last executing test programs: 15m29.350295761s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 15m28.200110417s ago: executing program 4 (id=10): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_vif\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m12.044159082s ago: executing program 32 (id=10): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_vif\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m45.030686442s ago: executing program 1 (id=75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0xd300000000000000, 0x1, 0xfffffffffffffffd, 0x1}) 14m44.609707066s ago: executing program 1 (id=76): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="180900"/15, @ANYRESHEX=r1], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000001440)=""/40, &(0x7f0000001480)=0x28) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x0, 0x100000000007, 0xdb4e, 0x3, 0x2, 0x106c, 0x7, 0x8000000000000, 0x80000004000080, 0x8000000, 0xa, 0xfffffffffffffffd, 0x4, 0x0, 0x8000], 0x1, 0x3c5210}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf008020200000000000000000000800"], 0x2c}}, 0x0) 14m43.869687788s ago: executing program 1 (id=79): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) syz_open_dev$vim2m(&(0x7f0000000140), 0x8001, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) close(0x3) 14m38.480299353s ago: executing program 1 (id=85): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f000022a000/0x4000)=nil, 0x3000, 0x1}) 14m35.143597741s ago: executing program 1 (id=86): close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) waitid(0x2, r0, &(0x7f0000000180), 0x2, &(0x7f00000003c0)) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) 14m30.877897179s ago: executing program 1 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000001040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfa}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file1\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') socket$inet6(0xa, 0x805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x2}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000001c0)={0x980915, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) socket$nl_netfilter(0x10, 0x3, 0xc) 14m14.836169664s ago: executing program 33 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000001040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfa}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file1\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') socket$inet6(0xa, 0x805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x2}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000001c0)={0x980915, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) socket$nl_netfilter(0x10, 0x3, 0xc) 20.828583551s ago: executing program 0 (id=2283): unshare(0x5a060800) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 20.686677513s ago: executing program 3 (id=2285): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000007007604"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={r0}) 19.897736402s ago: executing program 3 (id=2288): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x0, &(0x7f0000000340)}, 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={0x0}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) write$dsp(r2, &(0x7f0000000180)="fb9f79b2025f464a79bd4447971edfcbe74a902497be99530b2c85f1d06fa902b7f384ca916a121dd2c9f726f6e84b304dc5c2bf33136f3a1521b2e486136cbeb2c74c1e4d7af1f71dab3b10c29e9f78ca1697fdff079af9afd0557a886132b1de7607561634271b9680c819eedf35dadb372cb35e53b87205cc7ec9f152fdced00845e4d53ff2c4e9ce6b6e17e972b4c18bbbb5cc80b96e10c2377c254e5d56", 0xa0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28) 19.220218646s ago: executing program 0 (id=2291): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) clock_nanosleep(0x3, 0x1, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 18.733744346s ago: executing program 3 (id=2293): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 18.601719799s ago: executing program 3 (id=2294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffc0900020073797a30000000000500010006000000050005000a0000000500040000000000140007800800114000000000050015002800000011000300686173683a6e65742c6e65"], 0x60}}, 0x0) 17.777228991s ago: executing program 3 (id=2296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d0000001400000011"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x80, 0x1000, 0xf0, 0x7}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') pipe(&(0x7f0000000300)={0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e29, 0x4, @rand_addr=' \x01\x00', 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2002}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xd67}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x4, &(0x7f0000000280)={0x4, 0x7fffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x1e, 0x0, &(0x7f0000000680)) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) openat(r3, &(0x7f0000000380)='\x00', 0x101400, 0xee) 17.670324485s ago: executing program 0 (id=2297): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={r0}) 17.453688417s ago: executing program 0 (id=2300): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827", 0x45}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25070000000c0001800800030001000000740001801400020077673200000000000000000000000000080003000200", @ANYRES32, @ANYRESDEC, @ANYRES32=r0], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16.579662141s ago: executing program 3 (id=2302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2bdc, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfde01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x9, 0xfff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e5}, 0x24004814) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000440)="1a", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x1c, r6, 0x1, 0xfc, 0x6, @multicast}, 0x14) 16.377989754s ago: executing program 0 (id=2303): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2b, 0x80801, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 15.048591825s ago: executing program 0 (id=2311): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@ipv6_delrule={0x28, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) write(r0, &(0x7f0000000140)="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"/297, 0x3accf8d5) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x8, 0x6000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000500)={0x7, [0x1, 0x10, 0x100], [{0x9, 0x4, 0x1, 0x0, 0x0, 0x1}, {0xfff, 0x10001, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x1}, {0xfc5e, 0x4, 0x0, 0x0, 0x1}, {0x6, 0x5, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x200, 0x1, 0x0, 0x1}, {0x4, 0xb258, 0x1, 0x0, 0x1}, {0x8, 0x7, 0x1}, {0x7fffffff, 0x2, 0x1, 0x0, 0x1}], 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r7, 0x201, 0x3ffffd, 0x800000, {{}, {0x0, 0x3fff}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000100)=ANY=[], 0x18) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r9 = socket(0x2b, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0x8, 0xa}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x240088d0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 14.603396838s ago: executing program 5 (id=2313): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) 13.031357705s ago: executing program 5 (id=2322): sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="00082bbd7000fbdbdf25210000000c002d8005000100d800fbff33002d8008000200010000000800030003000000f2"], 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) 12.883178576s ago: executing program 5 (id=2324): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x8a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 12.560793344s ago: executing program 5 (id=2327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 12.28853378s ago: executing program 5 (id=2331): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) 11.323696999s ago: executing program 5 (id=2341): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe11}, 0x20000050) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09", 0x1b}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.523741728s ago: executing program 34 (id=2302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2bdc, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfde01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x9, 0xfff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e5}, 0x24004814) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000440)="1a", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x1c, r6, 0x1, 0xfc, 0x6, @multicast}, 0x14) 902.721525ms ago: executing program 2 (id=2470): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0089061327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000300)={'pcl818\x00', [0xa910, 0xd, 0xd09d, 0xfff7ffff, 0x2d4, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xd, 0x1, 0x9, 0x1, 0x3, 0x6, 0x7, 0x40000009, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x2, 0xc, 0x7, 0x3, 0x4, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r6, 0x8028640c, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) writev(r5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x24000010) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) 603.445715ms ago: executing program 2 (id=2471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000077cb000085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 399.985677ms ago: executing program 2 (id=2472): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f000001d040)=""/4104, 0x1008, 0x128) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0xc, 0x1, 0x0, 0x1, 'syz0\x00', 0x3}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) 312.908445ms ago: executing program 2 (id=2473): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 233.706309ms ago: executing program 2 (id=2474): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 104.476935ms ago: executing program 2 (id=2475): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x8a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000580), 0x0) 0s ago: executing program 35 (id=2311): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@ipv6_delrule={0x28, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) write(r0, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x8, 0x6000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000500)={0x7, [0x1, 0x10, 0x100], [{0x9, 0x4, 0x1, 0x0, 0x0, 0x1}, {0xfff, 0x10001, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x1}, {0xfc5e, 0x4, 0x0, 0x0, 0x1}, {0x6, 0x5, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x200, 0x1, 0x0, 0x1}, {0x4, 0xb258, 0x1, 0x0, 0x1}, {0x8, 0x7, 0x1}, {0x7fffffff, 0x2, 0x1, 0x0, 0x1}], 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r7, 0x201, 0x3ffffd, 0x800000, {{}, {0x0, 0x3fff}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000100)=ANY=[], 0x18) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r9 = socket(0x2b, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0x8, 0xa}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x240088d0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) kernel console output (not intermixed with test programs): packets. [ 991.029330][T10900] comedi comedi1: pcl818: I/O base address or length out of range [ 991.424786][ T5644] Bluetooth: hci6: command tx timeout [ 993.128517][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.577093][T10929] netlink: 798 bytes leftover after parsing attributes in process `syz.2.1037'. [ 994.513913][T10934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.978477][T10955] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 996.222816][T10959] comedi comedi1: pcl818: I/O base address or length out of range [ 997.401550][T10970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.578153][T10977] netlink: 798 bytes leftover after parsing attributes in process `syz.2.1047'. [ 998.632813][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 998.635090][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 999.894880][ T5759] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1000.054474][ T5759] usb 3-1: Using ep0 maxpacket: 32 [ 1000.056958][ T5759] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1000.056983][ T5759] usb 3-1: config 0 has no interface number 0 [ 1000.143514][T11001] comedi comedi1: pcl818: I/O base address or length out of range [ 1000.848036][ T5759] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1000.848066][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.848085][ T5759] usb 3-1: Product: syz [ 1000.848098][ T5759] usb 3-1: Manufacturer: syz [ 1000.848111][ T5759] usb 3-1: SerialNumber: syz [ 1000.895625][ T5759] usb 3-1: config 0 descriptor?? [ 1001.094113][T10745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.094402][T10745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.094652][T10745] bridge_slave_0: entered allmulticast mode [ 1001.148867][T10745] bridge_slave_0: entered promiscuous mode [ 1001.181881][T10745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.182158][T10745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.182478][T10745] bridge_slave_1: entered allmulticast mode [ 1001.209620][T10745] bridge_slave_1: entered promiscuous mode [ 1001.337752][ T5759] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1001.337785][ T5759] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1001.383940][ T5788] bridge_slave_1: left allmulticast mode [ 1001.383974][ T5788] bridge_slave_1: left promiscuous mode [ 1001.384205][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.469650][ T5788] bridge_slave_0: left allmulticast mode [ 1001.469684][ T5788] bridge_slave_0: left promiscuous mode [ 1001.469919][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.539421][ T5759] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1001.539610][ T5759] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 1001.653040][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1001.803002][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1001.851000][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1001.907859][ T10] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1001.907890][ T10] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1001.907911][ T10] usb 4-1: Product: syz [ 1001.907925][ T10] usb 4-1: Manufacturer: syz [ 1001.907939][ T10] usb 4-1: SerialNumber: syz [ 1002.024315][ T5788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.053076][ T6144] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1002.103661][ T5788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.187057][ T5788] bond0 (unregistering): Released all slaves [ 1002.212812][ T10] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1002.212837][ T10] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1002.212855][ T10] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1002.213024][ T6144] usb 1-1: Using ep0 maxpacket: 32 [ 1002.214669][ T10] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1002.247364][ T6144] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1002.247392][ T6144] usb 1-1: config 0 has no interface number 0 [ 1002.247434][ T6144] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1002.250884][ T6144] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1002.250911][ T6144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.250930][ T6144] usb 1-1: Product: syz [ 1002.250943][ T6144] usb 1-1: Manufacturer: syz [ 1002.250957][ T6144] usb 1-1: SerialNumber: syz [ 1002.261021][ T6144] usb 1-1: config 0 descriptor?? [ 1002.268477][ T6144] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1002.268538][ T6144] em28xx 1-1:0.132: Video interface 132 found: [ 1002.543288][ T10] usb 4-1: palm_os_3_probe - error -110 getting bytes available request [ 1002.543365][ T10] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1002.551221][ T10] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1002.586866][ T10] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1002.680661][ T6144] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1002.843463][ T10] usb 3-1: USB disconnect, device number 11 [ 1003.200079][ T6144] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1003.200214][ T6144] em28xx 1-1:0.132: board has no eeprom [ 1003.477123][T11014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.478712][T11014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.585004][T11014] trusted_key: encrypted_key: insufficient parameters specified [ 1003.683046][ T6144] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1003.683076][ T6144] em28xx 1-1:0.132: analog set to bulk mode. [ 1003.688308][ T5659] em28xx 1-1:0.132: Registering V4L2 extension [ 1003.743623][T10745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.110915][ T6144] usb 1-1: USB disconnect, device number 19 [ 1004.112349][ T6144] em28xx 1-1:0.132: Disconnecting em28xx [ 1004.145190][ T5659] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1005.008476][ T9249] usb 4-1: USB disconnect, device number 16 [ 1005.019724][ T5788] hsr_slave_0: left promiscuous mode [ 1005.065900][ T5788] hsr_slave_1: left promiscuous mode [ 1005.067230][ T5788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.068555][ T9249] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1005.101700][ T5788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.111995][ T9249] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1005.112818][ T9249] visor 4-1:1.0: device disconnected [ 1005.172658][ T5659] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1005.172675][ T5659] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1005.172682][ T5659] em28xx 1-1:0.132: No AC97 audio processor [ 1005.333017][ T5659] usb 1-1: Decoder not found [ 1005.333037][ T5659] em28xx 1-1:0.132: failed to create media graph [ 1005.333106][ T5659] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1005.355565][ T5659] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1005.355885][ T6144] em28xx 1-1:0.132: Closing input extension [ 1005.575143][T11047] comedi comedi1: pcl818: I/O base address or length out of range [ 1006.279928][ T6144] em28xx 1-1:0.132: Freeing device [ 1006.527109][ T5788] team0 (unregistering): Port device team_slave_1 removed [ 1006.621499][ T5788] team0 (unregistering): Port device team_slave_0 removed [ 1006.779732][T10745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.155075][T10745] team0: Port device team_slave_0 added [ 1007.162690][T10745] team0: Port device team_slave_1 added [ 1007.265152][T10745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.265168][T10745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.265194][T10745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.269032][T10745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.269046][T10745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.269071][T10745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.417456][ T9165] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1007.709512][T10745] hsr_slave_0: entered promiscuous mode [ 1007.715995][T10745] hsr_slave_1: entered promiscuous mode [ 1007.723744][T10745] debugfs: 'hsr0' already exists in 'hsr' [ 1007.723825][T10745] Cannot create hsr debugfs directory [ 1008.268785][T11075] comedi comedi1: pcl818: I/O base address or length out of range [ 1009.196510][T11073] Invalid source name [ 1009.962150][T11078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.962757][T11078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.531662][ T9165] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1011.533716][ T9165] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1011.533748][ T9165] usb 4-1: can't read configurations, error -71 [ 1013.237348][T10800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.237642][T10800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.237842][T10800] bridge_slave_0: entered allmulticast mode [ 1013.240684][T10800] bridge_slave_0: entered promiscuous mode [ 1013.321556][T10800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.321677][T10800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.321895][T10800] bridge_slave_1: entered allmulticast mode [ 1013.347249][T10800] bridge_slave_1: entered promiscuous mode [ 1013.537445][T10800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.551256][T10800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.794159][ T9165] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1013.975937][ T9165] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1013.975966][ T9165] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1013.975985][ T9165] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1013.976053][ T9165] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1013.976079][ T9165] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1013.977851][ T9165] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1013.977877][ T9165] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1013.977896][ T9165] usb 4-1: Product: syz [ 1013.977918][ T9165] usb 4-1: Manufacturer: syz [ 1014.036891][ T9165] cdc_wdm 4-1:1.0: skipping garbage [ 1014.036919][ T9165] cdc_wdm 4-1:1.0: skipping garbage [ 1014.070415][ T9165] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1014.070517][ T9165] cdc_wdm 4-1:1.0: Unknown control protocol [ 1014.117601][T10800] team0: Port device team_slave_0 added [ 1014.286103][T10800] team0: Port device team_slave_1 added [ 1014.477365][T10800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.477382][T10800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.477408][T10800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.559568][T10800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.559586][T10800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.559612][T10800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.060384][T10800] hsr_slave_0: entered promiscuous mode [ 1015.076459][T10800] hsr_slave_1: entered promiscuous mode [ 1015.079263][T10800] debugfs: 'hsr0' already exists in 'hsr' [ 1015.079288][T10800] Cannot create hsr debugfs directory [ 1015.262670][T11126] mmap: syz.3.1085 (11126) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1016.395845][T11135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1089'. [ 1017.035337][ T5659] usb 4-1: USB disconnect, device number 19 [ 1018.574864][T11144] netlink: 'syz.3.1091': attribute type 4 has an invalid length. [ 1019.433347][ T5788] bridge_slave_1: left allmulticast mode [ 1019.433383][ T5788] bridge_slave_1: left promiscuous mode [ 1019.433645][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.514197][ T5788] bridge_slave_0: left allmulticast mode [ 1019.514222][ T5788] bridge_slave_0: left promiscuous mode [ 1019.514447][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.773068][ T824] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1019.793582][ T5788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.893517][ T5788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.923024][ T824] usb 3-1: Using ep0 maxpacket: 16 [ 1019.924654][ T824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.924703][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1019.924745][ T824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1019.924756][ T824] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1019.924769][ T824] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1019.927324][ T824] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1019.927340][ T824] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1019.927351][ T824] usb 3-1: Manufacturer: syz [ 1019.930292][ T824] usb 3-1: config 0 descriptor?? [ 1020.026275][ T5788] bond0 (unregistering): Released all slaves [ 1020.283330][ T824] rc_core: IR keymap rc-hauppauge not found [ 1020.283350][ T824] Registered IR keymap rc-empty [ 1020.283503][ T824] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.305003][ T824] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.326460][ T824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1020.337517][ T824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 1020.359489][ T824] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.378858][ T824] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.395128][ T824] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.413120][ T824] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.424619][ C1] rc rc0: IR event FIFO is full! [ 1020.424638][ C1] rc rc0: IR event FIFO is full! [ 1020.424652][ C1] rc rc0: IR event FIFO is full! [ 1020.424672][ C1] rc rc0: IR event FIFO is full! [ 1020.424686][ C1] rc rc0: IR event FIFO is full! [ 1020.424698][ C1] rc rc0: IR event FIFO is full! [ 1020.424710][ C1] rc rc0: IR event FIFO is full! [ 1020.424923][ C1] rc rc0: IR event FIFO is full! [ 1020.424934][ C1] rc rc0: IR event FIFO is full! [ 1020.425140][ C1] rc rc0: IR event FIFO is full! [ 1020.425152][ C1] rc rc0: IR event FIFO is full! [ 1020.425162][ C1] rc rc0: IR event FIFO is full! [ 1020.425174][ C1] rc rc0: IR event FIFO is full! [ 1020.425185][ C1] rc rc0: IR event FIFO is full! [ 1020.425390][ C1] rc rc0: IR event FIFO is full! [ 1020.425401][ C1] rc rc0: IR event FIFO is full! [ 1020.425412][ C1] rc rc0: IR event FIFO is full! [ 1020.425422][ C1] rc rc0: IR event FIFO is full! [ 1020.425433][ C1] rc rc0: IR event FIFO is full! [ 1020.425443][ C1] rc rc0: IR event FIFO is full! [ 1020.425454][ C1] rc rc0: IR event FIFO is full! [ 1020.425465][ C1] rc rc0: IR event FIFO is full! [ 1020.425477][ C1] rc rc0: IR event FIFO is full! [ 1020.425690][ C1] rc rc0: IR event FIFO is full! [ 1020.425702][ C1] rc rc0: IR event FIFO is full! [ 1020.425712][ C1] rc rc0: IR event FIFO is full! [ 1020.425723][ C1] rc rc0: IR event FIFO is full! [ 1020.425735][ C1] rc rc0: IR event FIFO is full! [ 1020.425939][ C1] rc rc0: IR event FIFO is full! [ 1020.425951][ C1] rc rc0: IR event FIFO is full! [ 1020.425962][ C1] rc rc0: IR event FIFO is full! [ 1020.425973][ C1] rc rc0: IR event FIFO is full! [ 1020.426175][ C1] rc rc0: IR event FIFO is full! [ 1020.426186][ C1] rc rc0: IR event FIFO is full! [ 1020.426198][ C1] rc rc0: IR event FIFO is full! [ 1020.426404][ C1] rc rc0: IR event FIFO is full! [ 1020.426416][ C1] rc rc0: IR event FIFO is full! [ 1020.426426][ C1] rc rc0: IR event FIFO is full! [ 1020.426437][ C1] rc rc0: IR event FIFO is full! [ 1020.426641][ C1] rc rc0: IR event FIFO is full! [ 1020.426652][ C1] rc rc0: IR event FIFO is full! [ 1020.426671][ C1] rc rc0: IR event FIFO is full! [ 1020.426682][ C1] rc rc0: IR event FIFO is full! [ 1020.426693][ C1] rc rc0: IR event FIFO is full! [ 1020.426704][ C1] rc rc0: IR event FIFO is full! [ 1020.426714][ C1] rc rc0: IR event FIFO is full! [ 1020.426932][ C1] rc rc0: IR event FIFO is full! [ 1020.426943][ C1] rc rc0: IR event FIFO is full! [ 1020.426954][ C1] rc rc0: IR event FIFO is full! [ 1020.426965][ C1] rc rc0: IR event FIFO is full! [ 1020.426993][ C1] rc rc0: IR event FIFO is full! [ 1020.427003][ C1] rc rc0: IR event FIFO is full! [ 1020.427207][ C1] rc rc0: IR event FIFO is full! [ 1020.427219][ C1] rc rc0: IR event FIFO is full! [ 1020.427229][ C1] rc rc0: IR event FIFO is full! [ 1020.427240][ C1] rc rc0: IR event FIFO is full! [ 1020.427252][ C1] rc rc0: IR event FIFO is full! [ 1020.427457][ C1] rc rc0: IR event FIFO is full! [ 1020.427468][ C1] rc rc0: IR event FIFO is full! [ 1020.427479][ C1] rc rc0: IR event FIFO is full! [ 1020.427489][ C1] rc rc0: IR event FIFO is full! [ 1020.427932][ C1] rc rc0: IR event FIFO is full! [ 1020.428137][ C1] rc rc0: IR event FIFO is full! [ 1020.428150][ C1] rc rc0: IR event FIFO is full! [ 1020.428161][ C1] rc rc0: IR event FIFO is full! [ 1020.428173][ C1] rc rc0: IR event FIFO is full! [ 1020.428380][ C1] rc rc0: IR event FIFO is full! [ 1020.428391][ C1] rc rc0: IR event FIFO is full! [ 1020.428598][ C1] rc rc0: IR event FIFO is full! [ 1020.428610][ C1] rc rc0: IR event FIFO is full! [ 1020.428621][ C1] rc rc0: IR event FIFO is full! [ 1020.428632][ C1] rc rc0: IR event FIFO is full! [ 1020.428642][ C1] rc rc0: IR event FIFO is full! [ 1020.428653][ C1] rc rc0: IR event FIFO is full! [ 1020.428672][ C1] rc rc0: IR event FIFO is full! [ 1020.428683][ C1] rc rc0: IR event FIFO is full! [ 1020.428888][ C1] rc rc0: IR event FIFO is full! [ 1020.428900][ C1] rc rc0: IR event FIFO is full! [ 1020.428910][ C1] rc rc0: IR event FIFO is full! [ 1020.428921][ C1] rc rc0: IR event FIFO is full! [ 1020.429126][ C1] rc rc0: IR event FIFO is full! [ 1020.429137][ C1] rc rc0: IR event FIFO is full! [ 1020.429345][ C1] rc rc0: IR event FIFO is full! [ 1020.429357][ C1] rc rc0: IR event FIFO is full! [ 1020.429367][ C1] rc rc0: IR event FIFO is full! [ 1020.429378][ C1] rc rc0: IR event FIFO is full! [ 1020.429388][ C1] rc rc0: IR event FIFO is full! [ 1020.429592][ C1] rc rc0: IR event FIFO is full! [ 1020.429603][ C1] rc rc0: IR event FIFO is full! [ 1020.429614][ C1] rc rc0: IR event FIFO is full! [ 1020.429625][ C1] rc rc0: IR event FIFO is full! [ 1020.429636][ C1] rc rc0: IR event FIFO is full! [ 1020.429647][ C1] rc rc0: IR event FIFO is full! [ 1020.429666][ C1] rc rc0: IR event FIFO is full! [ 1020.429677][ C1] rc rc0: IR event FIFO is full! [ 1020.430083][ C1] rc rc0: IR event FIFO is full! [ 1020.430096][ C1] rc rc0: IR event FIFO is full! [ 1020.430107][ C1] rc rc0: IR event FIFO is full! [ 1020.430117][ C1] rc rc0: IR event FIFO is full! [ 1020.430144][ C1] rc rc0: IR event FIFO is full! [ 1020.430154][ C1] rc rc0: IR event FIFO is full! [ 1020.430165][ C1] rc rc0: IR event FIFO is full! [ 1020.430176][ C1] rc rc0: IR event FIFO is full! [ 1020.430186][ C1] rc rc0: IR event FIFO is full! [ 1020.430198][ C1] rc rc0: IR event FIFO is full! [ 1020.430402][ C1] rc rc0: IR event FIFO is full! [ 1020.430414][ C1] rc rc0: IR event FIFO is full! [ 1020.430425][ C1] rc rc0: IR event FIFO is full! [ 1020.430435][ C1] rc rc0: IR event FIFO is full! [ 1020.430446][ C1] rc rc0: IR event FIFO is full! [ 1020.430456][ C1] rc rc0: IR event FIFO is full! [ 1020.430467][ C1] rc rc0: IR event FIFO is full! [ 1020.430477][ C1] rc rc0: IR event FIFO is full! [ 1020.430692][ C1] rc rc0: IR event FIFO is full! [ 1020.430704][ C1] rc rc0: IR event FIFO is full! [ 1020.430715][ C1] rc rc0: IR event FIFO is full! [ 1020.430726][ C1] rc rc0: IR event FIFO is full! [ 1020.430929][ C1] rc rc0: IR event FIFO is full! [ 1020.430940][ C1] rc rc0: IR event FIFO is full! [ 1020.430952][ C1] rc rc0: IR event FIFO is full! [ 1020.430962][ C1] rc rc0: IR event FIFO is full! [ 1020.430973][ C1] rc rc0: IR event FIFO is full! [ 1020.430983][ C1] rc rc0: IR event FIFO is full! [ 1020.430993][ C1] rc rc0: IR event FIFO is full! [ 1020.431005][ C1] rc rc0: IR event FIFO is full! [ 1020.431016][ C1] rc rc0: IR event FIFO is full! [ 1020.431027][ C1] rc rc0: IR event FIFO is full! [ 1020.431039][ C1] rc rc0: IR event FIFO is full! [ 1020.431255][ C1] rc rc0: IR event FIFO is full! [ 1020.431266][ C1] rc rc0: IR event FIFO is full! [ 1020.431277][ C1] rc rc0: IR event FIFO is full! [ 1020.431288][ C1] rc rc0: IR event FIFO is full! [ 1020.431299][ C1] rc rc0: IR event FIFO is full! [ 1020.431310][ C1] rc rc0: IR event FIFO is full! [ 1020.431520][ C1] rc rc0: IR event FIFO is full! [ 1020.431531][ C1] rc rc0: IR event FIFO is full! [ 1020.431543][ C1] rc rc0: IR event FIFO is full! [ 1020.431553][ C1] rc rc0: IR event FIFO is full! [ 1020.431565][ C1] rc rc0: IR event FIFO is full! [ 1020.431825][ C1] rc rc0: IR event FIFO is full! [ 1020.431838][ C1] rc rc0: IR event FIFO is full! [ 1020.431848][ C1] rc rc0: IR event FIFO is full! [ 1020.431860][ C1] rc rc0: IR event FIFO is full! [ 1020.431870][ C1] rc rc0: IR event FIFO is full! [ 1020.431881][ C1] rc rc0: IR event FIFO is full! [ 1020.432279][ C1] rc rc0: IR event FIFO is full! [ 1020.432292][ C1] rc rc0: IR event FIFO is full! [ 1020.432303][ C1] rc rc0: IR event FIFO is full! [ 1020.432314][ C1] rc rc0: IR event FIFO is full! [ 1020.432324][ C1] rc rc0: IR event FIFO is full! [ 1020.432334][ C1] rc rc0: IR event FIFO is