last executing test programs: 2m18.76531679s ago: executing program 1 (id=2): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket(0x400000000010, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x40}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_open_procfs(0x0, 0x0) 2m18.345279034s ago: executing program 1 (id=7): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m18.012888522s ago: executing program 1 (id=8): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) close(r0) 2m17.794952165s ago: executing program 1 (id=10): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 2m16.516738994s ago: executing program 1 (id=14): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) 2m15.864611952s ago: executing program 1 (id=17): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0) io_setup(0xc, &(0x7f0000000140)=0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="01", 0x400000}]) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, 0x0}) ioctl$BLKZEROOUT(r3, 0xc0c0128e, &(0x7f0000000240)={0x2000, 0x1000000}) io_getevents(r2, 0x8, 0x0, 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)='\x00\x00\x00a\x00', 0x5, 0x34}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0xfe, 0x0, 0x1}]) syz_clone3(&(0x7f0000000680)={0x1000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m15.016255506s ago: executing program 32 (id=17): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x20040, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0) io_setup(0xc, &(0x7f0000000140)=0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="01", 0x400000}]) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, 0x0}) ioctl$BLKZEROOUT(r3, 0xc0c0128e, &(0x7f0000000240)={0x2000, 0x1000000}) io_getevents(r2, 0x8, 0x0, 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)='\x00\x00\x00a\x00', 0x5, 0x34}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0xfe, 0x0, 0x1}]) syz_clone3(&(0x7f0000000680)={0x1000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11.507782211s ago: executing program 5 (id=472): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x800) 10.95734424s ago: executing program 4 (id=477): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x82, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) 8.657668695s ago: executing program 5 (id=487): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x4008032, 0xffffffffffffffff, 0xd0d9c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) 8.307600662s ago: executing program 3 (id=489): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 8.303797114s ago: executing program 2 (id=490): socket$alg(0x26, 0x5, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x57a, 0x1000, 0x40002, 0x2a7}, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000002f000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f000005f000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000144000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffee3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 7.838460798s ago: executing program 4 (id=492): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x5421, &(0x7f0000001600)=""/183) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000040)={0x3, 0x0, [0x6, 0x9, 0xc, 0xb, 0xd34e, 0x5, 0x57f4, 0x6]}) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014}}) r4 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752}}) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000500)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x2c, r2, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x1}, {0x4, 0x4}]}]}]}]}, 0x2c}}, 0x44) 7.555845837s ago: executing program 3 (id=494): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 6.909576779s ago: executing program 2 (id=496): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x2000000, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) 6.87586557s ago: executing program 4 (id=497): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) shutdown(r0, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) 6.126580572s ago: executing program 0 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz2/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=r0, 0x12) close(r1) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x49}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='4096', 0x4) 5.669599862s ago: executing program 5 (id=499): socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, 0x0, 0x40002160) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5.447086743s ago: executing program 4 (id=500): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000040)=0x2008009, 0x4) 5.364590366s ago: executing program 0 (id=501): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) 4.957051054s ago: executing program 4 (id=502): syz_usb_connect$uac2(0x5, 0xbd, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1054, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x15, 0xb2}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x400, 0xa, 0x25, 0x0, 0x7f, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x8, 0x1, 0x1, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "80bb00"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x8, 0x1, 0x1, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x10, 0x1, "80bb00"}]}, {{0x9, 0x5, 0x81, 0x5, 0x400, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x1, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x2, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x3, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x4, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x5, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x6, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x7, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x8, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0x9, 0x100, [0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000400)={0xa, 0x100, [0x0]}) 4.944779736s ago: executing program 3 (id=503): socket$nl_audit(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f027, 0x2}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f00000002c0)={0x40, 0x13, 0x3, "1504ae"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001100)={'gre0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000480)="cd", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 4.36834781s ago: executing program 5 (id=504): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0}) 3.216245311s ago: executing program 2 (id=505): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003}, 0x38) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000800014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.93285094s ago: executing program 2 (id=506): timer_create(0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5ffdffa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080)=0x3, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.786707566s ago: executing program 3 (id=507): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) shmctl$IPC_INFO(0x0, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.666946535s ago: executing program 2 (id=508): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) read(r2, &(0x7f0000000140)=""/192, 0xc0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfd}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) 2.479404667s ago: executing program 0 (id=509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) close(r1) 2.179455712s ago: executing program 4 (id=510): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) 2.071636961s ago: executing program 0 (id=511): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d22000000000000010902240001000000000904000001030000000921000000"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r3}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000480)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 1.408166033s ago: executing program 3 (id=512): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) 964.474206ms ago: executing program 2 (id=513): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040aa5503a100000000000109022000010100803209040000020806500007050102000200070582020002"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x51, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x23, 0xd0, 0x81, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x9, 0x24, 0x6, 0x0, 0x0, "788876fc"}, {0x5, 0x24, 0x0, 0x27a7}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x3, 0x4, 0x20}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7f, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x45, 0xf7, 0x18}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x57, 0x7, 0x0, 0xff}, 0x0, 0x0}) ptrace$cont(0x18, r1, 0x0, 0xbfb5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001300), 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50) r2 = syz_open_dev$sg(0x0, 0x6f5e, 0x40) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) ptrace$setregs(0x4212, r1, 0x58, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 604.974079ms ago: executing program 0 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x5, 0xff}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) 481.950179ms ago: executing program 5 (id=515): socket$inet6(0xa, 0x3, 0x84) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x39a}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 395.872298ms ago: executing program 0 (id=516): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 232.763318ms ago: executing program 3 (id=517): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000140)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 0s ago: executing program 5 (id=518): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xee}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): length: 249 > 9 [ 81.552271][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.557324][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.572124][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.577396][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.599078][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.599190][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.610586][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.619516][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.632678][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.639233][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.659219][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.660940][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.670226][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.679820][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.687149][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.698721][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.964464][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.972251][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.982664][ T5631] bridge_slave_0: entered allmulticast mode [ 82.992406][ T5631] bridge_slave_0: entered promiscuous mode [ 83.042142][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.052202][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.061846][ T5631] bridge_slave_1: entered allmulticast mode [ 83.071007][ T5631] bridge_slave_1: entered promiscuous mode [ 83.097952][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.107971][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.117847][ T5630] bridge_slave_0: entered allmulticast mode [ 83.126117][ T5630] bridge_slave_0: entered promiscuous mode [ 83.134859][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.143751][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.153961][ T5633] bridge_slave_0: entered allmulticast mode [ 83.163825][ T5633] bridge_slave_0: entered promiscuous mode [ 83.207342][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.215264][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.226284][ T5630] bridge_slave_1: entered allmulticast mode [ 83.235595][ T5630] bridge_slave_1: entered promiscuous mode [ 83.250993][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.262627][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.272247][ T5633] bridge_slave_1: entered allmulticast mode [ 83.283524][ T5633] bridge_slave_1: entered promiscuous mode [ 83.364039][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.394400][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.407407][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.419377][ T5635] bridge_slave_0: entered allmulticast mode [ 83.428860][ T5635] bridge_slave_0: entered promiscuous mode [ 83.467469][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.498042][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.506339][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.516635][ T5635] bridge_slave_1: entered allmulticast mode [ 83.524683][ T5635] bridge_slave_1: entered promiscuous mode [ 83.536640][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.550560][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.600762][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.613997][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.640496][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.649567][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.658443][ T5634] bridge_slave_0: entered allmulticast mode [ 83.668753][ T5634] bridge_slave_0: entered promiscuous mode [ 83.711814][ T5631] team0: Port device team_slave_0 added [ 83.718437][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.727058][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.734902][ T5634] bridge_slave_1: entered allmulticast mode [ 83.743347][ T5634] bridge_slave_1: entered promiscuous mode [ 83.752476][ T5619] Bluetooth: hci3: command tx timeout [ 83.752743][ T5615] Bluetooth: hci1: command tx timeout [ 83.766975][ T5619] Bluetooth: hci4: command tx timeout [ 83.768239][ T5615] Bluetooth: hci0: command tx timeout [ 83.773830][ T50] Bluetooth: hci2: command tx timeout [ 83.794220][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.837434][ T5631] team0: Port device team_slave_1 added [ 83.874510][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.889031][ T5630] team0: Port device team_slave_0 added [ 83.898490][ T5633] team0: Port device team_slave_0 added [ 83.920804][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.946744][ T5630] team0: Port device team_slave_1 added [ 83.956510][ T5633] team0: Port device team_slave_1 added [ 83.967002][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.975606][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.004362][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.024591][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.072206][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.080128][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.111767][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.138094][ T5635] team0: Port device team_slave_0 added [ 84.188467][ T5635] team0: Port device team_slave_1 added [ 84.195694][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.203816][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.231778][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.245874][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.254536][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.285307][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.299483][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.307228][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.335114][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.349346][ T5634] team0: Port device team_slave_0 added [ 84.367454][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.375399][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.408407][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.437256][ T5634] team0: Port device team_slave_1 added [ 84.489521][ T5631] hsr_slave_0: entered promiscuous mode [ 84.497043][ T5631] hsr_slave_1: entered promiscuous mode [ 84.518632][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.528120][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.563804][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.617781][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.627358][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.664428][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.717244][ T5630] hsr_slave_0: entered promiscuous mode [ 84.724849][ T5630] hsr_slave_1: entered promiscuous mode [ 84.732479][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 84.739893][ T5630] Cannot create hsr debugfs directory [ 84.747686][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.756568][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.787645][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.802557][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.810403][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.842456][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.904052][ T5633] hsr_slave_0: entered promiscuous mode [ 84.912830][ T5633] hsr_slave_1: entered promiscuous mode [ 84.920462][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 84.927274][ T5633] Cannot create hsr debugfs directory [ 85.067176][ T5635] hsr_slave_0: entered promiscuous mode [ 85.078747][ T5635] hsr_slave_1: entered promiscuous mode [ 85.089635][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 85.096903][ T5635] Cannot create hsr debugfs directory [ 85.151636][ T5634] hsr_slave_0: entered promiscuous mode [ 85.158334][ T5634] hsr_slave_1: entered promiscuous mode [ 85.166534][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 85.173499][ T5634] Cannot create hsr debugfs directory [ 85.741912][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.762329][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.775542][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.790187][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.802857][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.814423][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.831100][ T5619] Bluetooth: hci4: command tx timeout [ 85.837692][ T50] Bluetooth: hci2: command tx timeout [ 85.843785][ T5622] Bluetooth: hci3: command tx timeout [ 85.843810][ T5615] Bluetooth: hci1: command tx timeout [ 85.851328][ T5619] Bluetooth: hci0: command tx timeout [ 85.870490][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.881570][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.939803][ T5633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.955517][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.965453][ T5633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.978411][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.995521][ T5633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.009448][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.043708][ T5633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.056053][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.146361][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.157871][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.183954][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.195119][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.204747][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.215261][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.225532][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.239510][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.392673][ T5635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.406429][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.418146][ T5635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.434712][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.444549][ T5635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.456517][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.465286][ T5635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.477554][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.607209][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.642766][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.657962][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.675271][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.694315][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.719824][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.738461][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.755659][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.770046][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.840085][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.905841][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.915376][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.938018][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.979145][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.988126][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.084175][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.116645][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.201638][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.211756][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.281210][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.290002][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.313826][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.398616][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.407929][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.483416][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.512636][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.524280][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.637963][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.713789][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.745725][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.756985][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.787185][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.816217][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.825147][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.850762][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.858812][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.889667][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.899926][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.911675][ T5622] Bluetooth: hci3: command tx timeout [ 87.913211][ T50] Bluetooth: hci4: command tx timeout [ 87.919036][ T5619] Bluetooth: hci0: command tx timeout [ 87.934842][ T50] Bluetooth: hci2: command tx timeout [ 87.935213][ T5622] Bluetooth: hci1: command tx timeout [ 87.948811][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.989410][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.055801][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.269004][ T5631] veth0_vlan: entered promiscuous mode [ 88.359496][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.374990][ T5633] veth0_vlan: entered promiscuous mode [ 88.390971][ T5631] veth1_vlan: entered promiscuous mode [ 88.401934][ T5630] veth0_vlan: entered promiscuous mode [ 88.417902][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.481339][ T5633] veth1_vlan: entered promiscuous mode [ 88.495446][ T5630] veth1_vlan: entered promiscuous mode [ 88.621405][ T5631] veth0_macvtap: entered promiscuous mode [ 88.650287][ T5635] veth0_vlan: entered promiscuous mode [ 88.659010][ T5631] veth1_macvtap: entered promiscuous mode [ 88.711314][ T5634] veth0_vlan: entered promiscuous mode [ 88.738154][ T5630] veth0_macvtap: entered promiscuous mode [ 88.765945][ T5633] veth0_macvtap: entered promiscuous mode [ 88.780093][ T5635] veth1_vlan: entered promiscuous mode [ 88.793157][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.804636][ T5630] veth1_macvtap: entered promiscuous mode [ 88.824099][ T5634] veth1_vlan: entered promiscuous mode [ 88.835681][ T5633] veth1_macvtap: entered promiscuous mode [ 88.862078][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.925633][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.984232][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.997429][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.009290][ T1152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.048547][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.061271][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.095774][ T5635] veth0_macvtap: entered promiscuous mode [ 89.125499][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.146022][ T5634] veth0_macvtap: entered promiscuous mode [ 89.184465][ T5634] veth1_macvtap: entered promiscuous mode [ 89.201567][ T5635] veth1_macvtap: entered promiscuous mode [ 89.252106][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.265292][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.357027][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.414855][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.442724][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.460102][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.472934][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.513271][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.533173][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.561711][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.572281][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.607613][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.632271][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.642031][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.735206][ T77] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.752499][ T1028] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.785556][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.795934][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.799563][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.921286][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.933102][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.990151][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.992869][ T5622] Bluetooth: hci1: command tx timeout [ 90.009793][ T5619] Bluetooth: hci0: command tx timeout [ 90.009833][ T5615] Bluetooth: hci3: command tx timeout [ 90.017067][ T5619] Bluetooth: hci2: command tx timeout [ 90.017104][ T5619] Bluetooth: hci4: command tx timeout [ 90.019098][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.048019][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.063363][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.094075][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.193260][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.273298][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.305414][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.363625][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.421023][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.491784][ T5709] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.579243][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.597044][ T389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.620340][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.633523][ T389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.671092][ T5709] usb 3-1: Using ep0 maxpacket: 16 [ 90.691588][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.714438][ T5709] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 90.736556][ T5709] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 90.797637][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 90.829397][ T389] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.841699][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.867218][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.887854][ T5709] usb 3-1: Product: syz [ 90.894337][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.901990][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.923601][ T5709] usb 3-1: Manufacturer: syz [ 90.969488][ T5709] usb 3-1: SerialNumber: syz [ 91.068395][ T5709] usb 3-1: config 0 descriptor?? [ 91.173702][ T5709] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 91.184400][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.206959][ T5709] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 91.216500][ T5621] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.236583][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.413131][ T5621] usb 5-1: Using ep0 maxpacket: 8 [ 91.450795][ T5621] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 91.499176][ T5621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 91.533612][ T5621] usb 5-1: Product: syz [ 91.539200][ T5621] usb 5-1: Manufacturer: syz [ 91.547366][ T5621] usb 5-1: SerialNumber: syz [ 91.565049][ T5621] usb 5-1: config 0 descriptor?? [ 91.569087][ T5730] 0: reclassify loop, rule prio 0, protocol 03 [ 91.595685][ T5621] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 91.624114][ T5692] IPVS: starting estimator thread 0... [ 91.721753][ T5734] IPVS: using max 29 ests per chain, 69600 per kthread [ 91.757367][ T5709] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 91.774828][ T5709] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 91.789666][ T5621] gspca_sn9c2028: read1 error -32 [ 91.819206][ T5621] gspca_sn9c2028: read1 error -32 [ 91.825568][ T5736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.967597][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f6df400: rx timeout, send abort [ 91.979944][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f6df400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.068957][ T5621] usb 5-1: USB disconnect, device number 2 [ 92.190734][ T987] cfg80211: failed to load regulatory.db [ 92.826643][ T5709] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 92.945306][ T5751] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.062234][ T5709] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 93.083119][ T5753] ip6gre0: Master is either lo or non-ether device [ 93.090510][ T5709] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 93.248359][ T5709] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 93.277101][ T5709] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 93.296019][ T5709] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 93.330775][ T5709] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 93.345091][ T5709] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 93.426102][ T5709] usb 3-1: USB disconnect, device number 2 [ 93.960430][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.973023][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.572693][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.638718][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.932188][ T5770] sctp: [Deprecated]: syz.3.21 (pid 5770) Use of int in max_burst socket option deprecated. [ 94.932188][ T5770] Use struct sctp_assoc_value instead [ 95.058828][ T5769] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 95.066908][ T5769] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.136404][ T5774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21'. [ 95.180621][ T5769] vhci_hcd vhci_hcd.0: Device attached [ 95.197917][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.217699][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.228397][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.248949][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.257615][ T5774] unsupported nlmsg_type 40 [ 95.268392][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.471267][ T5709] usb 34-1: SetAddress Request (2) to port 0 [ 95.505506][ T5775] vhci_hcd: connection closed [ 95.509551][ T1028] vhci_hcd vhci_hcd.0: stop threads [ 95.513332][ T5709] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 95.551216][ T1028] vhci_hcd vhci_hcd.0: release socket [ 95.595294][ T1028] vhci_hcd vhci_hcd.0: disconnect device [ 95.653484][ T5760] geneve2: entered promiscuous mode [ 95.796460][ T389] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.861373][ T1028] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.891397][ T1028] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 53064 - 0 [ 96.051969][ T389] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.324263][ T5759] syz.4.15 (5759) used greatest stack depth: 19656 bytes left [ 96.371400][ T5783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'. [ 96.374730][ T389] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.542897][ T1152] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.557964][ T5788] netlink: 76 bytes leftover after parsing attributes in process `syz.4.26'. [ 96.579484][ T5788] netlink: 84 bytes leftover after parsing attributes in process `syz.4.26'. [ 96.596045][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 53064 - 0 [ 96.638496][ T1152] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.667217][ T1152] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 53064 - 0 [ 96.835900][ T389] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.921247][ T5616] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.075411][ T5793] syzkaller0: entered promiscuous mode [ 97.083458][ T5793] syzkaller0: entered allmulticast mode [ 97.103862][ T5616] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 97.143000][ T5616] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 97.177554][ T5616] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.219349][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.264273][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 97.299701][ T5616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.316110][ T5616] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.352345][ T50] Bluetooth: hci1: command tx timeout [ 97.356019][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.424866][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 97.493619][ T5616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.558007][ T5616] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.598158][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.640163][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 97.701936][ T5616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.721808][ T57] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.759333][ T5616] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.774016][ T57] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 53064 - 0 [ 97.803678][ T42] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 97.823497][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.884134][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 97.947293][ T5616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.999816][ T5616] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.035147][ T42] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 98.059027][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.130784][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.145122][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 98.164382][ T42] usb 1-1: Product: syz [ 98.181455][ T42] usb 1-1: Manufacturer: syz [ 98.188017][ T5616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.207763][ T42] usb 1-1: SerialNumber: syz [ 98.241951][ C1] Unknown status report in ack skb [ 98.253967][ T5616] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.271966][ T5802] loop4: detected capacity change from 0 to 2 [ 98.334200][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.362114][ T42] usb 1-1: config 0 descriptor?? [ 98.363960][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 98.399808][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 98.420421][ T42] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 98.436882][ T5671] Buffer I/O error on dev loop4, logical block 0, async page read [ 98.452319][ T389] bridge_slave_1: left allmulticast mode [ 98.475152][ T5616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.499597][ T389] bridge_slave_1: left promiscuous mode [ 98.505922][ T5671] Buffer I/O error on dev loop4, logical block 0, async page read [ 98.528329][ T5616] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.550757][ T5671] Buffer I/O error on dev loop4, logical block 0, async page read [ 98.558606][ T389] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.597804][ T5671] Buffer I/O error on dev loop4, logical block 0, async page read [ 98.603524][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.669464][ T5671] Buffer I/O error on dev loop4, logical block 0, async page read [ 98.674849][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 98.730766][ T5671] Buffer I/O error on dev loop4, logical block 0, async page read [ 98.768318][ T389] bridge_slave_0: left allmulticast mode [ 98.779746][ T5616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.793833][ T5671] Buffer I/O error on dev loop4, logical block 0, async page read [ 98.800123][ T389] bridge_slave_0: left promiscuous mode [ 98.824237][ T5616] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.844291][ T389] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.846707][ T5671] Buffer I/O error on dev loop4, logical block 0, async page read [ 98.868722][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.904288][ T5671] Buffer I/O error on dev loop4, logical block 0, async page read [ 98.920112][ T5616] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 98.950117][ T5671] Buffer I/O error on dev loop4, logical block 0, async page read [ 99.002607][ T5616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.072629][ T5616] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 99.093706][ T5616] usb 3-1: Product: syz [ 99.123010][ T5616] usb 3-1: Manufacturer: syz [ 99.165667][ T5616] usb 3-1: SerialNumber: syz [ 99.219493][ T5616] usb 3-1: config 0 descriptor?? [ 99.295875][ T5616] yurex 3-1:0.0: Could not submitting URB [ 99.334988][ T5616] yurex 3-1:0.0: probe with driver yurex failed with error -5 [ 99.435229][ T5786] workqueue: Failed to create a rescuer kthread for wq "dio/fuse": -EINTR [ 99.441611][ T50] Bluetooth: hci1: command tx timeout [ 99.720961][ T5616] usb 3-1: USB disconnect, device number 3 [ 100.078920][ T389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.116502][ T389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.181514][ T389] bond0 (unregistering): Released all slaves [ 100.215992][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.276993][ T5831] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 100.632164][ T5709] usb 34-1: device descriptor read/8, error -110 [ 100.843372][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 100.881356][ T42] gspca_stk1135: reg_w 0x300 err -71 [ 100.888451][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 100.934457][ T42] gspca_stk1135: Sensor write failed [ 100.950760][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 100.961047][ T42] gspca_stk1135: Sensor write failed [ 100.977105][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 100.984814][ T42] gspca_stk1135: Sensor read failed [ 100.998001][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 101.007067][ T42] gspca_stk1135: Sensor read failed [ 101.013890][ T42] gspca_stk1135: Detected sensor type unknown (0x0) [ 101.024513][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 101.035570][ T42] gspca_stk1135: Sensor read failed [ 101.046567][ T5709] usb usb34-port1: attempt power cycle [ 101.054828][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 101.066634][ T42] gspca_stk1135: Sensor read failed [ 101.072548][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 101.080154][ T42] gspca_stk1135: Sensor write failed [ 101.086588][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 101.094606][ T42] gspca_stk1135: Sensor write failed [ 101.104979][ T42] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 101.130675][ T42] usb 1-1: USB disconnect, device number 2 [ 101.462763][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.511024][ T50] Bluetooth: hci1: command tx timeout [ 101.521242][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.597261][ T5778] bridge_slave_0: entered allmulticast mode [ 101.610213][ T5778] bridge_slave_0: entered promiscuous mode [ 101.636407][ T5709] usb usb34-port1: unable to enumerate USB device [ 101.652143][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.677519][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.696893][ T5778] bridge_slave_1: entered allmulticast mode [ 101.763184][ T5778] bridge_slave_1: entered promiscuous mode [ 102.170428][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.275952][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.523129][ T389] hsr_slave_0: left promiscuous mode [ 102.575071][ T389] hsr_slave_1: left promiscuous mode [ 102.609480][ T389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.644667][ T389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.681998][ T389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.720068][ T389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.929675][ T389] veth1_macvtap: left promiscuous mode [ 102.976054][ T389] veth0_macvtap: left promiscuous mode [ 103.014827][ T389] veth1_vlan: left promiscuous mode [ 103.027844][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 103.049112][ T389] veth0_vlan: left promiscuous mode [ 103.124953][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 103.591418][ T50] Bluetooth: hci1: command tx timeout [ 105.223069][ T389] team0 (unregistering): Port device team_slave_1 removed [ 105.316892][ T389] team0 (unregistering): Port device team_slave_0 removed [ 106.284018][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 106.457612][ T5778] team0: Port device team_slave_0 added [ 106.500255][ T5778] team0: Port device team_slave_1 added [ 106.718375][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.744405][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.795634][ T5679] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 106.831869][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.853373][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.886555][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.984196][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.002049][ T5679] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 107.025461][ T5679] usb 1-1: config 34 has an invalid interface number: 116 but max is 0 [ 107.047790][ T5679] usb 1-1: config 34 has no interface number 0 [ 107.057813][ T5679] usb 1-1: config 34 interface 116 has no altsetting 0 [ 107.084496][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.098822][ T5679] usb 1-1: Product: syz [ 107.129394][ T5679] usb 1-1: Manufacturer: syz [ 107.156290][ T5679] usb 1-1: SerialNumber: syz [ 107.276415][ T389] IPVS: stop unused estimator thread 0... [ 107.403703][ T5778] hsr_slave_0: entered promiscuous mode [ 107.440701][ T5778] hsr_slave_1: entered promiscuous mode [ 107.479731][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 107.510066][ T5778] Cannot create hsr debugfs directory [ 107.639755][ T5679] comedi comedi5: could not set alternate setting 3 in high speed [ 107.686101][ T5679] usbdux 1-1:34.116: driver 'usbdux' failed to auto-configure device. [ 107.785001][ T5679] usbdux 1-1:34.116: probe with driver usbdux failed with error -71 [ 107.832997][ T5679] usb 1-1: USB disconnect, device number 3 [ 108.225980][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880584e9800: rx timeout, send abort [ 108.727230][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880584eb000: rx timeout, send abort [ 108.736399][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880584e9800: abort rx timeout. Force session deactivation [ 108.793241][ T5945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.948446][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 109.026406][ T5778] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.083713][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.110389][ T5778] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.169069][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.209957][ T5778] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.235999][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880584eb000: abort rx timeout. Force session deactivation [ 109.348477][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.382904][ T5778] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.435811][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.673216][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.800023][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.844617][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.853478][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.948573][ T389] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.957043][ T389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.437742][ T5976] syzkaller0: entered promiscuous mode [ 110.447884][ T5976] syzkaller0: entered allmulticast mode [ 110.747893][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.796726][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 110.917015][ T5981] geneve2: entered promiscuous mode [ 110.955347][ T5981] geneve2: entered allmulticast mode [ 111.043877][ T5981] Zero length message leads to an empty skb [ 111.053765][ T57] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.198604][ T389] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.212685][ T5989] fuse: Unknown parameter 'ÏE•ú:ïÖÕF3+`+WÆÄëÇJŠnˆækt, priority 0 [ 113.921609][ T42] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.939121][ T6025] tipc: Resetting bearer [ 114.002544][ T6025] tipc: Disabling bearer [ 114.030112][ T29] audit: type=1326 audit(1786253341.951:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5c19e0d9 code=0x7ffc0000 [ 114.111098][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 114.123206][ T29] audit: type=1326 audit(1786253341.991:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5c19e0d9 code=0x7ffc0000 [ 114.125989][ T42] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 114.170184][ T48] wlan1: Trigger new scan to find an IBSS to join [ 114.215475][ T29] audit: type=1326 audit(1786253341.991:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5c19e0d9 code=0x7ffc0000 [ 114.349136][ T42] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 114.373953][ T29] audit: type=1326 audit(1786253341.991:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5c19e0d9 code=0x7ffc0000 [ 114.397300][ T42] usb 4-1: config 0 has no interface number 0 [ 114.461405][ T29] audit: type=1326 audit(1786253341.991:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc5c19e0d9 code=0x7ffc0000 [ 114.502771][ T29] audit: type=1326 audit(1786253342.001:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5c19e0d9 code=0x7ffc0000 [ 114.572272][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.585787][ T42] usb 4-1: Product: syz [ 114.592006][ T42] usb 4-1: Manufacturer: syz [ 114.599455][ T42] usb 4-1: SerialNumber: syz [ 114.613566][ T29] audit: type=1326 audit(1786253342.051:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5c15e90e code=0x7ffc0000 [ 114.692671][ T42] usb 4-1: config 0 descriptor?? [ 114.738558][ T29] audit: type=1326 audit(1786253342.081:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5c15e90e code=0x7ffc0000 [ 114.786173][ T29] audit: type=1326 audit(1786253342.081:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5c15e90e code=0x7ffc0000 [ 114.824005][ T29] audit: type=1326 audit(1786253342.081:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc5c15e90e code=0x7ffc0000 [ 115.159822][ T42] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 115.255355][ T42] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 117.066142][ T6061] netlink: 156 bytes leftover after parsing attributes in process `syz.5.83'. [ 117.148498][ T42] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 117.233229][ T42] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 117.369087][ T42] usb 4-1: USB disconnect, device number 2 [ 117.467083][ T6068] kernel profiling enabled (shift: 5) [ 117.748810][ T6072] warning: `syz.4.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.458010][ T6087] io-wq is not configured for unbound workers [ 118.711139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.808684][ T6092] syz.3.92 uses obsolete (PF_INET,SOCK_PACKET) [ 119.202758][ T35] wlan1: Trigger new scan to find an IBSS to join [ 119.651040][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.753838][ T5679] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.851883][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 119.874898][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 119.906754][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 119.936269][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.962163][ T5679] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.986485][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.021804][ T24] usb 4-1: Product: syz [ 120.024729][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.039195][ T24] usb 4-1: Manufacturer: syz [ 120.068188][ T24] usb 4-1: SerialNumber: syz [ 120.076669][ T5679] usb 1-1: Product: syz [ 120.076696][ T5679] usb 1-1: Manufacturer: syz [ 120.076730][ T5679] usb 1-1: SerialNumber: syz [ 120.142080][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.164044][ T24] usb 4-1: config 0 descriptor?? [ 120.244459][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 120.329493][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 120.469843][ T187] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.838470][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 120.864735][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 120.948660][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.993266][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.278816][ T5679] usb 1-1: USB disconnect, device number 4 [ 121.599558][ T187] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 121.644517][ T187] ath9k_htc: Failed to initialize the device [ 121.687797][ T5679] usb 1-1: ath9k_htc: USB layer deinitialized [ 121.945379][ T24] em28xx 4-1:0.0: AC97 vendor ID = 0x00fc00fe [ 122.275365][ T6139] kvm: pic: non byte write [ 122.358363][ T24] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 122.383721][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 122.407555][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 122.427746][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 122.463000][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 122.496129][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 122.576151][ T24] usb 4-1: USB disconnect, device number 3 [ 123.384355][ T6154] IPVS: Error connecting to the multicast addr [ 123.490646][ T6158] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 123.543001][ T187] IPVS: starting estimator thread 0... [ 123.662065][ T6161] IPVS: using max 24 ests per chain, 57600 per kthread [ 123.692766][ T42] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.840455][ T6164] netlink: 'syz.0.111': attribute type 2 has an invalid length. [ 123.869886][ T6164] netlink: 'syz.0.111': attribute type 2 has an invalid length. [ 124.050342][ T6170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.125954][ T6170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.338008][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.366036][ T42] usb 5-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 125.392534][ T42] usb 5-1: no configurations [ 125.418760][ T42] usb 5-1: can't read configurations, error -22 [ 126.907185][ T6221] syz.2.123: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 127.043217][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.2.123 Not tainted syzkaller #0 PREEMPT(full) [ 127.043247][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.043258][ T6221] Call Trace: [ 127.043266][ T6221] [ 127.043275][ T6221] dump_stack_lvl+0xe8/0x150 [ 127.043314][ T6221] warn_alloc+0x24c/0x270 [ 127.043342][ T6221] ? stack_depot_save_flags+0x3ec/0x800 [ 127.043369][ T6221] ? __pfx_warn_alloc+0x10/0x10 [ 127.043396][ T6221] ? kasan_save_track+0x3e/0x80 [ 127.043417][ T6221] ? __kasan_kmalloc+0x93/0xb0 [ 127.043443][ T6221] ? xsk_setsockopt+0x52a/0x960 [ 127.043464][ T6221] ? do_sock_setsockopt+0x17c/0x1b0 [ 127.043482][ T6221] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 127.043501][ T6221] ? do_syscall_64+0x174/0x580 [ 127.043525][ T6221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.043556][ T6221] __vmalloc_node_range_noprof+0x12c/0x1730 [ 127.043611][ T6221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 127.043638][ T6221] ? __kasan_kmalloc+0x93/0xb0 [ 127.043664][ T6221] ? __kmalloc_cache_noprof+0x32d/0x660 [ 127.043689][ T6221] ? __kmalloc_cache_noprof+0x150/0x660 [ 127.043714][ T6221] vmalloc_user_noprof+0xad/0xe0 [ 127.043737][ T6221] ? xskq_create+0xbf/0x170 [ 127.043761][ T6221] xskq_create+0xbf/0x170 [ 127.043787][ T6221] xsk_init_queue+0x8a/0xe0 [ 127.043823][ T6221] xsk_setsockopt+0x52a/0x960 [ 127.043844][ T6221] ? __fget_files+0x2a/0x420 [ 127.043872][ T6221] ? __pfx_xsk_setsockopt+0x10/0x10 [ 127.043895][ T6221] ? __pfx_aa_sk_perm+0x10/0x10 [ 127.043928][ T6221] ? aa_sock_opt_perm+0xff/0x1a0 [ 127.043947][ T6221] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 127.043964][ T6221] ? __pfx_xsk_setsockopt+0x10/0x10 [ 127.043985][ T6221] do_sock_setsockopt+0x17c/0x1b0 [ 127.044006][ T6221] __x64_sys_setsockopt+0x13d/0x1b0 [ 127.044028][ T6221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.044047][ T6221] do_syscall_64+0x174/0x580 [ 127.044069][ T6221] ? trace_irq_disable+0x3b/0x140 [ 127.044090][ T6221] ? clear_bhb_loop+0x70/0xc0 [ 127.044114][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.044133][ T6221] RIP: 0033:0x7f23d699e0d9 [ 127.044153][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.044169][ T6221] RSP: 002b:00007f23d780f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.044190][ T6221] RAX: ffffffffffffffda RBX: 00007f23d6c25fa0 RCX: 00007f23d699e0d9 [ 127.044204][ T6221] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 127.044216][ T6221] RBP: 00007f23d6a35024 R08: 0000000000000029 R09: 0000000000000000 [ 127.044228][ T6221] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.044239][ T6221] R13: 00007f23d6c26038 R14: 00007f23d6c25fa0 R15: 00007f23d6d4fa48 [ 127.044272][ T6221] [ 127.500515][ T6227] syzkaller0: entered promiscuous mode [ 127.500569][ T6227] syzkaller0: entered allmulticast mode [ 127.606375][ T6221] Mem-Info: [ 127.606413][ T6221] active_anon:6729 inactive_anon:0 isolated_anon:0 [ 127.606413][ T6221] active_file:0 inactive_file:43186 isolated_file:0 [ 127.606413][ T6221] unevictable:0 dirty:377 writeback:0 [ 127.606413][ T6221] slab_reclaimable:10382 slab_unreclaimable:96865 [ 127.606413][ T6221] mapped:30084 shmem:624 pagetables:1428 [ 127.606413][ T6221] sec_pagetables:0 bounce:0 [ 127.606413][ T6221] kernel_misc_reclaimable:0 [ 127.606413][ T6221] free:1321830 free_pcp:10900 free_cma:0 [ 127.606469][ T6221] Node 0 active_anon:26912kB inactive_anon:0kB active_file:0kB inactive_file:172540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120336kB dirty:1500kB writeback:0kB shmem:2496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12584kB pagetables:5520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 127.606527][ T6221] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 127.606580][ T6221] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.606643][ T6221] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 127.606691][ T6221] Node 0 DMA32 free:1320208kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26912kB inactive_anon:0kB active_file:0kB inactive_file:172540kB unevictable:0kB writepending:1500kB zspages:0kB present:3129332kB managed:2548648kB mlocked:0kB bounce:0kB free_pcp:41460kB local_pcp:21068kB free_cma:0kB [ 127.606753][ T6221] lowmem_reserve[]: 0 0 0 0 0 [ 127.606807][ T6221] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.606862][ T6221] lowmem_reserve[]: 0 0 0 0 0 [ 127.606906][ T6221] Node 1 Normal free:3951752kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2140kB local_pcp:2140kB free_cma:0kB [ 127.606965][ T6221] lowmem_reserve[]: 0 0 0 0 0 [ 127.607009][ T6221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.607174][ T6221] Node 0 DMA32: 280*4kB (ME) 185*8kB (ME) 101*16kB (UM) 63*32kB (ME) 27*64kB (ME) 2*128kB (UM) 1*256kB (U) 4*512kB (UME) 5*1024kB (ME) 1*2048kB (M) 318*4096kB (M) = 1320216kB [ 127.607366][ T6221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 127.607483][ T6221] Node 1 Normal: 0*4kB 1*8kB (M) 2*16kB (U) 1*32kB (U) 5*64kB (UM) 6*128kB (U) 0*256kB 0*512kB 2*1024kB (UM) 2*2048kB (U) 963*4096kB (M) = 3951752kB [ 127.607653][ T6221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.607669][ T6221] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.607686][ T6221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.607702][ T6221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.607719][ T6221] 43806 total pagecache pages [ 127.607729][ T6221] 0 pages in swap cache [ 127.607737][ T6221] Free swap = 124996kB [ 127.607746][ T6221] Total swap = 124996kB [ 127.607755][ T6221] 2097051 pages RAM [ 127.607764][ T6221] 0 pages HighMem/MovableOnly [ 127.607772][ T6221] 428209 pages reserved [ 127.607780][ T6221] 0 pages cma reserved [ 128.421093][ T5679] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 128.606088][ T5679] usb 6-1: Using ep0 maxpacket: 8 [ 128.617372][ T5679] usb 6-1: unable to get BOS descriptor or descriptor too short [ 128.617431][ T5679] usb 6-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 128.621061][ T5679] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.621113][ T5679] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 128.625534][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.625567][ T5679] usb 6-1: Product: syz [ 128.625582][ T5679] usb 6-1: Manufacturer: syz [ 128.625597][ T5679] usb 6-1: SerialNumber: syz [ 129.157179][ T5679] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.049522][ T5679] usb 6-1: USB disconnect, device number 2 [ 130.583257][ T6286] udevd[6286]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.193046][ T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.370974][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 131.610128][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.663387][ T5679] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.667411][ T42] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 131.719520][ T42] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 131.756654][ T42] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 