last executing test programs: 1m26.767181595s ago: executing program 2 (id=2093): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d3", 0x31, 0x0, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100"/25) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="04") 1m25.628780857s ago: executing program 2 (id=2094): msgget(0x2, 0x200) 1m24.909214286s ago: executing program 2 (id=2097): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) mkdir(&(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 1m23.876579598s ago: executing program 2 (id=2099): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)) ioctl(r0, 0xc138fd0e, &(0x7f0000000000)) 1m22.176216877s ago: executing program 2 (id=2103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) 1m21.521013837s ago: executing program 3 (id=2107): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 1m21.436966488s ago: executing program 4 (id=2108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a3000000000090003"], 0xa4}}, 0x0) 1m21.312616297s ago: executing program 2 (id=2109): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000101711058000000000095000000001008"], 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9601"], 0x6e8a) 1m21.106856922s ago: executing program 0 (id=2110): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cdab01ef0001010203010902270001010080fa0904000003ff00000007058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x8000, 0x401) write(r1, &(0x7f0000000800)='abcd ef01', 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x0, 0x16, 0x3c, "9a67615908ad1494423505efddcacc335b2b3357d5cfa68ed79e0c2461f2013796d118fb8a8c2e513258ba9b4ee257a0a3c06b10ba544feacc898ac2"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000240)={0x20, 0x81, 0x3, "a6f1a8"}, &(0x7f0000000280)={0x20, 0x82, 0x3, "a26d62"}, &(0x7f00000002c0)={0x20, 0x83, 0x2, "b5ba"}, 0x0, &(0x7f0000000340)={0x20, 0x85, 0x3, "45b0a1"}}) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000000)) 1m19.75205378s ago: executing program 3 (id=2112): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc03010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x2, 0x40402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x7c, 0x2, &(0x7f0000000040)={0x20, "1bf44f0d0000000000000000000047568375038923ec02b61472ceb17c66f71968"}}) 1m19.581873694s ago: executing program 4 (id=2113): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc4) listen(r2, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4004010) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x8d0}, 0x24004080) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1m18.672866825s ago: executing program 1 (id=2114): syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x5}}}}, 0xf) 1m18.392898137s ago: executing program 3 (id=2115): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)={'c', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r1, &(0x7f0000000540)={'a', ' *:* ', 'm\x00'}, 0x8) 1m18.213928456s ago: executing program 1 (id=2116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000010905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4000) 1m17.959125148s ago: executing program 0 (id=2117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c80)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x100000008, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x8, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m17.884004645s ago: executing program 4 (id=2118): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x2400c040) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) 1m17.838149347s ago: executing program 1 (id=2119): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) write$tun(r2, 0x0, 0xfdef) ioctl$TIOCSLCKTRMIOS(r0, 0x5435, 0x0) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000300)) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x1a0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000ac0)='\x00X', 0x2}], 0x1) 1m17.266555329s ago: executing program 3 (id=2120): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)="de9f9577713674350dfcef9f29", 0xd) 1m17.255449167s ago: executing program 4 (id=2121): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r0, 0x0, 0x2) read(r0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 1m16.849958048s ago: executing program 0 (id=2122): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f00002f4000/0x3000)=nil, 0x3000, 0x9) syz_open_procfs$namespace(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m16.390608614s ago: executing program 1 (id=2123): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1800, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1m16.110472664s ago: executing program 3 (id=2124): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) sendmsg$alg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="b4538934e5ed7d50691e620ae62a7640f1531479a3fbd943cb500336343cfe98647dfa3356", 0x25}], 0x1, 0x0, 0x0, 0x10}, 0x54) 1m15.68308628s ago: executing program 0 (id=2125): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000001240)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) readv(r0, &(0x7f0000001380)=[{&(0x7f0000001280)=""/151, 0x97}, {&(0x7f0000001340)=""/31, 0x1f}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000004e80)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0xf4, 0x2}, {0xfff}}]}}, 0xf) 1m15.569897629s ago: executing program 1 (id=2126): r0 = socket(0x2b, 0x1, 0x1) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000003c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x2, @empty, 0x200}, 0x1c) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x8) landlock_restrict_self(0xffffffffffffffff, 0x8) landlock_restrict_self(0xffffffffffffffff, 0x0) 1m15.378970917s ago: executing program 4 (id=2127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1m14.619471688s ago: executing program 0 (id=2128): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 1m14.486778746s ago: executing program 1 (id=2129): socket$inet(0x2, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) readahead(r2, 0xe, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1m14.373878873s ago: executing program 0 (id=2130): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x2c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}}, 0x0) 1m14.309342028s ago: executing program 3 (id=2131): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 1m13.637673329s ago: executing program 4 (id=2132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x805}, @void, @eth={@random="16a2a85969e6", @broadcast, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@generic={0x8809}}}}, 0x1a) 1m6.148279669s ago: executing program 32 (id=2109): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000101711058000000000095000000001008"], 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9601"], 0x6e8a) 58.67076073s ago: executing program 33 (id=2130): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x2c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}}, 0x0) 58.582210772s ago: executing program 34 (id=2129): socket$inet(0x2, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"a2e3ad214fc7529b1b48470787f70e06d038e7ff7fc6e5539b3267078b089b3b08386c090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31340d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ed30c000000000000040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000007008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07845754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcdddd754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adca6f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfbb655548cf99c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad03f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a12810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de0ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac34b308e15fc37d06aeac289c0523f023e1ff7408c6087f1ab652f2ef91d4f2b0198080046da034e5c3f745a7ee8101a3934c54e24b48ec0275e2dd9bb96e222d8e904f6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759bc3daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) readahead(r2, 0xe, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 58.405383486s ago: executing program 35 (id=2131): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 57.073141749s ago: executing program 36 (id=2132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x805}, @void, @eth={@random="16a2a85969e6", @broadcast, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@generic={0x8809}}}}, 0x1a) 15.95682327s ago: executing program 6 (id=2145): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) ptrace(0x10, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffffb5404c40, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 11.760199497s ago: executing program 7 (id=2150): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000140)="925848b200", 0x5) 11.740297869s ago: executing program 6 (id=2151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000300), 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000c00)=0x3) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @multicast1}, @ib={0x1b, 0x7fff, 0x0, {"0000000000000000000000001200"}, 0xfffffffffffffffc, 0x100000000000001, 0x2}}}, 0x118) 10.902999211s ago: executing program 9 (id=2153): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4618100701050000000000000003003e"], 0x78) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 10.348571174s ago: executing program 7 (id=2154): setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') read$FUSE(r0, &(0x7f0000000f80)={0x2020}, 0x2020) 9.977131936s ago: executing program 9 (id=2155): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 9.70939821s ago: executing program 5 (id=2156): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x1}, {0x62}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x59, {0x0, 0xc, 0x0, "", 0x4c, "a1dfe1d9ad86f0209943c4b4a487da1909f6a28fa93e708d19613039a57cda4b18691954ddbbdac76d5b871778ce45d60a84526f54f98f1dbedf0022c3ebae129f8c4173d07c69d44d69a2c7"}, 0x18, "9cf5f56c0a3b19545ac09b256de9afd3943b24221bdadcea"}, 0x7d}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xfeff, 0x8000000, 0x2, '\x00', 0x657}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.678001647s ago: executing program 6 (id=2157): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x800082, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x9, 0x4, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x7, 0x400, 0x80, 0x7fffffffffffffff, 0x0, 0x10000, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.489884189s ago: executing program 7 (id=2158): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x3}, @device_b, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}}, 0x800) 8.586871957s ago: executing program 5 (id=2159): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x600) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) 8.266963183s ago: executing program 9 (id=2160): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000080, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4800) 7.99662788s ago: executing program 7 (id=2162): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000850}, 0x20040040) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') listxattr(&(0x7f0000000080)='./mydev/ttyS0\x00', &(0x7f0000000140)=""/78, 0x4e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x12500, 0x0) close_range(r0, r5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x8a9f06c3e105c429, 0x1d9) 7.953952441s ago: executing program 5 (id=2163): openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.938411488s ago: executing program 9 (id=2164): syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TCFLSH(r0, 0x540b, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x10) pwrite64(r1, &(0x7f00000000c0)="86687409434d9ed668944b3ee7cda10ec511a5da85a3a21a4ceba44015f2ec39c3e6642a4b1dfca310132d8f0b24f815f509ba12712aaa35c91abf6f10d04eb1d58c045f3f07e7c4e89e1be1cbff77bc98923d2e48898e1faeef4da7b886fc6984c8681686264cfe53694b0d4b6ea453db6acc75", 0x74, 0x100) 7.708935275s ago: executing program 6 (id=2165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "20000001fb1600", "c5206c4110947a4bd5930da7aa9ab8dd", "c92db358", "d73f75499cafc140"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "b7050023eb00", "d21b0e8a0e000000000000000600", "1d1cbe23", "717c34f544025fe2"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f00000015c0)=""/4082, 0xff2, 0x40000116, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 7.270648287s ago: executing program 9 (id=2166): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0', 0xb) 6.702358778s ago: executing program 8 (id=2167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.596179014s ago: executing program 5 (id=2168): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0x2020) 5.972752703s ago: executing program 5 (id=2169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_usb_connect(0x3, 0x96d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010102e21b5140"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4.924871065s ago: executing program 8 (id=2170): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) creat(0x0, 0x100) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 3.733356682s ago: executing program 6 (id=2171): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x3}]}}}]}, 0x3c}}, 0x0) write(r0, &(0x7f0000000200)='2', 0x1) getpid() 2.324975556s ago: executing program 5 (id=2172): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x0, 0x18, 0x12, "129ff70446e017258c6ac788d89f982c4ea9"}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 1.608820012s ago: executing program 6 (id=2173): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) ppoll(&(0x7f00000005c0)=[{r3, 0x21}], 0x1, &(0x7f0000000640)={0x0, 0x989680}, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000280)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0xec000000, 0xcd}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f00000000c0)={0x1, 0x0, '\x00', {0x0, @bt={0x9, 0x9, 0x1, 0x2, 0xcdd3, 0x9dff087, 0x4, 0x9, 0x573f, 0x5, 0x1, 0xc, 0x6, 0x2, 0x10, 0x0, {0xb, 0x2}, 0x3}}}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2132, 0xffffffffffffffff, 0x0) brk(0x200000ffc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) 1.051828308s ago: executing program 8 (id=2174): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[{0x18, 0x110, 0x1, "010000"}], 0x18}, 0x0) recvmsg(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 900.506694ms ago: executing program 7 (id=2175): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="02c83010000c000100030508"], 0x15) 713.558244ms ago: executing program 9 (id=2176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @random="5d268b79b4db"}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 662.27181ms ago: executing program 7 (id=2177): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}}, 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) getpgid(0x0) 507.78326ms ago: executing program 8 (id=2178): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'dmm32at\x00', [0x2000, 0x2, 0x8, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfc, 0x287, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x9, 0x4, 0x8, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) 288.477419ms ago: executing program 8 (id=2179): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x149) read$FUSE(r0, &(0x7f0000007400)={0x2020}, 0x2020) close(0x3) 0s ago: executing program 8 (id=2180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ¿è·ï¥²âƒåµ„Ｅ뚈踊 [ 397.353423][ T910] cdc_ncm 2-1:1.0: bind() failure [ 397.442656][ T910] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 397.442792][ T910] cdc_ncm 2-1:1.1: bind() failure [ 397.483557][ T910] usb 2-1: USB disconnect, device number 56 [ 397.522504][ T55] gspca_vc032x: reg_w err -71 [ 