last executing test programs: 7.695715202s ago: executing program 2 (id=542): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc4240, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000002c0)=[{0x30, 0x0, 0x8, 0xfffff014}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000002200)=ANY=[@ANYBLOB="18000000fd3f000000000000090000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a30000008500000005000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000000)=0x7, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000000c0)) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x4, [0x7, 0x7, 0xc60, 0xffffffff, 0x0, 0x2, 0x0, 0x1000]}}) fallocate(r5, 0x73, 0x3, 0xabf2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.452826273s ago: executing program 1 (id=544): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x2, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4d2, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0xec2, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x3}, {0x0, 0x9, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x4, 0x0, 0x3, 0x15, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 7.313004248s ago: executing program 2 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv4_newrule={0x38, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bond\x00'}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7fff}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x2, 0x4}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x5, 0x10001, 0xa, 0xecbc, 0xf2e, 0x6e97, 0x3, {r3, @in={{0x2, 0x4e20, @remote}}, 0x8, 0x61f, 0x2, 0x6, 0x6}}, &(0x7f00000002c0)=0xb0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300)={r2, 0x5}, 0x8) 7.256755333s ago: executing program 1 (id=546): syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ppoll(&(0x7f0000000340)=[{r0, 0x80}], 0x1, &(0x7f0000000480), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt(0xffffffffffffffff, 0xff, 0x24, 0x0, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x40) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) syz_pidfd_open(0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x782b, &(0x7f0000000780)={0x0, 0x56bd, 0x2, 0x3, 0x2c7}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a310000000005000100070000001800"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fcdbdf25170000005c0006801400030032"], 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r9 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x2, 0x5, 0x3}, {0x9, 0x5, 0x4, 0x2, 0x400, 0x81, 0x4, 0x6}, {0x9, 0x5, 0x2, 0x3, 0x200, 0x96, 0xe5}}}}}}]}}, 0x0) syz_usb_disconnect(r9) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20084884) 6.909534819s ago: executing program 2 (id=548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000680)=""/210, 0xd2}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f0000000c00)=""/69, 0x45}, {&(0x7f0000000780)=""/174, 0xae}, {&(0x7f00000018c0)=""/4091, 0xffb}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0xffffffffffffff2d, 0x0}, 0x2}], 0x7, 0x100, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) lseek(0xffffffffffffffff, 0xf184, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) r3 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x1000, 0x2003, 0x800000c5}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x25dfdbff, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7fffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x40440c0) accept4$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80000) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 6.715686365s ago: executing program 3 (id=550): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x210c0) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149042, 0x40) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000090a010400000000000000000a00000608000f4000005f90715e1e6b301c00020900020073797a310000000008000a400000000238000000020a010100000000000000000a0000000900010073797a30000000000900010073797a30000000000900010073797a31"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd29, 0x35dfdbff, {0xa, 0x0, 0x50ceb205d85ac540, 0x0, 0xb5, 0x0, 0x0, 0x8, 0x15}, [@FRA_SRC={0x14, 0x2, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xff5, &(0x7f0000001600)=""/4085, 0x41000, 0x20}, 0x94) tee(r3, r0, 0x7, 0x8) 6.666553577s ago: executing program 0 (id=551): socket$kcm(0x29, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x597880, 0x2a, 0x31}, 0x18) write$UHID_CREATE2(r1, &(0x7f0000000280)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xc7, 0x8000, 0x4, 0x6, 0x6, 0x2, "a421c8019ff42d2be0708ac63138ec802aee5d8de45e46b7534052d851213c9033bec355bc54851dc3fce92e4bffd97b80b11f749cacbc74dc2b179f5e96c5604fe2cee242a585a95e3ef4ee8155526f991474ad9db85bf65522eeb8decc83144c3c7aa2b8cff8a4865e07eb3bf1d2e8e46b8103cf12244ca610b683ae55881ac1b2db5b393e91a73b70a2e8393fd139ad1bb1d03bc93a11ba1557f48cef41b02e367dfbb35aed1b127f7982793fa79159a524cf3ea654dc59a3cffaa5e43786729971af8e0ac2"}}, 0x1df) 6.424479072s ago: executing program 0 (id=552): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffde6}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r6, &(0x7f0000001100)='-', 0x1) splice(r5, 0x0, r2, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0xffe0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 6.197781046s ago: executing program 2 (id=553): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0xc, @dev={0xfe, 0x80, '\x00', 0x14}, 0xf6}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{r2, r3+60000000}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r4, 0x0, r5, 0x0, 0x2, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r6, &(0x7f0000000a00)='1\x00', 0x2) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000000)) 6.080886651s ago: executing program 3 (id=554): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00', 0x6, 0xd23) pwrite64(r0, 0x0, 0x0, 0xd2b) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) 5.915009793s ago: executing program 0 (id=555): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) uname(&(0x7f0000000200)=""/245) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x806, 0x4}, 0x2, 0x4017, &(0x7f00000021c0)={{0x3, 0x2, 0x9, 0x4c}}, 0x3317, 0x0, 0x8}}) r3 = socket$inet6(0xa, 0x4, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r4 = syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}, {&(0x7f0000000340)="216432ded621df62cf360aa8f69e391397315ee2502115fcb04a0516628cd501ad8fc975947285552587685f4528f934217fa62534066891cb1508b8b4d6f05b83471dcef81c97cf773aa84f34f9697d4220d350dbfec7e3dd56d737d265e2f1e5e14e600dcd9463a7dd4c0813741119891560c778bac34debb504ea6d030c8656837b1da8a29a0023ec8c9c350f2d28785b6595be48b38f9bc8007f38f0ed5b1db761e9c0cb8b71745e572483b540b5c794739da8b6c1b45318ff733f319e5d", 0xc0}], 0x2}, 0x44800) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x10}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r4, @ANYBLOB="b21d28a99ded1e09ec4d660a1c2595091142824070d7b624401178a86b5bd6feb5c1f949b475901f0abdb24dae6655afab7018a93798a82bb65e2bf3aed09b24ad6f577794c50138b177ae99574d6f5f15ea73a51244519db4f0f7588a7aaeceb8ede9480facff2c04316ed45dc42c472dfd2f0b8850b334935e2d902aac31b07d1356785f4685864f802c3fed015afa6b64c356be4b49538ee2a59472b328fb0ca445c203638087f59519318fe7a8520e3c3e2d48646fb890caec510d51a863366e2ebc2c244bfa7d042b179b01e644", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40540dd}, 0x20000804) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r7, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e1f, 0xfffffffe, 'sh\x00', 0x11, 0x10000004, 0x8}, 0x2c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, &(0x7f00000000c0)) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfc) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x7a7241, 0x0) 5.825526798s ago: executing program 3 (id=556): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x420f, r0, 0x0, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000040)=r2, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) ptrace$poke(0x420f, r0, 0x0, 0x5) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) eventfd(0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000040)=r2, 0x1) (async) 5.64815514s ago: executing program 4 (id=557): socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001900000828bd7000fddbdf25021080030002ff04001e000008000500ac14143ec6b973faa11a1170a82e3aee29a808eccc6cb24770264cbcef0f5358f8f2b06ff747e64136c76fc8e4632db8ec3740e1c06feaa69d27bb4ae4fae1419795bc80dcb8c51469430141a34340a390372f1f1a68ffd2e1a50e920a87a2dc93743e"], 0x24}, 0x1, 0x0, 0x0, 0x48012}, 0x1) r0 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) eventfd2(0x1, 0x80001) r4 = eventfd(0xe467) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r6, 0x58, &(0x7f0000000840)}, 0x10) r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x13, r7, 0x2000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) 5.413049574s ago: executing program 4 (id=558): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x48, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0xb0, 0x70, 0x5a, 0x40, 0x421, 0x2e3, 0x43b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x3, 0x0, 0x7, 0x0, 0x3, "", [{{0x9, 0x4, 0x3b, 0xa7, 0x1, 0x2, 0x2, 0xff, 0x83, [], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x2, 0x4, 0x4}}]}}, {{0x9, 0x4, 0x3b, 0x80, 0x0, 0xff, 0xff, 0xff, 0x9}}, {{0x9, 0x4, 0x38, 0x1, 0x1, 0xff, 0xff, 0xff, 0x8, [], [{{0x9, 0x5, 0x4, 0x1, 0x400, 0x2, 0x6c, 0x2}}]}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="66b8de008ec066f30f1b196765cf66baf80cb8f1c3e389ef66bafc0cec643e66f26c0f01c8660f388012f2e100b80d0000000f23c80f21f8350c0020000f23f8f00fbabf1f000000f4", 0x62}], 0x1, 0x44, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x38}}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0xffff, 0x20, 0x3, 0x2, 0x7, 0x100, 0x8000000000000, 0x80000004000080, 0x4, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f30330008000340000000072000048006000100"], 0xcd0}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x2, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) fchdir(0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x4f) 5.38049577s ago: executing program 3 (id=559): syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r2, &(0x7f0000000040), 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x5b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x801d) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000140)={{0xc000, 0x3000, 0xf000, 0x9, 0x0, 0xe3, 0x81, 0x1, 0x40, 0x85, 0x0, 0xb}, {0x26000, 0xd000, 0xc, 0x3, 0x3, 0x7, 0x5, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x11, 0x81, 0xe, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x58000, 0x58000, 0x1b, 0x7, 0x1, 0x40, 0x4, 0x0, 0xfa, 0x29, 0x6, 0x29}, {0xeeee8000, 0x4000, 0x4, 0x9, 0x5, 0x2, 0x87, 0xf1, 0x2, 0x9, 0x0, 0x8}, {0x4000, 0x58000, 0xb, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0x8a}, {0x3d0178791b53fadb, 0x10000, 0x4, 0x0, 0xcd, 0x5, 0x5, 0xf, 0x24, 0x6, 0xff, 0x6}, {0xc000, 0x6000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x5, 0x2, 0x96}, {0x70000, 0x405}, {0x80a0000, 0xff81}, 0x7237efa2c7a3a116, 0x0, 0x6000, 0x61, 0x5, 0xa800, 0x6000, 0x1, [0x6, 0x400, 0x8000000000000003, 0x1]}) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x5300a2) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201574a403731103b0904a101000102030904610001000000000000b482fd7b85"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000340)) 5.231313578s ago: executing program 2 (id=560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x152}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r3, 0xffffc000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x2000) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x400) ioctl$VIDIOC_QUERYMENU(r5, 0xc040564a, &(0x7f00000002c0)={0x0, 0x0, @value=0x5}) readv(r4, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) 5.065227541s ago: executing program 1 (id=561): syz_extract_tcp_res(&(0x7f0000000000), 0x80000000, 0xfffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) dup3(r3, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x9f, 0x0, &(0x7f0000001580)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc55087fa1062209100f8e7b6082149e2153b76247ccda57e0de0b0ed16a37fc888d898ac6afcf02f8739c24fbffffffbb44f9cecd0df51bec33a47aab5137891e17044802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa104b0b4cb24d1a634dfadcb7d8138136929166bc30ddecf8881c5dd57c63894ac49ffda34c9d"}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000005180)={0x2020}, 0x2020) 4.156139403s ago: executing program 1 (id=562): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000000c0)={0x1, r2, 'id0\x00'}) (async) userfaultfd(0x1) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000005, 0x12, 0xffffffffffffffff, 0x2000) (async) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x0, 0x6, 0x2) (async) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000200)=0x21b, 0x2, 0x1) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) (async) r4 = getpgrp(0x0) sched_setattr(r4, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x1, r4}) (async) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 4.153606428s ago: executing program 2 (id=563): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x4) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 3.334513705s ago: executing program 4 (id=564): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010101, @remote}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x200) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) 2.664925655s ago: executing program 4 (id=565): syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000a00)='1\x00', 0x2) r1 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.57204255s ago: executing program 1 (id=566): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r2 = msgget$private(0x0, 0x1f3) msgrcv(r2, 0x0, 0x0, 0x3, 0x2000) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) write(r3, &(0x7f0000000000)="0100000000000007e0", 0x9) msgrcv(r2, 0x0, 0x64, 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x14a}) msgsnd(r2, &(0x7f00000001c0)={0x3}, 0x8, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x7eb, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$TIOCL_SETSEL(r4, 0x5410, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) (async) msgget$private(0x0, 0x1f3) (async) msgrcv(r2, 0x0, 0x0, 0x3, 0x2000) (async) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) (async) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) write(r3, &(0x7f0000000000)="0100000000000007e0", 0x9) (async) msgrcv(r2, 0x0, 0x64, 0x2, 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x14a}) (async) msgsnd(r2, &(0x7f00000001c0)={0x3}, 0x8, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x7eb, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) ioctl$TIOCL_SETSEL(r4, 0x5410, 0x0) (async) 2.416615461s ago: executing program 4 (id=567): openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0xc6}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0xd032}, {0xffffffffffffffff, 0x8000}, {r1, 0x1}, {0xffffffffffffffff, 0x4220}], 0x6, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x7]}, 0x8) 2.262932898s ago: executing program 0 (id=568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x210941, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000319b16c25215896300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x1ffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x150, 0x0, 0xfffffffffffffff9, [{{0x4, 0x1, 0x4, 0x100, 0x570b, 0x8, {0x4, 0x2400000080, 0x80000001, 0x2, 0x4, 0x5, 0x6, 0x401, 0x16b5, 0x8000, 0x40, r4, 0x0, 0x7, 0x2}}, {0x2, 0x8000000000000001, 0x4, 0x190, 'GPL\x00'}}, {{0x2, 0x3, 0x1, 0xf, 0x889, 0xffffffff, {0x3, 0x0, 0x5, 0xffffffff, 0x232a, 0x401, 0x6, 0x19, 0x9, 0xc000, 0x8, 0x0, r5, 0x3, 0xf1f5}}, {0x2, 0x80000000, 0x4, 0x1c, 'GPL\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x0, 0x6, 0x8, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_dellink={0x24, 0x11, 0x5, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r11, 0x4201a, 0x100}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x40000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=@can_newroute={0x1bc, 0x18, 0x20, 0xc, 0x25dfdbff, {0x1d, 0x1, 0x5}, [@CGW_MOD_UID={0x8}, @CGW_DST_IF={0x8, 0xa, r9}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1}, 0x8, 0x2, 0x0, 0x0, "685d4932adc4d077"}, 0x6}}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "ff943e880acddaa8"}, 0x4}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_CS_CRC8={0x11e, 0x6, {0x2, 0x13, 0x52, 0xe, 0x0, "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", 0x2, "c985069210584c39e589fb595a67482c3e2fa41a"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "5b9baffc0d21d49d"}, 0x4}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4}, 0x1, 0x1, 0x0, 0x0, "72d258dfcd2376bb"}, 0x2}}, @CGW_SRC_IF={0x8, 0x9, r13}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x7bfe1172e6d7924c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r14 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r15 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r14, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r15}) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x110, r14) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000007c0)={0x8000, 0xbd2, 0x312a, 0x3, 0x4, 0x2}) 1.824473001s ago: executing program 4 (id=569): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22a00, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x3, 0x0, 0xf) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010425bd7000fcdbdf2500000400000000000000d612123499ddb9a4b2b78e503c71113cd1e0e6c06592fa461789250b73ece8a26c52217cef65e1c473c4a919c651cb73a3a68a7f75aaa1af5aa70093119ed7ee150efea4e8cb10b63483a258fed657942e5bfeede127dfc23111237b6fc171b619bad73d16fef02b1afe18d79f8cf4a147a9a33912ea63d751ce65dac3ff00"/166, @ANYRES32=0x0, @ANYBLOB="2b760000018900001c0012800b00010067656e65766500000c000280060005004e230000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000084) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r5, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000001400)={0x48, 0x8, r7, 0x0, 0x3, 0xb, &(0x7f0000000400)="21692a8cf76405ef312d03", 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="180800010000000000000000f7ffffff181100001761eb7b2df01a0b01d8a61a0c1ee620dc01137f8e00d51f11449623eaf298dfd7fa8afec3b9cf73", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100002000009500000000000000bf98200000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00010000000000000000010200000000000000000c000008000300", @ANYRES32=r11, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x20000080) futex(&(0x7f0000000280), 0xb, 0x0, 0x0, &(0x7f0000000100)=0x1, 0x4) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @broadcast}, &(0x7f0000000080)=0xc) clock_gettime(0x0, &(0x7f00000001c0)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000440)=@userptr={0x10000, 0x6, 0x4, 0x4, 0x9e24, {}, {0x1, 0x0, 0x7, 0x9, 0x4, 0x2, "a5d49c9b"}, 0x4, 0x2, {&(0x7f0000000200)}, 0x7, 0x0, r13}) 897.790741ms ago: executing program 0 (id=570): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000700), 0x6) 896.64755ms ago: executing program 1 (id=571): r0 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e155038aad51c1ee170"]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x69ec2dea, 0x8, 0x201, 0x6dc6, 0x7651, 0xa442, 0x7, 0xe000, 0x601d824b499141fd, 0xcd36, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x4, 0x10000}, 0x18, 0x1000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) 890.771122ms ago: executing program 3 (id=572): userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000080)={'ip6gre0\x00', {0x2, 0x0, @initdev}}) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8cfc, 0x20000, 0x2, 0x102, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a030400000000000000000a0000050900010073797a3100000000300004802c0001800b000100736f636b657400001c00028008000300000000d3080002400000001708000140000000130900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000014c0)=[{0x0, 0x2, {0x1, 0x1, 0x2}, {0x1, 0x0, 0x4}, 0x1, 0x2}], 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc48f, 0x8200, 0x1, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0xce7, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r12 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r13, 0x0, 0xd4, &(0x7f0000001480)=0x4, 0x4) 252.567049ms ago: executing program 0 (id=573): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000) syz_usb_connect(0x3, 0x2d, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f0009051500f4"], 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x44) 0s ago: executing program 3 (id=574): socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x2, {0x4, 0xac0, 0xdaeb, 0xf912}}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c1e03070080000900", 0x33a) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000e40)) syz_usb_connect$uac2(0x5, 0x8b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000300000020392a8c3f40000102036ad2027900030104007f080b0101010a20020904000000010120000924010700060900b20904010000010220000904010101010220001024010505000400000005050000004409050109000206998008250101181c000009040200000102200009040201010102200000020e0452082501040f43ce0300000000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x43, 0x0}]}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000500)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200"}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'hsr0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'dummy0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'gretap0\x00', 0x1}) kernel console output (not intermixed with test programs): de=0x7ffc0000 [ 165.245593][ T31] audit: type=1326 audit(1790918527.070:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.345" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e5239e159 code=0x7ffc0000 [ 165.250174][ T31] audit: type=1326 audit(1790918527.070:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.345" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5239e159 code=0x7ffc0000 [ 165.250219][ T31] audit: type=1326 audit(1790918527.070:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.345" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5239e159 code=0x7ffc0000 [ 165.589938][ T7430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.625662][ T7430] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.633516][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.633574][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.672108][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.672167][ T6937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.735015][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 165.895556][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 165.900657][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.900681][ T10] usb 2-1: Product: syz [ 165.900696][ T10] usb 2-1: Manufacturer: syz [ 165.900710][ T10] usb 2-1: SerialNumber: syz [ 165.941260][ T7430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.994951][ T52] Bluetooth: hci1: command tx timeout [ 166.101840][ T7430] veth0_vlan: entered promiscuous mode [ 166.121526][ T7430] veth1_vlan: entered promiscuous mode [ 166.125308][ T5701] logitech-hidpp-device 0005:046D:B012.000B: item fetching failed at offset 34/35 [ 166.140487][ T5701] logitech-hidpp-device 0005:046D:B012.000B: hidpp_probe:parse failed [ 166.140557][ T5701] logitech-hidpp-device 0005:046D:B012.000B: probe with driver logitech-hidpp-device failed with error -22 [ 166.231440][ T7430] veth0_macvtap: entered promiscuous mode [ 166.245351][ T7430] veth1_macvtap: entered promiscuous mode [ 166.282699][ T7430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.307755][ T7430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.380022][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 166.380060][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 166.384553][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 166.384608][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 166.435094][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 166.456963][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.457779][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 166.465585][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.474920][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.474960][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.637618][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.637640][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.711448][ T7506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.349'. [ 166.734615][ T6937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.734636][ T6937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.003242][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.015658][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.174278][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.184679][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.294862][ T5699] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 167.365011][ T5701] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 167.425463][ T5699] usb 5-1: device descriptor read/64, error -71 [ 167.496637][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 167.496974][ T7535] netlink: 'syz.3.355': attribute type 2 has an invalid length. [ 167.514659][ T30] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 167.517484][ T5701] usb 1-1: unable to get BOS descriptor or descriptor too short [ 167.517528][ T5701] usb 1-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=43.b7 [ 167.518656][ T5701] usb 1-1: config 0 has an invalid interface number: 59 but max is 2 [ 167.518678][ T5701] usb 1-1: config 0 has an invalid interface number: 59 but max is 2 [ 167.518696][ T5701] usb 1-1: config 0 has an invalid interface number: 56 but max is 2 [ 167.518714][ T5701] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 167.518733][ T5701] usb 1-1: config 0 has no interface number 0 [ 167.518748][ T5701] usb 1-1: config 0 has no interface number 1 [ 167.518806][ T5701] usb 1-1: config 0 interface 59 has no altsetting 0 [ 167.518822][ T5701] usb 1-1: config 0 interface 59 has no altsetting 1 [ 167.518839][ T5701] usb 1-1: config 0 interface 56 has no altsetting 0 [ 167.520987][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.521009][ T5701] usb 1-1: Product: syz [ 167.521023][ T5701] usb 1-1: Manufacturer: syz [ 167.521043][ T5701] usb 1-1: SerialNumber: syz [ 167.526683][ T5701] usb 1-1: config 0 descriptor?? [ 167.667013][ T5699] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 167.668112][ T30] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 167.669851][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.669920][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.669942][ T30] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.669965][ T30] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.670005][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.795267][ T5699] usb 5-1: device descriptor read/64, error -71 [ 167.876223][ T5701] rndis_host 1-1:0.59: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 167.876666][ T5701] cdc_acm 1-1:0.59: Zero length descriptor references [ 167.876681][ T5701] cdc_acm 1-1:0.59: probe with driver cdc_acm failed with error -22 [ 167.883879][ T5701] usb 1-1: USB disconnect, device number 20 [ 167.907158][ T5699] usb usb5-port1: attempt power cycle [ 168.064736][ T52] Bluetooth: hci1: command tx timeout [ 168.113173][ T7529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.244627][ T5699] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 168.265335][ T5699] usb 5-1: device descriptor read/8, error -71 [ 168.321185][ T7529] netlink: 'syz.2.353': attribute type 22 has an invalid length. [ 168.321199][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 168.321214][ T7529] bond0: option ad_select: unable to set because the bond device is up [ 168.342688][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.353'. [ 168.504653][ T5699] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 168.526345][ T5699] usb 5-1: device descriptor read/8, error -71 [ 168.587192][ T9] usb 2-1: USB disconnect, device number 6 [ 168.634845][ T5699] usb usb5-port1: unable to enumerate USB device [ 168.784689][ T5701] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 168.936293][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 168.937263][ T5701] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 168.938988][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.939040][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.939074][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.995749][ T5701] usb 4-1: config 0 descriptor?? [ 169.011604][ T30] gud 3-1:1.0: Failed to add properties (error=-71) [ 169.011633][ T30] gud 3-1:1.0: probe with driver gud failed with error -71 [ 169.078843][ T30] usb 3-1: USB disconnect, device number 28 [ 169.357515][ T30] logitech-hidpp-device 0005:046D:B012.000C: item fetching failed at offset 34/35 [ 169.357997][ T7550] [U]  [ 169.358296][ T30] logitech-hidpp-device 0005:046D:B012.000C: hidpp_probe:parse failed [ 169.358386][ T30] logitech-hidpp-device 0005:046D:B012.000C: probe with driver logitech-hidpp-device failed with error -22 [ 169.419017][ T5701] hid_parser_main: 368 callbacks suppressed [ 169.419047][ T5701] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 169.419078][ T5701] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 169.610268][ T5701] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 169.811155][ T5701] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 170.012037][ T5701] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 170.013877][ T5701] ft260 0003:0403:6030.000D: failed to retrieve status: -5 [ 170.145340][ T52] Bluetooth: hci1: command tx timeout [ 170.235196][ T7548] capability: warning: `syz.3.358' uses 32-bit capabilities (legacy support in use) [ 170.401294][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 170.401311][ T31] audit: type=1326 audit(1790918532.220:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5239e159 code=0x7ffc0000 [ 170.402039][ T31] audit: type=1326 audit(1790918532.220:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5239e159 code=0x7ffc0000 [ 170.402176][ T31] audit: type=1326 audit(1790918532.220:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5239e159 code=0x7ffc0000 [ 170.402315][ T31] audit: type=1326 audit(1790918532.220:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e5239dec2 code=0x7ffc0000 [ 170.403703][ T31] audit: type=1326 audit(1790918532.220:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5239e159 code=0x7ffc0000 [ 170.404273][ T31] audit: type=1326 audit(1790918532.220:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4e5239e159 code=0x7ffc0000 [ 170.411048][ T31] audit: type=1326 audit(1790918532.230:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f4e5239e159 code=0x7ffc0000 [ 170.411092][ T31] audit: type=1326 audit(1790918532.230:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5239e159 code=0x7ffc0000 [ 170.411130][ T31] audit: type=1326 audit(1790918532.230:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5239e159 code=0x7ffc0000 [ 170.413666][ T31] audit: type=1326 audit(1790918532.230:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4e5239e159 code=0x7ffc0000 [ 170.585293][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.757960][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 170.763409][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.763436][ T9] usb 2-1: Product: syz [ 170.763450][ T9] usb 2-1: Manufacturer: syz [ 170.763465][ T9] usb 2-1: SerialNumber: syz [ 170.875551][ T5701] ft260 0003:0403:6030.000D: failed to reset I2C controller: -71 [ 170.954373][ T5701] usb 4-1: USB disconnect, device number 37 [ 171.257049][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 171.257107][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 171.295567][ T7597] netlink: 'syz.4.370': attribute type 11 has an invalid length. [ 171.383019][ T7601] netlink: 'syz.4.370': attribute type 11 has an invalid length. [ 172.099947][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 172.266411][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 172.266967][ T10] usb 3-1: New USB device found, idVendor=0000, idProduct=0901, bcdDevice= 0.04 [ 172.267008][ T10] usb 3-1: no configurations [ 172.267016][ T10] usb 3-1: can't read configurations, error -22 [ 172.405142][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 172.425428][ T5685] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 172.574804][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 172.576295][ T10] usb 3-1: New USB device found, idVendor=0000, idProduct=0901, bcdDevice= 0.04 [ 172.576320][ T10] usb 3-1: no configurations [ 172.576327][ T10] usb 3-1: can't read configurations, error -22 [ 172.576556][ T10] usb usb3-port1: attempt power cycle [ 172.616992][ T5685] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 172.618517][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 172.618548][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.618609][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.625156][ T5685] usb 4-1: config 0 descriptor?? [ 172.646399][ T5666] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 172.720929][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 172.744666][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 172.745965][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 172.746051][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 172.751154][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 172.752950][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 172.820336][ T9] usb 2-1: USB disconnect, device number 7 [ 172.837215][ T5666] usb 5-1: unable to get BOS descriptor or descriptor too short [ 172.837254][ T5666] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 172.839160][ T5666] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.839182][ T5666] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 172.839222][ T5666] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.843402][ T5666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 172.843426][ T5666] usb 5-1: Product: syz [ 172.843441][ T5666] usb 5-1: Manufacturer: syz [ 172.944985][ T5666] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 172.973581][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.974052][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.984631][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 173.007575][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 173.008700][ T10] usb 3-1: New USB device found, idVendor=0000, idProduct=0901, bcdDevice= 0.04 [ 173.008766][ T10] usb 3-1: no configurations [ 173.008780][ T10] usb 3-1: can't read configurations, error -22 [ 173.135817][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.138804][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.163210][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 173.190417][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.191228][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 173.192803][ T10] usb 3-1: New USB device found, idVendor=0000, idProduct=0901, bcdDevice= 0.04 [ 173.192868][ T10] usb 3-1: no configurations [ 173.193223][ T10] usb 3-1: can't read configurations, error -22 [ 173.193866][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.193913][ T10] usb usb3-port1: unable to enumerate USB device [ 173.256667][ T5685] konepure 0003:1E7D:2DBE.000E: unknown main item tag 0x4 [ 173.278047][ T5685] konepure 0003:1E7D:2DBE.