131.800661][ T42] usb 4-1: can't read configurations, error -71 [ 131.860996][ T5679] usb 3-1: Using ep0 maxpacket: 32 [ 131.877620][ T5679] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 131.922047][ T5679] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.976700][ T5679] usb 3-1: config 0 has no interface number 0 [ 132.003575][ T5679] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 132.056468][ T5679] usb 3-1: config 0 interface 1 has no altsetting 0 [ 132.088822][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.137298][ T5679] usb 3-1: Product: syz [ 132.176985][ T5679] usb 3-1: Manufacturer: syz [ 132.203369][ T5679] usb 3-1: SerialNumber: syz [ 132.250967][ T5679] usb 3-1: config 0 descriptor?? [ 132.572725][ T5679] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 132.652115][ T5679] cx231xx 3-1:0.1: Failed to read PCB config [ 132.705192][ T5679] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 132.813609][ T5679] usb 3-1: USB disconnect, device number 4 [ 133.120031][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.130303][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.243061][ T5679] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.461685][ T5679] usb 3-1: Using ep0 maxpacket: 32 [ 133.476346][ T5679] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 133.510487][ T5679] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.547434][ T5679] usb 3-1: config 0 has no interface number 0 [ 133.568920][ T5679] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 133.608628][ T5679] usb 3-1: config 0 interface 1 has no altsetting 0 [ 133.645826][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.679680][ T5679] usb 3-1: Product: syz [ 133.691041][ T5679] usb 3-1: Manufacturer: syz [ 133.709479][ T5679] usb 3-1: SerialNumber: syz [ 133.722503][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.151'. [ 133.734704][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 133.792217][ T5679] usb 3-1: config 0 descriptor?? [ 133.885704][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 133.902141][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.943023][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.974160][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.011049][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.169927][ T5679] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 134.225268][ T5679] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 134.372663][ T5679] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 134.398682][ T5679] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 134.421828][ T5679] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 134.542802][ T5679] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 134.578862][ T5679] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -110 [ 134.611794][ T187] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 134.724567][ T6375] loop4: detected capacity change from 0 to 7 [ 134.733238][ T5679] i2c i2c-2: Added multiplexed i2c bus 4 [ 134.773567][ T5679] i2c i2c-2: Added multiplexed i2c bus 5 [ 134.781595][ T5679] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 134.786780][ T6375] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 134.799231][ T6375] loop4: partition table partially beyond EOD, truncated [ 134.811051][ T6375] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 134.812449][ T187] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 134.837906][ T6378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.158'. [ 134.853418][ T5679] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 134.879332][ T6378] random: crng reseeded on system resumption [ 134.879416][ T187] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.928486][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.965688][ T187] usb 6-1: config 0 descriptor?? [ 135.020746][ T5671] udevd[5671]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 135.148189][ T5679] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 135.174542][ T5679] usb 3-1: USB disconnect, device number 5 [ 135.192076][ T57] wlan1: Trigger new scan to find an IBSS to join [ 135.285984][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.296049][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.524404][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.548966][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.881615][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.895729][ T187] usbhid 6-1:0.0: can't add hid device: -71 [ 135.904761][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.925176][ T187] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 135.971219][ T42] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.002879][ T187] usb 6-1: USB disconnect, device number 3 [ 136.031074][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.046371][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.131028][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 136.138379][ T42] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.153588][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.165371][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.178605][ T42] usb 5-1: config 0 descriptor?? [ 136.399560][ T42] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 137.054628][ T42] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 137.251065][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 137.260001][ T42] usb 6-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 137.275852][ T42] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.298814][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 137.329364][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.371853][ T42] usb 6-1: config 0 descriptor?? [ 137.860916][ T24] usb 5-1: USB disconnect, device number 5 [ 138.011367][ T6419] binder_alloc: 6418: binder_alloc_buf, no vma [ 138.038468][ T42] usb 6-1: string descriptor 0 read error: -71 [ 138.058786][ T42] uclogic 0003:5543:0081.0001: failed retrieving string descriptor #200: -71 [ 138.082750][ T42] uclogic 0003:5543:0081.0001: failed retrieving pen parameters: -71 [ 138.100909][ T42] uclogic 0003:5543:0081.0001: failed probing pen v2 parameters: -71 [ 138.121050][ T42] uclogic 0003:5543:0081.0001: failed probing parameters: -71 [ 138.135923][ T42] uclogic 0003:5543:0081.0001: probe with driver uclogic failed with error -71 [ 138.173672][ T42] usb 6-1: USB disconnect, device number 4 [ 143.389054][ T6501] syzkaller0: entered promiscuous mode [ 143.409262][ T6501] syzkaller0: entered allmulticast mode [ 143.456916][ T6507] syzkaller0: entered promiscuous mode [ 143.476649][ T6507] syzkaller0: entered allmulticast mode [ 144.111841][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 147.295079][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 147.295101][ T29] audit: type=1326 audit(1786253375.211:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.0.210" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f068199e0d9 code=0x0 [ 149.342152][ T6612] process 'syz.4.214' launched '/dev/fd/8' with NULL argv: empty string added [ 151.713367][ T6645] tipc: Started in network mode [ 151.754460][ T6645] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 151.776830][ T6645] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 151.797582][ T6645] tipc: Enabled bearer , priority 10 [ 152.121555][ T42] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 152.282852][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 152.318212][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 152.348938][ T42] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 152.349424][ T5621] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 152.395559][ T42] usb 1-1: config 0 has no interface number 0 [ 152.449679][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.499937][ T42] usb 1-1: Product: syz [ 152.515619][ T42] usb 1-1: Manufacturer: syz [ 152.545080][ T42] usb 1-1: SerialNumber: syz [ 152.592878][ T42] usb 1-1: config 0 descriptor?? [ 152.610994][ T5621] usb 6-1: Using ep0 maxpacket: 32 [ 152.655703][ T5621] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 152.707358][ T5621] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 152.755149][ T5621] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 152.816422][ T5621] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 152.867750][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.874546][ T5621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.902106][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.923310][ T5731] tipc: Node number set to 1 [ 152.955240][ T5621] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.007259][ T5621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.058305][ T42] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 153.083602][ T5621] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 153.091981][ T42] uvcvideo 1-1:0.64: No valid video chain found. [ 153.136300][ T5621] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.144719][ T42] usb 1-1: USB disconnect, device number 5 [ 153.158972][ T6661] syzkaller0: entered promiscuous mode [ 153.212382][ T6661] syzkaller0: entered allmulticast mode [ 153.219620][ T5621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.331888][ T5621] usb 6-1: config 0 descriptor?? [ 153.754997][ T29] audit: type=1326 audit(1786253381.681:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.227" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94dd9e0d9 code=0x7ffc0000 [ 153.882015][ T29] audit: type=1326 audit(1786253381.681:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.227" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94dd9e0d9 code=0x7ffc0000 [ 153.960034][ T29] audit: type=1326 audit(1786253381.681:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.227" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94dd9e0d9 code=0x7ffc0000 [ 154.054208][ T29] audit: type=1326 audit(1786253381.681:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.227" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe94dd9e0d9 code=0x7ffc0000 [ 154.151565][ T5692] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 154.171183][ T29] audit: type=1326 audit(1786253381.761:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.227" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe94dd5e90e code=0x7ffc0000 [ 154.295685][ T29] audit: type=1326 audit(1786253381.761:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.227" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe94dd5e90e code=0x7ffc0000 [ 154.354203][ T5692] usb 4-1: Using ep0 maxpacket: 32 [ 154.366196][ T5692] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 154.378310][ T29] audit: type=1326 audit(1786253381.771:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.227" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe94dd5e90e code=0x7ffc0000 [ 154.400256][ T5692] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 154.442392][ T6679] syzkaller0: entered promiscuous mode [ 154.444431][ T5692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.464233][ T6679] syzkaller0: entered allmulticast mode [ 154.475430][ T29] audit: type=1326 audit(1786253381.781:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.227" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe94dd5e90e code=0x7ffc0000 [ 154.509502][ T29] audit: type=1326 audit(1786253381.781:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.227" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe94dd5e90e code=0x7ffc0000 [ 154.543468][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.555762][ T5692] usb 4-1: Product: syz [ 154.564413][ T5692] usb 4-1: Manufacturer: syz [ 154.572552][ T5692] usb 4-1: SerialNumber: syz [ 154.580667][ T29] audit: type=1326 audit(1786253381.791:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.5.227" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe94dd5e90e code=0x7ffc0000 [ 154.614916][ T5692] usb 4-1: config 0 descriptor?? [ 154.639558][ T5692] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 154.825325][ T5621] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.879398][ T5621] usb 6-1: USB disconnect, device number 5 [ 154.980692][ T5621] usblp0: removed [ 155.076961][ T6683] kvm: requested 33523 ns i8254 timer period limited to 200000 ns [ 155.129394][ T6683] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 155.149477][ T6683] kvm: requested 20114 ns i8254 timer period limited to 200000 ns [ 155.179523][ T6683] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 155.195295][ T6683] kvm: requested 127390 ns i8254 timer period limited to 200000 ns [ 155.215962][ T6683] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 155.242273][ T6683] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 155.254993][ T6683] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 155.277662][ T6683] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 155.293468][ T6683] kvm: requested 33523 ns i8254 timer period limited to 200000 ns [ 157.227699][ T5731] usb 4-1: USB disconnect, device number 6 [ 157.982212][ T6699] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 158.252622][ T5692] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 158.477670][ T5692] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.504586][ T5692] usb 4-1: not running at top speed; connect to a high speed hub [ 158.521055][ T5692] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=31.fc [ 158.542447][ T5692] usb 4-1: config 3 has an invalid descriptor of length 132, skipping remainder of the config [ 158.565599][ T5692] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 158.605330][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.629961][ T6731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.638121][ T5692] usb 4-1: Product: syz [ 158.639407][ T6731] bridge0: port 3(bond1) entered blocking state [ 158.649270][ T6731] bridge0: port 3(bond1) entered disabled state [ 158.656673][ T6731] bond1: entered allmulticast mode [ 158.660764][ T5692] usb 4-1: Manufacturer: syz [ 158.666248][ T6731] bond1: entered promiscuous mode [ 158.677242][ T6736] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 158.704190][ T5692] usb 4-1: SerialNumber: syz [ 158.951844][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.997339][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.102931][ T5692] usb 4-1: USB disconnect, device number 7 [ 159.932589][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.111697][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 160.153598][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.174422][ T10] usb 1-1: Product: syz [ 