full! [ 1020.432345][ C1] rc rc0: IR event FIFO is full! [ 1020.432549][ C1] rc rc0: IR event FIFO is full! [ 1020.432559][ C1] rc rc0: IR event FIFO is full! [ 1020.432570][ C1] rc rc0: IR event FIFO is full! [ 1020.432581][ C1] rc rc0: IR event FIFO is full! [ 1020.432591][ C1] rc rc0: IR event FIFO is full! [ 1020.432602][ C1] rc rc0: IR event FIFO is full! [ 1020.432612][ C1] rc rc0: IR event FIFO is full! [ 1020.432624][ C1] rc rc0: IR event FIFO is full! [ 1020.432634][ C1] rc rc0: IR event FIFO is full! [ 1020.432898][ C1] rc rc0: IR event FIFO is full! [ 1020.432911][ C1] rc rc0: IR event FIFO is full! [ 1020.432922][ C1] rc rc0: IR event FIFO is full! [ 1020.432933][ C1] rc rc0: IR event FIFO is full! [ 1020.432943][ C1] rc rc0: IR event FIFO is full! [ 1020.433151][ C1] rc rc0: IR event FIFO is full! [ 1020.433163][ C1] rc rc0: IR event FIFO is full! [ 1020.433174][ C1] rc rc0: IR event FIFO is full! [ 1020.433185][ C1] rc rc0: IR event FIFO is full! [ 1020.433196][ C1] rc rc0: IR event FIFO is full! [ 1020.433207][ C1] rc rc0: IR event FIFO is full! [ 1020.433218][ C1] rc rc0: IR event FIFO is full! [ 1020.433337][ T824] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.433424][ C1] rc rc0: IR event FIFO is full! [ 1020.433435][ C1] rc rc0: IR event FIFO is full! [ 1020.433446][ C1] rc rc0: IR event FIFO is full! [ 1020.433457][ C1] rc rc0: IR event FIFO is full! [ 1020.433467][ C1] rc rc0: IR event FIFO is full! [ 1020.433478][ C1] rc rc0: IR event FIFO is full! [ 1020.433488][ C1] rc rc0: IR event FIFO is full! [ 1020.433499][ C1] rc rc0: IR event FIFO is full! [ 1020.433510][ C1] rc rc0: IR event FIFO is full! [ 1020.433717][ C1] rc rc0: IR event FIFO is full! [ 1020.433729][ C1] rc rc0: IR event FIFO is full! [ 1020.433740][ C1] rc rc0: IR event FIFO is full! [ 1020.433750][ C1] rc rc0: IR event FIFO is full! [ 1020.433761][ C1] rc rc0: IR event FIFO is full! [ 1020.433774][ C1] rc rc0: IR event FIFO is full! [ 1020.433978][ C1] rc rc0: IR event FIFO is full! [ 1020.433989][ C1] rc rc0: IR event FIFO is full! [ 1020.434000][ C1] rc rc0: IR event FIFO is full! [ 1020.434011][ C1] rc rc0: IR event FIFO is full! [ 1020.434813][ C1] rc rc0: IR event FIFO is full! [ 1020.434827][ C1] rc rc0: IR event FIFO is full! [ 1020.435029][ C1] rc rc0: IR event FIFO is full! [ 1020.435040][ C1] rc rc0: IR event FIFO is full! [ 1020.435051][ C1] rc rc0: IR event FIFO is full! [ 1020.435062][ C1] rc rc0: IR event FIFO is full! [ 1020.435072][ C1] rc rc0: IR event FIFO is full! [ 1020.435083][ C1] rc rc0: IR event FIFO is full! [ 1020.435093][ C1] rc rc0: IR event FIFO is full! [ 1020.435104][ C1] rc rc0: IR event FIFO is full! [ 1020.435897][ C1] rc rc0: IR event FIFO is full! [ 1020.435910][ C1] rc rc0: IR event FIFO is full! [ 1020.435922][ C1] rc rc0: IR event FIFO is full! [ 1020.435932][ C1] rc rc0: IR event FIFO is full! [ 1020.436134][ C1] rc rc0: IR event FIFO is full! [ 1020.436145][ C1] rc rc0: IR event FIFO is full! [ 1020.436156][ C1] rc rc0: IR event FIFO is full! [ 1020.436167][ C1] rc rc0: IR event FIFO is full! [ 1020.436177][ C1] rc rc0: IR event FIFO is full! [ 1020.436384][ C1] rc rc0: IR event FIFO is full! [ 1020.436974][ C1] rc rc0: IR event FIFO is full! [ 1020.436987][ C1] rc rc0: IR event FIFO is full! [ 1020.436998][ C1] rc rc0: IR event FIFO is full! [ 1020.437009][ C1] rc rc0: IR event FIFO is full! [ 1020.437019][ C1] rc rc0: IR event FIFO is full! [ 1020.437030][ C1] rc rc0: IR event FIFO is full! [ 1020.437040][ C1] rc rc0: IR event FIFO is full! [ 1020.437783][ C1] rc rc0: IR event FIFO is full! [ 1020.437797][ C1] rc rc0: IR event FIFO is full! [ 1020.438006][ C1] rc rc0: IR event FIFO is full! [ 1020.438017][ C1] rc rc0: IR event FIFO is full! [ 1020.438043][ C1] rc rc0: IR event FIFO is full! [ 1020.438054][ C1] rc rc0: IR event FIFO is full! [ 1020.438065][ C1] rc rc0: IR event FIFO is full! [ 1020.438076][ C1] rc rc0: IR event FIFO is full! [ 1020.438286][ C1] rc rc0: IR event FIFO is full! [ 1020.438298][ C1] rc rc0: IR event FIFO is full! [ 1020.438308][ C1] rc rc0: IR event FIFO is full! [ 1020.438318][ C1] rc rc0: IR event FIFO is full! [ 1020.439167][ C1] rc rc0: IR event FIFO is full! [ 1020.439181][ C1] rc rc0: IR event FIFO is full! [ 1020.439192][ C1] rc rc0: IR event FIFO is full! [ 1020.439202][ C1] rc rc0: IR event FIFO is full! [ 1020.439213][ C1] rc rc0: IR event FIFO is full! [ 1020.439423][ C1] rc rc0: IR event FIFO is full! [ 1020.439434][ C1] rc rc0: IR event FIFO is full! [ 1020.439444][ C1] rc rc0: IR event FIFO is full! [ 1020.439455][ C1] rc rc0: IR event FIFO is full! [ 1020.439465][ C1] rc rc0: IR event FIFO is full! [ 1020.439476][ C1] rc rc0: IR event FIFO is full! [ 1020.439487][ C1] rc rc0: IR event FIFO is full! [ 1020.439715][ C1] rc rc0: IR event FIFO is full! [ 1020.439727][ C1] rc rc0: IR event FIFO is full! [ 1020.439738][ C1] rc rc0: IR event FIFO is full! [ 1020.439748][ C1] rc rc0: IR event FIFO is full! [ 1020.439759][ C1] rc rc0: IR event FIFO is full! [ 1020.439769][ C1] rc rc0: IR event FIFO is full! [ 1020.439780][ C1] rc rc0: IR event FIFO is full! [ 1020.439791][ C1] rc rc0: IR event FIFO is full! [ 1020.439998][ C1] rc rc0: IR event FIFO is full! [ 1020.440010][ C1] rc rc0: IR event FIFO is full! [ 1020.440021][ C1] rc rc0: IR event FIFO is full! [ 1020.440031][ C1] rc rc0: IR event FIFO is full! [ 1020.440042][ C1] rc rc0: IR event FIFO is full! [ 1020.440053][ C1] rc rc0: IR event FIFO is full! [ 1020.440063][ C1] rc rc0: IR event FIFO is full! [ 1020.440272][ C1] rc rc0: IR event FIFO is full! [ 1020.440283][ C1] rc rc0: IR event FIFO is full! [ 1020.440293][ C1] rc rc0: IR event FIFO is full! [ 1020.440305][ C1] rc rc0: IR event FIFO is full! [ 1020.440315][ C1] rc rc0: IR event FIFO is full! [ 1020.440326][ C1] rc rc0: IR event FIFO is full! [ 1020.440725][ C1] rc rc0: IR event FIFO is full! [ 1020.440738][ C1] rc rc0: IR event FIFO is full! [ 1020.440749][ C1] rc rc0: IR event FIFO is full! [ 1020.440760][ C1] rc rc0: IR event FIFO is full! [ 1020.440962][ C1] rc rc0: IR event FIFO is full! [ 1020.440974][ C1] rc rc0: IR event FIFO is full! [ 1020.440985][ C1] rc rc0: IR event FIFO is full! [ 1020.440996][ C1] rc rc0: IR event FIFO is full! [ 1020.441006][ C1] rc rc0: IR event FIFO is full! [ 1020.441604][ C1] rc rc0: IR event FIFO is full! [ 1020.441618][ C1] rc rc0: IR event FIFO is full! [ 1020.441630][ C1] rc rc0: IR event FIFO is full! [ 1020.441641][ C1] rc rc0: IR event FIFO is full! [ 1020.441652][ C1] rc rc0: IR event FIFO is full! [ 1020.441671][ C1] rc rc0: IR event FIFO is full! [ 1020.441681][ C1] rc rc0: IR event FIFO is full! [ 1020.447501][ C1] rc rc0: IR event FIFO is full! [ 1020.447518][ C1] rc rc0: IR event FIFO is full! [ 1020.447532][ C1] rc rc0: IR event FIFO is full! [ 1020.474622][ T824] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.516751][ T824] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.557769][ T824] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.594303][ T824] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.635072][ T824] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.913066][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1021.062941][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1021.075445][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1021.075472][ T10] usb 4-1: config 0 has no interface number 0 [ 1021.235590][ T824] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1021.235616][ T824] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1021.396353][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1021.396383][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.396403][ T10] usb 4-1: Product: syz [ 1021.396417][ T10] usb 4-1: Manufacturer: syz [ 1021.396430][ T10] usb 4-1: SerialNumber: syz [ 1021.665839][ T10] usb 4-1: config 0 descriptor?? [ 1022.135262][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1022.135291][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1022.321665][ T824] usb 3-1: USB disconnect, device number 12 [ 1022.342428][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1022.342726][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 1022.722022][T11172] syz.2.1101: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1022.722092][T11172] CPU: 1 UID: 0 PID: 11172 Comm: syz.2.1101 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1022.722116][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1022.722129][T11172] Call Trace: [ 1022.722137][T11172] [ 1022.722145][T11172] dump_stack_lvl+0xe8/0x150 [ 1022.722177][T11172] warn_alloc+0x263/0x3e0 [ 1022.722201][T11172] ? __se_sys_ioctl+0x47/0x170 [ 1022.722225][T11172] ? do_syscall_64+0x15f/0xf80 [ 1022.722253][T11172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.722283][T11172] ? __pfx_warn_alloc+0x10/0x10 [ 1022.722327][T11172] __vmalloc_node_range_noprof+0x132/0x1750 [ 1022.722363][T11172] ? kasan_quarantine_put+0xbb/0x1f0 [ 1022.722402][T11172] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1022.722432][T11172] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1022.722460][T11172] ? lockdep_hardirqs_on+0x7a/0x110 [ 1022.722494][T11172] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 1022.722527][T11172] vmalloc_noprof+0xb2/0xe0 [ 1022.722550][T11172] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 1022.722581][T11172] dvb_dvr_do_ioctl+0x12e/0x220 [ 1022.722615][T11172] dvb_usercopy+0x199/0x2e0 [ 1022.722640][T11172] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1022.722669][T11172] ? __pfx_dvb_usercopy+0x10/0x10 [ 1022.722703][T11172] ? __fget_files+0x3a6/0x420 [ 1022.722722][T11172] ? __fget_files+0x2a/0x420 [ 1022.722744][T11172] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1022.722773][T11172] dvb_dvr_ioctl+0x29/0x40 [ 1022.722802][T11172] __se_sys_ioctl+0xff/0x170 [ 1022.722827][T11172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.722853][T11172] do_syscall_64+0x15f/0xf80 [ 1022.722876][T11172] ? trace_irq_disable+0x3b/0x140 [ 1022.722899][T11172] ? clear_bhb_loop+0x40/0x90 [ 1022.722922][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.722942][T11172] RIP: 0033:0x7fe52cf5ce59 [ 1022.722959][T11172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.722977][T11172] RSP: 002b:00007fe52b1b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1022.722998][T11172] RAX: ffffffffffffffda RBX: 00007fe52d1d5fa0 RCX: 00007fe52cf5ce59 [ 1022.723013][T11172] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 1022.723026][T11172] RBP: 00007fe52cff2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1022.723039][T11172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.723052][T11172] R13: 00007fe52d1d6038 R14: 00007fe52d1d5fa0 R15: 00007ffd3709cb48 [ 1022.723083][T11172] [ 1022.723129][T11172] Mem-Info: [ 1022.723139][T11172] active_anon:190 inactive_anon:8931 isolated_anon:0 [ 1022.723139][T11172] active_file:19986 inactive_file:36682 isolated_file:0 [ 1022.723139][T11172] unevictable:788 dirty:35 writeback:0 [ 1022.723139][T11172] slab_reclaimable:12283 slab_unreclaimable:106667 [ 1022.723139][T11172] mapped:32722 shmem:4148 pagetables:1358 [ 1022.723139][T11172] sec_pagetables:0 bounce:0 [ 1022.723139][T11172] kernel_misc_reclaimable:0 [ 1022.723139][T11172] free:1297943 free_pcp:9611 free_cma:0 [ 1022.723200][T11172] Node 0 active_anon:760kB inactive_anon:35724kB active_file:79624kB inactive_file:146728kB unevictable:1616kB isolated(anon):0kB isolated(file):0kB mapped:130864kB dirty:140kB writeback:0kB shmem:15056kB kernel_stack:12988kB pagetables:5264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1022.723255][T11172] Node 1 active_anon:0kB inactive_anon:0kB active_file:320kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1022.723306][T11172] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1022.723369][T11172] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1022.723406][T11172] Node 0 DMA32 free:1247416kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:760kB inactive_anon:35724kB active_file:79624kB inactive_file:146728kB unevictable:1616kB writepending:140kB zspages:0kB present:3129332kB managed:2566516kB mlocked:0kB bounce:0kB free_pcp:38192kB local_pcp:14052kB free_cma:0kB [ 1022.723466][T11172] lowmem_reserve[]: 0 0 0 0 0 [ 1022.723511][T11172] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:212kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1022.723572][T11172] lowmem_reserve[]: 0 0 0 0 0 [ 1022.723606][T11172] Node 1 Normal free:3928996kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:320kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 1022.723669][T11172] lowmem_reserve[]: 0 0 0 0 0 [ 1022.723703][T11172] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1022.723824][T11172] Node 0 DMA32: 1020*4kB (UME) 3483*8kB (UME) 2088*16kB (UME) 510*32kB (UME) 929*64kB (UME) 774*128kB (UM) 596*256kB (UME) 351*512kB (UME) 193*1024kB (UM) 69*2048kB (UME) 82*4096kB (UM) = 1247304kB [ 1022.723986][T11172] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1022.724089][T11172] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 9*16kB (UM) 9*32kB (UM) 6*64kB (UM) 5*128kB (UM) 0*256kB 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 957*4096kB (M) = 3929048kB [ 1022.724243][T11172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1022.724261][T11172] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1022.724278][T11172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1022.724294][T11172] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1022.724311][T11172] 60817 total pagecache pages [ 1022.724319][T11172] 0 pages in swap cache [ 1022.724327][T11172] Free swap = 124996kB [ 1022.724334][T11172] Total swap = 124996kB [ 1022.724343][T11172] 2097051 pages RAM [ 1022.724349][T11172] 0 pages HighMem/MovableOnly [ 1022.724356][T11172] 423754 pages reserved [ 1022.724364][T11172] 0 pages cma reserved [ 1023.864275][ T10] usb 4-1: USB disconnect, device number 20 [ 1023.917199][T11185] orangefs_mount: mount request failed with -4 [ 1026.083487][ T5788] hsr_slave_0: left promiscuous mode [ 1026.103913][ T5788] hsr_slave_1: left promiscuous mode [ 1026.104870][ T5788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.171556][ T5788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.588946][ T9249] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1026.623724][ T5788] team0 (unregistering): Port device team_slave_1 removed [ 1026.673462][ T5788] team0 (unregistering): Port device team_slave_0 removed [ 1026.733038][ T9249] usb 1-1: Using ep0 maxpacket: 16 [ 1026.784987][ T9249] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.785041][ T9249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1026.785068][ T9249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1026.785090][ T9249] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1026.785113][ T9249] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1026.789543][ T9249] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1026.789571][ T9249] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1026.789589][ T9249] usb 1-1: Manufacturer: syz [ 1026.907664][ T9249] usb 1-1: config 0 descriptor?? [ 1027.206016][ T9249] rc_core: IR keymap rc-hauppauge not found [ 1027.206037][ T9249] Registered IR keymap rc-empty [ 1027.206908][ T9249] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1027.231442][ T9249] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1027.258942][ T9249] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1027.261987][ T9249] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 1027.296708][ T9249] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1027.318986][ T9249] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1027.333036][ T9249] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1027.346623][ C1] rc rc0: IR event FIFO is full! [ 1027.346644][ C1] rc rc0: IR event FIFO is full! [ 1027.346658][ C1] rc rc0: IR event FIFO is full! [ 1027.346869][ C1] rc rc0: IR event FIFO is full! [ 1027.346881][ C1] rc