last executing test programs: 1m9.849568061s ago: executing program 3 (id=24): setuid(0xee01) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x3a440, 0x0) write(r1, 0x0, 0x30) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x3df92000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x3}, 0x68, 0x40000000000, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m8.655362344s ago: executing program 3 (id=30): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x40, 0xa, 0x85, {0x85, 0xb, "8a8d0aa4f2ae38710de3f5a9e24aea78c6d4ba090d129dded95827249429557ad9b6b27193362fe17abc9d24d263cac825ca9639f001c503234cab430606574d547f1a3e6a2a340ad766967fa5e997e88c639d9c818148fcd7753d5ca512f91b08c60a3f38aca089e79d9bf217d0dd60098d7f11b4046ded328b3c5883c36b1b42f84e"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x560, 0x4, 0x10000, 0x5, 0x2, 0x800, 0x7, 0x7fff, 0x3, 0x2, 0x9, 0x48ce}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x1}, &(0x7f00000001c0)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x2}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) 1m5.49010672s ago: executing program 3 (id=41): syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2b, 0x1e, 0xe1, 0x20, 0x12d1, 0x2b69, 0x55c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x40, 0x7, 0x90, 0x40, "", [{{0x9, 0x4, 0x14, 0xc, 0x0, 0xff, 0x5, 0x78, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0xa}}]}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2b, 0x1e, 0xe1, 0x20, 0x12d1, 0x2b69, 0x55c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x40, 0x7, 0x90, 0x40, "", [{{0x9, 0x4, 0x14, 0xc, 0x0, 0xff, 0x5, 0x78, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0xa}}]}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) (async) 1m4.495972993s ago: executing program 2 (id=43): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 1m4.080955759s ago: executing program 2 (id=46): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0006f80180c200000300000000000086dd663f5369130b32ff00000000000000000000000000000001ff02"], 0x1345) 1m3.978745858s ago: executing program 3 (id=47): syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x1a, 0xcf, 0x3, 0x40, 0x423, 0xa, 0x5fd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xac, 0x10, 0xf9, "", [{{0x9, 0x4, 0x8a, 0x1, 0x0, 0x40, 0x6c, 0x59, 0x9}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x15555899}) r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002a"], 0x78}], 0x1, 0x0, 0x0, 0x24400}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x40082, 0x2, 0x3}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) write$tun(r1, &(0x7f0000000000)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "6f449e", 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8ed, 0x0, 0x6}}}}}}}}, 0x4e) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x404103) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r0, 0x10}, {0xffffffffffffffff, 0x110}, {0xffffffffffffffff, 0x43}, {r5, 0x4004}, {0xffffffffffffffff, 0x4000}], 0x5, &(0x7f0000000300)={r6, r7+60000000}, &(0x7f0000000340)={[0x4]}, 0x8) syz_usb_connect(0x3, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0xdd, 0xdf, 0x4f, 0x40, 0x5ac, 0x237, 0xf2d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x6, 0x90, 0x4, "", [{{0x9, 0x4, 0x23, 0x8, 0x0, 0x3, 0x3c, 0x2, 0x6}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) ioctl$NILFS_IOCTL_SYNC(r4, 0x80086e8a, &(0x7f0000000080)) 1m3.708526323s ago: executing program 2 (id=48): getrandom(&(0x7f0000000000)=""/94, 0x5e, 0x0) 1m3.679314913s ago: executing program 2 (id=49): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0xf, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80900, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, 0x0}, 0x400c8c0) 1m3.579594822s ago: executing program 2 (id=50): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x3, 0x105, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x1, 0x1, 0x0, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x4, {{0xb, 0x24, 0x6, 0x0, 0x0, "b61cf67465f4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0xfff7, 0x80}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}, @mdlm_detail={0x87, 0x24, 0x13, 0xb, "5e8f4c7f363e3d553e68abac99c9a1936877b1524c309b3889c7fc3ef898e0ab643f46265a30ee79e37f1de754b396dbd0ad7a2a99f8f1e3a4a5934d0c06d09c6b606cb144db90ff2b69db73f020b34d5b64107077e55a0ec45755db15d8027c96c157f2ff079475a7a4fa0b26aa8258e176bde3cf0f0507093f76751376a0c731b6c2"}, @mdlm={0x15, 0x24, 0x12, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x6, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6f, 0x9, 0x4d}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xff, 0x2, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xe8, 0x80, 0x6}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x4c, 0x8, 0xd6, 0xff, 0x60}, 0x20, &(0x7f00000005c0)={0x5, 0xf, 0x20, 0x1, [@generic={0x1b, 0x10, 0x3, "e52fee69587b909033cb4f51fbcae54a5c748f318fb72807"}]}, 0x2, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2801}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r4, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000010)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) write(0xca, &(0x7f0000000040)="040e0c01032000ffffffffffffffff", 0xf) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) connect(r5, &(0x7f0000000200)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 1m2.912102951s ago: executing program 1 (id=54): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x800001c) r2 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x183002, 0x0) write$sequencer(r3, 0x0, 0x0) r4 = dup(r2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x3c, r8, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, r9, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x90, 0x5}, {0x6, 0x6}, {0xb7, 0x1}, {0x4, 0x6}, {0x7, 0x3}, {0x5, 0x3}, {0xfd}, {0xb4, 0x2}, {0x8, 0x6}, {0x20}, {0x2, 0x1}, {0x3, 0x4}, {0xdc, 0x5}, {0xd, 0x6}, {0x1, 0x3}, {0x0, 0x7}, {0x4b, 0x6}], "b767c04b519165b5"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0xf, 0x5}, {0x6, 0x5}, {0xd, 0x7}, {0xff}, {0x9, 0x3}, {0x7, 0x2}, {0x7, 0x3}, {0xfd, 0x4}, {0xfa}, {0x2, 0x3}, {0x9, 0x4}, {0x1, 0x6}, {0x9, 0x7}, {0x9, 0x7}, {0x48, 0x4}, {0x2, 0x1}, {0x81, 0x4}, {0xf9, 0x3}], "b01a6530b5e67630"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x58, 0x7}, {0x6, 0x7}, {0x2, 0x2}, {0x4, 0x1}, {0x5, 0x5}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x5}, {0x8, 0x4}], "5307c1015ea8d503"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24040011}, 0x5) write$binfmt_elf64(r4, &(0x7f0000000e80)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xff, 0x78, 0x23, 0x23e, 0x3, 0x3e, 0xcd, 0x3cb, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x464, 0x401}, [{0x3, 0x81, 0x8000000000000001, 0x80000000ff5, 0xffffffffffff8001, 0x1b8, 0x9}]}, 0x78) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140)=0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r11, &(0x7f0000000200)) ioctl$XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f0000000040)) 1m2.575808921s ago: executing program 1 (id=55): r0 = socket(0x11, 0xa, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_usb_connect(0x0, 0x62, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_ublk_setup_io_uring(0x9, 0x0, &(0x7f0000000140)=0x0, &(0x7f00000007c0)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r3, r4, r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300060100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000e00)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f0000000cc0)="fd7617adb877574c4a4489fcaccd9ddae0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e329d190c768c04a78c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba78e", 0xaf}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000f2000001c0007800c00030001000001000000000c0003000900000000000000dd3e26dac26f1465be5a131add0ca56b5918cb325ec558a302ecfab4b0b31ef4d257c9a4f3e554"], 0x30}}, 