last executing test programs: 1m13.369917921s ago: executing program 3 (id=4302): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xd6ca, 0x80, 0xffffffff, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1m9.413482791s ago: executing program 3 (id=4310): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x7daf, 0x10, 0x8000, 0x34f}, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x9, 0x0, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x9, 0x6000, @fd=r4, 0x100, 0x0, 0x0, 0x1c}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 1m7.388264449s ago: executing program 3 (id=4315): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x98d, 0x10100, 0x3, 0x2cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 1m4.676189264s ago: executing program 3 (id=4321): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 1m3.63825084s ago: executing program 3 (id=4322): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="10010000360001000000000000000000000100800c00010000000000000000000f0003002001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ebd2dd71265fc2e882348c26c2126237dbbb37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b94962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82e71a223c6a728474a1ddb6dcf77379f568437d7a91f88c5ae3cbeb7cb70218466481a15ddec28b6ff20a6be498bf1d6b364b6325addb3a957f5c099900aca56ffcf2acae554568d6d9234c2cc600dffea6179a58a966208ea5a6d0897e52bc3f90c7924ec418b612563aa84773249509bfda7dc31dc9342f0d790a2efc77bdc432"], 0x110}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r4, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0) syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trensno=\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r5, @ANYRES32, @ANYRESHEX=r6, @ANYRES16=r3]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f", 0x58}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d1", 0xd8}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x89) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m3.169694754s ago: executing program 3 (id=4323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x300, 0x1100, 0x3, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20014880) syz_extract_tcp_res(0x0, 0xa, 0x3) sendmsg$IPSET_CMD_DESTROY(r7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"}) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xefffffff, 0x0, 0xd]}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x111e54fa760e8374, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_SSID={0x14, 0x34, @random="abc85dc528e750ef2cbb9d4d186ae830"}, @NL80211_ATTR_SSID={0x12, 0x34, @random="5d122a415619241ce1872c39aec3"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008800}, 0x8000) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edecbd5949e59be1", 0x15}], 0x1}}], 0x1, 0x20008000) shutdown(r2, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, 0x1}) 48.073152373s ago: executing program 32 (id=4323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x300, 0x1100, 0x3, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20014880) syz_extract_tcp_res(0x0, 0xa, 0x3) sendmsg$IPSET_CMD_DESTROY(r7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"}) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xefffffff, 0x0, 0xd]}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x111e54fa760e8374, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_SSID={0x14, 0x34, @random="abc85dc528e750ef2cbb9d4d186ae830"}, @NL80211_ATTR_SSID={0x12, 0x34, @random="5d122a415619241ce1872c39aec3"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008800}, 0x8000) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edecbd5949e59be1", 0x15}], 0x1}}], 0x1, 0x20008000) shutdown(r2, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, 0x1}) 39.502456765s ago: executing program 4 (id=4350): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r2, &(0x7f0000007380)={0x2020}, 0x2020) 36.644225734s ago: executing program 4 (id=4355): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}, {0x0}], 0x3}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 34.289043272s ago: executing program 4 (id=4359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x34f081) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x5}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x144000, 0x7fe2, 0x1}, 0x50) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 31.069264628s ago: executing program 4 (id=4362): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x97) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x5) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='X\x00\x00', 0x3}], 0x1) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f00000009c0)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 29.548609038s ago: executing program 4 (id=4363): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 29.442776326s ago: executing program 4 (id=4364): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x63cc, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb4b, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500802c0000000000119078020000000000000d2057c40c0020000000000000000055a211dc000000000000"], 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x62f1}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000680)={r4, 0x70, &(0x7f0000000600)=[@in6={0xa, 0x4e22, 0x4, @mcast1, 0x5}, @in6={0xa, 0x4e23, 0x0, @local, 0x7}, @in6={0xa, 0x4e24, 0xc41, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3}, @in6={0xa, 0x4e24, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}]}, &(0x7f00000006c0)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000"], 0x60}}, 0x0) 14.084166546s ago: executing program 33 (id=4364): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x63cc, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb4b, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500802c0000000000119078020000000000000d2057c40c0020000000000000000055a211dc000000000000"], 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x62f1}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000680)={r4, 0x70, &(0x7f0000000600)=[@in6={0xa, 0x4e22, 0x4, @mcast1, 0x5}, @in6={0xa, 0x4e23, 0x0, @local, 0x7}, @in6={0xa, 0x4e24, 0xc41, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3}, @in6={0xa, 0x4e24, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}]}, &(0x7f00000006c0)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000"], 0x60}}, 0x0) 13.010323591s ago: executing program 0 (id=4383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000006) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000580)=0x1) dup(r0) 12.712919069s ago: executing program 1 (id=4385): socket$unix(0x1, 0x5, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf9, 0x1, 0x0, @loopback, @private2, 0x8, 0x40, 0x1, 0x3}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x3, 0x141800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r6, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000001080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "7e581ba68817"}}}}}}}, 0x0) 11.645889783s ago: executing program 1 (id=4386): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x7, 'bond_slave_0\x00', {}, 0x9}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000800) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r3, 0x3516, 0x483, 0x0, 0x0, 0x0) 9.157381027s ago: executing program 1 (id=4387): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.925269266s ago: executing program 0 (id=4388): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xf80, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xf1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_LINK={0x8, 0x3, 0x2c0000}, @TCA_U32_INDEV={0x14, 0x8, 'team0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfe}, @TCA_U32_LINK={0x8, 0x3, 0x80000001}, @TCA_U32_ACT={0xee4, 0x7, [@m_ctinfo={0x90, 0xe, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfa}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x3, 0x5, 0xa, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0x29, 0x6, "0d76738cc19cb2b5081b6f8319738a116bf96408f7dd158d84fe7037e3b8ea13082f958c92"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0x0, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x3e5, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xc, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xf80}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.721977199s ago: executing program 0 (id=4389): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xd6ca, 0x80, 0xffffffff, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40002101, 0x1}) syz_usb_connect(0x3, 0x24, 0x0, 0x0) io_uring_setup(0x6b2a, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7, 0x15, 0x1}, 0x7) 7.313617374s ago: executing program 2 (id=4391): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x98d, 0x10100, 0x3, 0x2cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 6.016591369s ago: executing program 1 (id=4392): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) read$dsp(0xffffffffffffffff, &(0x7f0000003200)=""/4088, 0x57d) write$dsp(r0, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e4074435ed381a7c2faaee9acbcf873823abd906e92f308b36c6c259e43d13b328ded6bf3c1f4a93a76e9a6d0483875456cf8f30eda231d9f26d6b3861a3f2db165758b0d7aacb7b5a8e9f4d775798556cee8dbe8a94fae8df837f71d66a0aaa48df5c36afa9033ec5283e713806d5a07f82729f9e888d309b713db36256757292443f00f1af08058057373ae710d90cefa5872bbeac931ddd145ba9a64997c0bc53cc59a954f8ee2670caac75e2a63b5a1ca6ca6e3f9287f080b271f34b2e63be2ad4c2b85b7c9683245b12491d221314ab2685e2a44787733af58502245e19af646f65dd26b44dda320d583d9ddd6567d6021dc2d7d731963d6cc790d8b082889045cb749de9857ee4388d0f3c2ef83d405d0a2328bd7f76fa4d3d0a2e8238c979babe572ab3e8ae2768ca212bad33249523fa89fc0498f5f29a68aa7aae681e41284f46b47cc996679c4f1d9936647cb9b47ca8dac8e161b5cc0ff29f48f4a42b6a567f1116a5c239e67069b96862e2ba0cb3d424d4c4810cc1f3da1c61f39e7cca3e519159c057a440db9838f9f14351f64ec24c70a21a874da100af89d4753d274bd87c6574de363d44ee5aa37bb360b3acf347b3a72fac5e66c939daf4c6cbfacb43ab73229cc0badacc30b6c771bee9a7a8e36a5839cf5d68ffac084e69cb7bb34f71fc2244e5d16d056f97f581e3c50112e81d8410b6aa6b33b924cbafbc8dcb163f22f0e7b618ecd22296328e3fafdc2366e49a7ab08fa0d5b55c8aaffa8c9fc2899c07cabcf35748b0f30edb03a8a55807b6c73cd0b64cdd1a77ec0dcb8be359715b284a9476a0013d69c825274f45b6ffa59df58ca07756af102a6bb0efa1b4b356f89c504097cf79c76ca07d325375bfac4d7c8483cabd8d7c9141c96948c32ec87c231b69d6776160b8b31dada7e0837b4c2dc2ecb28f9b0400589c12cde99dc7db30a9d4c4f8a904f6b2f2fba1d0c36544f84db803bef904ec5b1f976345f67688df6e2d866d9eda4a87395b8953c0dc1e93ca742d2141b3591bb0bfdb56a0f8eabf710a3479d8b8f7e3f0e73a6fd29fc946909f77a6ad3044495e4d6e661bc633f4eb63204dd9f47ee85676ec0aa8b713819a280c27f086445d62f258379ffd77ced5d2c8cdf7d87135d6806f340a111f42b042058b96daa2633a6975dc0c5580f93a38e3daba8fdfb21fd94ebb30a2e165a75c1788c1cfe2687af2c3d3908514722e19afb385a74d6ac8cb12ca6232cde2e99d4ac651b280e65b3b897e39984a64d55eb4f65ab0912675c3f334d7c7ce6ecd84044125d98ef9eb6cf46c5d5d01b3ba01fa4bb5ff70ba1d18cba8b28f3980fca9c75441ada9122d497ac2e779277edece11bd175bf79657c37b982acb078591520792cf8278b75177ad1aad8133b2e4a61c561b42f6ab11ff8227d75303720d121ad3f3ad2e350b4cbfb6c5476e0f73e58dd25a18f3b50d0b30a629b2f5e053422c5a18decb3ad311ca978dcb53d44c64f43ceec7f803370a9b4b91e837371c4ed274d636423cb189cfe1302c6605142d5765239c6c86384b7c6de980764793956cacff762f8c4feaef7dee318a977e942e3a2ef45e220857162ac83b0fd4f1deef6510005737e7588dac6679fd8ae630d60bb9509d848f00939134f0c52b2b122bcf7e46ce5ca2592d649ff00252e57d9541bafdfeb6492113f401eb428e543168a96bd06b31a9becd8f0fbb2b89d19479411bbe4e265480cf2a6f34e5bc02a98b9f29b8adc10f9096aa5096fe12ef67d9690388459664f9583095f9bef69f9725a76a2bab82cdefe92fefa283ad56c21ab3e8ea602130ad2d831c0a4fbbb7779476e74674034c6051272ca292540de9bfcb34536604865c759b639c6f1e58699635e037d3a8c", 0x1000) 5.829337662s ago: executing program 2 (id=4393): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 5.521777289s ago: executing program 2 (id=4394): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.469086559s ago: executing program 1 (id=4395): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 5.363586324s ago: executing program 2 (id=4396): io_setup(0x23, &(0x7f0000000280)) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa2000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r8, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r8}}, 0x1c) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, 0x0, 0x0, 0x2b2, 0x0, 0x0, 0x20, 0x18}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) 3.516299027s ago: executing program 0 (id=4397): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xf80, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xf1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_LINK={0x8, 0x3, 0x2c0000}, @TCA_U32_INDEV={0x14, 0x8, 'team0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfe}, @TCA_U32_LINK={0x8, 0x3, 0x80000001}, @TCA_U32_ACT={0xee4, 0x7, [@m_ctinfo={0x90, 0xe, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfa}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x3, 0x5, 0xa, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0x29, 0x6, "0d76738cc19cb2b5081b6f8319738a116bf96408f7dd158d84fe7037e3b8ea13082f958c92"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0x0, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x3e5, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xc, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xf80}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.193990408s ago: executing program 0 (id=4398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r2, &(0x7f0000007380)={0x2020}, 0x2020) 2.542951519s ago: executing program 2 (id=4399): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000240)={0x0, 0x1, 0x6fc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') socket$alg(0x26, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0xc8, 0x8, 0xfa04, 0x0, 0x6c02, 0x158, 0x194, 0x194, 0x158, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'erspan0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x4e24, 0x9], [0x4e21, 0x4e24], 0x5, 0x4, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r7}) ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)) 1.978814003s ago: executing program 2 (id=4400): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.736101232s ago: executing program 1 (id=4401): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=4402): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) kernel console output (not intermixed with test programs): speed USB device number 99 using dummy_hcd [ 918.341261][ T56] usb 5-1: device descriptor read/64, error -71 [ 918.464554][ T56] usb usb5-port1: attempt power cycle [ 918.656682][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.982423][ T56] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 919.002744][ T56] usb 5-1: device descriptor read/8, error -71 [ 919.034781][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.240867][ T56] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 919.265404][ T56] usb 5-1: device descriptor read/8, error -71 [ 919.414401][ T56] usb usb5-port1: unable to enumerate USB device [ 919.709056][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.698182][T17132] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 920.734956][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.850963][T11957] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 921.020986][T11957] usb 4-1: Using ep0 maxpacket: 8 [ 921.028662][T11957] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.028689][T11957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 921.028747][T11957] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 921.028776][T11957] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 921.028819][T11957] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 921.028843][T11957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.109149][T11957] hub 4-1:1.0: bad descriptor, ignoring hub [ 921.109189][T11957] hub 4-1:1.0: probe with driver hub failed with error -5 [ 921.110280][T11957] cdc_wdm 4-1:1.0: skipping garbage [ 921.110296][T11957] cdc_wdm 4-1:1.0: skipping garbage [ 921.164691][T11957] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 921.164706][T11957] cdc_wdm 4-1:1.0: Unknown control protocol [ 