397.527874][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.527885][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.527890][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.527895][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.527899][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.527904][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.527908][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.568726][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.568741][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.568750][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.568758][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.568766][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.568775][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.568783][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.568791][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.568799][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.568807][ T55] gspca_vc032x: I2c Bus Busy Wait 00 [ 397.568815][ T55] gspca_vc032x: Unknown sensor... [ 397.568910][ T55] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 397.573963][ T55] usb 5-1: USB disconnect, device number 51 [ 397.798094][ T8869] Bluetooth: hci0: command 0x0c1a tx timeout [ 398.269911][ T55] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 398.287571][ T5706] usb 1-1: USB disconnect, device number 55 [ 398.431120][ T55] usb 2-1: unable to get BOS descriptor or descriptor too short [ 398.440637][ T55] usb 2-1: not running at top speed; connect to a high speed hub [ 398.449476][ T55] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 398.461144][ T55] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.467982][ T55] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.486198][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.486884][ T55] usb 2-1: Product: syz [ 398.486903][ T55] usb 2-1: Manufacturer: syz [ 398.486928][ T55] usb 2-1: SerialNumber: syz [ 398.758089][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 398.785817][ T55] usb 2-1: 3:0: cannot get min/max values for control 12 (id 3) [ 398.835759][ T55] usb 2-1: USB disconnect, device number 57 [ 398.883742][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.920059][ T10] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 398.921669][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 398.928197][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.928220][ T10] usb 3-1: Product: syz [ 398.928234][ T10] usb 3-1: Manufacturer: syz [ 398.928248][ T10] usb 3-1: SerialNumber: syz [ 398.975666][ T8913] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 399.081175][ T5706] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 399.097821][ T8913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 399.221499][ T10] usb 3-1: Limiting number of CPorts to U8_MAX [ 399.222691][ T10] usb 3-1: Unknown endpoint type found, address 0x03 [ 399.222711][ T10] usb 3-1: Not enough endpoints found in device, aborting! [ 399.229769][ T5706] usb 1-1: Using ep0 maxpacket: 16 [ 399.266435][ T5706] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 399.270025][ T5706] usb 1-1: config 0 interface 0 has no altsetting 0 [ 399.274096][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 399.274120][ T5706] usb 1-1: Product: syz [ 399.274133][ T5706] usb 1-1: Manufacturer: syz [ 399.274147][ T5706] usb 1-1: SerialNumber: syz [ 399.305495][ T5706] usb 1-1: config 0 descriptor?? [ 399.465321][ T8922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.850'. [ 399.521485][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.530497][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.572425][ T10] usb 1-1: USB disconnect, device number 56 [ 399.623643][ T8922] team0 (unregistering): Port device team_slave_0 removed [ 399.662690][ T8922] team0 (unregistering): Port device team_slave_1 removed [ 400.039632][ T5706] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 400.190134][ T5706] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 400.200601][ T5706] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.200651][ T5706] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.220619][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 400.220684][ T5706] usb 5-1: SerialNumber: syz [ 400.464506][ T5706] usb 5-1: 0:2 : does not exist [ 400.558413][ T5706] usb 5-1: USB disconnect, device number 52 [ 400.622859][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.808074][ T910] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 400.938131][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 400.958046][ T910] usb 1-1: Using ep0 maxpacket: 16 [ 400.963938][ T910] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 400.966977][ T910] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 400.967007][ T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 401.000718][ T910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.008013][ T910] usb 1-1: Product: syz [ 401.008033][ T910] usb 1-1: Manufacturer: syz [ 401.008047][ T910] usb 1-1: SerialNumber: syz [ 401.033058][ T910] usb 1-1: config 0 descriptor?? [ 401.045552][ T910] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 401.045585][ T910] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 401.089632][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 401.090496][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 401.106853][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 401.128188][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.128278][ T10] usb 4-1: Product: syz [ 401.128294][ T10] usb 4-1: Manufacturer: syz [ 401.128308][ T10] usb 4-1: SerialNumber: syz [ 401.154622][ T10] usb 4-1: config 0 descriptor?? [ 401.178970][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 401.179047][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 401.473797][ T5706] usb 3-1: USB disconnect, device number 59 [ 401.650680][ T910] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 401.657440][ T910] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 401.774845][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 402.069125][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 402.069546][ T10] em28xx 4-1:0.0: board has no eeprom [ 402.138120][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 402.138201][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 402.141121][ T5727] em28xx 4-1:0.0: Binding DVB extension [ 402.164250][ T10] usb 4-1: USB disconnect, device number 69 [ 402.173866][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 402.292691][ T910] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 402.332033][ T5727] em28xx 4-1:0.0: Registering input extension [ 402.345521][ T10] em28xx 4-1:0.0: Closing input extension [ 402.519752][ T910] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 402.526823][ T910] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 402.527271][ T910] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 402.527694][ T910] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 402.552203][ T910] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 402.660613][ T910] usb 1-1: USB disconnect, device number 57 [ 402.704645][ T10] em28xx: Freeing device [ 402.888058][ T202] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 403.039003][ T202] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 403.040362][ T202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 403.040393][ T202] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 403.040433][ T202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.046064][ T202] usb 3-1: config 0 descriptor?? [ 403.047038][ T8960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 403.473560][ T202] usbhid 3-1:0.0: can't add hid device: -71 [ 403.473726][ T202] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 403.494129][ T202] usb 3-1: USB disconnect, device number 60 [ 403.508092][ T5878] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 403.670502][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short [ 403.678355][ T5878] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 403.680327][ T5878] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.680352][ T5878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.683369][ T5878] usb 1-1: string descriptor 0 read error: -22 [ 403.683482][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.828470][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 403.988165][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 403.989629][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 404.004099][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 404.012446][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 404.012511][ T10] usb 2-1: Product: syz [ 404.012526][ T10] usb 2-1: Manufacturer: syz [ 404.012540][ T10] usb 2-1: SerialNumber: syz [ 404.024081][ T10] usb 2-1: config 0 descriptor?? [ 404.249929][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.261145][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.269164][ T10] usb 2-1: USB disconnect, device number 58 [ 404.388048][ T55] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 404.549485][ T55] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 404.559200][ T55] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.568343][ T55] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 404.568370][ T55] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 404.568421][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.578036][ T202] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 404.748093][ T202] usb 5-1: Using ep0 maxpacket: 8 [ 404.757730][ T202] usb 5-1: unable to get BOS descriptor or descriptor too short [ 404.757768][ T202] usb 5-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 404.760235][ T202] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 404.760263][ T202] usb 5-1: config 0 has no interface number 0 [ 404.760306][ T202] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 404.760335][ T202] usb 5-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 404.760361][ T202] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 404.760387][ T202] usb 5-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 404.760421][ T202] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 404.760443][ T202] usb 5-1: config 0 interface 122 has no altsetting 0 [ 404.763153][ T202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.763176][ T202] usb 5-1: Product: syz [ 404.763190][ T202] usb 5-1: Manufacturer: syz [ 404.763204][ T202] usb 5-1: SerialNumber: syz [ 404.804010][ T202] usb 5-1: config 0 descriptor?? [ 404.805803][ T8984] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 404.806458][ T8984] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 404.904384][ T55] dvb_ttusb_budget: ttusb_init_controller: error [ 404.910811][ T55] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 404.995103][ T55] DVB: Unable to find symbol stv0299_attach() [ 405.064669][ T55] DVB: Unable to find symbol tda8083_attach() [ 405.064684][ T55] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 405.077784][ T202] pl2303 5-1:0.122: required endpoints missing [ 405.143697][ T202] usb 5-1: USB disconnect, device number 53 [ 405.163264][ T8981] fuse: Unknown parameter ' [ 405.163264][ T8981] ' [ 405.318982][ T55] usb 3-1: USB disconnect, device number 61 [ 406.700425][ T55] usb 1-1: USB disconnect, device number 58 [ 406.768077][ T10] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 406.827209][ T9012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.879'. [ 406.918983][ T10] usb 2-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.00 [ 406.929065][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.944609][ T10] usb 2-1: config 0 descriptor?? [ 407.088094][ T202] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 407.138109][ T55] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 407.178899][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 407.179059][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 407.202786][ T10] usb 2-1: USB disconnect, device number 59 [ 407.218613][ T202] usb 3-1: device descriptor read/64, error -71 [ 407.289987][ T55] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 407.303454][ T55] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 407.303489][ T55] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 407.303515][ T55] usb 1-1: config 0 interface 0 has no altsetting 0 [ 407.303549][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.344702][ T55] usb 1-1: config 0 descriptor?? [ 407.345574][ T9012] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 407.345697][ T9012] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 407.459007][ T202] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 407.558547][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.562214][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.588096][ T202] usb 3-1: device descriptor read/64, error -71 [ 407.698463][ T202] usb usb3-port1: attempt power cycle [ 407.780334][ T55] usbhid 1-1:0.0: can't add hid device: -71 [ 407.787309][ T55] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 407.788444][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 407.819553][ T55] usb 1-1: USB disconnect, device number 59 [ 407.970943][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 407.973984][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 408.006232][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 408.019379][ T10] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 408.019434][ T10] usb 4-1: Product: syz [ 408.019449][ T10] usb 4-1: Manufacturer: syz [ 408.019462][ T10] usb 4-1: SerialNumber: syz [ 408.024725][ T10] usb 4-1: config 0 descriptor?? [ 408.058202][ T202] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 408.080550][ T202] usb 3-1: device descriptor read/8, error -71 [ 408.171766][ T5706] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 408.250505][ T9022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.256804][ T9022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.259980][ T10] usb 4-1: USB disconnect, device number 70 [ 408.318098][ T202] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 408.319155][ T5706] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 408.320635][ T5706] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.320684][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.341936][ T202] usb 3-1: device descriptor read/8, error -71 [ 408.450016][ T202] usb usb3-port1: unable to enumerate USB device [ 408.839146][ T5878] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 409.030968][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short [ 409.033267][ T5878] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 409.050146][ T5878] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 409.064580][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.064607][ T5878] usb 1-1: Product: syz [ 409.064622][ T5878] usb 1-1: Manufacturer: syz [ 409.064636][ T5878] usb 1-1: SerialNumber: syz [ 409.355480][ T5878] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 409.362995][ T5878] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 409.363023][ T5878] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 409.363554][ T5878] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 409.456693][ T5878] usb 1-1: USB disconnect, device number 60 [ 409.543867][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.568098][ T202] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 409.718298][ T202] usb 2-1: Using ep0 maxpacket: 32 [ 409.722818][ T202] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 409.725666][ T202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.742076][ T202] usb 2-1: config 0 descriptor?? [ 409.961975][ T202] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 410.000033][ T202] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 410.002481][ T202] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 410.002543][ T202] usb 2-1: media controller created [ 411.008317][ T202] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.089181][ T5706] usb 5-1: USB disconnect, device number 54 [ 411.308114][ T5878] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 411.334822][ T202] az6027: usb out operation failed. (-71) [ 411.352742][ T202] az6027: usb out operation failed. (-71) [ 411.352762][ T202] stb0899_attach: Driver disabled by Kconfig [ 411.352796][ T202] az6027: no front-end attached [ 411.352796][ T202] [ 411.353213][ T202] az6027: usb out operation failed. (-71) [ 411.353228][ T202] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 