last executing test programs: 6.956936581s ago: executing program 2 (id=134): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @loopback, 0x4e23, 0x3, 'sed\x00', 0x0, 0x80005, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xce}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 4.7886803s ago: executing program 2 (id=141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040), 0x10) read(r1, &(0x7f0000000680)=""/4082, 0xff2) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000001680)=0x2, 0x4) sendmsg$can_raw(r1, &(0x7f00000016c0)={&(0x7f0000001700)={0x1d, r2}, 0x10, &(0x7f0000001740)={&(0x7f0000001780)=@can={{0x1, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "00119a7d1a39f603"}, 0x10}}, 0x4000040) 4.600390123s ago: executing program 2 (id=144): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 4.228665612s ago: executing program 2 (id=147): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0xffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x4) close(0x3) 4.195029508s ago: executing program 0 (id=148): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0xfac7}) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4095, 0x440000}], 0x100000000000011a) 3.899864825s ago: executing program 2 (id=152): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @loopback, 0x4e23, 0x3, 'sed\x00', 0x0, 0x80005, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xce}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 3.743660315s ago: executing program 3 (id=155): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000600)="b0", 0x1, 0x0, &(0x7f0000000640)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f0000000b40)='{', 0x1, 0x0, 0x0, 0x0) accept(r0, 0x0, 0x0) 3.215282927s ago: executing program 3 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000000b40)={'syzkaller0\x00', @random="440000004ec6"}) r1 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/anycast6\x00') read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2020) 3.064615712s ago: executing program 4 (id=159): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x0, 0x25}, 'syz0\x00', 0x43}) pselect6(0x40, &(0x7f0000000080)={0x1, 0x9, 0x100, 0x8, 0x4, 0x1, 0xaa, 0x9}, 0x0, &(0x7f0000000180)={0x9, 0x8000000000000001, 0x8, 0x3, 0x5, 0x9, 0x9, 0x1000}, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.911770795s ago: executing program 1 (id=160): unshare(0x6020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x8000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r2, 0x7}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000440)={r2, 0x6, 0x1}) 2.822056509s ago: executing program 3 (id=161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 2.752579685s ago: executing program 0 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xa, 0xffff}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) 2.561009195s ago: executing program 1 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000600)={0x2, 0x4000008d, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x8b, 0x0, 0xfffffffffffffffe}]}) 2.485101039s ago: executing program 3 (id=164): syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @vbi={0xfffffff7, 0x5, 0x7, 0x50323234, [0x1, 0x1], [0x0, 0x40000000], 0x1}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x48, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0xb, 0x1}, 0x0, 0x24, &(0x7f0000000340)="788e1c9ff42fb20a33ff9f6d2dbc1e930eb695691253f08990672d1cde0ff95bce076a666db7808eb1c034431b4306d49ee3fc38fa9cc1199db5b7ead53e4111fa673cf82d493bd9ca0a41c3a6743fce815ecf739ef65e50a638e4c4a76f98eedcc8aa3a71745b1c8692a5f1620a0abc631c6a6c7096", 0x76, 0x4, 0xb510, 0x0, 0x1, 0x9, &(0x7f0000000480)="ade43472067353d2903a52ee0be97f"}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x32a9, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_FUTEX_WAKE={0x34, 0x4, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x5}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000180)={0x2710, 0x7, 0xdddd4000, 0x1000, &(0x7f0000000000/0x1000)=nil, 0x4000, r1}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4d87, 0x101200) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="5c0000001019d2abcefb490400000102400000000000000000ffff5d03b00f86472121351652933ce6871c97cc1380c4f5b96f1d05a2083f047419a4472ce5007ac5e8a442c883e8e60a5765f07a35819d1d242f5eca1c95e956fef36cceb3b6b0eae37baa68ed6212d15c01755010fef39f517efa43df7c358f85afb01d30818df83cfcfec3c399e96c05", @ANYRES32=0x0, @ANYBLOB="88d10100000000002800128009000100766c616e0000000018000280100004800c00010002000000ff0f00000400038014000300766c616e3000"/68], 0x5c}, 0x1, 0x0, 0x0, 0x40001c0}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000140)='\x00', &(0x7f0000000780)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r9, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.450515041s ago: executing program 0 (id=165): memfd_create(&(0x7f0000000080)='%\x00', 0x3) fanotify_init(0x200, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.192478398s ago: executing program 0 (id=166): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f0000000300)='./file1\x00', 0x18, 0x0, 0x12345}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = eventfd2(0x0, 0x800) read$eventfd(r4, &(0x7f0000000000), 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2.140033038s ago: executing program 1 (id=167): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) madvise(&(0x7f00002b5000/0x2000)=nil, 0x2000, 0x9) 1.994275259s ago: executing program 4 (id=168): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[], 0x50) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x7ffffffffd) ptrace$pokeuser(0x6, r0, 0x388, 0x8000) ptrace$pokeuser(0x6, r0, 0x388, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.920207597s ago: executing program 0 (id=169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000004140)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xf, 0x800, 0x5, 0xf738, {0xb, 0x2, 0x0, 0x2, 0x200, 0x1}, {0x2, 0x1, 0x1, 0x0, 0xffff}, 0xd8, 0xeb}}]}]}}]}, 0x74}}, 0x0) 1.62003197s ago: executing program 4 (id=170): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) close(r0) 1.542513722s ago: executing program 0 (id=171): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.476571001s ago: executing program 2 (id=172): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = gettid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x800, 0x5, {r0}, {0xee01}, 0xfffffffffffffffc, 0x7ff}) r1 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x802) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000280)) writev(r4, &(0x7f00000002c0), 0x0) read(r4, 0x0, 0x70) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000340)) r5 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x500, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x5, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3a, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @private0, 0xffff}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x18}, @sadb_address={0x5, 0x5, 0x8a, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffff, @mcast1, 0x9ed6}}]}, 0x70}}, 0x24008840) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000540)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000600)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008004}, 0x20040815) timer_create(0x0, &(0x7f0000000640)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000680)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000006c0)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) unshare(0x26020480) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 1.264951937s ago: executing program 4 (id=173): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000480)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x2, [0x3, 0x1]}, 0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000300)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='6', 0x1}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) 1.165942454s ago: executing program 3 (id=174): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x15, r1}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 955.330407ms ago: executing program 1 (id=175): syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x2242) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000380)=[{0x28, 0x0, 0xb, 0xfffff034}, {0x48, 0x3, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f00000005c0)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0x20044800) 724.414803ms ago: executing program 4 (id=176): r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) syz_emit_ethernet(0x63e, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x608, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x5, 0xe, "7db4000005d4a3b4364be7baa2d73b4ac24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d980110420fa979a3"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x1f, 0x4, "d429145c793e823829b4376332b2c98aee2dae3e1cb11adb2b381eb30650ac6c45f9"}, {0x0, 0xa2, "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"}]}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, [@hopopts={0x3a}], '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0xb0) 617.451171ms ago: executing program 1 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newspdinfo={0x14, 0x24, 0x8, 0x70bd27, 0x25dfdbfb, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000090) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r2, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000300)="11eb030086dd", 0x6, 0x2404c081, &(0x7f0000000340)={0x11, 0x88a8, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) 503.949492ms ago: executing program 3 (id=178): syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @vbi={0xfffffff7, 0x5, 0x7, 0x50323234, [0x1, 0x1], [0x0, 0x40000000], 0x1}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x48, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0xb, 0x1}, 0x0, 0x24, &(0x7f0000000340)="788e1c9ff42fb20a33ff9f6d2dbc1e930eb695691253f08990672d1cde0ff95bce076a666db7808eb1c034431b4306d49ee3fc38fa9cc1199db5b7ead53e4111fa673cf82d493bd9ca0a41c3a6743fce815ecf739ef65e50a638e4c4a76f98eedcc8aa3a71745b1c8692a5f1620a0abc631c6a6c7096", 0x76, 0x4, 0xb510, 0x0, 0x1, 0x9, &(0x7f0000000480)="ade43472067353d2903a52ee0be97f"}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x32a9, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_FUTEX_WAKE={0x34, 0x4, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x5}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000180)={0x2710, 0x7, 0xdddd4000, 0x1000, &(0x7f0000000000/0x1000)=nil, 0x4000, r1}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4d87, 0x101200) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000002c0)={0xf0f001, 0xfffffffb}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="5c0000001019d2abcefb490400000102400000000000000000ffff5d03b00f86472121351652933ce6871c97cc1380c4f5b96f1d05a2083f047419a4472ce5007ac5e8a442c883e8e60a5765f07a35819d1d242f5eca1c95e956fef36cceb3b6b0eae37baa68ed6212d15c01755010fef39f517efa43df7c358f85afb01d30818df83cfcfec3c399e96c05", @ANYRES32=0x0, @ANYBLOB="88d10100000000002800128009000100766c616e0000000018000280100004800c00010002000000ff0f00000400038014000300766c616e3000"/68], 0x5c}, 0x1, 0x0, 0x0, 0x40001c0}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000140)='\x00', &(0x7f0000000780)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r9, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 401.825243ms ago: executing program 4 (id=179): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)={0x20, 0xb, 