921.781262][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.092130][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.533141][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3765'. [ 922.970858][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.024050][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.766642][T11957] usb 4-1: USB disconnect, device number 75 [ 924.991029][T11957] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 925.032327][T17210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3778'. [ 925.075930][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.226374][T11957] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 925.226403][T11957] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 925.226423][T11957] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 925.226441][T11957] usb 3-1: config 220 has no interface number 2 [ 925.226506][T11957] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 925.226534][T11957] usb 3-1: config 220 interface 0 has no altsetting 0 [ 925.226551][T11957] usb 3-1: config 220 interface 76 has no altsetting 0 [ 925.226567][T11957] usb 3-1: config 220 interface 1 has no altsetting 0 [ 925.427901][T11957] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 925.427984][T11957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.428066][T11957] usb 3-1: Product: syz [ 925.428141][T11957] usb 3-1: Manufacturer: syz [ 925.428214][T11957] usb 3-1: SerialNumber: syz [ 925.609596][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.616840][ T5854] IPVS: starting estimator thread 0... [ 925.701039][T17212] IPVS: using max 9 ests per chain, 21600 per kthread [ 925.837265][T11957] usb 3-1: selecting invalid altsetting 0 [ 925.837674][T11957] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 925.837703][T11957] uvcvideo 3-1:220.0: No valid video chain found. [ 925.881416][T11957] usb 3-1: selecting invalid altsetting 0 [ 925.881456][T11957] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 925.918534][T11957] usb 3-1: USB disconnect, device number 35 [ 926.091137][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.091631][T14891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.210787][ T5886] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 926.241002][T14867] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 926.380950][T14867] usb 5-1: device descriptor read/64, error -71 [ 926.399850][ T5886] usb 4-1: config 0 has no interfaces? [ 926.399887][ T5886] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 926.399909][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.410529][ T5886] usb 4-1: config 0 descriptor?? [ 926.550852][T11957] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 926.630826][T14867] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 926.719365][T11957] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 926.719384][T11957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.719395][T11957] usb 2-1: Product: syz [ 926.719402][T11957] usb 2-1: Manufacturer: syz [ 926.719410][T11957] usb 2-1: SerialNumber: syz [ 926.770813][T14867] usb 5-1: device descriptor read/64, error -71 [ 926.771654][T11957] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 926.821401][ T5985] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 926.884390][T14867] usb usb5-port1: attempt power cycle [ 927.025815][T17235] random: crng reseeded on system resumption [ 927.131943][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.221127][T14867] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 928.143142][ T5985] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 928.143324][ T5985] ath9k_htc: Failed to initialize the device [ 928.170148][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.206849][ T5886] usb 2-1: USB disconnect, device number 82 [ 928.225636][T14891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.236952][T14867] usb 5-1: device descriptor read/8, error -71 [ 928.255850][ T5886] usb 2-1: ath9k_htc: USB layer deinitialized [ 928.470975][T14867] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 928.491488][T14867] usb 5-1: device descriptor read/8, error -71 [ 928.601129][T14867] usb usb5-port1: unable to enumerate USB device [ 928.658298][T14867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.831772][ T5886] usb 4-1: USB disconnect, device number 76 [ 929.073576][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3802'. [ 929.316285][T17274] hub 9-0:1.0: USB hub found [ 929.330930][T17274] hub 9-0:1.0: 1 port detected [ 929.338327][T14891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.483209][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3804'. [ 929.561975][T17282] binder: 17278:17282 ioctl c0487c04 0 returned -22 [ 930.424884][T14891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.970908][T14867] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 931.030801][ T5886] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 931.134023][T14867] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 931.134041][T14867] usb 4-1: config 220 has an invalid descriptor of length 166, skipping remainder of the config [ 931.134052][T14867] usb 4-1: config 220 has no interface number 2 [ 931.134105][T14867] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 931.134119][T14867] usb 4-1: config 220 interface 0 has no altsetting 0 [ 931.134128][T14867] usb 4-1: config 220 interface 76 has no altsetting 0 [ 931.134138][T14867] usb 4-1: config 220 interface 1 has no altsetting 0 [ 931.136139][T14867] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 931.136155][T14867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.136166][T14867] usb 4-1: Product: syz [ 931.136173][T14867] usb 4-1: Manufacturer: syz [ 931.136180][T14867] usb 4-1: SerialNumber: syz [ 931.241361][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 931.243980][ T5886] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.244008][ T5886] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 931.244113][ T5886] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 931.244138][ T5886] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 931.244179][ T5886] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 931.244201][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.306962][ T5985] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 931.379050][ T5886] hub 5-1:1.0: bad descriptor, ignoring hub [ 931.379088][ T5886] hub 5-1:1.0: probe with driver hub failed with error -5 [ 931.396775][ T5886] cdc_wdm 5-1:1.0: skipping garbage [ 931.396795][ T5886] cdc_wdm 5-1:1.0: skipping garbage [ 931.440971][ T5985] usb 3-1: device descriptor read/64, error -71 [ 931.465251][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.481857][ T5886] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 931.481878][ T5886] cdc_wdm 5-1:1.0: Unknown control protocol [ 931.513567][T14867] usb 4-1: selecting invalid altsetting 0 [ 931.551911][T14867] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 931.551945][T14867] uvcvideo 4-1:220.0: No valid video chain found. [ 931.561925][T14867] usb 4-1: selecting invalid altsetting 0 [ 931.561961][T14867] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 931.572872][T14867] usb 4-1: USB disconnect, device number 77 [ 931.690925][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.693995][ T5985] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 931.746495][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3820'. [ 931.831465][ T5985] usb 3-1: device descriptor read/64, error -71 [ 931.861854][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.861922][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.945740][ T5985] usb usb3-port1: attempt power cycle [ 932.270802][ T5854] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 932.290864][ T5985] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 932.311693][ T5985] usb 3-1: device descriptor read/8, error -71 [ 932.440055][ T5854] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 932.440087][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.440106][ T5854] usb 2-1: Product: syz [ 932.440119][ T5854] usb 2-1: Manufacturer: syz [ 932.440134][ T5854] usb 2-1: SerialNumber: syz [ 932.518176][ T5854] r8152-cfgselector 2-1: Unknown version 0x0000 [ 932.518202][ T5854] r8152-cfgselector 2-1: config 0 descriptor?? [ 932.600805][ T5985] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 932.612719][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.623385][ T5985] usb 3-1: device descriptor read/8, error -71 [ 932.741543][ T5985] usb usb3-port1: unable to enumerate USB device [ 932.758744][ T5854] r8152-cfgselector 2-1: USB disconnect, device number 83 [ 933.692171][T14891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.731641][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.753421][T14891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.670840][ T5886] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 935.828537][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3837'. [ 935.848407][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.094213][T17363] hub 9-0:1.0: USB hub found [ 936.096255][T17363] hub 9-0:1.0: 1 port detected [ 936.118483][ T5886] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 936.118509][ T5886] usb 3-1: config 220 has an invalid descriptor of length 166, skipping remainder of the config [ 936.118529][ T5886] usb 3-1: config 220 has no interface number 2 [ 936.118616][ T5886] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 936.118643][ T5886] usb 3-1: config 220 interface 0 has no altsetting 0 [ 936.118660][ T5886] usb 3-1: config 220 interface 76 has no altsetting 0 [ 936.118678][ T5886] usb 3-1: config 220 interface 1 has no altsetting 0 [ 936.122293][ T5886] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 936.122322][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.122340][ T5886] usb 3-1: Product: syz [ 936.122354][ T5886] usb 3-1: Manufacturer: syz [ 936.122368][ T5886] usb 3-1: SerialNumber: syz [ 936.558151][ T5886] usb 3-1: selecting invalid altsetting 0 [ 936.631196][ T5886] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 936.631237][ T5886] uvcvideo 3-1:220.0: No valid video chain found. [ 936.642586][ T5886] usb 3-1: selecting invalid altsetting 0 [ 936.642625][ T5886] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 936.680329][ T5886] usb 3-1: USB disconnect, device number 40 [ 936.892337][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.616191][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.642654][T11957] usb 5-1: USB disconnect, device number 106 [ 937.775185][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.940909][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.941093][ T5854] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 938.178400][ T5854] usb 3-1: config 0 has no interfaces? [ 938.178423][ T5854] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 938.178435][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.267605][ T5854] usb 3-1: config 0 descriptor?? [ 938.973502][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.067509][T17371] Bluetooth: hci3: command 0x0406 tx timeout [ 940.011733][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.904793][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.104317][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.175114][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.368391][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.560920][ T5880] usb 3-1: USB disconnect, device number 41 [ 943.902808][T17440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3862'. [ 944.021468][T14867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.230283][T17448] bond1: (slave macvlan6): Error -98 calling set_mac_address [ 944.264603][T14891] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 944.441516][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.478913][T14891] usb 4-1: config 0 has no interfaces? [ 944.478953][T14891] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 944.478975][T14891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.504061][T14891] usb 4-1: config 0 descriptor?? [ 944.682627][T17440] hub 9-0:1.0: USB hub found [ 944.686495][T17440] hub 9-0:1.0: 1 port detected [ 945.199370][T17458] netlink: 'syz.2.3870': attribute type 4 has an invalid length. [ 945.221289][T17458] netlink: 'syz.2.3870': attribute type 4 has an invalid length. [ 945.284037][T17458] trusted_key: encrypted_key: insufficient parameters specified [ 945.470991][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.496160][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.214981][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.531964][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.191595][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.204325][T17481] mmap: syz.2.3871 (17481) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 948.463128][ T5880] usb 4-1: USB disconnect, device number 78 [ 949.040795][ T5880] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 949.202522][ T5880] usb 2-1: config 0 has no interfaces? [ 949.202561][ T5880] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 949.202584][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.205380][ T5880] usb 2-1: config 0 descriptor?? [ 949.250876][T14891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.180882][ T5854] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 950.351048][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 950.356046][ T5854] usb 5-1: config 0 has no interfaces? [ 950.359417][ T5854] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 950.359490][ T5854] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 950.359543][ T5854] usb 5-1: Manufacturer: syz [ 950.561751][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.592320][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.081972][ T5854] usb 5-1: config 0 descriptor?? [ 951.621818][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.572974][ T5854] usb 2-1: USB disconnect, device number 84 [ 952.671801][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.613123][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.680258][T17555] binder: 17553:17555 ioctl c0487c04 0 returned -22 [ 953.702582][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.042736][ T5879] usb 5-1: USB disconnect, device number 107 [ 954.490949][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 954.731380][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.170939][ T5879] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 955.844729][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 955.853924][ T5879] usb 5-1: config 0 has no interfaces? [ 955.855452][ T5879] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 955.855480][ T5879] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 955.855499][ T5879] usb 5-1: Manufacturer: syz [ 955.867883][ T5879] usb 5-1: config 0 descriptor?? [ 955.878787][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.651195][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.813416][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.930772][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.081071][T11957] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 957.221052][T11957] usb 4-1: device descriptor read/64, error -71 [ 957.470781][T11957] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 957.600822][T11957] usb 4-1: device descriptor read/64, error -71 [ 957.711254][T11957] usb usb4-port1: attempt power cycle [ 958.068057][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.127897][T11957] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 958.221303][T11957] usb 4-1: device descriptor read/8, error -71 [ 958.393111][ T5854] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 958.598249][ T5854] usb 2-1: config 0 has no interfaces? [ 958.598285][ T5854] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 958.598302][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.628188][ T5854] usb 2-1: config 0 descriptor?? [ 958.630747][T11957] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 958.655146][T11957] usb 4-1: device descriptor read/8, error -71 [ 958.761070][T11957] usb usb4-port1: unable to enumerate USB device [ 959.211008][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.272971][ T5854] usb 5-1: USB disconnect, device number 108 [ 959.727711][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.479003][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.533473][T17657] bond1: (slave macvlan6): Error -98 calling set_mac_address [ 961.564046][ T5854] usb 2-1: USB disconnect, device number 85 [ 961.570700][T11957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.884806][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.901064][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.138715][ T37] kauditd_printk_skb: 120 callbacks suppressed [ 963.138733][ T37] audit: type=1326 audit(1770653844.790:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.1.