411.356497][ T202] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 411.468054][ T5786] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 411.475324][ T202] dvb-usb: schedule remote query interval to 400 msecs. [ 411.475348][ T202] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 411.487109][ T202] usb 2-1: USB disconnect, device number 60 [ 411.498205][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 411.504278][ T5878] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 411.506428][ T5878] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 411.506452][ T5878] usb 1-1: config 0 has no interface number 0 [ 411.506498][ T5878] usb 1-1: config 0 interface 12 has no altsetting 0 [ 411.539268][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.545614][ T5878] usb 1-1: Product: syz [ 411.545635][ T5878] usb 1-1: Manufacturer: syz [ 411.545649][ T5878] usb 1-1: SerialNumber: syz [ 411.643908][ T5878] usb 1-1: config 0 descriptor?? [ 411.674150][ T5786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 411.682020][ T5786] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 411.685823][ T5786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.685849][ T5786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.723270][ T5786] usb 3-1: string descriptor 0 read error: -22 [ 411.730158][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.913640][ T202] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 412.528081][ T202] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 412.682159][ T202] usb 5-1: unable to get BOS descriptor or descriptor too short [ 412.682258][ T202] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 412.699672][ T202] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 412.717356][ T202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.717419][ T202] usb 5-1: Product: syz [ 412.717435][ T202] usb 5-1: Manufacturer: syz [ 412.717448][ T202] usb 5-1: SerialNumber: syz [ 412.902437][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.912501][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.945186][ T5878] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 412.947103][ T5878] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 412.947133][ T5878] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 412.947221][ T5878] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 413.010375][ T5878] usb 1-1: USB disconnect, device number 61 [ 413.013459][ T202] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 413.190711][ T202] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 413.190843][ T202] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 413.338050][ T5786] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 413.391843][ T202] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 413.508101][ T5786] usb 4-1: Using ep0 maxpacket: 16 [ 413.515116][ T5786] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 413.516490][ T5786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 413.540023][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 413.548214][ T5786] usb 4-1: Product: syz [ 413.548234][ T5786] usb 4-1: Manufacturer: syz [ 413.548256][ T5786] usb 4-1: SerialNumber: syz [ 413.557089][ T5786] usb 4-1: config 0 descriptor?? [ 413.638188][ T202] usb 5-1: USB disconnect, device number 55 [ 413.772927][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.774595][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.777713][ T5706] usb 4-1: USB disconnect, device number 71 [ 413.928057][ T5878] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 414.098928][ T5878] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 414.112461][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 414.116376][ T5878] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 414.116424][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.123778][ T5878] usb 1-1: config 0 descriptor?? [ 414.156589][ T9087] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 414.238069][ T202] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 414.262925][ T5706] usb 3-1: USB disconnect, device number 66 [ 414.378033][ T202] usb 2-1: device descriptor read/64, error -71 [ 415.283818][ T5878] hid_parser_main: 27 callbacks suppressed [ 415.290251][ T5878] steelseries 0003:1038:1410.0005: unknown main item tag 0x1 [ 415.297743][ T5878] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 415.306068][ T5878] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 415.313587][ T5878] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 415.313617][ T5878] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 415.313644][ T5878] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 415.313670][ T5878] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 415.313697][ T5878] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 415.313723][ T5878] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 415.313749][ T5878] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 415.314768][ T5878] steelseries 0003:1038:1410.0005: not enough fields in HID_OUTPUT_REPORT 0 [ 415.445525][ T5878] usb 1-1: USB disconnect, device number 62 [ 415.458042][ T202] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 415.536800][ T9101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.588387][ T202] usb 2-1: device descriptor read/64, error -71 [ 415.699849][ T202] usb usb2-port1: attempt power cycle [ 416.038460][ T202] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 416.059848][ T202] usb 2-1: device descriptor read/8, error -71 [ 416.298125][ T202] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 416.319134][ T202] usb 2-1: device descriptor read/8, error -71 [ 416.429198][ T202] usb usb2-port1: unable to enumerate USB device [ 418.508139][ T55] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 418.673158][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 418.683232][ T55] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 418.684496][ T55] usb 5-1: config 13 has an invalid interface number: 50 but max is 3 [ 418.684521][ T55] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 418.684540][ T55] usb 5-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 418.684561][ T55] usb 5-1: config 13 has no interface number 0 [ 418.684607][ T55] usb 5-1: config 13 interface 50 altsetting 4 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 418.684631][ T55] usb 5-1: config 13 interface 50 altsetting 4 endpoint 0x4 has invalid wMaxPacketSize 0 [ 418.684653][ T55] usb 5-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 418.684680][ T55] usb 5-1: config 13 interface 50 has no altsetting 0 [ 418.687252][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.687275][ T55] usb 5-1: Product: syz [ 418.687288][ T55] usb 5-1: Manufacturer: syz [ 418.687302][ T55] usb 5-1: SerialNumber: syz [ 418.688454][ T5726] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 418.858082][ T5706] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 418.868116][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 418.868937][ T5726] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 418.870770][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 418.874664][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 418.874688][ T5726] usb 4-1: Product: syz [ 418.874703][ T5726] usb 4-1: Manufacturer: syz [ 418.874717][ T5726] usb 4-1: SerialNumber: syz [ 418.911490][ T5726] usb 4-1: config 0 descriptor?? [ 419.012041][ T5706] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 419.014946][ T5706] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 419.014971][ T5706] usb 1-1: config 1 has no interface number 0 [ 419.022239][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.022264][ T5706] usb 1-1: Product: syz [ 419.022278][ T5706] usb 1-1: Manufacturer: syz [ 419.022292][ T5706] usb 1-1: SerialNumber: syz [ 419.069805][ T5706] usb 1-1: cannot find UAC_HEADER [ 419.116172][ T55] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 419.197290][ T5706] snd-usb-audio 1-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 419.220141][ T55] usb 5-1: USB disconnect, device number 56 [ 419.240400][ T9163] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 419.263412][ T12] usb 5-1: Failed to submit usb control message: -71 [ 419.264180][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.264725][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.266559][ T5706] usb 4-1: USB disconnect, device number 72 [ 419.305058][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 419.305083][ T12] usb 5-1: unable to get target info from device [ 419.305098][ T12] usb 5-1: could not get target info (-71) [ 419.305193][ T12] usb 5-1: could not probe fw (-71) [ 419.384804][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.398637][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.418738][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 419.425550][ T5726] usb 1-1: USB disconnect, device number 63 [ 419.498026][ T5786] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 419.668017][ T5786] usb 3-1: Using ep0 maxpacket: 16 [ 420.569735][ T5786] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 420.583221][ T5786] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 420.583250][ T5786] usb 3-1: config 0 has no interface number 0 [ 420.583293][ T5786] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 420.583317][ T5786] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 420.623692][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.631947][ T5786] usb 3-1: Product: syz [ 420.631965][ T5786] usb 3-1: Manufacturer: syz [ 420.631980][ T5786] usb 3-1: SerialNumber: syz [ 420.661329][ T5786] usb 3-1: config 0 descriptor?? [ 420.669681][ T9163] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 420.669869][ T9163] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 420.858032][ T5706] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 420.877119][ T9163] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 420.877311][ T9163] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 420.988139][ T5706] usb 5-1: device descriptor read/64, error -71 [ 421.080445][ T5786] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 421.080749][ T5786] asix 3-1:0.34: probe with driver asix failed with error -61 [ 421.228105][ T5706] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 421.287548][ T9163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.299387][ T9163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.321096][ T5786] usb 3-1: USB disconnect, device number 67 [ 421.358126][ T5706] usb 5-1: device descriptor read/64, error -71 [ 421.468576][ T5706] usb usb5-port1: attempt power cycle [ 421.808083][ T5706] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 421.828931][ T5706] usb 5-1: device descriptor read/8, error -71 [ 422.068151][ T5706] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 422.090125][ T5706] usb 5-1: device descriptor read/8, error -71 [ 422.204513][ T5706] usb usb5-port1: unable to enumerate USB device [ 422.325995][ T9204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.148079][ T5706] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 423.298100][ T5706] usb 4-1: Using ep0 maxpacket: 16 [ 423.299306][ T5706] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 423.313375][ T5706] usb 4-1: config 0 interface 0 has no altsetting 0 [ 423.323400][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 423.323501][ T5706] usb 4-1: Product: syz [ 423.323516][ T5706] usb 4-1: Manufacturer: syz [ 423.323530][ T5706] usb 4-1: SerialNumber: syz [ 423.351609][ T5706] usb 4-1: config 0 descriptor?? [ 423.583446][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.598335][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.604692][ T5706] usb 4-1: USB disconnect, device number 73 [ 423.966402][ T9233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.505215][ T9251] virt_wifi0 speed is unknown, defaulting to 1000 [ 425.858084][ T5878] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 426.045366][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 426.046409][ T5878] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 426.046462][ T5878] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 426.047831][ T5878] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 426.047997][ T5878] usb 4-1: can't read configurations, error -71 [ 426.718181][ T5706] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 426.878078][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 426.885004][ T5706] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 426.886686][ T5706] usb 5-1: config 0 interface 0 has no altsetting 0 [ 426.905063][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 426.906668][ T5706] usb 5-1: Product: syz [ 426.906687][ T5706] usb 5-1: Manufacturer: syz [ 426.906701][ T5706] usb 5-1: SerialNumber: syz [ 426.935603][ T5706] usb 5-1: config 0 descriptor?? [ 427.149714][ T9275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.151850][ T9275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.153575][ T55] usb 5-1: USB disconnect, device number 61 [ 427.438713][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.441564][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.764854][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.777231][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.317061][ T9327] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 430.614018][ T36] audit: type=1326 audit(1787747537.787:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9339 comm="syz.3.978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43058e0d9 code=0x7ffc0000 [ 430.630174][ T36] audit: type=1326 audit(1787747537.787:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9339 comm="syz.3.978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43058e0d9 code=0x7ffc0000 [ 430.666195][ T36] audit: type=1326 audit(1787747537.837:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9339 comm="syz.3.978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc43058e0d9 code=0x7ffc0000 [ 430.671529][ T36] audit: type=1326 audit(1787747537.837:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9339 comm="syz.3.978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43058e0d9 code=0x7ffc0000 [ 431.388150][ T9362] sctp: [Deprecated]: syz.0.983 (pid 9362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.388150][ T9362] Use struct sctp_sack_info instead [ 431.618100][ T9370] netlink: 'syz.3.987': attribute type 1 has an invalid length. [ 431.716909][ T9370] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.758119][ T1150] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.759750][ T1150] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.759790][ T1150] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.759825][ T1150] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.844521][ T9379] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 431.957188][ T36] audit: type=1326 audit(1787747539.127:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.1.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eabde0d9 code=0x7ffc0000 [ 431.957278][ T36] audit: type=1326 audit(1787747539.127:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.1.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eabde0d9 code=0x7ffc0000 [ 431.957318][ T36] audit: type=1326 audit(1787747539.127:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.1.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eabde0d9 code=0x7ffc0000 [ 431.957353][ T36] audit: type=1326 audit(1787747539.127:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.1.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f82eabde0d9 code=0x7ffc0000 [ 431.957386][ T36] audit: type=1326 audit(1787747539.127:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.1.