0x80) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x5c, r7, 0x1, 0x70bd2c, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "00010203040b0c0d0e0f10112213000000000000"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb3d}]}]}, 0x5c}}, 0x840) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1fc, @remote, 0x6}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8954, 0x0) 1m0.726531549s ago: executing program 3 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="142400001000010000000000000000000a00000a6c000000060a0104000000000000400002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000001000000116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m0.627819005s ago: executing program 3 (id=59): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x266e, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0x8a010101}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)="55ff8ad072ddce", 0x7}], 0x1) syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x60, 0x5, 0x28, {0x28, 0x21, "f23187e47721b459fb670ecd48f42ff54e9002e0d4edb978ccf8235c6e15e502733d10667c99"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}}, &(0x7f0000000500)={0x34, &(0x7f0000000380)={0x40, 0x8, 0xb, "d4bc2e5b34c7ab7c17b88b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9c}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x59}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x2}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "850a8eb15d87fc2218c3c5445f8041dd3d065362e6d5a70cf4572379fff655b8ec21d0c6b0a4fdb8fed2a983105b40"}}) 1m0.201270984s ago: executing program 0 (id=60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x7fff, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)="180c4552", 0x4) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000400)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "17be8b1c550800210012547d03bd002000", [0x7f, 0x9]}}) openat2(r5, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)={0x101000, 0x3, 0x2}, 0x18) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000002, 0x0, 0x6}, {0x40000002, 0x0, 0x8000000000000001}]}) 59.984883453s ago: executing program 0 (id=61): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) (fail_nth: 11) 59.7677774s ago: executing program 0 (id=62): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xb305e06d8eb4c273}, 0x0) 59.657246231s ago: executing program 0 (id=63): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000000c0)=""/191, &(0x7f0000000080)=0xbf) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)={{0x108, 0xc, 0x4, 0x38d, 0x2d5, 0x323a, 0x3a1}}, 0x20) syz_ublk_setup_queues(0xffffffffffffffff, r2, &(0x7f00000005c0)={0x0, 0x2320, 0x8000, 0x3, 0x200, 0x0, r0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ff3, 0x800, 0x2, 0xea, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa689, 0x2, 0x2, 0x18d, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb73f, 0x8, 0x0, 0x14d, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7dbf, 0x1, 0x1, 0xd0, 0x0, r0}}], 0x4, &(0x7f0000001d00)={0x2e, 0x2b, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x2, 0x285, 0x0, &(0x7f0000000d00)=@buf_max_buf="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"}}, &(0x7f0000001d80)) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2, 0x8d0b}]}) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000400)=""/144, 0x90}, {&(0x7f00000004c0)=""/186, 0xba}], 0x3) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) ioctl$TIOCL_SETSEL(r6, 0x541c, 0x0) syz_ublk_setup_queues(r0, r2, &(0x7f0000000180)={0x0, 0x5b5b, 0x0, 0xfffffffe, 0x213}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x5f, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x73a3, 0x4000, 0x7, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x24a02, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 59.382554408s ago: executing program 1 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) (fail_nth: 5) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x500) 59.297655325s ago: executing program 1 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x810) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x4000, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee00, 0xee00, 0x0) r5 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r6, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)=""/5, 0x5}], 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x1409, 0x4, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x804) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0xced}, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000100)="0700bad5da0f7abb94ae529561beed4fbbaba97564c5f39e644541bd3a45cb9835bb2bff7fb568c90f15682d1efb94ac44443ff43aeecb3f5641f57198628519f8fb26ff23ad9413c2fef9d765ff2079940ce299bfb474772f2e6e153a474d5a6391b0", 0xfffffffffffffe68, 0x404c8d5, 0x0, 0xfffffeeb) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r4) setresuid(0x0, 0xee00, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000080)='veth1_to_batadv\x00', 0x10) setsockopt$sock_int(r10, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="000000c417b27e0000000000008000000000", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004010) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048840}, 0x20000010) 58.733127942s ago: executing program 0 (id=66): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000ffdbdf250300000014000700fc01000000000000000000000000000108000600ffffffff060001004e240000080008006401010108000b00", @ANYRES32, @ANYBLOB="050002000a"], 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x40) 58.581145733s ago: executing program 2 (id=67): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mount(0x0, 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x5, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x77f, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x8000007, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x2, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x0, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, 0x0, 0x80000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wlc\x00', 0x1, 0xa88, 0x8}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'sh\x00', 0x8, 0x3237, 0x56}, {@private=0xa010100, 0x4e25, 0x10000, 0x9, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x300, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 58.556507318s ago: executing program 0 (id=68): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0xf, 0x4) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x6, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000001040)="ba", 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)='/d', 0x2) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00'}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, 0x0}, 0x400c8c0) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x404200, 0x0) ioctl$SNDCTL_DSP_POST(r9, 0x5008, 0x0) 58.2571118s ago: executing program 1 (id=69): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x7fffffff, 0x6, 0x2, 0x1, 0x9, 0x3, 0x5}, 0x1c) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) 53.229791257s ago: executing program 1 (id=70): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mount(0x0, 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x5, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x77f, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x8000007, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x2, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x0, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, 0x0, 0x80000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wlc\x00', 0x1, 0xa88, 0x8}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'sh\x00', 0x8, 0x3237, 0x56}, {@private=0xa010100, 0x4e25, 0x10000, 0x9, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (fail_nth: 9) 0s ago: executing program 32 (id=59): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x266e, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0x8a010101}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)="55ff8ad072ddce", 