0x1, "f7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=180): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000500)=0x79, 0x4) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000600)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="1787ef8b7a23897f0de1bd82b1009dc6841376d01fb80189ce810a4e112079ba10d349ac3a16cd140fee5b3dda921394b22af6b7eec13678fe837027fb25c614ac7ed5b898624d12c2ff844c19ab42e7ebe8c8c4d383d09fc365041fc85ef9cf76596780f2f2cfecf28156ef7e98a8e2be8d8a7bc8291334eb782d8923c7c99ac738dc9f5ca72ed68e6a808726485e7f2def663c9d9a8b90e5d1", 0x9a}, {&(0x7f0000000a00)="91da5abc3faa3b4f1e812a16aa3a6dba482220731927cd8138ab958c743284aec37bfe9ef561cca7c22bd7112075870452ad4f5088d40a92de82e25ff919a126f18427852d5eb07b85c48d898bd844957fff5cd6951e24bc6ae626ccfc49f597ce70b3446f7634209471d31cea11d072c66d8b136b68084d476799c8f1e9626ecbadf753cefe8a7cd84d091a", 0x8c}], 0x2}}], 0x2, 0x60d0) sendmsg$xdp(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000fc0)="5aeb102e74bc394d84aceba7f47053152172efdbd7", 0x15}, {&(0x7f0000001000)="8bedfe3b1781df82e427fd36ca824223fffdb75e17126adf6f40e330d508bc9b1272ce0d37dabc2c8f923a6f43d84e1c99f33c75084468dc35773b6492e37d6a0a5553a0810455184f9ce1d85e6503646ab9364d07958df0b94470fdd8123618ef2fd1a4c9885ab1c98306e2814efa89aabb70f13ae5f21d3da3f9cd80dc8c2984cf25c7e299a4af6aede4a2fbadd5eca97d66f7dbedf8f393de8de6e66d1821e2f1185e683e2687b7a6535923d029b8c3267baf34be905d63c51817a8873bfc6a5c18eab4839278fb239e60ce0cf9db0631d5675bb1582f05c961a1c437bbe1f6f7a7c535ed9b022a1b989710089fb10626", 0xf2}, {&(0x7f0000001100)="c4fd87bb1f97f7617b7ee3222cfdf5e1c1db9088850d9bc57c16e97da906dcbcb948e9e9825d5b502fb631622c605cf9daae7678aec05ad2fcf52200aa3e24ea0ff451f9078438b645", 0x49}, {&(0x7f0000001180)="b84fd52c35f879e4f8cf6ed3e021e68dc471965103293535901eace9975e15b51fed0e834d7f19828cef7a5f9a2da529b6585ca6e18cd1e53c3d43ff17e68d0c4b87d7b1b616bee219835ea072cb862efb4403aea4d84fb15133966dcb9e4d4fa2ffabf1641fff32261b47a1ba9a52b25ecd77209a4f038b331592ba14ba806edb7cfa7e22dc8bbf434a78c0e2a381ecc76a80613607f47bc92ff98177519a0ac66b664b3c49cb44db04e656d3b6a3403ff792aa4511b5ddcd977a3b699164ba1499e8a71e", 0xc5}, {&(0x7f0000001280)="440ea53125ac7362", 0x8}, {&(0x7f00000012c0)="a5ea457986fac1c52ef4a8c5d27394845e18685653ac80f426074b968916cd7ed6826768de5149be1565673535f3826eb42d254e3d0a35f8f5ef92f767b06043467f4b1aebd4d3a71c6bd3add38bff891730850d5d32c6e92f2cba", 0x5b}, {&(0x7f0000001340)="7e0520ee2dee5966bdc4821c363f17f7c39037630d1c6320ac801c4d34808048c0901b19924b361e7d16421dddd5db829cc50704bd27ec932992fb712f090685ef07417f54d944a323f45ad8d28a82840297ff7a4c1986911597e1b4", 0x5c}, {&(0x7f00000013c0)="128e4d1a06e671e1606c2aa65664fa1771be4754442fddaad1c1ea536ff59894589d5fd0d0ccc85b3026bb4b6522548b36c4cda7377c4448215bb72c6c2116d07b6fbcde3763409d245b90d227cfaff6", 0x50}, {&(0x7f0000001440)="b7476e20b44e442ce1e9428d31dc036b7284918476e85ac6b4166d5b1e57cb32b2b5e06ed401977473d3b52364", 0x2d}], 0x9, 0x0, 0x0, 0x80}, 0x8080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 76.573391][ T5621] cgroup: Unknown subsys name 'net' [ 76.663736][ T5621] cgroup: Unknown subsys name 'cpuset' [ 76.673709][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.232358][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.452518][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.453815][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.455350][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.459808][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.468641][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.469065][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.470528][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.471637][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.471717][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.472943][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.473114][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.474049][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.474459][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.475829][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.476376][ T5643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.476555][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.484209][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.485087][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.486895][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.494664][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.502812][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.510894][ T4952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.511106][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.512480][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.512623][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.713825][ T5649] br_netfilter no longer supported in user namespaces [ 81.245648][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.245954][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.246122][ T5649] bridge_slave_0: entered allmulticast mode [ 81.248047][ T5649] bridge_slave_0: entered promiscuous mode [ 81.300803][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.300951][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.301098][ T5649] bridge_slave_1: entered allmulticast mode [ 81.303053][ T5649] bridge_slave_1: entered promiscuous mode [ 81.408644][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.463644][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.535788][ T5649] team0: Port device team_slave_0 added [ 81.572545][ T5649] team0: Port device team_slave_1 added [ 81.698398][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.698418][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.698444][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.757488][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.757504][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.757526][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.855862][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.856070][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.856447][ T5652] bridge_slave_0: entered allmulticast mode [ 81.858530][ T5652] bridge_slave_0: entered promiscuous mode [ 81.934782][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.934917][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.935048][ T5652] bridge_slave_1: entered allmulticast mode [ 81.937272][ T5652] bridge_slave_1: entered promiscuous mode [ 82.096895][ T5649] hsr_slave_0: entered promiscuous mode [ 82.098296][ T5649] hsr_slave_1: entered promiscuous mode [ 82.146932][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.147126][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.147586][ T5650] bridge_slave_0: entered allmulticast mode [ 82.171896][ T5650] bridge_slave_0: entered promiscuous mode [ 82.208503][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.208874][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.209007][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.209143][ T5651] bridge_slave_0: entered allmulticast mode [ 82.225238][ T5651] bridge_slave_0: entered promiscuous mode [ 82.228265][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.228493][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.229018][ T5651] bridge_slave_1: entered allmulticast mode [ 82.231225][ T5651] bridge_slave_1: entered promiscuous mode [ 82.232759][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.232861][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.233269][ T5650] bridge_slave_1: entered allmulticast mode [ 82.235264][ T5650] bridge_slave_1: entered promiscuous mode [ 82.264586][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.381565][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.385689][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.386830][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.386944][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.387093][ T5653] bridge_slave_0: entered allmulticast mode [ 82.389202][ T5653] bridge_slave_0: entered promiscuous mode [ 82.412419][ T5652] team0: Port device team_slave_0 added [ 82.416840][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.420941][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.421248][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.421354][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.421477][ T5653] bridge_slave_1: entered allmulticast mode [ 82.423656][ T5653] bridge_slave_1: entered promiscuous mode [ 82.439724][ T5652] team0: Port device team_slave_1 added [ 82.531158][ T5636] Bluetooth: hci1: command tx timeout [ 82.569631][ T5651] team0: Port device team_slave_0 added [ 82.573285][ T5650] team0: Port device team_slave_0 added [ 82.577851][ T5653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.597066][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.597082][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.597103][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.614565][ T5651] team0: Port device team_slave_1 added [ 82.616997][ T5650] team0: Port device team_slave_1 added [ 82.620111][ T5636] Bluetooth: hci2: command tx timeout [ 82.633091][ T5636] Bluetooth: hci4: command tx timeout [ 82.633235][ T5636] Bluetooth: hci0: command tx timeout [ 82.633324][ T5636] Bluetooth: hci3: command tx timeout [ 82.657434][ T5653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.658354][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.658366][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.658390][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.745168][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.745186][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.745212][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.746513][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.746527][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.746551][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.829134][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.829151][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.829175][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.858586][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.858604][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.858627][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.863197][ T5653] team0: Port device team_slave_0 added [ 82.903528][ T5653] team0: Port device team_slave_1 added [ 82.910946][ T5652] hsr_slave_0: entered promiscuous mode [ 82.912006][ T5652] hsr_slave_1: entered promiscuous mode [ 82.912765][ T5652] debugfs: 'hsr0' already exists in 'hsr' [ 82.912842][ T5652] Cannot create hsr debugfs directory [ 82.971280][ T5650] hsr_slave_0: entered promiscuous mode [ 82.971999][ T5650] hsr_slave_1: entered promiscuous mode [ 82.972503][ T5650] debugfs: 'hsr0' already exists in 'hsr' [ 82.972532][ T5650] Cannot create hsr debugfs directory [ 83.069621][ T5651] hsr_slave_0: entered promiscuous mode [ 83.070991][ T5651] hsr_slave_1: entered promiscuous mode [ 83.071716][ T5651] debugfs: 'hsr0' already exists in 'hsr' [ 83.071733][ T5651] Cannot create hsr debugfs directory [ 83.072531][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.072543][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.072565][ T5653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.142423][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.142437][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.142452][ T5653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.278580][ T5649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.291739][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.332114][ T5649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.335865][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.375891][ T5649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.379686][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.388762][ T5653] hsr_slave_0: entered promiscuous mode [ 83.389816][ T5653] hsr_slave_1: entered promiscuous mode [ 83.391510][ T5653] debugfs: 'hsr0' already exists in 'hsr' [ 83.391535][ T5653] Cannot create hsr debugfs directory [ 83.428313][ T5649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.432565][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.693440][ T5652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.698151][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.713142][ T5652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.723381][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.730427][ T5652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.741949][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.742871][ T5652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.747183][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.864319][ T5650] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.867616][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.868456][ T5650] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.882486][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.894944][ T5650] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.908651][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.909298][ T5650] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.923072][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.978598][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.051914][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.052987][ T5651] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.056505][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.057223][ T5651] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.073365][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.104122][ T5651] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.108941][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.109936][ T5651] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.121655][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.130372][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.130613][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.181827][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.181891][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.279653][ T5653] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.291224][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.312630][ T5653] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.315764][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.324873][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.334769][ T5653] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.339837][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.341722][ T5653] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.347382][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.416782][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.425450][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.464741][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.464807][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.484731][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.484856][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.523666][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.583880][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.584013][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.603720][ T5652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.603743][ T5652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.616400][ T5635] Bluetooth: hci1: command tx timeout [ 84.643818][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.676280][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.677942][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.678054][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.690691][ T5635] Bluetooth: hci3: command tx timeout [ 84.690722][ T5635] Bluetooth: hci0: command tx timeout [ 84.690743][ T5635] Bluetooth: hci4: command tx timeout [ 84.690763][ T5635] Bluetooth: hci2: command tx timeout [ 84.749879][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.762552][ T5651] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.773849][ T5653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.793237][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.793362][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.795523][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.795588][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.904248][ T5653] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.905897][ T5649] veth0_vlan: entered promiscuous mode [ 84.948026][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.948139][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.981841][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.981905][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.992614][ T5649] veth1_vlan: entered promiscuous mode [ 85.015888][ T5652] veth0_vlan: entered promiscuous mode [ 85.045934][ T5652] veth1_vlan: entered promiscuous mode [ 85.083122][ T5649] veth0_macvtap: entered promiscuous mode [ 85.107459][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.133361][ T5649] veth1_macvtap: entered promiscuous mode [ 85.165444][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.179719][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.215087][ T5652] veth0_macvtap: entered promiscuous mode [ 85.229441][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.260049][ T5652] veth1_macvtap: entered promiscuous mode [ 85.294642][ T5653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.300713][ T140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.300924][ T140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.300958][ T140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.349119][ T5650] veth0_vlan: entered promiscuous mode [ 85.372515][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.403305][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.432789][ T5650] veth1_vlan: entered promiscuous mode [ 85.462961][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.462985][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.478674][ T5651] veth0_vlan: entered promiscuous mode [ 85.493442][ T5651] veth1_vlan: entered promiscuous mode [ 85.500327][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.504745][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.504825][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.504859][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.576799][ T5651] veth0_macvtap: entered promiscuous mode [ 85.610628][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.612739][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.612758][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.632977][ T5651] veth1_macvtap: entered promiscuous mode [ 85.691432][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.709133][ T5653] veth0_vlan: entered promiscuous mode [ 85.758200][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.763647][ T5650] veth0_macvtap: entered promiscuous mode [ 85.764818][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.764833][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.784431][ T5650] veth1_macvtap: entered promiscuous mode [ 85.796458][ T5653] veth1_vlan: entered promiscuous mode [ 85.850086][ T1008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.850137][ T1008] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.850573][ T982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.852029][ T982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.888990][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.889012][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.924639][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.937359][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.980485][ T5649] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.060434][ T982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.155540][ T5653] veth0_macvtap: entered promiscuous mode [ 86.202771][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.203224][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.208994][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.209016][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.213657][ T5653] veth1_macvtap: entered promiscuous mode [ 86.241768][ T140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.284950][ T5740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'. [ 86.285183][ T5740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'. [ 86.393151][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.436626][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.436649][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.458557][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.562074][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.627401][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.627510][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.627554][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.627568][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.690609][ T5636] Bluetooth: hci1: command tx timeout [ 86.758170][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.758194][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.771668][ T5636] Bluetooth: hci2: command tx timeout [ 86.771701][ T5636] Bluetooth: hci4: command tx timeout [ 86.771722][ T5636] Bluetooth: hci0: command tx timeout [ 86.771743][ T5636] Bluetooth: hci3: command tx timeout [ 86.782593][ T1008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.812497][ T5729] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.870054][ T5709] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.897066][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.897088][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.971648][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 86.974407][ T5729] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 86.982622][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.004918][ T5729] usb 4-1: config 0 descriptor?? [ 87.033793][ T5709] usb 3-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 87.034764][ T970] cfg80211: failed to load regulatory.db [ 87.039553][ T5709] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 87.039580][ T5709] usb 3-1: config 0 has no interface number 0 [ 87.039624][ T5709] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.053840][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.053862][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.097664][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.097693][ T5709] usb 3-1: Product: syz [ 87.097707][ T5709] usb 3-1: Manufacturer: syz [ 87.097722][ T5709] usb 3-1: SerialNumber: syz [ 87.131092][ T5709] usb 3-1: config 0 descriptor?? [ 87.149486][ T5709] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 87.245966][ T5729] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 87.344726][ T5729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 87.355817][ T5729] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 87.355873][ T5729] usb 4-1: media controller created [ 