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f82eabd7e57 code=0x7ffc0000 [ 431.957423][ T36] audit: type=1326 audit(1787747539.127:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9383 comm="syz.1.992" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82eab7f459 code=0x7ffc0000 [ 432.116853][ T9386] evm: overlay not supported [ 432.611338][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 432.995535][ T9402] hsr_slave_1 (unregistering): left promiscuous mode [ 433.762873][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1002'. [ 433.988566][ T9426] bond4: (slave vlan2): Opening slave failed [ 434.995704][ T27] numa_remove_cpu cpu 1 node 0: mask now 0 [ 434.995730][ T27] numa_remove_cpu cpu 1 node 1: mask now 0 [ 435.162495][ T9440] smpboot: CPU 1 is now offline [ 438.609352][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.609395][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.917102][ T9466] FAULT_INJECTION: forcing a failure. [ 438.917102][ T9466] name failslab, interval 1, probability 10, space 0, times 1 [ 438.917143][ T9466] CPU: 0 UID: 0 PID: 9466 Comm: syz.1.1015 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 438.917159][ T9466] Tainted: [L]=SOFTLOCKUP [ 438.917163][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.917172][ T9466] Call Trace: [ 438.917241][ T9466] [ 438.917272][ T9466] dump_stack_lvl+0xe8/0x150 [ 438.917393][ T9466] should_fail_ex+0x46b/0x600 [ 438.917435][ T9466] should_failslab+0xa8/0x100 [ 438.917468][ T9466] ? mas_alloc_nodes+0x291/0x350 [ 438.917539][ T9466] kmem_cache_alloc_noprof+0x9e/0x690 [ 438.917557][ T9466] ? mas_alloc_nodes+0x291/0x350 [ 438.917574][ T9466] mas_alloc_nodes+0x291/0x350 [ 438.917590][ T9466] mas_preallocate+0x2cf/0x630 [ 438.917607][ T9466] ? __pfx_mas_preallocate+0x10/0x10 [ 438.917633][ T9466] ? anon_vma_name+0x61/0x210 [ 438.917661][ T9466] ? __mas_set_range+0x11a/0x3a0 [ 438.917681][ T9466] __split_vma+0x460/0xbd0 [ 438.917696][ T9466] ? mas_prev_node+0xc03/0xe90 [ 438.917734][ T9466] ? __pfx___split_vma+0x10/0x10 [ 438.917743][ T9466] ? mas_prev_slot+0xb79/0xc00 [ 438.917767][ T9466] vma_modify+0x8b7/0x1ec0 [ 438.917790][ T9466] vma_modify_flags+0x248/0x330 [ 438.917806][ T9466] ? __pfx_vma_modify_flags+0x10/0x10 [ 438.917833][ T9466] ? rcu_is_watching+0x16/0xb0 [ 438.917864][ T9466] ? percpu_counter_add_batch+0xec/0x1d0 [ 438.917881][ T9466] ? __vm_enough_memory+0x11a/0x380 [ 438.917900][ T9466] mprotect_fixup+0x51a/0xad0 [ 438.917918][ T9466] ? __pfx_mprotect_fixup+0x10/0x10 [ 438.917932][ T9466] ? mas_next_slot+0xc94/0xd70 [ 438.917964][ T9466] do_mprotect_pkey+0x8e7/0xd10 [ 438.917985][ T9466] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 438.918007][ T9466] ? vm_mmap_pgoff+0x35d/0x4e0 [ 438.918021][ T9466] ? __pfx___se_sys_futex+0x10/0x10 [ 438.918050][ T9466] ? rcu_is_watching+0x16/0xb0 [ 438.918069][ T9466] __x64_sys_mprotect+0x80/0x90 [ 438.918084][ T9466] do_syscall_64+0x166/0x520 [ 438.918118][ T9466] ? trace_irq_disable+0x3b/0x140 [ 438.918139][ T9466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.918181][ T9466] ? clear_bhb_loop+0x70/0xc0 [ 438.918194][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.918207][ T9466] RIP: 0033:0x7f82eabdded7 [ 438.918243][ T9466] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.918253][ T9466] RSP: 002b:00007fff6b9ff5b8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 438.918294][ T9466] RAX: ffffffffffffffda RBX: 00007f82e8e156c0 RCX: 00007f82eabdded7 [ 438.918302][ T9466] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f82e8df6000 [ 438.918309][ T9466] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 438.918316][ T9466] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff6b9ff710 [ 438.918323][ T9466] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 438.918339][ T9466] [ 440.526737][ T9495] netlink: 'syz.1.1027': attribute type 4 has an invalid length. [ 441.685927][ T9520] syzkaller0: entered promiscuous mode [ 441.685944][ T9520] syzkaller0: entered allmulticast mode [ 443.613123][ T9556] syzkaller0: entered promiscuous mode [ 443.613149][ T9556] syzkaller0: entered allmulticast mode [ 445.665986][ T9612] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.666194][ T9612] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.417176][ T9625] overlayfs: statfs failed on './file0' [ 450.240695][ T9688] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 450.241031][ T9688] kvm: requested 194438 ns i8254 timer period limited to 200000 ns [ 450.254385][ T9688] kvm: requested 147504 ns i8254 timer period limited to 200000 ns [ 450.277854][ T9688] kvm: requested 154209 ns i8254 timer period limited to 200000 ns [ 450.279051][ T9688] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 450.281120][ T9688] kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 450.289500][ T9688] kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 450.293065][ T9688] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 450.302574][ T9688] kvm: requested 174323 ns i8254 timer period limited to 200000 ns [ 450.302960][ T9688] kvm: requested 147504 ns i8254 timer period limited to 200000 ns [ 453.356573][ T9772] sctp: [Deprecated]: syz.2.1121 (pid 9772) Use of int in max_burst socket option. [ 453.356573][ T9772] Use struct sctp_assoc_value instead [ 454.259994][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 454.260169][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1129'. [ 454.334050][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 455.190549][ T9815] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 455.421997][ T9817] 8021q: adding VLAN 0 to HW filter on device bond6 [ 455.435669][ T9817] bond5: (slave bond6): making interface the new active one [ 455.470272][ T9817] bond5: (slave bond6): Enslaving as an active interface with an up link [ 455.654891][ T9815] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 456.108165][ T9834] mmap: syz.2.1140 (9834) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 456.374316][ T9840] sg_write: data in/out 24576/136 bytes for SCSI command 0x0-- guessing data in; [ 456.374316][ T9840] program syz.3.1143 not setting count and/or reply_len properly [ 457.853085][ T9890] capability: warning: `syz.2.1160' uses 32-bit capabilities (legacy support in use) [ 458.533515][ T9904] tmpfs: Unsupported parameter 'huge' [ 458.935764][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 459.301257][ T9912] hsr_slave_1 (unregistering): left promiscuous mode [ 459.627465][ T36] kauditd_printk_skb: 1318 callbacks suppressed [ 459.627478][ T36] audit: type=1326 audit(1787747566.797:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9920 comm="syz.3.1174" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc430587e57 code=0x0 [ 459.957759][ T9930] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 459.962275][ T9930] sch_tbf: burst 4233 is lower than device lo mtu (65550) ! [ 460.129224][ T9934] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1178'. [ 461.339228][ T9952] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1186'. [ 461.652465][ T9932] ftl_cs: FTL header not found. [ 465.507522][ T9932] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [65] [ 468.157399][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 471.798897][T10069] virt_wifi0 speed is unknown, defaulting to 1000 [ 472.525923][T10111] tipc: Started in network mode [ 472.525946][T10111] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 472.552195][T10111] tipc: Enabled bearer , priority 0 [ 473.668380][T10116] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.693029][T10116] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.091940][T10116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.112196][T10116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.444890][T10146] Illegal XDP return value 4294967282 on prog (id 35) dev N/A, expect packet loss! [ 474.755305][ T9] tipc: Node number set to 43690 [ 475.138077][ T3409] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.138141][ T3409] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.138215][ T3409] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.138296][ T3409] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.722953][T10186] capability: warning: `syz.0.1272' uses deprecated v2 capabilities in a way that may be insecure [ 476.923999][T10182] syz.3.1270 (10182) used greatest stack depth: 15784 bytes left [ 477.955208][T10218] fuse: fd is not a fuse device [ 478.132576][T10220] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 478.169730][T10223] 8021q: VLANs not supported on gre0 [ 478.961718][T10261] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 479.039109][T10256] kvm: pic: non byte read [ 479.068985][T10256] kvm: pic: level sensitive irq not supported [ 479.073402][T10256] kvm: pic: non byte read [ 479.073684][T10256] kvm: pic: level sensitive irq not supported [ 479.073725][T10256] kvm: pic: non byte read [ 479.076519][T10256] kvm: pic: level sensitive irq not supported [ 479.078914][T10256] kvm: pic: non byte read [ 479.941996][T10290] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 480.663144][T10308] overlayfs: failed to clone upperpath [ 482.238614][T10351] fuse: fd is not a fuse device [ 483.294865][T10388] netlink: 'syz.4.1345': attribute type 4 has an invalid length. [ 483.651337][T10397] 9pnet_virtio: no channels available for device syz [ 484.403890][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 484.403914][T10416] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1355'. [ 485.866911][T10434] device-mapper: ioctl: Empty message received. [ 487.989433][ T36] audit: type=1326 audit(1787747595.157:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10492 comm="syz.3.1385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43058e0d9 code=0x7ffc0000 [ 487.989466][ T36] audit: type=1326 audit(1787747595.157:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10492 comm="syz.3.1385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43058e0d9 code=0x7ffc0000 [ 488.002134][ T36] audit: type=1326 audit(1787747595.177:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10492 comm="syz.3.1385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc43058e0d9 code=0x7ffc0000 [ 488.002163][ T36] audit: type=1326 audit(1787747595.177:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10492 comm="syz.3.1385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43058e0d9 code=0x7ffc0000 [ 488.002186][ T36] audit: type=1326 audit(1787747595.177:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10492 comm="syz.3.1385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43058e0d9 code=0x7ffc0000 [ 488.004805][ T36] audit: type=1326 audit(1787747595.177:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10492 comm="syz.3.1385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc43058e0d9 code=0x7ffc0000 [ 488.004834][ T36] audit: type=1326 audit(1787747595.177:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10492 comm="syz.3.1385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43058e0d9 code=0x7ffc0000 [ 488.004859][ T36] audit: type=1326 audit(1787747595.177:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10492 comm="syz.3.1385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43058e0d9 code=0x7ffc0000 [ 491.055783][ T36] audit: type=1326 audit(1787747598.227:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10555 comm="syz.0.1407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6885e0d9 code=0x7ffc0000 [ 491.055817][ T36] audit: type=1326 audit(1787747598.227:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10555 comm="syz.0.1407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6885e0d9 code=0x7ffc0000 [ 504.590994][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.591039][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.320360][T10600] sch_fq: defrate 4294967291 ignored. [ 508.826616][T10708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1457'. [ 508.953394][T10709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.779523][T10761] futex_wake_op: syz.3.1477 tries to shift op by -1; fix this program [ 516.528175][ T9] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 516.679323][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 516.682508][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.682549][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 516.682561][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 516.682585][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.913115][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 516.913130][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 517.247592][T10851] fuse: Unknown parameter ' [ 517.247592][T10851] ' [ 517.355557][ T9] DVB: Unable to find symbol stv0299_attach() [ 517.614788][ T9] DVB: Unable to find symbol tda8083_attach() [ 517.614801][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 517.727335][ T5726] usb 1-1: USB disconnect, device number 64 [ 518.138141][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 518.293283][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 518.301555][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.301592][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.315004][ T9] usb 5-1: config 0 descriptor?? [ 518.804973][ T9] ath6kl: Failed to read usb control message: -32 [ 518.805007][ T9] ath6kl: Unable to read the bmi data from the device: -32 [ 518.805015][ T9] ath6kl: Unable to recv target info: -32 [ 518.836048][ T9] ath6kl: Failed to init ath6kl core: -32 [ 518.836397][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 518.861114][ T9] usb 5-1: USB disconnect, device number 62 [ 545.210078][T11245] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 545.945604][T11245] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.067142][T11245] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.816744][T11279] overlayfs: failed to resolve './file1': -2 [ 557.392827][T11305] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5607] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11305] [ 567.976608][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.976653][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.588786][T11367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1696'. [ 572.688070][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 598.844053][T11649] netlink: 'syz.1.1816': attribute type 4 has an invalid length. [ 629.423006][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.423049][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 642.030595][T12220] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.316658][T12251] netlink: 'syz.3.2084': attribute type 6 has an invalid length. [ 644.598220][T12277] device-mapper: ioctl: name not supplied when creating device [ 645.406121][T12278] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 646.551546][T12282] syz.1.2095 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 646.551581][T12282] CPU: 0 UID: 0 PID: 12282 Comm: syz.1.2095 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 646.551596][T12282] Tainted: [L]=SOFTLOCKUP [ 646.551600][T12282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.551608][T12282] Call Trace: [ 646.551613][T12282] [ 646.551618][T12282] dump_stack_lvl+0xe8/0x150 [ 646.551643][T12282] dump_header+0xd3/0x4b0 [ 646.551674][T12282] oom_kill_process+0x3ab/0x9e0 [ 646.551701][T12282] out_of_memory+0x1064/0x1480 [ 646.551731][T12282] ? __pfx_out_of_memory+0x10/0x10 [ 646.551747][T12282] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 646.551841][T12282] ? _mutex_lock_killable+0x152/0x1d0 [ 646.551853][T12282] ? try_charge_memcg+0xbbe/0x15c0 [ 646.551871][T12282] try_charge_memcg+0xc7d/0x15c0 [ 646.551894][T12282] ? __pfx_try_charge_memcg+0x10/0x10 [ 646.551912][T12282] ? percpu_ref_tryget+0x15/0x180 [ 646.551933][T12282] ? __memcg_kmem_charge_page+0x1ab/0x5a0 [ 646.551949][T12282] __memcg_kmem_charge_page+0x36c/0x5a0 [ 646.551961][T12282] ? __memcg_kmem_charge_page+0x1ab/0x5a0 [ 646.551975][T12282] __alloc_frozen_pages_noprof+0x263/0x5c0 [ 646.551992][T12282] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 646.552010][T12282] ? __pfx_policy_nodemask+0x10/0x10 [ 646.552030][T12282] ? mas_wr_walk_descend+0x574/0x8b0 [ 646.552048][T12282] alloc_pages_mpol+0xd4/0x280 [ 646.552065][T12282] alloc_pages_noprof+0xd2/0x2f0 [ 646.552082][T12282] pte_alloc_one+0x22/0x380 [ 646.552105][T12282] __pte_alloc+0x25/0x1a0 [ 646.552120][T12282] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 646.552133][T12282] get_locked_pte+0x37f/0x490 [ 646.552151][T12282] insert_page+0x22c/0x3b0 [ 646.552168][T12282] ? __pfx_insert_page+0x10/0x10 [ 