0x7}], 0x1) syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x60, 0x5, 0x28, {0x28, 0x21, "f23187e47721b459fb670ecd48f42ff54e9002e0d4edb978ccf8235c6e15e502733d10667c99"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}}, &(0x7f0000000500)={0x34, &(0x7f0000000380)={0x40, 0x8, 0xb, "d4bc2e5b34c7ab7c17b88b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9c}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x59}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x2}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "850a8eb15d87fc2218c3c5445f8041dd3d065362e6d5a70cf4572379fff655b8ec21d0c6b0a4fdb8fed2a983105b40"}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. [ 90.882958][ T5600] cgroup: Unknown subsys name 'net' [ 91.034200][ T5600] cgroup: Unknown subsys name 'cpuset' [ 91.044890][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.394023][ T58] cfg80211: failed to load regulatory.db [ 92.937397][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.405334][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.407080][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.407893][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.416905][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.422162][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.432275][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.438129][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.440756][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.441621][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.442164][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.442226][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.444551][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.444699][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.445104][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.445979][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.446717][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.453939][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.455681][ T4930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.455918][ T4930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.457643][ T4930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.118042][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.126577][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.126804][ T5612] bridge_slave_0: entered allmulticast mode [ 97.143622][ T5612] bridge_slave_0: entered promiscuous mode [ 97.156792][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.156913][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.157472][ T5612] bridge_slave_1: entered allmulticast mode [ 97.180467][ T5612] bridge_slave_1: entered promiscuous mode [ 97.267473][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.303260][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.417168][ T5612] team0: Port device team_slave_0 added [ 97.456352][ T5612] team0: Port device team_slave_1 added [ 97.481658][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.481766][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.482180][ T5610] bridge_slave_0: entered allmulticast mode [ 97.484252][ T5610] bridge_slave_0: entered promiscuous mode [ 97.511851][ T5614] Bluetooth: hci1: command tx timeout [ 97.546385][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.546554][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.546666][ T5610] bridge_slave_1: entered allmulticast mode [ 97.548176][ T5610] bridge_slave_1: entered promiscuous mode [ 97.589087][ T5624] Bluetooth: hci3: command tx timeout [ 97.589305][ T5624] Bluetooth: hci2: command tx timeout [ 97.589580][ T5614] Bluetooth: hci0: command tx timeout [ 97.661112][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.661129][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.661151][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.662500][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.662624][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.662782][ T5611] bridge_slave_0: entered allmulticast mode [ 97.664733][ T5611] bridge_slave_0: entered promiscuous mode [ 97.728396][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.735377][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.735418][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.735496][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.746093][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.747850][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.750798][ T5611] bridge_slave_1: entered allmulticast mode [ 97.757274][ T5611] bridge_slave_1: entered promiscuous mode [ 97.875198][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.899833][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.899942][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.900062][ T5609] bridge_slave_0: entered allmulticast mode [ 97.901610][ T5609] bridge_slave_0: entered promiscuous mode [ 97.962242][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.966892][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.967143][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.967256][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.967415][ T5609] bridge_slave_1: entered allmulticast mode [ 97.974078][ T5609] bridge_slave_1: entered promiscuous mode [ 98.033199][ T5610] team0: Port device team_slave_0 added [ 98.081803][ T5610] team0: Port device team_slave_1 added [ 98.128509][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.157138][ T5612] hsr_slave_0: entered promiscuous mode [ 98.158216][ T5612] hsr_slave_1: entered promiscuous mode [ 98.174279][ T5611] team0: Port device team_slave_0 added [ 98.177096][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.177901][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.177915][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.177940][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.251127][ T5611] team0: Port device team_slave_1 added [ 98.251905][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.251919][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.251947][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.312299][ T5609] team0: Port device team_slave_0 added [ 98.374449][ T5609] team0: Port device team_slave_1 added [ 98.424812][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.424831][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.424857][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.518573][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.518594][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.518621][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.531035][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.531096][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.531182][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.651653][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.651670][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.651693][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.751135][ T5610] hsr_slave_0: entered promiscuous mode [ 98.752413][ T5610] hsr_slave_1: entered promiscuous mode [ 98.753163][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 98.753255][ T5610] Cannot create hsr debugfs directory [ 98.825983][ T5611] hsr_slave_0: entered promiscuous mode [ 98.826836][ T5611] hsr_slave_1: entered promiscuous mode [ 98.827481][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 98.827502][ T5611] Cannot create hsr debugfs directory [ 98.911927][ T5609] hsr_slave_0: entered promiscuous mode [ 98.913846][ T5609] hsr_slave_1: entered promiscuous mode [ 98.914537][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 98.914561][ T5609] Cannot create hsr debugfs directory [ 