last executing test programs: 25.768271891s ago: executing program 1 (id=3540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) gettid() lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum, @struct={0x0, 0x0, 0x0, 0x4, 0x1, 0xffff}]}}, 0x0, 0x32}, 0x28) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22.601235833s ago: executing program 4 (id=3543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00), 0x0, 0xf00) 21.632937684s ago: executing program 1 (id=3544): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r1 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r0, 0x8006, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 20.497065227s ago: executing program 1 (id=3547): socket(0x200000000000011, 0x2, 0x3c644) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0xa, &(0x7f0000000780)}, 0x20004850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='sou\nu1|O\xf2\xf6k#\xd8\xb3J\\e', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 17.244121922s ago: executing program 4 (id=3550): socket(0x2, 0xa, 0x300) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15.705475539s ago: executing program 4 (id=3554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00), 0x0, 0xf00) 13.640205943s ago: executing program 4 (id=3556): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x71}, 0x20048808) syz_fuse_handle_req(r0, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1122070}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r3, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000ae4000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x3000, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 12.157127931s ago: executing program 0 (id=3558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x5}, 0x94) fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$mice(0xffffffffffffff9c, 0x0, 0x41) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03000500000000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 10.764381932s ago: executing program 3 (id=3559): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x100000000) r4 = inotify_init() userfaultfd(0x80001) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r5, 0x5441, 0x9) ioctl$TCSETAW(r5, 0x5407, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x9b}) close_range(r6, 0xffffffffffffffff, 0x0) 10.634167874s ago: executing program 0 (id=3560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc4b13b6eaa22235f, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001100)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x6}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) 10.57248777s ago: executing program 4 (id=3561): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.72646196s ago: executing program 3 (id=3562): socket$kcm(0x11, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x8ace0a3f86283e7d, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x10e, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f0000000ac0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/106, 0x6a, 0x1, 0x35}, @fd, @fda={0x66646185, 0x5, 0x2, 0x3}}, 0x0}}, @clear_death={0x400c630f, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@fda={0x66646185, 0x3, 0x0, 0x24}, @fda={0x66646185, 0x8, 0x0, 0x6}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x2e}}, &(0x7f0000000400)={0x0, 0x20, 0x40}}}, @free_buffer], 0x0, 0x0, 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 9.477895578s ago: executing program 2 (id=3563): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = dup(0xffffffffffffffff) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000029c0), 0x4, 0x0) write$tcp_mem(r0, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x66d060ca, 0x2c}, 0x48) 8.771352806s ago: executing program 3 (id=3564): socket(0x2, 0xa, 0x300) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f406", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.425781574s ago: executing program 0 (id=3565): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="67a9fde50000000028001280"], 0x3}}, 0x8008810) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f", 0x7) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 7.871170648s ago: executing program 2 (id=3566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_gettime(0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000240)="48b12300", 0x8, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 7.488571365s ago: executing program 3 (id=3567): socket$inet6(0xa, 0x3, 0x7) syz_pidfd_open(0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0x8, 0x7}, {0x9, 0xa6}, 0x6, 0x5, 0x9}) read(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="070d000001a0010014000300776c616e3100000000100000000000000a00010001"], 0x40}}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x25, &(0x7f00000000c0), 0x4) setsockopt$inet6_int(r4, 0x29, 0x8, 0x0, 0x0) 6.817493403s ago: executing program 0 (id=3568): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) io_uring_setup(0x868, &(0x7f0000000080)={0x0, 0x8000ffc, 0x1001, 0x2, 0x8004}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fc0500000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x284}) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x235}], 0x20000000000001a5, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.673447679s ago: executing program 2 (id=3569): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum, @struct={0x0, 0x0, 0x0, 0x4, 0x1, 0xffff}]}}, 0x0, 0x32}, 0x28) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) getpid() 6.413192133s ago: executing program 1 (id=3570): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0xfffffffffffffea8) socket$inet6(0xa, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'mpc624\x00', [0x5c22, 0x3, 0x1, 0x0, 0x3d2560dd, 0x7, 0xc, 0x7, 0x0, 0x2, 0x6b5f, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x63, 0xfffffffc, 0x7, 0x9, 0x8c, 0x1007fff, 0x0, 0xd, 0x8004, 0x8, 0x0, 0x8, 0x8, 0x8]}) 5.394364414s ago: executing program 0 (id=3571): keyctl$reject(0x13, 0x0, 0x800, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) connect$phonet_pipe(r4, &(0x7f0000000080)={0x23, 0x4, 0x3, 0x3}, 0x10) 5.29312603s ago: executing program 2 (id=3572): openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x40000) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xd5) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000070601010000000000000000070000010500010007000000080006400000cfe30900020073797a31000000009d31ebc7be39fe8f28b59845f11e63fe2ca08e1ef8281ce24095805ed88318ff311984cae5c6a5519b008c5ba707fda1cd820d80f3efcefc6cee5abaea40ff60c53b1b72c7e717b4d1fe0923b9862ca8cbeb6b8787864ae8cce7263541fe39ae231ec9df599f09dc4ab61e494f7edaf13ae5f127b493e140b42fd6ac5b65fb"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) 3.67886514s ago: executing program 2 (id=3573): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa3, 0xfffffffffffffff7, 0x40, 0xfffffffffffffffb}}, @nested_load_code={0x12e, 0x5b, {0x2, "b9800000c00f3235008000000f30420f01f836410f23b4410f01c9431026c4a17e121dfe870000460f013bc4c33d426e071d66ba2000b87d1d8e71ef2e2666410f6f12"}}], 0x93}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@wr_crn={0x46, 0x20, {0x4, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @rdmsr={0x32, 0x18, {0x181}}, @code={0xa, 0x53, {"67735a2e0f019ee0000000650f01cfab66ba420066b89b1566ef4d0fc79ee388ef1966450f38803266baf80cb8947a2c89ef66bafc0ced40e80018000043d07c7800"}}, @out_dx={0xaa, 0x28, {0x5b77, 0x5, 0x8}}, @cpuid={0x14, 0x18, {0x10001, 0x9}}, @rdmsr={0x32, 0x18, {0xb7d}}, @rdmsr={0x32, 0x18, {0x2f0}}, @out_dx={0xaa, 0x28, {0xe6cb, 0x3, 0x80000000004}}, @code={0xa, 0x46, {"26640f35360f060f2084b9f70b00000f32420fc75d00c461fc298f0a630000c462c3f521c40299ac66410f01c9b8010000000f01d9"}}, @rdmsr={0x32, 0x18, {0x966}}, @nested_create_vm={0x12d, 0x18, 0x1}, @in_dx={0x82, 0x20, {0xbde0, 0x7}}], 0x1d9}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.982822478s ago: executing program 0 (id=3574): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}], 0x1, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5201000052395310410e5750ad060102030e0902120001000000000904"], 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) 1.902051274s ago: executing program 3 (id=3575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() socket$igmp(0x2, 0x3, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum, @struct={0x0, 0x0, 0x0, 0x4, 0x1, 0xffff}]}}, 0x0, 0x32}, 0x28) timer_settime(0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getpid() 1.711744923s ago: executing program 1 (id=3576): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = dup(0xffffffffffffffff) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000029c0), 0x4, 0x0) write$tcp_mem(r0, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x66d060ca, 0x2c}, 0x48) 226.597055ms ago: executing program 2 (id=3577): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa3, 0xfffffffffffffff7, 0x40, 0xfffffffffffffffb}}], 0x38}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x2, 0x48, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0xc4, 0xd, 0x8d, 0x8, 0x5ac, 0x22b, 0x8e39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x3, 0x9, 0x30, 0x2, "", [{{0x9, 0x4, 0x9b, 0xf, 0x4, 0x3, 0xc, 0x2, 0x6, [], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x8, 0x3, 0x2}}, {{0x9, 0x5, 0x87, 0x3, 0x400, 0x3, 0x6, 