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 963.138854][ T37] audit: type=1326 audit(1770653844.790:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.1.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 963.139282][ T37] audit: type=1326 audit(1770653844.790:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.1.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 963.139440][ T37] audit: type=1326 audit(1770653844.790:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.1.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 963.140164][ T37] audit: type=1326 audit(1770653844.790:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.1.3945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x0 [ 963.228266][ T37] audit: type=1326 audit(1770653844.880:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.1.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 963.230786][ T37] audit: type=1326 audit(1770653844.880:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.1.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 963.230832][ T37] audit: type=1326 audit(1770653844.880:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.1.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 963.290835][ T37] audit: type=1326 audit(1770653844.940:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.1.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 963.290882][ T37] audit: type=1326 audit(1770653844.940:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17669 comm="syz.1.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3655e9ace2 code=0x7ffc0000 [ 963.932008][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.061435][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.931087][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.096329][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.220775][T11957] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 966.614524][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.853349][T11957] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.853368][T11957] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 966.853382][T11957] usb 3-1: config 0 interface 0 has no altsetting 0 [ 966.853401][T11957] usb 3-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 966.853413][T11957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.959683][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 966.981773][T11957] usb 3-1: config 0 descriptor?? [ 967.007034][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 967.019558][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 967.032841][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 967.039675][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 967.186825][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.241786][T11957] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input32 [ 968.271505][T14891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.976260][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.160732][T17371] Bluetooth: hci2: command tx timeout [ 969.489289][ T37] kauditd_printk_skb: 279 callbacks suppressed [ 969.489308][ T37] audit: type=1326 audit(1770653851.140:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.1.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 969.489906][ T37] audit: type=1326 audit(1770653851.140:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.1.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 969.490727][ T37] audit: type=1326 audit(1770653851.140:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.1.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 969.490768][ T37] audit: type=1326 audit(1770653851.140:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.1.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 969.491466][ T37] audit: type=1326 audit(1770653851.140:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.1.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 969.500941][ T37] audit: type=1326 audit(1770653851.150:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.1.3960" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x0 [ 969.543453][ T37] audit: type=1326 audit(1770653851.200:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.1.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 969.543500][ T37] audit: type=1326 audit(1770653851.200:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.1.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 969.579519][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.592872][ T37] audit: type=1326 audit(1770653851.250:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.1.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 969.593079][ T37] audit: type=1326 audit(1770653851.250:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.1.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 971.304101][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.323494][T17371] Bluetooth: hci2: command tx timeout [ 971.614916][ T5150] bcm5974 3-1:0.0: could not read from device [ 971.929697][T11957] usb 3-1: USB disconnect, device number 42 [ 972.011347][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.401517][T14891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.370988][T17371] Bluetooth: hci2: command tx timeout [ 974.469043][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.243909][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3967'. [ 975.467025][T17779] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3969'. [ 975.484375][T17371] Bluetooth: hci2: command tx timeout [ 975.666347][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.012998][ T37] kauditd_printk_skb: 126 callbacks suppressed [ 976.013015][ T37] audit: type=1326 audit(1770653857.670:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.3.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 976.018183][ T37] audit: type=1326 audit(1770653857.670:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.3.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 976.022550][ T37] audit: type=1326 audit(1770653857.670:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.3.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 976.025335][ T37] audit: type=1326 audit(1770653857.680:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.3.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 976.027441][ T37] audit: type=1326 audit(1770653857.680:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.3.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 976.029737][ T37] audit: type=1326 audit(1770653857.680:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.3.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 976.030808][ T37] audit: type=1326 audit(1770653857.680:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.3.3970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x0 [ 976.106354][ T37] audit: type=1326 audit(1770653857.760:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.3.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 976.107796][ T37] audit: type=1326 audit(1770653857.760:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.3.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 976.159211][ T37] audit: type=1326 audit(1770653857.810:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.3.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 976.657869][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.825619][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.166447][T17704] chnl_net:caif_netlink_parms(): no params data found [ 978.502825][ T10] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 978.655850][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 978.655878][ T10] usb 5-1: config 220 has an invalid descriptor of length 166, skipping remainder of the config [ 978.655898][ T10] usb 5-1: config 220 has no interface number 2 [ 978.655942][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 978.655957][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 978.655966][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 978.655975][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 978.658296][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 978.658319][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.658337][ T10] usb 5-1: Product: syz [ 978.658344][ T10] usb 5-1: Manufacturer: syz [ 978.658352][ T10] usb 5-1: SerialNumber: syz [ 979.174644][ T10] usb 5-1: selecting invalid altsetting 0 [ 979.430440][T17833] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 979.479762][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 979.479892][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 980.082079][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 980.124882][ T10] usb 5-1: selecting invalid altsetting 0 [ 980.124920][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 980.171115][ T10] usb 5-1: USB disconnect, device number 109 [ 980.740721][ T5879] IPVS: starting estimator thread 0... [ 980.830954][T17839] IPVS: using max 16 ests per chain, 38400 per kthread [ 981.590169][T17704] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.590305][T17704] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.590528][T17704] bridge_slave_0: entered allmulticast mode [ 981.617710][T17704] bridge_slave_0: entered promiscuous mode [ 981.694799][T17704] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.694871][T17704] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.695068][T17704] bridge_slave_1: entered allmulticast mode [ 981.701315][T17704] bridge_slave_1: entered promiscuous mode [ 981.817924][ T37] kauditd_printk_skb: 197 callbacks suppressed [ 981.817943][ T37] audit: type=1326 audit(1770653863.470:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17850 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 981.817988][ T37] audit: type=1326 audit(1770653863.470:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17850 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 981.819049][ T37] audit: type=1326 audit(1770653863.470:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17850 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 981.819092][ T37] audit: type=1326 audit(1770653863.470:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17850 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 981.819132][ T37] audit: type=1326 audit(1770653863.470:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17850 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 981.820052][ T37] audit: type=1326 audit(1770653863.470:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17850 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 981.820188][ T37] audit: type=1326 audit(1770653863.470:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17850 comm="syz.3.3981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x0 [ 981.868834][ T37] audit: type=1326 audit(1770653863.520:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17850 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 981.868924][ T37] audit: type=1326 audit(1770653863.520:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17850 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 981.919249][ T37] audit: type=1326 audit(1770653863.570:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17850 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9626af79 code=0x7ffc0000 [ 982.281743][T17704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.281994][ T66] gretap0: left allmulticast mode [ 982.282015][ T66] gretap0: left promiscuous mode [ 982.286336][ T66] bridge0: port 3(gretap0) entered disabled state [ 982.582624][ T66] bridge_slave_1: left allmulticast mode [ 982.582652][ T66] bridge_slave_1: left promiscuous mode [ 982.583600][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.733166][ T66] bridge_slave_0: left allmulticast mode [ 982.733187][ T66] bridge_slave_0: left promiscuous mode [ 982.733344][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.450567][T17874] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3984'. [ 983.564893][ T66] bond_slave_0: left promiscuous mode [ 983.564993][ T66] bond_slave_1: left promiscuous mode [ 984.845260][ T5985] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 984.850362][ T5985] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 985.090897][ T5985] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 985.253031][ T5985] usb 5-1: config 0 has no interfaces? [ 985.254418][ T5985] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 985.254445][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 985.254465][ T5985] usb 5-1: SerialNumber: syz [ 985.259692][ T5985] usb 5-1: config 0 descriptor?? [ 986.370786][ T5985] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 986.551085][ T5985] usb 3-1: Using ep0 maxpacket: 16 [ 986.552531][ T5985] usb 3-1: no configurations [ 986.552542][ T5985] usb 3-1: can't read configurations, error -22 [ 986.682388][ T5985] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 986.830801][ T5985] usb 3-1: Using ep0 maxpacket: 16 [ 986.832878][ T5985] usb 3-1: no configurations [ 986.832890][ T5985] usb 3-1: can't read configurations, error -22 [ 986.833197][ T5985] usb usb3-port1: attempt power cycle [ 987.190822][ T5985] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 987.251434][ T5985] usb 3-1: Using ep0 maxpacket: 16 [ 987.252168][ T5985] usb 3-1: no configurations [ 987.252179][ T5985] usb 3-1: can't read configurations, error -22 [ 987.301604][ T66] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 987.303070][ T66] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 987.380997][ T5985] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 987.404216][ T5985] usb 3-1: Using ep0 maxpacket: 16 [ 987.405295][ T5985] usb 3-1: no configurations [ 987.405305][ T5985] usb 3-1: can't read configurations, error -22 [ 987.405640][ T5985] usb usb3-port1: unable to enumerate USB device [ 987.441419][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.502222][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.524311][ T66] bond0 (unregistering): Released all slaves [ 987.728352][ T5985] usb 5-1: USB disconnect, device number 110 [ 988.889851][ T37] kauditd_printk_skb: 268 callbacks suppressed [ 988.889869][ T37] audit: type=1326 audit(1770653870.540:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17906 comm="syz.4.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8868e9af79 code=0x7ffc0000 [ 988.889999][ T37] audit: type=1326 audit(1770653870.540:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17906 comm="syz.4.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8868e9af79 code=0x7ffc0000 [ 988.890256][ T37] audit: type=1326 audit(1770653870.540:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17906 comm="syz.4.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8868e9af79 code=0x7ffc0000 [ 988.890378][ T37] audit: type=1326 audit(1770653870.540:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17906 comm="syz.4.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8868e9af79 code=0x7ffc0000 [ 988.890513][ T37] audit: type=1326 audit(1770653870.540:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17906 comm="syz.4.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8868e9af79 code=0x7ffc0000 [ 988.942386][ T37] audit: type=1326 audit(1770653870.600:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17906 comm="syz.4.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8868e9af79 code=0x7ffc0000 [ 988.942442][ T37] audit: type=1326 audit(1770653870.600:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17906 comm="syz.4.