99.394243][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.412103][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.433194][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.452041][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.453239][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.458348][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.496211][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.510286][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.591220][ T5614] Bluetooth: hci1: command tx timeout [ 99.612046][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.622102][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.634229][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.669360][ T5614] Bluetooth: hci0: command tx timeout [ 99.669401][ T5614] Bluetooth: hci2: command tx timeout [ 99.669445][ T5614] Bluetooth: hci3: command tx timeout [ 99.669897][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.671727][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.675711][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.687986][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.743445][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.876662][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.891896][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.897624][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.919514][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.920642][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.925429][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.926591][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.970504][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.043102][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.120380][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.123907][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.124909][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.127830][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.180212][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.180849][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.184501][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.185591][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.190232][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.262164][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.262265][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.311868][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.311972][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.434239][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.500500][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.549328][ T273] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.549449][ T273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.587288][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.633940][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.634066][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.700600][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.703070][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.763894][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.764050][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.827607][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.827736][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.859130][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.903248][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.903379][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.943106][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.943195][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.617283][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.670683][ T5617] Bluetooth: hci1: command tx timeout [ 101.752802][ T5617] Bluetooth: hci3: command tx timeout [ 101.752844][ T5617] Bluetooth: hci2: command tx timeout [ 101.752872][ T5617] Bluetooth: hci0: command tx timeout [ 101.897579][ T5612] veth0_vlan: entered promiscuous mode [ 101.948276][ T5612] veth1_vlan: entered promiscuous mode [ 102.093258][ T5612] veth0_macvtap: entered promiscuous mode [ 102.142902][ T5612] veth1_macvtap: entered promiscuous mode [ 102.237098][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.269883][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.284579][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.327969][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.339872][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.340181][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.340225][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.340265][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.600518][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.602620][ T5611] veth0_vlan: entered promiscuous mode [ 102.623327][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.623358][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.656467][ T5610] veth0_vlan: entered promiscuous mode [ 102.686202][ T5611] veth1_vlan: entered promiscuous mode [ 102.724542][ T5610] veth1_vlan: entered promiscuous mode [ 102.757538][ T273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.757561][ T273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.887097][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.890639][ T5609] veth0_vlan: entered promiscuous mode [ 102.896958][ T5611] veth0_macvtap: entered promiscuous mode [ 102.931272][ T5610] veth0_macvtap: entered promiscuous mode [ 102.934933][ T5611] veth1_macvtap: entered promiscuous mode [ 102.954368][ T5609] veth1_vlan: entered promiscuous mode [ 102.977216][ T5610] veth1_macvtap: entered promiscuous mode [ 103.036914][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.078522][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.108426][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.139197][ T1123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.139252][ T1123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.139295][ T1123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.139334][ T1123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.196738][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.213997][ T5609] veth0_macvtap: entered promiscuous mode [ 103.248181][ T5609] veth1_macvtap: entered promiscuous mode [ 103.367344][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.379806][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.379863][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.379907][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.379950][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.443681][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.515085][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.515113][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.579629][ T146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.579808][ T146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.629068][ T1123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.629124][ T1123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.697842][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.697868][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.749275][ T5614] Bluetooth: hci1: command tx timeout [ 103.752599][ T2348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.752623][ T2348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.828886][ T5617] Bluetooth: hci2: command tx timeout [ 103.828934][ T5617] Bluetooth: hci3: command tx timeout [ 103.829002][ T5614] Bluetooth: hci0: command tx timeout [ 103.931518][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.931543][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.019748][ T2348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.019775][ T2348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.027100][ T273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.027134][ T273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.719169][ T5692] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.768926][ T5705] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.818957][ T5762] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.872637][ T5692] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.872821][ T5692] usb 1-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 104.898556][ T5692] usb 1-1: config 4 has an invalid interface number: 138 but max is 0 [ 104.898589][ T5692] usb 1-1: config 4 has no interface number 0 [ 104.898625][ T5692] usb 1-1: config 4 interface 138 has no altsetting 0 [ 104.935445][ T5692] usb 1-1: string descriptor 0 read error: -22 [ 104.935987][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.957724][ T5705] usb 2-1: unable to get BOS descriptor or descriptor too short [ 104.957766][ T5705] usb 2-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 104.968904][ T5705] usb 2-1: config 4 has an invalid interface number: 138 but max is 0 [ 104.968938][ T5705] usb 2-1: config 4 has no interface number 0 [ 104.968974][ T5705] usb 2-1: config 4 interface 138 has no altsetting 0 [ 105.001728][ T5762] usb 4-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 105.004666][ T5762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.004703][ T5762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.004758][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.008304][ T5705] usb 2-1: string descriptor 0 read error: -22 [ 105.008442][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.343844][ T5769] syzkaller1: entered promiscuous mode [ 105.343906][ T5769] syzkaller1: entered allmulticast mode [ 105.457326][ T5778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.474199][ T5778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.492189][ T5779] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8'. [ 105.493922][ T5780] syzkaller1: entered promiscuous mode [ 105.494036][ T5780] syzkaller1: entered allmulticast mode [ 105.563902][ T5762] usbhid 4-1:1.0: can't add hid device: -71 [ 105.564032][ T5762] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 105.611837][ T5762] usb 4-1: USB disconnect, device number 2 [ 105.630191][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.653577][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.207241][ T5786] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10'. [ 107.091932][ T5815] FAULT_INJECTION: forcing a failure. [ 107.091932][ T5815] name failslab, interval 1, probability 0, space 0, times 1 [ 107.091986][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) [ 107.092018][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.092045][ T5815] Call Trace: [ 107.092060][ T5815] [ 107.092071][ T5815] dump_stack_lvl+0xe8/0x150 [ 107.092122][ T5815] should_fail_ex+0x3eb/0x540 [ 107.092168][ T5815] should_failslab+0xa8/0x100 [ 107.092203][ T5815] __kvmalloc_node_noprof+0x171/0x820 [ 107.092234][ T5815] ? __kmalloc_cache_noprof+0x31c/0x600 [ 107.092262][ T5815] ? alloc_fdtable+0x101/0x2c0 [ 107.092299][ T5815] ? alloc_fdtable+0x101/0x2c0 [ 107.092344][ T5815] alloc_fdtable+0x101/0x2c0 [ 107.092379][ T5815] ? dup_fd+0x99c/0xbf0 [ 107.092419][ T5815] dup_fd+0x9a5/0xbf0 [ 107.092467][ T5815] ? do_raw_spin_unlock+0xf5/0x200 [ 107.092519][ T5815] unshare_fd+0xa8/0x120 [ 107.092560][ T5815] ksys_unshare+0x4d2/0x890 [ 107.092598][ T5815] ? __pfx_ksys_unshare+0x10/0x10 [ 107.092636][ T5815] ? rcu_is_watching+0x16/0xb0 [ 107.092682][ T5815] __x64_sys_unshare+0x38/0x50 [ 107.092717][ T5815] do_syscall_64+0x166/0x520 [ 107.092742][ T5815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.092768][ T5815] ? clear_bhb_loop+0x70/0xc0 [ 107.092798][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.092824][ T5815] RIP: 0033:0x7fea19f9e159 [ 107.092855][ T5815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.092876][ T5815] RSP: 002b:00007fea1adce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 107.092903][ T5815] RAX: ffffffffffffffda RBX: 00007fea1a225fa0 RCX: 00007fea19f9e159 [ 107.092922][ T5815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 107.092938][ T5815] RBP: 00007fea1a03506b R08: 0000000000000000 R09: 0000000000000000 [ 107.092954][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.092969][ T5815] R13: 00007fea1a226038 R14: 00007fea1a225fa0 R15: 00007ffd33fc9c18 [ 107.093007][ T5815] [ 107.407448][ T5817] FAULT_INJECTION: forcing a failure. [ 107.407448][ T5817] name failslab, interval 1, probability 0, space 0, times 0 [ 107.407501][ T5817] CPU: 1 UID: 0 PID: 5817 Comm: syz.3.14 Not tainted syzkaller #0 PREEMPT(full) [ 107.407529][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.407543][ T5817] Call Trace: [ 107.407552][ T5817] [ 107.407562][ T5817] dump_stack_lvl+0xe8/0x150 [ 107.407591][ T5817] should_fail_ex+0x3eb/0x540 [ 107.407625][ T5817] should_failslab+0xa8/0x100 [ 107.407654][ T5817] __kmalloc_noprof+0xf9/0x710 [ 107.407674][ T5817] ? nft_pernet+0x23/0x240 [ 107.407692][ T5817] ? nf_tables_newrule+0x1524/0x28a0 [ 107.407721][ T5817] ? nf_tables_newrule+0x1524/0x28a0 [ 107.407759][ T5817] nf_tables_newrule+0x1524/0x28a0 [ 107.407808][ T5817] ? __pfx_nf_tables_newrule+0x10/0x10 [ 107.407839][ T5817] ? lock_acquire+0x115/0x350 [ 107.407864][ T5817] ? nfnl_pernet+0x23/0x240 [ 107.407897][ T5817] ? __nla_parse+0x40/0x60 [ 107.407929][ T5817] nfnetlink_rcv+0x1288/0x28c0 [ 107.407988][ T5817] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 107.408060][ T5817] ? skb_clone+0x246/0x3a0 [ 107.408098][ T5817] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.408124][ T5817] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.408156][ T5817] netlink_unicast+0x7bd/0x940 [ 107.408192][ T5817] netlink_sendmsg+0x7c3/0xae0 [ 107.408226][ T5817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.408263][ T5817] ? apparmor_socket_sendmsg+0x98/0x360 [ 107.408298][ T5817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.408323][ T5817] sock_sendmsg_nosec+0x13a/0x180 [ 107.408355][ T5817] ____sys_sendmsg+0x54e/0x850 [ 107.408400][ T5817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.408482][ T5817] ? import_iovec+0x73/0xa0 [ 107.408511][ T5817] ___sys_sendmsg+0x2a5/0x360 [ 107.408546][ T5817] ? __lock_acquire+0x747/0x2de0 [ 107.408579][ T5817] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.408655][ T5817] ? __fget_files+0x3a2/0x420 [ 107.408678][ T5817] ? __fget_files+0x2a/0x420 [ 107.408711][ T5817] __x64_sys_sendmsg+0x1b1/0x290 [ 107.408749][ T5817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.408808][ T5817] do_syscall_64+0x166/0x520 [ 107.408831][ T5817] ? trace_irq_disable+0x3b/0x140 [ 107.408859][ T5817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.408884][ T5817] ? clear_bhb_loop+0x70/0xc0 [ 107.408913][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.408938][ T5817] RIP: 0033:0x7fea19f9e159 [ 107.408960][ T5817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.408979][ T5817] RSP: 002b:00007fea1adce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.409005][ T5817] RAX: ffffffffffffffda RBX: 00007fea1a225fa0 RCX: 00007fea19f9e159 [ 107.409022][ T5817] RDX: 0000000000008040 RSI: 0000200000000240 RDI: 0000000000000003 [ 107.409038][ T5817] RBP: 00007fea1adce090 R08: 0000000000000000 R09: 0000000000000000 [ 107.409053][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.409067][ T5817] R13: 00007fea1a226038 R14: 00007fea1a225fa0 R15: 00007ffd33fc9c18 [ 107.409104][ T5817] [ 108.041624][ T5705] catc 2-1:4.138: Can't set altsetting 1. [ 108.041705][ T5705] catc 2-1:4.138: probe with driver catc failed with error -5 [ 108.107762][ T5705] usb 2-1: USB disconnect, device number 2 [ 108.240564][ T5825] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.281878][ T5692] catc 1-1:4.138: Can't set altsetting 1. [ 108.281948][ T5692] catc 1-1:4.138: probe with driver catc failed with error -5 [ 108.324917][ T5692] usb 1-1: USB disconnect, device number 2 [ 108.491857][ T5832] netlink: 64 bytes leftover after parsing attributes in process `syz.0.20'. [ 108.783174][ T5838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23'. [ 108.890345][ T5841] FAULT_INJECTION: forcing a failure. [ 108.890345][ T5841] name failslab, interval 1, probability 0, space 0, times 0 [ 108.890383][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz.1.25 Not tainted syzkaller #0 PREEMPT(full) [ 108.890424][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.890439][ T5841] Call Trace: [ 108.890448][ T5841] [ 108.890458][ T5841] dump_stack_lvl+0xe8/0x150 [ 108.890495][ T5841] should_fail_ex+0x3eb/0x540 [ 108.890540][ T5841] should_failslab+0xa8/0x100 [ 108.890574][ T5841] __kmalloc_noprof+0xf9/0x710 [ 108.890601][ T5841] ? __se_sys_futex_waitv+0x19d/0x2c0 [ 108.890636][ T5841] ? __se_sys_futex_waitv+0x19d/0x2c0 [ 108.890681][ T5841] __se_sys_futex_waitv+0x19d/0x2c0 [ 108.890722][ T5841] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 108.890776][ T5841] ? __x64_sys_futex_waitv+0x20/0xc0 [ 108.890815][ T5841] do_syscall_64+0x166/0x520 [ 108.890838][ T5841] ? trace_irq_disable+0x3b/0x140 [ 108.890867][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.890891][ T5841] ? clear_bhb_loop+0x70/0xc0 [ 108.890920][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.890944][ T5841] RIP: 0033:0x7f5ad219e159 [ 108.890967][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.890986][ T5841] RSP: 002b:00007f5ad313d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 108.891012][ T5841] RAX: ffffffffffffffda RBX: 00007f5ad2425fa0 RCX: 00007f5ad219e159 [ 108.891030][ T5841] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000002dc0 [ 108.891045][ T5841] RBP: 00007f5ad223506b R08: 0000000000000000 R09: 0000000000000000 [ 108.891060][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.891075][ T5841] R13: 00007f5ad2426038 R14: 00007f5ad2425fa0 R15: 00007ffd41589598 [ 108.891116][ T5841] [ 109.507691][ T5851] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.843285][ T5692] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.005841][ T5692] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.005898][ T5692] usb 1-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 110.007274][ T5692] usb 1-1: config 4 has an invalid interface number: 138 but max is 0 [ 110.007303][ T5692] usb 1-1: config 4 has no interface number 0 [ 110.007335][ T5692] usb 1-1: config 4 interface 138 has no altsetting 0 [ 110.040912][ T5692] usb 1-1: string descriptor 0 read error: -22 [ 110.041068][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.310497][ T5853] syzkaller1: entered promiscuous mode [ 110.310527][ T5853] syzkaller1: entered allmulticast mode [ 110.330605][ T5718] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.389693][ T5871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.393026][ T5871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.458810][ T5719] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.509622][ T5718] usb 4-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00 [ 110.511403][ T5718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.514975][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.515081][ T5718] usb 4-1: Product: syz [ 110.515100][ T5718] usb 4-1: Manufacturer: syz [ 110.515117][ T5718] usb 4-1: SerialNumber: syz [ 110.580065][ T5718] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 110.618996][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 110.620869][ T5719] usb 2-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 110.623834][ T5719] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 110.628551][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.628580][ T5719] usb 2-1: Product: syz [ 110.628621][ T5719] usb 2-1: Manufacturer: syz [ 110.628637][ T5719] usb 2-1: SerialNumber: syz [ 110.689399][ T5719] r8152-cfgselector 2-1: Unknown version 0x0000 [ 110.689460][ T5719] r8152-cfgselector 2-1: config 0 descriptor?? [ 110.914139][ T5719] r8152-cfgselector 2-1: Unknown version 0x0000 [ 110.929066][ T5719] r8152-cfgselector 2-1: No union descriptors [ 110.956167][ T5719] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 111.006458][ T5275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.638464][ T5885] tipc: Started in network mode [ 111.638510][ T5885] tipc: Node identity 01000001, cluster identity 4711 [ 111.660098][ T5885] FAULT_INJECTION: forcing a failure. [ 111.660098][ T5885] name failslab, interval 1, probability 0, space 0, times 0 [ 111.660132][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: syz.2.34 Not tainted syzkaller #0 PREEMPT(full) [ 111.660157][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.660173][ T5885] Call Trace: [ 111.660182][ T5885] [ 111.660196][ T5885] dump_stack_lvl+0xe8/0x150 [ 111.660234][ T5885] should_fail_ex+0x3eb/0x540 [ 111.660277][ T5885] should_failslab+0xa8/0x100 [ 111.660308][ T5885] ? skb_clone+0x212/0x3a0 [ 111.660334][ T5885] kmem_cache_alloc_noprof+0x9c/0x600 [ 111.660375][ T5885] ? skb_clone+0x212/0x3a0 [ 111.660405][ T5885] skb_clone+0x212/0x3a0 [ 111.660433][ T5885] __netlink_deliver_tap+0x355/0x6e0 [ 111.660474][ T5885] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.660503][ T5885] netlink_deliver_tap+0x19c/0x1b0 [ 111.660532][ T5885] netlink_unicast+0x781/0x940 [ 111.660568][ T5885] netlink_sendmsg+0x7c3/0xae0 [ 111.660604][ T5885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.660643][ T5885] ? apparmor_socket_sendmsg+0x98/0x360 [ 111.660678][ T5885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.660704][ T5885] sock_sendmsg_nosec+0x13a/0x180 [ 111.660736][ T5885] ____sys_sendmsg+0x54e/0x850 [ 111.660781][ T5885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.660828][ T5885] ? import_iovec+0x73/0xa0 [ 111.660858][ T5885] ___sys_sendmsg+0x2a5/0x360 [ 111.660892][ T5885] ? __lock_acquire+0x747/0x2de0 [ 111.660926][ T5885] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.661004][ T5885] ? __fget_files+0x3a2/0x420 [ 111.661036][ T5885] ? __fget_files+0x2a/0x420 [ 111.661073][ T5885] __x64_sys_sendmsg+0x1b1/0x290 [ 111.661113][ T5885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.661175][ T5885] do_syscall_64+0x166/0x520 [ 111.661201][ T5885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.661225][ T5885] ? clear_bhb_loop+0x70/0xc0 [ 111.661255][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.661279][ T5885] RIP: 0033:0x7fd578f9e159 [ 111.661301][ T5885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.661322][ T5885] RSP: 002b:00007fd579e0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.661348][ T5885] RAX: ffffffffffffffda RBX: 00007fd579225fa0 RCX: 00007fd578f9e159 [ 111.661365][ T5885] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 111.661380][ T5885] RBP: 00007fd579e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 111.661395][ T5885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.661409][ T5885] R13: 00007fd579226038 R14: 00007fd579225fa0 R15: 00007ffc0657e578 [ 111.661446][ T5885] [ 111.663839][ T5885] tipc: New replicast peer: 127.0.0.1 [ 111.667175][ T5885] tipc: Enabled bearer , priority 10 [ 112.081209][ T5718] gspca_mr97310a: reg write [19] error -110 [ 112.081329][ T5718] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -110 [ 112.542606][ T5892] cgroup: none used incorrectly [ 112.701759][ T5692] catc 1-1:4.138: Can't set altsetting 1. [ 112.701822][ T5692] catc 1-1:4.138: probe with driver catc failed with error -5 [ 112.730460][ T5692] usb 1-1: USB disconnect, device number 3 [ 112.780911][ T5719] tipc: Node number set to 16777217 [ 113.028796][ T5904] Zero length message leads to an empty skb [ 113.120912][ T5747] usb 4-1: USB disconnect, device number 3 [ 113.138301][ T5692] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 113.208824][ T5718] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.292043][ T5692] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.292871][ T5692] usb 1-1: not running at top speed; connect to a high speed hub [ 113.292917][ T5692] usb 1-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.40 [ 113.326813][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.326851][ T5692] usb 1-1: Product: é§±è��瘣硙镙⹀ç�¥à²Žãƒ§ [ 113.326876][ T5692] usb 1-1: Manufacturer: Ѷ [ 113.326896][ T5692] usb 1-1: SerialNumber: syz [ 113.359004][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 113.360925][ T5718] usb 2-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 113.363498][ T5718] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 113.363528][ T5718] usb 2-1: config 1 has no interface number 0 [ 113.363572][ T5718] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 113.363599][ T5718] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 113.363625][ T5718] usb 2-1: config 1 interface 105 has no altsetting 0 [ 113.370940][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 113.371041][ T5718] usb 2-1: Product: syz [ 113.371088][ T5718] usb 2-1: Manufacturer: syz [ 113.371134][ T5718] usb 2-1: SerialNumber: syz [ 113.452689][ T5692] snd-ua101 1-1:1.1: sample format descriptor not found [ 113.452720][ T5692] snd-ua101 1-1:1.0: invalid num_altsetting [ 113.453840][ T5901] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 113.454035][ T5901] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 113.562409][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.566105][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.568826][ T5747] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.587104][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.602763][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.607442][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.608368][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.627645][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.644987][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.656842][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.674853][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.720441][ T5762] usb 1-1: USB disconnect, device number 4 [ 113.723495][ T5747] usb 4-1: Using ep0 maxpacket: 32 [ 113.747869][ T5747] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.747940][ T5747] usb 4-1: New USB device found: idVendor=12d1, idProduct=2b69, bcdDevice=55.c2 [ 113.768435][ T5747] usb 4-1: config 64 has an invalid interface number: 20 but max is 0 [ 113.768482][ T5747] usb 4-1: config 64 has no interface number 0 [ 113.768507][ T5747] usb 4-1: config 64 interface 20 has no altsetting 0 [ 113.804116][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.804150][ T5747] usb 4-1: Product: syz [ 113.804169][ T5747] usb 4-1: Manufacturer: syz [ 113.804186][ T5747] usb 4-1: SerialNumber: syz [ 113.873041][ T5901] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 113.873132][ T5901] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 114.052703][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.055747][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.084196][ T5747] option 4-1:64.20: GSM modem (1-port) converter detected [ 114.106398][ T5747] usb 4-1: USB disconnect, device number 4 [ 114.120811][ T5747] option 4-1:64.20: device disconnected [ 114.282677][ T5718] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 114.489372][ T5901] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 114.489372][ T5901] Please contact the netfilter-devel mailing list or update your nftables rules. [ 114.571727][ T5917] tipc: Started in network mode [ 114.571886][ T5917] tipc: Node identity 01000001, cluster identity 4711 [ 114.574141][ T5917] tipc: New replicast peer: 127.0.0.1 [ 114.576093][ T5917] tipc: Enabled bearer , priority 10 [ 114.720586][ T5919] syzkaller1: entered promiscuous mode [ 114.720614][ T5919] syzkaller1: entered allmulticast mode [ 114.886487][ T5718] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 114.951915][ T5718] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d6:fa:bd:f3:72:d8 [ 114.975243][ T5718] usb 2-1: USB disconnect, device number 4 [ 114.987542][ T5718] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 115.009162][ T5719] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.054907][ T5718] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 115.055051][ T5718] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 115.055189][ T5718] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 115.174616][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.174674][ T5719] usb 4-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 115.175809][ T5719] usb 4-1: config 4 has an invalid interface number: 138 but max is 0 [ 115.175844][ T5719] usb 4-1: config 4 has no interface number 0 [ 115.175877][ T5719] usb 4-1: config 4 interface 138 has no altsetting 0 [ 115.191262][ T5719] usb 4-1: string descriptor 0 read error: -22 [ 115.191402][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.389803][ T5747] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.507214][ T5921] syzkaller1: entered promiscuous mode [ 115.507241][ T5921] syzkaller1: entered allmulticast mode [ 115.538860][ T5747] usb 3-1: Using ep0 maxpacket: 8 [ 115.540931][ T5747] usb 3-1: New USB device found: idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 115.546952][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.546982][ T5747] usb 3-1: Product: syz [ 115.546997][ T5747] usb 3-1: Manufacturer: syz [ 115.547013][ T5747] usb 3-1: SerialNumber: syz [ 115.599559][ T5936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.604939][ T5936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.605101][ T5747] usb 3-1: config 0 descriptor?? [ 115.636661][ T5747] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 115.649691][ T5718] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 115.688816][ T5615] tipc: Node number set to 16777217 [ 115.800119][ T5718] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.800916][ T5718] usb 1-1: config 0 has no interfaces? [ 115.804069][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.804153][ T5718] usb 1-1: Product: syz [ 115.804176][ T5718] usb 1-1: Manufacturer: syz [ 115.804192][ T5718] usb 1-1: SerialNumber: syz [ 115.833887][ T5718] usb 1-1: config 0 descriptor?? [ 115.943836][ T5939] process 'syz.1.54' launched '/dev/fd/8' with NULL argv: empty string added [ 116.155440][ T33] audit: type=1326 audit(1790394542.857:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.1.55" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ad219e159 code=0x0 [ 116.927065][ T5705] usb 1-1: USB disconnect, device number 5 [ 117.081743][ T5927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.693668][ T5927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.694850][ T5927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.862291][ T5719] catc 4-1:4.138: Can't set altsetting 1. [ 117.862358][ T5719] catc 4-1:4.138: probe with driver catc failed with error -5 [ 117.885872][ T5719] usb 4-1: USB disconnect, device number 5 [ 118.313189][ T5927] Bluetooth: ISO socket layer initialized [ 118.378813][ T5719] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 118.475133][ T5957] loop5: detected capacity change from 0 to 7 [ 118.482187][ T5957] Dev loop5: unable to read RDB block 7 [ 118.482414][ T5957] loop5: unable to read partition table [ 118.486718][ T5957] loop5: partition table beyond EOD, truncated [ 118.486993][ T5957] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.529541][ T5719] usb 4-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 118.535074][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.535107][ T5719] usb 4-1: Product: syz [ 118.535125][ T5719] usb 4-1: Manufacturer: syz [ 118.535143][ T5719] usb 4-1: SerialNumber: syz [ 118.573100][ T5719] usb 4-1: config 0 descriptor?? [ 118.577795][ T5719] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 118.899129][ T5747] gspca_sonixj: i2c_w8 err -110 [ 118.939648][ T5747] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 119.289817][ T5967] FAULT_INJECTION: forcing a failure. [ 119.289817][ T5967] name