0xe}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x7, 0x1, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x63, 0xd2}}]}}]}}]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@wr_crn={0x46, 0x20, {0x4, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @rdmsr={0x32, 0x18, {0x181}}, @code={0xa, 0x53, {"67735a2e0f019ee0000000650f01cfab66ba420066b89b1566ef4d0fc79ee388ef1966450f38803266baf80cb8947a2c89ef66bafc0ced40e80018000043d07c7800"}}, @out_dx={0xaa, 0x28, {0x5b77, 0x5, 0x8}}, @cpuid={0x14, 0x18, {0x10001, 0x9}}, @rdmsr={0x32, 0x18, {0xb7d}}, @rdmsr={0x32, 0x18, {0x2f0}}, @out_dx={0xaa, 0x28, {0xe6cb, 0x3, 0x80000000004}}, @code={0xa, 0x46, {"26640f35360f060f2084b9f70b00000f32420fc75d00c461fc298f0a630000c462c3f521c40299ac66410f01c9b8010000000f01d9"}}, @rdmsr={0x32, 0x18, {0x966}}, @rdmsr={0x32, 0x18, {0x4000009e}}, @nested_create_vm={0x12d, 0x18, 0x1}, @in_dx={0x82, 0x20, {0xbde0, 0x7}}], 0x1f1}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.32564ms ago: executing program 1 (id=3578): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308", 0xed}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {0x0}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded0", 0xab}, {&(0x7f0000001300)}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 3 (id=3579): r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000000140)={&(0x7f0000000300)=[0x4, 0x6, 0x1, 0x9, 0x5, 0x401, 0x200, 0x4, 0x0, 0xcb0d, 0x770f, 0xff, 0x4, 0x81, 0x2, 0x5, 0x1d, 0x0, 0x78, 0xb, 0x5, 0x6, 0x8, 0x9, 0x69, 0x5, 0xfffffff4, 0x7fff, 0x8, 0xe00, 0x0, 0x3, 0x10000, 0x7f, 0x0, 0xfffffff4, 0x15a0, 0xffffff7f, 0x8, 0x5d, 0x800, 0xf94, 0xff, 0x8, 0x2, 0xfffffff9, 0xe, 0xffffbb46, 0x7, 0x4, 0x1, 0x4, 0x5, 0x1000, 0x6, 0x3, 0x1, 0x8, 0x80, 0xc, 0x7, 0x8, 0x2, 0x1, 0x3, 0x1800000, 0x3, 0x5, 0x400, 0x5, 0x9, 0x1, 0x8, 0x2, 0x1000, 0x9, 0x3, 0x6d, 0xfffffffc, 0x1ff, 0xffffffc0, 0x0, 0x5, 0x8, 0x2008, 0x2, 0xf0, 0x5, 0x7, 0x6, 0x4469, 0xb, 0xfffffb4c, 0x80000001, 0xe5f6, 0x0, 0x4, 0xd4, 0xffffffff, 0x200000, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8f, 0x7, 0x6, 0x5, 0x4, 0x6d03, 0x8001, 0x9, 0x3, 0x0, 0x8e7a, 0x2, 0x8, 0xfffffff1, 0x5, 0x1000000, 0xfff3, 0x4, 0x1, 0x80000000, 0x3ff, 0x81, 0x100, 0x8, 0xfffffffb, 0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x3e, 0x43, 0xffff6a70, 0xc, 0xa092, 0x8, 0x877, 0x1, 0x3, 0x800, 0x5, 0x0, 0x8001, 0x48c, 0x7, 0x2, 0x13, 0x3, 0x3, 0x9, 0x0, 0x70000000, 0x2, 0x8, 0x2, 0x1b1c, 0x8, 0xb5, 0x8, 0x401, 0xfff, 0x5, 0x1, 0xa008, 0x9, 0x8, 0xe4, 0x898, 0x7, 0x81, 0x0, 0x1ff, 0x5, 0x80000000, 0x1, 0x8, 0x1, 0x8, 0x4251, 0x6, 0x4, 0x6, 0x4008, 0x200, 0x5, 0x73f7, 0x6, 0x8001, 0x80, 0xd5, 0x6, 0x800000, 0x40, 0xfffffe03, 0x2, 0x80000001, 0x7f, 0xfffffffa, 0xff, 0x4, 0x4b031fcb, 0x7, 0xf3, 0x40, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0x0, 0x5, 0x6, 0x3, 0x9, 0xfd, 0xd, 0x1000, 0x94, 0xd4f, 0x3, 0xfffffeff, 0xba7, 0x400, 0x4, 0x0, 0x80000001, 0x7, 0x10001, 0xfff, 0x9, 0x2, 0x9, 0x1, 0xfffffff9, 0x6, 0x62, 0x668, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x49, 0x2, 0x5f4, 0x3fd, 0xfffffffe, 0x4, 0x6, 0x9, 0x0, 0x5, 0x4, 0x6, 0x3, 0x1ff, 0xc3f6, 0x7, 0xd8b8, 0xfffffffe, 0xff, 0x8000, 0x7, 0x100, 0x43, 0x2, 0xc7b, 0xe2a0, 0x5, 0x6, 0x81, 0x6, 0x0, 0x3, 0x75c, 0x1, 0x10000, 0x3f, 0x24f7, 0x5, 0x9, 0xd8c, 0x7ffffffd, 0x7, 0xfffff6d2, 0x0, 0x0, 0x3, 0x9, 0x800, 0x5, 0x9, 0x80000000, 0x1, 0x9dcb, 0x8, 0x4, 0x8001, 0x9, 0x7, 0x6, 0x7, 0x81, 0x7ff, 0x0, 0x7, 0x1c00000, 0x5, 0x10, 0x2, 0x1, 0x4, 0xac, 0x8001, 0xb2, 0x4, 0x84f4, 0xf, 0x0, 0x6, 0x6, 0x3ef, 0x7, 0x101, 0x3, 0x4, 0xa, 0x7f, 0x5, 0x2, 0x7ff, 0xffff094f, 0xb, 0x80, 0x6, 0xfffffffd, 0x63, 0xd, 0x7, 0x9, 0x200, 0x9, 0x7, 0x8, 0xa, 0x10001, 0x8, 0xa21, 0x2, 0x9, 0x7, 0xe207, 0xa4, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x1, 0xd, 0x1, 0xf, 0x1, 0x26d1, 0x9, 0x8b000, 0x6, 0x6, 0x5, 0x80000000, 0xfffffffb, 0x8, 0x7, 0xfffffff9, 0x7, 0x4, 0x2, 0x0, 0x80, 0xffff6c99, 0x5, 0x6bed988b, 0x7f, 0x6, 0xffffff7f, 0x7, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x9, 0x40, 0x0, 0x5, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x9, 0x53fa, 0x0, 0x53, 0x9465, 0x9, 0x3, 0x4, 0x36c9, 0x3ff, 0x3, 0x4, 0x8, 0x68, 0x2, 0x81, 0x8, 0xcd94, 0x75e, 0x1000, 0x9, 0x6, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x7, 0x0, 0x6, 0x80000001, 0x731, 0x6, 0x4, 0x8, 0x3, 0x9, 0x80000001, 0x1, 0xfff, 0x4, 0x6, 0x4, 0x4, 0x2, 0x9, 0x6f9, 0x3, 0x8, 0x475e0e15, 0x80000000, 0x5, 0x4, 0xf3e, 0x9, 0x5, 0x0, 0x3, 0xad64, 0xfffffff9, 0x2, 0x3, 0x10000, 0x4, 0xff, 0x400, 0x7f, 0x7f, 0x7, 0x800, 0x40, 0x7, 0x6, 0x8, 0x1a, 0x0, 0x1000, 0xff, 0x10001, 0x8, 0x2, 0xffff, 0x8, 0x100, 0x100, 0x9, 0x9, 0x37, 0x28, 0xfffffff9, 0x7fffffff, 0x4, 0x83b9, 0xb, 0x2, 0x85f2, 0xd7f, 0x7, 0x3ff, 0x1000000, 0x2387c5a4, 0x3, 0x8, 0xbc4e, 0xffff, 0x1, 0x2, 0x408, 0x5, 0x0, 0x5, 0x6, 0x2, 0x6, 0x0, 0x51, 0x5, 0x3, 0x2, 0xfaf0, 0x4a46, 0x4, 0x10001, 0x9, 0x4921bb4d, 0x5c, 0x6, 0x3, 0x7, 0x7fff, 0x80, 0x3, 0x29dc2fdf, 0x200, 0x1, 0x9, 0xd2c, 0x8, 0x3, 0x3, 0x66f, 0x5, 0x4bb6, 0x258d, 0x101, 0x10000, 0x662f, 0x401, 0x5, 0x4, 0x4, 0xd3f6, 0x4, 0x3, 0x4, 0x1, 0xc, 0xbf2, 0xff, 0x7, 0x8002, 0x9, 0x3ff, 0x80000000, 0x9, 0x9, 0x9, 0xf01a, 0x2, 0x1, 0x9, 0x100, 0x0, 0xffffffff, 0x80000001, 0x3, 0x3, 0x6, 0x240000, 0x0, 0x1, 0xfffffffa, 0x45, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x8a8, 0xa, 0x9, 0x0, 0x7, 0x9, 0x583, 0x8, 0x8, 0x1, 0x10002, 0x9, 0xffffff81, 0x6, 0x400, 0x227, 0x6, 0x8, 0xc442, 0x0, 0x3, 0x3ff, 0x5, 0x82a, 0x4, 0x72d2, 0x7, 0x5, 0x7, 0x4, 0x8, 0x8, 0xea1, 0x0, 0x566, 0x0, 0xfffffffe, 0x7, 0x737, 0x4, 0x6, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x9, 0x7, 0x5, 0x3, 0x9, 0xbcea, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x3, 0x7fff, 0x8, 0x3, 0x4, 0x9, 0x101, 0x1, 0x8, 0x1, 0x6, 0x6, 0x9, 0x7f800, 0x9, 0xd8a8, 0x3, 0x9, 0xfffffffb, 0x8, 0xd0f, 0x7, 0x8, 0x4, 0x1, 0x7, 0x7, 0x8e, 0x5, 0x0, 0x7, 0xfffffffe, 0x81, 0xad3, 0x4, 0x80000001, 0x7, 0x8, 0x80, 0x8, 0x3ff, 0x6, 0xce1, 0x8, 0x80000001, 0xe, 0x1, 0x400002, 0x8000, 0x4, 0x3, 0xb, 0x2, 0x2, 0x6, 0x1, 0xe30, 0x3ff, 0xa7a, 0x8, 0x8, 0x9, 0x2, 0x401, 0x9, 0x9659, 0x400, 0xa83, 0x6, 0xfffffffe, 0x5082, 0x5, 0x6e82, 0xffff, 0x9, 0x7ff, 0x200800, 0xfffffffb, 0xfffffffb, 0x2, 0xd, 0x1, 0xffffff46, 0x7, 0x8000, 0x5d, 0x70d, 0x7fff, 0x3, 0x4, 0x6, 0x7, 0xa6a0, 0x7, 0x9, 0x1, 0xe8b0c95b, 0x9, 0x3, 0x8a2, 0x4, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4, 0x4, 0x5, 0xfffffff9, 0xbffeffff, 0xc, 0xfffffff7, 0x1ff, 0x8, 0x7ffc, 0x9, 0x3, 0xfffffff8, 0x1, 0x434, 0x8, 0x3ab, 0x8, 0x6, 0x0, 0x7, 0x4389, 0x7, 0x800, 0x400, 0x4, 0x0, 0x3, 0x5, 0xc94, 0x9, 0x4, 0x0, 0x4, 0x2, 0x401, 0x6, 0x401, 0x8, 0x1, 0xb, 0xe664, 0x0, 0xc, 0x96, 0x7, 0x101, 0xd, 0x2, 0x6, 0xdc, 0xf, 0x1000, 0x8, 0x7, 0x0, 0x0, 0x10001, 0x9, 0x7, 0x0, 0x40000fff, 0xf9, 0xc8, 0x2400, 0x1, 0x400, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0xfffffffb, 0x6b59b47c, 0x2, 0x4, 0xd64, 0x8, 0xc, 0x0, 0x7, 0x0, 0x9, 0x4, 0x80, 0x3, 0x6, 0x10, 0xc, 0x7, 0x8, 0x8, 0x8000, 0x6, 0x979, 0x385, 0xa0, 0x5, 0x8, 0x3d72e35e, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x1a7, 0x7, 0x8, 0x0, 0x3, 0xe83, 0x3, 0x1, 0x3, 0x0, 0x2, 0x9973, 0x3, 0x4, 0x40, 0x40, 0x4, 0x5, 0x412, 0x4, 0x2, 0x5, 0xb4, 0x1ff, 0xc77c0000, 0xffff2c2c, 0x9, 0x8000, 0x47, 0x9, 0xffffff97, 0xffff, 0x3, 0xffffffc0, 0x10001, 0x2, 0xfffffe01, 0x7fff, 0x78, 0x8, 0x0, 0xf, 0x40, 0x8, 0xed, 0x3, 0x9, 0x8, 0x0, 0x1, 0x1, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x2, 0xd, 0x2, 0x6, 0x101, 0x4, 0x6, 0xa6d2, 0xd, 0x8000, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x7, 0xffffff00, 0x7, 0x7, 0x40, 0x3, 0x101, 0x20000000, 0xdc000000, 0x2, 0xfffffffb, 0x401, 0x6, 0x1, 0x9, 0x4, 0xffffffa2, 0x5, 0x5, 0x9015, 0x6, 0x5, 0x5, 0x14b, 0x0, 0x336, 0xcf, 0xd, 0x5, 0xbbe7, 0xa8eb, 0xd0, 0xb, 0x800, 0x2b18, 0x3ec3, 0x0, 0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x0, 0x5, 0xff, 0xc, 0x8, 0x2, 0x2, 0x7, 0x8, 0x10, 0xb46, 0x8, 0x1, 0x5dc60e00, 0x4, 0x9, 0x8, 0xd2, 0x9, 0xffff4a7a, 0x88f, 0xbd, 0x4, 0x6, 0x5, 0x8, 0x9, 0xffffffff, 0xda, 0xe, 0x8001000, 0x7b, 0x9, 0x10001, 0x6, 0x136, 0x36, 0x3a12, 0x9, 0x8, 0x4, 0x8], 0x1, 0x400, 0x3ff}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): e number 42 [ 827.065444][ T994] usb 1-1: USB disconnect, device number 33 [ 827.152204][T12890] udevd[12890]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 827.208131][ T37] audit: type=1326 audit(1774422937.957:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13669 comm="syz.2.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3636c799 code=0x7ffc0000 [ 827.208194][ T37] audit: type=1326 audit(1774422937.957:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13669 comm="syz.2.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8c3636c799 code=0x7ffc0000 [ 827.208220][ T37] audit: type=1326 audit(1774422937.957:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13669 comm="syz.2.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3636c799 code=0x7ffc0000 [ 827.225766][ T37] audit: type=1326 audit(1774422937.977:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13669 comm="syz.2.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3636c799 code=0x7ffc0000 [ 827.254138][ T37] audit: type=1326 audit(1774422937.997:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13669 comm="syz.2.