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8868e9ace2 code=0x7ffc0000 [ 988.942480][ T37] audit: type=1326 audit(1770653870.600:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17906 comm="syz.4.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8868e9ad77 code=0x7ffc0000 [ 988.942517][ T37] audit: type=1326 audit(1770653870.600:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17906 comm="syz.4.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8868e57d11 code=0x7ffc0000 [ 988.942551][ T37] audit: type=1326 audit(1770653870.600:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17906 comm="syz.4.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8868e9bd89 code=0x7ffc0000 [ 989.135661][ T66] bond1 (unregistering): Released all slaves [ 990.460826][T14891] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 990.750345][T14891] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 990.750364][T14891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.777773][ T66] bond2 (unregistering): Released all slaves [ 990.780156][T14891] usb 3-1: config 0 descriptor?? [ 990.815671][T14891] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 991.011522][T17704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.862364][ T66] tipc: Left network mode [ 991.924281][T17704] team0: Port device team_slave_0 added [ 991.928436][T17704] team0: Port device team_slave_1 added [ 991.976658][T17704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.976674][T17704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.976697][T17704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.882360][T17936] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3997'. [ 992.999927][ T5150] bcm5974 3-1:0.0: could not read from device [ 993.090557][T14891] usb 3-1: USB disconnect, device number 47 [ 993.276024][T16001] udevd[16001]: Error opening device "/dev/input/event4": No such file or directory [ 993.276112][T16001] udevd[16001]: Unable to EVIOCGABS device "/dev/input/event4" [ 993.276174][T16001] udevd[16001]: Unable to EVIOCGABS device "/dev/input/event4" [ 993.276239][T16001] udevd[16001]: Unable to EVIOCGABS device "/dev/input/event4" [ 993.276299][T16001] udevd[16001]: Unable to EVIOCGABS device "/dev/input/event4" [ 993.301568][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.301644][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.674362][ T10] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 993.679466][ T10] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 993.919983][T17704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.919996][T17704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.920012][T17704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.930127][ T10] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 994.093086][ T10] usb 5-1: config 0 has no interfaces? [ 994.094192][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 994.094217][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 994.094243][ T10] usb 5-1: SerialNumber: syz [ 994.125644][ T10] usb 5-1: config 0 descriptor?? [ 994.412252][ T10] usb 5-1: USB disconnect, device number 111 [ 995.110830][ T10] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 995.351329][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 995.351348][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.351359][ T10] usb 5-1: Product: syz [ 995.351439][ T10] usb 5-1: Manufacturer: syz [ 995.351454][ T10] usb 5-1: SerialNumber: syz [ 995.355605][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 995.355623][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 995.571189][ T10] r8152-cfgselector 5-1: USB disconnect, device number 112 [ 995.824530][T17704] hsr_slave_0: entered promiscuous mode [ 995.881416][T17704] hsr_slave_1: entered promiscuous mode [ 995.882553][T17704] debugfs: 'hsr0' already exists in 'hsr' [ 995.882581][T17704] Cannot create hsr debugfs directory [ 996.492753][ T66] hsr_slave_0: left promiscuous mode [ 996.555474][ T66] hsr_slave_1: left promiscuous mode [ 996.561456][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.561663][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.645195][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.645215][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.247579][ T66] veth1_macvtap: left promiscuous mode [ 997.247939][ T66] veth0_macvtap: left promiscuous mode [ 997.248240][ T66] veth1_vlan: left promiscuous mode [ 997.248552][ T66] veth0_vlan: left promiscuous mode [ 998.076945][ T10] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 998.263806][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 998.263825][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.266764][ T10] usb 2-1: config 0 descriptor?? [ 998.305931][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34 [ 1000.673821][ T5150] bcm5974 2-1:0.0: could not read from device [ 1000.751586][ T10] usb 2-1: USB disconnect, device number 86 [ 1000.834505][T16001] udevd[16001]: Error opening device "/dev/input/event4": No such file or directory [ 1000.834557][T16001] udevd[16001]: Unable to EVIOCGABS device "/dev/input/event4" [ 1000.834597][T16001] udevd[16001]: Unable to EVIOCGABS device "/dev/input/event4" [ 1000.834636][T16001] udevd[16001]: Unable to EVIOCGABS device "/dev/input/event4" [ 1000.834675][T16001] udevd[16001]: Unable to EVIOCGABS device "/dev/input/event4" [ 1000.834722][T16001] udevd[16001]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1000.858878][ T5165] udevd[5165]: worker [16001] terminated by signal 6 (Aborted) [ 1000.858930][ T5165] udevd[5165]: worker [16001] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34/event4' [ 1001.712091][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1002.071225][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1005.240342][ T10] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1005.255559][ T10] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1005.394229][T18033] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4013'. [ 1005.510931][T11957] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1005.846247][T11957] usb 3-1: config 0 has no interfaces? [ 1005.855384][T11957] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1005.855403][T11957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1005.855414][T11957] usb 3-1: SerialNumber: syz [ 1005.862869][T11957] usb 3-1: config 0 descriptor?? [ 1006.203720][ T10] usb 3-1: USB disconnect, device number 48 [ 1006.812476][T18054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4017'. [ 1008.110826][ T10] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1008.290078][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1008.290097][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.312197][ T10] usb 2-1: config 0 descriptor?? [ 1008.335188][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 1009.311035][ T10] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1009.465656][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1009.465685][ T10] usb 5-1: config 220 has an invalid descriptor of length 166, skipping remainder of the config [ 1009.465704][ T10] usb 5-1: config 220 has no interface number 2 [ 1009.465773][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1009.465803][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1009.465820][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1009.465838][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1009.550120][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1009.550151][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.550170][ T10] usb 5-1: Product: syz [ 1009.550184][ T10] usb 5-1: Manufacturer: syz [ 1009.550197][ T10] usb 5-1: SerialNumber: syz [ 1009.914450][ T10] usb 5-1: selecting invalid altsetting 0 [ 1009.968828][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1009.968861][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 1010.034761][ T10] usb 5-1: selecting invalid altsetting 0 [ 1010.034799][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1010.059998][ T10] usb 5-1: USB disconnect, device number 113 [ 1011.420839][T14867] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1011.631967][T14867] usb 5-1: Using ep0 maxpacket: 16 [ 1011.652554][T14867] usb 5-1: config 0 has no interfaces? [ 1011.681534][T14867] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1011.681565][T14867] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1011.681585][T14867] usb 5-1: Manufacturer: syz [ 1011.721002][T14867] usb 5-1: config 0 descriptor?? [ 1012.853352][ T5150] bcm5974 2-1:0.0: could not read from device [ 1012.855854][ T5985] usb 2-1: USB disconnect, device number 87 [ 1012.893411][T18028] bcm5974 2-1:0.0: could not read from device [ 1013.032507][T18028] udevd[18028]: Error opening device "/dev/input/event4": No such device [ 1013.032642][T18028] udevd[18028]: Unable to EVIOCGABS device "/dev/input/event4" [ 1013.032752][T18028] udevd[18028]: Unable to EVIOCGABS device "/dev/input/event4" [ 1013.032854][T18028] udevd[18028]: Unable to EVIOCGABS device "/dev/input/event4" [ 1013.032965][T18028] udevd[18028]: Unable to EVIOCGABS device "/dev/input/event4" [ 1014.475621][T18132] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4028'. [ 1014.590289][T17704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1015.440827][T17704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1015.634292][T17704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1015.800670][T17704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1016.435910][T11957] usb 5-1: USB disconnect, device number 114 [ 1016.726444][ T5886] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1016.838850][T17704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.886936][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.886963][ T5886] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1016.886996][ T5886] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1016.887009][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.922386][ T5886] usb 4-1: config 0 descriptor?? [ 1017.246370][T17704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.266056][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.266260][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.368018][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.369532][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.400851][T14867] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1017.583386][T14867] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1017.583406][T14867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.593659][T14867] usb 5-1: config 0 descriptor?? [ 1017.670528][T14867] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input36 [ 1018.103614][T18174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4035'. [ 1019.355817][T18179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4037'. [ 1019.355835][T18179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4037'. [ 1019.412767][T18180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4037'. [ 1020.967607][ T5150] bcm5974 5-1:0.0: could not read from device [ 1021.077543][T14867] usb 5-1: USB disconnect, device number 115 [ 1021.101617][T17704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.223093][T18045] udevd[18045]: Error opening device "/dev/input/event4": No such file or directory [ 1021.223217][T18045] udevd[18045]: Unable to EVIOCGABS device "/dev/input/event4" [ 1021.223333][T18045] udevd[18045]: Unable to EVIOCGABS device "/dev/input/event4" [ 1021.223438][T18045] udevd[18045]: Unable to EVIOCGABS device "/dev/input/event4" [ 1021.223541][T18045] udevd[18045]: Unable to EVIOCGABS device "/dev/input/event4" [ 1021.812130][T17704] veth0_vlan: entered promiscuous mode [ 1021.835887][T17704] veth1_vlan: entered promiscuous mode [ 1022.877911][T18197] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4040'. [ 1022.971740][T17704] veth0_macvtap: entered promiscuous mode [ 1022.998578][T17704] veth1_macvtap: entered promiscuous mode [ 1023.016805][T14891] usb 4-1: USB disconnect, device number 83 [ 1023.243091][T17704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.248108][T17704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.364447][T12520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.366817][T12520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.367005][T12520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.367159][T12520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.552679][T18205] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4043'. [ 1024.058104][T12520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.058124][T12520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.370887][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.370903][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.425253][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1025.540595][T18215] hub 9-0:1.0: USB hub found [ 1025.541123][T18215] hub 9-0:1.0: 1 port detected [ 1026.430495][T18226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4048'. [ 1026.430522][T18226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4048'. [ 1026.483303][T18228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4048'. [ 1028.143639][ T1847] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1028.753803][ T1847] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1028.753850][ T1847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.827195][ T1847] usb 3-1: config 0 descriptor?? [ 1028.869389][T18244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4053'. [ 1028.911248][ T1847] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37 [ 1029.006458][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4054'. [ 1029.061852][ T5886] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1029.295524][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 1029.299237][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.299322][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.299360][ T5886] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1029.299384][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.372628][ T5886] usb 5-1: config 0 descriptor?? [ 1029.634264][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4057'. [ 1030.424963][ T5886] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 1030.425056][ T5886] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 1030.553249][ T5886] ft260 0003:0403:6030.001F: chip code: 0000 0000 [ 1031.044745][ T5886] ft260 0003:0403:6030.001F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1031.259419][ T5886] ft260 0003:0403:6030.001F: failed to retrieve status: -32, no wakeup [ 1033.933870][ T5150] bcm5974 3-1:0.0: could not read from device [ 1034.050741][ T5886] usb 5-1: USB disconnect, device number 116 [ 1034.085835][T18045] bcm5974 3-1:0.0: could not read from device [ 1034.146077][T18281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4065'. [ 1034.190387][ T5150] bcm5974 3-1:0.0: could not read from device [ 1034.328410][ T5150] bcm5974 3-1:0.0: could not read from device [ 1034.570921][T18045] bcm5974 3-1:0.0: could not read from device [ 1034.657961][ T5886] usb 3-1: USB disconnect, device number 49 [ 1034.804310][T18045] udevd[18045]: Error opening device "/dev/input/event4": Input/output error [ 1034.804349][T18045] udevd[18045]: Unable to EVIOCGABS device "/dev/input/event4" [ 1034.804374][T18045] udevd[18045]: Unable to EVIOCGABS device "/dev/input/event4" [ 1034.804397][T18045] udevd[18045]: Unable to EVIOCGABS device "/dev/input/event4" [ 1034.804421][T18045] udevd[18045]: Unable to EVIOCGABS device "/dev/input/event4" [ 1034.804453][T18045] udevd[18045]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1034.810367][T14891] IPVS: starting estimator thread 0... [ 1034.867119][ T5150] bcm5974 3-1:0.0: could not read from device [ 1034.891097][T18293] IPVS: using max 16 ests per chain, 38400 per kthread [ 1035.002972][ T5165] udevd[5165]: worker [18045] terminated by signal 6 (Aborted) [ 1035.003003][ T5165] udevd[5165]: worker [18045] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37/event4' [ 1035.562011][T18297] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1036.832855][T18302] fuse: Bad value for 'fd' [ 