87.461063][ T5745] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 87.474959][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.599395][ T5729] az6027: usb out operation failed. (-71) [ 87.604692][ T5729] az6027: usb out operation failed. (-71) [ 87.604710][ T5729] stb0899_attach: Driver disabled by Kconfig [ 87.604718][ T5729] az6027: no front-end attached [ 87.604718][ T5729] [ 87.606158][ T5729] az6027: usb out operation failed. (-71) [ 87.606171][ T5729] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 87.624354][ T5729] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 87.667566][ T5729] dvb-usb: schedule remote query interval to 400 msecs. [ 87.667593][ T5729] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 87.716289][ T10] usb 3-1: USB disconnect, device number 2 [ 87.717146][ T5729] usb 4-1: USB disconnect, device number 2 [ 87.804539][ T5773] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.859481][ T5773] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.869273][ T5773] kvm: kvm [5772]: vcpu0, guest rIP: 0x1 Unhandled WRMSR(0x4000006f) = 0x6 [ 88.034560][ T5729] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 88.298576][ T5789] netlink: 'syz.0.15': attribute type 4 has an invalid length. [ 88.328251][ T5789] netlink: 'syz.0.15': attribute type 4 has an invalid length. [ 88.515545][ T5795] program syz.0.17 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.552255][ T5729] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.702144][ T5729] usb 4-1: Using ep0 maxpacket: 16 [ 88.703256][ T5729] usb 4-1: New USB device found: idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 88.704381][ T5729] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.704403][ T5729] usb 4-1: config 0 has no interface number 0 [ 88.708395][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.708417][ T5729] usb 4-1: Product: syz [ 88.708426][ T5729] usb 4-1: Manufacturer: syz [ 88.708435][ T5729] usb 4-1: SerialNumber: syz [ 88.714661][ T5729] usb 4-1: config 0 descriptor?? [ 88.724257][ T5729] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 88.772003][ T5635] Bluetooth: hci1: command tx timeout [ 88.851050][ T5635] Bluetooth: hci3: command tx timeout [ 88.851080][ T5635] Bluetooth: hci0: command tx timeout [ 88.851094][ T5635] Bluetooth: hci4: command tx timeout [ 88.851108][ T5635] Bluetooth: hci2: command tx timeout [ 88.851231][ T5764] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.004632][ T5764] usb 2-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 89.005867][ T5764] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.005892][ T5764] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.007091][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.007107][ T5764] usb 2-1: SerialNumber: syz [ 89.110200][ T5709] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.272621][ T5764] usb 2-1: 0:2 : does not exist [ 89.281401][ T5709] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 89.282841][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.293467][ T5709] usb 1-1: config 0 descriptor?? [ 89.414461][ T5764] usb 2-1: USB disconnect, device number 2 [ 89.499487][ T10] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 89.502568][ T5709] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 89.519169][ T5647] udevd[5647]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.556280][ T5812] xt_hashlimit: max too large, truncated to 1048576 [ 89.658897][ T5814] syz.4.26 uses obsolete (PF_INET,SOCK_PACKET) [ 89.723414][ T5709] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 89.723442][ T5709] [drm] Initialized udl on minor 1 [ 89.813392][ T5816] netlink: 'syz.4.27': attribute type 2 has an invalid length. [ 89.952237][ T5729] gspca_spca1528: reg_w err -71 [ 89.952333][ T5729] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 89.959127][ T5729] usb 4-1: USB disconnect, device number 3 [ 90.088986][ T29] audit: type=1326 audit(1792995123.483:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 90.089387][ T29] audit: type=1326 audit(1792995123.483:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 90.093671][ T29] audit: type=1326 audit(1792995123.493:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 90.094100][ T29] audit: type=1326 audit(1792995123.493:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 90.094541][ T29] audit: type=1326 audit(1792995123.493:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 90.094848][ T29] audit: type=1326 audit(1792995123.493:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 90.096882][ T29] audit: type=1326 audit(1792995123.493:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 90.097117][ T29] audit: type=1326 audit(1792995123.493:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 90.098710][ T29] audit: type=1326 audit(1792995123.493:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 90.098754][ T29] audit: type=1326 audit(1792995123.493:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.30" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 90.172581][ T970] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.352934][ T970] usb 5-1: Using ep0 maxpacket: 16 [ 90.354437][ T970] usb 5-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 90.355872][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 90.355920][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.367036][ T970] usb 5-1: config 0 descriptor?? [ 90.370530][ T5820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 90.805508][ T970] hid-sensor-hub 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 90.805554][ T970] hid-sensor-hub 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 90.805580][ T970] hid-sensor-hub 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 90.805606][ T970] hid-sensor-hub 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 90.805660][ T970] hid-sensor-hub 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 90.805686][ T970] hid-sensor-hub 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 90.805792][ T970] hid-sensor-hub 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 90.805818][ T970] hid-sensor-hub 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 90.805852][ T970] hid-sensor-hub 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 90.805877][ T970] hid-sensor-hub 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 90.918895][ T970] hid-sensor-hub 0003:0C70:F00D.0001: hiddev0,hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.4-1/input0 [ 91.081629][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.087583][ T970] usb 5-1: USB disconnect, device number 2 [ 91.220640][ T5846] fido_id[5846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 91.233857][ T10] usb 4-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 91.237875][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.237903][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.237938][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.247421][ T10] usb 4-1: config 0 descriptor?? [ 91.707067][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0002/input/input6 [ 91.798805][ T10] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 91.800159][ T5729] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.951304][ T5729] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 91.979259][ T10] usb 4-1: USB disconnect, device number 4 [ 91.989261][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.989297][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.989337][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.043335][ T5729] usb 3-1: config 0 descriptor?? [ 92.479661][ T5729] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 92.529864][ T5729] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input7 [ 92.820619][ T5729] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 92.837191][ T5729] usb 3-1: USB disconnect, device number 3 [ 93.020147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 93.075894][ T5858] fido_id[5858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 93.394483][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 93.547375][ T10] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.548701][ T10] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 93.548733][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.591629][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 93.591661][ T10] usb 5-1: Product: syz [ 93.591675][ T10] usb 5-1: Manufacturer: syz [ 93.591689][ T10] usb 5-1: SerialNumber: syz [ 93.638770][ T10] usb 5-1: config 0 descriptor?? [ 93.679381][ T10] usb 5-1: selecting invalid altsetting 0 [ 94.167994][ T10] usb 5-1: USB disconnect, device number 3 [ 94.168702][ C1] usb 5-1: Unable to submit urb #2: -19 at snd_usb_queue_pending_output_urbs [ 94.168892][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.170526][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.171045][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.171507][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.171976][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.221647][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.223077][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.223542][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.223993][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.224459][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.224906][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.225126][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.225364][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.225564][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.225811][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.226401][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.226996][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.227667][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.228259][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.228709][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.229300][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.229522][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.229722][ T5863] usb 5-1: cannot submit urb 0, error -19: no device [ 94.495533][ T5871] syzkaller1: entered promiscuous mode [ 94.495559][ T5871] syzkaller1: entered allmulticast mode [ 94.586321][ T5874] ip_tables: iptables: counters copy to user failed while replacing table [ 94.772079][ T5709] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 94.792661][ T5709] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 94.821010][ T5709] usb 1-1: USB disconnect, device number 2 [ 94.830819][ T970] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 95.109524][ T5880] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 95.216979][ T5882] netlink: 'syz.1.50': attribute type 6 has an invalid length. [ 95.217003][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 95.390312][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.542072][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 95.542995][ T10] usb 4-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 95.544124][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.544145][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 95.572291][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.572317][ T10] usb 4-1: Product: syz [ 95.572330][ T10] usb 4-1: Manufacturer: syz [ 95.572343][ T10] usb 4-1: SerialNumber: syz [ 95.628450][ T10] usb 4-1: config 0 descriptor?? [ 95.934855][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 95.961983][ T5729] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.104720][ T5905] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.119981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 96.126790][ T5729] usb 1-1: Using ep0 maxpacket: 32 [ 96.149576][ T5729] usb 1-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 96.160270][ T5905] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.160671][ T5729] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 96.160696][ T5729] usb 1-1: config 0 has no interface number 0 [ 96.160736][ T5729] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.160792][ T5729] usb 1-1: config 0 interface 85 has no altsetting 0 [ 96.220559][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.220589][ T5729] usb 1-1: Product: syz [ 96.220604][ T5729] usb 1-1: Manufacturer: syz [ 96.220618][ T5729] usb 1-1: SerialNumber: syz [ 96.263302][ T5729] usb 1-1: config 0 descriptor?? [ 96.466765][ T10] rc_core: IR keymap rc-imon-pad not found [ 96.466786][ T10] Registered IR keymap rc-empty [ 96.467124][ T10] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 96.467146][ T10] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 96.533605][ T10] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 96.558231][ T10] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 96.579620][ T10] imon 4-1:0.0: iMON device (15c2:0041) on usb<4:5> initialized [ 96.701355][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 96.701609][ T5709] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 96.704927][ T970] usb 4-1: USB disconnect, device number 5 [ 96.880783][ T5709] usb 5-1: New USB device found: idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 96.881970][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.882001][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 96.882016][ T5709] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 96.888601][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 96.888630][ T5709] usb 5-1: Product: syz [ 96.888645][ T5709] usb 5-1: Manufacturer: syz [ 96.888658][ T5709] usb 5-1: SerialNumber: syz [ 96.974588][ T5709] usb 5-1: config 0 descriptor?? [ 96.995147][ T5709] usb 5-1: no audio or video endpoints found [ 96.997229][ T5729] appletouch 1-1:0.85: Geyser mode initialized. [ 97.025241][ T5729] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input10 [ 97.256219][ T10] usb 1-1: USB disconnect, device number 3 [ 97.360873][ T5709] usb 5-1: USB disconnect, device number 4 [ 97.457277][ T10] appletouch 1-1:0.85: input: appletouch disconnected [ 97.689723][ T5925] syz_tun: entered allmulticast mode [ 97.795924][ T970] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.849159][ T5924] syz_tun: left allmulticast mode [ 97.941803][ T970] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 97.942523][ T970] usb 4-1: config 0 has no interfaces? [ 97.942559][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.977467][ T970] usb 4-1: config 0 descriptor?? [ 98.212666][ T5729] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.343429][ T10] usb 4-1: USB disconnect, device number 6 [ 98.382063][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 98.382804][ T5729] usb 3-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 98.384120][ T5729] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 98.384146][ T5729] usb 3-1: config 0 has no interface number 0 [ 98.384186][ T5729] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.384199][ T5729] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 98.384215][ T5729] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.384229][ T5729] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.420201][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.420227][ T5729] usb 3-1: Product: syz [ 98.420240][ T5729] usb 3-1: Manufacturer: syz [ 98.420253][ T5729] usb 3-1: SerialNumber: syz [ 98.498861][ T5729] usb 3-1: config 0 descriptor?? [ 98.558830][ T5729] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input11 [ 98.953500][ T5729] usb 3-1: USB disconnect, device number 4 [ 98.953573][ C1] bcm5974 3-1:0.119: trackpad urb failed: -19 [ 99.234086][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 99.234101][ T29] audit: type=1326 audit(1792995132.633:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3739f559 code=0x7ffc0000 [ 99.236121][ T29] audit: type=1326 audit(1792995132.633:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3739f559 code=0x7ffc0000 [ 99.303553][ T29] audit: type=1326 audit(1792995132.703:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2b3739f559 code=0x7ffc0000 [ 99.303586][ T29] audit: type=1326 audit(1792995132.703:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3739f559 code=0x7ffc0000 [ 99.303622][ T29] audit: type=1326 audit(1792995132.703:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3739f559 code=0x7ffc0000 [ 99.304648][ T29] audit: type=1326 audit(1792995132.703:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2b3739f559 code=0x7ffc0000 [ 99.308221][ T29] audit: type=1326 audit(1792995132.703:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3739f559 code=0x7ffc0000 [ 99.309688][ T29] audit: type=1326 audit(1792995132.703:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3739f559 code=0x7ffc0000 [ 99.464918][ T29] audit: type=1326 audit(1792995132.863:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b3739f559 code=0x7ffc0000 [ 99.465222][ T29] audit: type=1326 audit(1792995132.863:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3739f559 code=0x7ffc0000 [ 99.655637][ T5952] netlink: 5 bytes leftover after parsing attributes in process `syz.4.76'. [ 100.049676][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'. [ 100.235836][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 100.252109][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.80'. [ 100.331885][ T5709] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 100.480902][ T5709] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 100.482282][ T5709] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.482314][ T5709] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 100.482351][ T5709] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.482388][ T5709] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 100.482415][ T5709] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 100.489279][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.489303][ T5709] usb 3-1: Product: syz [ 100.489311][ T5709] usb 3-1: Manufacturer: syz [ 100.489320][ T5709] usb 3-1: SerialNumber: syz [ 100.541913][ T5955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.751925][ T5955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.068367][ T5637] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 101.115386][ T5970] fuse: Bad value for 'fd' [ 101.220956][ T5637] usb 5-1: New USB device found: idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 101.221846][ T5637] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.221881][ T5637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 101.221897][ T5637] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 101.283570][ T5637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 101.283592][ T5637] usb 5-1: Product: syz [ 101.283601][ T5637] usb 5-1: Manufacturer: syz [ 101.283610][ T5637] usb 5-1: SerialNumber: syz [ 101.340767][ T5637] usb 5-1: config 0 descriptor?? [ 101.374866][ T5955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.381129][ T5637] usb 5-1: no audio or video endpoints found [ 101.580433][ T970] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.599505][ T5709] cdc_ncm 3-1:1.0: bind() failure [ 101.655134][ T5709] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 101.658750][ T5709] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 101.685383][ T5709] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 101.718344][ T5709] usb 3-1: USB disconnect, device number 5 [ 101.732064][ T970] usb 1-1: Using ep0 maxpacket: 16 [ 101.732826][ T970] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 101.750333][ T970] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 101.750360][ T970] usb 1-1: config 0 has no interface number 0 [ 101.750402][ T970] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 101.750424][ T970] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 101.821283][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.821312][ T970] usb 1-1: Product: syz [ 101.821326][ T970] usb 1-1: Manufacturer: syz [ 101.821339][ T970] usb 1-1: SerialNumber: syz [ 101.889072][ T970] usb 1-1: config 0 descriptor?? [ 101.900799][ T5637] usb 5-1: USB disconnect, device number 5 [ 101.903676][ T5973] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 101.903789][ T5973] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 102.114819][ T5973] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 102.114941][ T5973] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 102.323799][ T970] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 103.100855][ T5709] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.270325][ T5709] usb 2-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 103.270400][ T5709] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 103.271802][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.271845][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.271861][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.273019][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.273069][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.273125][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.278367][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.278420][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.278473][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.331597][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.331678][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.331702][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.407943][ T970] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 103.407971][ T970] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 103.408254][ T970] asix 1-1:0.34: probe with driver asix failed with error -71 [ 103.451822][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.451879][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.451906][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.457331][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.457406][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.457432][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.487512][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.487563][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.487587][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.520751][ T5709] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.520806][ T5709] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.520830][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.549977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.587220][ T970] usb 1-1: USB disconnect, device number 4 [ 103.588093][ T5709] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 103.588110][ T5709] usb 2-1: Product: syz [ 103.588119][ T5709] usb 2-1: Manufacturer: syz [ 103.588127][ T5709] usb 2-1: SerialNumber: syz [ 103.624741][ T5709] usb 2-1: config 0 descriptor?? [ 103.765617][ T5709] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 103.985361][ T5994] syz.2.92 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.062893][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 104.093202][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 