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8c3636c799 code=0x7ffc0000 [ 828.636949][T10675] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 828.914248][T10675] usb 3-1: Using ep0 maxpacket: 32 [ 828.954302][T10675] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 828.954335][T10675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.954354][T10675] usb 3-1: Product: syz [ 828.954366][T10675] usb 3-1: Manufacturer: syz [ 828.954379][T10675] usb 3-1: SerialNumber: syz [ 829.117669][T10675] usb 3-1: config 0 descriptor?? [ 829.241094][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2441'. [ 829.352325][T10675] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 045 [ 829.995004][ T9] usb 4-1: USB disconnect, device number 72 [ 831.431491][T13707] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 832.448514][ T994] usb 3-1: USB disconnect, device number 45 [ 832.514180][T10675] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 832.704552][T10675] usb 4-1: Using ep0 maxpacket: 16 [ 832.894393][T10675] usb 4-1: config 0 has no interfaces? [ 832.899878][T10675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 832.899898][T10675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 832.899909][T10675] usb 4-1: Manufacturer: syz [ 832.903593][T10675] usb 4-1: config 0 descriptor?? [ 833.245465][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 833.844133][T10675] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 833.994136][T10675] usb 5-1: Using ep0 maxpacket: 8 [ 834.012319][T10675] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.012340][T10675] usb 5-1: config 0 has no interfaces? [ 834.035332][T10675] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.035359][T10675] usb 5-1: config 0 has no interfaces? [ 834.039254][T10675] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.039270][T10675] usb 5-1: config 0 has no interfaces? [ 834.041552][T10675] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.041567][T10675] usb 5-1: config 0 has no interfaces? [ 834.041586][T10675] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 834.041600][T10675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.112789][T10675] usb 5-1: config 0 descriptor?? [ 834.367540][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 836.605604][ T37] audit: type=1326 audit(1774422947.357:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3636c799 code=0x7ffc0000 [ 836.624292][ T37] audit: type=1326 audit(1774422947.357:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3636c799 code=0x7ffc0000 [ 836.680621][ T37] audit: type=1326 audit(1774422947.427:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8c3636c799 code=0x7ffc0000 [ 836.680677][ T37] audit: type=1326 audit(1774422947.427:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3636c799 code=0x7ffc0000 [ 836.680717][ T37] audit: type=1326 audit(1774422947.427:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3636c799 code=0x7ffc0000 [ 836.876255][ T10] usb 4-1: USB disconnect, device number 73 [ 837.669534][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'. [ 840.499601][ T994] usb 5-1: USB disconnect, device number 43 [ 840.669471][ T37] audit: type=1326 audit(1774422951.417:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13793 comm="syz.4.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 840.702406][ T37] audit: type=1326 audit(1774422951.417:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13793 comm="syz.4.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 840.728752][ T37] audit: type=1326 audit(1774422951.447:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13793 comm="syz.4.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 840.764285][ T37] audit: type=1326 audit(1774422951.477:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13793 comm="syz.4.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 840.774239][ T37] audit: type=1326 audit(1774422951.517:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13793 comm="syz.4.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 841.134167][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 841.284158][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 841.369028][ T5785] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 841.492332][ T9] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 841.492366][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.492387][ T9] usb 5-1: Product: syz [ 841.492402][ T9] usb 5-1: Manufacturer: syz [ 841.492417][ T9] usb 5-1: SerialNumber: syz [ 841.520742][ T9] usb 5-1: config 0 descriptor?? [ 841.664187][ T5785] usb 1-1: Using ep0 maxpacket: 16 [ 841.698584][ T5785] usb 1-1: config 0 has no interfaces? [ 841.701131][ T5785] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 841.701224][ T5785] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 841.701246][ T5785] usb 1-1: Manufacturer: syz [ 841.765343][ T5785] usb 1-1: config 0 descriptor?? [ 841.869528][ T9] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 044 [ 842.984129][ T994] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 843.103561][ T37] audit: type=1326 audit(1774422953.847:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13793 comm="syz.4.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 843.103899][ T37] audit: type=1326 audit(1774422953.847:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13793 comm="syz.4.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 843.254161][ T994] usb 2-1: Using ep0 maxpacket: 32 [ 843.257272][ T994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 843.257307][ T994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 843.293442][ T994] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 843.293474][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.293495][ T994] usb 2-1: Product: syz [ 843.293510][ T994] usb 2-1: Manufacturer: syz [ 843.293523][ T994] usb 2-1: SerialNumber: syz [ 843.335200][ T994] usb 2-1: config 0 descriptor?? [ 843.361939][ T994] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32 [ 843.391788][ T994] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 843.460647][ T994] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 843.580313][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2478'. [ 843.590832][ T9] usb 2-1: USB disconnect, device number 43 [ 843.849259][T13820] ±ÿþ€: renamed from team_slave_1 (while UP) [ 844.198339][ T994] usb 5-1: USB disconnect, device number 44 [ 844.471945][T13824] syzkaller0: entered promiscuous mode [ 844.471981][T13824] syzkaller0: entered allmulticast mode [ 844.493072][ T5785] usb 1-1: USB disconnect, device number 34 [ 851.327013][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'. [ 851.354495][T13859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.396572][ T37] audit: type=1326 audit(1774422962.147:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13856 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 851.396629][ T37] audit: type=1326 audit(1774422962.147:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13856 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 851.396675][ T37] audit: type=1326 audit(1774422962.147:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13856 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 851.396989][ T37] audit: type=1326 audit(1774422962.147:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13856 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 851.397422][ T37] audit: type=1326 audit(1774422962.147:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13856 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 851.532675][T13859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.014164][ T5785] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 852.164166][ T5785] usb 2-1: Using ep0 maxpacket: 32 [ 852.310832][ T5785] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 852.310864][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.310882][ T5785] usb 2-1: Product: syz [ 852.310896][ T5785] usb 2-1: Manufacturer: syz [ 852.310910][ T5785] usb 2-1: SerialNumber: syz [ 852.474233][ T5785] usb 2-1: config 0 descriptor?? [ 852.738785][ T5785] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 044 [ 853.770126][ T37] audit: type=1326 audit(1774422964.512:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13856 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 853.770433][ T37] audit: type=1326 audit(1774422964.512:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13856 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 855.062070][T10675] usb 2-1: USB disconnect, device number 44 [ 860.271246][ T37] audit: type=1326 audit(1774422971.012:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13928 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ec799 code=0x7ffc0000 [ 860.271315][ T37] audit: type=1326 audit(1774422971.012:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13928 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7faba38ec799 code=0x7ffc0000 [ 860.271358][ T37] audit: type=1326 audit(1774422971.012:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13928 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ec799 code=0x7ffc0000 [ 860.271387][ T37] audit: type=1326 audit(1774422971.012:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13928 