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 173.446902][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.447305][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.508777][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.511651][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.545409][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.545847][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.593288][ T7621] xt_TCPMSS: Only works on TCP SYN packets [ 173.603610][ T7621] 8021q: VLANs not supported on lo [ 173.957130][ T7633] netlink: 'syz.1.380': attribute type 7 has an invalid length. [ 174.015658][ T9] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 174.167801][ T5666] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 174.168735][ T5666] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 174.170057][ T5666] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 174.170855][ T5666] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 174.171839][ T5666] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 174.172314][ T5666] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 174.172742][ T5666] uvcvideo 5-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 174.176165][ T5666] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 174.177280][ T5666] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 174.177585][ T5666] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 174.187554][ T9] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 174.189695][ T9] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 174.189717][ T9] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 174.189736][ T9] usb 1-1: config 5 has no interface number 0 [ 174.189778][ T9] usb 1-1: config 5 interface 123 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 174.189798][ T9] usb 1-1: config 5 interface 123 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.189823][ T9] usb 1-1: config 5 interface 123 has no altsetting 0 [ 174.195406][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.195427][ T9] usb 1-1: Product: syz [ 174.195441][ T9] usb 1-1: Manufacturer: syz [ 174.195455][ T9] usb 1-1: SerialNumber: syz [ 174.203394][ T5666] usb 5-1: USB disconnect, device number 24 [ 174.468351][ T9] comedi comedi5: Wrong number of endpoints [ 174.468373][ T9] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 174.477432][ T9] usb 1-1: USB disconnect, device number 21 [ 175.204711][ T7664] ip6tnl1: entered allmulticast mode [ 175.225872][ T7663] ip_tables: iptables: counters copy to user failed while replacing table [ 175.246251][ T5666] usb 4-1: USB disconnect, device number 38 [ 175.250428][ T7663] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 175.250456][ T7663] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 175.264587][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 175.318437][ T7672] xt_hashlimit: size too large, truncated to 1048576 [ 175.432896][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 175.434227][ T9] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 175.434253][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 175.437831][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.437911][ T9] usb 3-1: Product: syz [ 175.437926][ T9] usb 3-1: Manufacturer: syz [ 175.437940][ T9] usb 3-1: SerialNumber: syz [ 175.447013][ T9] usb 3-1: config 0 descriptor?? [ 175.454134][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 175.504980][ T5685] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 175.633206][ T31] kauditd_printk_skb: 366 callbacks suppressed [ 175.633225][ T31] audit: type=1326 audit(1790918537.450:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961819e159 code=0x7ffc0000 [ 175.633327][ T31] audit: type=1326 audit(1790918537.450:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961819e159 code=0x7ffc0000 [ 175.666524][ T31] audit: type=1326 audit(1790918537.450:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961819e159 code=0x7ffc0000 [ 175.666569][ T31] audit: type=1326 audit(1790918537.460:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961819e159 code=0x7ffc0000 [ 175.669817][ T31] audit: type=1326 audit(1790918537.500:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f961819e159 code=0x7ffc0000 [ 175.669863][ T31] audit: type=1326 audit(1790918537.500:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961819e159 code=0x7ffc0000 [ 175.669901][ T31] audit: type=1326 audit(1790918537.500:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961819e159 code=0x7ffc0000 [ 175.682974][ T31] audit: type=1326 audit(1790918537.500:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961819e159 code=0x7ffc0000 [ 175.683019][ T31] audit: type=1326 audit(1790918537.500:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961819e159 code=0x7ffc0000 [ 175.697912][ T5685] usb 5-1: unable to get BOS descriptor or descriptor too short [ 175.697960][ T5685] usb 5-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=43.b7 [ 175.699299][ T5685] usb 5-1: config 0 has an invalid interface number: 59 but max is 2 [ 175.699321][ T5685] usb 5-1: config 0 has an invalid interface number: 59 but max is 2 [ 175.699347][ T5685] usb 5-1: config 0 has an invalid interface number: 56 but max is 2 [ 175.699366][ T5685] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 175.699408][ T5685] usb 5-1: config 0 has no interface number 0 [ 175.699424][ T5685] usb 5-1: config 0 has no interface number 1 [ 175.699482][ T5685] usb 5-1: config 0 interface 59 has no altsetting 0 [ 175.699499][ T5685] usb 5-1: config 0 interface 59 has no altsetting 1 [ 175.699516][ T5685] usb 5-1: config 0 interface 56 has no altsetting 0 [ 175.702260][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.702283][ T5685] usb 5-1: Product: syz [ 175.702297][ T5685] usb 5-1: Manufacturer: syz [ 175.702311][ T5685] usb 5-1: SerialNumber: syz [ 175.715694][ T5685] usb 5-1: config 0 descriptor?? [ 175.717859][ T31] audit: type=1326 audit(1790918537.550:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f961819e159 code=0x7ffc0000 [ 175.796624][ T5840] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 175.796888][ T5840] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 175.846564][ T5666] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 175.883052][ T7654] ALSA: mixer_oss: invalid OSS volume '' [ 175.987706][ T7661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.995182][ T7661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.109397][ T5685] rndis_host 5-1:0.59: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 176.126429][ T5685] cdc_acm 5-1:0.59: Zero length descriptor references [ 176.126486][ T5685] cdc_acm 5-1:0.59: probe with driver cdc_acm failed with error -22 [ 176.134338][ T7684] netlink: Failed to add  helper -22 [ 176.134408][ T7684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.199397][ T5685] usb 5-1: USB disconnect, device number 25 [ 176.311613][ T7684] syzkaller1: entered promiscuous mode [ 176.311634][ T7684] syzkaller1: entered allmulticast mode [ 176.346752][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.348275][ T7678] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 176.534989][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'. [ 176.697580][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 176.800935][ T5685] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 176.868012][ T5685] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 177.008445][ T7701] batman_adv: batadv0: Adding interface: veth0 [ 177.008461][ T7701] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.008491][ T7701] batman_adv: batadv0: Interface activated: veth0 [ 177.090892][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.091342][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.138730][ T9] gspca_sunplus: reg_r err -32 [ 177.138808][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 177.192741][ T5708] usb 3-1: USB disconnect, device number 33 [ 177.394580][ T9] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 177.483454][ T7721] netlink: 156 bytes leftover after parsing attributes in process `syz.0.400'. [ 177.567619][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.567670][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.569016][ T9] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 177.569047][ T9] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt [ 177.569078][ T9] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x3 is Bulk; changing to Interrupt [ 177.569100][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 177.574228][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.574252][ T9] usb 2-1: Manufacturer: Ќ [ 177.574267][ T9] usb 2-1: SerialNumber: ﾃ䳯ᢽ㫂쓨㷃緾罰෿屮ᵮ冒穐⦊叓떍洘좲䕰調ﺧ䎪姯첗蓲怏켦缭ᦋᑦ陑䏄侅폏炢䃁掞芭ꭺ㴽붴誃鹭鳓몆貔䅷♵챩큣ퟲс⬒풣툹ၱ܀ [ 177.613896][ T5701] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 177.654058][ T7710] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 177.654209][ T7710] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 177.654350][ T7710] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 177.784883][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 177.786530][ T5701] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 177.789590][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.789614][ T5701] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.820322][ T5699] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 177.839241][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.839265][ T5701] usb 5-1: Product: syz [ 177.839279][ T5701] usb 5-1: Manufacturer: syz [ 177.839288][ T5701] usb 5-1: SerialNumber: syz [ 177.843534][ T5701] usb 5-1: config 0 descriptor?? [ 177.989344][ T5699] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 177.990825][ T5699] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.990858][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.066025][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.066678][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.114198][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 178.148985][ T5701] usb 5-1: USB disconnect, device number 26 [ 178.350154][ T7733] netlink: 165 bytes leftover after parsing attributes in process `syz.2.407'. [ 178.447720][ T5699] wacom 0003:056A:033B.000F: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 178.470800][ T5699] wacom 0003:056A:033B.000F: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 178.502887][ T5699] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.000F/input/input12 [ 178.786724][ T30] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 178.839952][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 178.936632][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 178.936681][ T30] usb 3-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=43.b7 [ 178.940015][ T30] usb 3-1: config 0 has an invalid interface number: 59 but max is 2 [ 178.940040][ T30] usb 3-1: config 0 has an invalid interface number: 59 but max is 2 [ 178.940148][ T30] usb 3-1: config 0 has an invalid interface number: 56 but max is 2 [ 178.940168][ T30] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 178.940186][ T30] usb 3-1: config 0 has no interface number 0 [ 178.940201][ T30] usb 3-1: config 0 has no interface number 1 [ 178.940262][ T30] usb 3-1: config 0 interface 59 has no altsetting 0 [ 178.940280][ T30] usb 3-1: config 0 interface 59 has no altsetting 1 [ 178.940297][ T30] usb 3-1: config 0 interface 56 has no altsetting 0 [ 178.990031][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.990058][ T30] usb 3-1: Product: syz [ 178.990074][ T30] usb 3-1: Manufacturer: syz [ 178.990088][ T30] usb 3-1: SerialNumber: syz [ 178.999232][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 178.999291][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 179.073753][ T30] usb 3-1: config 0 descriptor?? [ 179.082904][ T7743] vxcan3: entered promiscuous mode [ 179.144709][ T5840] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.144754][ T5840] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.144787][ T5840] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.144848][ T5840] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.299646][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.301031][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.327888][ T30] rndis_host 3-1:0.59: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 179.329906][ T30] cdc_acm 3-1:0.59: Zero length descriptor references [ 179.329933][ T30] cdc_acm 3-1:0.59: probe with driver cdc_acm failed with error -22 [ 179.370507][ T30] usb 3-1: USB disconnect, device number 34 [ 179.415318][ T5667] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 179.564701][ T5667] usb 1-1: Using ep0 maxpacket: 32 [ 179.565765][ T5667] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 179.567460][ T5667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.573426][ T5667] usb 1-1: config 0 descriptor?? [ 179.593568][ T5667] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 180.058349][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 180.080978][ T9] usb 2-1: USB disconnect, device number 8 [ 180.144772][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 180.634629][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 180.690582][ T5685] usb 4-1: USB disconnect, device number 39 [ 180.704969][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 180.739615][ T5840] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.785964][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 180.787226][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 180.790757][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 180.790781][ T9] usb 5-1: config 0 has no interface number 0 [ 180.790848][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 180.832811][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.832839][ T9] usb 5-1: Product: syz [ 180.832880][ T9] usb 5-1: Manufacturer: syz [ 180.832894][ T9] usb 5-1: SerialNumber: syz [ 180.869985][ T9] usb 5-1: config 0 descriptor?? [ 180.880783][ T5667] gspca_vc032x: reg_w err -71 [ 180.880811][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880821][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880830][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880838][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880846][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880853][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880862][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880870][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880878][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880887][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880896][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880904][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880912][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880921][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880929][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880938][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880947][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880955][ T5667] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.880969][ T5667] gspca_vc032x: Unknown sensor... [ 180.881035][ T5667] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 180.976812][ T7785] vcan0: tx address claim with dest, not broadcast [ 181.019439][ T5667] usb 1-1: USB disconnect, device number 22 [ 181.070602][ T7788] fuse: Unknown parameter 'Nd' [ 181.110702][ T7787] ip6tnl1: entered allmulticast mode [ 181.149638][ T5840] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.191954][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.205463][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.207392][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.210006][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.210564][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.302060][ T7790] netlink: 188 bytes leftover after parsing attributes in process `syz.1.426'. [ 181.325735][ T5840] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.496623][ T5685] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 181.507310][ T5840] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.647614][ T5685] usb 4-1: unable to get BOS descriptor or descriptor too short [ 181.647667][ T5685] usb 4-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=43.b7 [ 181.649029][ T5685] usb 4-1: config 0 has an invalid interface