160.187815][ T10] usb 1-1: Manufacturer: syz [ 160.193482][ T10] usb 1-1: SerialNumber: syz [ 160.364857][ T6771] netlink: 14 bytes leftover after parsing attributes in process `syz.2.264'. [ 160.543560][ T6774] syzkaller0: entered promiscuous mode [ 160.549938][ T6774] syzkaller0: entered allmulticast mode [ 160.617060][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 160.634519][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 160.739102][ T6776] syzkaller0: entered promiscuous mode [ 160.745765][ T6776] syzkaller0: entered allmulticast mode [ 162.487171][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 162.517860][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 162.533349][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 162.548632][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 162.566670][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 162.591505][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 162.624011][ T10] usb 1-1: USB disconnect, device number 6 [ 162.915927][ T6793] veth0: entered allmulticast mode [ 162.947740][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 163.000000][ T6793] veth0 (unregistering): left allmulticast mode [ 163.893319][ T6809] syzkaller0: entered promiscuous mode [ 163.921676][ T6809] syzkaller0: entered allmulticast mode [ 164.282655][ T6817] sg_read: process 189 (syz.4.281) changed security contexts after opening file descriptor, this is not allowed. [ 164.368955][ T6822] syzkaller0: entered promiscuous mode [ 164.395454][ T6822] syzkaller0: entered allmulticast mode [ 164.819421][ T6832] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 164.971701][ T6832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.063081][ T6834] vlan2: entered allmulticast mode [ 165.095778][ T6834] bond1: entered allmulticast mode [ 165.222774][ T6835] bond1: (slave geneve2): making interface the new active one [ 165.260942][ T6835] geneve2: entered allmulticast mode [ 165.303327][ T6835] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 165.381385][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.406991][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.445092][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.467231][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.752627][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 165.932075][ T10] usb 3-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=8c.d0 [ 165.961525][ T10] usb 3-1: config 4 has an invalid interface number: 12 but max is 0 [ 165.971273][ T10] usb 3-1: config 4 has no interface number 0 [ 165.983371][ T10] usb 3-1: config 4 interface 12 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 166.002076][ T10] usb 3-1: config 4 interface 12 has no altsetting 0 [ 166.016681][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.039877][ T10] usb 3-1: Product: syz [ 166.045647][ T10] usb 3-1: Manufacturer: syz [ 166.063053][ T10] usb 3-1: SerialNumber: syz [ 166.349093][ T10] cdc_acm 3-1:4.12: More than one union descriptor, skipping ... [ 166.501940][ T10] usb 3-1: USB disconnect, device number 6 [ 167.420969][ T5621] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.601746][ T5621] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 167.650312][ T5621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.740784][ T5621] usb 5-1: Product: syz [ 167.765925][ T5621] usb 5-1: Manufacturer: syz [ 167.789813][ T5621] usb 5-1: SerialNumber: syz [ 167.846769][ T5621] usb 5-1: config 0 descriptor?? [ 169.042460][ T5621] usb 5-1: Firmware version (0.0) predates our first public release. [ 169.095999][ T5621] usb 5-1: Please update to version 0.2 or newer [ 169.418859][ T6877] syzkaller0: entered promiscuous mode [ 169.437965][ T6877] syzkaller0: entered allmulticast mode [ 169.455873][ T5621] usb 5-1: USB disconnect, device number 6 [ 169.893733][ T6886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.302'. [ 170.389922][ T6892] binder: 6891:6892 ioctl c0306201 200000000680 returned -14 [ 170.541015][ T5692] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 170.758906][ T5692] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 170.848760][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 170.898745][ T5692] usb 1-1: Product: syz [ 170.920084][ T5692] usb 1-1: SerialNumber: syz [ 170.952973][ T5692] usb 1-1: config 0 descriptor?? [ 171.209091][ T5692] hso 1-1:0.0: Failed to find BULK eps [ 171.286797][ T6908] binder: 6906:6908 unknown command 0 [ 171.317474][ T6908] binder: 6906:6908 ioctl c0306201 2000000001c0 returned -22 [ 171.336269][ T6910] syzkaller0: entered promiscuous mode [ 171.352732][ T6910] syzkaller0: entered allmulticast mode [ 172.090434][ T5692] usb 1-1: USB disconnect, device number 7 [ 172.652280][ T6920] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 172.972002][ T6920] bond1: entered promiscuous mode [ 173.021221][ T6920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.187000][ T6922] vlan2: entered allmulticast mode [ 173.201152][ T6922] bond1: entered allmulticast mode [ 173.367699][ T6925] bond1: (slave bridge1): making interface the new active one [ 173.422185][ T6925] bridge1: entered promiscuous mode [ 173.450660][ T6925] bridge1: entered allmulticast mode [ 173.496478][ T6925] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 173.985819][ T6933] syzkaller0: left promiscuous mode [ 174.016358][ T6933] syzkaller0: left allmulticast mode [ 174.097668][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 176.096016][ T5621] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 176.162907][ T6972] syzkaller0: entered promiscuous mode [ 176.171143][ T6972] syzkaller0: entered allmulticast mode [ 176.278059][ T5621] usb 4-1: not running at top speed; connect to a high speed hub [ 176.326424][ T5621] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 176.384582][ T6867] Set syz1 is full, maxelem 65536 reached [ 176.399056][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.670074][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 176.757879][ T6983] syzkaller0: entered promiscuous mode [ 176.789334][ T6983] syzkaller0: entered allmulticast mode [ 178.440239][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.344'. [ 179.471216][ T5621] usb 4-1: USB disconnect, device number 8 [ 181.000954][ T5621] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 181.180912][ T5621] usb 4-1: Using ep0 maxpacket: 32 [ 181.202941][ T5621] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 181.285964][ T5621] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 181.338736][ T5621] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 181.428528][ T5621] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.490868][ T5621] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 181.558361][ T7062] syzkaller0: entered promiscuous mode [ 181.579171][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.605983][ T7062] syzkaller0: entered allmulticast mode [ 181.613244][ T5621] usb 4-1: Product: syz [ 181.628665][ T5621] usb 4-1: Manufacturer: syz [ 181.665664][ T5621] usb 4-1: SerialNumber: syz [ 181.788905][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 181.911514][ T5731] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.992500][ T5621] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input6 [ 182.113634][ T5731] usb 5-1: Using ep0 maxpacket: 8 [ 182.136775][ T5731] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 182.170541][ T5731] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 182.223221][ T5731] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 182.272916][ T5731] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.305842][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.322089][ T5621] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 182.364204][ T5731] usb 5-1: config 0 descriptor?? [ 182.375590][ T5621] (id 0x00) [ 182.620955][ T5621] rc_core: IR keymap rc-imon-pad not found [ 182.648142][ T5621] Registered IR keymap rc-empty [ 182.665403][ T5621] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 182.708738][ T5621] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 182.830560][ T5621] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 182.955668][ T5621] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input7 [ 182.990273][ T5731] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 183.034054][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.071185][ T5731] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 183.091276][ T5731] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 183.119544][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.123025][ T5731] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 183.151199][ T5621] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:9> initialized [ 183.181607][ T5731] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 183.217204][ T5731] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 183.267730][ T5731] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 183.645045][ T5731] elan 0003:04F3:0755.0002: hidraw0: USB HID v0.04 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 183.677097][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 184.514352][ T5709] usb 5-1: USB disconnect, device number 7 [ 185.102758][ T5709] usb 4-1: USB disconnect, device number 9 [ 186.266389][ T7116] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.679265][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 186.679286][ T29] audit: type=1326 audit(1786253414.601:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068199e0d9 code=0x7ffc0000 [ 186.814234][ T29] audit: type=1326 audit(1786253414.651:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068199e0d9 code=0x7ffc0000 [ 186.988469][ T29] audit: type=1326 audit(1786253414.651:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068199e0d9 code=0x7ffc0000 [ 187.107006][ T29] audit: type=1326 audit(1786253414.651:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f068199e0d9 code=0x7ffc0000 [ 187.229263][ T29] audit: type=1326 audit(1786253414.651:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068199e0d9 code=0x7ffc0000 [ 187.363347][ T29] audit: type=1326 audit(1786253414.651:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068199e0d9 code=0x7ffc0000 [ 187.533811][ T29] audit: type=1326 audit(1786253414.651:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068199e0d9 code=0x7ffc0000 [ 187.702961][ T29] audit: type=1326 audit(1786253414.651:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f068199e0d9 code=0x7ffc0000 [ 187.876412][ T29] audit: type=1326 audit(1786253414.651:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068199e0d9 code=0x7ffc0000 [ 187.969476][ T7134] netlink: 'syz.3.373': attribute type 10 has an invalid length. [ 188.073402][ T7134] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.099304][ T29] audit: type=1326 audit(1786253414.651:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.0.368" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f068199e0d9 code=0x7ffc0000 [ 188.190267][ T7134] bond0: (slave team0): Enslaving as an active interface with an up link [ 188.481337][ T7143] syzkaller0: entered promiscuous mode [ 188.506843][ T7143] syzkaller0: entered allmulticast mode [ 190.549220][ T5621] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 190.604686][ T5621] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 190.649913][ T5621] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 190.689140][ T5621] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 190.745592][ T5621] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 190.787313][ T5621] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 190.909104][ T5621] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [] on [ 193.150990][ T42] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 193.323190][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 193.340694][ T42] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 193.382955][ T42] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 193.430663][ T42] usb 4-1: config 0 has no interface number 0 [ 193.464028][ T42] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 193.519908][ T42] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 193.558719][ T7196] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.584431][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.640609][ T42] usb 4-1: Product: syz [ 193.655599][ T42] usb 4-1: Manufacturer: syz [ 193.683047][ T42] usb 4-1: SerialNumber: syz [ 193.721193][ T42] usb 4-1: config 0 descriptor?? [ 193.784779][ T7190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 193.817678][ T7190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 193.984339][ T7201] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 194.083274][ T7190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 194.111560][ T7190] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 194.160946][ T5692] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 194.325845][ T5692] usb 3-1: Using ep0 maxpacket: 32 [ 194.333234][ T42] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 194.341272][ T5692] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 194.365757][ T5692] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 194.400524][ T5692] usb 3-1: config 0 has no interface number 0 [ 194.425306][ T5692] usb 3-1: config 0 interface 12 has no altsetting 0 [ 194.449327][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.459552][ T5692] usb 3-1: Product: syz [ 194.469877][ T5692] usb 3-1: Manufacturer: syz [ 194.469893][ T5692] usb 3-1: SerialNumber: syz [ 194.486824][ T5692] usb 3-1: config 0 descriptor?? [ 194.556257][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.565040][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.469944][ T7219] loop4: detected capacity change from 0 to 2640 [ 195.497074][ T7219] buffer_io_error: 8 callbacks suppressed [ 195.497124][ T7219] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.576221][ T7219] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.585558][ T7216] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.605596][ T7219] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.617639][ T7216] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.637522][ T7219] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.656907][ T7219] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.668557][ T7219] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.700005][ T7219] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.712703][ T5709] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 195.726320][ T7219] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.744692][ T7219] ldm_validate_partition_table(): Disk read failed. [ 195.757244][ T7219] Dev loop4: unable to read RDB block 0 [ 195.766198][ T7219] loop4: unable to read partition table [ 195.801144][ T7219] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 195.870987][ T5709] usb 6-1: Using ep0 maxpacket: 8 [ 195.880200][ T5709] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 195.903608][ T5709] usb 6-1: no configurations [ 195.911120][ T5709] usb 6-1: can't read configurations, error -22 [ 195.977517][ T4979] ldm_validate_partition_table(): Disk read failed. [ 195.986618][ T4979] Dev loop4: unable to read RDB block 0 [ 196.000531][ T4979] loop4: unable to read partition table [ 196.051113][ T5709] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 196.178006][ T7230] bond2: (slave vlan3): making interface the new active one [ 196.194468][ T7230] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 196.221510][ T5709] usb 6-1: Using ep0 maxpacket: 8 [ 196.229939][ T5709] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.243189][ T5709] usb 6-1: no configurations [ 196.250032][ T5709] usb 6-1: can't read configurations, error -22 [ 196.259035][ T5709] usb usb6-port1: attempt power cycle [ 196.387795][ T42] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 196.392769][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 196.399800][ T42] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 196.423125][ T42] asix 4-1:0.34: probe with driver asix failed with error -71 [ 196.442330][ T42] usb 4-1: USB disconnect, device number 10 [ 196.593566][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.604912][ T5709] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 196.607655][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.629853][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.632309][ T5709] usb 6-1: Using ep0 maxpacket: 8 [ 196.641834][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.654972][ T5709] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.676540][ T5621] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 196.686482][ T5709] usb 6-1: no configurations [ 196.699058][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.699429][ T5709] usb 6-1: can't read configurations, error -22 [ 196.717646][ T10] usb 5-1: config 0 descriptor?? [ 196.851231][ T5709] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 196.882028][ T5709] usb 6-1: Using ep0 maxpacket: 8 [ 196.888815][ T5709] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.891629][ T5621] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 196.900182][ T5709] usb 6-1: no configurations [ 196.912839][ T5621] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.916194][ T5709] usb 6-1: can't read configurations, error -22 [ 196.929616][ T5621] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 196.947899][ T5621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 196.959891][ T5709] usb usb6-port1: unable to enumerate USB device [ 196.964810][ T5621] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.001597][ T5692] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 197.016182][ T5692] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 197.024432][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.036008][ T5692] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 197.046369][ T5621] usb 1-1: Product: syz [ 197.051669][ T5621] usb 1-1: Manufacturer: syz [ 197.056961][ T5692] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 197.066027][ T5621] usb 1-1: SerialNumber: syz [ 197.077342][ T5621] usb 1-1: config 0 descriptor?? [ 197.101963][ T5692] usb 3-1: USB disconnect, device number 7 [ 197.115897][ T5621] xbox_remote_probe: Unexpected endpoint_in [ 197.244065][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 198.351940][ T5709] usb 1-1: USB disconnect, device number 8 [ 199.192103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 199.567484][ T42] usb 5-1: USB disconnect, device number 8 [ 200.301303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 200.404646][ T5692] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 200.460587][ T7278] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 200.649794][ T5692] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.791544][ T5692] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.849914][ T5692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.934854][ T5692] usb 6-1: config 0 descriptor?? [ 201.592362][ T5692] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 201.641095][ T5709] usb 6-1: USB disconnect, device number 10 [ 201.873295][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.921996][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.976778][ T5692] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.015391][ T5692] usb 4-1: New USB device found, idVendor=0069, idProduct=0000, bcdDevice= 0.00 [ 202.053155][ T5692] usb 4-1: no configurations [ 202.068303][ T5692] usb 4-1: can't read configurations, error -22 [ 202.385431][ T7298] syzkaller0: entered promiscuous mode [ 202.406212][ T7298] syzkaller0: entered allmulticast mode [ 202.502655][ T7292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.553456][ T7305] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 202.581834][ T7306] syz_tun: entered allmulticast mode [ 203.283193][ T7328] binder_alloc: 7322: binder_alloc_buf, no vma [ 205.055339][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 205.260465][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 205.298626][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.334774][ T10] usb 4-1: config 0 descriptor?? [ 205.362260][ T10] cp210x 4-1:0.0: cp210x converter detected [ 205.780507][ T10] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 205.822856][ T5709] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 206.009799][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 206.010987][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 206.089476][ T10] usb 4-1: USB disconnect, device number 13 [ 206.097736][ T5709] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 206.099194][ T5709] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.099227][ T5709] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.107939][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.248702][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 206.287796][ T5709] usb 5-1: Product: syz [ 206.310484][ T10] cp210x 4-1:0.0: device disconnected [ 206.323459][ T5709] usb 5-1: Manufacturer: syz [ 206.349189][ T5709] usb 5-1: SerialNumber: syz [ 206.386678][ T5709] usb 5-1: config 0 descriptor?? [ 206.558894][ T7379] vlan1: entered allmulticast mode [ 206.566582][ T7379] veth0_vlan: entered allmulticast mode [ 206.664978][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 206.693080][ T5709] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 206.785690][ T5709] imon:send_packet: packet tx failed (-71) [ 206.828748][ T5709] imon 5-1:0.0: panel buttons/knobs setup failed [ 206.841262][ T7381] geneve2: left promiscuous mode [ 206.860043][ T7381] syzkaller0: left promiscuous mode [ 206.871731][ T4928] Bluetooth: hci3: command 0x0406 tx timeout [ 206.883233][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 206.884242][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 206.892439][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 206.957455][ T7381] bond1: left promiscuous mode [ 207.067084][ T7381] bridge1: left promiscuous mode [ 207.144781][ T77] syzkaller0: tun_net_xmit 76 [ 207.175463][ T5731] syzkaller0: tun_net_xmit 76 [ 207.184265][ T77] syzkaller0: tun_net_xmit 48 [ 207.231252][ T5709] rc_core: IR keymap rc-imon-pad not found [ 207.274783][ T5709] Registered IR keymap rc-empty [ 207.302362][ T5709] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 207.323830][ T5709] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 207.354573][ T5709] imon:send_packet: packet tx failed (-71) [ 207.391204][ T5709] imon 5-1:0.0: remote input dev register failed [ 207.429614][ T5709] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 207.587385][ T5709] imon 5-1:0.0: unable to initialize intf0, err 0 [ 207.598060][ T5709] imon:imon_probe: failed to initialize context! [ 207.606536][ T5709] imon 5-1:0.0: unable to register, err -19 [ 207.747843][ T5709] usb 5-1: USB disconnect, device number 9 [ 208.114043][ T7392] create_pit_timer: 12 callbacks suppressed [ 208.114060][ T7392] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 208.144244][ T5709] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 208.250534][ T7392] kvm: pic: level sensitive irq not supported [ 208.323554][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 208.352566][ T5709] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 208.381904][ T5709] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.394900][ T5709] usb 5-1: config 0 interface 0 has no altsetting 0 [ 208.431302][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.456353][ T5709] usb 5-1: Product: syz [ 208.468007][ T5709] usb 5-1: Manufacturer: syz [ 208.481873][ T5709] usb 5-1: SerialNumber: syz [ 208.499255][ T5709] usb 5-1: config 0 descriptor?? [ 208.700571][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 208.738681][ T5709] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 208.799905][ T5709] imon:send_packet: packet tx failed (-71) [ 208.845264][ T5709] imon 5-1:0.0: panel buttons/knobs setup failed [ 208.951183][ T5621] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 208.961177][ T5709] rc_core: IR keymap rc-imon-pad not found [ 208.961220][ T5709] Registered IR keymap rc-empty [ 208.961323][ T5709] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 208.961342][ T5709] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 208.962939][ T5709] imon:send_packet: packet tx failed (-71) [ 209.039198][ T5709] imon 5-1:0.0: remote input dev register failed [ 209.053083][ T5709] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 209.123354][ T5709] imon 5-1:0.0: unable to initialize intf0, err 0 [ 209.150345][ T5709] imon:imon_probe: failed to initialize context! [ 209.160889][ T5621] usb 3-1: Using ep0 maxpacket: 32 [ 209.165820][ T5709] imon 5-1:0.0: unable to register, err -19 [ 209.196981][ T5709] usb 5-1: USB disconnect, device number 10 [ 209.226661][ T5621] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 209.273921][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.306856][ T5621] usb 3-1: Product: syz [ 209.325942][ T5621] usb 3-1: Manufacturer: syz [ 209.345198][ T5621] usb 3-1: SerialNumber: syz [ 209.382639][ T5621] usb 3-1: config 0 descriptor?? [ 209.419219][ T5621] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 210.631445][ T5709] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 210.828369][ T5709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.845778][ T5709] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 210.895571][ T5709] usb 1-1: no configurations [ 210.907603][ T5709] usb 1-1: can't read configurations, error -22 [ 211.692398][ T5621] gspca_ov534_9: sccb_write failed [ 212.123341][ T5621] gspca_ov534_9: reg_w failed -71 [ 212.420951][ T5621] gspca_ov534_9: Unknown sensor 0000 [ 212.421066][ T5621] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 212.468603][ T5621] usb 3-1: USB disconnect, device number 8 [ 214.052578][ T7433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.138676][ T42] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 214.173881][ T7433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.210065][ T42] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 214.261855][ T48] wlan1: authenticated [ 214.283784][ T1028] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 214.308916][ T7436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.328149][ T1028] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 214.379092][ T1028] wlan1: associated [ 215.485793][ T7441] binder_alloc: 7440: binder_alloc_buf, no vma [ 215.683263][ T1028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.346437][ T7452] batman_adv: batadv0: Adding interface: dummy0 [ 216.367806][ T7452] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.426212][ T7452] batman_adv: batadv0: Interface activated: dummy0 [ 216.467352][ T7450] syzkaller0: entered promiscuous mode [ 216.490186][ T7450] syzkaller0: entered allmulticast mode [ 216.760724][ T7451] batadv0: mtu less than device minimum [ 216.775522][ T7451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.792014][ T7451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.806595][ T7451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.822836][ T7451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.837406][ T7451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.852353][ T7451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.867633][ T7451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.880751][ T7451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 216.895344][ T7451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.964630][ T7501] netlink: 88 bytes leftover after parsing attributes in process `syz.3.478'. [ 218.989598][ T7500] kvm: pic: non byte write [ 219.072901][ T7504] netlink: 88 bytes leftover after parsing attributes in process `syz.3.478'. [ 219.538612][ T7510] syzkaller0: entered promiscuous mode [ 219.956003][ T7516] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 220.015006][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 220.054664][ T7518] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 220.184469][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 220.210915][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 220.222460][ T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 220.234091][ T10] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 220.251555][ T10] usb 3-1: config 4 has no interface number 0 [ 220.260914][ T10] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 220.276201][ T7518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.290150][ T10] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 220.310130][ T10] usb 3-1: config 4 interface 9 has no altsetting 0 [ 220.337871][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.352130][ T7522] bond2: entered promiscuous mode [ 220.361000][ T7522] bond2: entered allmulticast mode [ 220.369223][ T10] usb 3-1: Product: syz [ 220.385624][ T10] usb 3-1: Manufacturer: syz [ 220.396189][ T10] usb 3-1: SerialNumber: syz [ 220.440069][ T7513] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 220.459959][ T7513] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 