646.552185][T12282] ? vm_insert_page+0x24a/0x380 [ 646.552200][T12282] ? vmalloc_to_page+0x41c/0x6b0 [ 646.552212][T12282] kcov_mmap+0xcb/0x140 [ 646.552227][T12282] mmap_region+0x195c/0x2230 [ 646.552253][T12282] ? __pfx_mmap_region+0x10/0x10 [ 646.552267][T12282] ? try_to_take_rt_mutex+0x842/0xb00 [ 646.552282][T12282] ? __pfx_mmap_region+0x10/0x10 [ 646.552296][T12282] ? try_to_take_rt_mutex+0x842/0xb00 [ 646.552312][T12282] ? __lock_acquire+0x683/0x2ce0 [ 646.552381][T12282] ? __lock_acquire+0x683/0x2ce0 [ 646.552394][T12282] ? cap_mmap_addr+0xaf/0x100 [ 646.552426][T12282] ? bpf_lsm_mmap_addr+0x9/0x50 [ 646.552440][T12282] ? security_mmap_addr+0x71/0x240 [ 646.552456][T12282] ? shmem_mapping+0xd/0x50 [ 646.552466][T12282] ? memfd_check_seals_mmap+0xcb/0x230 [ 646.552493][T12282] do_mmap+0xe0e/0x1310 [ 646.552503][T12282] ? __lock_acquire+0x683/0x2ce0 [ 646.552520][T12282] ? __pfx_do_mmap+0x10/0x10 [ 646.552535][T12282] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 646.552552][T12282] ? rwbase_write_lock+0x550/0x720 [ 646.552596][T12282] vm_mmap_pgoff+0x275/0x4e0 [ 646.552611][T12282] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 646.552625][T12282] ? __fget_files+0x2a/0x420 [ 646.552641][T12282] ? __fget_files+0x3a8/0x420 [ 646.552656][T12282] ? __fget_files+0x2a/0x420 [ 646.552673][T12282] ksys_mmap_pgoff+0x4a6/0x720 [ 646.552685][T12282] ? __x64_sys_mmap+0x7f/0x140 [ 646.552707][T12282] do_syscall_64+0x166/0x520 [ 646.552730][T12282] ? trace_irq_disable+0x3b/0x140 [ 646.552743][T12282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.552755][T12282] ? clear_bhb_loop+0x70/0xc0 [ 646.552768][T12282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.552779][T12282] RIP: 0033:0x7f82eabdde42 [ 646.552791][T12282] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 646.552800][T12282] RSP: 002b:00007fff6b9ff6c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 646.552814][T12282] RAX: ffffffffffffffda RBX: 00007f82e89d3000 RCX: 00007f82eabdde42 [ 646.552822][T12282] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f82e89d3000 [ 646.552828][T12282] RBP: 0000000000000011 R08: 00000000000000db R09: 0000000000000000 [ 646.552835][T12282] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 646.552841][T12282] R13: 0000000000000004 R14: 0000000000000000 R15: 00007f82eae65fa0 [ 646.552858][T12282] [ 646.583627][T12282] memory: usage 8kB, limit 8kB, failcnt 23 [ 646.583641][T12282] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 646.583649][T12282] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 646.583655][T12282] Memory cgroup stats for /syz1/test: [ 646.584070][T12282] cache 0 [ 646.584075][T12282] rss 0 [ 646.584079][T12282] shmem 0 [ 646.584083][T12282] mapped_file 0 [ 646.584086][T12282] dirty 0 [ 646.584090][T12282] writeback 0 [ 646.584094][T12282] workingset_refault_anon 0 [ 646.584098][T12282] workingset_refault_file 0 [ 646.584101][T12282] swap 0 [ 646.584105][T12282] swapcached 0 [ 646.584108][T12282] pgpgin 0 [ 646.584112][T12282] pgpgout 0 [ 646.584115][T12282] pgfault 0 [ 646.584118][T12282] pgmajfault 0 [ 646.584122][T12282] inactive_anon 0 [ 646.584125][T12282] active_anon 0 [ 646.584129][T12282] inactive_file 0 [ 646.584132][T12282] active_file 0 [ 646.584136][T12282] unevictable 0 [ 646.584140][T12282] hierarchical_memory_limit 8192 [ 646.584144][T12282] hierarchical_memsw_limit 9223372036854771712 [ 646.584148][T12282] total_cache 0 [ 646.584152][T12282] total_rss 0 [ 646.584155][T12282] total_shmem 0 [ 646.584159][T12282] total_mapped_file 0 [ 646.584162][T12282] total_dirty 0 [ 646.584166][T12282] total_writeback 0 [ 646.584170][T12282] total_workingset_refault_anon 0 [ 646.584174][T12282] total_workingset_refault_file 0 [ 646.584178][T12282] total_swap 0 [ 646.584181][T12282] total_swapcached 0 [ 646.584185][T12282] total_pgpgin 0 [ 646.584188][T12282] total_pgpgout 0 [ 646.584192][T12282] total_pgfault 0 [ 646.584196][T12282] total_pgmajfault 0 [ 646.584199][T12282] total_inactive_anon 0 [ 646.584203][T12282] total_active_anon 0 [ 646.584207][T12282] total_inactive_file 0 [ 646.584211][T12282] total_active_file 0 [ 646.584214][T12282] total_unevictable 0 [ 646.584218][T12282] anon_cost 0 [ 646.584221][T12282] file_cost 0 [ 646.584225][T12282] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.2095,pid=12282,uid=0 [ 647.056225][T12282] Memory cgroup out of memory: Killed process 12282 (syz.1.2095) total-vm:106620kB, anon-rss:1444kB, file-rss:22868kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 647.393457][T12282] kcov: kcov: vm_insert_page() failed [ 647.549510][T12299] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2863311530.2147592874.194), cmd(3) [ 647.899250][T12299] device-mapper: ioctl: Invalid ioctl structure: uuid ˲ť}ö}TJöèÚþ , name , dev 1b5d4 [ 649.238824][ T8869] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 649.688418][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 649.870036][ T9] usb 1-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 649.872471][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.872503][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.872517][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.872529][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 649.877677][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.877693][ T9] usb 1-1: Product: syz [ 649.877700][ T9] usb 1-1: Manufacturer: syz [ 649.877708][ T9] usb 1-1: SerialNumber: syz [ 649.932782][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2108'. [ 652.048548][ T8869] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 652.486682][ T10] usb 1-1: USB disconnect, device number 65 [ 655.042378][ T8869] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 656.345655][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'. [ 661.064655][T11191] syz.4.1623 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 661.064685][T11191] CPU: 0 UID: 0 PID: 11191 Comm: syz.4.1623 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.064701][T11191] Tainted: [L]=SOFTLOCKUP [ 661.064705][T11191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.064712][T11191] Call Trace: [ 661.064717][T11191] [ 661.064723][T11191] dump_stack_lvl+0xe8/0x150 [ 661.064744][T11191] dump_header+0xd3/0x4b0 [ 661.064760][T11191] oom_kill_process+0x3ab/0x9e0 [ 661.064780][T11191] out_of_memory+0x1064/0x1480 [ 661.064802][T11191] ? __pfx_out_of_memory+0x10/0x10 [ 661.064818][T11191] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 661.064834][T11191] ? _mutex_lock_killable+0x152/0x1d0 [ 661.064846][T11191] ? try_charge_memcg+0xbbe/0x15c0 [ 661.064863][T11191] try_charge_memcg+0xc7d/0x15c0 [ 661.064886][T11191] ? __pfx_try_charge_memcg+0x10/0x10 [ 661.064911][T11191] ? charge_memcg+0x47/0x310 [ 661.064926][T11191] charge_memcg+0x1dd/0x310 [ 661.064942][T11191] __mem_cgroup_charge+0x25/0x80 [ 661.064956][T11191] shmem_get_folio_gfp+0x81a/0x1c40 [ 661.064981][T11191] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 661.064996][T11191] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 661.065013][T11191] shmem_write_begin+0x166/0x320 [ 661.065029][T11191] generic_perform_write+0x2ad/0x8b0 [ 661.065047][T11191] ? __pfx_generic_perform_write+0x10/0x10 [ 661.065058][T11191] ? generic_write_checks_count+0x426/0x530 [ 661.065076][T11191] ? file_update_time_flags+0x2db/0x450 [ 661.065091][T11191] shmem_file_write_iter+0xfb/0x120 [ 661.065107][T11191] __kernel_write_iter+0x453/0x8f0 [ 661.065121][T11191] ? __pfx___kernel_write_iter+0x10/0x10 [ 661.065145][T11191] ? __asan_memset+0x22/0x50 [ 661.065157][T11191] ? iov_iter_bvec+0xb8/0x180 [ 661.065213][T11191] dump_user_range+0xc1c/0x12c0 [ 661.065240][T11191] ? __pfx_dump_user_range+0x10/0x10 [ 661.065258][T11191] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 661.065271][T11191] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 661.065283][T11191] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 661.065298][T11191] ? elf_core_dump+0x2a8f/0x3a90 [ 661.065316][T11191] elf_core_dump+0x3485/0x3a90 [ 661.065340][T11191] ? __pfx_elf_core_dump+0x10/0x10 [ 661.065354][T11191] ? __lock_acquire+0x683/0x2ce0 [ 661.065368][T11191] ? get_signal+0x1095/0x12c0 [ 661.065388][T11191] ? arch_do_signal_or_restart+0xbb/0x860 [ 661.065404][T11191] ? irqentry_exit+0x2ba/0x910 [ 661.065443][T11191] ? vfs_coredump+0x376c/0x4530 [ 661.065457][T11191] ? 0xffffffffff600000 [ 661.065474][T11191] coredump_write+0x129c/0x1970 [ 661.065496][T11191] ? __pfx_coredump_write+0x10/0x10 [ 661.065520][T11191] ? unshare_files+0xab/0x140 [ 661.065538][T11191] vfs_coredump+0x376c/0x4530 [ 661.065563][T11191] ? __pfx_vfs_coredump+0x10/0x10 [ 661.065578][T11191] ? __lock_acquire+0x683/0x2ce0 [ 661.065595][T11191] ? __lock_acquire+0x683/0x2ce0 [ 661.065612][T11191] ? __lock_acquire+0x683/0x2ce0 [ 661.065630][T11191] ? do_raw_spin_lock+0x12b/0x2f0 [ 661.065642][T11191] ? unwind_next_frame+0x8f/0x2550 [ 661.065659][T11191] ? is_bpf_text_address+0x26/0x2b0 [ 661.065680][T11191] ? is_bpf_text_address+0x26/0x2b0 [ 661.065698][T11191] ? is_bpf_text_address+0x292/0x2b0 [ 661.065712][T11191] ? is_bpf_text_address+0x26/0x2b0 [ 661.065729][T11191] ? kernel_text_address+0xa5/0xe0 [ 661.065742][T11191] ? __kernel_text_address+0xd/0x30 [ 661.065753][T11191] ? unwind_get_return_address+0x4d/0x90 [ 661.065765][T11191] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 661.065778][T11191] ? arch_stack_walk+0xfb/0x150 [ 661.065799][T11191] ? __lock_acquire+0x683/0x2ce0 [ 661.065813][T11191] ? __lock_acquire+0x660/0x2ce0 [ 661.065829][T11191] ? kasan_save_track+0x4f/0x80 [ 661.065841][T11191] ? kasan_save_track+0x3e/0x80 [ 661.065852][T11191] ? kasan_save_free_info+0x40/0x50 [ 661.065862][T11191] ? __kasan_slab_free+0x5c/0x80 [ 661.065874][T11191] ? kmem_cache_free+0x187/0x6d0 [ 661.065887][T11191] ? get_signal+0x9e8/0x12c0 [ 661.065899][T11191] ? arch_do_signal_or_restart+0xbb/0x860 [ 661.065913][T11191] ? irqentry_exit+0x2ba/0x910 [ 661.065926][T11191] ? asm_exc_page_fault+0x26/0x30 [ 661.065941][T11191] ? do_raw_spin_lock+0x12b/0x2f0 [ 661.065958][T11191] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 661.065980][T11191] ? proc_coredump_connector+0x187/0x4e0 [ 661.066076][T11191] ? rt_spin_unlock+0x159/0x200 [ 661.066090][T11191] ? rt_spin_unlock+0x165/0x200 [ 661.066102][T11191] get_signal+0x1095/0x12c0 [ 661.066134][T11191] arch_do_signal_or_restart+0xbb/0x860 [ 661.066152][T11191] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 661.066179][T11191] irqentry_exit+0x2ba/0x910 [ 661.066192][T11191] ? trace_irq_disable+0x3b/0x140 [ 661.066209][T11191] asm_exc_page_fault+0x26/0x30 [ 661.066219][T11191] RIP: 0033:0x7ffb01af3bd7 [ 661.066232][T11191] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 661.066242][T11191] RSP: 002b:00007ffaffe77120 EFLAGS: 00010202 [ 661.066252][T11191] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007ffb01c3e0d9 [ 661.066260][T11191] RDX: 00007ffaffe77140 RSI: 00007ffaffe77270 RDI: 000000000000000b [ 661.066267][T11191] RBP: 00007ffb01cd5024 R08: 0000000000000000 R09: 0000000000000000 [ 661.066273][T11191] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 661.066280][T11191] R13: 00007ffb01ec6038 R14: 00007ffb01ec5fa0 R15: 00007ffdf13238a8 [ 661.066297][T11191] [ 661.111576][T11191] memory: usage 307200kB, limit 307200kB, failcnt 20199 [ 661.111590][T11191] memory+swap: usage 378500kB, limit 9007199254740988kB, failcnt 0 [ 661.111598][T11191] kmem: usage 2752kB, limit 9007199254740988kB, failcnt 0 [ 661.111606][T11191] Memory cgroup stats for /syz4: [ 661.111726][T11191] cache 311103488 [ 661.111731][T11191] rss 557056 [ 661.111735][T11191] shmem 311103488 [ 661.111738][T11191] mapped_file 191913984 [ 661.111742][T11191] dirty 0 [ 661.111745][T11191] writeback 0 [ 661.111748][T11191] workingset_refault_anon 89 [ 661.111752][T11191] workingset_refault_file 237 [ 661.111756][T11191] swap 73011200 [ 661.111760][T11191] swapcached 125788160 [ 661.111763][T11191] pgpgin 503986 [ 661.111767][T11191] pgpgout 427897 [ 661.111770][T11191] pgfault 185172 [ 661.111774][T11191] pgmajfault 69 [ 661.111777][T11191] inactive_anon 311525376 [ 661.111781][T11191] active_anon 135168 [ 661.111785][T11191] inactive_file 0 [ 661.111788][T11191] active_file 0 [ 661.111792][T11191] unevictable 0 [ 661.111795][T11191] hierarchical_memory_limit 314572800 [ 661.111800][T11191] hierarchical_memsw_limit 9223372036854771712 [ 661.111804][T11191] total_cache 311103488 [ 661.111808][T11191] total_rss 557056 [ 661.111812][T11191] total_shmem 311103488 [ 661.111815][T11191] total_mapped_file 191913984 [ 661.111819][T11191] total_dirty 0 [ 661.111822][T11191] total_writeback 0 [ 661.111826][T11191] total_workingset_refault_anon 89 [ 661.111830][T11191] total_workingset_refault_file 237 [ 661.111834][T11191] total_swap 73011200 [ 661.111838][T11191] total_swapcached 125788160 [ 661.111841][T11191] total_pgpgin 503986 [ 661.111845][T11191] total_pgpgout 427897 [ 661.111849][T11191] total_pgfault 185172 [ 661.111852][T11191] total_pgmajfault 69 [ 661.111856][T11191] total_inactive_anon 311525376 [ 661.111859][T11191] total_active_anon 135168 [ 661.111863][T11191] total_inactive_file 0 [ 661.111867][T11191] total_active_file 0 [ 661.111870][T11191] total_unevictable 0 [ 661.111874][T11191] anon_cost 16832 [ 661.111878][T11191] file_cost 16 [ 661.111882][T11191] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1623,pid=11191,uid=0 [ 661.199480][T11191] Memory cgroup out of memory: Killed process 11191 (syz.4.1623) total-vm:200556kB, anon-rss:1416kB, file-rss:20612kB, shmem-rss:100664kB, UID:0 pgtables:304kB oom_score_adj:1000 [ 661.296628][T12045] syz.3.1996 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 661.296657][T12045] CPU: 0 UID: 0 PID: 12045 Comm: syz.3.1996 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.296676][T12045] Tainted: [L]=SOFTLOCKUP [ 661.296680][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.296694][T12045] Call Trace: [ 661.296699][T12045] [ 661.296705][T12045] dump_stack_lvl+0xe8/0x150 [ 661.296726][T12045] dump_header+0xd3/0x4b0 [ 661.296744][T12045] oom_kill_process+0x3ab/0x9e0 [ 661.296763][T12045] out_of_memory+0x1064/0x1480 [ 661.296786][T12045] ? __pfx_out_of_memory+0x10/0x10 [ 661.296803][T12045] ? _mutex_lock_killable+0x163/0x1d0 [ 661.296816][T12045] ? try_charge_memcg+0xbbe/0x15c0 [ 661.296833][T12045] try_charge_memcg+0xc7d/0x15c0 [ 661.296856][T12045] ? __pfx_try_charge_memcg+0x10/0x10 [ 661.296881][T12045] ? charge_memcg+0x47/0x310 [ 661.296896][T12045] charge_memcg+0x1dd/0x310 [ 661.296912][T12045] __mem_cgroup_charge+0x25/0x80 [ 661.296926][T12045] shmem_get_folio_gfp+0x81a/0x1c40 [ 661.296952][T12045] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 661.296967][T12045] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 661.296984][T12045] shmem_write_begin+0x166/0x320 [ 661.297000][T12045] generic_perform_write+0x2ad/0x8b0 [ 661.297019][T12045] ? __pfx_generic_perform_write+0x10/0x10 [ 661.297030][T12045] ? generic_write_checks_count+0x426/0x530 [ 661.297048][T12045] ? file_update_time_flags+0x2db/0x450 [ 661.297062][T12045] shmem_file_write_iter+0xfb/0x120 [ 661.297079][T12045] __kernel_write_iter+0x453/0x8f0 [ 661.297093][T12045] ? __pfx___kernel_write_iter+0x10/0x10 [ 661.297108][T12045] ? __asan_memset+0x22/0x50 [ 661.297120][T12045] ? iov_iter_bvec+0xb8/0x180 [ 661.297138][T12045] dump_user_range+0xc1c/0x12c0 [ 661.297161][T12045] ? __pfx_dump_user_range+0x10/0x10 [ 661.297179][T12045] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 661.297193][T12045] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 661.297205][T12045] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 661.297220][T12045] ? elf_core_dump+0x2a8f/0x3a90 [ 661.297238][T12045] elf_core_dump+0x3485/0x3a90 [ 661.297263][T12045] ? __pfx_elf_core_dump+0x10/0x10 [ 661.297276][T12045] ? __lock_acquire+0x683/0x2ce0 [ 661.297291][T12045] ? get_signal+0x1095/0x12c0 [ 661.297304][T12045] ? arch_do_signal_or_restart+0xbb/0x860 [ 661.297319][T12045] ? irqentry_exit+0x2ba/0x910 [ 661.297333][T12045] ? asm_exc_page_fault+0x26/0x30 [ 661.297369][T12045] ? vfs_coredump+0x376c/0x4530 [ 661.297383][T12045] ? 