number: 59 but max is 2 [ 181.649053][ T5685] usb 4-1: config 0 has an invalid interface number: 59 but max is 2 [ 181.649072][ T5685] usb 4-1: config 0 has an invalid interface number: 56 but max is 2 [ 181.649093][ T5685] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 181.649134][ T5685] usb 4-1: config 0 has no interface number 0 [ 181.649149][ T5685] usb 4-1: config 0 has no interface number 1 [ 181.649210][ T5685] usb 4-1: config 0 interface 59 has no altsetting 0 [ 181.649228][ T5685] usb 4-1: config 0 interface 59 has no altsetting 1 [ 181.649246][ T5685] usb 4-1: config 0 interface 56 has no altsetting 0 [ 181.653561][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.653585][ T5685] usb 4-1: Product: syz [ 181.653599][ T5685] usb 4-1: Manufacturer: syz [ 181.653637][ T5685] usb 4-1: SerialNumber: syz [ 181.777894][ T5685] usb 4-1: config 0 descriptor?? [ 181.807674][ T7810] netlink: 'syz.0.427': attribute type 2 has an invalid length. [ 181.905257][ T50] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 181.905530][ T50] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 181.934706][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.062605][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.063032][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.170460][ T5685] rndis_host 4-1:0.59: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 182.189368][ T5685] cdc_acm 4-1:0.59: Zero length descriptor references [ 182.189397][ T5685] cdc_acm 4-1:0.59: probe with driver cdc_acm failed with error -22 [ 182.228392][ T5685] usb 4-1: USB disconnect, device number 40 [ 182.376351][ T5667] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 182.435909][ T5840] bridge_slave_1: left allmulticast mode [ 182.435935][ T5840] bridge_slave_1: left promiscuous mode [ 182.436142][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.442642][ T5840] bridge_slave_0: left allmulticast mode [ 182.442666][ T5840] bridge_slave_0: left promiscuous mode [ 182.442830][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.506304][ T5840] dvmrp0: left allmulticast mode [ 182.548169][ T5685] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.570498][ T5667] usb 2-1: unable to get BOS descriptor or descriptor too short [ 182.572900][ T5667] usb 2-1: not running at top speed; connect to a high speed hub [ 182.572956][ T5667] usb 2-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 182.591160][ T5667] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 182.622839][ T5667] usb 2-1: string descriptor 0 read error: -22 [ 182.622997][ T5667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.651275][ T975] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.655601][ T7822] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 182.692254][ T5667] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.077971][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.081853][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.264921][ T52] Bluetooth: hci4: command tx timeout [ 183.421750][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.446829][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.453249][ T5840] bond0 (unregistering): Released all slaves [ 183.600822][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 183.600851][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 183.602284][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 183.602312][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 183.602330][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 183.602347][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 183.602591][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 183.684788][ T9] usb 5-1: USB disconnect, device number 27 [ 183.861697][ T7853] Cannot find add_set index 0 as target [ 183.878587][ T7822] bond1: entered allmulticast mode [ 183.888913][ T7822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.918822][ T30] usb 2-1: USB disconnect, device number 9 [ 184.328576][ T5699] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 184.376753][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 184.393767][ T5840] hsr_slave_0: left promiscuous mode [ 184.394331][ T5840] hsr_slave_1: left promiscuous mode [ 184.400961][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.400981][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.406447][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.406465][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.441240][ T5840] veth1_macvtap: left promiscuous mode [ 184.441265][ T5840] veth0_macvtap: left promiscuous mode [ 184.441323][ T5840] veth1_vlan: left promiscuous mode [ 184.441360][ T5840] veth0_vlan: left promiscuous mode [ 184.477090][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 184.478561][ T5699] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 184.479524][ T5699] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 184.479541][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 184.492876][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.492907][ T5699] usb 4-1: Product: syz [ 184.492922][ T5699] usb 4-1: Manufacturer: syz [ 184.492936][ T5699] usb 4-1: SerialNumber: syz [ 184.519621][ T5699] usb 4-1: config 0 descriptor?? [ 184.546033][ T5699] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 184.546070][ T5699] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 185.004678][ T5348] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 185.139583][ T7857] fuse: Invalid gid '0x0000000000000004' [ 185.155404][ T5348] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 185.156415][ T5348] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.156444][ T5348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.161606][ T5348] usb 2-1: config 0 descriptor?? [ 185.188538][ T5348] pwc: Askey VC010 type 2 USB webcam detected. [ 185.220495][ T5840] team_slave_1 (unregistering): left allmulticast mode [ 185.226898][ T7857] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 185.244074][ T5840] team0 (unregistering): Port device team_slave_1 removed [ 185.283865][ T5840] team_slave_0 (unregistering): left allmulticast mode [ 185.296676][ T5699] em28xx 4-1:0.0: chip ID is em2870 [ 185.299655][ T5840] team0 (unregistering): Port device team_slave_0 removed [ 185.345459][ T52] Bluetooth: hci4: command tx timeout [ 185.366539][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.369194][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.371050][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.382115][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.386842][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.487509][ T9] usb 4-1: USB disconnect, device number 41 [ 185.488706][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 185.580640][ T5348] pwc: recv_control_msg error -32 req 02 val 2b00 [ 185.581644][ T5348] pwc: recv_control_msg error -32 req 02 val 2700 [ 185.607211][ T9] em28xx: Freeing device [ 185.607455][ T5348] pwc: recv_control_msg error -32 req 02 val 2c00 [ 185.610119][ T5348] pwc: recv_control_msg error -32 req 04 val 1000 [ 185.612337][ T5348] pwc: recv_control_msg error -32 req 04 val 1300 [ 185.612938][ T5348] pwc: recv_control_msg error -32 req 04 val 1400 [ 185.613700][ T5348] pwc: recv_control_msg error -32 req 02 val 2000 [ 185.614440][ T5348] pwc: recv_control_msg error -32 req 02 val 2100 [ 185.848969][ T5348] pwc: recv_control_msg error -71 req 02 val 2500 [ 185.852565][ T5348] pwc: recv_control_msg error -71 req 02 val 2400 [ 185.856427][ T5348] pwc: recv_control_msg error -71 req 02 val 2600 [ 185.859965][ T5348] pwc: recv_control_msg error -71 req 02 val 2900 [ 185.863534][ T5348] pwc: recv_control_msg error -71 req 02 val 2800 [ 185.867993][ T5348] pwc: recv_control_msg error -71 req 04 val 1100 [ 185.870243][ T5348] pwc: recv_control_msg error -71 req 04 val 1200 [ 185.897577][ T5348] pwc: Registered as video103. [ 185.923923][ T5348] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 185.952629][ T5348] usb 2-1: USB disconnect, device number 10 [ 186.057470][ T7795] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.057605][ T7795] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.057719][ T7795] bridge_slave_0: entered allmulticast mode [ 186.060693][ T7795] bridge_slave_0: entered promiscuous mode [ 186.119497][ T7795] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.120930][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.121421][ T7795] bridge_slave_1: entered allmulticast mode [ 186.143400][ T7795] bridge_slave_1: entered promiscuous mode [ 186.299122][ T7795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.304690][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 186.338698][ T7795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.444372][ T7882] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 186.516156][ T7795] team0: Port device team_slave_0 added [ 186.518928][ T7795] team0: Port device team_slave_1 added [ 186.707609][ T7795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.707622][ T7795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.707636][ T7795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.781299][ T7795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.781316][ T7795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.781339][ T7795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.098296][ T5840] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.098320][ T5840] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.311109][ T7795] hsr_slave_0: entered promiscuous mode [ 187.311816][ T7795] hsr_slave_1: entered promiscuous mode [ 187.312212][ T7795] debugfs: 'hsr0' already exists in 'hsr' [ 187.312230][ T7795] Cannot create hsr debugfs directory [ 187.414334][ T5840] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.414368][ T5840] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.425034][ T5614] Bluetooth: hci1: command tx timeout [ 187.426922][ T5614] Bluetooth: hci4: command tx timeout [ 187.514685][ T5348] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 187.516593][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 187.599314][ T5619] cgroup: fork rejected by pids controller in /syz1 [ 187.644816][ T5348] usb 4-1: device descriptor read/64, error -71 [ 187.708339][ T5840] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.708374][ T5840] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.841591][ T5840] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.841626][ T5840] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.895117][ T5348] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 188.025760][ T5348] usb 4-1: device descriptor read/64, error -71 [ 188.135014][ T5348] usb usb4-port1: attempt power cycle [ 188.276194][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.276345][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.276504][ T7868] bridge_slave_0: entered allmulticast mode [ 188.278352][ T7868] bridge_slave_0: entered promiscuous mode [ 188.286480][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.288284][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.288416][ T7868] bridge_slave_1: entered allmulticast mode [ 188.291495][ T7868] bridge_slave_1: entered promiscuous mode [ 188.368169][ T7868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.473247][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.481996][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.483042][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.485255][ T5348] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 188.502150][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.502704][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.505727][ T5348] usb 4-1: device descriptor read/8, error -71 [ 188.565407][ T7868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.662047][ T7868] team0: Port device team_slave_0 added [ 188.670386][ T7868] team0: Port device team_slave_1 added [ 188.743187][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.743204][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.743227][ T7868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.746801][ T5348] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 188.765497][ T5348] usb 4-1: device descriptor read/8, error -71 [ 188.852188][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.852206][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.852231][ T7868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.861278][ T7940] qrtr: Invalid version 0 [ 188.890593][ T5348] usb usb4-port1: unable to enumerate USB device [ 188.893875][ T5840] bridge_slave_1: left allmulticast mode [ 188.893899][ T5840] bridge_slave_1: left promiscuous mode [ 188.894107][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.907386][ T5840] bridge_slave_0: left allmulticast mode [ 188.907408][ T5840] bridge_slave_0: left promiscuous mode [ 188.907600][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.152943][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.164705][ T5699] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 189.180168][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.181757][ T5840] bond0 (unregistering): Released all slaves [ 189.336026][ T5699] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 189.340387][ T5699] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 189.340414][ T5699] usb 1-1: Product: syz [ 189.340428][ T5699] usb 1-1: Manufacturer: syz [ 189.340441][ T5699] usb 1-1: SerialNumber: syz [ 189.343346][ T5699] usb 1-1: config 0 descriptor?? [ 189.509098][ T5614] Bluetooth: hci4: command tx timeout [ 189.509127][ T5614] Bluetooth: hci1: command tx timeout [ 189.606133][ T7868] hsr_slave_0: entered promiscuous mode [ 189.607240][ T7868] hsr_slave_1: entered promiscuous mode [ 189.608040][ T7868] debugfs: 'hsr0' already exists in 'hsr' [ 189.608058][ T7868] Cannot create hsr debugfs directory [ 189.655673][ T5699] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 189.655706][ T5699] peak_usb 1-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 189.714045][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 189.739286][ T5699] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 189.744414][ T5699] usb 1-1: USB disconnect, device number 23 [ 189.821498][ T5840] hsr_slave_0: left promiscuous mode [ 189.822184][ T5840] hsr_slave_1: left promiscuous mode [ 189.823137][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.823157][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.824283][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.824301][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.837427][ T5840] batman_adv: batadv0: Interface deactivated: veth0 [ 189.837446][ T5840] batman_adv: batadv0: Removing interface: veth0 [ 189.860605][ T5840] veth1_macvtap: left promiscuous mode [ 189.860641][ T5840] veth0_macvtap: left promiscuous mode [ 189.860735][ T5840] veth1_vlan: left promiscuous mode [ 189.860797][ T5840] veth0_vlan: left promiscuous mode [ 190.053535][ T5840] team0 (unregistering): Port device team_slave_1 removed [ 190.080756][ T5840] team0 (unregistering): Port device team_slave_0 removed [ 190.458179][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.458275][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.458363][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.458445][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.458521][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.458600][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.458678][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.458753][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.458828][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.458906][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.458982][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.459059][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.459135][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.459212][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.459289][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.459377][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.461537][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.461628][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.461709][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.461787][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.461865][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.461942][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462018][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462093][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462162][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462236][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462321][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462398][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462474][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462551][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462632][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462708][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462786][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462863][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.462943][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.518896][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.519002][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.519084][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.520046][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.520125][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.520201][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.520276][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.523874][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.523965][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.524055][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.524130][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.524221][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.524295][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.524368][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.524442][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.526156][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.526234][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.526308][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.526382][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.526458][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.526532][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.526614][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.526689][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.526768][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 