Showing all locks held in the system: [ 648.873022][ T38] 3 locks held by kworker/u8:0/12: [ 648.873036][ T38] 3 locks held by kworker/u8:1/13: [ 648.873048][ T38] #0: ffff88813ff29938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 648.873123][ T38] #1: ffffc90000127bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 648.873187][ T38] #2: ffffffff8e668638 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 648.873249][ T38] 10 locks held by ktimers/1/29: [ 648.873262][ T38] 1 lock held by khungtaskd/38: [ 648.873275][ T38] #0: ffffffff8d3aa400 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 648.873328][ T38] 4 locks held by kworker/u8:2/43: [ 648.873340][ T38] #0: ffff88814d3a8138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 648.873403][ T38] #1: ffffc90000b47bc0 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 648.873468][ T38] #2: ffff8880381d1110 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xea/0xf00 [ 648.873520][ T38] #3: ffff8880b8945aa8 (&s->lock_key#58){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x1470 [ 648.873583][ T38] 3 locks held by kworker/u8:3/50: [ 648.873595][ T38] #0: ffff88802fb0e938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 648.873659][ T38] #1: ffffc90000bc7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 648.873724][ T38] #2: ffffffff8e668638 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 648.873787][ T38] 7 locks held by kworker/u8:5/155: [ 648.873800][ T38] #0: ffff888019a94938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 648.873862][ T38] #1: ffffc90003ad7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 648.873926][ T38] #2: ffffffff8e65b720 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 648.873990][ T38] #3: ffff88805d4660d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 648.874048][ T38] #4: ffff88805d467300 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 648.874107][ T38] #5: ffffffff8e668638 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xe5/0x670 [ 648.874162][ T38] #6: ffff888022f28e90 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xdf5/0x1fe0 [ 648.874249][ T38] 3 locks held by kworker/u8:11/3503: [ 648.874261][ T38] 6 locks held by kworker/u8:12/3614: [ 648.874273][ T38] 1 lock held by udevd/5185: [ 648.874284][ T38] #0: ffff8880b8945aa8 (&s->lock_key#58){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x1470 [ 648.874342][ T38] 2 locks held by getty/5575: [ 648.874353][ T38] #0: ffff88823bf680a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 648.874401][ T38] #1: ffffc9000421b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 648.874461][ T38] 3 locks held by kworker/0:4/5887: [ 648.874473][ T38] #0: ffff8880216d9538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 648.874537][ T38] #1: ffffc90004fdfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 648.874600][ T38] #2: ffff888145bb5188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 648.874663][ T38] 2 locks held by kworker/0:7/5990: [ 648.875265][ T38] #0: ffff88813ff19138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 648.875338][ T38] #1: ffffc9000520fbc0 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 648.875405][ T38] 2 locks held by syz.0.798/8602: [ 648.875417][ T38] 2 locks held by syz.5.802/8626: [ 648.875428][ T38] #0: ffff8880245f09f8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfb/0x1f0 [ 648.875479][ T38] #1: ffffffff8d3ff678 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 [ 648.875534][ T38] 1 lock held by syz.5.802/8627: [ 648.875547][ T38] #0: ffff8880245f09f8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x1b9/0x430 [ 648.877316][ T38] 6 locks held by kworker/u8:14/9200: [ 648.877335][ T38] 2 locks held by syz.7.1082/9655: [ 648.877350][ T38] 1 lock held by syz.8.1084/9666: [ 648.877364][ T38] 1 lock held by syz.1.1088/9679: [ 648.877380][ T38] [ 648.877387][ T38] ============================================= [ 648.877387][ T38] [ 648.877398][ T38] NMI backtrace for cpu 0 [ 648.877416][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 648.877444][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 648.877460][ T38] Call Trace: [ 648.877469][ T38] [ 648.877480][ T38] dump_stack_lvl+0x189/0x250 [ 648.877523][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.877562][ T38] ? __pfx__printk+0x10/0x10 [ 648.877606][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 648.877643][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 648.877680][ T38] ? __pfx__printk+0x10/0x10 [ 648.877714][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 648.877753][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 648.877790][ T38] watchdog+0xf60/0xfa0 [ 648.877821][ T38] ? watchdog+0x1e2/0xfa0 [ 648.877852][ T38] kthread+0x711/0x8a0 [ 