0xffffffffff600000 [ 661.297401][T12045] coredump_write+0x129c/0x1970 [ 661.297424][T12045] ? __pfx_coredump_write+0x10/0x10 [ 661.297447][T12045] ? unshare_files+0xab/0x140 [ 661.297465][T12045] vfs_coredump+0x376c/0x4530 [ 661.297490][T12045] ? __pfx_vfs_coredump+0x10/0x10 [ 661.297506][T12045] ? __lock_acquire+0x683/0x2ce0 [ 661.297520][T12045] ? __lock_acquire+0x683/0x2ce0 [ 661.297537][T12045] ? __lock_acquire+0x683/0x2ce0 [ 661.297555][T12045] ? do_raw_spin_lock+0x12b/0x2f0 [ 661.297568][T12045] ? unwind_next_frame+0x8f/0x2550 [ 661.297585][T12045] ? is_bpf_text_address+0x26/0x2b0 [ 661.297607][T12045] ? is_bpf_text_address+0x26/0x2b0 [ 661.297624][T12045] ? is_bpf_text_address+0x292/0x2b0 [ 661.297639][T12045] ? is_bpf_text_address+0x26/0x2b0 [ 661.297658][T12045] ? kernel_text_address+0xa5/0xe0 [ 661.297671][T12045] ? __kernel_text_address+0xd/0x30 [ 661.297682][T12045] ? unwind_get_return_address+0x4d/0x90 [ 661.297700][T12045] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 661.297713][T12045] ? arch_stack_walk+0xfb/0x150 [ 661.297735][T12045] ? __lock_acquire+0x683/0x2ce0 [ 661.297749][T12045] ? __lock_acquire+0x660/0x2ce0 [ 661.297764][T12045] ? kasan_save_track+0x4f/0x80 [ 661.297777][T12045] ? kasan_save_track+0x3e/0x80 [ 661.297788][T12045] ? kasan_save_free_info+0x40/0x50 [ 661.297798][T12045] ? __kasan_slab_free+0x5c/0x80 [ 661.297810][T12045] ? kmem_cache_free+0x187/0x6d0 [ 661.297822][T12045] ? get_signal+0x9e8/0x12c0 [ 661.297835][T12045] ? arch_do_signal_or_restart+0xbb/0x860 [ 661.297849][T12045] ? irqentry_exit+0x2ba/0x910 [ 661.297862][T12045] ? asm_exc_page_fault+0x26/0x30 [ 661.297877][T12045] ? do_raw_spin_lock+0x12b/0x2f0 [ 661.297894][T12045] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 661.297917][T12045] ? proc_coredump_connector+0x187/0x4e0 [ 661.297939][T12045] ? rt_spin_unlock+0x159/0x200 [ 661.297953][T12045] ? rt_spin_unlock+0x165/0x200 [ 661.297966][T12045] get_signal+0x1095/0x12c0 [ 661.297991][T12045] arch_do_signal_or_restart+0xbb/0x860 [ 661.298009][T12045] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 661.298036][T12045] irqentry_exit+0x2ba/0x910 [ 661.298050][T12045] ? trace_irq_disable+0x3b/0x140 [ 661.298066][T12045] asm_exc_page_fault+0x26/0x30 [ 661.298077][T12045] RIP: 0033:0x7fc430443bd7 [ 661.298088][T12045] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 661.298097][T12045] RSP: 002b:00007fc42e7c7120 EFLAGS: 00010202 [ 661.298108][T12045] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc43058e0d9 [ 661.298116][T12045] RDX: 00007fc42e7c7140 RSI: 00007fc42e7c7270 RDI: 000000000000000b [ 661.298122][T12045] RBP: 00007fc430625024 R08: 0000000000000000 R09: 0000000000000000 [ 661.298129][T12045] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 661.298135][T12045] R13: 00007fc430816038 R14: 00007fc430815fa0 R15: 00007ffe3f090dd8 [ 661.298152][T12045] [ 661.301248][T12045] memory: usage 307200kB, limit 307200kB, failcnt 14383 [ 661.301261][T12045] memory+swap: usage 360068kB, limit 9007199254740988kB, failcnt 0 [ 661.301269][T12045] kmem: usage 3668kB, limit 9007199254740988kB, failcnt 0 [ 661.301275][T12045] Memory cgroup stats for /syz3: [ 661.301402][T12045] cache 310296576 [ 661.301407][T12045] rss 520192 [ 661.301411][T12045] shmem 310296576 [ 661.301415][T12045] mapped_file 182009856 [ 661.301419][T12045] dirty 0 [ 661.301422][T12045] writeback 0 [ 661.301426][T12045] workingset_refault_anon 46 [ 661.301430][T12045] workingset_refault_file 0 [ 661.301434][T12045] swap 54136832 [ 661.301437][T12045] swapcached 86183936 [ 661.301441][T12045] pgpgin 501168 [ 661.301445][T12045] pgpgout 425285 [ 661.301448][T12045] pgfault 185850 [ 661.301452][T12045] pgmajfault 46 [ 661.301455][T12045] inactive_anon 310779904 [ 661.301459][T12045] active_anon 36864 [ 661.301463][T12045] inactive_file 0 [ 661.301466][T12045] active_file 0 [ 661.301470][T12045] unevictable 0 [ 661.301474][T12045] hierarchical_memory_limit 314572800 [ 661.301478][T12045] hierarchical_memsw_limit 9223372036854771712 [ 661.301482][T12045] total_cache 310296576 [ 661.301486][T12045] total_rss 520192 [ 661.301489][T12045] total_shmem 310296576 [ 661.301493][T12045] total_mapped_file 182009856 [ 661.301497][T12045] total_dirty 0 [ 661.301500][T12045] total_writeback 0 [ 661.301504][T12045] total_workingset_refault_anon 46 [ 661.301508][T12045] total_workingset_refault_file 0 [ 661.301512][T12045] total_swap 54136832 [ 661.301516][T12045] total_swapcached 86183936 [ 661.301519][T12045] total_pgpgin 501168 [ 661.301523][T12045] total_pgpgout 425285 [ 661.301527][T12045] total_pgfault 185850 [ 661.301530][T12045] total_pgmajfault 46 [ 661.301534][T12045] total_inactive_anon 310779904 [ 661.301538][T12045] total_active_anon 36864 [ 661.301542][T12045] total_inactive_file 0 [ 661.301545][T12045] total_active_file 0 [ 661.301549][T12045] total_unevictable 0 [ 661.301553][T12045] anon_cost 18097 [ 661.301557][T12045] file_cost 10 [ 661.301560][T12045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1622,pid=11183,uid=0 [ 661.474225][T12045] Memory cgroup out of memory: Killed process 11183 (syz.3.1622) total-vm:200560kB, anon-rss:1416kB, file-rss:20612kB, shmem-rss:125000kB, UID:0 pgtables:348kB oom_score_adj:0 [ 661.954172][T12045] syz.3.1996 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 661.954201][T12045] CPU: 0 UID: 0 PID: 12045 Comm: syz.3.1996 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.954217][T12045] Tainted: [L]=SOFTLOCKUP [ 661.954221][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.954227][T12045] Call Trace: [ 661.954233][T12045] [ 661.954238][T12045] dump_stack_lvl+0xe8/0x150 [ 661.954259][T12045] dump_header+0xd3/0x4b0 [ 661.954276][T12045] oom_kill_process+0x3ab/0x9e0 [ 661.954295][T12045] out_of_memory+0x1064/0x1480 [ 661.954320][T12045] ? __pfx_out_of_memory+0x10/0x10 [ 661.954336][T12045] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 661.954352][T12045] ? _mutex_lock_killable+0x152/0x1d0 [ 661.954363][T12045] ? try_charge_memcg+0xbbe/0x15c0 [ 661.954380][T12045] try_charge_memcg+0xc7d/0x15c0 [ 661.954404][T12045] ? __pfx_try_charge_memcg+0x10/0x10 [ 661.954429][T12045] ? charge_memcg+0x47/0x310 [ 661.954444][T12045] charge_memcg+0x1dd/0x310 [ 661.954460][T12045] __mem_cgroup_charge+0x25/0x80 [ 661.954475][T12045] shmem_get_folio_gfp+0x81a/0x1c40 [ 661.954500][T12045] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 661.954511][T12045] ? filemap_map_pages+0x1e0/0x1c50 [ 661.954527][T12045] shmem_fault+0x170/0x380 [ 661.954544][T12045] __do_fault+0x138/0x2a0 [ 661.954560][T12045] do_pte_missing+0x1828/0x28f0 [ 661.954579][T12045] ? handle_mm_fault+0xed/0x2690 [ 661.954600][T12045] handle_mm_fault+0xe81/0x2690 [ 661.954616][T12045] ? handle_mm_fault+0xed/0x2690 [ 661.954633][T12045] ? __pfx_handle_mm_fault+0x10/0x10 [ 661.954646][T12045] ? follow_page_pte+0x73e/0xf20 [ 661.954663][T12045] ? __pfx_follow_page_pte+0x10/0x10 [ 661.954681][T12045] __get_user_pages+0x1676/0x2650 [ 661.954710][T12045] get_dump_page+0x1b5/0x410 [ 661.954723][T12045] ? __pfx_get_dump_page+0x10/0x10 [ 661.954734][T12045] ? __asan_memset+0x22/0x50 [ 661.954746][T12045] ? iov_iter_bvec+0xb8/0x180 [ 661.954765][T12045] dump_user_range+0x20a/0x12c0 [ 661.954789][T12045] ? __pfx_dump_user_range+0x10/0x10 [ 661.954806][T12045] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 661.954820][T12045] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 661.954832][T12045] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 661.954847][T12045] ? elf_core_dump+0x2a8f/0x3a90 [ 661.954865][T12045] elf_core_dump+0x3485/0x3a90 [ 661.954890][T12045] ? __pfx_elf_core_dump+0x10/0x10 [ 661.954903][T12045] ? __lock_acquire+0x683/0x2ce0 [ 661.954918][T12045] ? get_signal+0x1095/0x12c0 [ 661.954931][T12045] ? arch_do_signal_or_restart+0xbb/0x860 [ 661.954947][T12045] ? irqentry_exit+0x2ba/0x910 [ 661.954960][T12045] ? asm_exc_page_fault+0x26/0x30 [ 661.954997][T12045] ? vfs_coredump+0x376c/0x4530 [ 661.955011][T12045] ? 0xffffffffff600000 [ 661.955029][T12045] coredump_write+0x129c/0x1970 [ 661.955052][T12045] ? __pfx_coredump_write+0x10/0x10 [ 661.955075][T12045] ? unshare_files+0xab/0x140 [ 661.955093][T12045] vfs_coredump+0x376c/0x4530 [ 661.955118][T12045] ? __pfx_vfs_coredump+0x10/0x10 [ 661.955134][T12045] ? __lock_acquire+0x683/0x2ce0 [ 661.955149][T12045] ? __lock_acquire+0x683/0x2ce0 [ 661.955166][T12045] ? __lock_acquire+0x683/0x2ce0 [ 661.955183][T12045] ? do_raw_spin_lock+0x12b/0x2f0 [ 661.955196][T12045] ? unwind_next_frame+0x8f/0x2550 [ 661.955213][T12045] ? is_bpf_text_address+0x26/0x2b0 [ 661.955235][T12045] ? is_bpf_text_address+0x26/0x2b0 [ 661.955252][T12045] ? is_bpf_text_address+0x292/0x2b0 [ 661.955267][T12045] ? is_bpf_text_address+0x26/0x2b0 [ 661.955284][T12045] ? kernel_text_address+0xa5/0xe0 [ 661.955297][T12045] ? __kernel_text_address+0xd/0x30 [ 661.955308][T12045] ? unwind_get_return_address+0x4d/0x90 [ 661.955321][T12045] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 661.955334][T12045] ? arch_stack_walk+0xfb/0x150 [ 661.955355][T12045] ? __lock_acquire+0x683/0x2ce0 [ 661.955370][T12045] ? __lock_acquire+0x660/0x2ce0 [ 661.955385][T12045] ? kasan_save_track+0x4f/0x80 [ 661.955397][T12045] ? kasan_save_track+0x3e/0x80 [ 661.955409][T12045] ? kasan_save_free_info+0x40/0x50 [ 661.955419][T12045] ? __kasan_slab_free+0x5c/0x80 [ 661.955431][T12045] ? kmem_cache_free+0x187/0x6d0 [ 661.955444][T12045] ? get_signal+0x9e8/0x12c0 [ 661.955456][T12045] ? arch_do_signal_or_restart+0xbb/0x860 [ 661.955470][T12045] ? irqentry_exit+0x2ba/0x910 [ 661.955483][T12045] ? asm_exc_page_fault+0x26/0x30 [ 661.955498][T12045] ? do_raw_spin_lock+0x12b/0x2f0 [ 661.955516][T12045] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 661.955538][T12045] ? proc_coredump_connector+0x187/0x4e0 [ 661.955563][T12045] ? rt_spin_unlock+0x159/0x200 [ 661.955577][T12045] ? rt_spin_unlock+0x165/0x200 [ 661.955595][T12045] get_signal+0x1095/0x12c0 [ 661.955621][T12045] arch_do_signal_or_restart+0xbb/0x860 [ 661.955639][T12045] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 661.955666][T12045] irqentry_exit+0x2ba/0x910 [ 661.955680][T12045] ? trace_irq_disable+0x3b/0x140 [ 661.955697][T12045] asm_exc_page_fault+0x26/0x30 [ 661.955707][T12045] RIP: 0033:0x7fc430443bd7 [ 661.955718][T12045] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 661.955728][T12045] RSP: 002b:00007fc42e7c7120 EFLAGS: 00010202 [ 661.955739][T12045] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc43058e0d9 [ 661.955746][T12045] RDX: 00007fc42e7c7140 RSI: 00007fc42e7c7270 RDI: 000000000000000b [ 661.955753][T12045] RBP: 00007fc430625024 R08: 0000000000000000 R09: 0000000000000000 [ 661.955759][T12045] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 661.955765][T12045] R13: 00007fc430816038 R14: 00007fc430815fa0 R15: 00007ffe3f090dd8 [ 661.955783][T12045] [ 661.974470][T12045] memory: usage 307200kB, limit 307200kB, failcnt 14465 [ 661.974484][T12045] memory+swap: usage 360192kB, limit 9007199254740988kB, failcnt 0 [ 661.974492][T12045] kmem: usage 3668kB, limit 9007199254740988kB, failcnt 0 [ 661.974499][T12045] Memory cgroup stats for /syz3: [ 661.974835][T12045] cache 310296576 [ 661.974841][T12045] rss 520192 [ 661.974845][T12045] shmem 310296576 [ 661.974848][T12045] mapped_file 69439488 [ 661.974852][T12045] dirty 0 [ 661.974856][T12045] writeback 0 [ 661.974859][T12045] workingset_refault_anon 46 [ 661.974863][T12045] workingset_refault_file 0 [ 661.974867][T12045] swap 54263808 [ 661.974870][T12045] swapcached 86310912 [ 661.974874][T12045] pgpgin 501213 [ 661.974877][T12045] pgpgout 425330 [ 661.974881][T12045] pgfault 185873 [ 661.974884][T12045] pgmajfault 46 [ 661.974888][T12045] inactive_anon 310763520 [ 661.974892][T12045] active_anon 53248 [ 661.974895][T12045] inactive_file 0 [ 661.974899][T12045] active_file 0 [ 661.974902][T12045] unevictable 0 [ 661.974906][T12045] hierarchical_memory_limit 314572800 [ 661.974910][T12045] hierarchical_memsw_limit 9223372036854771712 [ 661.974914][T12045] total_cache 310296576 [ 661.974918][T12045] total_rss 520192 [ 661.974922][T12045] total_shmem 310296576 [ 661.974925][T12045] total_mapped_file 69439488 [ 661.974929][T12045] total_dirty 0 [ 661.974933][T12045] total_writeback 0 [ 661.974936][T12045] total_workingset_refault_anon 46 [ 661.974941][T12045] total_workingset_refault_file 0 [ 661.974944][T12045] total_swap 54263808 [ 661.974948][T12045] total_swapcached 86310912 [ 661.974952][T12045] total_pgpgin 501213 [ 661.974956][T12045] total_pgpgout 425330 [ 661.974959][T12045] total_pgfault 185873 [ 661.974963][T12045] total_pgmajfault 46 [ 661.974966][T12045] total_inactive_anon 310763520 [ 661.974970][T12045] total_active_anon 53248 [ 661.974974][T12045] total_inactive_file 0 [ 661.974978][T12045] total_active_file 0 [ 661.974981][T12045] total_unevictable 0 [ 661.974985][T12045] anon_cost 9706 [ 661.974988][T12045] file_cost 5 [ 661.974993][T12045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1996,pid=12045,uid=0 [ 661.975258][T12045] Memory cgroup out of memory: Killed process 12045 (syz.3.1996) total-vm:200556kB, anon-rss:1416kB, file-rss:20612kB, shmem-rss:52832kB, UID:0 pgtables:204kB oom_score_adj:0 [ 665.061091][ T4907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 665.146426][ T4907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 665.151803][ T4907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 665.154178][ T4907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 665.154644][ T4907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 667.251551][ T8869] Bluetooth: hci5: command tx timeout [ 669.323844][ T8869] Bluetooth: hci5: command tx timeout [ 671.416284][ T8869] Bluetooth: hci5: command tx timeout [ 672.265204][ T4907] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 672.304298][ T4907] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 672.311558][ T4907] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 672.312307][ T4907] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 672.312871][ T4907] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 672.674550][ T8869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 672.745887][ T8869] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 672.747327][ T8869] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 672.761065][ T8869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 672.761577][ T8869] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 672.972531][ T8869] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 673.050308][ T8869] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 673.054167][ T8869] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 673.056313][ T8869] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 673.063721][ T8869] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 673.478187][ T8869] Bluetooth: hci5: command tx timeout [ 673.667404][ T4907] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 673.714720][ T4907] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 673.721055][ T4907] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 673.722665][ T4907] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 673.724299][ T4907] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 674.379685][ T4907] Bluetooth: hci6: command tx timeout [ 674.918443][ T4907] Bluetooth: hci7: command tx timeout [ 675.162601][ T4907] Bluetooth: hci8: command tx timeout [ 675.896074][ T4907] Bluetooth: hci9: command tx timeout [ 676.447481][ T4907] Bluetooth: hci6: command tx timeout [ 677.003970][ T4907] Bluetooth: hci7: command tx timeout [ 677.124931][T12388] warning: `syz.3.2131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 677.238842][ T4907] Bluetooth: hci8: command tx timeout [ 677.957947][ T4907] Bluetooth: hci9: command tx timeout [ 678.524191][ T4907] Bluetooth: hci6: command tx timeout [ 679.093917][ T4907] Bluetooth: hci7: command tx timeout [ 679.318459][ T4907] Bluetooth: hci8: command tx timeout [ 679.450007][T12387] bond1: (slave syz_tun): Removing an active aggregator [ 679.450421][T12387] bond1: (slave syz_tun): Releasing backup interface [ 679.466833][T12391] tipc: Resetting bearer [ 679.786748][T12391] bond1: (slave syz_tun): Removing an active aggregator [ 679.787088][T12391] bond1: (slave syz_tun): Releasing backup interface [ 