rc0: IR event FIFO is full! [ 1027.346892][ C1] rc rc0: IR event FIFO is full! [ 1027.346903][ C1] rc rc0: IR event FIFO is full! [ 1027.346915][ C1] rc rc0: IR event FIFO is full! [ 1027.346927][ C1] rc rc0: IR event FIFO is full! [ 1027.347133][ C1] rc rc0: IR event FIFO is full! [ 1027.347144][ C1] rc rc0: IR event FIFO is full! [ 1027.347155][ C1] rc rc0: IR event FIFO is full! [ 1027.347166][ C1] rc rc0: IR event FIFO is full! [ 1027.347178][ C1] rc rc0: IR event FIFO is full! [ 1027.347386][ C1] rc rc0: IR event FIFO is full! [ 1027.347397][ C1] rc rc0: IR event FIFO is full! [ 1027.347407][ C1] rc rc0: IR event FIFO is full! [ 1027.347418][ C1] rc rc0: IR event FIFO is full! [ 1027.347881][ C1] rc rc0: IR event FIFO is full! [ 1027.348085][ C1] rc rc0: IR event FIFO is full! [ 1027.348098][ C1] rc rc0: IR event FIFO is full! [ 1027.348110][ C1] rc rc0: IR event FIFO is full! [ 1027.348121][ C1] rc rc0: IR event FIFO is full! [ 1027.348326][ C1] rc rc0: IR event FIFO is full! [ 1027.348338][ C1] rc rc0: IR event FIFO is full! [ 1027.348557][ C1] rc rc0: IR event FIFO is full! [ 1027.348569][ C1] rc rc0: IR event FIFO is full! [ 1027.348579][ C1] rc rc0: IR event FIFO is full! [ 1027.348590][ C1] rc rc0: IR event FIFO is full! [ 1027.348600][ C1] rc rc0: IR event FIFO is full! [ 1027.348612][ C1] rc rc0: IR event FIFO is full! [ 1027.348623][ C1] rc rc0: IR event FIFO is full! [ 1027.348635][ C1] rc rc0: IR event FIFO is full! [ 1027.348849][ C1] rc rc0: IR event FIFO is full! [ 1027.348861][ C1] rc rc0: IR event FIFO is full! [ 1027.348871][ C1] rc rc0: IR event FIFO is full! [ 1027.348882][ C1] rc rc0: IR event FIFO is full! [ 1027.349087][ C1] rc rc0: IR event FIFO is full! [ 1027.349098][ C1] rc rc0: IR event FIFO is full! [ 1027.349304][ C1] rc rc0: IR event FIFO is full! [ 1027.349315][ C1] rc rc0: IR event FIFO is full! [ 1027.349326][ C1] rc rc0: IR event FIFO is full! [ 1027.349337][ C1] rc rc0: IR event FIFO is full! [ 1027.349347][ C1] rc rc0: IR event FIFO is full! [ 1027.349552][ C1] rc rc0: IR event FIFO is full! [ 1027.349563][ C1] rc rc0: IR event FIFO is full! [ 1027.349574][ C1] rc rc0: IR event FIFO is full! [ 1027.349584][ C1] rc rc0: IR event FIFO is full! [ 1027.349595][ C1] rc rc0: IR event FIFO is full! [ 1027.349605][ C1] rc rc0: IR event FIFO is full! [ 1027.349616][ C1] rc rc0: IR event FIFO is full! [ 1027.349626][ C1] rc rc0: IR event FIFO is full! [ 1027.350032][ C1] rc rc0: IR event FIFO is full! [ 1027.350044][ C1] rc rc0: IR event FIFO is full! [ 1027.350055][ C1] rc rc0: IR event FIFO is full! [ 1027.350066][ C1] rc rc0: IR event FIFO is full! [ 1027.350077][ C1] rc rc0: IR event FIFO is full! [ 1027.350087][ C1] rc rc0: IR event FIFO is full! [ 1027.350098][ C1] rc rc0: IR event FIFO is full! [ 1027.350108][ C1] rc rc0: IR event FIFO is full! [ 1027.350119][ C1] rc rc0: IR event FIFO is full! [ 1027.350131][ C1] rc rc0: IR event FIFO is full! [ 1027.350337][ C1] rc rc0: IR event FIFO is full! [ 1027.350349][ C1] rc rc0: IR event FIFO is full! [ 1027.350359][ C1] rc rc0: IR event FIFO is full! [ 1027.350369][ C1] rc rc0: IR event FIFO is full! [ 1027.350380][ C1] rc rc0: IR event FIFO is full! [ 1027.350391][ C1] rc rc0: IR event FIFO is full! [ 1027.350401][ C1] rc rc0: IR event FIFO is full! [ 1027.350411][ C1] rc rc0: IR event FIFO is full! [ 1027.350627][ C1] rc rc0: IR event FIFO is full! [ 1027.350644][ C1] rc rc0: IR event FIFO is full! [ 1027.350655][ C1] rc rc0: IR event FIFO is full! [ 1027.350666][ C1] rc rc0: IR event FIFO is full! [ 1027.350878][ C1] rc rc0: IR event FIFO is full! [ 1027.350889][ C1] rc rc0: IR event FIFO is full! [ 1027.350900][ C1] rc rc0: IR event FIFO is full! [ 1027.350910][ C1] rc rc0: IR event FIFO is full! [ 1027.350920][ C1] rc rc0: IR event FIFO is full! [ 1027.350931][ C1] rc rc0: IR event FIFO is full! [ 1027.350941][ C1] rc rc0: IR event FIFO is full! [ 1027.350952][ C1] rc rc0: IR event FIFO is full! [ 1027.350962][ C1] rc rc0: IR event FIFO is full! [ 1027.350974][ C1] rc rc0: IR event FIFO is full! [ 1027.350986][ C1] rc rc0: IR event FIFO is full! [ 1027.351190][ C1] rc rc0: IR event FIFO is full! [ 1027.351201][ C1] rc rc0: IR event FIFO is full! [ 1027.351212][ C1] rc rc0: IR event FIFO is full! [ 1027.351223][ C1] rc rc0: IR event FIFO is full! [ 1027.351233][ C1] rc rc0: IR event FIFO is full! [ 1027.351245][ C1] rc rc0: IR event FIFO is full! [ 1027.351451][ C1] rc rc0: IR event FIFO is full! [ 1027.351463][ C1] rc rc0: IR event FIFO is full! [ 1027.351473][ C1] rc rc0: IR event FIFO is full! [ 1027.351484][ C1] rc rc0: IR event FIFO is full! [ 1027.351495][ C1] rc rc0: IR event FIFO is full! [ 1027.351699][ C1] rc rc0: IR event FIFO is full! [ 1027.351711][ C1] rc rc0: IR event FIFO is full! [ 1027.351722][ C1] rc rc0: IR event FIFO is full! [ 1027.351733][ C1] rc rc0: IR event FIFO is full! [ 1027.351743][ C1] rc rc0: IR event FIFO is full! [ 1027.351754][ C1] rc rc0: IR event FIFO is full! [ 1027.459052][ T9249] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1027.473040][ T9249] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1027.493033][ T9249] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1027.513874][ T9249] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1027.561289][ T9249] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1027.583035][ T9249] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1027.603098][ T9249] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1027.980683][ T9249] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1027.980700][ T9249] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1028.009014][ T9249] usb 1-1: USB disconnect, device number 20 [ 1028.070687][T10745] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1028.146471][T10745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1028.153760][T10745] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1028.253983][T10745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1028.313321][T10745] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1028.408108][T10745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1028.410671][T10745] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1028.570582][T10745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1030.374752][T10800] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1030.412562][T10800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1030.422231][T10800] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1030.499968][T10800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1030.523882][T10800] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1030.735268][T10800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1030.783602][T10800] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1030.821790][T10800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1030.957643][T10745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.231264][T11302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1145'. [ 1032.084793][T10745] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.148797][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.149246][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.451166][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.451291][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.644864][T10800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.850698][T10800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.908710][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.908924][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.045025][T11338] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1159'. [ 1034.553256][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.572741][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.509116][T10800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.971842][T10800] veth0_vlan: entered promiscuous mode [ 1036.980977][T10800] veth1_vlan: entered promiscuous mode [ 1037.018528][T10800] veth0_macvtap: entered promiscuous mode [ 1037.021902][T10800] veth1_macvtap: entered promiscuous mode [ 1038.016233][ T9228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1038.070152][ T9228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1038.085984][ T9228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1038.091449][ T9228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1038.114488][ T9228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1039.262223][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1178'. [ 1039.345714][T10800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.387272][T11411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.401906][T10800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.454119][ T6017] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.455048][ T6017] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.455084][ T6017] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.455110][ T6017] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.488767][T11412] ALSA: seq fatal error: cannot create timer (-16) [ 1039.860232][T11420] overlayfs: missing 'lowerdir' [ 1040.655596][ T9228] Bluetooth: hci0: command tx timeout [ 1042.703119][ T9228] Bluetooth: hci0: command tx timeout [ 1043.771643][T11447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.751255][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1044.847607][T11454] overlayfs: missing 'lowerdir' [ 1044.960998][ T5644] Bluetooth: hci0: command tx timeout [ 1045.201309][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1045.510900][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1045.562981][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1045.564860][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1046.249601][T11478] ALSA: seq fatal error: cannot create timer (-16) [ 1047.103124][ T9228] Bluetooth: hci0: command tx timeout [ 1047.527688][T11496] overlayfs: missing 'lowerdir' [ 1047.692405][ T9228] Bluetooth: hci3: command tx timeout [ 1049.642604][T11385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.642724][T11385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.657743][T11385] bridge_slave_0: entered allmulticast mode [ 1049.709686][T11385] bridge_slave_0: entered promiscuous mode [ 1049.743124][ T9228] Bluetooth: hci3: command tx timeout [ 1049.801153][T11515] ALSA: seq fatal error: cannot create timer (-16) [ 1050.182363][T11385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.182505][T11385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.182679][T11385] bridge_slave_1: entered allmulticast mode [ 1050.190592][T11385] bridge_slave_1: entered promiscuous mode [ 1050.826044][T11528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1213'. [ 1051.605063][T11524] overlayfs: missing 'lowerdir' [ 1051.823778][ T9228] Bluetooth: hci3: command tx timeout [ 1052.203439][ T66] bridge_slave_1: left allmulticast mode [ 1052.203474][ T66] bridge_slave_1: left promiscuous mode [ 1052.203776][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.368315][ T66] bridge_slave_0: left allmulticast mode [ 1052.368350][ T66] bridge_slave_0: left promiscuous mode [ 1052.368605][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.860629][T11555] netlink: 'syz.0.1217': attribute type 4 has an invalid length. [ 1053.823569][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.903488][ T9228] Bluetooth: hci3: command tx timeout [ 1053.919867][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.965057][ T66] bond0 (unregistering): Released all slaves [ 1054.290016][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1054.376659][T11385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.540966][T11385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.558317][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.491846][T11589] overlayfs: missing 'lowerdir' [ 1056.235770][T11603] netlink: 'syz.0.1237': attribute type 4 has an invalid length. [ 1057.862046][T11385] team0: Port device team_slave_0 added [ 1059.541715][ T66] hsr_slave_0: left promiscuous mode [ 1059.595946][ T66] hsr_slave_1: left promiscuous mode [ 1059.597829][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.783990][T11624] netlink: 798 bytes leftover after parsing attributes in process `syz.0.1246'. [ 1059.873504][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.620079][T11647] netlink: 798 bytes leftover after parsing attributes in process `syz.3.1256'. [ 1064.504818][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1064.566007][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1064.857928][T11385] team0: Port device team_slave_1 added [ 1065.096179][T11385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.096196][T11385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.096222][T11385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.160334][T11385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.160353][T11385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.160379][T11385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.340532][T11385] hsr_slave_0: entered promiscuous mode [ 1065.341863][T11385] hsr_slave_1: entered promiscuous mode [ 1065.342790][T11385] debugfs: 'hsr0' already exists in 'hsr' [ 1065.342813][T11385] Cannot create hsr debugfs directory [ 1065.520451][T11709] netlink: 'syz.3.1284': attribute type 4 has an invalid length. [ 1068.314297][ T6144] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1069.363013][ T6144] usb 1-1: Using ep0 maxpacket: 32 [ 1069.365462][ T6144] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1069.365487][ T6144] usb 1-1: config 0 has no interface number 0 [ 1069.365531][ T6144] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1069.368117][ T6144] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1069.368143][ T6144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.368163][ T6144] usb 1-1: Product: syz [ 1069.368178][ T6144] usb 1-1: Manufacturer: syz [ 1069.368192][ T6144] usb 1-1: SerialNumber: syz [ 1069.380865][ T6144] usb 1-1: config 0 descriptor?? [ 1069.408239][ T6144] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1069.408272][ T6144] em28xx 1-1:0.132: Video interface 132 found: [ 1069.538536][T11452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.538804][T11452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.539141][T11452] bridge_slave_0: entered allmulticast mode [ 1069.543962][T11452] bridge_slave_0: entered promiscuous mode [ 1069.551895][T11452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.552078][T11452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.552730][T11452] bridge_slave_1: entered allmulticast mode [ 1069.599351][T11452] bridge_slave_1: entered promiscuous mode [ 1069.797099][ T6144] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1070.037138][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1070.997891][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.017340][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.018292][T11739] trusted_key: encrypted_key: insufficient parameters specified [ 1071.154164][ T6144] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1071.154198][ T6144] em28xx 1-1:0.132: board has no eeprom [ 1071.232380][T11452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.235369][ T6144] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1071.235394][ T6144] em28xx 1-1:0.132: analog set to bulk mode. [ 1071.254560][ T5620] em28xx 1-1:0.132: Registering V4L2 extension [ 1071.305141][ T6144] usb 1-1: USB disconnect, device number 21 [ 1071.327273][ T6144] em28xx 1-1:0.132: Disconnecting em28xx [ 1071.591621][T11452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.712325][ T5620] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1071.712349][ T5620] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1071.712362][ T5620] em28xx 1-1:0.132: No AC97 audio processor [ 1072.033428][ T5620] usb 1-1: Decoder not found [ 1072.033447][ T5620] em28xx 1-1:0.132: failed to create media graph [ 1072.033476][ T5620] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1072.921454][ T5620] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1072.925353][ T6144] em28xx 1-1:0.132: Closing input extension [ 1073.655520][ T66] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.180606][ T6144] em28xx 1-1:0.132: Freeing device [ 1080.292309][T11452] team0: Port device team_slave_0 added [ 1080.310294][T11452] team0: Port device team_slave_1 added [ 1080.353859][ T5759] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1080.503033][ T5759] usb 4-1: Using ep0 maxpacket: 32 [ 1080.505136][ T5759] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1080.505159][ T5759] usb 4-1: config 0 has no interface number 0 [ 1080.505194][ T5759] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1080.507419][ T5759] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1080.507444][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.507461][ T5759] usb 4-1: Product: syz [ 1080.507473][ T5759] usb 4-1: Manufacturer: syz [ 1080.507484][ T5759] usb 4-1: SerialNumber: syz [ 1080.589367][ T5759] usb 4-1: config 0 descriptor?? [ 1080.625971][ T5759] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1080.626003][ T5759] em28xx 4-1:0.132: Video interface 132 found: [ 1080.856575][ T66] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.994994][T11452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.995012][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.995039][T11452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.023463][T11452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.023479][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.023504][T11452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.126892][ T5759] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1081.533793][T11863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.535981][T11863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.536843][T11863] trusted_key: encrypted_key: insufficient parameters specified [ 1081.906256][ T5759] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1081.906289][ T5759] em28xx 4-1:0.132: board has no eeprom [ 1081.963022][ T5759] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1081.963050][ T5759] em28xx 4-1:0.132: analog set to bulk mode. [ 1081.964507][ T823] em28xx 4-1:0.132: Registering V4L2 extension [ 1081.999510][ T5759] usb 4-1: USB disconnect, device number 21 [ 1082.001654][ T5759] em28xx 4-1:0.132: Disconnecting em28xx [ 1082.337186][ T66] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.366276][ T823] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1082.366328][ T823] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1082.366341][ T823] em28xx 4-1:0.132: No AC97 audio processor [ 1082.426476][ T823] usb 4-1: Decoder not found [ 1082.426495][ T823] em28xx 4-1:0.132: failed to create media graph [ 1082.426530][ T823] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1082.488531][ T823] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1082.488596][ T5759] em28xx 4-1:0.132: Closing input extension [ 1082.586232][T11452] hsr_slave_0: entered promiscuous mode [ 1082.597951][T11452] hsr_slave_1: entered promiscuous mode [ 1082.598959][T11452] debugfs: 'hsr0' already exists in 'hsr' [ 1082.598981][T11452] Cannot create hsr debugfs directory [ 1082.667360][ T5759] em28xx 4-1:0.132: Freeing device [ 1084.384562][T11952] ALSA: seq fatal error: cannot create timer (-16) [ 1085.132112][ T66] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.552747][T11970] syz.3.1364: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1085.552818][T11970] CPU: 0 UID: 0 PID: 11970 Comm: syz.3.1364 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1085.552844][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1085.552856][T11970] Call Trace: [ 1085.552863][T11970] [ 1085.552871][T11970] dump_stack_lvl+0xe8/0x150 [ 1085.552900][T11970] warn_alloc+0x263/0x3e0 [ 1085.552925][T11970] ? __se_sys_ioctl+0x47/0x170 [ 1085.552949][T11970] ? do_syscall_64+0x15f/0xf80 [ 1085.552975][T11970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.553005][T11970] ? __pfx_warn_alloc+0x10/0x10 [ 1085.553049][T11970] __vmalloc_node_range_noprof+0x132/0x1750 [ 1085.553084][T11970] ? kasan_quarantine_put+0xbb/0x1f0 [ 1085.553135][T11970] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1085.553165][T11970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1085.553193][T11970] ? lockdep_hardirqs_on+0x7a/0x110 [ 1085.553220][T11970] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 1085.553251][T11970] vmalloc_noprof+0xb2/0xe0 [ 1085.553274][T11970] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 1085.553305][T11970] dvb_dvr_do_ioctl+0x12e/0x220 [ 1085.553341][T11970] dvb_usercopy+0x199/0x2e0 [ 1085.553367][T11970] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1085.553396][T11970] ? __pfx_dvb_usercopy+0x10/0x10 [ 1085.553433][T11970] ? __fget_files+0x3a6/0x420 [ 1085.553452][T11970] ? __fget_files+0x2a/0x420 [ 1085.553473][T11970] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1085.553502][T11970] dvb_dvr_ioctl+0x29/0x40 [ 1085.553531][T11970] __se_sys_ioctl+0xff/0x170 [ 1085.553556][T11970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.553578][T11970] do_syscall_64+0x15f/0xf80 [ 1085.553605][T11970] ? clear_bhb_loop+0x40/0x90 [ 1085.553630][T11970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.553651][T11970] RIP: 0033:0x7f0c341bce59 [ 1085.553670][T11970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.553688][T11970] RSP: 002b:00007f0c323d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1085.553709][T11970] RAX: ffffffffffffffda RBX: 00007f0c34436180 RCX: 00007f0c341bce59 [ 1085.553725][T11970] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000006 [ 1085.553739][T11970] RBP: 00007f0c34252d6f R08: 0000000000000000 R09: 0000000000000000 [ 1085.553751][T11970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.553764][T11970] R13: 00007f0c34436218 R14: 00007f0c34436180 R15: 00007ffccd8cc7a8 [ 1085.553796][T11970] [ 1085.553840][T11970] Mem-Info: [ 1085.553851][T11970] active_anon:1765 inactive_anon:10242 isolated_anon:0 [ 1085.553851][T11970] active_file:20058 inactive_file:36634 isolated_file:0 [ 1085.553851][T11970] unevictable:768 dirty:15 writeback:0 [ 1085.553851][T11970] slab_reclaimable:12297 slab_unreclaimable:106544 [ 1085.553851][T11970] mapped:35900 shmem:7014 pagetables:1391 [ 1085.553851][T11970] sec_pagetables:0 bounce:0 [ 1085.553851][T11970] kernel_misc_reclaimable:0 [ 1085.553851][T11970] free:1299841 free_pcp:3257 free_cma:0 [ 1085.553908][T11970] Node 0 active_anon:7060kB inactive_anon:40968kB active_file:79868kB inactive_file:146536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143528kB dirty:60kB writeback:0kB shmem:26520kB kernel_stack:13276kB pagetables:5396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1085.553962][T11970] Node 1 active_anon:0kB inactive_anon:0kB active_file:364kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1085.554013][T11970] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1085.554068][T11970] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1085.554106][T11970] Node 0 DMA32 free:1254748kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7060kB inactive_anon:40968kB active_file:79868kB inactive_file:146536kB unevictable:1536kB writepending:60kB zspages:0kB present:3129332kB managed:2566516kB mlocked:0kB bounce:0kB free_pcp:13028kB local_pcp:4040kB free_cma:0kB [ 1085.554172][T11970] lowmem_reserve[]: 0 0 0 0 0 [ 1085.554206][T11970] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:212kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1085.554265][T11970] lowmem_reserve[]: 0 0 0 0 0 [ 1085.554298][T11970] Node 1 Normal free:3929256kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:364kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1085.554359][T11970] lowmem_reserve[]: 0 0 0 0 0 [ 1085.554393][T11970] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1085.554512][T11970] Node 0 DMA32: 2107*4kB (UME) 3086*8kB (UE) 2097*16kB (UME) 577*32kB (UE) 939*64kB (UME) 742*128kB (UME) 573*256kB (UM) 357*512kB (UME) 191*1024kB (UM) 81*2048kB (UME) 79*4096kB (UM) = 1254732kB [ 1085.554657][T11970] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1085.554750][T11970] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 9*16kB (UM) 8*32kB (U) 6*64kB (UM) 3*128kB (U) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 957*4096kB (M) = 3929256kB [ 1085.554896][T11970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1085.554913][T11970] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1085.554929][T11970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1085.554946][T11970] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1085.554962][T11970] 63702 total pagecache pages [ 1085.554970][T11970] 0 pages in swap cache [ 1085.554977][T11970] Free swap = 124996kB [ 1085.554985][T11970] Total swap = 124996kB [ 1085.554992][T11970] 2097051 pages RAM [ 1085.555000][T11970] 0 pages HighMem/MovableOnly [ 1085.555007][T11970] 423754 pages reserved [ 1085.555014][T11970] 0 pages cma reserved [ 1087.053066][ T823] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1087.083203][T11985] Bluetooth: MGMT ver 1.23 [ 1087.140151][T11385] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1087.208047][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 1087.222226][ T823] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1087.222251][ T823] usb 4-1: config 0 has no interface number 0 [ 1087.222293][ T823] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1087.228967][ T823] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1087.228995][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.229012][ T823] usb 4-1: Product: syz [ 1087.229025][ T823] usb 4-1: Manufacturer: syz [ 1087.229039][ T823] usb 4-1: SerialNumber: syz [ 1087.298966][ T823] usb 4-1: config 0 descriptor?? [ 1087.324774][ T823] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1087.324812][ T823] em28xx 4-1:0.132: Video interface 132 found: [ 1087.454784][T11385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1087.720267][T11385] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1088.470111][ T823] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1088.671143][T11385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1088.727287][T11385] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1088.807525][T11385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1088.909496][T11974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.910436][T11974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.963282][T11974] trusted_key: encrypted_key: insufficient parameters specified [ 1089.027622][T12020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1378'. [ 1089.809467][ T823] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1089.809500][ T823] em28xx 4-1:0.132: board has no eeprom [ 1089.874726][ T823] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1089.874754][ T823] em28xx 4-1:0.132: analog set to bulk mode. [ 1089.876147][ T5759] em28xx 4-1:0.132: Registering V4L2 extension [ 1090.108186][T11385] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1090.153062][ T5759] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1090.247499][ T5759] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1090.249807][ T5759] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1090.250196][ T5759] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1090.265490][T11385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1090.328086][ T823] usb 4-1: USB disconnect, device number 22 [ 1090.330320][ T823] em28xx 4-1:0.132: Disconnecting em28xx [ 1090.451111][ T5759] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1090.451134][ T5759] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1090.451147][ T5759] em28xx 4-1:0.132: No AC97 audio processor [ 1090.482948][ T824] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1090.591459][ T5759] usb 4-1: Decoder not found [ 1090.591481][ T5759] em28xx 4-1:0.132: failed to create media graph [ 1090.591516][ T5759] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1090.635485][ T824] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.635530][ T824] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1090.635563][ T824] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1090.635582][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.637717][ T5759] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1090.639606][ T823] em28xx 4-1:0.132: Closing input extension [ 1090.800079][ T824] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1090.907294][ T823] em28xx 4-1:0.132: Freeing device [ 1091.260408][T12063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1390'. [ 1092.137545][ T824] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1092.205686][ T824] usb 1-1: USB disconnect, device number 22 [ 1093.029334][T12070] ALSA: seq fatal error: cannot create timer (-16) [ 1094.423419][ T66] bridge_slave_1: left allmulticast mode [ 1094.423453][ T66] bridge_slave_1: left promiscuous mode [ 1094.423751][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.532715][T12111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1409'. [ 1097.095872][ T66] bridge_slave_0: left allmulticast mode [ 1097.095909][ T66] bridge_slave_0: left promiscuous mode [ 1097.096148][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.195356][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.254711][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.274883][ T66] bond0 (unregistering): Released all slaves [ 1098.726912][T12147] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1424'. [ 1098.816436][T12147] can0: slcan on ptm0. [ 1099.090694][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1099.168810][ T66] hsr_slave_0: left promiscuous mode [ 1099.230140][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1099.239588][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1099.245420][ T66] hsr_slave_1: left promiscuous mode [ 1099.246280][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.246296][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.260055][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1099.263509][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1099.389176][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1099.389199][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.613775][ T66] veth1_macvtap: left promiscuous mode [ 1099.613839][ T66] veth0_macvtap: left promiscuous mode [ 1099.614019][ T66] veth1_vlan: left promiscuous mode [ 1099.614113][ T66] veth0_vlan: left promiscuous mode [ 1100.260254][ T9165] libceph: connect (1)[c::]:6789 error -101 [ 1100.285296][ T9165] libceph: mon0 (1)[c::]:6789 connect error [ 1100.297872][T12145] ceph: No mds server is up or the cluster is laggy [ 1100.366290][ T9165] libceph: connect (1)[c::]:6789 error -101 [ 1100.366404][ T9165] libceph: mon0 (1)[c::]:6789 connect error [ 1100.680805][ T9165] libceph: connect (1)[c::]:6789 error -101 [ 1100.680999][ T9165] libceph: mon0 (1)[c::]:6789 connect error [ 1101.423107][ T5644] Bluetooth: hci5: command tx timeout [ 1101.463748][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1101.523649][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1102.114519][T12143] can0 (unregistered): slcan off ptm0. [ 1102.316275][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1102.828018][ T5620] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1103.002975][ T5620] usb 1-1: Using ep0 maxpacket: 32 [ 1103.009280][ T5620] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1103.009309][ T5620] usb 1-1: config 0 has no interface number 0 [ 1103.009360][ T5620] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1103.077530][ T5620] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1103.077563][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.077584][ T5620] usb 1-1: Product: syz [ 1103.077606][ T5620] usb 1-1: Manufacturer: syz [ 