1037.598413][T18309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4069'. [ 1037.811982][T18314] binder: 18305:18314 ioctl 4018620d 0 returned -22 [ 1039.791333][ T1847] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1039.960698][ T1847] usb 5-1: Using ep0 maxpacket: 32 [ 1039.962931][T18330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4076'. [ 1039.962954][T18330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4076'. [ 1039.963065][ T1847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.963081][ T1847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.963107][ T1847] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1039.963125][ T1847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.085473][ T1847] usb 5-1: config 0 descriptor?? [ 1040.576594][ T1847] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 1040.576632][ T1847] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 1040.704315][ T1847] ft260 0003:0403:6030.0020: chip code: 0000 0000 [ 1040.905919][ T1847] ft260 0003:0403:6030.0020: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1041.269473][ T1847] ft260 0003:0403:6030.0020: failed to retrieve status: -32, no wakeup [ 1041.716148][ T1847] usb 5-1: USB disconnect, device number 117 [ 1042.190962][T18350] syzkaller0: entered promiscuous mode [ 1042.190979][T18350] syzkaller0: entered allmulticast mode [ 1044.903957][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4088'. [ 1044.903982][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4088'. [ 1045.392270][T18379] fuse: Bad value for 'fd' [ 1045.569004][T18385] syz_tun: entered allmulticast mode [ 1045.660350][T18384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1048.387429][T18405] l2tp_ppp: sess 2/0: no socket in recv [ 1048.765618][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4100'. [ 1048.765643][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4100'. [ 1048.820891][T11957] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1048.991646][T11957] usb 2-1: config 0 has no interfaces? [ 1048.991681][T11957] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1048.991694][T11957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.007194][T11957] usb 2-1: config 0 descriptor?? [ 1049.628525][T18425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1049.670335][T18431] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1049.892333][T11957] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1050.101052][T11957] usb 3-1: Using ep0 maxpacket: 32 [ 1050.138939][T11957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.138965][T11957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.138987][T11957] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1050.139000][T11957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.149696][T11957] usb 3-1: config 0 descriptor?? [ 1050.152931][T11957] hub 3-1:0.0: USB hub found [ 1050.354860][T11957] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1050.964415][T11957] usbhid 3-1:0.0: can't add hid device: -71 [ 1050.964550][T11957] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1050.983249][T11957] usb 3-1: USB disconnect, device number 50 [ 1051.520798][T11957] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1051.671942][T11957] usb 3-1: Using ep0 maxpacket: 32 [ 1051.679533][T11957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.679554][T11957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.679575][T11957] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1051.679587][T11957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.773669][ T5879] usb 2-1: USB disconnect, device number 88 [ 1051.790436][T11957] usb 3-1: config 0 descriptor?? [ 1051.813706][T11957] hub 3-1:0.0: USB hub found [ 1052.021281][T11957] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1052.030454][T11957] usbhid 3-1:0.0: can't add hid device: -71 [ 1052.030531][T11957] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1052.111609][T11957] usb 3-1: USB disconnect, device number 51 [ 1052.149009][T18441] ptrace attach of "./syz-executor exec"[15610] was attempted by "./syz-executor exec"[18441] [ 1052.149709][T18441] random: crng reseeded on system resumption [ 1052.830774][ T1847] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1052.992207][ T1847] usb 1-1: Using ep0 maxpacket: 8 [ 1052.994330][ T1847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1052.995431][ T1847] usb 1-1: config 0 has an invalid interface number: 165 but max is 0 [ 1052.995446][ T1847] usb 1-1: config 0 has no interface number 0 [ 1052.995473][ T1847] usb 1-1: config 0 interface 165 has no altsetting 0 [ 1052.999216][ T1847] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 1052.999242][ T1847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.999306][ T1847] usb 1-1: Product: syz [ 1052.999315][ T1847] usb 1-1: Manufacturer: syz [ 1052.999322][ T1847] usb 1-1: SerialNumber: syz [ 1053.006334][ T1847] usb 1-1: config 0 descriptor?? [ 1054.624680][ T5879] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1054.746323][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.746415][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.789098][ T5879] usb 4-1: config 0 has no interfaces? [ 1054.789136][ T5879] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1054.789160][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.829131][ T5879] usb 4-1: config 0 descriptor?? [ 1056.418903][T18465] bond1: option mode: unable to set because the bond device has slaves [ 1057.179896][T11957] usb 4-1: USB disconnect, device number 84 [ 1057.792454][ T1847] comedi comedi5: Wrong number of endpoints [ 1057.792476][ T1847] ni6501 1-1:0.165: driver 'ni6501' failed to auto-configure device. [ 1057.861044][ T1847] usb 1-1: USB disconnect, device number 15 [ 1059.200596][T18493] syz_tun: left allmulticast mode [ 1059.308472][T18496] bond1: option mode: unable to set because the bond device has slaves [ 1059.790858][ T1847] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1060.059612][ T1847] usb 2-1: config 0 has no interfaces? [ 1060.059652][ T1847] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1060.059666][ T1847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.117973][ T1847] usb 2-1: config 0 descriptor?? [ 1061.423776][ T5985] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1061.677825][ T5985] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.677844][ T5985] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1061.677858][ T5985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1061.677876][ T5985] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 1061.677888][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.686920][ T5985] usb 5-1: config 0 descriptor?? [ 1061.695352][ T5985] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input38 [ 1061.780893][T11957] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1061.936496][T11957] usb 4-1: Using ep0 maxpacket: 8 [ 1061.952306][T11957] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1061.967785][T11957] usb 4-1: config 0 has an invalid interface number: 165 but max is 0 [ 1061.967810][T11957] usb 4-1: config 0 has no interface number 0 [ 1061.967913][T11957] usb 4-1: config 0 interface 165 has no altsetting 0 [ 1061.983661][T11957] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 1061.983739][T11957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.983758][T11957] usb 4-1: Product: syz [ 1061.983772][T11957] usb 4-1: Manufacturer: syz [ 1061.983785][T11957] usb 4-1: SerialNumber: syz [ 1062.055916][T11957] usb 4-1: config 0 descriptor?? [ 1062.605420][ T5886] usb 2-1: USB disconnect, device number 89 [ 1062.884308][T18528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1062.952558][T18526] vivid-002: disconnect [ 1063.735299][ T5150] bcm5974 5-1:0.0: could not read from device [ 1063.789254][ T5985] usb 5-1: USB disconnect, device number 118 [ 1064.320945][T14891] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1064.461102][ T932] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1064.483013][T18542] syz_tun: entered allmulticast mode [ 1064.504399][T18542] syz_tun: left allmulticast mode [ 1064.504957][T14891] usb 1-1: config 0 has no interfaces? [ 1064.504990][T14891] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1064.505013][T14891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.596112][T14891] usb 1-1: config 0 descriptor?? [ 1064.659355][ T932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.659382][ T932] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1064.659418][ T932] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1064.659438][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.664391][ T932] usb 2-1: config 0 descriptor?? [ 1065.164074][T18546] bond1: option mode: unable to set because the bond device has slaves [ 1066.523351][ T5880] usb 1-1: USB disconnect, device number 16 [ 1067.390216][T11957] comedi comedi5: Wrong number of endpoints [ 1067.390230][T11957] ni6501 4-1:0.165: driver 'ni6501' failed to auto-configure device. [ 1067.851856][T18525] vivid-002: reconnect [ 1067.866677][T11957] usb 4-1: USB disconnect, device number 85 [ 1068.630271][T18573] netlink: 'syz.3.4146': attribute type 4 has an invalid length. [ 1068.670331][T18573] netlink: 'syz.3.4146': attribute type 4 has an invalid length. [ 1068.735499][T18573] trusted_key: encrypted_key: insufficient parameters specified [ 1068.858329][ T5985] usb 2-1: USB disconnect, device number 90 [ 1069.339107][T18583] bond1: option mode: unable to set because the bond device is up [ 1070.230931][ T5985] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1070.324070][ T5854] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1070.432545][ T5985] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.432564][ T5985] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1070.432585][ T5985] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1070.432598][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.444871][ T5985] usb 4-1: config 0 descriptor?? [ 1070.566501][ T5854] usb 2-1: config 0 has no interfaces? [ 1070.566525][ T5854] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1070.566539][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.569507][ T5854] usb 2-1: config 0 descriptor?? [ 1070.936701][T18605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4157'. [ 1071.225064][ T5985] usb 2-1: USB disconnect, device number 91 [ 1071.413965][T18609] netlink: 'syz.2.4158': attribute type 4 has an invalid length. [ 1071.466313][T18611] netlink: 'syz.2.4158': attribute type 4 has an invalid length. [ 1071.525237][T18608] trusted_key: encrypted_key: insufficient parameters specified [ 1071.856536][ T37] kauditd_printk_skb: 162 callbacks suppressed [ 1071.856554][ T37] audit: type=1804 audit(1770653953.510:3097): pid=18618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.4159" name="/newroot/106/file1" dev="fuse" ino=1 res=1 errno=0 [ 1073.346216][ T37] audit: type=1800 audit(1770653955.000:3098): pid=18618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4159" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1073.616368][T18633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1073.710213][ T5854] usb 4-1: USB disconnect, device number 86 [ 1074.059437][T18645] fuse: Unknown parameter '0x0000000000000004' [ 1077.761141][ T5985] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1077.973147][ T5985] usb 4-1: config 0 has no interfaces? [ 1077.973172][ T5985] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1077.973185][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.979172][ T5985] usb 4-1: config 0 descriptor?? [ 1079.139094][ T56] usb 4-1: USB disconnect, device number 87 [ 1079.228445][ T5854] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1079.419410][ T5854] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1079.419438][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.423330][ T5854] usb 2-1: config 0 descriptor?? [ 1079.434312][ T5854] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input39 [ 1080.510838][ T5886] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1080.671013][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 1080.675014][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.675047][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.675132][ T5886] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1080.675163][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.724505][ T5886] usb 3-1: config 0 descriptor?? [ 1081.319475][ T5886] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 1081.319501][ T5886] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 1081.407604][ T5886] ft260 0003:0403:6030.0021: chip code: 0000 0000 [ 1081.608957][ T5886] ft260 0003:0403:6030.0021: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1081.810752][ T5886] ft260 0003:0403:6030.0021: failed to retrieve status: -32, no wakeup [ 1081.812719][ T5886] ft260 0003:0403:6030.0021: failed to retrieve status: -71 [ 1081.813455][ T5886] ft260 0003:0403:6030.0021: failed to reset I2C controller: -71 [ 1081.966980][ T5886] usb 3-1: USB disconnect, device number 52 [ 1084.002076][T18719] fuse: Unknown parameter '0x0000000000000004' [ 1084.504570][ T5150] bcm5974 2-1:0.0: could not read from device [ 1084.617627][T18541] bcm5974 2-1:0.0: could not read from device [ 1084.667217][T14891] usb 2-1: USB disconnect, device number 92 [ 1084.752347][ T5150] bcm5974 2-1:0.0: could not read from device [ 1084.956014][T18541] udevd[18541]: Error opening device "/dev/input/event4": No such device [ 1084.956140][T18541] udevd[18541]: Unable to EVIOCGABS device "/dev/input/event4" [ 1084.956255][T18541] udevd[18541]: Unable to EVIOCGABS device "/dev/input/event4" [ 1084.956351][T18541] udevd[18541]: Unable to EVIOCGABS device "/dev/input/event4" [ 1084.956450][T18541] udevd[18541]: Unable to EVIOCGABS device "/dev/input/event4" [ 1086.200959][ T5886] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1086.536411][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1086.536446][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1086.536473][ T5886] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1086.813315][ T5886] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1086.813335][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.813345][ T5886] usb 2-1: Product: syz [ 1086.813352][ T5886] usb 2-1: Manufacturer: syz [ 1086.813360][ T5886] usb 2-1: SerialNumber: syz [ 1086.822988][ T5886] usb 2-1: config 0 descriptor?? [ 1086.905979][T18733] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1087.195553][T18733] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1088.642341][T14867] usb 2-1: USB disconnect, device number 93 [ 1089.338591][T18755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4191'. [ 1090.791021][ T5854] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1090.950739][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 1090.953073][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.953105][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.953142][ T5854] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1090.953165][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.960569][ T5854] usb 4-1: config 0 descriptor?? [ 1091.301542][ T5985] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1091.404016][ T5854] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 1091.404040][ T5854] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 1091.474652][ T5985] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1091.474681][ T5985] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1091.474698][ T5985] usb 2-1: config 220 has an invalid descriptor of length 192, skipping remainder of the config [ 1091.474711][ T5985] usb 2-1: config 220 has no interface number 2 [ 1091.474763][ T5985] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1091.474790][ T5985] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1091.474808][ T5985] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1091.474825][ T5985] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1091.477824][ T5985] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1091.477853][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.477872][ T5985] usb 2-1: Product: syz [ 