679.796987][T12391] tipc: Resetting bearer [ 679.844016][T12391] tipc: Disabling bearer [ 680.037914][ T4907] Bluetooth: hci9: command tx timeout [ 680.197702][T12411] virt_wifi0 speed is unknown, defaulting to 1000 [ 680.208346][T12405] virt_wifi0 speed is unknown, defaulting to 1000 [ 680.276535][T12420] virt_wifi0 speed is unknown, defaulting to 1000 [ 680.344360][T12397] virt_wifi0 speed is unknown, defaulting to 1000 [ 680.411263][T12408] virt_wifi0 speed is unknown, defaulting to 1000 [ 680.601325][ T4907] Bluetooth: hci6: command tx timeout [ 681.159981][ T8869] Bluetooth: hci7: command tx timeout [ 681.398192][ T8869] Bluetooth: hci8: command tx timeout [ 681.652970][ T3104] bridge_slave_1: left allmulticast mode [ 681.653050][ T3104] bridge_slave_1: left promiscuous mode [ 681.667707][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.676158][ T3104] bridge_slave_0: left allmulticast mode [ 681.676180][ T3104] bridge_slave_0: left promiscuous mode [ 681.676336][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.917178][ T3104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.921795][ T3104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.922812][ T3104] bond0 (unregistering): Released all slaves [ 681.929252][ T3104] bond1 (unregistering): Released all slaves [ 681.943937][ T3104] bond2 (unregistering): Released all slaves [ 682.120957][ T8869] Bluetooth: hci9: command tx timeout [ 683.407577][T12405] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.407703][T12405] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.408145][T12405] bridge_slave_0: entered allmulticast mode [ 683.409652][T12405] bridge_slave_0: entered promiscuous mode [ 683.485920][T12405] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.485989][T12405] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.486089][T12405] bridge_slave_1: entered allmulticast mode [ 683.487540][T12405] bridge_slave_1: entered promiscuous mode [ 683.675970][T12420] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.676057][T12420] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.676325][T12420] bridge_slave_0: entered allmulticast mode [ 683.677764][T12420] bridge_slave_0: entered promiscuous mode [ 683.813017][T12411] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.813102][T12411] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.813197][T12411] bridge_slave_0: entered allmulticast mode [ 683.814644][T12411] bridge_slave_0: entered promiscuous mode [ 683.816921][T12420] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.816987][T12420] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.817091][T12420] bridge_slave_1: entered allmulticast mode [ 683.821324][T12420] bridge_slave_1: entered promiscuous mode [ 683.909843][T12411] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.909913][T12411] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.910036][T12411] bridge_slave_1: entered allmulticast mode [ 683.912923][T12411] bridge_slave_1: entered promiscuous mode [ 683.983205][T12405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.061978][T12397] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.062063][T12397] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.062169][T12397] bridge_slave_0: entered allmulticast mode [ 684.065103][T12397] bridge_slave_0: entered promiscuous mode [ 684.099440][T12405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.175690][T12397] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.175776][T12397] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.175871][T12397] bridge_slave_1: entered allmulticast mode [ 684.178645][T12397] bridge_slave_1: entered promiscuous mode [ 684.183875][T12420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.195846][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 684.197718][T12408] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.197931][T12408] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.198042][T12408] bridge_slave_0: entered allmulticast mode [ 684.199437][T12408] bridge_slave_0: entered promiscuous mode [ 684.216541][T12411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.230403][T12420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.230662][T12408] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.230740][T12408] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.230831][T12408] bridge_slave_1: entered allmulticast mode [ 684.232220][T12408] bridge_slave_1: entered promiscuous mode [ 684.250523][T12411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.300148][ T3104] hsr_slave_0: left promiscuous mode [ 684.301383][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.303183][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.542958][ T3104] team0 (unregistering): Port device team_slave_1 removed [ 684.555125][ T3104] team0 (unregistering): Port device team_slave_0 removed [ 684.796426][T12405] team0: Port device team_slave_0 added [ 684.807357][T12397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.867288][T12405] team0: Port device team_slave_1 added [ 684.871335][T12397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.887657][T12408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.890138][T12411] team0: Port device team_slave_0 added [ 684.893509][T12420] team0: Port device team_slave_0 added [ 684.966012][T12408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.003084][T12411] team0: Port device team_slave_1 added [ 685.004891][T12420] team0: Port device team_slave_1 added [ 685.155331][T12405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.155344][T12405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.155359][T12405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.169140][T12397] team0: Port device team_slave_0 added [ 685.221002][T12405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.221015][T12405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.221030][T12405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.234066][T12397] team0: Port device team_slave_1 added [ 685.250090][T12408] team0: Port device team_slave_0 added [ 685.261116][T12411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.261127][T12411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.261142][T12411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.345334][T12420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.345351][T12420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.345366][T12420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.348040][T12408] team0: Port device team_slave_1 added [ 685.361721][T12411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.361733][T12411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.361748][T12411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.421612][T12420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.421624][T12420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.421639][T12420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.468035][T12397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.468048][T12397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.468063][T12397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.545164][T12397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.545176][T12397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.545191][T12397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.572936][T12408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.572947][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.572962][T12408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.625537][T12408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.625550][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.625566][T12408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.651383][T12405] hsr_slave_0: entered promiscuous mode [ 685.660161][T12405] hsr_slave_1: entered promiscuous mode [ 685.890078][T12411] hsr_slave_0: entered promiscuous mode [ 685.893911][T12411] hsr_slave_1: entered promiscuous mode [ 685.895946][T12411] debugfs: 'hsr0' already exists in 'hsr' [ 685.895963][T12411] Cannot create hsr debugfs directory [ 686.005566][T12420] hsr_slave_0: entered promiscuous mode [ 686.006407][T12420] hsr_slave_1: entered promiscuous mode [ 686.009038][T12420] debugfs: 'hsr0' already exists in 'hsr' [ 686.011284][T12420] Cannot create hsr debugfs directory [ 686.294077][T12397] hsr_slave_0: entered promiscuous mode [ 686.296331][T12397] hsr_slave_1: entered promiscuous mode [ 686.296896][T12397] debugfs: 'hsr0' already exists in 'hsr' [ 686.296912][T12397] Cannot create hsr debugfs directory [ 686.345462][T12408] hsr_slave_0: entered promiscuous mode [ 686.346193][T12408] hsr_slave_1: entered promiscuous mode [ 686.348877][T12408] debugfs: 'hsr0' already exists in 'hsr' [ 686.348894][T12408] Cannot create hsr debugfs directory [ 686.613424][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 686.725968][ T3104] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.928531][ T3104] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.216083][ T3104] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.420829][ T3104] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.496626][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 688.629574][T12405] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 688.654260][T12405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.730850][T12405] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 688.792323][T12405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.826250][T12405] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 688.893082][T12405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 689.020119][T12405] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 689.072921][T12405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.749569][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 [ 689.896940][T12411] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 689.940295][T12411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.978177][T12411] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 689.989655][T12411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.186373][T12411] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 690.288175][T12411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.303234][T12411] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 690.350879][T12411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.818726][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 690.841388][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.841431][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.222854][T12405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.313888][T12420] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 691.320060][T12420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 691.335525][T12420] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 691.346868][T12420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.496657][T12420] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 691.504081][T12420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 691.524080][T12420] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 691.554079][T12420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 691.682828][T12405] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.829516][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.830196][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.944483][ T3104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.065339][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.065415][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.161418][ T3104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.262697][T12408] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 692.300926][T12408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.315626][T12408] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 692.322958][T12408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.571958][ T3104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.623234][T12408] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 692.681599][T12408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.706259][T12408] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 692.737626][T12408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.980596][ T3104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.177499][T12411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.308371][ T5253] 8021q: adding VLAN 0 to HW filter on device eth6 [ 693.476895][T12411] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.508511][T12397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 693.520690][T12397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 693.532154][T12397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 693.536858][T12397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.541127][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.541274][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.693323][T12397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 693.706987][T12397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 693.738444][T12397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 693.754666][T12397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 693.862742][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.862878][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.356577][T12420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.985182][ T3104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.031983][ T5253] 8021q: adding VLAN 0 to HW filter on device eth7 [ 695.135291][T12420] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.312086][ T3104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.352338][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.352419][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.386815][T12408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.426757][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.426848][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.666348][ T3104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.758206][T12405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.763936][T12408] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.807303][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.807429][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.957114][ T3104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.045631][ T9050] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.045715][ T9050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.300101][T12397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.568914][T12397] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.652080][ T9050] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.652165][ T9050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.851665][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.851783][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.999738][ T5253] 8021q: adding VLAN 0 to HW filter on device eth8 [ 698.209097][T12411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.446617][ T3104] bridge_slave_1: left allmulticast mode [ 698.446642][ T3104] bridge_slave_1: left promiscuous mode [ 698.446793][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.454675][ T3104] bridge_slave_0: left allmulticast mode [ 698.454697][ T3104] bridge_slave_0: left promiscuous mode [ 698.454846][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.507190][ T3104] bridge_slave_1: left allmulticast mode [ 698.507215][ T3104] bridge_slave_1: left promiscuous mode [ 698.507368][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.512313][ T3104] bridge_slave_0: left allmulticast mode [ 698.512334][ T3104] bridge_slave_0: left promiscuous mode [ 698.523596][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.537400][ T3104] bridge_slave_1: left allmulticast mode [ 698.537423][ T3104] bridge_slave_1: left promiscuous mode [ 698.537586][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.545129][ T3104] bridge_slave_0: left allmulticast mode [ 698.545151][ T3104] bridge_slave_0: left promiscuous mode [ 698.545278][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.583790][ T3104] bridge_slave_1: left allmulticast mode [ 698.583816][ T3104] bridge_slave_1: left promiscuous mode [ 698.583971][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.585644][ T3104] bridge_slave_0: left allmulticast mode [ 698.585662][ T3104] bridge_slave_0: left promiscuous mode [ 698.585783][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.092001][ T3104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.099143][ T3104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.100934][ T3104] bond0 (unregistering): Released all slaves [ 699.106805][ T3104] bond1 (unregistering): Released all slaves [ 699.372914][ T3104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.374609][ T3104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.375252][ T3104] bond0 (unregistering): Released all slaves [ 699.383303][ T3104] bond1 (unregistering): Released all slaves [ 699.404267][ T3104] bond2 (unregistering): Released all slaves [ 699.629191][ T3104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.631446][ T3104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.633015][ T3104] bond0 (unregistering): Released all slaves [ 699.651953][ T3104] bond1 (unregistering): Released all slaves [ 699.925836][ T3104] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 700.013000][ T3104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.016448][ T3104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.018720][ T3104] bond0 (unregistering): Released all slaves [ 700.025087][ T3104] bond1 (unregistering): Released all slaves [ 700.047011][ T3104] bond2 (unregistering): Released all slaves [ 700.061356][ T3104] bond3 (unregistering): Released all slaves [ 700.071851][ T3104] bond4 (unregistering): Released all slaves [ 700.087368][ T3104] bond5 (unregistering): (slave bond6): Releasing backup interface [ 700.088505][ T3104] bond5 (unregistering): Released all slaves [ 700.099163][ T3104] bond6 (unregistering): Released all slaves [ 700.326257][T12405] veth0_vlan: entered promiscuous mode [ 700.596679][ T3104] tipc: Left network mode [ 700.659324][T12405] veth1_vlan: entered promiscuous mode [ 700.864447][T12420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.191437][T12405] veth0_macvtap: entered promiscuous mode [ 701.242043][T12405] veth1_macvtap: entered promiscuous mode [ 701.385976][T12405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.439651][T12405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.797346][T12408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.961486][T12411] veth0_vlan: entered promiscuous mode [ 702.038903][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.670590][T12411] veth1_vlan: entered promiscuous mode [ 703.571164][T12405] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 703.576037][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 703.983446][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.983462][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.992411][T12397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.087220][T12405] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 704.261183][T12411] veth0_macvtap: entered promiscuous mode [ 704.284730][T12420] veth0_vlan: entered promiscuous mode [ 704.393128][T12411] veth1_macvtap: entered promiscuous mode [ 704.681189][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.681204][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.854182][T12420] veth1_vlan: entered promiscuous mode [ 704.877114][T12408] veth0_vlan: entered promiscuous mode [ 705.013346][T12411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.047656][T12411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.049810][T12408] veth1_vlan: entered promiscuous mode [ 705.826932][T12420] veth0_macvtap: entered promiscuous mode [ 705.908386][T12420] veth1_macvtap: entered promiscuous mode [ 706.324471][T12408] veth0_macvtap: entered promiscuous mode [ 706.510109][T12411] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 706.550077][T12408] veth1_macvtap: entered promiscuous mode [ 706.600484][T12397] veth0_vlan: entered promiscuous mode [ 706.824045][ T3104] hsr_slave_0: left promiscuous mode [ 706.841716][ T3104] hsr_slave_1: left promiscuous mode [ 706.842397][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.842560][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.843629][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.843644][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.853337][ T3104] hsr_slave_0: left promiscuous mode [ 706.853861][ T3104] hsr_slave_1: left promiscuous mode [ 706.854460][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.856257][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.954882][ T3104] hsr_slave_0: left promiscuous mode [ 706.955349][ T3104] hsr_slave_1: left promiscuous mode [ 706.955921][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.955935][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.956493][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.956507][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.977343][ T3104] hsr_slave_0: left promiscuous mode [ 707.001345][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.001364][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.001958][ T3104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.001971][ T3104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.588711][ T3104] veth1_macvtap: left promiscuous mode [ 707.594556][ T3104] veth0_macvtap: left promiscuous mode [ 707.609583][ T3104] veth1_macvtap: left promiscuous mode [ 707.610618][ T3104] veth1_vlan: left promiscuous mode [ 707.644235][ T3104] veth0_vlan: left promiscuous mode [ 707.648516][ T3104] veth1_macvtap: left promiscuous mode [ 707.648553][ T3104] veth0_macvtap: left promiscuous mode [ 707.648644][ T3104] veth1_vlan: left promiscuous mode [ 707.648714][ T3104] veth0_vlan: left promiscuous mode [ 708.875789][ T4361] smbdirect: ib_dev[syz2] removed [ 709.296436][ T3104] team0 (unregistering): Port device team_slave_1 removed [ 709.307271][ T3104] team0 (unregistering): Port device team_slave_0 removed [ 709.707692][ T3104] team0 (unregistering): Port device team_slave_1 removed [ 709.726714][ T3104] team0 (unregistering): Port device team_slave_0 removed [ 710.285238][ T5253] 8021q: adding VLAN 0 to HW filter on device eth10 [ 710.401302][T12420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.424270][ T9050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.424285][ T9050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.430148][T12411] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 710.491403][T12397] veth1_vlan: entered promiscuous mode [ 710.672497][T12420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.764753][ T9050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.764767][ T9050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.773372][T12408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.836135][T12408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.099228][T12397] veth0_macvtap: entered promiscuous mode [ 711.176192][T12397] veth1_macvtap: entered promiscuous mode [ 711.563697][T12420] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 712.581395][T12408] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 712.621140][T12397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.649847][ T1496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.649862][ T1496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.706670][T12397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.996921][T12420] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 713.017361][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.017376][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.245177][T12408] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 713.266988][ T1496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.267005][ T1496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.606530][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.606545][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.144226][T12397] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 714.697313][ T3409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.697331][ T3409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.927243][T12820] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12405] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12820] [ 714.979875][T12397] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 715.642228][ T5253] 8021q: adding VLAN 0 to HW filter on device eth11 [ 716.284800][ T3100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.284816][ T3100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.934636][ T1017] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.608067][ T1496] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609656][ T3100] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609683][ T3100] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609703][ T3100] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609722][ T3100] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609741][ T3100] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609760][ T3100] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609780][ T3100] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609798][ T3100] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609817][ T3100] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609837][ T3100] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609855][ T3100] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609874][ T3100] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609893][ T3100] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609911][ T3100] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609930][ T3100] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609949][ T3100] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.609968][ T3100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.537408][T12861] jffs2: notice: (12861) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 720.754676][ T5253] 8021q: adding VLAN 0 to HW filter on device eth12 [ 722.280122][T12906] block nbd5: shutting down sockets [ 722.935780][T12926] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2161'. [ 723.505062][T12926] unsupported nlmsg_type 40 [ 723.938548][ T5726] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 724.097861][ T5726] usb 8-1: Using ep0 maxpacket: 8 [ 724.098378][ T5726] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 724.098868][ T5726] usb 8-1: config 0 has no interfaces? [ 724.098887][ T5726] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.329036][ T5726] usb 8-1: config 0 descriptor?? [ 724.716852][T12816] usb 8-1: USB disconnect, device number 2 [ 725.339409][T12955] syzkaller0: entered promiscuous mode [ 725.339428][T12955] syzkaller0: entered allmulticast mode [ 725.365686][T12933] dummy_hcd dummy_hcd.0: remove, state 4 [ 725.365925][T12933] usb usb1: USB disconnect, device number 1 [ 725.750983][T12816] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 725.942815][T12950] tipc: Started in network mode [ 725.942837][T12950] tipc: Node identity 86037f0b673c, cluster identity 4711 [ 726.154673][T12950] tipc: Enabled bearer , priority 0 [ 726.220022][T12816] usb 6-1: unable to get BOS descriptor or descriptor too short [ 726.220057][T12816] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 726.220087][T12816] usb 6-1: no configurations [ 726.220094][T12816] usb 6-1: can't read configurations, error -22 [ 726.466815][T12948] tipc: Resetting bearer [ 726.686728][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 726.686744][ T36] audit: type=1804 audit(1787747833.747:1364): pid=12969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.2170" name="/newroot/7/file0" dev="tmpfs" ino=53 res=1 errno=0 [ 727.151253][T12948] tipc: Disabling bearer [ 727.391947][ T5727] tipc: Node number set to 3779034891 [ 727.677540][T12974] bond1 (unregistering): Released all slaves [ 728.310484][T12933] dummy_hcd dummy_hcd.0: stopped [ 728.310500][T12933] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 728.524345][T12816] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 728.696699][T12816] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 728.697640][T12816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.697670][T12816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.896748][T12816] as10x_usb: device has been detected [ 728.897288][T12816] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 729.284607][T12816] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 729.652843][T12991] tipc: Started in network mode [ 729.652863][T12991] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 729.754952][T12991] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 730.062437][T13012] comedi comedi3: unsupported base address 0x2000 [ 730.318837][T12991] tipc: Enabled bearer , priority 10 [ 730.565331][T13019] INFO: trying to register non-static key. [ 738.714272][T13019] The code is fine but needs lockdep annotation, or maybe [ 738.721367][T13019] you didn't initialize this object before use? [ 738.727651][T13019] turning off the locking correctness validator. [ 738.733971][T13019] CPU: 0 UID: 0 PID: 13019 Comm: syz.5.2172 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 738.745500][T13019] Tainted: [L]=SOFTLOCKUP [ 738.749806][T13019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.759837][T13019] Call Trace: [ 738.763099][T13019] [ 738.766011][T13019] dump_stack_lvl+0xe8/0x150 [ 738.770600][T13019] assign_lock_key+0x133/0x150 [ 738.775366][T13019] register_lock_class+0xcc/0x2e0 [ 738.780372][T13019] ? __lock_acquire+0x683/0x2ce0 [ 738.785286][T13019] __lock_acquire+0xab/0x2ce0 [ 738.789953][T13019] ? __lock_acquire+0x683/0x2ce0 [ 738.794869][T13019] ? __lock_acquire+0x683/0x2ce0 [ 738.799784][T13019] ? __lock_acquire+0x683/0x2ce0 [ 738.804699][T13019] ? as102_stream_ctrl+0x27/0xc0 [ 738.809704][T13019] lock_acquire+0x106/0x350 [ 738.814183][T13019] ? as102_stream_ctrl+0x27/0xc0 [ 738.819102][T13019] ? as102_stream_ctrl+0x27/0xc0 [ 738.824016][T13019] ? as102_stream_ctrl+0x27/0xc0 [ 738.828928][T13019] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 738.834973][T13019] ? as102_stream_ctrl+0x27/0xc0 [ 738.839890][T13019] as102_stream_ctrl+0x27/0xc0 [ 738.844632][T13019] __dvb_frontend_open+0x2ef/0xc40 [ 738.849830][T13019] ? mutex_lock_nested+0x152/0x1d0 [ 738.855355][T13019] ? __pfx_dvb_frontend_open+0x10/0x10 [ 738.860792][T13019] dvb_device_open+0x258/0x350 [ 738.865580][T13019] chrdev_open+0x4dc/0x600 [ 738.869975][T13019] ? __pfx_chrdev_open+0x10/0x10 [ 738.874905][T13019] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 738.881314][T13019] ? __pfx_chrdev_open+0x10/0x10 [ 738.886230][T13019] do_dentry_open+0x849/0x1420 [ 738.890976][T13019] vfs_open+0x3b/0x350 [ 738.895023][T13019] ? path_openat+0x142d/0x1d60 [ 738.899783][T13019] path_openat+0x1448/0x1d60 [ 738.904356][T13019] do_file_open+0x23e/0x4a0 [ 738.908837][T13019] ? __pfx_do_file_open+0x10/0x10 [ 738.913840][T13019] ? alloc_fd+0x654/0x6d0 [ 738.918171][T13019] do_sys_openat2+0x115/0x200 [ 738.922888][T13019] ? __pfx_do_sys_openat2+0x10/0x10 [ 738.928083][T13019] __x64_sys_openat+0x138/0x170 [ 738.932932][T13019] do_syscall_64+0x166/0x520 [ 738.937528][T13019] ? trace_irq_disable+0x3b/0x140 [ 738.942532][T13019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.948578][T13019] ? clear_bhb_loop+0x70/0xc0 [ 738.953238][T13019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.959110][T13019] RIP: 0033:0x7fb43c3ee90e [ 738.963503][T13019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 738.983098][T13019] RSP: 002b:00007fb439dfdb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 738.991589][T13019] RAX: ffffffffffffffda RBX: 00007fb439dfe6c0 RCX: 00007fb43c3ee90e [ 738.999558][T13019] RDX: 0000000000000802 RSI: 00007fb439dfdc00 RDI: ffffffffffffff9c [ 739.007513][T13019] RBP: 00007fb439dfdc00 R08: 0000000000000000 R09: 0000000000000000 [ 739.015468][T13019] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 739.023427][T13019] R13: 00007fb43c6b63f8 R14: 00007fb43c6b6360 R15: 00007ffe7f20d818 [ 739.031408][T13019]