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7faba38ec799 code=0x7ffc0000 [ 860.694207][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 861.774147][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 861.812587][ T10] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 861.812609][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.812621][ T10] usb 4-1: Product: syz [ 861.812629][ T10] usb 4-1: Manufacturer: syz [ 861.812637][ T10] usb 4-1: SerialNumber: syz [ 861.837674][ T10] usb 4-1: config 0 descriptor?? [ 862.102713][ T10] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 074 [ 862.651180][ T37] audit: type=1326 audit(1774422973.389:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13928 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ec799 code=0x7ffc0000 [ 862.654147][ T37] audit: type=1326 audit(1774422973.389:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13928 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba38ec799 code=0x7ffc0000 [ 863.732390][ T5950] usb 4-1: USB disconnect, device number 74 [ 863.767902][T13960] openvswitch: netlink: IP tunnel dst address not specified [ 865.764145][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 865.924218][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 865.926549][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 865.926587][ T10] usb 3-1: can't read configurations, error -61 [ 866.064154][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 866.224202][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 866.227732][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 866.227781][ T10] usb 3-1: can't read configurations, error -61 [ 866.228445][ T10] usb usb3-port1: attempt power cycle [ 866.574231][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 866.595160][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 866.597831][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 866.597865][ T10] usb 3-1: can't read configurations, error -61 [ 866.744233][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 866.766642][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 866.769314][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 866.769336][ T10] usb 3-1: can't read configurations, error -61 [ 866.770154][ T10] usb usb3-port1: unable to enumerate USB device [ 867.743968][ T5950] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 867.915239][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 867.984141][ T5950] usb 2-1: config 0 has no interfaces? [ 867.994705][ T5950] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 867.994736][ T5950] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 867.994754][ T5950] usb 2-1: Manufacturer: syz [ 868.006468][ T5950] usb 2-1: config 0 descriptor?? [ 870.174321][T10587] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 870.184030][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.184100][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.334190][T10587] usb 3-1: Using ep0 maxpacket: 32 [ 870.336578][T10587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 870.336599][T10587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 870.341215][T10587] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 870.341233][T10587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.341244][T10587] usb 3-1: Product: syz [ 870.341252][T10587] usb 3-1: Manufacturer: syz [ 870.341261][T10587] usb 3-1: SerialNumber: syz [ 870.404409][T10587] usb 3-1: config 0 descriptor?? [ 870.425665][T10587] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 870.430047][T10587] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 870.629575][T10587] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 870.656568][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2530'. [ 870.704716][T10587] usb 3-1: USB disconnect, device number 50 [ 871.310469][ T5785] usb 2-1: USB disconnect, device number 45 [ 871.728754][T14028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2536'. [ 873.485465][ T5950] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 873.744435][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 874.164543][ T5950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.164574][ T5950] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 874.166890][ T5950] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 874.166919][ T5950] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 874.166941][ T5950] usb 5-1: Manufacturer: syz [ 874.396377][ T5950] usb 5-1: config 0 descriptor?? [ 877.624376][T13118] Bluetooth: hci3: command 0x0406 tx timeout [ 878.284541][ T5785] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 878.544083][ T5785] usb 2-1: Using ep0 maxpacket: 16 [ 878.551117][ T5785] usb 2-1: config 0 has no interfaces? [ 878.555714][ T5785] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 878.555744][ T5785] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 878.555763][ T5785] usb 2-1: Manufacturer: syz [ 878.573083][ T5785] usb 2-1: config 0 descriptor?? [ 879.263506][T14088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.675839][T14092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 881.528740][ T5950] usb 5-1: USB disconnect, device number 45 [ 882.680072][ T5785] usb 2-1: USB disconnect, device number 46 [ 886.844127][ T5785] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 887.014137][ T5785] usb 1-1: Using ep0 maxpacket: 16 [ 887.074162][ T5785] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.074186][ T5785] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 887.077365][ T5785] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 887.077384][ T5785] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 887.077395][ T5785] usb 1-1: Manufacturer: syz [ 887.080566][ T5785] usb 1-1: config 0 descriptor?? [ 888.674301][ T5785] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 888.904146][ T5785] usb 4-1: Using ep0 maxpacket: 16 [ 888.911561][ T5785] usb 4-1: config 0 has no interfaces? [ 888.915616][ T5785] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 888.915644][ T5785] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 888.915662][ T5785] usb 4-1: Manufacturer: syz [ 889.011948][ T5785] usb 4-1: config 0 descriptor?? [ 894.276125][ T9] usb 4-1: USB disconnect, device number 75 [ 896.555270][ T9] usb 1-1: USB disconnect, device number 35 [ 898.665131][ T31] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 898.830621][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 898.833425][ T31] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 898.833513][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.902173][ T31] usb 4-1: config 0 descriptor?? [ 899.106163][ T31] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 899.111276][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 899.131413][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 899.131482][ T31] usb 4-1: media controller created [ 899.175930][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 899.520431][T14247] netlink: 'syz.4.2591': attribute type 6 has an invalid length. [ 899.528471][T14247] QAT: failed to copy from user cfg_data. [ 899.632062][ T31] DVB: Unable to find symbol dib7000p_attach() [ 899.632080][ T31] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 900.023141][ T31] rc_core: IR keymap rc-dib0700-rc5 not found [ 900.023214][ T31] Registered IR keymap rc-empty [ 900.025669][ T31] dvb-usb: could not initialize remote control. [ 900.025682][ T31] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 900.029849][ T31] usb 4-1: USB disconnect, device number 76 [ 900.933376][ T31] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 901.574551][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 901.804182][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 902.009163][ T9] usb 5-1: config 0 has no interfaces? [ 902.018752][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 902.018781][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 902.018800][ T9] usb 5-1: Manufacturer: syz [ 902.026051][ T9] usb 5-1: config 0 descriptor?? [ 903.004558][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 903.154197][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 903.157922][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 903.157955][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 903.162156][ T9] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 903.162174][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.162186][ T9] usb 2-1: Product: syz [ 903.162194][ T9] usb 2-1: Manufacturer: syz [ 903.162202][ T9] usb 2-1: SerialNumber: syz [ 903.248332][ T9] usb 2-1: config 0 descriptor?? [ 903.289476][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 903.342148][ T9] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 903.457919][ T9] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 903.645486][ T9] usb 2-1: USB disconnect, device number 47 [ 904.512273][T14293] netlink: 'syz.3.2603': attribute type 6 has an invalid length. [ 904.523224][T14293] QAT: failed to copy from user cfg_data. [ 904.723241][T14293] IPv6: sit1: Disabled Multicast RS [ 905.254164][ T994] usb 5-1: USB disconnect, device number 46 [ 905.535644][T14300] ±ÿþ€: renamed from team_slave_1 (while UP) [ 905.781140][T14302] loop5: detected capacity change from 0 to 7 [ 905.784413][T14302] Dev