1091.477886][ T5985] usb 2-1: Manufacturer: syz [ 1091.477899][ T5985] usb 2-1: SerialNumber: syz [ 1091.617672][ T5854] ft260 0003:0403:6030.0022: chip code: 0000 0000 [ 1091.868752][ T5854] ft260 0003:0403:6030.0022: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1091.919342][ T5985] usb 2-1: selecting invalid altsetting 0 [ 1092.637792][ T5985] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1092.637828][ T5985] uvcvideo 2-1:220.0: No valid video chain found. [ 1092.660122][ T5985] usb 2-1: selecting invalid altsetting 0 [ 1092.660158][ T5985] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1092.667203][ T5985] usb 2-1: USB disconnect, device number 94 [ 1092.682018][T17371] Bluetooth: hci2: command 0x0406 tx timeout [ 1092.935915][ T5854] ft260 0003:0403:6030.0022: failed to retrieve status: -71 [ 1092.937308][ T5854] ft260 0003:0403:6030.0022: failed to reset I2C controller: -71 [ 1092.989873][ T5854] usb 4-1: USB disconnect, device number 88 [ 1099.242108][T18835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4213'. [ 1103.131178][ T5854] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1103.357009][ T5854] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1103.357044][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1103.357070][ T5854] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1103.450210][ T5854] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1103.450241][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.450261][ T5854] usb 1-1: Product: syz [ 1103.450274][ T5854] usb 1-1: Manufacturer: syz [ 1103.450288][ T5854] usb 1-1: SerialNumber: syz [ 1103.493984][ T5854] usb 1-1: config 0 descriptor?? [ 1103.508651][T18870] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1103.975530][T18870] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1105.443517][ T932] usb 1-1: USB disconnect, device number 17 [ 1106.990263][T18898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4228'. [ 1107.716691][T18911] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 1107.954521][T18915] CIFS mount error: No usable UNC path provided in device string! [ 1107.954521][T18915] [ 1107.954586][T18915] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1109.440828][ T932] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1109.592665][ T932] usb 4-1: Using ep0 maxpacket: 32 [ 1109.594733][ T932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.594752][ T932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.594774][ T932] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1109.594786][ T932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.599672][ T932] usb 4-1: config 0 descriptor?? [ 1109.662336][ T932] hub 4-1:0.0: USB hub found [ 1109.834644][ T932] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1109.950912][ T56] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1110.127550][ T56] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1110.127580][ T56] usb 3-1: config 0 has no interface number 0 [ 1110.127611][ T56] usb 3-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 1110.127650][ T56] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.127674][ T56] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.127697][ T56] usb 3-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1110.127722][ T56] usb 3-1: config 0 interface 16 has no altsetting 0 [ 1110.127752][ T56] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1110.127772][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.142803][ T56] usb 3-1: config 0 descriptor?? [ 1111.067535][ T932] hid-generic 0003:046D:C31C.0023: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 1112.687620][T18952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4241'. [ 1113.330770][ T932] usb 4-1: USB disconnect, device number 89 [ 1116.590968][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.591072][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.625848][ T56] usbhid 3-1:0.16: can't add hid device: -32 [ 1116.625957][ T56] usbhid 3-1:0.16: probe with driver usbhid failed with error -32 [ 1117.005516][T18968] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 1117.196256][ T56] usb 3-1: USB disconnect, device number 53 [ 1118.105308][T18971] CIFS mount error: No usable UNC path provided in device string! [ 1118.105308][T18971] [ 1118.105329][T18971] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1118.572672][T18985] l2tp_ppp: sess 2/0: no socket in recv [ 1121.553065][T19009] l2tp_ppp: sess 2/0: no socket in recv [ 1123.341262][T19023] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 1123.692911][T19028] CIFS mount error: No usable UNC path provided in device string! [ 1123.692911][T19028] [ 1123.692976][T19028] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1124.792913][ T1847] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1124.960908][ T1847] usb 2-1: Using ep0 maxpacket: 32 [ 1124.984672][ T1847] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1124.984701][ T1847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.011012][ T1847] usb 2-1: config 0 descriptor?? [ 1125.244221][ T1847] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1125.246589][ T1847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1125.253890][ T1847] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1125.253947][ T1847] usb 2-1: media controller created [ 1125.344795][ T1847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1125.479558][ T1847] az6027: usb out operation failed. (-71) [ 1125.479834][ T1847] az6027: usb out operation failed. (-71) [ 1125.479841][ T1847] stb0899_attach: Driver disabled by Kconfig [ 1125.479847][ T1847] az6027: no front-end attached [ 1125.479847][ T1847] [ 1125.481871][ T1847] az6027: usb out operation failed. (-71) [ 1125.481899][ T1847] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1125.485122][ T1847] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 1125.521270][ T1847] dvb-usb: schedule remote query interval to 400 msecs. [ 1125.521292][ T1847] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1125.565445][ T1847] usb 2-1: USB disconnect, device number 95 [ 1125.888330][ T1847] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1126.022668][ T5985] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1126.170839][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 1126.191183][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.191214][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.191240][ T5985] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1126.191252][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.242497][ T5985] usb 5-1: config 0 descriptor?? [ 1126.660844][ T932] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1126.705050][ T5985] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 1126.705075][ T5985] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 1126.863513][ T5985] ft260 0003:0403:6030.0024: chip code: 0000 0000 [ 1126.899844][ T932] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1126.899872][ T932] usb 3-1: config 0 has no interface number 0 [ 1126.899905][ T932] usb 3-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 1126.899946][ T932] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.899972][ T932] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.899994][ T932] usb 3-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1126.900020][ T932] usb 3-1: config 0 interface 16 has no altsetting 0 [ 1126.900058][ T932] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1126.900089][ T932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.003417][ T932] usb 3-1: config 0 descriptor?? [ 1127.067848][ T5985] ft260 0003:0403:6030.0024: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1127.270844][ T5985] ft260 0003:0403:6030.0024: failed to retrieve status: -71, no wakeup [ 1127.281744][ T5985] ft260 0003:0403:6030.0024: failed to retrieve status: -71 [ 1127.284684][ T5985] ft260 0003:0403:6030.0024: failed to reset I2C controller: -71 [ 1127.384227][ T5985] usb 5-1: USB disconnect, device number 119 [ 1132.493593][ T932] usbhid 3-1:0.16: can't add hid device: -32 [ 1132.493719][ T932] usbhid 3-1:0.16: probe with driver usbhid failed with error -32 [ 1133.559548][T11957] usb 3-1: USB disconnect, device number 54 [ 1135.318785][T11957] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1135.567930][T11957] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1135.567962][T11957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.588300][T11957] usb 2-1: config 0 descriptor?? [ 1135.650924][T11957] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input41 [ 1136.217184][T19104] 9p: Bad value for 'rfdno' [ 1140.731017][ T5150] bcm5974 2-1:0.0: could not read from device [ 1141.572601][T18834] bcm5974 2-1:0.0: could not read from device [ 1142.618531][ T5150] bcm5974 2-1:0.0: could not read from device [ 1142.920909][T14891] usb 2-1: USB disconnect, device number 96 [ 1143.488144][T18834] udevd[18834]: Error opening device "/dev/input/event4": No such device [ 1143.488269][T18834] udevd[18834]: Unable to EVIOCGABS device "/dev/input/event4" [ 1143.488386][T18834] udevd[18834]: Unable to EVIOCGABS device "/dev/input/event4" [ 1143.488489][T18834] udevd[18834]: Unable to EVIOCGABS device "/dev/input/event4" [ 1143.488600][T18834] udevd[18834]: Unable to EVIOCGABS device "/dev/input/event4" [ 1143.510916][T14867] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1143.650837][T14867] usb 3-1: device descriptor read/64, error -71 [ 1143.923879][T14867] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1144.100904][T14867] usb 3-1: device descriptor read/64, error -71 [ 1144.211115][T14867] usb usb3-port1: attempt power cycle [ 1144.620916][T14867] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1144.643003][T14867] usb 3-1: device descriptor read/8, error -71 [ 1145.282755][T14867] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1145.910334][T14867] usb 3-1: device descriptor read/8, error -71 [ 1146.011380][T14867] usb usb3-port1: unable to enumerate USB device [ 1146.533336][T14867] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1146.703013][T14867] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1146.703037][T14867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1146.703052][T14867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1146.708489][T14867] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1146.708514][T14867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.708524][T14867] usb 4-1: Product: syz [ 1146.708532][T14867] usb 4-1: Manufacturer: syz [ 1146.708550][T14867] usb 4-1: SerialNumber: syz [ 1146.713819][T14867] usb 4-1: config 0 descriptor?? [ 1146.718816][T19156] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1147.001307][T19156] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1148.613524][ T932] usb 4-1: USB disconnect, device number 90 [ 1151.717705][T19187] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1151.717733][T19187] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1151.798684][T19189] 9p: Bad value for 'rfdno' [ 1151.858041][T19187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1151.858058][T19187] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1152.229210][T19187] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1152.229226][T19187] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1152.680215][T19187] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1152.680238][T19187] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1152.835922][T19187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1152.837453][T19187] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1153.322554][T19206] l2tp_ppp: sess 2/0: no socket in recv [ 1154.911460][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4300'. [ 1156.290972][ T932] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1156.454720][ T932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.454747][ T932] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1156.454784][ T932] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1156.454806][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.459476][ T932] usb 2-1: config 0 descriptor?? [ 1157.730877][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4306'. [ 1159.442071][T19250] tipc: Started in network mode [ 1159.442100][T19250] tipc: Node identity 7f000001, cluster identity 4711 [ 1159.444009][T19250] tipc: Enabling of bearer rejected, failed to enable media [ 1159.449600][ T37] audit: type=1326 audit(1770654041.080:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.0.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3366af79 code=0x7ffc0000 [ 1159.449648][ T37] audit: type=1326 audit(1770654041.080:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.0.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e3366af79 code=0x7ffc0000 [ 1159.449746][ T37] audit: type=1326 audit(1770654041.090:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.0.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3366af79 code=0x7ffc0000 [ 1159.449785][ T37] audit: type=1326 audit(1770654041.090:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.0.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e3366af79 code=0x7ffc0000 [ 1159.449823][ T37] audit: type=1326 audit(1770654041.090:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.0.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3366af79 code=0x7ffc0000 [ 1159.449861][ T37] audit: type=1326 audit(1770654041.090:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.0.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3366af79 code=0x7ffc0000 [ 1159.449898][ T37] audit: type=1326 audit(1770654041.090:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.0.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e3366c807 code=0x7ffc0000 [ 1159.449938][ T37] audit: type=1326 audit(1770654041.090:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.0.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e3362b84e code=0x7ffc0000 [ 1159.449977][ T37] audit: type=1326 audit(1770654041.090:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.0.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0e3362b84e code=0x7ffc0000 [ 1159.450014][ T37] audit: type=1326 audit(1770654041.090:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19243 comm="syz.0.