1103.077620][ T5620] usb 1-1: SerialNumber: syz [ 1103.158129][ T5620] usb 1-1: config 0 descriptor?? [ 1103.222674][ T5620] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1103.222709][ T5620] em28xx 1-1:0.132: Video interface 132 found: [ 1103.513267][ T5644] Bluetooth: hci5: command tx timeout [ 1103.637576][ T5620] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1104.087682][T12249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.102599][T12249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.109933][T12249] trusted_key: encrypted_key: insufficient parameters specified [ 1104.228109][ T5620] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1104.228145][ T5620] em28xx 1-1:0.132: board has no eeprom [ 1104.282971][ T5620] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1104.282999][ T5620] em28xx 1-1:0.132: analog set to bulk mode. [ 1104.321753][ T824] em28xx 1-1:0.132: Registering V4L2 extension [ 1104.384268][ T5620] usb 1-1: USB disconnect, device number 23 [ 1104.417952][ T5620] em28xx 1-1:0.132: Disconnecting em28xx [ 1105.577392][ T9228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1105.608645][ T4912] Bluetooth: hci5: command tx timeout [ 1105.611913][ T9228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1105.655770][ T9228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1105.719444][ T9228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1105.720215][ T9228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1105.879751][ T824] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1105.879775][ T824] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1105.879787][ T824] em28xx 1-1:0.132: No AC97 audio processor [ 1105.913326][ T824] usb 1-1: Decoder not found [ 1105.913344][ T824] em28xx 1-1:0.132: failed to create media graph [ 1105.913380][ T824] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1105.944350][ T824] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1105.944395][ T5620] em28xx 1-1:0.132: Closing input extension [ 1105.999810][T12316] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1476'. [ 1106.051916][ T5620] em28xx 1-1:0.132: Freeing device [ 1106.159977][T12316] can0: slcan on ptm0. [ 1106.308495][T12323] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1478'. [ 1106.563085][T12311] can0 (unregistered): slcan off ptm0. [ 1107.663125][ T5644] Bluetooth: hci5: command tx timeout [ 1107.911893][ T5644] Bluetooth: hci0: command tx timeout [ 1107.945758][T12368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1488'. [ 1109.855362][T12408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1500'. [ 1110.692938][ T5644] Bluetooth: hci0: command tx timeout [ 1112.083648][T12156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.083816][T12156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.084042][T12156] bridge_slave_0: entered allmulticast mode [ 1112.089644][T12156] bridge_slave_0: entered promiscuous mode [ 1112.131363][T12156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.131997][T12156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.132230][T12156] bridge_slave_1: entered allmulticast mode [ 1112.161134][T12156] bridge_slave_1: entered promiscuous mode [ 1112.221410][T12156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.250161][T12156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.307685][T12156] team0: Port device team_slave_0 added [ 1112.311931][T12156] team0: Port device team_slave_1 added [ 1112.369173][T12156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.369204][T12156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.369228][T12156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.371497][T12156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.371511][T12156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.371534][T12156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.537445][T12156] hsr_slave_0: entered promiscuous mode [ 1112.538765][T12156] hsr_slave_1: entered promiscuous mode [ 1112.539714][T12156] debugfs: 'hsr0' already exists in 'hsr' [ 1112.539753][T12156] Cannot create hsr debugfs directory [ 1114.325677][ T5644] Bluetooth: hci0: command tx timeout [ 1116.453393][ T5644] Bluetooth: hci0: command tx timeout [ 1116.555144][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.926455][T12499] comedi comedi3: board detection failed [ 1118.212332][T12522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1544'. [ 1118.215148][T12522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1544'. [ 1119.837143][T12550] tap0: tun_chr_ioctl cmd 1074812118 [ 1120.116098][T12566] comedi comedi3: board detection failed [ 1120.734913][ T66] bridge_slave_1: left allmulticast mode [ 1120.734948][ T66] bridge_slave_1: left promiscuous mode [ 1120.735195][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.806073][ T66] bridge_slave_0: left allmulticast mode [ 1120.806096][ T66] bridge_slave_0: left promiscuous mode [ 1120.806273][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.934037][ T5620] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1121.118117][ T5620] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1121.118166][ T5620] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1121.118204][ T5620] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1121.118227][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.179307][T12581] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1121.217408][ T5620] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1121.742537][ T5620] usb 1-1: USB disconnect, device number 24 [ 1122.000267][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.114367][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.201887][ T66] bond0 (unregistering): Released all slaves [ 1123.482079][T12308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.495218][T12308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.498834][T12308] bridge_slave_0: entered allmulticast mode [ 1123.586959][T12308] bridge_slave_0: entered promiscuous mode [ 1124.727360][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1127.418298][T12642] orangefs_mount: mount request failed with -4 [ 1127.883961][T12308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.884052][T12308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.884219][T12308] bridge_slave_1: entered allmulticast mode [ 1127.886541][T12308] bridge_slave_1: entered promiscuous mode [ 1128.442996][ T66] hsr_slave_0: left promiscuous mode [ 1128.484215][ T66] hsr_slave_1: left promiscuous mode [ 1128.487067][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.534087][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.655867][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1129.733775][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1130.204637][T12308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.231610][T12308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.339421][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'. [ 1130.342663][T12727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1631'. [ 1131.392405][T12308] team0: Port device team_slave_0 added [ 1131.411875][T12308] team0: Port device team_slave_1 added [ 1131.482800][T12308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.482846][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.482872][T12308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.485178][T12308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.485192][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.485217][T12308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.654280][T12308] hsr_slave_0: entered promiscuous mode [ 1131.655652][T12308] hsr_slave_1: entered promiscuous mode [ 1131.656617][T12308] debugfs: 'hsr0' already exists in 'hsr' [ 1131.656640][T12308] Cannot create hsr debugfs directory [ 1133.339476][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'. [ 1133.342956][T12760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1640'. [ 1135.834036][ T824] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1135.985639][ T824] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.985691][ T824] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1135.985732][ T824] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1135.985754][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.101549][ T824] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1136.411105][ T824] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1136.482524][ T9165] usb 1-1: USB disconnect, device number 25 [ 1136.554516][ T66] bridge_slave_1: left allmulticast mode [ 1136.554553][ T66] bridge_slave_1: left promiscuous mode [ 1136.554818][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.668158][ T66] bridge_slave_0: left allmulticast mode [ 1136.668192][ T66] bridge_slave_0: left promiscuous mode [ 1136.668461][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.036599][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.123851][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.216419][ T66] bond0 (unregistering): Released all slaves [ 1139.863308][ T66] hsr_slave_0: left promiscuous mode [ 1139.905844][ T66] hsr_slave_1: left promiscuous mode [ 1139.906827][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1139.953838][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.335462][ T824] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1140.484278][ T824] usb 1-1: Using ep0 maxpacket: 16 [ 1140.486661][ T824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.486710][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1140.486737][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1140.486757][ T824] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1140.486779][ T824] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1140.488232][ T824] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1140.488258][ T824] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1140.488279][ T824] usb 1-1: Manufacturer: syz [ 1140.575951][ T824] usb 1-1: config 0 descriptor?? [ 1141.157682][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1141.222263][ T824] rc_core: IR keymap rc-hauppauge not found [ 1141.392703][ T824] Registered IR keymap rc-empty [ 1141.404264][ T824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1141.424980][ T824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1141.873180][ T824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1141.880003][ T824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 1141.930471][ T824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1141.943075][ T824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1141.963096][ T824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1141.983146][ T824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1142.002983][ T824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1142.023229][ T824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1142.043174][ T824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1142.064472][ T824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1142.083029][ T824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1142.099493][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1142.103058][ T824] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1142.229901][ T824] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1142.229928][ T824] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1142.308801][ T824] usb 1-1: USB disconnect, device number 26 [ 1143.188574][T12953] tap0: tun_chr_ioctl cmd 2147767511 [ 1143.647217][T12308] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1143.679595][T12995] comedi comedi3: board detection failed [ 1143.737355][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1143.798823][T12308] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1143.978040][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1144.017035][T12308] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1144.225965][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1144.978628][T12308] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1145.134407][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1146.294542][T13031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1146.536588][T12156] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1146.584800][T12156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1146.587460][T12156] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1146.660792][T12156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1146.690815][T12156] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1146.755286][T12156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1146.761133][T12156] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1146.817622][T12156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1147.165383][T12308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.354086][ T823] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1147.425429][T13063] comedi comedi3: board detection failed [ 1147.470925][T12308] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.504184][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 1147.526412][ T823] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1147.526440][ T823] usb 4-1: config 0 has no interface number 0 [ 1147.545156][ T823] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1147.545175][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.545187][ T823] usb 4-1: Product: syz [ 1147.545194][ T823] usb 4-1: Manufacturer: syz [ 1147.545202][ T823] usb 4-1: SerialNumber: syz [ 1147.730087][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.730242][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.765844][ T823] usb 4-1: config 0 descriptor?? [ 1147.839429][ T5670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.839555][ T5670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.239680][ T823] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1148.239712][ T823] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1148.430476][T12156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.770470][T13087] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1742'. [ 1148.995491][T12156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.067163][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.067291][ T5670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.177959][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.178083][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.481359][ T823] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1149.482653][ T823] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 1150.761294][ T10] usb 4-1: USB disconnect, device number 23 [ 1150.913521][T12308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.425035][T12156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.717035][T13149] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1759'. [ 1151.780356][T12308] veth0_vlan: entered promiscuous mode [ 1151.827907][T12308] veth1_vlan: entered promiscuous mode [ 1153.053998][T12308] veth0_macvtap: entered promiscuous mode [ 1153.089406][T12308] veth1_macvtap: entered promiscuous mode [ 1153.181527][T12308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.246954][T12308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.282249][ T5670] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.284201][ T5670] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.284246][ T5670] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.284280][ T5670] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.433069][T13172] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1765'. [ 1154.752494][T12156] veth0_vlan: entered promiscuous mode [ 1154.900225][ T8680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.900247][ T8680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.982748][T12156] veth1_vlan: entered promiscuous mode [ 1155.125084][ T9881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.125104][ T9881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.204468][T12156] veth0_macvtap: entered promiscuous mode [ 1155.494048][T12156] veth1_macvtap: entered promiscuous mode [ 1155.660919][T12156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.728423][T12156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.770939][ T8680] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.816107][ T8680] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.820980][ T8680] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.821026][ T8680] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.006239][T13165] syz.0.1763 (13165): drop_caches: 2 [ 1156.551316][T13201] netlink: 96 bytes leftover after parsing attributes in process `syz.5.32'. [ 1160.941767][T13221] comedi comedi3: board detection failed [ 1161.612742][T13233] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1789'. [ 1162.426075][ T9228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1162.487871][ T9228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1162.513730][ T9228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1162.576130][ T9228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1162.621247][ T9228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1163.837818][ T9165] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1164.125548][ T9165] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1164.125571][ T9165] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1164.125593][ T9165] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1164.125605][ T9165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.833430][ T9228] Bluetooth: hci3: command tx timeout [ 1164.838441][T13242] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1164.870841][ T9165] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1165.308744][ T9165] usb 6-1: USB disconnect, device number 2 [ 1166.046063][T13274] comedi comedi3: board detection failed [ 1166.086039][T13278] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1801'. [ 1166.863838][ T5644] Bluetooth: hci3: command tx timeout [ 1166.982579][ T9881] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.144710][T13288] warning: `syz.0.1807' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1168.356051][T13314] comedi comedi3: board detection failed [ 1168.943281][ T5644] Bluetooth: hci3: command tx timeout [ 1169.097537][T13320] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1812'. [ 1169.206209][ T9881] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.023840][ T5644] Bluetooth: hci3: command tx timeout [ 1171.378167][ T5644] Bluetooth: Unknown LE signaling command 0x1d [ 1171.378191][ T5644] Bluetooth: Wrong link type (-22) [ 1171.818121][T13351] netlink: 'syz.3.1832': attribute type 13 has an invalid length. [ 1171.818405][T13351] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1832'. [ 1172.451676][ T9881] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.967556][T13351] : renamed from veth1_to_team (while UP) [ 1173.032430][T13358] team0: entered promiscuous mode [ 1173.032479][T13358] team_slave_0: entered promiscuous mode [ 1173.032703][T13358] team_slave_1: entered promiscuous mode [ 1174.529302][ T9881] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.457615][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.248812][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1179.933327][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1180.131546][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1180.131575][ T10] usb 6-1: config 0 has no interface number 0 [ 1180.149031][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1180.149061][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.149081][ T10] usb 6-1: Product: syz [ 1180.149095][ T10] usb 6-1: Manufacturer: syz [ 1180.149117][ T10] usb 6-1: SerialNumber: syz [ 1180.180633][ T10] usb 6-1: config 0 descriptor?? [ 1180.603411][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1180.603441][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1181.448668][T13226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.448791][T13226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.448999][T13226] bridge_slave_0: entered allmulticast mode [ 1181.481304][T13226] bridge_slave_0: entered promiscuous mode [ 1181.495413][T13226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.498208][T13226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.498422][T13226] bridge_slave_1: entered allmulticast mode [ 1181.502743][T13226] bridge_slave_1: entered promiscuous mode [ 1181.972367][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1181.992296][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 1184.055589][ T10] usb 6-1: USB disconnect, device number 3 [ 1185.868440][T13526] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1900'. [ 1187.139814][T13226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.189394][T13226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.241890][T13226] team0: Port device team_slave_0 added [ 1187.256472][T13226] team0: Port device team_slave_1 added [ 1188.266119][T13556] orangefs_mount: mount request failed with -4 [ 1188.655643][ T9881] bridge_slave_1: left allmulticast mode [ 1188.655677][ T9881] bridge_slave_1: left promiscuous mode [ 1188.655929][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.728069][ T9881] bridge_slave_0: left allmulticast mode [ 1188.728103][ T9881] bridge_slave_0: left promiscuous mode [ 1188.728358][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.154718][T13582] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1919'. [ 1190.162553][ T9881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.233722][ T9881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.256683][ T9881] bond0 (unregistering): Released all slaves [ 1190.585076][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1190.825863][T13582] can0: slcan on ptm0. [ 1190.832139][T13226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.832155][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.832181][T13226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.103102][ T5760] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1191.373356][T13226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.373373][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.373399][T13226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.539476][ T5760] usb 4-1: Using ep0 maxpacket: 32 [ 1192.032675][T13610] orangefs_mount: mount request failed with -4 [ 1192.241497][ T5760] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1192.241524][ T5760] usb 4-1: config 0 has no interface number 0 [ 1192.275526][ T5760] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1192.275554][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.275571][ T5760] usb 4-1: Product: syz [ 1192.275585][ T5760] usb 4-1: Manufacturer: syz [ 1192.275597][ T5760] usb 4-1: SerialNumber: syz [ 1192.317274][ T5760] usb 4-1: config 0 descriptor?? [ 1192.342104][T13582] can0 (unregistered): slcan off ptm0. [ 1192.764737][ T5760] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1192.764768][ T5760] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1193.723688][ T9881] hsr_slave_0: left promiscuous mode [ 1193.743190][ T9881] hsr_slave_1: left promiscuous mode [ 1193.744141][ T9881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.744158][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.309538][T13641] orangefs_mount: mount request failed with -4 [ 1194.523719][ T9881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.523744][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.646151][ T9881] veth1_macvtap: left promiscuous mode [ 1194.646237][ T9881] veth0_macvtap: left promiscuous mode [ 1194.646441][ T9881] veth1_vlan: left promiscuous mode [ 1194.646580][ T9881] veth0_vlan: left promiscuous mode [ 1194.694779][ T5760] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 1194.695089][ T5760] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1194.942937][ T823] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1195.092941][ T823] usb 6-1: Using ep0 maxpacket: 16 [ 1195.098923][ T823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.098966][ T823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1195.098982][ T823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1195.098993][ T823] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1195.099005][ T823] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1195.100034][ T823] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1195.100059][ T823] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1195.100078][ T823] usb 6-1: Manufacturer: syz [ 1195.189320][ T823] usb 6-1: config 0 descriptor?? [ 1195.515016][ T9881] team0 (unregistering): Port device team_slave_1 removed [ 1195.587328][ T9881] team0 (unregistering): Port device team_slave_0 removed [ 1195.603091][ T823] rc_core: IR keymap rc-hauppauge not found [ 1195.603113][ T823] Registered IR keymap rc-empty [ 1195.603264][ T823] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1195.638884][ T823] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1195.776821][ T823] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1195.780014][ T823] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input15 [ 1195.790423][ T9249] usb 4-1: USB disconnect, device number 24 [ 1195.830813][ T823] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1195.847403][ T823] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1195.863057][ T823] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1195.914154][T13226] hsr_slave_0: entered promiscuous mode [ 1195.915386][T13226] hsr_slave_1: entered promiscuous mode [ 1195.916237][T13226] debugfs: 'hsr0' already exists in 'hsr' [ 1195.916259][T13226] Cannot create hsr debugfs directory [ 1196.022580][ T823] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.033075][ T823] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.054525][ T823] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.073068][ T823] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.093017][ T823] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.116214][ T823] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.133012][ T823] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1196.200902][ T823] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1196.200928][ T823] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1196.245330][ T823] usb 6-1: USB disconnect, device number 4 [ 1196.251036][T13680] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1963'. [ 1196.624360][T13686] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1964'. [ 1197.612252][T13698] fuse: Bad value for 'fd' [ 1198.022991][ T5760] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1198.225686][ T5760] usb 1-1: Using ep0 maxpacket: 32 [ 1198.242765][ T5760] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1198.242910][ T5760] usb 1-1: config 0 has no interface number 0 [ 1198.246480][ T5760] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1198.246506][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.246526][ T5760] usb 1-1: Product: syz [ 1198.246539][ T5760] usb 1-1: Manufacturer: syz [ 1198.246554][ T5760] usb 1-1: SerialNumber: syz [ 1198.263630][ T5760] usb 1-1: config 0 descriptor?? [ 1198.832106][ T5760] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1198.832138][ T5760] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1199.017426][T13732] fuse: Bad value for 'fd' [ 1199.625851][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1199.671116][T13744] Bluetooth: MGMT ver 1.23 [ 1200.740797][T13756] input: syz1 as /devices/virtual/input/input16 [ 1200.765352][ T5760] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 1200.765716][ T5760] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 1203.548410][ T9249] usb 1-1: USB disconnect, device number 27 [ 1204.717327][ T9249] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1204.872966][ T9249] usb 1-1: device descriptor read/64, error -71 [ 1205.112958][ T9249] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1205.273812][ T9249] usb 1-1: device descriptor read/64, error -71 [ 1205.385563][ T9249] usb usb1-port1: attempt power cycle [ 1205.417903][ T5620] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1205.583264][ T5620] usb 6-1: Using ep0 maxpacket: 32 [ 1205.594768][ T5620] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1205.594794][ T5620] usb 6-1: config 0 has no interface number 0 [ 1205.612458][ T5620] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1205.612488][ T5620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.612507][ T5620] usb 6-1: Product: syz [ 1205.612523][ T5620] usb 6-1: Manufacturer: syz [ 1205.612536][ T5620] usb 6-1: SerialNumber: syz [ 1205.620401][ T5620] usb 6-1: config 0 descriptor?? [ 1205.827623][ T9249] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1205.858280][ T9249] usb 1-1: device descriptor read/8, error -71 [ 1206.111226][ T5620] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1206.111258][ T5620] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1206.153658][ T9249] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1206.183631][ T9249] usb 1-1: device descriptor read/8, error -71 [ 1206.294492][ T9249] usb usb1-port1: unable to enumerate USB device [ 1207.857228][ T5620] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 1207.857527][ T5620] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1209.385008][ T5626] usb 6-1: USB disconnect, device number 5 [ 1212.403960][ T5620] IPVS: starting estimator thread 0... [ 1212.427640][T13935] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1212.512956][T13936] IPVS: using max 9 ests per chain, 21600 per kthread [ 1212.690689][ T5644] Bluetooth: Unknown LE signaling command 0x1d [ 1212.690710][ T5644] Bluetooth: Wrong link type (-22) [ 1212.741133][T13932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1212.924143][T13226] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1213.088655][T13226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1213.109735][T13226] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1213.651512][T13226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1213.668596][T13226] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1213.829407][T13226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1213.857374][T13226] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1213.951212][T13226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1214.238445][T13979] netlink: 'syz.0.2054': attribute type 1 has an invalid length. [ 1214.238466][T13979] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2054'. [ 1215.210512][T13226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.281520][T13226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.349675][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.353031][ T5796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.437356][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.437463][ T5796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.283598][T14009] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2062'. [ 1218.254957][T14027] input: syz1 as /devices/virtual/input/input17 [ 1221.001445][T14035] Invalid ELF header type: 3 != 1 [ 1221.022428][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2071'. [ 1224.825404][T14048] netlink: 'syz.0.2073': attribute type 1 has an invalid length. [ 1224.825423][T14048] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2073'. [ 1225.042996][T14052] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2075'. [ 1225.887368][ T9228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1225.967832][ T9228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1226.008477][ T9228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1226.023081][ T9228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1226.029466][ T9228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1226.210685][T14046] can0: slcan on ptm0. [ 1226.412379][T14046] can0 (unregistered): slcan off ptm0. [ 1226.749760][T14078] input: syz1 as /devices/virtual/input/input18 [ 1228.223370][ T9228] Bluetooth: hci3: command tx timeout [ 1230.303215][ T9228] Bluetooth: hci3: command tx timeout [ 1230.703138][ T9228] Bluetooth: hci0: command 0x0406 tx timeout [ 1230.756183][T14094] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2089'. [ 1231.111546][T14099] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2090'. [ 1232.305976][T14122] Invalid ELF header type: 3 != 1 [ 1232.344338][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2097'. [ 1232.444561][ T5644] Bluetooth: hci3: command tx timeout [ 1233.541501][T14154] input: syz1 as /devices/virtual/input/input19 [ 1234.040997][T14172] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2119'. [ 1234.482518][ T5644] Bluetooth: hci3: command tx timeout [ 1235.025317][T14193] input: syz1 as /devices/virtual/input/input20 [ 1235.097743][T14056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.097811][T14056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.097969][T14056] bridge_slave_0: entered allmulticast mode [ 1235.101748][T14056] bridge_slave_0: entered promiscuous mode [ 1235.780160][T14056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.780355][T14056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.780562][T14056] bridge_slave_1: entered allmulticast mode [ 1235.787537][T14056] bridge_slave_1: entered promiscuous mode [ 1236.095650][T14209] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2134'. [ 1236.643793][T14056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.679265][T14056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.990428][ T66] bridge_slave_1: left allmulticast mode [ 1236.990463][ T66] bridge_slave_1: left promiscuous mode [ 1236.990706][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.046113][ T66] bridge_slave_0: left allmulticast mode [ 1237.046147][ T66] bridge_slave_0: left promiscuous mode [ 1237.046436][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.816048][T14231] syz.0.2140 (14231) used greatest stack depth: 17592 bytes left [ 1238.871233][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.455721][T14263] input: syz1 as /devices/virtual/input/input21 [ 1240.164489][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.248063][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.296090][ T66] bond0 (unregistering): Released all slaves [ 1240.480495][T14244] C: renamed from veth1_to_team (while UP) [ 1240.514276][T14244] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2145'. [ 1240.521394][T14056] team0: Port device team_slave_0 added [ 1240.585099][T14056] team0: Port device team_slave_1 added [ 1240.798972][T14056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.798988][T14056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.799010][T14056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.806327][T14056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.806344][T14056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.806367][T14056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.583079][ T66] hsr_slave_0: left promiscuous mode [ 1242.652993][ T5760] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1242.696263][ T66] hsr_slave_1: left promiscuous mode [ 1242.697340][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.773607][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.806894][ T5760] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1242.806930][ T5760] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1242.806969][ T5760] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1242.806992][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.828859][T14326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1242.888492][ T5760] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1243.643368][ T5760] usb 4-1: USB disconnect, device number 25 [ 1243.735384][T14316] syz.0.2178 (14316): drop_caches: 2 [ 1244.706417][T14381] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1245.074434][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1245.166937][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1245.703993][T14056] hsr_slave_0: entered promiscuous mode [ 1245.707037][T14056] hsr_slave_1: entered promiscuous mode [ 1245.709565][T14056] debugfs: 'hsr0' already exists in 'hsr' [ 1245.709589][T14056] Cannot create hsr debugfs directory [ 1245.709786][T14340] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2187'. [ 1245.714420][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1245.715968][T14380] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1245.904217][T14401] input: syz1 as /devices/virtual/input/input22 [ 1247.061703][T12791] udevd[12791]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1247.062698][T12791] udevd[12791]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1248.444814][T14432] Can't find ip_set type hash:ne [ 1248.497173][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2224'. [ 1248.844105][ T5620] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1249.096043][ T5620] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1249.096079][ T5620] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1249.096126][ T5620] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1249.096150][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.362201][T14444] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1249.384698][ T5620] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1249.562137][T14449] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2225'. [ 1249.949058][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1250.048969][ T5620] usb 1-1: USB disconnect, device number 32 [ 1250.338278][T14462] input: syz1 as /devices/virtual/input/input23 [ 1251.029504][T14423] syz.5.2214 (14423): drop_caches: 2 [ 1251.641597][T14488] comedi comedi1: pcl818: I/O base address or length out of range [ 1252.987351][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2243'. [ 1253.648012][ T5760] IPVS: starting estimator thread 0... [ 1253.652941][ T9165] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1253.733713][T14515] IPVS: using max 15 ests per chain, 36000 per kthread [ 1253.815167][ T9165] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1253.815205][ T9165] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1253.815244][ T9165] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1253.815267][ T9165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.890103][T14504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1253.910983][ T9165] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1254.246891][ T9165] usb 1-1: USB disconnect, device number 33 [ 1254.698801][T14508] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1256.157647][T14552] input: syz1 as /devices/virtual/input/input24 [ 1257.551538][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2266'. [ 1258.702662][T14611] input: syz1 as /devices/virtual/input/input25 [ 1260.432591][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2283'. [ 1260.830416][T14642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.976567][T14670] syz.0.2291 (14670): drop_caches: 2 [ 1264.362628][T14056] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1264.412559][T14056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1264.477195][T14056] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1264.705548][T14056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1264.789517][T14056] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1264.873864][T14056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1265.206311][T14056] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1265.254827][T14056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1266.182606][T14734] syz.5.2307 (14734): drop_caches: 2 [ 1269.704262][T14829] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2341'. [ 1279.991232][ T9228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1280.129257][ T9228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1280.130873][ T9228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1280.134801][ T9228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1280.135563][ T9228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1280.892291][ T5637] ------------[ cut here ]------------ [ 1280.892307][ T5637] kcov->t != t [ 1280.892324][ T5637] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#0: syz-executor/5637 [ 1280.892367][ T5637] Modules linked in: [ 1280.892390][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1280.892415][ T5637] Tainted: [L]=SOFTLOCKUP [ 1280.892422][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1280.892435][ T5637] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1280.892458][ T5637] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 b3 55 00 48 89 df 5b 41 5e 41 5f e9 39 70 5b 00 7c 1c 5b 41 5e 41 5f e9 bd 68 5c 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 eb 00 5b 09 48 89 df be 03 00 [ 1280.892474][ T5637] RSP: 0018:ffffc9000441fae0 EFLAGS: 00010287 [ 1280.892491][ T5637] RAX: 7fdc88ffb7ae6600 RBX: ffff888035053d00 RCX: 0000000000000000 [ 1280.892505][ T5637] RDX: 00000000c671022c RSI: ffffffff8ba751c0 RDI: 00000000ffffffff [ 1280.892518][ T5637] RBP: ffffc9000441fc30 R08: ffffffff8b1f78e0 R09: ffffffff8dfc81c0 [ 1280.892532][ T5637] R10: dffffc0000000000 R11: fffffbfff1f11fbf R12: dffffc0000000000 [ 1280.892544][ T5637] R13: 0000000000000009 R14: ffff888035053d08 R15: ffff888037b59ec0 [ 1280.892557][ T5637] FS: 00005555803b5500(0000) GS:ffff888126173000(0000) knlGS:0000000000000000 [ 1280.892572][ T5637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1280.892585][ T5637] CR2: 0000555595469a38 CR3: 00000000382bc000 CR4: 00000000003526f0 [ 1280.892603][ T5637] Call Trace: [ 1280.892610][ T5637] [ 1280.892620][ T5637] do_exit+0x150/0x22c0 [ 1280.892660][ T5637] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1280.892703][ T5637] ? lockdep_hardirqs_on+0x7a/0x110 [ 1280.892732][ T5637] ? __pfx_do_exit+0x10/0x10 [ 1280.892814][ T5637] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1280.892836][ T5637] ? reacquire_held_locks+0x104/0x190 [ 1280.892863][ T5637] ? rt_spin_lock+0x1e0/0x400 [ 1280.892884][ T5637] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1280.892913][ T5637] do_group_exit+0x21b/0x2d0 [ 1280.892941][ T5637] ? rt_spin_unlock+0x160/0x200 [ 1280.892964][ T5637] get_signal+0x1284/0x1330 [ 1280.893021][ T5637] arch_do_signal_or_restart+0xbc/0x840 [ 1280.893055][ T5637] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1280.893085][ T5637] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1280.893136][ T5637] exit_to_user_mode_loop+0x8c/0x4d0 [ 1280.893160][ T5637] ? rcu_is_watching+0x15/0xb0 [ 1280.893191][ T5637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.893215][ T5637] do_syscall_64+0x33e/0xf80 [ 1280.893241][ T5637] ? trace_irq_disable+0x3b/0x140 [ 1280.893265][ T5637] ? clear_bhb_loop+0x40/0x90 [ 1280.893290][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.893310][ T5637] RIP: 0033:0x7fd99826d68e [ 1280.893330][ T5637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1280.893348][ T5637] RSP: 002b:00007ffc38a249f8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1280.893369][ T5637] RAX: fffffffffffffe00 RBX: 00005555803b5500 RCX: 00007fd99826d68e [ 1280.893385][ T5637] RDX: 0000000040000000 RSI: 00007ffc38a24a9c RDI: ffffffffffffffff [ 1280.893400][ T5637] RBP: 00007ffc38a24a9c R08: 0000000000000000 R09: 0000000000000000 [ 1280.893414][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000209 [ 1280.893428][ T5637] R13: 00005555803c8a00 R14: 00000000001354c6 R15: 00007ffc38a24af0 [ 1280.893463][ T5637] [ 1280.893474][ T5637] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1280.893492][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1280.893520][ T5637] Tainted: [L]=SOFTLOCKUP [ 1280.893528][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1280.893541][ T5637] Call Trace: [ 1280.893549][ T5637] [ 1280.893560][ T5637] vpanic+0x56c/0xa60 [ 1280.893587][ T5637] ? __pfx__printk+0x10/0x10 [ 1280.893619][ T5637] ? __pfx_vpanic+0x10/0x10 [ 1280.893641][ T5637] ? is_bpf_text_address+0x292/0x2b0 [ 1280.893678][ T5637] ? is_bpf_text_address+0x26/0x2b0 [ 1280.893715][ T5637] panic+0xc5/0xd0 [ 1280.893739][ T5637] ? __pfx_panic+0x10/0x10 [ 1280.893780][ T5637] __warn+0x315/0x4c0 [ 1280.893801][ T5637] ? kcov_task_exit+0xf5/0x160 [ 1280.893825][ T5637] ? kcov_task_exit+0xf5/0x160 [ 1280.893848][ T5637] __report_bug+0x29a/0x540 [ 1280.893880][ T5637] ? kcov_task_exit+0xf5/0x160 [ 1280.893903][ T5637] ? __pfx___report_bug+0x10/0x10 [ 1280.893927][ T5637] ? try_to_take_rt_mutex+0x840/0xb00 [ 1280.893954][ T5637] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1280.893982][ T5637] ? rt_spin_lock+0x1e0/0x400 [ 1280.894005][ T5637] ? rt_spin_lock+0x1e0/0x400 [ 1280.894029][ T5637] ? kcov_task_exit+0xf5/0x160 [ 1280.894051][ T5637] report_bug+0x16a/0x220 [ 1280.894078][ T5637] ? kcov_task_exit+0xf5/0x160 [ 1280.894097][ T5637] ? kcov_task_exit+0xf7/0x160 [ 1280.894119][ T5637] handle_bug+0x9c/0x200 [ 1280.894148][ T5637] exc_invalid_op+0x1a/0x50 [ 1280.894177][ T5637] asm_exc_invalid_op+0x1a/0x20 [ 1280.894198][ T5637] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1280.894222][ T5637] Code: 10 00 00 48 8b bb 90 00 00 00 e8 46 b3 55 00 48 89 df 5b 41 5e 41 5f e9 39 70 5b 00 7c 1c 5b 41 5e 41 5f e9 bd 68 5c 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 eb 00 5b 09 48 89 df be 03 00 [ 1280.894240][ T5637] RSP: 0018:ffffc9000441fae0 EFLAGS: 00010287 [ 1280.894258][ T5637] RAX: 7fdc88ffb7ae6600 RBX: ffff888035053d00 RCX: 0000000000000000 [ 1280.894273][ T5637] RDX: 00000000c671022c RSI: ffffffff8ba751c0 RDI: 00000000ffffffff [ 1280.894288][ T5637] RBP: ffffc9000441fc30 R08: ffffffff8b1f78e0 R09: ffffffff8dfc81c0 [ 1280.894304][ T5637] R10: dffffc0000000000 R11: fffffbfff1f11fbf R12: dffffc0000000000 [ 1280.894320][ T5637] R13: 0000000000000009 R14: ffff888035053d08 R15: ffff888037b59ec0 [ 1280.894343][ T5637] ? rt_spin_lock+0x1e0/0x400 [ 1280.894373][ T5637] do_exit+0x150/0x22c0 [ 1280.894405][ T5637] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1280.894433][ T5637] ? lockdep_hardirqs_on+0x7a/0x110 [ 1280.894461][ T5637] ? __pfx_do_exit+0x10/0x10 [ 1280.894487][ T5637] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1280.894509][ T5637] ? reacquire_held_locks+0x104/0x190 [ 1280.894540][ T5637] ? rt_spin_lock+0x1e0/0x400 [ 1280.894563][ T5637] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1280.894594][ T5637] do_group_exit+0x21b/0x2d0 [ 1280.894623][ T5637] ? rt_spin_unlock+0x160/0x200 [ 1280.894653][ T5637] get_signal+0x1284/0x1330 [ 1280.894696][ T5637] arch_do_signal_or_restart+0xbc/0x840 [ 1280.894730][ T5637] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1280.894763][ T5637] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1280.894807][ T5637] exit_to_user_mode_loop+0x8c/0x4d0 [ 1280.894831][ T5637] ? rcu_is_watching+0x15/0xb0 [ 1280.894858][ T5637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.894880][ T5637] do_syscall_64+0x33e/0xf80 [ 1280.894906][ T5637] ? trace_irq_disable+0x3b/0x140 [ 1280.894927][ T5637] ? clear_bhb_loop+0x40/0x90 [ 1280.894949][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.894968][ T5637] RIP: 0033:0x7fd99826d68e [ 1280.894986][ T5637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1280.895001][ T5637] RSP: 002b:00007ffc38a249f8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1280.895020][ T5637] RAX: fffffffffffffe00 RBX: 00005555803b5500 RCX: 00007fd99826d68e [ 1280.895035][ T5637] RDX: 0000000040000000 RSI: 00007ffc38a24a9c RDI: ffffffffffffffff [ 1280.895049][ T5637] RBP: 00007ffc38a24a9c R08: 0000000000000000 R09: 0000000000000000 [ 1280.895063][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000209 [ 1280.895074][ T5637] R13: 00005555803c8a00 R14: 00000000001354c6 R15: 00007ffc38a24af0 [ 1280.895104][ T5637] [ 1280.895661][ T5637] Kernel Offset: disabled