190.545227][ T52] Bluetooth: hci0: command tx timeout [ 190.556758][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 190.556847][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 190.556922][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 190.556998][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 190.578318][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 190.578420][ T7965] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 190.710870][ T7795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.753323][ T7795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.830801][ T7795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.858463][ T7795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.860276][ T7795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.916060][ T7795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.916894][ T7795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.940378][ T7795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.227310][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.228669][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.393179][ T7986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.449'. [ 191.567350][ T5840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.584769][ T52] Bluetooth: hci1: command tx timeout [ 191.654860][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.655046][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.655219][ T7938] bridge_slave_0: entered allmulticast mode [ 191.657935][ T7938] bridge_slave_0: entered promiscuous mode [ 191.686607][ T7938] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.686999][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.687097][ T7938] bridge_slave_1: entered allmulticast mode [ 191.689298][ T7938] bridge_slave_1: entered promiscuous mode [ 191.847431][ T5840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.952101][ T7938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.958264][ T7938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.237420][ T5840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.298598][ T7938] team0: Port device team_slave_0 added [ 192.303053][ T7938] team0: Port device team_slave_1 added [ 192.397286][ T7938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.397298][ T7938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.397312][ T7938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.500733][ T5840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.627057][ T52] Bluetooth: hci0: command tx timeout [ 192.647391][ T7938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.647402][ T7938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.647417][ T7938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.734725][ T5699] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 192.845365][ T7938] hsr_slave_0: entered promiscuous mode [ 192.846528][ T7938] hsr_slave_1: entered promiscuous mode [ 192.847237][ T7938] debugfs: 'hsr0' already exists in 'hsr' [ 192.847254][ T7938] Cannot create hsr debugfs directory [ 192.893699][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.899132][ T5699] usb 1-1: not running at top speed; connect to a high speed hub [ 192.899164][ T5699] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 192.913101][ T5699] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 192.913134][ T5699] usb 1-1: config 0 has no interface number 0 [ 192.913172][ T5699] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 192.913198][ T5699] usb 1-1: config 0 interface 88 has no altsetting 0 [ 192.973529][ T5699] usb 1-1: language id specifier not provided by device, defaulting to English [ 193.016803][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 193.018483][ T5699] usb 1-1: config 0 descriptor?? [ 193.019276][ T8007] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.083657][ T7868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.108690][ T7868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.249929][ T8007] netlink: 88 bytes leftover after parsing attributes in process `syz.0.452'. [ 193.270284][ T7868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.273697][ T8007] netlink: 48 bytes leftover after parsing attributes in process `syz.0.452'. [ 193.298853][ T7868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.299470][ T7868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.328091][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 193.331221][ T7868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.416186][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.416465][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.429886][ T7868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.459670][ T7868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.573346][ T8007] can: request_module (can-proto-0) failed. [ 193.575426][ T7795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.664981][ T52] Bluetooth: hci1: command tx timeout [ 193.922033][ T7795] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.988789][ T5840] bridge_slave_1: left allmulticast mode [ 193.988816][ T5840] bridge_slave_1: left promiscuous mode [ 193.989016][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.029559][ T5840] bridge_slave_0: left allmulticast mode [ 194.031960][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.154152][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.154210][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.165724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 194.245159][ T5699] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input16 [ 194.292091][ T5699] usb 1-1: USB disconnect, device number 24 [ 194.292201][ C1] usb_acecad 1-1:0.88: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 194.395908][ T5618] udevd[5618]: Error opening device "/dev/input/event4": No such file or directory [ 194.395986][ T5618] udevd[5618]: Unable to EVIOCGABS device "/dev/input/event4" [ 194.396075][ T5618] udevd[5618]: Unable to EVIOCGABS device "/dev/input/event4" [ 194.628694][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.655728][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.656843][ T5840] bond0 (unregistering): Released all slaves [ 194.660764][ T5840] bond1 (unregistering): Released all slaves [ 194.706008][ T52] Bluetooth: hci0: command tx timeout [ 194.805208][ T5840] IPVS: stopping master sync thread 6067 ... [ 194.847871][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.847963][ T6937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.108873][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.108988][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.156199][ T8042] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 195.156215][ T8042] netlink: 55 bytes leftover after parsing attributes in process `syz.0.454'. [ 195.424677][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.896196][ T5840] hsr_slave_0: left promiscuous mode [ 195.903849][ T5840] hsr_slave_1: left promiscuous mode [ 195.924915][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.924939][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.946736][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.946758][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.993193][ T5840] veth1_macvtap: left promiscuous mode [ 195.994288][ T5840] veth0_macvtap: left promiscuous mode [ 195.996703][ T5840] veth1_vlan: left promiscuous mode [ 195.996781][ T5840] veth0_vlan: left promiscuous mode [ 196.024583][ T31] kauditd_printk_skb: 212 callbacks suppressed [ 196.024600][ T31] audit: type=1326 audit(1790918557.840:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f439e159 code=0x7ffc0000 [ 196.024722][ T31] audit: type=1326 audit(1790918557.840:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f439e159 code=0x7ffc0000 [ 196.031409][ T31] audit: type=1326 audit(1790918557.850:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f38f439e159 code=0x7ffc0000 [ 196.031455][ T31] audit: type=1326 audit(1790918557.850:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f439e159 code=0x7ffc0000 [ 196.031657][ T31] audit: type=1326 audit(1790918557.850:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f439e159 code=0x7ffc0000 [ 196.038208][ T31] audit: type=1326 audit(1790918557.860:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f38f439e159 code=0x7ffc0000 [ 196.038410][ T31] audit: type=1326 audit(1790918557.860:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f439e159 code=0x7ffc0000 [ 196.045202][ T31] audit: type=1326 audit(1790918557.870:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f439e159 code=0x7ffc0000 [ 196.048450][ T31] audit: type=1326 audit(1790918557.870:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f38f439e159 code=0x7ffc0000 [ 196.058293][ T31] audit: type=1326 audit(1790918557.880:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.3.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f439e159 code=0x7ffc0000 [ 196.108809][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 196.388778][ T8065] netlink: 80 bytes leftover after parsing attributes in process `syz.0.457'. [ 196.541191][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 196.788962][ T52] Bluetooth: hci0: command tx timeout [ 196.878222][ T5685] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 196.919662][ T8082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.024638][ T5685] usb 1-1: Using ep0 maxpacket: 16 [ 197.025458][ T5685] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 197.026665][ T5685] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.026694][ T5685] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.026716][ T5685] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.026749][ T5685] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.026780][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.091982][ T5685] usb 1-1: config 0 descriptor?? [ 197.109191][ T5840] team0 (unregistering): Port device team_slave_1 removed [ 197.139897][ T5840] team0 (unregistering): Port device team_slave_0 removed [ 197.525343][ T5685] usbhid 1-1:0.0: can't add hid device: -71 [ 197.525443][ T5685] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 197.534172][ T5685] usb 1-1: USB disconnect, device number 25 [ 197.643227][ T8092] netlink: 100 bytes leftover after parsing attributes in process `syz.3.463'. [ 197.795616][ T7868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.878800][ T7795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.907318][ T7868] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.926721][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.926824][ T6937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.950176][ T4905] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.950297][ T4905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.131303][ T8101] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 198.185260][ T8105] cgroup: fork rejected by pids controller in /syz3 [ 198.363640][ T8107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.366214][ T8107] bond1: (slave bond2): making interface the new active one [ 198.373295][ T8107] bond1: (slave bond2): Enslaving as an active interface with an up link [ 198.566100][ T7938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 198.595130][ T7938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.605651][ T8113] x_tables: unsorted entry at hook 3 [ 198.628399][ T7938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 198.646794][ T7938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.652100][ T7795] veth0_vlan: entered promiscuous mode [ 198.653051][ T7938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 198.672568][ T7938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.690403][ T7938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 198.707437][ T7938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.718633][ T7795] veth1_vlan: entered promiscuous mode [ 198.846590][ T5685] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 198.927652][ T7868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.959571][ T7795] veth0_macvtap: entered promiscuous mode [ 198.978240][ T7795] veth1_macvtap: entered promiscuous mode [ 198.996904][ T5685] usb 1-1: Using ep0 maxpacket: 8 [ 199.002186][ T5685] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.002238][ T5685] usb 1-1: New USB device found, idVendor=1557, idProduct=20c4, bcdDevice=e6.aa [ 199.008951][ T5685] usb 1-1: config 15 has an invalid interface number: 145 but max is 1 [ 199.008978][ T5685] usb 1-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 199.008997][ T5685] usb 1-1: config 15 has 1 interface, different from the descriptor's value: 2 [ 199.009016][ T5685] usb 1-1: config 15 has no interface number 0 [ 199.009530][ T5685] usb 1-1: config 15 interface 145 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 199.009557][ T5685] usb 1-1: config 15 interface 145 altsetting 8 endpoint 0x1 has invalid maxpacket 2368, setting to 1024 [ 199.009582][ T5685] usb 1-1: config 15 interface 145 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 199.009606][ T5685] usb 1-1: config 15 interface 145 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.009631][ T5685] usb 1-1: config 15 interface 145 has no altsetting 0 [ 199.015646][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.015671][ T5685] usb 1-1: Product: 、 [ 199.015686][ T5685] usb 1-1: Manufacturer: Ѝ [ 199.015699][ T5685] usb 1-1: SerialNumber: ᠊ [ 199.032289][ T8113] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 199.130965][ T7795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.186624][ T7795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.284822][ T5685] usb 1-1: USB disconnect, device number 26 [ 199.335113][ T4905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.337399][ T4905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.337440][ T4905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.337475][ T4905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.406038][ T7868] veth0_vlan: entered promiscuous mode [ 199.412870][ T7938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.631048][ T7868] veth1_vlan: entered promiscuous mode [ 199.639801][ T7938] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.648601][ T6937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.648620][ T6937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.651993][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.652091][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.666668][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.666764][ T5843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.825608][ T4905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.825629][ T4905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.139592][ T6937] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.254368][ T7868] veth0_macvtap: entered promiscuous mode [ 200.293560][ T7868] veth1_macvtap: entered promiscuous mode [ 200.356996][ T10] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 200.443358][ T6937] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.525971][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 200.528092][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.539095][ T10] usb 3-1: config 0 descriptor?? [ 200.570589][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.591082][ T7938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.604873][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.700415][ T6937] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.939838][ T6937] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.017377][ T10] sony 0003:054C:024B.0010: unknown main item tag 0x0 [ 201.017413][ T10] sony 0003:054C:024B.0010: unknown main item tag 0x0 [ 201.017437][ T10] sony 0003:054C:024B.0010: item fetching failed at offset 2/40 [ 201.018157][ T10] sony 0003:054C:024B.0010: parse failed [ 201.018249][ T10] sony 0003:054C:024B.0010: probe with driver sony failed with