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0e3362b84e code=0x7ffc0000 [ 1159.463479][T19248] netlink: 'syz.4.4309': attribute type 4 has an invalid length. [ 1159.778372][T19248] netlink: 'syz.4.4309': attribute type 4 has an invalid length. [ 1159.848340][T19248] trusted_key: encrypted_key: insufficient parameters specified [ 1160.072943][T19255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4311'. [ 1161.258958][ T932] usb 2-1: USB disconnect, device number 97 [ 1161.536867][T19265] netlink: 'syz.4.4314': attribute type 4 has an invalid length. [ 1161.635387][T19265] netlink: 'syz.4.4314': attribute type 4 has an invalid length. [ 1161.731969][T19265] trusted_key: encrypted_key: insufficient parameters specified [ 1162.975110][T19278] netlink: 'syz.2.4317': attribute type 4 has an invalid length. [ 1163.014297][T19278] netlink: 'syz.2.4317': attribute type 4 has an invalid length. [ 1163.037356][T19278] trusted_key: encrypted_key: insufficient parameters specified [ 1163.276099][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4318'. [ 1165.350780][ T932] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1165.481164][T19303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4322'. [ 1165.712500][ T932] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1165.712541][ T932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.723356][ T932] usb 3-1: config 0 descriptor?? [ 1165.729753][ T932] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 1170.460846][ T5879] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1170.640340][ T5879] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1170.640361][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.640373][ T5879] usb 1-1: Product: syz [ 1170.640380][ T5879] usb 1-1: Manufacturer: syz [ 1170.640387][ T5879] usb 1-1: SerialNumber: syz [ 1170.749573][ T5879] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1170.821015][ T5150] bcm5974 3-1:0.0: could not read from device [ 1170.849323][ T56] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1170.914658][T18876] bcm5974 3-1:0.0: could not read from device [ 1170.953422][ T5150] bcm5974 3-1:0.0: could not read from device [ 1171.070094][ T5150] bcm5974 3-1:0.0: could not read from device [ 1171.144796][ T5150] bcm5974 3-1:0.0: could not read from device [ 1171.203415][T19328] random: crng reseeded on system resumption [ 1171.251635][ T5150] bcm5974 3-1:0.0: could not read from device [ 1171.311838][T18876] bcm5974 3-1:0.0: could not read from device [ 1171.342112][ T5150] bcm5974 3-1:0.0: could not read from device [ 1171.390590][T18876] udevd[18876]: Error opening device "/dev/input/event4": Input/output error [ 1171.391408][T18876] udevd[18876]: Unable to EVIOCGABS device "/dev/input/event4" [ 1171.391523][T18876] udevd[18876]: Unable to EVIOCGABS device "/dev/input/event4" [ 1171.391650][T18876] udevd[18876]: Unable to EVIOCGABS device "/dev/input/event4" [ 1171.391757][T18876] udevd[18876]: Unable to EVIOCGABS device "/dev/input/event4" [ 1172.450755][ T56] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1172.450943][ T56] ath9k_htc: Failed to initialize the device [ 1178.463907][T14867] usb 1-1: USB disconnect, device number 18 [ 1178.518887][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.518958][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.540894][ T5854] usb 3-1: USB disconnect, device number 59 [ 1178.595832][T14867] usb 1-1: ath9k_htc: USB layer deinitialized [ 1178.838328][T19333] tipc: Started in network mode [ 1178.838361][T19333] tipc: Node identity 7f000001, cluster identity 4711 [ 1178.885534][T19333] tipc: Enabling of bearer rejected, failed to enable media [ 1179.447613][T19340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'. [ 1180.563352][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4333'. [ 1180.730995][T14867] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1181.710728][T14867] usb 2-1: Using ep0 maxpacket: 8 [ 1181.717820][T14867] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1181.717876][T14867] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1181.717905][T14867] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1181.727506][T14867] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1181.727565][T14867] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1181.727595][T14867] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1181.728994][T14867] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1181.729028][T14867] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1181.729043][T14867] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1181.732569][T14867] usb 2-1: string descriptor 0 read error: -22 [ 1181.732650][T14867] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1181.732663][T14867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.755184][T14867] adutux 2-1:168.0: interrupt endpoints not found [ 1182.072728][ T5880] usb 2-1: USB disconnect, device number 98 [ 1182.624986][T17371] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1182.664149][T17371] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1182.668626][T17371] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1182.670406][T17371] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1182.679047][T17371] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1182.820938][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1182.826281][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1182.826771][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1182.827895][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1182.828663][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1184.165326][ T5854] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1184.334859][ T5854] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1184.334887][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.338490][ T5854] usb 1-1: config 0 descriptor?? [ 1184.344991][ T5854] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input43 [ 1184.903723][T17371] Bluetooth: hci1: command tx timeout [ 1186.970792][T17371] Bluetooth: hci1: command tx timeout [ 1187.128780][T19365] chnl_net:caif_netlink_parms(): no params data found [ 1187.210178][T19399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4345'. [ 1188.554779][ T5150] bcm5974 1-1:0.0: could not read from device [ 1188.557408][ T56] usb 1-1: USB disconnect, device number 19 [ 1188.583447][T18834] bcm5974 1-1:0.0: could not read from device [ 1188.613676][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.705525][T18834] udevd[18834]: Error opening device "/dev/input/event4": No such file or directory [ 1188.705576][T18834] udevd[18834]: Unable to EVIOCGABS device "/dev/input/event4" [ 1188.705615][T18834] udevd[18834]: Unable to EVIOCGABS device "/dev/input/event4" [ 1188.705656][T18834] udevd[18834]: Unable to EVIOCGABS device "/dev/input/event4" [ 1188.705696][T18834] udevd[18834]: Unable to EVIOCGABS device "/dev/input/event4" [ 1188.705743][T18834] udevd[18834]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1188.743380][ T5165] udevd[5165]: worker [18834] terminated by signal 6 (Aborted) [ 1188.743433][ T5165] udevd[5165]: worker [18834] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input43/event4' [ 1188.763795][ T5985] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1188.921066][ T5985] usb 2-1: Using ep0 maxpacket: 32 [ 1188.923406][ T5985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.923446][ T5985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.923485][ T5985] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1188.923507][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.007504][T19410] netlink: 'syz.0.4349': attribute type 4 has an invalid length. [ 1189.007835][ T5985] usb 2-1: config 0 descriptor?? [ 1189.050939][T17371] Bluetooth: hci1: command tx timeout [ 1189.280003][T19414] trusted_key: encrypted_key: insufficient parameters specified [ 1189.370990][ T56] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1189.447663][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.501647][ T5985] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 1189.501784][ T5985] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 1189.636567][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1189.636720][ T37] audit: type=1326 audit(1770654071.290:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19417 comm="syz.4.4350" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8868e9af79 code=0x0 [ 1189.649521][ T56] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1189.708014][ T56] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1189.708043][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.708055][ T56] usb 3-1: Product: syz [ 1189.708062][ T56] usb 3-1: Manufacturer: syz [ 1189.708070][ T56] usb 3-1: SerialNumber: syz [ 1189.761366][ T5985] ft260 0003:0403:6030.0025: chip code: 0000 0000 [ 1189.779127][ T56] usb 3-1: config 0 descriptor?? [ 1189.963295][ T5985] ft260 0003:0403:6030.0025: failed to retrieve system status [ 1189.963524][ T5985] ft260 0003:0403:6030.0025: probe with driver ft260 failed with error -32 [ 1190.083792][ T56] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1190.227642][T18824] udevd[18824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1190.489652][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.140981][T17371] Bluetooth: hci1: command tx timeout [ 1191.214197][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.437145][T14867] usb 2-1: USB disconnect, device number 99 [ 1191.458020][T19365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.486173][T19365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.486384][T19365] bridge_slave_0: entered allmulticast mode [ 1191.493723][T19365] bridge_slave_0: entered promiscuous mode [ 1191.525676][T19365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.530292][T19365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.530512][T19365] bridge_slave_1: entered allmulticast mode [ 1191.569265][T19365] bridge_slave_1: entered promiscuous mode [ 1191.758624][T19434] tipc: Enabling of bearer rejected, failed to enable media [ 1191.804185][T19365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.963991][T19365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.008562][ T5879] usb 3-1: USB disconnect, device number 60 [ 1192.580745][ T5879] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1192.684560][T19365] team0: Port device team_slave_0 added [ 1192.706946][T19365] team0: Port device team_slave_1 added [ 1192.863455][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.863483][ T5879] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1192.863521][ T5879] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1192.863545][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.880166][ T5879] usb 2-1: config 0 descriptor?? [ 1193.177450][T19365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.177463][T19365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.177477][T19365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.183404][T19365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.183421][T19365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.183448][T19365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.736512][ T13] bridge_slave_1: left allmulticast mode [ 1193.736533][ T13] bridge_slave_1: left promiscuous mode [ 1193.736676][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.864354][ T13] bridge_slave_0: left allmulticast mode [ 1193.864384][ T13] bridge_slave_0: left promiscuous mode [ 1193.864640][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.694666][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4357'. [ 1195.360934][T18275] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1195.543902][T18275] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1195.543925][T18275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1195.543940][T18275] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1195.546783][T18275] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1195.546812][T18275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.546841][T18275] usb 3-1: Product: syz [ 1195.546849][T18275] usb 3-1: Manufacturer: syz [ 1195.546856][T18275] usb 3-1: SerialNumber: syz [ 1195.617244][T18275] usb 3-1: config 0 descriptor?? [ 1195.618475][T19471] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1195.857492][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4360'. [ 1195.858724][T19471] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1195.949333][ T10] usb 2-1: USB disconnect, device number 100 [ 1199.395079][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.471956][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.526715][ T13] bond0 (unregistering): Released all slaves [ 1200.020954][ T5854] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1200.210794][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 1200.214455][ T5854] usb 5-1: config 0 has no interfaces? [ 1200.216354][ T5854] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1200.216371][ T5854] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1200.216382][ T5854] usb 5-1: Manufacturer: syz [ 1200.219178][ T5854] usb 5-1: config 0 descriptor?? [ 1200.960468][ T13] bond1 (unregistering): Released all slaves [ 1201.154916][ T5985] usb 3-1: USB disconnect, device number 61 [ 1201.209983][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1201.307830][T19365] hsr_slave_0: entered promiscuous mode [ 1201.309185][T19365] hsr_slave_1: entered promiscuous mode [ 1201.355265][T19365] debugfs: 'hsr0' already exists in 'hsr' [ 1201.355285][T19365] Cannot create hsr debugfs directory [ 1201.355914][ T13] tipc: Left network mode [ 1201.712315][T14867] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1201.929541][T14867] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.929573][T14867] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1201.929612][T14867] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1201.929647][T14867] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 1201.929670][T14867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.937417][T14867] usb 1-1: config 0 descriptor?? [ 1201.950011][T14867] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input44 [ 1202.541233][ T56] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1202.750281][ T56] usb 2-1: Using ep0 maxpacket: 32 [ 1202.760559][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.760592][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.760763][ T56] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1202.760789][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.844650][ T56] usb 2-1: config 0 descriptor?? [ 1203.289605][ T56] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 1203.289643][ T56] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 1203.485036][ T56] ft260 0003:0403:6030.0026: chip code: 0000 0000 [ 1203.687002][ T56] ft260 0003:0403:6030.0026: failed to retrieve system status [ 1203.687392][ T56] ft260 0003:0403:6030.0026: probe with driver ft260 failed with error -32 [ 1204.445516][ T5150] bcm5974 1-1:0.0: could not read from device [ 1204.547307][T14867] usb 1-1: USB disconnect, device number 20 [ 1204.551359][ T5150] bcm5974 1-1:0.0: could not read from device [ 1204.617942][T18824] bcm5974 1-1:0.0: could not read from device [ 1204.853130][ T13] hsr_slave_0: left promiscuous mode [ 1204.891236][ T13] hsr_slave_1: left promiscuous mode [ 1204.893160][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1204.893179][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.965696][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.965724][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.167519][ T13] veth1_macvtap: left promiscuous mode [ 1205.167583][ T13] veth0_macvtap: left promiscuous mode [ 1205.167714][ T13] veth1_vlan: left promiscuous mode [ 1205.167804][ T13] veth0_vlan: left promiscuous mode [ 1205.335327][T14867] usb 2-1: USB disconnect, device number 101 [ 1206.210795][ T5985] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1206.442560][ T5985] usb 2-1: no configurations [ 1206.442581][ T5985] usb 2-1: can't read configurations, error -22 [ 1206.591005][ T5985] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1206.754055][ T5985] usb 2-1: no configurations [ 1206.754069][ T5985] usb 2-1: can't read configurations, error -22 [ 1206.754325][ T5985] usb usb2-port1: attempt power cycle [ 1207.167023][ T5985] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1207.210396][ T5985] usb 2-1: no configurations [ 1207.210409][ T5985] usb 2-1: can't read configurations, error -22 [ 1207.410838][ T5985] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1207.451009][ T5985] usb 2-1: no configurations [ 1207.451030][ T5985] usb 2-1: can't read configurations, error -22 [ 1207.458949][ T5985] usb usb2-port1: unable to enumerate USB device [ 1208.430778][T14867] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1208.753887][T14867] usb 3-1: config 0 has no interfaces? [ 1208.753914][T14867] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1208.753927][T14867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.756659][T14867] usb 3-1: config 0 descriptor?? [ 1208.874823][ T37] audit: type=1326 audit(1770654090.510:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.1.4376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 1208.874865][ T37] audit: type=1326 audit(1770654090.510:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.1.4376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 1208.874888][ T37] audit: type=1326 audit(1770654090.510:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.1.4376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 1208.874910][ T37] audit: type=1326 audit(1770654090.510:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.1.4376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 1208.874930][ T37] audit: type=1326 audit(1770654090.510:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.1.4376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 1208.874952][ T37] audit: type=1326 audit(1770654090.510:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.1.4376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 