loop5: unable to read RDB block 7 [ 905.784468][T14302] loop5: unable to read partition table [ 905.784708][T14302] loop5: partition table beyond EOD, truncated [ 905.784729][T14302] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 906.294240][ T994] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 906.444137][ T994] usb 2-1: Using ep0 maxpacket: 32 [ 906.501933][ T994] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 906.501971][ T994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.558687][ T994] usb 2-1: config 0 descriptor?? [ 906.724115][ T31] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 906.778047][ T994] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 906.796481][ T994] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 906.797850][ T994] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 906.797934][ T994] usb 2-1: media controller created [ 906.874107][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 906.876212][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 906.876238][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 906.880389][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 906.880419][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.880439][ T31] usb 5-1: Product: syz [ 906.880454][ T31] usb 5-1: Manufacturer: syz [ 906.880468][ T31] usb 5-1: SerialNumber: syz [ 906.881360][ T994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 907.196379][ T31] usb 5-1: 0:2 : does not exist [ 907.233255][ T31] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 907.318404][ T994] DVB: Unable to find symbol dib7000p_attach() [ 907.318416][ T994] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 907.367616][ T31] usb 5-1: USB disconnect, device number 47 [ 907.514915][T14197] udevd[14197]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 907.614929][ T994] rc_core: IR keymap rc-dib0700-rc5 not found [ 907.614952][ T994] Registered IR keymap rc-empty [ 907.615292][ T994] dvb-usb: could not initialize remote control. [ 907.615304][ T994] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 907.663887][ T994] usb 2-1: USB disconnect, device number 48 [ 907.742561][ T994] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 908.445704][T14333] binder: 14325:14333 ioctl c0306201 0 returned -14 [ 910.246045][T14346] loop5: detected capacity change from 0 to 7 [ 910.256129][T14346] Dev loop5: unable to read RDB block 7 [ 910.256180][T14346] loop5: unable to read partition table [ 910.256408][T14346] loop5: partition table beyond EOD, truncated [ 910.256441][T14346] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 910.364197][ T994] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 910.544146][ T994] usb 4-1: Using ep0 maxpacket: 16 [ 910.550885][ T994] usb 4-1: config 0 has no interfaces? [ 910.552585][ T994] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 910.552604][ T994] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 910.552615][ T994] usb 4-1: Manufacturer: syz [ 910.611749][ T994] usb 4-1: config 0 descriptor?? [ 912.158430][T14369] netlink: 'syz.0.2626': attribute type 6 has an invalid length. [ 912.160853][T14369] QAT: failed to copy from user cfg_data. [ 912.244137][ T994] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 912.394078][ T994] usb 2-1: Using ep0 maxpacket: 16 [ 912.396487][ T994] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.396504][ T994] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 912.417886][ T994] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 912.417918][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.417939][ T994] usb 2-1: Product: syz [ 912.417964][ T994] usb 2-1: Manufacturer: syz [ 912.417979][ T994] usb 2-1: SerialNumber: syz [ 912.705224][ T994] usb 2-1: 0:2 : does not exist [ 912.743087][ T994] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 912.925158][ T994] usb 2-1: USB disconnect, device number 49 [ 913.059070][T14197] udevd[14197]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 914.857869][ T994] usb 4-1: USB disconnect, device number 77 [ 915.731378][ T994] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 916.287720][T14400] binder: 14394:14400 ioctl c0306201 0 returned -14 [ 916.454721][ T994] usb 1-1: Using ep0 maxpacket: 32 [ 917.128764][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 917.128801][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 917.165085][ T994] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 917.165120][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.165140][ T994] usb 1-1: Product: syz [ 917.165155][ T994] usb 1-1: Manufacturer: syz [ 917.165169][ T994] usb 1-1: SerialNumber: syz [ 917.206993][ T994] usb 1-1: config 0 descriptor?? [ 917.232292][ T994] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 917.262839][ T994] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 917.512531][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2633'. [ 917.740423][ T994] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 917.765450][ T994] usb 1-1: USB disconnect, device number 36 [ 918.817646][ T5785] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 919.184182][ T5785] usb 1-1: Using ep0 maxpacket: 16 [ 919.206281][ T5785] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.206300][ T5785] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 919.209254][ T5785] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 919.209273][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.209284][ T5785] usb 1-1: Product: syz [ 919.209292][ T5785] usb 1-1: Manufacturer: syz [ 919.209300][ T5785] usb 1-1: SerialNumber: syz [ 919.433445][ T5785] usb 1-1: 0:2 : does not exist [ 919.437542][ T5785] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 919.564713][ T5785] usb 1-1: USB disconnect, device number 37 [ 919.654366][T14197] udevd[14197]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.405006][T14431] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2642'. [ 920.544837][T14434] netlink: 'syz.4.2643': attribute type 6 has an invalid length. [ 920.548975][T14434] QAT: failed to copy from user cfg_data. [ 922.393798][T14451] binder: 14448:14451 ioctl c0306201 0 returned -14 [ 926.042548][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2654'. [ 927.454150][ T5785] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 927.607188][ T5785] usb 5-1: Using ep0 maxpacket: 16 [ 927.609900][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.609935][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.609978][ T5785] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 927.610001][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.642595][ T5785] usb 5-1: config 0 descriptor?? [ 928.909615][ T5785] usbhid 5-1:0.0: can't add hid device: -71 [ 928.909704][ T5785] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 928.957263][ T5785] usb 5-1: USB disconnect, device number 48 [ 930.302806][T14516] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2666'. [ 931.739613][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.739691][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.031645][T14551] openvswitch: netlink: IP tunnel dst address not specified [ 934.464152][ T5785] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 934.633723][ T5785] usb 5-1: Using ep0 maxpacket: 16 [ 934.642063][ T5785] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 934.642094][ T5785] usb 5-1: config 0 has no interface number 0 [ 934.642143][ T5785] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 934.642169][ T5785] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 934.642194][ T5785] usb 5-1: config 0 interface 41 has no altsetting 0 [ 934.655203][ T5785] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 934.655240][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.655252][ T5785] usb 5-1: Product: syz [ 934.655261][ T5785] usb 5-1: Manufacturer: syz [ 934.655268][ T5785] usb 5-1: SerialNumber: syz [ 934.670810][ T5785] usb 5-1: config 0 descriptor?? [ 934.671682][T14550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 934.671841][T14550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 934.879621][T14550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 934.879816][T14550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 935.289730][ T5785] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 935.452403][T14561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2677'. [ 936.875780][ T10] usb 5-1: USB disconnect, device number 49 [ 937.245147][T14578] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2680'. [ 940.454083][T10675] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 940.555743][T10587] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 940.604077][T10675] usb 5-1: Using ep0 maxpacket: 32 [ 940.606523][T10675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 940.606559][T10675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 940.609626][T10675] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 940.609655][T10675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.609675][T10675] usb 5-1: Product: syz [ 940.609691][T10675] usb 5-1: Manufacturer: syz [ 940.609705][T10675] usb 5-1: SerialNumber: syz [ 940.686506][T10675] usb 5-1: config 0 descriptor?? [ 940.704099][T10587] usb 1-1: Using ep0 maxpacket: 16 [ 