220.481029][ T7523] bond2: (slave dummy0): making interface the new active one [ 220.538854][ T7523] dummy0: entered promiscuous mode [ 220.558237][ T7523] dummy0: entered allmulticast mode [ 220.568965][ T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 220.627165][ T7523] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 220.834155][ T35] usb 3-1: Failed to submit usb control message: -71 [ 220.845191][ T42] usb 3-1: USB disconnect, device number 9 [ 220.855730][ T35] usb 3-1: unable to send the bmi data to the device: -71 [ 220.894075][ T35] usb 3-1: unable to get target info from device [ 220.903111][ T35] usb 3-1: could not get target info (-71) [ 220.910696][ T35] usb 3-1: could not probe fw (-71) [ 221.316746][ T7540] tipc: Started in network mode [ 221.335516][ T7540] tipc: Node identity 7f000001, cluster identity 4711 [ 221.346615][ T7540] tipc: Enabled bearer , priority 10 [ 221.368376][ T7540] tipc: Enabling of bearer rejected, failed to enable media [ 221.402352][ T5709] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 221.474897][ T7542] netlink: 'syz.3.489': attribute type 1 has an invalid length. [ 221.571061][ T5709] usb 6-1: Using ep0 maxpacket: 32 [ 221.587229][ T5709] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 221.610211][ T5709] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 221.628753][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 221.639523][ T5709] usb 6-1: Product: syz [ 221.645013][ T5709] usb 6-1: Manufacturer: syz [ 221.650581][ T5709] usb 6-1: SerialNumber: syz [ 221.660048][ T5709] usb 6-1: config 0 descriptor?? [ 221.673391][ T7538] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 221.683806][ T5709] hub 6-1:0.0: bad descriptor, ignoring hub [ 221.691431][ T7542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.701308][ T5709] hub 6-1:0.0: probe with driver hub failed with error -5 [ 221.735198][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.489'. [ 221.755226][ T7544] bond3: entered promiscuous mode [ 221.774318][ T7544] bond3: entered allmulticast mode [ 221.857862][ T7542] bond2: (slave dummy0): Releasing active interface [ 221.895214][ T7542] dummy0: left promiscuous mode [ 221.903821][ T7542] dummy0: left allmulticast mode [ 221.953033][ T7542] bond3: (slave dummy0): making interface the new active one [ 221.966920][ T7542] dummy0: entered promiscuous mode [ 221.973675][ T7542] dummy0: entered allmulticast mode [ 221.985798][ T7542] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 222.146078][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.493'. [ 222.231210][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 222.321598][ T7556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.412584][ T7558] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 222.604758][ T7567] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 222.647663][ T5621] tipc: Node number set to 2130706433 [ 222.684905][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.696682][ T7567] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:248x16 (0x38415262, 8, 0, 0, 0) [ 222.758958][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.031969][ T5621] usb 6-1: USB disconnect, device number 11 [ 225.191203][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 225.240908][ T5709] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 225.411157][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 225.416824][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 225.426909][ T5709] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 225.449501][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 225.465027][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.476062][ T24] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 225.489665][ T5709] usb 4-1: Product: syz [ 225.532553][ T5709] usb 4-1: Manufacturer: syz [ 225.544324][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.563579][ T5709] usb 4-1: SerialNumber: syz [ 225.577084][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 225.590137][ T5709] usb 4-1: config 0 descriptor?? [ 225.607991][ T5709] gspca_main: sq930x-2.14.0 probing 2770:930c [ 225.620196][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.652618][ T24] usb 5-1: Product: syz [ 225.661566][ T24] usb 5-1: Manufacturer: syz [ 225.673596][ T24] usb 5-1: SerialNumber: syz [ 225.700980][ T5692] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 225.872257][ T5692] usb 6-1: Using ep0 maxpacket: 32 [ 225.886752][ T5692] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 225.929657][ T5692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.950977][ T5692] usb 6-1: config 0 descriptor?? [ 226.013025][ T5692] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 226.251194][ T5709] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 226.471040][ T5709] gspca_sq930x: Sensor ov9630 not yet treated [ 226.499776][ T5709] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 226.547483][ T5709] usb 4-1: USB disconnect, device number 14 [ 226.683001][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 226.719582][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 226.919997][ T24] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 226.928158][ T7606] futex_wake_op: syz.2.506 tries to shift op by -3; fix this program [ 226.954195][ T24] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 227.051540][ T24] usb 5-1: unit 37 not found! [ 227.088249][ T24] usb 5-1: unit 0 not found! [ 227.535767][ T24] usb 5-1: USB disconnect, device number 11 [ 227.838768][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.991188][ T5621] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 228.161850][ T5621] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 228.188467][ T5621] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.212847][ T5621] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.251030][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.275238][ T5621] usb 1-1: config 0 descriptor?? [ 228.301628][ T5621] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 228.561902][ T5621] usb 1-1: USB disconnect, device number 11 [ 228.651708][ T5692] gspca_vc032x: reg_r err -71 [ 228.664143][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.679092][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.693154][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.707542][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.723171][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.735895][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.747552][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.761785][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.772671][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.780164][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.790235][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.799401][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.806096][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.816119][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.826561][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.839036][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.857711][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.877675][ T5692] gspca_vc032x: Unknown sensor... [ 228.894059][ T5692] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 228.909850][ T5692] usb 6-1: USB disconnect, device number 12 [ 229.140936][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 229.322433][ T24] usb 3-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 229.378791][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.453481][ T24] ums-sddr55 3-1:1.0: USB Mass Storage device detected [ 229.492714][ T24] ums-sddr55 3-1:1.0: This device (55aa,a103,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 229.492714][ T24] Please send a copy of this message to and [ 229.494424][ T24] scsi host1: usb-storage 3-1:1.0 [ 229.725849][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.779359][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.880889][ T5692] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 229.927389][ T5699] usb 3-1: USB disconnect, device number 10 [ 230.052337][ T5692] usb 4-1: Using ep0 maxpacket: 32 [ 230.059424][ T5692] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 230.075779][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.125831][ T5692] usb 4-1: config 0 descriptor?? [ 230.149054][ T5692] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 230.158664][ T1028] ------------[ cut here ]------------ [ 230.165662][ T1028] !sta [ 230.165680][ T1028] WARNING: net/mac80211/mlme.c:4898 at ieee80211_mgd_probe_ap_send+0x497/0x560, CPU#1: kworker/u8:7/1028 [ 230.182692][ T1028] Modules linked in: [ 230.189427][ T1028] CPU: 1 UID: 0 PID: 1028 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.202304][ T1028] Tainted: [L]=SOFTLOCKUP [ 230.208627][ T1028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.220326][ T1028] Workqueue: events_unbound cfg80211_wiphy_work [ 230.227927][ T1028] RIP: 0010:ieee80211_mgd_probe_ap_send+0x497/0x560 [ 230.235331][ T1028] Code: 4c 89 fe 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 dd e7 57 f6 e8 c8 11 6c f6 90 0f 0b 90 e9 37 fc ff ff e8 ba 11 6c f6 90 <0f> 0b 90 e9 c0 fc ff ff e8 ac 11 6c f6 90 0f 0b 90 e9 3c ff ff ff [ 230.260242][ T1028] RSP: 0018:ffffc90005107a70 EFLAGS: 00010293 [ 230.267423][ T1028] RAX: ffffffff8b5aefa6 RBX: ffff88807aa74ec0 RCX: ffff8880284c3e00 [ 230.276027][ T1028] RDX: 0000000000000000 RSI: ffffffff8e4adb51 RDI: ffff8880284c3e00 [ 230.284747][ T1028] RBP: 0000000000000001 R08: ffff8880284c3e00 R09: 000000000000000c [ 230.294582][ T1028] R10: 000000000000000c R11: 0000000000000000 R12: ffff88807aa75e70 [ 230.303867][ T1028] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88807aa75920 [ 230.313100][ T1028] FS: 0000000000000000(0000) GS:ffff888125055000(0000) knlGS:0000000000000000 [ 230.323371][ T1028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.331162][ T1028] CR2: 0000001b2d809ff8 CR3: 000000007983e000 CR4: 00000000003526f0 [ 230.340114][ T1028] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 230.349451][ T1028] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 230.358421][ T1028] Call Trace: [ 230.364081][ T1028] [ 230.367393][ T1028] cfg80211_wiphy_work+0x29e/0x420 [ 230.372973][ T1028] ? process_scheduled_works+0xa20/0x14e0 [ 230.380022][ T1028] process_scheduled_works+0xa8e/0x14e0 [ 230.386673][ T1028] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.398855][ T1028] ? assign_work+0x3cf/0x5d0 [ 230.405159][ T1028] worker_thread+0xa47/0xfb0 [ 230.410203][ T1028] ? __kthread_parkme+0x71/0x1f0 [ 230.415997][ T1028] kthread+0x388/0x470 [ 230.420569][ T1028] ? __pfx_worker_thread+0x10/0x10 [ 230.426487][ T1028] ? __pfx_kthread+0x10/0x10 [ 230.432069][ T1028] ret_from_fork+0x514/0xb70 [ 230.437078][ T1028] ? __pfx_ret_from_fork+0x10/0x10 [ 230.442928][ T1028] ? __switch_to+0xc89/0x1420 [ 230.447882][ T1028] ? __pfx_kthread+0x10/0x10 [ 230.453798][ T1028] ret_from_fork_asm+0x1a/0x30 [ 230.458747][ T1028] [ 230.462571][ T1028] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.470045][ T1028] CPU: 1 UID: 0 PID: 1028 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.481878][ T1028] Tainted: [L]=SOFTLOCKUP [ 230.486327][ T1028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.497812][ T1028] Workqueue: events_unbound cfg80211_wiphy_work [ 230.504925][ T1028] Call Trace: [ 230.508592][ T1028] [ 230.511748][ T1028] vpanic+0x56c/0xa60 [ 230.516746][ T1028] ? __pfx__printk+0x10/0x10 [ 230.521593][ T1028] ? __pfx_vpanic+0x10/0x10 [ 230.526685][ T1028] ? is_bpf_text_address+0x292/0x2b0 [ 230.532408][ T1028] ? is_bpf_text_address+0x26/0x2b0 [ 230.538185][ T1028] panic+0xc5/0xd0 [ 230.542055][ T1028] ? __pfx_panic+0x10/0x10 [ 230.547130][ T1028] ? ret_from_fork_asm+0x1a/0x30 [ 230.552873][ T1028] __warn+0x315/0x4c0 [ 230.558655][ T1028] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 230.566230][ T1028] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 230.573361][ T1028] __report_bug+0x276/0x570 [ 230.578165][ T1028] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 230.585911][ T1028] ? __pfx___report_bug+0x10/0x10 [ 230.591612][ T1028] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 230.605167][ T1028] ? lockdep_hardirqs_on+0x7a/0x110 [ 230.611111][ T1028] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 230.617470][ T1028] ? __wake_up_common_lock+0x195/0x1f0 [ 230.624377][ T1028] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 230.630825][ T1028] report_bug+0x16a/0x220 [ 230.635482][ T1028] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 230.642343][ T1028] ? ieee80211_mgd_probe_ap_send+0x499/0x560 [ 230.648749][ T1028] handle_bug+0x9c/0x200 [ 230.653314][ T1028] exc_invalid_op+0x1a/0x50 [ 230.658143][ T1028] asm_exc_invalid_op+0x1a/0x20 [ 230.663643][ T1028] RIP: 0010:ieee80211_mgd_probe_ap_send+0x497/0x560 [ 230.670721][ T1028] Code: 4c 89 fe 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 dd e7 57 f6 e8 c8 11 6c f6 90 0f 0b 90 e9 37 fc ff ff e8 ba 11 6c f6 90 <0f> 0b 90 e9 c0 fc ff ff e8 ac 11 6c f6 90 0f 0b 90 e9 3c ff ff ff [ 230.691782][ T1028] RSP: 0018:ffffc90005107a70 EFLAGS: 00010293 [ 230.698572][ T1028] RAX: ffffffff8b5aefa6 RBX: ffff88807aa74ec0 RCX: ffff8880284c3e00 [ 230.707611][ T1028] RDX: 0000000000000000 RSI: ffffffff8e4adb51 RDI: ffff8880284c3e00 [ 230.716330][ T1028] RBP: 0000000000000001 R08: ffff8880284c3e00 R09: 000000000000000c [ 230.725459][ T1028] R10: 000000000000000c R11: 0000000000000000 R12: ffff88807aa75e70 [ 230.734521][ T1028] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88807aa75920 [ 230.743408][ T1028] ? ieee80211_mgd_probe_ap_send+0x496/0x560 [ 230.749801][ T1028] cfg80211_wiphy_work+0x29e/0x420 [ 230.755873][ T1028] ? process_scheduled_works+0xa20/0x14e0 [ 230.763261][ T1028] process_scheduled_works+0xa8e/0x14e0 [ 230.769060][ T1028] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.775494][ T1028] ? assign_work+0x3cf/0x5d0 [ 230.780541][ T1028] worker_thread+0xa47/0xfb0 [ 230.785688][ T1028] ? __kthread_parkme+0x71/0x1f0 [ 230.790919][ T1028] kthread+0x388/0x470 [ 230.795393][ T1028] ? __pfx_worker_thread+0x10/0x10 [ 230.801079][ T1028] ? __pfx_kthread+0x10/0x10 [ 230.806074][ T1028] ret_from_fork+0x514/0xb70 [ 230.810815][ T1028] ? __pfx_ret_from_fork+0x10/0x10 [ 230.816735][ T1028] ? __switch_to+0xc89/0x1420 [ 230.821802][ T1028] ? __pfx_kthread+0x10/0x10 [ 230.827388][ T1028] ret_from_fork_asm+0x1a/0x30 [ 230.832561][ T1028] [ 230.836471][ T1028] Kernel Offset: disabled [ 230.840939][ T1028] Rebooting in 86400 seconds..