1208.874974][ T37] audit: type=1326 audit(1770654090.510:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.1.4376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 1208.874996][ T37] audit: type=1326 audit(1770654090.510:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.1.4376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655e9af79 code=0x7ffc0000 [ 1208.875016][ T37] audit: type=1326 audit(1770654090.510:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.1.4376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3655e9c807 code=0x7ffc0000 [ 1208.875038][ T37] audit: type=1326 audit(1770654090.510:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19547 comm="syz.1.4376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3655e5b84e code=0x7ffc0000 [ 1211.684604][T18275] usb 3-1: USB disconnect, device number 62 [ 1212.192186][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1212.291003][T18275] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1212.440842][T18275] usb 3-1: Using ep0 maxpacket: 32 [ 1212.442586][T18275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.442618][T18275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.442646][T18275] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1212.442658][T18275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.445963][T18275] usb 3-1: config 0 descriptor?? [ 1212.513417][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1212.904422][T18275] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 1212.904459][T18275] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 1213.098776][T18275] ft260 0003:0403:6030.0027: chip code: 0000 0000 [ 1213.306595][T18275] ft260 0003:0403:6030.0027: failed to retrieve system status [ 1213.306817][T18275] ft260 0003:0403:6030.0027: probe with driver ft260 failed with error -32 [ 1215.026503][ T5985] usb 3-1: USB disconnect, device number 63 [ 1215.168169][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1215.187133][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1215.188733][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1215.206331][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1215.206958][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1215.809522][T19550] tipc: Enabling of bearer rejected, failed to enable media [ 1216.579420][T19588] l2tp_ppp: sess 2/0: no socket in recv [ 1216.610857][ T5854] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1216.843659][ T5854] usb 1-1: config 0 has no interfaces? [ 1216.843696][ T5854] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1216.843712][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.847372][ T5854] usb 1-1: config 0 descriptor?? [ 1217.407944][ T5809] Bluetooth: hci4: command tx timeout [ 1217.961803][T19365] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1218.085635][T19365] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1218.427060][T19365] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1218.544122][T19365] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1218.816694][ T13] IPVS: stop unused estimator thread 0... [ 1219.460748][ T5809] Bluetooth: hci4: command tx timeout [ 1219.865241][ T5854] usb 1-1: USB disconnect, device number 21 [ 1220.080823][ T10] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1220.106127][ T5985] usb 5-1: USB disconnect, device number 120 [ 1220.140324][T19561] chnl_net:caif_netlink_parms(): no params data found [ 1220.231509][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1220.234014][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.234047][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.234084][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1220.234109][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.239083][ T10] usb 2-1: config 0 descriptor?? [ 1220.711762][ T10] ft260 0003:0403:6030.0028: unknown main item tag 0x0 [ 1220.711799][ T10] ft260 0003:0403:6030.0028: unknown main item tag 0x0 [ 1220.904502][T19633] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1221.079676][ T10] ft260 0003:0403:6030.0028: chip code: 0000 0000 [ 1221.497782][ T10] ft260 0003:0403:6030.0028: failed to retrieve system status [ 1221.498198][ T10] ft260 0003:0403:6030.0028: probe with driver ft260 failed with error -32 [ 1221.603244][ T5809] Bluetooth: hci4: command tx timeout [ 1222.847325][T19561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.892336][T19561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.893649][T19561] bridge_slave_0: entered allmulticast mode [ 1222.895332][ T5854] usb 2-1: USB disconnect, device number 106 [ 1222.927366][T19561] bridge_slave_0: entered promiscuous mode [ 1222.956797][T19561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.956914][T19561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.957190][T19561] bridge_slave_1: entered allmulticast mode [ 1222.991081][T19561] bridge_slave_1: entered promiscuous mode [ 1223.213370][T19561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.225332][T19561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.515835][T19561] team0: Port device team_slave_0 added [ 1223.540864][T19365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.552330][T19561] team0: Port device team_slave_1 added [ 1223.612265][ T5809] Bluetooth: hci4: command tx timeout [ 1224.557752][T19561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.557770][T19561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.557794][T19561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.609639][T19561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.609657][T19561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.609683][T19561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.616660][T19365] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.027985][T16230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.028086][T16230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.113761][T19561] hsr_slave_0: entered promiscuous mode [ 1225.114715][T19561] hsr_slave_1: entered promiscuous mode [ 1225.115302][T19561] debugfs: 'hsr0' already exists in 'hsr' [ 1225.115317][T19561] Cannot create hsr debugfs directory [ 1225.307245][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.307350][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.017090][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1226.017111][ T37] audit: type=1326 audit(1770654107.640:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19678 comm="syz.0.4398" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e3366af79 code=0x0 [ 1226.723503][T19688] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1227.320789][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1227.470861][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1227.472627][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.472656][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.472688][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1227.472707][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.629346][ T10] usb 3-1: config 0 descriptor?? [ 1228.057697][T19561] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1228.057808][ T10] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 1228.057848][ T10] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 1228.119790][T19561] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1228.308690][ T10] ft260 0003:0403:6030.0029: chip code: 0000 0000 [ 1228.372424][T19561] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1228.465036][T19561] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1228.518595][ T10] ft260 0003:0403:6030.0029: failed to retrieve system status [ 1228.518821][ T10] ft260 0003:0403:6030.0029: probe with driver ft260 failed with error -32 [ 1228.556228][T19365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.092938][T17123] ================================================================== [ 1229.092956][T17123] BUG: KASAN: use-after-free in nf_hook_entry_head+0x1f1/0x2c0 [ 1229.093176][T17123] Read of size 8 at addr ffff88805750c108 by task kworker/u8:14/17123 [ 1229.093193][T17123] [ 1229.093215][T17123] CPU: 1 UID: 0 PID: 17123 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1229.093239][T17123] Tainted: [L]=SOFTLOCKUP [ 1229.093247][T17123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1229.093259][T17123] Workqueue: netns cleanup_net [ 1229.093333][T17123] Call Trace: [ 1229.093341][T17123] [ 1229.093353][T17123] dump_stack_lvl+0xe8/0x150 [ 1229.093445][T17123] print_report+0xba/0x230 [ 1229.093472][T17123] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1229.093494][T17123] kasan_report+0x117/0x150 [ 1229.093598][T17123] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1229.093624][T17123] nf_hook_entry_head+0x1f1/0x2c0 [ 1229.093647][T17123] __nf_unregister_net_hook+0x74/0x6f0 [ 1229.093673][T17123] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 1229.093730][T17123] nf_tables_pre_exit_net+0x64a/0x900 [ 1229.093766][T17123] ops_undo_list+0x187/0x940 [ 1229.093782][T17123] ? rt_spin_unlock+0x170/0x200 [ 1229.093846][T17123] ? __pfx_ops_undo_list+0x10/0x10 [ 1229.093861][T17123] ? rt_spin_unlock+0x14f/0x200 [ 1229.093872][T17123] ? rt_spin_unlock+0x160/0x200 [ 1229.093883][T17123] cleanup_net+0x4e5/0x7b0 [ 1229.093901][T17123] ? __pfx_cleanup_net+0x10/0x10 [ 1229.093917][T17123] ? process_scheduled_works+0xa0f/0x17a0 [ 1229.093944][T17123] ? process_scheduled_works+0xa0f/0x17a0 [ 1229.093954][T17123] process_scheduled_works+0xaec/0x17a0 [ 1229.093969][T17123] ? __pfx_process_scheduled_works+0x10/0x10 [ 1229.093978][T17123] ? do_raw_spin_lock+0x12b/0x2f0 [ 1229.094001][T17123] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1229.094016][T17123] ? schedule+0x90/0x360 [ 1229.094050][T17123] worker_thread+0xda6/0x1360 [ 1229.094065][T17123] ? __kthread_parkme+0x19c/0x1f0 [ 1229.094078][T17123] kthread+0x726/0x8b0 [ 1229.094091][T17123] ? __pfx_worker_thread+0x10/0x10 [ 1229.094101][T17123] ? __pfx_kthread+0x10/0x10 [ 1229.094112][T17123] ? rt_spin_unlock+0x14f/0x200 [ 1229.094123][T17123] ? rt_spin_unlock+0x160/0x200 [ 1229.094133][T17123] ? __pfx_kthread+0x10/0x10 [ 1229.094151][T17123] ret_from_fork+0x51b/0xa40 [ 1229.094170][T17123] ? __pfx_ret_from_fork+0x10/0x10 [ 1229.094180][T17123] ? __switch_to+0xc82/0x1410 [ 1229.094207][T17123] ? __pfx_kthread+0x10/0x10 [ 1229.094219][T17123] ret_from_fork_asm+0x1a/0x30 [ 1229.094238][T17123] [ 1229.094242][T17123] [ 1229.094245][T17123] The buggy address belongs to the physical page: [ 1229.094254][T17123] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805750dd40 pfn:0x5750c [ 1229.094265][T17123] flags: 0x80000000000000(node=0|zone=1) [ 1229.094282][T17123] page_type: f0(buddy) [ 1229.094292][T17123] raw: 0080000000000000 ffffea0000e26108 ffffea0000d11e08 0000000000000000 [ 1229.094301][T17123] raw: ffff88805750dd40 0000000000000002 00000000f0000000 0000000000000000 [ 1229.094306][T17123] page dumped because: kasan: bad access detected [ 1229.094314][T17123] page_owner tracks the page as freed [ 1229.094318][T17123] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 19253, tgid 19252 (syz.3.4310), ts 1160667598364, free_ts 1184237022296 [ 1229.094338][T17123] post_alloc_hook+0x228/0x280 [ 1229.094376][T17123] get_page_from_freelist+0x28bb/0x2950 [ 1229.094405][T17123] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1229.094414][T17123] alloc_pages_mpol+0xd1/0x380 [ 1229.094465][T17123] allocate_slab+0x86/0x3a0 [ 1229.094516][T17123] ___slab_alloc+0xaf8/0x13d0 [ 1229.094526][T17123] __slab_alloc+0xc5/0x1f0 [ 1229.094534][T17123] kmem_cache_alloc_node_noprof+0x1ad/0x6d0 [ 1229.094547][T17123] kmalloc_reserve+0xbd/0x290 [ 1229.094581][T17123] __alloc_skb+0x204/0x390 [ 1229.094615][T17123] alloc_skb_with_frags+0xca/0x890 [ 1229.094624][T17123] sock_alloc_send_pskb+0x884/0x9a0 [ 1229.094635][T17123] __ip_append_data+0x2bc5/0x3f30 [ 1229.094675][T17123] ip_make_skb+0x250/0x470 [ 1229.094688][T17123] udp_sendmsg+0x19ec/0x2240 [ 1229.094721][T17123] ____sys_sendmsg+0x875/0xac0 [ 1229.094754][T17123] page last free pid 5854 tgid 5854 stack trace: [ 1229.094764][T17123] __free_frozen_pages+0xfd0/0x1160 [ 1229.094783][T17123] __slab_free+0x2e6/0x330 [ 1229.094798][T17123] qlist_free_all+0x97/0x100 [ 1229.094831][T17123] kasan_quarantine_reduce+0x148/0x160 [ 1229.094849][T17123] __kasan_slab_alloc+0x22/0x80 [ 1229.094869][T17123] __kmalloc_cache_noprof+0x188/0x6b0 [ 1229.094888][T17123] usb_control_msg+0x73/0x3e0 [ 1229.094970][T17123] hub_ext_port_status+0x116/0x820 [ 1229.094983][T17123] hub_port_reset+0x768/0x1820 [ 1229.094993][T17123] hub_port_init+0xf50/0x28c0 [ 1229.095002][T17123] hub_event+0x25d3/0x4f60 [ 1229.095010][T17123] process_scheduled_works+0xaec/0x17a0 [ 1229.095018][T17123] worker_thread+0xda6/0x1360 [ 1229.095027][T17123] kthread+0x726/0x8b0 [ 1229.095038][T17123] ret_from_fork+0x51b/0xa40 [ 1229.095047][T17123] ret_from_fork_asm+0x1a/0x30 [ 1229.095062][T17123] [ 1229.095064][T17123] Memory state around the buggy address: [ 1229.095070][T17123] ffff88805750c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1229.095077][T17123] ffff88805750c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1229.095083][T17123] >ffff88805750c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1229.095092][T17123] ^ [ 1229.095097][T17123] ffff88805750c180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1229.095103][T17123] ffff88805750c200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1229.095108][T17123] ================================================================== [ 1229.095125][T17123] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1229.095139][T17123] CPU: 1 UID: 0 PID: 17123 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1229.095158][T17123] Tainted: [L]=SOFTLOCKUP [ 1229.095162][T17123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1229.095169][T17123] Workqueue: netns cleanup_net [ 1229.095186][T17123] Call Trace: [ 1229.095191][T17123] [ 1229.095196][T17123] vpanic+0x1e0/0x670 [ 1229.095212][T17123] panic+0xc5/0xd0 [ 1229.095225][T17123] ? __pfx_panic+0x10/0x10 [ 1229.095239][T17123] ? preempt_schedule_thunk+0x16/0x30 [ 1229.095251][T17123] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1229.095267][T17123] check_panic_on_warn+0x89/0xb0 [ 1229.095288][T17123] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1229.095302][T17123] end_report+0x6f/0x140 [ 1229.095316][T17123] kasan_report+0x128/0x150 [ 1229.095331][T17123] ? nf_hook_entry_head+0x1f1/0x2c0 [ 1229.095347][T17123] nf_hook_entry_head+0x1f1/0x2c0 [ 1229.095362][T17123] __nf_unregister_net_hook+0x74/0x6f0 [ 1229.095378][T17123] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 1229.095393][T17123] nf_tables_pre_exit_net+0x64a/0x900 [ 1229.095405][T17123] ops_undo_list+0x187/0x940 [ 1229.095420][T17123] ? rt_spin_unlock+0x170/0x200 [ 1229.095432][T17123] ? __pfx_ops_undo_list+0x10/0x10 [ 1229.095446][T17123] ? rt_spin_unlock+0x14f/0x200 [ 1229.095457][T17123] ? rt_spin_unlock+0x160/0x200 [ 1229.095468][T17123] cleanup_net+0x4e5/0x7b0 [ 1229.095483][T17123] ? __pfx_cleanup_net+0x10/0x10 [ 1229.095499][T17123] ? process_scheduled_works+0xa0f/0x17a0 [ 1229.095508][T17123] ? process_scheduled_works+0xa0f/0x17a0 [ 1229.095518][T17123] process_scheduled_works+0xaec/0x17a0 [ 1229.095533][T17123] ? __pfx_process_scheduled_works+0x10/0x10 [ 1229.095542][T17123] ? do_raw_spin_lock+0x12b/0x2f0 [ 1229.095558][T17123] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1229.095572][T17123] ? schedule+0x90/0x360 [ 1229.095586][T17123] worker_thread+0xda6/0x1360 [ 1229.095599][T17123] ? __kthread_parkme+0x19c/0x1f0 [ 1229.095611][T17123] kthread+0x726/0x8b0 [ 1229.095623][T17123] ? __pfx_worker_thread+0x10/0x10 [ 1229.095633][T17123] ? __pfx_kthread+0x10/0x10 [ 1229.095645][T17123] ? rt_spin_unlock+0x14f/0x200 [ 1229.095656][T17123] ? rt_spin_unlock+0x160/0x200 [ 1229.095666][T17123] ? __pfx_kthread+0x10/0x10 [ 1229.095678][T17123] ret_from_fork+0x51b/0xa40 [ 1229.095689][T17123] ? __pfx_ret_from_fork+0x10/0x10 [ 1229.095699][T17123] ? __switch_to+0xc82/0x1410 [ 1229.095715][T17123] ? __pfx_kthread+0x10/0x10 [ 1229.095727][T17123] ret_from_fork_asm+0x1a/0x30 [ 1229.095745][T17123] [ 1229.096163][T17123] Kernel Offset: disabled