940.706684][T10587] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 940.706711][T10587] usb 1-1: config 0 has no interface number 0 [ 940.706759][T10587] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 940.706785][T10587] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 940.706810][T10587] usb 1-1: config 0 interface 41 has no altsetting 0 [ 940.709058][T10675] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input38 [ 940.710659][T10587] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 940.710684][T10587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.710703][T10587] usb 1-1: Product: syz [ 940.710717][T10587] usb 1-1: Manufacturer: syz [ 940.710729][T10587] usb 1-1: SerialNumber: syz [ 940.822328][T10587] usb 1-1: config 0 descriptor?? [ 940.822415][T10675] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 940.823588][T14606] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 940.823794][T14606] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 940.956103][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'. [ 940.988223][T10675] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 941.023300][T10675] usb 5-1: USB disconnect, device number 50 [ 941.063567][T14606] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 941.063709][T14606] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 941.429801][T14614] openvswitch: netlink: IP tunnel dst address not specified [ 941.600272][T10587] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 943.116532][T14628] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2694'. [ 943.465067][T10675] usb 1-1: USB disconnect, device number 38 [ 947.322009][T14672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2706'. [ 949.302053][T14697] ±ÿþ€: renamed from team_slave_1 (while UP) [ 958.724678][ T37] audit: type=1326 audit(1774423069.469:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14777 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 958.724740][ T37] audit: type=1326 audit(1774423069.469:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14777 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 958.726710][ T37] audit: type=1326 audit(1774423069.469:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14777 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 958.726764][ T37] audit: type=1326 audit(1774423069.469:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14777 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 958.726812][ T37] audit: type=1326 audit(1774423069.469:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14777 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 958.726859][ T37] audit: type=1326 audit(1774423069.469:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14777 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 958.726905][ T37] audit: type=1326 audit(1774423069.469:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14777 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 958.726951][ T37] audit: type=1326 audit(1774423069.469:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14777 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 958.727642][ T37] audit: type=1326 audit(1774423069.469:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14777 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 958.727696][ T37] audit: type=1326 audit(1774423069.469:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14777 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 958.730861][T14787] netlink: 'syz.0.2736': attribute type 4 has an invalid length. [ 962.124825][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 962.289781][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 962.289820][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 962.289849][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 962.353716][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 962.353738][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.353750][ T10] usb 1-1: Product: syz [ 962.353758][ T10] usb 1-1: Manufacturer: syz [ 962.353766][ T10] usb 1-1: SerialNumber: syz [ 962.366938][ T10] usb 1-1: config 0 descriptor?? [ 962.503810][T14808] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 963.204137][T10587] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 963.356988][T10587] usb 4-1: Using ep0 maxpacket: 32 [ 963.360710][T10587] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 963.360739][T10587] usb 4-1: config 0 has no interface number 0 [ 963.360851][T10587] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 963.382837][T10587] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 963.391102][T10587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.391181][T10587] usb 4-1: Product: syz [ 963.391195][T10587] usb 4-1: Manufacturer: syz [ 963.391208][T10587] usb 4-1: SerialNumber: syz [ 963.435661][T10587] usb 4-1: config 0 descriptor?? [ 963.440743][T14827] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 963.544143][ T5785] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 963.665214][T14827] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 963.716875][ T5785] usb 3-1: Using ep0 maxpacket: 16 [ 963.757983][ T5785] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 963.758013][ T5785] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 963.758070][ T5785] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 963.758086][ T5785] usb 3-1: config 1 interface 0 has no altsetting 0 [ 963.763492][ T5785] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 963.763520][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.763531][ T5785] usb 3-1: Product: syz [ 963.763585][ T5785] usb 3-1: Manufacturer: syz [ 963.763594][ T5785] usb 3-1: SerialNumber: syz [ 964.037732][ T5785] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 964.367955][ T5785] usb 3-1: USB disconnect, device number 51 [ 964.440136][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 964.459176][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 964.460368][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 964.465297][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 964.466179][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 964.470108][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 964.471133][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 964.473178][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 964.474089][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 964.478085][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 966.714777][T10587] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 966.714873][T10587] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 966.715540][T10587] asix 4-1:0.188: probe with driver asix failed with error -71 [ 966.877999][ T5785] usblp0: removed [ 966.971519][T10587] usb 4-1: USB disconnect, device number 78 [ 967.531668][T14849] netlink: 'syz.1.2752': attribute type 4 has an invalid length. [ 967.569464][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 967.569487][ T37] audit: type=1326 audit(1774423078.269:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14844 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 967.569841][ T37] audit: type=1326 audit(1774423078.269:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14844 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 967.634225][ T5871] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 967.854255][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 967.908559][ T5871] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 967.908600][ T5871] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 967.908614][ T5871] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 967.908629][ T5871] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 967.908642][ T5871] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 967.908668][ T5871] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 967.908682][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.356711][ T5871] usb 5-1: GET_CAPABILITIES returned 0 [ 968.356745][ T5871] usbtmc 5-1:16.0: can't read capabilities [ 970.132690][T10675] usb 1-1: USB disconnect, device number 39 [ 970.966195][ T31] usb 5-1: USB disconnect, device number 51 [ 971.689170][T14883] __nla_validate_parse: 10 callbacks suppressed [ 971.689243][T14883] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2761'. [ 971.784943][ T31] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 972.464575][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 972.580954][ T31] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 972.580985][ T31] usb 5-1: config 0 has no interface number 0 [ 972.581034][ T31] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 972.581060][ T31] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 972.581086][ T31] usb 5-1: config 0 interface 41 has no altsetting 0 [ 972.628013][ T31] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 972.628045][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.628066][ T31] usb 5-1: Product: syz [ 972.628081][ T31] usb 5-1: Manufacturer: syz [ 972.628096][ T31] usb 5-1: SerialNumber: syz [ 972.769512][ T31] usb 5-1: config 0 descriptor?? [ 972.789474][T14874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 972.789611][T14874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 972.997363][T14874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 972.997503][T14874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 974.046570][T14895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 974.392267][ T31] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 975.219407][ T37] audit: type=1326 audit(1774423085.966:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 975.244049][ T37] audit: type=1326 audit(1774423085.966:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 975.244113][ T37] audit: type=1326 audit(1774423085.966:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 975.244162][ T37] audit: type=1326 audit(1774423085.966:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 975.244210][ T37] audit: type=1326 audit(1774423085.966:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 975.244256][ T37] audit: type=1326 audit(1774423085.966:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 975.244303][ T37] audit: type=1326 audit(1774423085.976:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 975.244351][ T37] audit: type=1326 audit(1774423085.976:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 975.244410][ T37] audit: type=1326 audit(1774423085.976:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 975.244464][ T37] audit: type=1326 audit(1774423085.976:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14918 comm="syz.0.