104.128564][ T5709] usb 2-1: USB disconnect, device number 3 [ 104.165530][ T5709] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 104.460564][ T5764] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.625487][ T5764] usb 1-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 104.642750][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.642769][ T5764] usb 1-1: Product: syz [ 104.642778][ T5764] usb 1-1: Manufacturer: syz [ 104.642786][ T5764] usb 1-1: SerialNumber: syz [ 105.071753][ T5764] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 105.071797][ T5764] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 105.274803][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.290780][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.865515][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 105.865539][ T29] audit: type=1800 audit(1792995139.263:145): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.105" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 106.227077][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'. [ 106.228418][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 106.228443][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 106.228460][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.107'. [ 106.330137][ T5729] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.374038][ T5636] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 106.374117][ T5636] Bluetooth: hci3: Injecting HCI hardware error event [ 106.375835][ T5635] Bluetooth: hci3: hardware error 0x00 [ 106.493728][ T5729] usb 2-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 106.499413][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.499447][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.499518][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.547184][ T5729] usb 2-1: config 0 descriptor?? [ 106.571119][ T5764] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 106.590102][ T970] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 106.755031][ T970] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 106.768333][ T970] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.768361][ T970] usb 4-1: config 0 has no interface number 0 [ 106.768406][ T970] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 106.768433][ T970] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 106.768475][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.821921][ T970] usb 4-1: config 0 descriptor?? [ 106.828542][ T6038] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 106.863765][ T970] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 107.054168][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.070370][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.092663][ T5729] hid_parser_main: 386 callbacks suppressed [ 107.092683][ T5729] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 107.097386][ T5729] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 107.136418][ T5729] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0004/input/input12 [ 107.176333][ T5729] cm6533_jd 0003:0D8C:0022.0004: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 107.395354][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 107.400950][ T970] usb 2-1: USB disconnect, device number 4 [ 107.426522][ T5647] udevd[5647]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 107.470395][ T5729] usb 4-1: USB disconnect, device number 7 [ 107.515839][ T5764] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 107.517191][ T5764] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 107.517253][ T5764] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 107.518651][ T5764] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 107.584112][ T5764] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 107.629833][ T5764] usb 1-1: USB disconnect, device number 5 [ 107.772324][ T6049] fido_id[6049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 108.062074][ T6058] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.105586][ T6058] syzkaller1: entered promiscuous mode [ 108.105611][ T6058] syzkaller1: entered allmulticast mode [ 108.210890][ T970] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 108.368946][ T970] usb 5-1: New USB device found: idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 108.394342][ T970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.394398][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 108.394424][ T970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 108.401552][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 108.401578][ T970] usb 5-1: Product: syz [ 108.401591][ T970] usb 5-1: Manufacturer: syz [ 108.401603][ T970] usb 5-1: SerialNumber: syz [ 108.450424][ T5635] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 108.472434][ T970] usb 5-1: config 0 descriptor?? [ 108.497708][ T970] usb 5-1: no audio or video endpoints found [ 108.523499][ T6064] netlink: 'syz.2.120': attribute type 3 has an invalid length. [ 108.523522][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 108.625321][ T6071] loop5: detected capacity change from 0 to 7 [ 108.636694][ T6071] loop5: p1 < > p3 p4 [ 108.636721][ T6071] loop5: partition table partially beyond EOD, truncated [ 108.639822][ T6071] loop5: p1 start 168 is beyond EOD, truncated [ 108.639853][ T6071] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 108.670969][ T6071] loop5: p4 start 33554432 is beyond EOD, truncated [ 108.779878][ T5764] usb 5-1: USB disconnect, device number 6 [ 108.829683][ T5639] udevd[5639]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 108.935956][ T6077] netlink: 52 bytes leftover after parsing attributes in process `syz.3.124'. [ 109.005999][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.125'. [ 109.006030][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.125'. [ 109.006048][ T6079] netlink: 'syz.2.125': attribute type 6 has an invalid length. [ 109.112073][ T6085] batman_adv: batadv0: Adding interface: syzkaller0 [ 109.112089][ T6085] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.112115][ T6085] batman_adv: batadv0: Interface activated: syzkaller0 [ 109.114357][ T6084] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 109.122780][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.129821][ T6084] batman_adv: batadv0: Removing interface: syzkaller0 [ 109.243363][ T6087] loop5: detected capacity change from 0 to 7 [ 109.245511][ T6087] Dev loop5: unable to read RDB block 7 [ 109.245540][ T6087] loop5: unable to read partition table [ 109.245666][ T6087] loop5: partition table beyond EOD, truncated [ 109.245689][ T6087] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 109.300125][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 109.300282][ T5729] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.304587][ T10] usb 1-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 109.306666][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.306696][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.310541][ T5698] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.310544][ T10] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 109.310567][ T10] usb 1-1: Product: syz [ 109.310581][ T10] usb 1-1: Manufacturer: syz [ 109.408221][ T10] hub 1-1:4.0: USB hub found [ 109.421711][ T6090] batman_adv: batadv0: Adding interface: syzkaller0 [ 109.421765][ T6090] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.421795][ T6090] batman_adv: batadv0: Interface activated: syzkaller0 [ 109.427981][ T6088] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 109.465917][ T6088] batman_adv: batadv0: Removing interface: syzkaller0 [ 109.472308][ T5729] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 109.483471][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.483496][ T5729] usb 2-1: Product: syz [ 109.483536][ T5729] usb 2-1: Manufacturer: syz [ 109.483549][ T5729] usb 2-1: SerialNumber: syz [ 109.494842][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 109.526202][ T5698] usb 4-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 109.527949][ T5698] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 109.552693][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 109.552722][ T5698] usb 4-1: Product: syz [ 109.552737][ T5698] usb 4-1: Manufacturer: syz [ 109.552751][ T5698] usb 4-1: SerialNumber: syz [ 109.556849][ T5698] usb 4-1: config 0 descriptor?? [ 109.558366][ T6081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 109.596938][ T5698] hub 4-1:0.0: bad descriptor, ignoring hub [ 109.596967][ T5698] hub 4-1:0.0: probe with driver hub failed with error -5 [ 109.640556][ T10] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 109.656705][ T6092] Zero length message leads to an empty skb [ 109.678803][ T10] usb 1-1: USB disconnect, device number 6 [ 109.890358][ T144] IPVS: starting estimator thread 0... [ 109.925751][ T5729] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 109.925801][ T5729] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 109.980113][ T6102] IPVS: using max 50 ests per chain, 120000 per kthread [ 110.133489][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.135599][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.170615][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 110.261098][ T6081] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 110.305156][ T6110] fuse: Bad value for 'fd' [ 110.322659][ T10] usb 1-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 110.341930][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.341956][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.376652][ T10] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 110.376673][ T10] usb 1-1: Product: syz [ 110.376704][ T10] usb 1-1: Manufacturer: syz [ 110.407661][ T10] hub 1-1:4.0: USB hub found [ 110.424849][ T6081] usb 4-1: device firmware changed [ 110.450444][ T5764] usb 4-1: USB disconnect, device number 8 [ 110.613080][ T5764] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 110.628374][ T10] hub 1-1:4.0: 1 port detected [ 110.760104][ T5764] usb 4-1: Using ep0 maxpacket: 32 [ 110.761535][ T5764] usb 4-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 110.763248][ T5764] usb 4-1: config 0 has no interfaces? [ 110.767800][ T5764] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 110.767919][ T5764] usb 4-1: Product: syz [ 110.767934][ T5764] usb 4-1: Manufacturer: syz [ 110.767947][ T5764] usb 4-1: SerialNumber: syz [ 110.821694][ T5764] usb 4-1: config 0 descriptor?? [ 111.039322][ T10] hub 1-1:4.0: set hub depth failed [ 111.082623][ T5698] usb 4-1: USB disconnect, device number 9 [ 111.085287][ T10] usb 1-1: USB disconnect, device number 7 [ 111.394863][ T5729] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 111.812251][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.818560][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.250707][ T5729] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 112.252181][ T5729] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 112.252243][ T5729] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 112.259011][ T5729] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 112.314061][ T5729] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 112.347881][ T5729] usb 2-1: USB disconnect, device number 5 [ 113.937679][ T6179] input: syz0 as /devices/virtual/input/input13 [ 115.431667][ T6211] ip_tables: iptables: counters copy to user failed while replacing table [ 115.432715][ T6211] [U]  [ 115.487718][ T29] audit: type=1326 