error -22 [ 201.063518][ T4905] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.063885][ T4905] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.063921][ T4905] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.063949][ T4905] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.246377][ T7938] veth0_vlan: entered promiscuous mode [ 201.335384][ T7938] veth1_vlan: entered promiscuous mode [ 201.500091][ T6935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.500111][ T6935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.720583][ T6937] bridge_slave_1: left allmulticast mode [ 201.720607][ T6937] bridge_slave_1: left promiscuous mode [ 201.720807][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.747877][ T6937] bridge_slave_0: left allmulticast mode [ 201.747913][ T6937] bridge_slave_0: left promiscuous mode [ 201.748118][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.814890][ T10] usb 3-1: USB disconnect, device number 35 [ 202.139021][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.159038][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.162488][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.163321][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.163898][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.257745][ T6937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.274365][ T6937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.290819][ T6937] bond0 (unregistering): Released all slaves [ 202.303474][ T5843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.303494][ T5843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.314228][ T8175] syzkaller0: entered promiscuous mode [ 202.314248][ T8175] syzkaller0: entered allmulticast mode [ 202.342838][ T7938] veth0_macvtap: entered promiscuous mode [ 202.352574][ T8178] tipc: Started in network mode [ 202.352618][ T8178] tipc: Node identity ba5a330ae7d5, cluster identity 4711 [ 202.352840][ T8178] tipc: Enabled bearer , priority 0 [ 202.354258][ T7938] veth1_macvtap: entered promiscuous mode [ 202.407656][ T8179] tipc: Enabling of bearer rejected, already enabled [ 202.696825][ T8170] tipc: Resetting bearer [ 202.744170][ T8170] tipc: Disabling bearer [ 202.856314][ T7938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.914300][ T7938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.072347][ T6937] hsr_slave_0: left promiscuous mode [ 203.073967][ T6937] hsr_slave_1: left promiscuous mode [ 203.076159][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.076179][ T6937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.110518][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.110541][ T6937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.139309][ T6937] veth1_macvtap: left promiscuous mode [ 203.139347][ T6937] veth0_macvtap: left promiscuous mode [ 203.139525][ T6937] veth1_vlan: left promiscuous mode [ 203.139645][ T6937] veth0_vlan: left promiscuous mode [ 203.236915][ T975] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 203.404549][ T975] usb 1-1: Using ep0 maxpacket: 8 [ 203.405343][ T975] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 203.408524][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.408547][ T975] usb 1-1: Product: syz [ 203.408561][ T975] usb 1-1: Manufacturer: syz [ 203.408576][ T975] usb 1-1: SerialNumber: syz [ 203.413704][ T975] usb 1-1: config 0 descriptor?? [ 203.465738][ T975] gspca_main: se401-2.14.0 probing 047d:5003 [ 203.575313][ T6937] team0 (unregistering): Port device team_slave_1 removed [ 203.584061][ T6937] team0 (unregistering): Port device team_slave_0 removed [ 203.636831][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.637483][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.820924][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.841445][ T975] gspca_se401: ExtraFeatures: 4 [ 203.841462][ T975] gspca_se401: Frame size: 64x513 bayer [ 203.841475][ T975] gspca_se401: Frame size: 259x0 bayer [ 203.841486][ T975] gspca_se401: Frame size: 8192x0 bayer [ 203.841496][ T975] gspca_se401: Frame size: 319x3 bayer [ 203.841506][ T975] gspca_se401: Frame size: 0x0 1/16th janggu [ 203.936654][ T4905] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.938405][ T4905] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.939041][ T4905] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.048214][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.053365][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.081710][ T975] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 204.092566][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.092952][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.305638][ T5614] Bluetooth: hci3: command tx timeout [ 204.369569][ T6935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.369590][ T6935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.611243][ T6937] IPVS: stop unused estimator thread 0... [ 204.914183][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.914290][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.914418][ T8176] bridge_slave_0: entered allmulticast mode [ 204.918666][ T8176] bridge_slave_0: entered promiscuous mode [ 204.925018][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.925145][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.925263][ T8176] bridge_slave_1: entered allmulticast mode [ 204.930523][ T8176] bridge_slave_1: entered promiscuous mode [ 205.120184][ T8176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.144417][ T8176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.158437][ T5845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.158456][ T5845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.333549][ T8176] team0: Port device team_slave_0 added [ 205.355829][ T8176] team0: Port device team_slave_1 added [ 205.476826][ T8176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.476843][ T8176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.476870][ T8176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.543415][ T8176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.546025][ T8176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.546056][ T8176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.844197][ T8176] hsr_slave_0: entered promiscuous mode [ 205.851710][ T8176] hsr_slave_1: entered promiscuous mode [ 205.955427][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 206.110790][ T5348] usb 1-1: USB disconnect, device number 27 [ 206.385408][ T5614] Bluetooth: hci3: command tx timeout [ 206.614919][ T10] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 206.755572][ T10] usb 3-1: device descriptor read/64, error -71 [ 206.764918][ T5348] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 206.936342][ T5348] usb 1-1: Using ep0 maxpacket: 32 [ 206.937157][ T5348] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 206.938361][ T5348] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 206.938385][ T5348] usb 1-1: config 0 has no interface number 0 [ 206.942335][ T5348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.942359][ T5348] usb 1-1: Product: syz [ 206.942373][ T5348] usb 1-1: Manufacturer: syz [ 206.942388][ T5348] usb 1-1: SerialNumber: syz [ 207.006395][ T10] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 207.006440][ T5348] usb 1-1: config 0 descriptor?? [ 207.029612][ T5348] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 207.156853][ T10] usb 3-1: device descriptor read/64, error -71 [ 207.225757][ T5348] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 207.259369][ T5348] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 207.266476][ T10] usb usb3-port1: attempt power cycle [ 207.299607][ T8176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.319930][ T8176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.324323][ T8176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.350120][ T8176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.351137][ T8176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.380558][ T8176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.385203][ T8176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.417864][ T8176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.521195][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 207.522251][ T975] usb 1-1: USB disconnect, device number 28 [ 207.538992][ T975] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 207.566353][ T975] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 207.582193][ T975] quatech2 1-1:0.51: device disconnected [ 207.636764][ T10] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 207.657556][ T10] usb 3-1: device descriptor read/8, error -71 [ 207.823824][ T8176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.895528][ T8176] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.905056][ T10] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 207.914438][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.914581][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.924048][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.924147][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.949730][ T10] usb 3-1: device descriptor read/8, error -71 [ 208.069113][ T10] usb usb3-port1: unable to enumerate USB device [ 208.097095][ T8176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.126220][ T5666] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 208.239559][ T8176] veth0_vlan: entered promiscuous mode [ 208.267702][ T8308] loop0: detected capacity change from 0 to 6 [ 208.267929][ T8176] veth1_vlan: entered promiscuous mode [ 208.285680][ T5666] usb 5-1: Using ep0 maxpacket: 32 [ 208.286364][ T5666] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 208.287483][ T5666] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.287506][ T5666] usb 5-1: config 0 has no interface number 0 [ 208.287542][ T5666] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 208.287563][ T5666] usb 5-1: config 0 interface 1 has no altsetting 0 [ 208.296283][ T5666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.296307][ T5666] usb 5-1: Product: syz [ 208.296321][ T5666] usb 5-1: Manufacturer: syz [ 208.296335][ T5666] usb 5-1: SerialNumber: syz [ 208.301689][ T5666] usb 5-1: config 0 descriptor?? [ 208.360296][ T8308] Dev loop0: unable to read RDB block 6 [ 208.360361][ T8308] loop0: unable to read partition table [ 208.380785][ T8308] loop0: partition table beyond EOD, truncated [ 208.380802][ T8308] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 208.456535][ T8176] veth0_macvtap: entered promiscuous mode [ 208.479614][ T5614] Bluetooth: hci3: command tx timeout [ 208.479839][ T8176] veth1_macvtap: entered promiscuous mode [ 208.521109][ T8176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.541153][ T8176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.560727][ T5666] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 208.589213][ T5666] cx231xx 5-1:0.1: Failed to read PCB config [ 208.589272][ T5666] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 208.601220][ T5666] usb 5-1: USB disconnect, device number 28 [ 208.618615][ T6935] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.618770][ T6935] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.645779][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.665010][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.694188][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 208.753295][ T6935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.753317][ T6935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.816489][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.816504][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.234617][ T5701] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 209.367867][ T5701] usb 5-1: device descriptor read/64, error -71 [ 209.406576][ T8327] netlink: 56 bytes leftover after parsing attributes in process `syz.0.489'. [ 209.605219][ T5701] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 209.734647][ T5701] usb 5-1: device descriptor read/64, error -71 [ 209.846118][ T5701] usb usb5-port1: attempt power cycle [ 210.119601][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 210.119619][ T31] audit: type=1326 audit(1790918571.940:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.1.492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12019e159 code=0x7ffc0000 [ 210.121350][ T31] audit: type=1326 audit(1790918571.940:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.1.492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12019e159 code=0x7ffc0000 [ 210.121489][ T31] audit: type=1326 audit(1790918571.940:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.1.492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb12019e159 code=0x7ffc0000 [ 210.122990][ T31] audit: type=1326 audit(1790918571.940:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.1.492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12019e159 code=0x7ffc0000 [ 210.124090][ T31] audit: type=1326 audit(1790918571.940:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.1.492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb12019e159 code=0x7ffc0000 [ 210.207373][ T31] audit: type=1326 audit(1790918571.940:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.1.492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12019e159 code=0x7ffc0000 [ 210.207406][ T31] audit: type=1326 audit(1790918571.940:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.1.492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12019e159 code=0x7ffc0000 [ 210.207428][ T31] audit: type=1326 audit(1790918571.950:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.1.492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fb12019e159 code=0x7ffc0000 [ 210.207458][ T31] audit: type=1326 audit(1790918571.950:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.1.492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12019e159 code=0x7ffc0000 [ 210.207480][ T31] audit: type=1326 audit(1790918571.950:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.1.492" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb12019e159 code=0x7ffc0000 [ 210.283312][ T5701] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 210.357535][ T5701] usb 5-1: device descriptor read/8, error -71 [ 210.397603][ T5666] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 210.419895][ T8339] futex_wake_op: syz.1.492 tries to shift op by 144; fix this program [ 210.555454][ T5614] Bluetooth: hci3: command tx timeout [ 210.555497][ T5666] usb 3-1: Using ep0 maxpacket: 16 [ 210.556186][ T5666] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=ad.d0 [ 210.558032][ T5666] usb 3-1: config 7 has an invalid interface number: 3 but max is 0 [ 210.558055][ T5666] usb 3-1: config 7 has no interface number 0 [ 210.558095][ T5666] usb 3-1: config 7 interface 3 has no altsetting 0 [ 210.561332][ T5666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.561356][ T5666] usb 3-1: Product: syz [ 210.561370][ T5666] usb 3-1: Manufacturer: syz [ 210.561384][ T5666] usb 3-1: SerialNumber: syz [ 210.599879][ T5701] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 210.658746][ T5701] usb 5-1: device descriptor read/8, error -71 [ 210.765208][ T5701] usb usb5-port1: unable to enumerate USB device [ 210.860259][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.862739][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.137153][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'. [ 211.138314][ T8360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'. [ 211.177816][ T8356] loop3: detected capacity change from 0 to 4 [ 211.375609][ T5666] catc 3-1:7.3: Missing or invalid endpoints [ 211.394576][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 211.432233][ T975] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 211.547413][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 211.547464][ T9] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 211.548773][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.548796][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.548817][ T9] usb 1-1: config 1 has no interface number 0 [ 211.548855][ T9] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x62, changing to 0x2 [ 211.552941][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.552965][ T9] usb 1-1: Product: syz [ 211.552980][ T9] usb 1-1: Manufacturer: syz [ 211.552995][ T9] usb 1-1: SerialNumber: syz [ 211.584359][ T975] usb 2-1: device descriptor read/64, error -71 [ 211.825698][ T975] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 211.966001][ T975] usb 2-1: device descriptor read/64, error -71 [ 212.086122][ T975] usb usb2-port1: attempt power cycle [ 212.366003][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 212.444590][ T975] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 212.466604][ T975] usb 2-1: device descriptor read/8, error -71 [ 212.504094][ T9] snd-usb-us122l 1-1:1.1: usb_set_interface error [ 212.505497][ T9] snd-usb-us122l 1-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 212.509099][ T9] usb 1-1: USB disconnect, device number 29 [ 212.716580][ T975] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 212.735030][ T975] usb 2-1: device descriptor read/8, error -71 [ 212.844903][ T975] usb usb2-port1: unable to enumerate USB device [ 213.151651][ T4943] usb 3-1: USB disconnect, device number 40 [ 213.347368][ T975] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 213.494545][ T975] usb 1-1: device descriptor read/64, error -71 [ 213.542504][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 213.542528][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'. [ 213.587005][ T8381] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 213.755987][ T975] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 213.905376][ T975] usb 1-1: device descriptor read/64, error -71 [ 214.017180][ T975] usb usb1-port1: attempt power cycle [ 214.355475][ T975] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 214.376514][ T975] usb 1-1: device descriptor read/8, error -71 [ 214.615891][ T975] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 214.647698][ T975] usb 1-1: device descriptor read/8, error -71 [ 214.754852][ T975] usb usb1-port1: unable to enumerate USB device [ 214.964445][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 215.077256][ T975] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 215.227017][ T975] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 215.230300][ T975] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.237422][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.237446][ T975] usb 5-1: Product: syz [ 215.237460][ T975] usb 5-1: Manufacturer: syz [ 215.237473][ T975] usb 5-1: SerialNumber: syz [ 215.252335][ T975] usb-storage 5-1:1.0: USB Mass Storage device detected [ 215.255554][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 215.297795][ T975] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 215.303066][ T975] scsi host1: usb-storage 5-1:1.0 [ 215.394628][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 215.416408][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.419182][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.419196][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 215.419220][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.421440][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.421528][ T9] usb 4-1: Product: syz [ 215.421545][ T9] usb 4-1: Manufacturer: syz [ 215.421559][ T9] usb 4-1: SerialNumber: syz [ 215.445033][ T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 215.445084][ T9] cdc_ncm 4-1:1.0: bind() failure [ 215.567163][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=aecb, bcdDevice=c4.69 [ 215.569557][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 215.569577][ T10] usb 2-1: can't read configurations, error -61 [ 215.714700][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 215.826802][ T975] usb 4-1: USB disconnect, device number 46 [ 215.867440][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=aecb, bcdDevice=c4.69 [ 215.870166][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 215.870194][ T10] usb 2-1: can't read configurations, error -61 [ 215.871008][ T10] usb usb2-port1: attempt power cycle [ 216.204602][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 216.226058][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=aecb, bcdDevice=c4.69 [ 216.228283][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 216.228303][ T10] usb 2-1: can't read configurations, error -61 [ 216.354680][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 216.377667][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=aecb, bcdDevice=c4.69 [ 216.380763][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 216.380799][ T10] usb 2-1: can't read configurations, error -61 [ 216.381192][ T10] usb usb2-port1: unable to enumerate USB device [ 216.435497][ T8430] openvswitch: netlink: Flow actions attr not present in new flow. [ 216.893180][ T8434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.515'. [ 218.034137][ T5348] usb 5-1: USB disconnect, device number 33 [ 218.399120][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 218.399139][ T31] audit: type=1400 audit(1790918580.210:1028): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA0E162 pid=8454 comm="syz.0.522" [ 218.684703][ T4943] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 218.795165][ T975] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 218.836718][ T4943] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.838420][ T4943] usb 1-1: not running at top speed; connect to a high speed hub [ 218.838452][ T4943] usb 1-1: New USB device found, idVendor=10c4, idProduct=f002, bcdDevice=a9.0a [ 218.840462][ T4943] usb 1-1: config 64 has an invalid interface number: 70 but max is 0 [ 218.840488][ T4943] usb 1-1: config 64 has no interface number 0 [ 218.840520][ T4943] usb 1-1: config 64 interface 70 has no altsetting 0 [ 218.895067][ T4943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.895084][ T4943] usb 1-1: Product: syz [ 218.895091][ T4943] usb 1-1: Manufacturer: syz [ 218.895099][ T4943] usb 1-1: SerialNumber: syz [ 218.957399][ T975] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.978377][ T975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.978393][ T975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.980124][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.980148][ T975] usb 4-1: SerialNumber: syz [ 219.114317][ T4943] cp210x 1-1:64.70: cp210x converter detected [ 219.125610][ T4943] cp210x 1-1:64.70: failed to get vendor val 0x370b size 1: -71 [ 219.125637][ T4943] cp210x 1-1:64.70: querying part number failed [ 219.179852][ T4943] usb 1-1: cp210x converter now attached to ttyUSB0 [ 219.205505][ T4943] usb 1-1: USB disconnect, device number 34 [ 219.229746][ T4943] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 219.230191][ T4943] cp210x 1-1:64.70: device disconnected [ 219.317170][ T975] usb 4-1: 0:2 : does not exist [ 219.451971][ T975] usb 4-1: USB disconnect, device number 47 [ 219.574722][ T5708] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 219.602246][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.725169][ T5708] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 219.727275][ T5708] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 219.728970][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.728984][ T5708] usb 2-1: Product: syz [ 219.728992][ T5708] usb 2-1: Manufacturer: syz [ 219.728999][ T5708] usb 2-1: SerialNumber: syz [ 219.902698][ T5701] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 220.107545][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.108002][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.108780][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.109114][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.113375][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.113739][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.189168][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.189973][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.203697][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.204109][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.258812][ T9] usb 2-1: USB disconnect, device number 19 [ 220.645825][ T4943] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 220.797530][ T4943] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 220.798609][ T4943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 220.798656][ T4943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.857925][ T4943] usb 5-1: config 0 descriptor?? [ 220.858497][ T8476] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 220.945355][ T5701] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 220.946740][ T5701] ath9k_htc: Failed to initialize the device [ 220.952610][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 221.289790][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.293083][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.325654][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.325955][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.381853][ T4943] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 221.381879][ T4943] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 221.381894][ T4943] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 221.381909][ T4943] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 221.381923][ T4943] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 221.381938][ T4943] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 221.381953][ T4943] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 221.381968][ T4943] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 221.381983][ T4943] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 221.381998][ T4943] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 221.492130][ T4943] microsoft 0003:045E:00F9.0011: hidraw0: USB HID v0.81 Device [HID 045e:00f9] on usb-dummy_hcd.4-1/input0 [ 221.617404][ T5708] usb 5-1: USB disconnect, device number 34 [ 221.739877][ T8489] fido_id[8489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 222.454297][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 222.543752][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.544015][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.674813][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 222.774825][ T975] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 222.914559][ T975] usb 2-1: device descriptor read/64, error -71 [ 223.154548][ T975] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 223.294599][ T975] usb 2-1: device descriptor read/64, error -71 [ 223.415306][ T975] usb usb2-port1: attempt power cycle [ 223.767869][ T975] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 223.796862][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 223.798173][ T975] usb 2-1: device descriptor read/8, error -71 [ 223.871358][ T8502] netlink: 'syz.1.532': attribute type 5 has an invalid length. [ 223.944903][ T10] usb 1-1: device descriptor read/64, error -71 [ 224.056490][ T975] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 224.075905][ T31] audit: type=1326 audit(1790918585.900:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.2.539" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2faf9e159 code=0x7ffc0000 [ 224.076127][ T31] audit: type=1326 audit(1790918585.900:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.2.539" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2faf9e159 code=0x7ffc0000 [ 224.076682][ T31] audit: type=1326 audit(1790918585.900:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.2.539" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2faf9e159 code=0x7ffc0000 [ 224.076730][ T975] usb 2-1: device descriptor read/8, error -71 [ 224.077577][ T31] audit: type=1326 audit(1790918585.900:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.2.539" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2faf9e159 code=0x7ffc0000 [ 224.077811][ T31] audit: type=1326 audit(1790918585.900:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.2.539" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2faf9e159 code=0x7ffc0000 [ 224.078463][ T31] audit: type=1326 audit(1790918585.900:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.2.539" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2faf9e159 code=0x7ffc0000 [ 224.079037][ T31] audit: type=1326 audit(1790918585.900:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.2.539" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2faf9e159 code=0x7ffc0000 [ 224.111536][ T31] audit: type=1326 audit(1790918585.940:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.2.539" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2faf9e159 code=0x7ffc0000 [ 224.111583][ T31] audit: type=1326 audit(1790918585.940:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.2.539" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fd2faf9e159 code=0x7ffc0000 [ 224.194847][ T975] usb usb2-port1: unable to enumerate USB device [ 224.240192][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 224.328609][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 224.374790][ T10] usb 1-1: device descriptor read/64, error -71 [ 224.396448][ T31] audit: type=1326 audit(1790918586.220:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.2.539" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2faf9e159 code=0x7ffc0000 [ 224.504919][ T10] usb usb1-port1: attempt power cycle [ 224.646338][ T8529] xt_hashlimit: size too large, truncated to 1048576 [ 224.855450][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 224.892956][ T10] usb 1-1: device descriptor read/8, error -71 [ 225.134912][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 225.155809][ T10] usb 1-1: device descriptor read/8, error -71 [ 225.285568][ T10] usb usb1-port1: unable to enumerate USB device [ 225.343179][ T8534] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 225.343197][ T8534] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 225.935812][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 226.526250][ T8559] syzkaller0: entered promiscuous mode [ 226.526273][ T8559] syzkaller0: entered allmulticast mode [ 226.694591][ T4943] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 226.774604][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.550'. [ 226.860122][ T4943] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 226.863832][ T4943] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 226.863847][ T4943] usb 2-1: config 1 has no interface number 0 [ 226.863870][ T4943] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 226.863884][ T4943] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 226.863895][ T4943] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 150, changing to 11 [ 226.930666][ T4943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.930693][ T4943] usb 2-1: Product: syz [ 226.930704][ T4943] usb 2-1: Manufacturer: syz [ 226.930712][ T4943] usb 2-1: SerialNumber: syz [ 226.975439][ T8551] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 226.977407][ T8551] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 226.982266][ T4943] usb 2-1: Expected 3 endpoints, found: 2 [ 227.220180][ T10] usb 2-1: USB disconnect, device number 24 [ 227.283244][ T8576] loop0: detected capacity change from 0 to 6 [ 227.322304][ T8576] Dev loop0: unable to read RDB block 6 [ 227.322335][ T8576] loop0: unable to read partition table [ 227.322461][ T8576] loop0: partition table beyond EOD, truncated [ 227.322473][ T8576] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 228.024587][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 228.177893][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 228.207967][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 228.244072][ T10] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 228.244089][ T10] usb 1-1: Product: syz [ 228.244096][ T10] usb 1-1: SerialNumber: syz [ 228.252789][ T10] usb 1-1: config 0 descriptor?? [ 228.349979][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 228.350012][ T9] usb 5-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=43.b7 [ 228.350844][ T9] usb 5-1: config 0 has an invalid interface number: 59 but max is 2 [ 228.350858][ T9] usb 5-1: config 0 has an invalid interface number: 59 but max is 2 [ 228.350872][ T9] usb 5-1: config 0 has an invalid interface number: 56 but max is 2 [ 228.350882][ T9] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 228.350893][ T9] usb 5-1: config 0 has no interface number 0 [ 228.350901][ T9] usb 5-1: config 0 has no interface number 1 [ 228.350937][ T9] usb 5-1: config 0 interface 59 has no altsetting 0 [ 228.350977][ T9] usb 5-1: config 0 interface 59 has no altsetting 1 [ 228.350994][ T9] usb 5-1: config 0 interface 56 has no altsetting 0 [ 228.354782][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.354806][ T9] usb 5-1: Product: syz [ 228.354819][ T9] usb 5-1: Manufacturer: syz [ 228.354834][ T9] usb 5-1: SerialNumber: syz [ 228.462611][ T9] usb 5-1: config 0 descriptor?? [ 228.567829][ T6937] IPVS: starting estimator thread 0... [ 228.655990][ T8604] IPVS: using max 53 ests per chain, 127200 per kthread [ 228.793895][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.558'. [ 229.198483][ T9] rndis_host 5-1:0.59: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 229.198873][ T9] cdc_acm 5-1:0.59: Zero length descriptor references [ 229.198887][ T9] cdc_acm 5-1:0.59: probe with driver cdc_acm failed with error -22 [ 229.257826][ T9] usb 5-1: USB disconnect, device number 35 [ 229.384051][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 230.251992][ T10] usb 1-1: USB disconnect, device number 39 [ 230.356016][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.372350][ T8616] dvmrp1: entered allmulticast mode [ 230.386490][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.410714][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.415749][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.416395][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.832050][ T6935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.411054][ T6935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.758013][ T6935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.959443][ T6935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.477439][ T52] Bluetooth: hci4: command tx timeout [ 232.748777][ T5701] logitech-hidpp-device 0005:046D:B012.0012: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 232.759893][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.769528][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.770323][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.771812][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.773675][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.865704][ T4943] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 233.021539][ T8651] fido_id[8651]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 233.041294][ T4943] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 233.068481][ T4943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.068507][ T4943] usb 2-1: Product: syz [ 233.068522][ T4943] usb 2-1: Manufacturer: syz [ 233.068535][ T4943] usb 2-1: SerialNumber: syz [ 233.070853][ T6935] bridge_slave_1: left allmulticast mode [ 233.070874][ T6935] bridge_slave_1: left promiscuous mode [ 233.071336][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.147697][ T4943] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.182436][ T6935] bridge_slave_0: left allmulticast mode [ 233.182454][ T6935] bridge_slave_0: left promiscuous mode [ 233.182625][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.554832][ T5348] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 233.690544][ T5666] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 233.715623][ T5348] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 233.717381][ T5348] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x15, changing to 0x5 [ 233.717411][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 244, setting to 64 [ 233.717451][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.775961][ T5348] usb 1-1: config 0 descriptor?? [ 233.794495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 233.830805][ T8647] fuse: Bad value for 'fd' [ 233.856612][ T30] usb 2-1: USB disconnect, device number 25 [ 233.894533][ T5666] usb 4-1: Using ep0 maxpacket: 32 [ 233.896506][ T5666] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.896554][ T5666] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 233.896587][ T5666] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 233.897556][ T5666] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 210 [ 233.897593][ T5666] usb 4-1: can't read configurations, error -22 [ 234.000066][ T8658] netlink: 'syz.0.573': attribute type 10 has an invalid length. [ 234.000082][ T8658] netlink: 55 bytes leftover after parsing attributes in process `syz.0.573'. [ 234.024533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 234.044739][ T5666] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 234.209633][ T5666] usb 4-1: Using ep0 maxpacket: 32 [ 234.212807][ T5666] usb 4-1: unable to get BOS descriptor or descriptor too short [ 234.212854][ T5666] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 234.212890][ T5666] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 234.247140][ T5666] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 210 [ 234.247180][ T5666] usb 4-1: can't read configurations, error -22 [ 234.247559][ T5666] usb usb4-port1: attempt power cycle [ 234.252313][ T6935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.298502][ T6935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.303498][ T6935] bond0 (unregistering): Released all slaves [ 234.389735][ T4943] usb 2-1: Service connection timeout for: 256 [ 234.389752][ T4943] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 234.390729][ C1] ================================================================== [ 234.390744][ C1] BUG: KASAN: slab-use-after-free in tasklet_action_common+0x103/0x490 [ 234.390781][ C1] Read of size 8 at addr ffff88801bf38158 by task kworker/1:2/4943 [ 234.390799][ C1] [ 234.390809][ C1] CPU: 1 UID: 0 PID: 4943 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 234.390833][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.390847][ C1] Workqueue: events request_firmware_work_func [ 234.390874][ C1] Call Trace: [ 234.390882][ C1] [ 234.390891][ C1] dump_stack_lvl+0xe8/0x150 [ 234.390921][ C1] print_address_description+0x55/0x1e0 [ 234.390949][ C1] ? tasklet_action_common+0x103/0x490 [ 234.390976][ C1] print_report+0x58/0x70 [ 234.391000][ C1] kasan_report+0x117/0x150 [ 234.391027][ C1] ? tasklet_action_common+0x103/0x490 [ 234.391060][ C1] tasklet_action_common+0x103/0x490 [ 234.391091][ C1] handle_softirqs+0x226/0x860 [ 234.391116][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 234.391151][ C1] __irq_exit_rcu+0xcb/0x220 [ 234.391176][ C1] irq_exit_rcu+0x9/0x30 [ 234.391196][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 234.391211][ C1] [ 234.391214][ C1] [ 234.391218][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.391230][ C1] RIP: 0010:0xffffffffa0003570 [ 234.391240][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc <41> ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc cc cc cc cc cc cc [ 234.391250][ C1] RSP: 0000:ffffc9000f45f420 EFLAGS: 00000286 [ 234.391259][ C1] RAX: ffffffff8133103a RBX: ffffc9000f45f4e0 RCX: 0000000000000000 [ 234.391267][ C1] RDX: ffffc9000f45f401 RSI: ffffffff8133103a RDI: ffffc9000f45f4e0 [ 234.391275][ C1] RBP: ffffc9000f45f4b0 R08: ffffc9000f45ff38 R09: 0000000000000000 [ 234.391282][ C1] R10: ffffc9000f45f478 R11: ffffffff81b2a310 R12: ffff8880359e3e80 [ 234.391290][ C1] R13: 0000000000000000 R14: ffffffff81b2a310 R15: ffffc9000f45f428 [ 234.391297][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 234.391309][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 234.391319][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 234.391334][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 234.391348][ C1] ? arch_stack_walk+0x10f/0x150 [ 234.391361][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 234.391376][ C1] ? stack_trace_save+0xa9/0x100 [ 234.391386][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 234.391396][ C1] ? __lock_acquire+0x747/0x2de0 [ 234.391408][ C1] ? kasan_save_track+0x3e/0x80 [ 234.391419][ C1] ? kasan_save_track+0x3e/0x80 [ 234.391429][ C1] ? kasan_save_free_info+0x40/0x50 [ 234.391443][ C1] ? __kasan_slab_free+0x5c/0x80 [ 234.391454][ C1] ? kfree+0x1c5/0x650 [ 234.391467][ C1] ? ieee80211_free_led_names+0x65/0xc0 [ 234.391483][ C1] ? ieee80211_free_hw+0x5c/0x3d0 [ 234.391495][ C1] ? ath9k_htc_probe_device+0x232/0x2370 [ 234.391506][ C1] ? ath9k_htc_hw_init+0x32/0x70 [ 234.391517][ C1] ? ath9k_hif_usb_firmware_cb+0x214/0x4b0 [ 234.391529][ C1] ? request_firmware_work_func+0xf7/0x2d0 [ 234.391539][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 234.391553][ C1] ? worker_thread+0xa47/0xfb0 [ 234.391565][ C1] ? kthread+0x38b/0x480 [ 234.391574][ C1] ? ret_from_fork+0x514/0xb70 [ 234.391594][ C1] ? kasan_save_free_info+0x40/0x50 [ 234.391608][ C1] ? __kasan_slab_free+0x5c/0x80 [ 234.391619][ C1] ? kfree+0x1c5/0x650 [ 234.391633][ C1] ? ieee80211_free_led_names+0x65/0xc0 [ 234.391650][ C1] ? ieee80211_free_led_names+0x65/0xc0 [ 234.391664][ C1] ? ieee80211_free_hw+0x5c/0x3d0 [ 234.391677][ C1] ? ath9k_htc_probe_device+0x232/0x2370 [ 234.391688][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 234.391703][ C1] ? __pfx_ath9k_htc_probe_device+0x10/0x10 [ 234.391713][ C1] ? usb_hcd_submit_urb+0x343/0x1b60 [ 234.391729][ C1] ? usb_free_urb+0x9d/0x120 [ 234.391740][ C1] ? ath9k_hif_usb_alloc_urbs+0xf8a/0x1060 [ 234.391753][ C1] ? ath9k_htc_hw_init+0x32/0x70 [ 234.391764][ C1] ? ath9k_hif_usb_firmware_cb+0x214/0x4b0 [ 234.391776][ C1] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 234.391789][ C1] ? request_firmware_work_func+0xf7/0x2d0 [ 234.391799][ C1] ? rcu_is_watching+0x16/0xb0 [ 234.391811][ C1] ? process_scheduled_works+0x97a/0x1630 [ 234.391824][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 234.391842][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 234.391857][ C1] ? assign_work+0x3cf/0x5d0 [ 234.391869][ C1] ? worker_thread+0xa47/0xfb0 [ 234.391887][ C1] ? kthread+0x38b/0x480 [ 234.391897][ C1] ? __pfx_worker_thread+0x10/0x10 [ 234.391909][ C1] ? __pfx_kthread+0x10/0x10 [ 234.391919][ C1] ? ret_from_fork+0x514/0xb70 [ 234.391928][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 234.391938][ C1] ? __switch_to+0xc89/0x1420 [ 234.391952][ C1] ? __pfx_kthread+0x10/0x10 [ 234.391961][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 234.391978][ C1] [ 234.391982][ C1] [ 234.391985][ C1] Allocated by task 4943: [ 234.391990][ C1] kasan_save_track+0x3e/0x80 [ 234.392000][ C1] __kasan_kmalloc+0x93/0xb0 [ 234.392010][ C1] __kmalloc_cache_noprof+0x321/0x600 [ 234.392019][ C1] ath9k_init_wmi+0x4f/0x2b0 [ 234.392030][ C1] ath9k_htc_probe_device+0x1e5/0x2370 [ 234.392039][ C1] ath9k_htc_hw_init+0x32/0x70 [ 234.392049][ C1] ath9k_hif_usb_firmware_cb+0x214/0x4b0 [ 234.392059][ C1] request_firmware_work_func+0xf7/0x2d0 [ 234.392069][ C1] process_scheduled_works+0xc3d/0x1630 [ 234.392080][ C1] worker_thread+0xa47/0xfb0 [ 234.392092][ C1] kthread+0x38b/0x480 [ 234.392100][ C1] ret_from_fork+0x514/0xb70 [ 234.392107][ C1] ret_from_fork_asm+0x1a/0x30 [ 234.392120][ C1] [ 234.392123][ C1] Freed by task 4943: [ 234.392127][ C1] kasan_save_track+0x3e/0x80 [ 234.392142][ C1] kasan_save_free_info+0x40/0x50 [ 234.392155][ C1] __kasan_slab_free+0x5c/0x80 [ 234.392165][ C1] kfree+0x1c5/0x650 [ 234.392177][ C1] ath9k_htc_probe_device+0x11a9/0x2370 [ 234.392187][ C1] ath9k_htc_hw_init+0x32/0x70 [ 234.392198][ C1] ath9k_hif_usb_firmware_cb+0x214/0x4b0 [ 234.392218][ C1] request_firmware_work_func+0xf7/0x2d0 [ 234.392236][ C1] process_scheduled_works+0xc3d/0x1630 [ 234.392258][ C1] worker_thread+0xa47/0xfb0 [ 234.392280][ C1] kthread+0x38b/0x480 [ 234.392295][ C1] ret_from_fork+0x514/0xb70 [ 234.392309][ C1] ret_from_fork_asm+0x1a/0x30 [ 234.392334][ C1] [ 234.392339][ C1] The buggy address belongs to the object at ffff88801bf38000 [ 234.392339][ C1] which belongs to the cache kmalloc-2k of size 2048 [ 234.392356][ C1] The buggy address is located 344 bytes inside of [ 234.392356][ C1] freed 2048-byte region [ffff88801bf38000, ffff88801bf38800) [ 234.392377][ C1] [ 234.392382][ C1] The buggy address belongs to the physical page: [ 234.392400][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801bf3a000 pfn:0x1bf38 [ 234.392420][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 234.392431][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 234.392447][ C1] page_type: f5(slab) [ 234.392457][ C1] raw: 00fff00000000240 ffff88801b042000 ffffea0000971210 ffffea00007efc10 [ 234.392466][ C1] raw: ffff88801bf3a000 0000000000080007 00000000f5000000 0000000000000000 [ 234.392475][ C1] head: 00fff00000000240 ffff88801b042000 ffffea0000971210 ffffea00007efc10 [ 234.392483][ C1] head: ffff88801bf3a000 0000000000080007 00000000f5000000 0000000000000000 [ 234.392492][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 234.392500][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 234.392505][ C1] page dumped because: kasan: bad access detected [ 234.392513][ C1] page_owner tracks the page as allocated [ 234.392517][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3424253875 [ 234.392534][ C1] post_alloc_hook+0x1f9/0x250 [ 234.392549][ C1] get_page_from_freelist+0x2209/0x2280 [ 234.392559][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 234.392569][ C1] allocate_slab+0x7d/0x620 [ 234.392581][ C1] refill_objects+0x2d5/0x350 [ 234.392593][ C1] __pcs_replace_empty_main+0x2c8/0x6c0 [ 234.392605][ C1] __kmalloc_cache_noprof+0x39b/0x600 [ 234.392614][ C1] pnp_alloc_dev+0x5d/0x330 [ 234.392627][ C1] pnpacpi_add_device+0x112/0x660 [ 234.392643][ C1] pnpacpi_add_device_handler+0x2a/0x40 [ 234.392655][ C1] acpi_ns_get_device_callback+0x36d/0x4c0 [ 234.392666][ C1] acpi_ns_walk_namespace+0x273/0x700 [ 234.392675][ C1] acpi_get_devices+0x14b/0x1e0 [ 234.392683][ C1] pnpacpi_init+0x61/0xf0 [ 234.392694][ C1] do_one_initcall+0x250/0x870 [ 234.392707][ C1] do_initcall_level+0x10a/0x1a0 [ 234.392717][ C1] page_owner free stack trace missing [ 234.392721][ C1] [ 234.392723][ C1] Memory state around the buggy address: [ 234.392729][ C1] ffff88801bf38000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.392735][ C1] ffff88801bf38080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.392742][ C1] >ffff88801bf38100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.392747][ C1] ^ [ 234.392753][ C1] ffff88801bf38180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.392759][ C1] ffff88801bf38200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.392764][ C1] ================================================================== [ 234.392785][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 235.334284][ C1] CPU: 1 UID: 0 PID: 4943 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 235.343641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.353683][ C1] Workqueue: events request_firmware_work_func [ 235.359837][ C1] Call Trace: [ 235.363103][ C1] [ 235.365942][ C1] vpanic+0x56d/0xa60 [ 235.369919][ C1] ? rcu_is_watching+0x16/0xb0 [ 235.374670][ C1] ? __pfx_vpanic+0x10/0x10 [ 235.379167][ C1] panic+0xc5/0xd0 [ 235.382879][ C1] ? __pfx_panic+0x10/0x10 [ 235.387284][ C1] ? tasklet_action_common+0x103/0x490 [ 235.392736][ C1] ? tasklet_action_common+0x103/0x490 [ 235.398184][ C1] check_panic_on_warn+0x89/0xb0 [ 235.403109][ C1] ? tasklet_action_common+0x103/0x490 [ 235.408558][ C1] end_report+0x73/0x170 [ 235.412792][ C1] ? tasklet_action_common+0x103/0x490 [ 235.418238][ C1] kasan_report+0x128/0x150 [ 235.422732][ C1] ? tasklet_action_common+0x103/0x490 [ 235.428183][ C1] tasklet_action_common+0x103/0x490 [ 235.433461][ C1] handle_softirqs+0x226/0x860 [ 235.438214][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 235.442968][ C1] __irq_exit_rcu+0xcb/0x220 [ 235.447548][ C1] irq_exit_rcu+0x9/0x30 [ 235.451783][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 235.457413][ C1] [ 235.460333][ C1] [ 235.463250][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.469220][ C1] RIP: 0010:0xffffffffa0003570 [ 235.473968][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc <41> ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc cc cc cc cc cc cc [ 235.493557][ C1] RSP: 0000:ffffc9000f45f420 EFLAGS: 00000286 [ 235.499611][ C1] RAX: ffffffff8133103a RBX: ffffc9000f45f4e0 RCX: 0000000000000000 [ 235.507568][ C1] RDX: ffffc9000f45f401 RSI: ffffffff8133103a RDI: ffffc9000f45f4e0 [ 235.515525][ C1] RBP: ffffc9000f45f4b0 R08: ffffc9000f45ff38 R09: 0000000000000000 [ 235.523481][ C1] R10: ffffc9000f45f478 R11: ffffffff81b2a310 R12: ffff8880359e3e80 [ 235.531438][ C1] R13: 0000000000000000 R14: ffffffff81b2a310 R15: ffffc9000f45f428 [ 235.539393][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 235.545536][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 235.551679][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 235.556612][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 235.561545][ C1] ? arch_stack_walk+0x10f/0x150 [ 235.566470][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 235.571404][ C1] ? stack_trace_save+0xa9/0x100 [ 235.576327][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 235.581683][ C1] ? __lock_acquire+0x747/0x2de0 [ 235.586608][ C1] ? kasan_save_track+0x3e/0x80 [ 235.591449][ C1] ? kasan_save_track+0x3e/0x80 [ 235.596281][ C1] ? kasan_save_free_info+0x40/0x50 [ 235.601471][ C1] ? __kasan_slab_free+0x5c/0x80 [ 235.606392][ C1] ? kfree+0x1c5/0x650 [ 235.610449][ C1] ? ieee80211_free_led_names+0x65/0xc0 [ 235.615987][ C1] ? ieee80211_free_hw+0x5c/0x3d0 [ 235.621001][ C1] ? ath9k_htc_probe_device+0x232/0x2370 [ 235.626624][ C1] ? ath9k_htc_hw_init+0x32/0x70 [ 235.631546][ C1] ? ath9k_hif_usb_firmware_cb+0x214/0x4b0 [ 235.637335][ C1] ? request_firmware_work_func+0xf7/0x2d0 [ 235.643125][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 235.648830][ C1] ? worker_thread+0xa47/0xfb0 [ 235.653580][ C1] ? kthread+0x38b/0x480 [ 235.657811][ C1] ? ret_from_fork+0x514/0xb70 [ 235.662583][ C1] ? kasan_save_free_info+0x40/0x50 [ 235.667773][ C1] ? __kasan_slab_free+0x5c/0x80 [ 235.672698][ C1] ? kfree+0x1c5/0x650 [ 235.676757][ C1] ? ieee80211_free_led_names+0x65/0xc0 [ 235.682299][ C1] ? ieee80211_free_led_names+0x65/0xc0 [ 235.687845][ C1] ? ieee80211_free_hw+0x5c/0x3d0 [ 235.692861][ C1] ? ath9k_htc_probe_device+0x232/0x2370 [ 235.698655][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 235.704455][ C1] ? __pfx_ath9k_htc_probe_device+0x10/0x10 [ 235.710339][ C1] ? usb_hcd_submit_urb+0x343/0x1b60 [ 235.715619][ C1] ? usb_free_urb+0x9d/0x120 [ 235.720191][ C1] ? ath9k_hif_usb_alloc_urbs+0xf8a/0x1060 [ 235.725987][ C1] ? ath9k_htc_hw_init+0x32/0x70 [ 235.730912][ C1] ? ath9k_hif_usb_firmware_cb+0x214/0x4b0 [ 235.736704][ C1] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 235.742842][ C1] ? request_firmware_work_func+0xf7/0x2d0 [ 235.748638][ C1] ? rcu_is_watching+0x16/0xb0 [ 235.753400][ C1] ? process_scheduled_works+0x97a/0x1630 [ 235.759109][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 235.764838][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.770825][ C1] ? assign_work+0x3cf/0x5d0 [ 235.775409][ C1] ? worker_thread+0xa47/0xfb0 [ 235.780168][ C1] ? kthread+0x38b/0x480 [ 235.784393][ C1] ? __pfx_worker_thread+0x10/0x10 [ 235.789489][ C1] ? __pfx_kthread+0x10/0x10 [ 235.794064][ C1] ? ret_from_fork+0x514/0xb70 [ 235.798815][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 235.803912][ C1] ? __switch_to+0xc89/0x1420 [ 235.808583][ C1] ? __pfx_kthread+0x10/0x10 [ 235.813158][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 235.818092][ C1] [ 235.821342][ C1] Kernel Offset: disabled [ 235.825655][ C1] Rebooting in 86400 seconds..