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 975.281409][T14926] netlink: 'syz.0.2771': attribute type 4 has an invalid length. [ 975.840685][ T5785] usb 5-1: USB disconnect, device number 52 [ 978.173637][T14947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2776'. [ 981.322803][T14975] netlink: 'syz.0.2786': attribute type 16 has an invalid length. [ 981.322880][T14975] netlink: 'syz.0.2786': attribute type 17 has an invalid length. [ 982.239593][T14975] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.239889][T14975] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.383514][T14975] dummy0: left allmulticast mode [ 982.484115][ T5871] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 982.667050][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 982.667088][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 982.667114][ T5871] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 982.756367][ T5871] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 982.756400][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.756419][ T5871] usb 5-1: Product: syz [ 982.756432][ T5871] usb 5-1: Manufacturer: syz [ 982.756446][ T5871] usb 5-1: SerialNumber: syz [ 982.803651][ T5871] usb 5-1: config 0 descriptor?? [ 982.806221][T14976] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 982.976815][T14975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.018056][T14975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.466487][T14975] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 983.727387][T14975] ipvlan2: left promiscuous mode [ 984.229159][T11982] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.229200][T11982] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.231489][T11982] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.231524][T11982] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.231628][T11982] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.231655][T11982] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.231692][T11982] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.231779][T11982] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.232335][T14990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2789'. [ 987.633445][ T5871] usb 5-1: USB disconnect, device number 53 [ 988.320451][T14829] udevd[14829]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.066083][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.066179][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.684126][ T994] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 996.142690][ T994] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 996.142727][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 996.142754][ T994] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 997.657487][T15067] kernel profiling enabled (shift: 63) [ 997.657509][T15067] profiling shift: 63 too large [ 998.061139][T15066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2811'. [ 1001.222392][ T994] usb 1-1: string descriptor 0 read error: -32 [ 1001.222570][ T994] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1001.222595][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.289958][ T994] usb 1-1: config 0 descriptor?? [ 1001.309776][ T994] usb 1-1: can't set config #0, error -32 [ 1002.734150][ T31] usb 1-1: USB disconnect, device number 40 [ 1006.034138][T14840] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1006.211232][T14840] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1006.211269][T14840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1006.211297][T14840] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1006.260035][T14840] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1006.260055][T14840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.260067][T14840] usb 2-1: Product: syz [ 1006.260075][T14840] usb 2-1: Manufacturer: syz [ 1006.260083][T14840] usb 2-1: SerialNumber: syz [ 1006.270796][T14840] usb 2-1: config 0 descriptor?? [ 1006.431187][T15135] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1006.803409][T14840] usb 2-1: USB disconnect, device number 50 [ 1007.013640][T15151] udevd[15151]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1010.299798][T15182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.188908][T15215] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2860'. [ 1014.734253][ T31] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1015.494058][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 1015.496564][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.496589][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1015.500801][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1015.500828][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.500849][ T31] usb 1-1: Product: syz [ 1015.500863][ T31] usb 1-1: Manufacturer: syz [ 1015.500878][ T31] usb 1-1: SerialNumber: syz [ 1015.744092][T15245] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2872'. [ 1016.044294][ T31] usb 1-1: 0:2 : does not exist [ 1016.051851][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1016.218133][T15253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.425781][ T31] usb 1-1: USB disconnect, device number 41 [ 1016.785073][T15254] udevd[15254]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.086943][T15286] binder: 15285:15286 ioctl c0306201 0 returned -14 [ 1019.342275][T15288] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.2883'. [ 1021.654056][T15316] netlink: 'syz.0.2894': attribute type 72 has an invalid length. [ 1021.989192][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1021.989213][ T37] audit: type=1326 audit(1774423132.730:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15323 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 1021.991252][ T37] audit: type=1326 audit(1774423132.730:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15323 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 1021.991790][ T37] audit: type=1326 audit(1774423132.730:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15323 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 1021.992198][ T37] audit: type=1326 audit(1774423132.730:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15323 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 1022.115794][ T37] audit: type=1326 audit(1774423132.730:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15323 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 1022.116154][ T37] audit: type=1326 audit(1774423132.860:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15323 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 1022.116554][ T37] audit: type=1326 audit(1774423132.860:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15323 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 1022.116846][ T37] audit: type=1326 audit(1774423132.860:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15323 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 1022.124091][ T37] audit: type=1326 audit(1774423132.860:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15323 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 1022.124146][ T37] audit: type=1326 audit(1774423132.860:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15323 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e58b9c799 code=0x7ffc0000 [ 1022.186253][T15335] netlink: 'syz.0.2897': attribute type 4 has an invalid length. [ 1024.835142][T15360] netlink: 'syz.2.2907': attribute type 72 has an invalid length. [ 1028.645516][T15398] netlink: 'syz.4.2919': attribute type 72 has an invalid length. [ 1029.441176][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2924'. [ 1030.313553][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 1030.313575][ T37] audit: type=1326 audit(1774423141.050:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15405 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 1030.326805][ T37] audit: type=1326 