audit(1792995148.883:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.2.172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 115.492800][ T29] audit: type=1326 audit(1792995148.893:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.2.172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 115.545461][ T29] audit: type=1326 audit(1792995148.943:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.2.172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 115.546294][ T29] audit: type=1326 audit(1792995148.943:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.2.172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 115.546344][ T29] audit: type=1326 audit(1792995148.943:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.2.172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 115.634301][ T29] audit: type=1326 audit(1792995149.033:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.2.172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 115.635141][ T29] audit: type=1326 audit(1792995149.033:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.2.172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 115.637073][ T29] audit: type=1326 audit(1792995149.033:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.2.172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 115.637311][ T29] audit: type=1326 audit(1792995149.033:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.2.172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 115.717692][ T5729] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.742260][ T29] audit: type=1326 audit(1792995149.043:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz.2.172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159a59f559 code=0x7ffc0000 [ 115.875174][ T5729] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 115.878765][ T5729] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.878795][ T5729] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.878813][ T5729] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.878860][ T5729] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.937885][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.937914][ T5729] usb 1-1: Product: syz [ 115.937929][ T5729] usb 1-1: Manufacturer: syz [ 115.984193][ T5729] cdc_wdm 1-1:1.0: skipping garbage [ 115.984217][ T5729] cdc_wdm 1-1:1.0: skipping garbage [ 116.003515][ T5729] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 116.003541][ T5729] cdc_wdm 1-1:1.0: Unknown control protocol [ 116.214974][ T5698] usb 1-1: USB disconnect, device number 8 [ 116.770726][ T5709] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 116.902825][ T5698] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.920682][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 116.921892][ T5709] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 116.924479][ T5709] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 116.924511][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.929173][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.929193][ T5709] usb 5-1: Product: syz [ 116.929202][ T5709] usb 5-1: Manufacturer: syz [ 116.929210][ T5709] usb 5-1: SerialNumber: syz [ 116.993807][ T5709] usb 5-1: config 0 descriptor?? [ 117.157871][ T5709] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 117.157910][ T5709] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 117.181114][ T5698] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 117.182548][ T5698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.182573][ T5698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.182592][ T5698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.182673][ T5698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.185191][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.185215][ T5698] usb 1-1: Product: syz [ 117.185230][ T5698] usb 1-1: Manufacturer: syz [ 118.019974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.150237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 118.210179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.390022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 118.430475][ T5698] cdc_wdm 1-1:1.0: skipping garbage [ 118.430499][ T5698] cdc_wdm 1-1:1.0: skipping garbage [ 119.845643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 119.907101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 119.996924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 122.274755][ T5698] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 122.274781][ T5698] cdc_wdm 1-1:1.0: Unknown control protocol [ 201.669947][ C0] sched: DL replenish lagged too much [ 225.709911][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 225.722288][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P62/1:b..l.. P6230/1:b..l.. P6232/1:b..l.. [ 225.733821][ C0] rcu: (detected by 0, t=10502 jiffies, g=20117, q=837315 ncpus=2) [ 225.741827][ C0] task:syz.4.179 state:R running task stack:24376 pid:6232 tgid:6232 ppid:5653 task_flags:0x40044c flags:0x00080002 [ 225.755471][ C0] Call Trace: [ 225.758780][ C0] [ 225.761744][ C0] __schedule+0x17dd/0x5820 [ 225.766330][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 225.771385][ C0] ? __pfx___schedule+0x10/0x10 [ 225.776376][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 225.781965][ C0] preempt_schedule_common+0x7f/0xd0 [ 225.787291][ C0] preempt_schedule_thunk+0x16/0x40 [ 225.792533][ C0] _raw_spin_unlock+0x41/0x50 [ 225.797281][ C0] __zap_vma_range+0x40e1/0x4f70 [ 225.802566][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 225.807899][ C0] ? mas_find+0x6d6/0xcb0 [ 225.812282][ C0] unmap_vmas+0x38b/0x550 [ 225.816611][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 225.821458][ C0] ? mas_next_slot+0xc91/0xd70 [ 225.826370][ C0] exit_mmap+0x293/0x9f0 [ 225.830652][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 225.835489][ C0] ? __pfx_exit_aio+0x10/0x10 [ 225.840220][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 225.845806][ C0] __mmput+0x118/0x420 [ 225.849912][ C0] exit_mm+0x18e/0x240 [ 225.854016][ C0] do_exit+0x6a8/0x2360 [ 225.858200][ C0] ? count_memcg_event_mm+0x21/0x260 [ 225.863516][ C0] ? __pfx_do_exit+0x10/0x10 [ 225.868115][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 225.873161][ C0] do_group_exit+0x22d/0x2f0 [ 225.877778][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.883018][ C0] get_signal+0x1216/0x12c0 [ 225.887580][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 225.893157][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 225.899361][ C0] irqentry_exit+0x348/0x9b0 [ 225.904001][ C0] ? trace_irq_disable+0x3b/0x140 [ 225.909067][ C0] asm_exc_page_fault+0x26/0x30 [ 225.913938][ C0] RIP: 0033:0x7f9c10673d80 [ 225.918359][ C0] RSP: 002b:00007f9c10b4fa90 EFLAGS: 00010246 [ 225.924429][ C0] RAX: 000000110c310000 RBX: ffffffff8946ee06 RCX: 0000000000000000 [ 225.932422][ C0] RDX: 0000000000000e06 RSI: 0000000000001bb8 RDI: 0000000000000001 [ 225.940416][ C0] RBP: 0000000000000000 R08: 00007f9c10a10000 R09: 00007f9c10a12000 [ 225.948535][ C0] R10: 000000008946ee0a R11: 0000000000000000 R12: 00007f9c10a26038 [ 225.956534][ C0] R13: 0000000000001c32 R14: ffffffff8946e5ed R15: 00007f9c11555720 [ 225.964529][ C0] ? of_device_uevent+0x1d/0x290 [ 225.969472][ C0] ? of_device_make_bus_id+0x2f6/0x410 [ 225.974951][ C0] [ 225.977995][ C0] task:syz.3.178 state:R running task stack:24144 pid:6230 tgid:6228 ppid:5652 task_flags:0x40054c flags:0x00080000 [ 225.991625][ C0] Call Trace: [ 225.994933][ C0] [ 225.997894][ C0] __schedule+0x17dd/0x5820 [ 226.002470][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 226.007529][ C0] ? __pfx___schedule+0x10/0x10 [ 226.012427][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 226.017822][ C0] preempt_schedule_common+0x7f/0xd0 [ 226.023143][ C0] preempt_schedule_thunk+0x16/0x40 [ 226.028383][ C0] _raw_spin_unlock+0x41/0x50 [ 226.033094][ C0] __zap_vma_range+0x40e1/0x4f70 [ 226.038381][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 226.043709][ C0] ? mas_find+0x6d6/0xcb0 [ 226.048266][ C0] unmap_vmas+0x38b/0x550 [ 226.052637][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 226.057513][ C0] ? mas_next_slot+0xc91/0xd70 [ 226.062525][ C0] exit_mmap+0x293/0x9f0 [ 226.066786][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 226.071580][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 226.076915][ C0] ? __khugepaged_exit+0x310/0x440 [ 226.082056][ C0] ? kmem_cache_free+0x182/0x650 [ 226.087025][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 226.092176][ C0] ? __khugepaged_exit+0x33e/0x440 [ 226.097323][ C0] __mmput+0x118/0x420 [ 226.101513][ C0] exit_mm+0x18e/0x240 [ 226.105607][ C0] do_exit+0x6a8/0x2360 [ 226.109878][ C0] ? futex_hash+0x4e/0x2b0 [ 226.114318][ C0] ? __pfx_do_exit+0x10/0x10 [ 226.118928][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 226.123975][ C0] do_group_exit+0x22d/0x2f0 [ 226.128594][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.133833][ C0] get_signal+0x1216/0x12c0 [ 226.138393][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 226.143977][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 226.150183][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 226.155599][ C0] ? rcu_is_watching+0x16/0xb0 [ 226.160442][ C0] do_syscall_64+0x328/0x520 [ 226.165096][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.171165][ C0] ? clear_bhb_loop+0x70/0xc0 [ 226.175883][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.181823][ C0] RIP: 0033:0x7f2b3739f559 [ 226.186277][ C0] RSP: 002b:00007f2b3834c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 226.194728][ C0] RAX: fffffffffffffe00 RBX: 00007f2b37625fa8 RCX: 00007f2b3739f559 [ 226.202729][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2b37625fa8 [ 226.210813][ C0] RBP: 00007f2b37625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 226.218822][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.226798][ C0] R13: 00007f2b37626038 R14: 00007f2b3774f960 R15: 00007f2b3774fa48 [ 226.234856][ C0] [ 226.237901][ C0] task:kworker/u8:4 state:R running task stack:24136 pid:62 tgid:62 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 226.251699][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 226.257992][ C0] Call Trace: [ 226.261294][ C0] [ 226.264270][ C0] __schedule+0x17dd/0x5820 [ 226.268826][ C0] ? __pfx___schedule+0x10/0x10 [ 226.273686][ C0] ? __lock_acquire+0x747/0x2de0 [ 226.278672][ C0] preempt_schedule_irq+0x4b/0x90 [ 226.283735][ C0] irqentry_exit+0x14f/0x9b0 [ 226.288361][ C0] ? trace_irq_disable+0x3b/0x140 [ 226.293425][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.299428][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 226.304746][ C0] Code: ff ff ff e8 40 9e 5b 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 a8 1a 13 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d c7 1a fc [ 226.324376][ C0] RSP: 0018:ffffc9000203f4c8 EFLAGS: 00000282 [ 226.330471][ C0] RAX: d8e859dc435fb600 RBX: 0000000000000000 RCX: 0000000000000046 [ 226.338468][ C0] RDX: 00000000cdb3f345 RSI: ffffffff8e923f0b RDI: ffffffff8c8e6d80 [ 226.346465][ C0] RBP: ffff888023ac0000 R08: ffffffff8178799f R09: 0000000000000000 [ 226.354460][ C0] R10: ffffc9000203f608 R11: fffff52000407ecd R12: ffffffff8ff5a360 [ 226.362451][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 226.370439][ C0] ? unwind_next_frame+0x8f/0x2550 [ 226.375598][ C0] ? __unwind_start+0xed/0x660 [ 226.380402][ C0] ? unwind_next_frame+0x8f/0x2550 [ 226.385550][ C0] unwind_next_frame+0xac/0x2550 [ 226.390523][ C0] ? unwind_next_frame+0x8f/0x2550 [ 226.395765][ C0] ? unwind_next_frame+0x8f/0x2550 [ 226.400913][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 226.406233][ C0] ? get_stack_info_noinstr+0x19/0x130 [ 226.411735][ C0] __unwind_start+0x514/0x660 [ 226.416464][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 226.422638][ C0] arch_stack_walk+0xe3/0x150 [ 226.427357][ C0] ? __unwind_start+0xed/0x660 [ 226.432173][ C0] stack_trace_save+0xa9/0x100 [ 226.436974][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 226.442380][ C0] ? __lock_acquire+0x747/0x2de0 [ 226.447352][ C0] kasan_save_track+0x3e/0x80 [ 226.452142][ C0] ? ieee80211_iface_work+0x925/0xfa0 [ 226.457640][ C0] kasan_save_free_info+0x40/0x50 [ 226.462692][ C0] __kasan_slab_free+0x5c/0x80 [ 226.467520][ C0] kmem_cache_free+0x182/0x650 [ 226.472325][ C0] ieee80211_iface_work+0x925/0xfa0 [ 226.477607][ C0] cfg80211_wiphy_work+0x29e/0x420 [ 226.482774][ C0] ? process_scheduled_works+0x97a/0x1630 [ 226.488544][ C0] process_scheduled_works+0xc3d/0x1630 [ 226.494169][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 226.500309][ C0] ? assign_work+0x3cf/0x5d0 [ 226.504943][ C0] worker_thread+0xa47/0xfb0 [ 226.509613][ C0] ? __kthread_parkme+0x71/0x1f0 [ 226.514574][ C0] kthread+0x38b/0x480 [ 226.518654][ C0] ? __pfx_worker_thread+0x10/0x10 [ 226.523771][ C0] ? __pfx_kthread+0x10/0x10 [ 226.528401][ C0] ret_from_fork+0x514/0xb70 [ 226.533025][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 226.538170][ C0] ? __switch_to+0xc78/0x1410 [ 226.542891][ C0] ? __pfx_kthread+0x10/0x10 [ 226.547603][ C0] ret_from_fork_asm+0x1a/0x30 [ 226.552417][ C0] [ 226.555461][ C0] rcu: rcu_preempt kthread starved for 10109 jiffies! g20117 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 226.566672][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 226.576649][ C0] rcu: RCU grace-period kthread stack dump: [ 226.582561][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 226.596273][ C0] Call Trace: [ 226.599580][ C0] [ 226.602539][ C0] __schedule+0x17dd/0x5820 [ 226.607113][ C0] ? __pfx___schedule+0x10/0x10 [ 226.611995][ C0] ? lock_acquire+0x115/0x350 [ 226.616893][ C0] ? schedule+0x90/0x2b0 [ 226.621152][ C0] schedule+0x164/0x2b0 [ 226.625347][ C0] schedule_timeout+0x152/0x2c0 [ 226.630227][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 226.635631][ C0] ? __pfx_process_timeout+0x10/0x10 [ 226.641945][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 226.647784][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 226.653412][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 226.659088][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 226.663979][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 226.670141][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 226.675456][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 226.680704][ C0] rcu_gp_kthread+0x9c/0x340 [ 226.685339][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 226.690572][ C0] ? __kthread_parkme+0x71/0x1f0 [ 226.695541][ C0] ? __kthread_parkme+0x199/0x1f0 [ 226.700607][ C0] kthread+0x38b/0x480 [ 226.705061][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 226.710589][ C0] ? __pfx_kthread+0x10/0x10 [ 226.715205][ C0] ret_from_fork+0x514/0xb70 [ 226.719972][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 226.725108][ C0] ? __switch_to+0xc78/0x1410 [ 226.729831][ C0] ? __pfx_kthread+0x10/0x10 [ 226.734447][ C0] ret_from_fork_asm+0x1a/0x30 [ 226.739258][ C0] [ 226.742298][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 226.748635][ C0] Sending NMI from CPU 0 to CPUs 1: [ 226.753867][ C1] NMI backtrace for cpu 1 [ 226.753883][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 226.753903][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 226.753913][ C1] RIP: 0010:__rcu_read_unlock+0x0/0xe0 [ 226.753937][ C1] Code: d9 80 e1 07 80 c1 03 38 c1 7c dc 48 89 df e8 e7 4a 91 00 eb d2 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff [ 226.753952][ C1] RSP: 0018:ffffc90000a079d8 EFLAGS: 00000282 [ 226.753968][ C1] RAX: 1c3015608ac26900 RBX: ffffc90000a07a98 RCX: 8000000000000101 [ 226.753982][ C1] RDX: ffffffff92383f01 RSI: ffffffff8e923f0b RDI: ffffffff8c8e6d80 [ 226.753995][ C1] RBP: 1ffffffff2470701 R08: ffffc90000197f38 R09: 0000000000000000 [ 226.754007][ C1] R10: ffffc90000a07ad8 R11: fffff52000140f5d R12: ffffc90000190000 [ 226.754020][ C1] R13: ffffffff8178799f R14: ffffc90000a07a88 R15: ffffc90000197f38 [ 226.754033][ C1] FS: 0000000000000000(0000) GS:ffff888123734000(0000) knlGS:0000000000000000 [ 226.754047][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.754060][ C1] CR2: 00007f490c81d792 CR3: 0000000055ca8000 CR4: 00000000003526f0 [ 226.754077][ C1] Call Trace: [ 226.754083][ C1] [ 226.754090][ C1] unwind_next_frame+0x1baf/0x2550 [ 226.754118][ C1] ? cpu_startup_entry+0x43/0x60 [ 226.754138][ C1] ? unwind_next_frame+0x8f/0x2550 [ 226.754161][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 226.754178][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 226.754199][ C1] arch_stack_walk+0x11b/0x150 [ 226.754223][ C1] ? start_secondary+0x101/0x110 [ 226.754242][ C1] ? dst_alloc+0x105/0x170 [ 226.754260][ C1] stack_trace_save+0xa9/0x100 [ 226.754280][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 226.754314][ C1] kasan_save_track+0x3e/0x80 [ 226.754333][ C1] ? kasan_save_track+0x3e/0x80 [ 226.754350][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 226.754370][ C1] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 226.754386][ C1] ? dst_alloc+0x105/0x170 [ 226.754401][ C1] ? ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 226.754424][ C1] ? ip_route_output_key_hash+0x18d/0x2a0 [ 226.754446][ C1] ? ip_route_output_flow+0x2a/0x150 [ 226.754465][ C1] ? ip_route_me_harder+0x762/0xfe0 [ 226.754486][ C1] ? synproxy_send_tcp+0x332/0x670 [ 226.754511][ C1] ? synproxy_send_client_synack+0x89b/0xde0 [ 226.754535][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 226.754552][ C1] ? nft_synproxy_do_eval+0x389/0x5d0 [ 226.754568][ C1] ? nft_do_chain+0x48d/0x1b10 [ 226.754585][ C1] ? nft_do_chain_ipv4+0x195/0x290 [ 226.754601][ C1] ? nf_hook_slow+0xc5/0x220 [ 226.754621][ C1] ? NF_HOOK+0x21f/0x3c0 [ 226.754636][ C1] ? NF_HOOK+0x336/0x3c0 [ 226.754652][ C1] ? process_backlog+0xa6b/0x18b0 [ 226.754671][ C1] ? __napi_poll+0xaa/0x330 [ 226.754688][ C1] ? net_rx_action+0x61d/0xf50 [ 226.754708][ C1] ? handle_softirqs+0x265/0x8d0 [ 226.754729][ C1] ? __irq_exit_rcu+0xc6/0x220 [ 226.754750][ C1] ? irq_exit_rcu+0x9/0x30 [ 226.754770][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 226.754793][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.754811][ C1] ? pv_native_safe_halt+0xf/0x20 [ 226.754833][ C1] ? default_idle+0x9/0x20 [ 226.754847][ C1] ? default_idle_call+0x72/0xb0 [ 226.754863][ C1] ? do_idle+0x1cc/0x540 [ 226.754880][ C1] ? cpu_startup_entry+0x43/0x60 [ 226.754912][ C1] __kasan_slab_alloc+0x6c/0x80 [ 226.754933][ C1] kmem_cache_alloc_noprof+0x2b4/0x600 [ 226.754950][ C1] ? dst_alloc+0x105/0x170 [ 226.754965][ C1] ? kmem_cache_alloc_noprof+0x151/0x600 [ 226.754981][ C1] ? dst_alloc+0x105/0x170 [ 226.755001][ C1] dst_alloc+0x105/0x170 [ 226.755020][ C1] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 226.755047][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 226.755070][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 226.755094][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 226.755119][ C1] ? lock_acquire+0x115/0x350 [ 226.755143][ C1] ip_route_output_flow+0x2a/0x150 [ 226.755163][ C1] ? ip_route_me_harder+0x74b/0xfe0 [ 226.755185][ C1] ip_route_me_harder+0x762/0xfe0 [ 226.755211][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 226.755236][ C1] ? __alloc_skb+0x27a/0x7a0 [ 226.755260][ C1] ? __cookie_v4_init_sequence+0x273/0x510 [ 226.755277][ C1] ? kmem_cache_alloc_node_noprof+0x3b9/0x600 [ 226.755304][ C1] synproxy_send_tcp+0x332/0x670 [ 226.755332][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 226.755363][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 226.755387][ C1] ? nft_fib_store_result+0x194/0x2f0 [ 226.755412][ C1] ? synproxy_pernet+0x45/0x270 [ 226.755432][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 226.755452][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 226.755471][ C1] ? nf_ip_checksum+0x13c/0x510 [ 226.755498][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 226.755514][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 226.755540][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 226.755565][ C1] nft_do_chain+0x48d/0x1b10 [ 226.755589][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 226.755610][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 226.755632][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 226.755667][ C1] nft_do_chain_ipv4+0x195/0x290 [ 226.755684][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 226.755709][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 226.755728][ C1] ? iptable_mangle_hook+0x18a/0x4c0 [ 226.755748][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 226.755766][ C1] nf_hook_slow+0xc5/0x220 [ 226.755790][ C1] NF_HOOK+0x21f/0x3c0 [ 226.755808][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 226.755826][ C1] ? NF_HOOK+0x9e/0x3c0 [ 226.755842][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 226.755860][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 226.755881][ C1] ? ip_local_deliver+0x113/0x190 [ 226.755900][ C1] NF_HOOK+0x336/0x3c0 [ 226.755917][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 226.755935][ C1] ? NF_HOOK+0x9e/0x3c0 [ 226.755951][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 226.755969][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 226.755985][ C1] ? ip_rcv_core+0x88d/0xd50 [ 226.756004][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 226.756022][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 226.756039][ C1] process_backlog+0xa6b/0x18b0 [ 226.756061][ C1] ? process_backlog+0x3de/0x18b0 [ 226.756088][ C1] __napi_poll+0xaa/0x330 [ 226.756108][ C1] net_rx_action+0x61d/0xf50 [ 226.756134][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 226.756159][ C1] ? sched_balance_domains+0x770/0x880 [ 226.756182][ C1] handle_softirqs+0x265/0x8d0 [ 226.756210][ C1] __irq_exit_rcu+0xc6/0x220 [ 226.756233][ C1] irq_exit_rcu+0x9/0x30 [ 226.756253][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 226.756277][ C1] [ 226.756282][ C1] [ 226.756289][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.756313][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 226.756337][ C1] Code: 3b 97 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 da 29 00 fb f4 fc 17 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 226.756351][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 226.756365][ C1] RAX: 0000000000f1baa3 RBX: ffffffff819c982c RCX: 8000000000000001 [ 226.756378][ C1] RDX: 0000000000000001 RSI: ffffffff8e69a4ba RDI: ffffffff8c8e6d80 [ 226.756390][ C1] RBP: ffffc90000197f10 R08: ffff8880b8333d9b R09: 1ffff110170667b3 [ 226.756402][ C1] R10: dffffc0000000000 R11: ffffed10170667b4 R12: 0000000000000000 [ 226.756414][ C1] R13: 1ffff11003ddd000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 226.756429][ C1] ? do_idle+0x1cc/0x540 [ 226.756452][ C1] default_idle+0x9/0x20 [ 226.756467][ C1] default_idle_call+0x72/0xb0 [ 226.756483][ C1] do_idle+0x1cc/0x540 [ 226.756503][ C1] ? __pfx_do_idle+0x10/0x10 [ 226.756526][ C1] cpu_startup_entry+0x43/0x60 [ 226.756545][ C1] start_secondary+0x101/0x110 [ 226.756562][ C1] common_startup_64+0x13e/0x157 [ 226.756594][ C1]