failslab, interval 1, probability 0, space 0, times 0 [ 119.289877][ T5967] CPU: 1 UID: 0 PID: 5967 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT(full) [ 119.289904][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.289918][ T5967] Call Trace: [ 119.289927][ T5967] [ 119.289937][ T5967] dump_stack_lvl+0xe8/0x150 [ 119.289987][ T5967] should_fail_ex+0x3eb/0x540 [ 119.290034][ T5967] should_failslab+0xa8/0x100 [ 119.290064][ T5967] ? do_getname+0x2e/0x250 [ 119.290097][ T5967] kmem_cache_alloc_noprof+0x9c/0x600 [ 119.290137][ T5967] ? do_getname+0x2e/0x250 [ 119.290177][ T5967] do_getname+0x2e/0x250 [ 119.290209][ T5967] ? user_path_at+0x1e/0x160 [ 119.290237][ T5967] user_path_at+0x2a/0x160 [ 119.290265][ T5967] __se_sys_mount+0x2dc/0x420 [ 119.290296][ T5967] ? __pfx___se_sys_mount+0x10/0x10 [ 119.290327][ T5967] ? __x64_sys_mount+0x20/0xc0 [ 119.290353][ T5967] do_syscall_64+0x166/0x520 [ 119.290375][ T5967] ? trace_irq_disable+0x3b/0x140 [ 119.290403][ T5967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.290427][ T5967] ? clear_bhb_loop+0x70/0xc0 [ 119.290456][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.290479][ T5967] RIP: 0033:0x7f5ad219e159 [ 119.290507][ T5967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.290527][ T5967] RSP: 002b:00007f5ad313d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.290552][ T5967] RAX: ffffffffffffffda RBX: 00007f5ad2425fa0 RCX: 00007f5ad219e159 [ 119.290570][ T5967] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 119.290586][ T5967] RBP: 00007f5ad313d090 R08: 0000000000000000 R09: 0000000000000000 [ 119.290601][ T5967] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000001 [ 119.290616][ T5967] R13: 00007f5ad2426038 R14: 00007f5ad2425fa0 R15: 00007ffd41589598 [ 119.290653][ T5967] [ 119.435998][ T5747] usb 3-1: USB disconnect, device number 2 [ 120.456355][ T40] IPVS: starting estimator thread 0... [ 120.538900][ T5977] IPVS: using max 21 ests per chain, 50400 per kthread [ 121.072555][ T5719] gspca_stk1135: reg_w 0x200 err -110 [ 121.073650][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 121.073667][ T5719] gspca_stk1135: Sensor write failed [ 121.073709][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 121.073721][ T5719] gspca_stk1135: Sensor write failed [ 121.073767][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 121.073779][ T5719] gspca_stk1135: Sensor read failed [ 121.073820][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 121.073832][ T5719] gspca_stk1135: Sensor read failed [ 121.073841][ T5719] gspca_stk1135: Detected sensor type unknown (0x0) [ 121.073886][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 121.073898][ T5719] gspca_stk1135: Sensor read failed [ 121.073936][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 121.073948][ T5719] gspca_stk1135: Sensor read failed [ 121.073988][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 121.074000][ T5719] gspca_stk1135: Sensor write failed [ 121.074039][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 121.074051][ T5719] gspca_stk1135: Sensor write failed [ 121.074142][ T5719] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 125.748035][ C0] sched: DL replenish lagged too much [ 133.726651][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.735803][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.300253][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.318009][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.105186][ T4930] Bluetooth: hci2: command 0x0406 tx timeout [ 225.106198][ T4930] Bluetooth: hci3: command 0x0406 tx timeout [ 225.157500][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 235.292966][ T4930] Bluetooth: hci0: command 0x0406 tx timeout [ 238.838977][ T32] usb 4-1: USB disconnect, device number 6 [ 256.418546][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.438527][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.123617][ T34] INFO: task kworker/1:3:5615 blocked for more than 143 seconds. [ 278.123649][ T34] Not tainted syzkaller #0 [ 278.123662][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.123680][ T34] task:kworker/1:3 state:D stack:24288 pid:5615 tgid:5615 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 278.123755][ T34] Workqueue: events reg_todo [ 278.123798][ T34] Call Trace: [ 278.123808][ T34] [ 278.123824][ T34] __schedule+0x1b47/0x5c60 [ 278.123896][ T34] ? __pfx___schedule+0x10/0x10 [ 278.123945][ T34] ? schedule+0x90/0x2b0 [ 278.123985][ T34] schedule+0x164/0x2b0 [ 278.124024][ T34] schedule_preempt_disabled+0x13/0x30 [ 278.124060][ T34] __mutex_lock+0x7c4/0x15a0 [ 278.124090][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 278.124120][ T34] ? reg_process_self_managed_hints+0x8d/0x160 [ 278.124160][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 278.124196][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 278.124232][ T34] ? reg_todo+0x8da/0xa40 [ 278.124266][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 278.144397][ T34] reg_process_self_managed_hints+0x8d/0x160 [ 278.144453][ T34] reg_todo+0x8df/0xa40 [ 278.144497][ T34] ? process_scheduled_works+0x97a/0x1630 [ 278.144533][ T34] process_scheduled_works+0xc3d/0x1630 [ 278.144604][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.144646][ T34] ? assign_work+0x3cf/0x5d0 [ 278.144686][ T34] worker_thread+0xa47/0xfb0 [ 278.144752][ T34] kthread+0x38b/0x480 [ 278.144780][ T34] ? __pfx_worker_thread+0x10/0x10 [ 278.144812][ T34] ? __pfx_kthread+0x10/0x10 [ 278.144841][ T34] ret_from_fork+0x514/0xb70 [ 278.144879][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 278.144915][ T34] ? __switch_to+0xc78/0x1410 [ 278.144948][ T34] ? __pfx_kthread+0x10/0x10 [ 278.144976][ T34] ret_from_fork_asm+0x1a/0x30 [ 278.145029][ T34] [ 278.145069][ T34] INFO: task kworker/1:5:5747 blocked for more than 144 seconds. [ 278.145089][ T34] Not tainted syzkaller #0 [ 278.145102][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.145112][ T34] task:kworker/1:5 state:D stack:22816 pid:5747 tgid:5747 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 278.145184][ T34] Workqueue: events_power_efficient crda_timeout_work [ 278.145222][ T34] Call Trace: [ 278.145231][ T34] [ 278.145245][ T34] __schedule+0x1b47/0x5c60 [ 278.145325][ T34] ? __pfx___schedule+0x10/0x10 [ 278.145373][ T34] ? schedule+0x90/0x2b0 [ 278.145413][ T34] schedule+0x164/0x2b0 [ 278.145452][ T34] schedule_preempt_disabled+0x13/0x30 [ 278.145488][ T34] __mutex_lock+0x7c4/0x15a0 [ 278.145518][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 278.145548][ T34] ? crda_timeout_work+0x16/0x80 [ 278.145587][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 278.145630][ T34] ? rcu_is_watching+0x16/0xb0 [ 278.145665][ T34] ? process_scheduled_works+0x97a/0x1630 [ 278.145699][ T34] crda_timeout_work+0x16/0x80 [ 278.145736][ T34] process_scheduled_works+0xc3d/0x1630 [ 278.145807][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.145850][ T34] ? assign_work+0x3cf/0x5d0 [ 278.145890][ T34] worker_thread+0xa47/0xfb0 [ 278.145948][ T34] ? __kthread_parkme+0x71/0x1f0 [ 278.145997][ T34] kthread+0x38b/0x480 [ 278.146023][ T34] ? __pfx_worker_thread+0x10/0x10 [ 278.146056][ T34] ? __pfx_kthread+0x10/0x10 [ 278.146083][ T34] ret_from_fork+0x514/0xb70 [ 278.146122][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 278.146158][ T34] ? __switch_to+0xc78/0x1410 [ 278.146192][ T34] ? __pfx_kthread+0x10/0x10 [ 278.146220][ T34] ret_from_fork_asm+0x1a/0x30 [ 278.146274][ T34] [ 278.146327][ T34] [ 278.146327][ T34] Showing all locks held in the system: [ 278.146338][ T34] locks held by kthreadd/2: 1, last CPU#0: [ 278.146355][ T34] #0: ffffffff8f2af8d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 278.146423][ T34] locks held by kworker/0:0/9: 3, last CPU#0: [ 278.146440][ T34] #0: ffff888033014948 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 278.146516][ T34] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630