648.877885][ T38] ? __pfx_watchdog+0x10/0x10 [ 648.877908][ T38] ? __pfx_kthread+0x10/0x10 [ 648.877932][ T38] ? rt_spin_unlock+0x150/0x200 [ 648.877968][ T38] ? rt_spin_unlock+0x161/0x200 [ 648.877996][ T38] ? __pfx_kthread+0x10/0x10 [ 648.878025][ T38] ret_from_fork+0x439/0x7d0 [ 648.878067][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 648.878111][ T38] ? __switch_to_asm+0x39/0x70 [ 648.878133][ T38] ? __switch_to_asm+0x33/0x70 [ 648.878156][ T38] ? __pfx_kthread+0x10/0x10 [ 648.878185][ T38] ret_from_fork_asm+0x1a/0x30 [ 648.878236][ T38] [ 648.878246][ T38] Sending NMI from CPU 0 to CPUs 1: [ 648.878288][ C1] NMI backtrace for cpu 1 [ 648.878303][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 648.878325][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 648.878336][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 648.878361][ C1] Code: e8 4e 73 bd fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 16 1f fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a 26 ba 05 cc 44 89 f9 80 e1 07 [ 648.878378][ C1] RSP: 0018:ffffc90000167890 EFLAGS: 00000202 [ 648.878395][ C1] RAX: 1ffffffff318d100 RBX: 00000000000003fd RCX: 0000000000000000 [ 648.878408][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 648.878419][ C1] RBP: ffffffff98c69070 R08: 0000000000000000 R09: 0000000000000000 [ 648.878431][ C1] R10: dffffc0000000000 R11: ffffffff850034d0 R12: dffffc0000000000 [ 648.878446][ C1] R13: 0000000000000000 R14: ffffffff98c68de0 R15: 0000000000000000 [ 648.878458][ C1] FS: 0000000000000000(0000) GS:ffff88812711c000(0000) knlGS:0000000000000000 [ 648.878473][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.878486][ C1] CR2: 0000555587ba55c8 CR3: 000000002307e000 CR4: 00000000003526f0 [ 648.878503][ C1] Call Trace: [ 648.878510][ C1] [ 648.878518][ C1] wait_for_lsr+0x1a7/0x2f0 [ 648.878548][ C1] serial8250_console_write+0x11bd/0x1b40 [ 648.878579][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 648.878601][ C1] ? console_flush_all+0x13a/0xb40 [ 648.878631][ C1] ? console_flush_all+0x476/0xb40 [ 648.878660][ C1] console_flush_all+0x663/0xb40 [ 648.878687][ C1] ? console_flush_all+0x13a/0xb40 [ 648.878716][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 648.878751][ C1] __console_flush_and_unlock+0x9b/0x160 [ 648.878778][ C1] ? legacy_kthread_func+0x136/0x1a0 [ 648.878807][ C1] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 648.878833][ C1] ? schedule+0x91/0x360 [ 648.878864][ C1] legacy_kthread_func+0x13b/0x1a0 [ 648.878893][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 648.878923][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 648.878954][ C1] ? __kthread_parkme+0x7b/0x200 [ 648.878977][ C1] ? __kthread_parkme+0x1a1/0x200 [ 648.878997][ C1] kthread+0x711/0x8a0 [ 648.879019][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 648.879048][ C1] ? __pfx_kthread+0x10/0x10 [ 648.879067][ C1] ? rt_spin_unlock+0x150/0x200 [ 648.879092][ C1] ? rt_spin_unlock+0x161/0x200 [ 648.879114][ C1] ? __pfx_kthread+0x10/0x10 [ 648.879135][ C1] ret_from_fork+0x439/0x7d0 [ 648.879163][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 648.879194][ C1] ? __switch_to_asm+0x39/0x70 [ 648.879212][ C1] ? __switch_to_asm+0x33/0x70 [ 648.879229][ C1] ? __pfx_kthread+0x10/0x10 [ 648.879250][ C1] ret_from_fork_asm+0x1a/0x30 [ 648.879277][ C1] [ 648.880290][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 648.880309][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 648.880336][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 648.880351][ T38] Call Trace: [ 648.880361][ T38] [ 648.880370][ T38] dump_stack_lvl+0x99/0x250 [ 648.880408][ T38] ? __asan_memcpy+0x40/0x70 [ 648.880443][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.880481][ T38] ? __pfx__printk+0x10/0x10 [ 648.880525][ T38] vpanic+0x237/0x6d0 [ 648.880546][ T38] ? __pfx_vpanic+0x10/0x10 [ 648.880582][ T38] panic+0xb9/0xc0 [ 648.880603][ T38] ? __pfx_panic+0x10/0x10 [ 648.880629][ T38] ? irq_work_queue+0xc3/0x140 [ 648.880657][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 648.880694][ T38] watchdog+0xf9f/0xfa0 [ 648.880725][ T38] ? watchdog+0x1e2/0xfa0 [ 648.880757][ T38] kthread+0x711/0x8a0 [ 648.880790][ T38] ? __pfx_watchdog+0x10/0x10 [ 648.880814][ T38] ? __pfx_kthread+0x10/0x10 [ 648.880841][ T38] ? rt_spin_unlock+0x150/0x200 [ 648.880877][ T38] ? rt_spin_unlock+0x161/0x200 [ 648.880906][ T38] ? __pfx_kthread+0x10/0x10 [ 648.880936][ T38] ret_from_fork+0x439/0x7d0 [ 648.880975][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 648.881019][ T38] ? __switch_to_asm+0x39/0x70 [ 648.881041][ T38] ? __switch_to_asm+0x33/0x70 [ 648.881063][ T38] ? __pfx_kthread+0x10/0x10 [ 648.881093][ T38] ret_from_fork_asm+0x1a/0x30 [ 648.881137][ T38] [ 648.881463][ T38] Kernel Offset: disabled