audit(1774423141.070:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15405 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 1030.326855][ T37] audit: type=1326 audit(1774423141.070:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15405 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 1030.326896][ T37] audit: type=1326 audit(1774423141.070:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15405 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 1030.334930][ T37] audit: type=1326 audit(1774423141.070:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15405 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 1030.334981][ T37] audit: type=1326 audit(1774423141.080:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15405 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 1030.335023][ T37] audit: type=1326 audit(1774423141.080:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15405 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 1030.364101][ T37] audit: type=1326 audit(1774423141.100:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15405 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 1030.421579][ T37] audit: type=1326 audit(1774423141.140:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15405 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 1030.421630][ T37] audit: type=1326 audit(1774423141.160:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15405 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccbddac799 code=0x7ffc0000 [ 1030.574299][T15418] netlink: 'syz.1.2923': attribute type 4 has an invalid length. [ 1038.242646][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2937'. [ 1041.787773][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1041.787794][ T37] audit: type=1326 audit(1774423152.520:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 1041.791927][ T37] audit: type=1326 audit(1774423152.530:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 1041.802273][ T37] audit: type=1326 audit(1774423152.530:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 1041.802462][ T37] audit: type=1326 audit(1774423152.530:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 1041.802509][ T37] audit: type=1326 audit(1774423152.530:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 1041.802565][ T37] audit: type=1326 audit(1774423152.530:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 1041.804223][ T37] audit: type=1326 audit(1774423152.530:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 1041.804268][ T37] audit: type=1326 audit(1774423152.530:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 1041.804292][ T37] audit: type=1326 audit(1774423152.530:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 1041.804378][ T37] audit: type=1326 audit(1774423152.530:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.4.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab4de9c799 code=0x7ffc0000 [ 1041.997088][T15492] netlink: 'syz.4.2945': attribute type 4 has an invalid length. [ 1045.898347][T15524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1048.284293][ T994] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1048.444604][ T994] usb 5-1: Using ep0 maxpacket: 16 [ 1048.469862][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.469898][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.469992][ T994] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1048.470325][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.771774][ T994] usb 5-1: config 0 descriptor?? [ 1050.611650][T15572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1052.360401][ T994] usbhid 5-1:0.0: can't add hid device: -71 [ 1052.360533][ T994] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1052.364761][ T994] usb 5-1: USB disconnect, device number 54 [ 1054.562101][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.562182][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.254158][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1056.416315][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1056.512497][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.512522][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.512548][ T10] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1056.512562][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.570907][ T10] usb 2-1: config 0 descriptor?? [ 1060.373191][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1060.373331][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1060.814098][ T10] usb 2-1: USB disconnect, device number 51 [ 1073.196045][T15767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3018'. [ 1073.196083][T15767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3018'. [ 1073.228291][T15767] ip6gretap0: entered promiscuous mode [ 1073.230073][T15767] syz_tun: entered promiscuous mode [ 1073.274188][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1073.427943][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1073.443713][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.443743][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1073.466491][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1073.466524][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.466544][ T10] usb 2-1: Product: syz [ 1073.466559][ T10] usb 2-1: Manufacturer: syz [ 1073.466574][ T10] usb 2-1: SerialNumber: syz [ 1073.764441][ T10] usb 2-1: 0:2 : does not exist [ 1073.830403][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1073.910168][ T10] usb 2-1: USB disconnect, device number 52 [ 1073.979519][T15546] udevd[15546]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.597780][T15814] openvswitch: netlink: IP tunnel dst address not specified [ 1084.120547][T15866] openvswitch: netlink: IP tunnel dst address not specified [ 1084.614871][T15871] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3046'. [ 1090.315718][T15907] openvswitch: netlink: IP tunnel dst address not specified [ 1093.076706][T13118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1093.105963][T13118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1093.107517][T13118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1093.108804][T13118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1093.110057][T13118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1093.760686][T15929] chnl_net:caif_netlink_parms(): no params data found [ 1094.679064][T15929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.679316][T15929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.679524][T15929] bridge_slave_0: entered allmulticast mode [ 1094.682391][T15929] bridge_slave_0: entered promiscuous mode [ 1094.686868][T15929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.687085][T15929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.687292][T15929] bridge_slave_1: entered allmulticast mode [ 1094.689994][T15929] bridge_slave_1: entered promiscuous mode [ 1094.929163][T15929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.953230][T15929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.186835][T15929] team0: Port device team_slave_0 added [ 1095.191200][T15929] team0: Port device team_slave_1 added [ 1095.221687][T13118] Bluetooth: hci5: command tx timeout [ 1095.263443][T15929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.263462][T15929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.263490][T15929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.462005][T15929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.462052][T15929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.462108][T15929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.736976][T15961] openvswitch: netlink: IP tunnel dst address not specified [ 1096.738415][T15929] hsr_slave_0: entered promiscuous mode [ 1096.761810][T15929] hsr_slave_1: entered promiscuous mode [ 1096.770142][T15929] debugfs: 'hsr0' already exists in 'hsr' [ 1096.770172][T15929] Cannot create hsr debugfs directory [ 1097.294348][T13118] Bluetooth: hci5: command tx timeout [ 1099.387567][T13118] Bluetooth: hci5: command tx timeout [ 1100.231000][T11984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1100.231041][T11984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.409205][T11984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.409301][T11984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.653071][T13118] Bluetooth: hci5: command tx timeout [ 1103.722247][T16012] openvswitch: netlink: IP tunnel dst address not specified [ 1103.737650][T11984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.737688][T11984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.399607][T11984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.399642][T11984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.434578][T16023] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1106.545634][T11984] bridge_slave_1: left allmulticast mode [ 1106.545663][T11984] bridge_slave_1: left promiscuous mode [ 1106.545925][T11984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.632930][T11984] bridge_slave_0: left allmulticast mode [ 1106.632962][T11984] bridge_slave_0: left promiscuous mode [ 1106.633268][T11984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.654400][ T5871] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1106.784232][ T5871] usb 5-1: device descriptor read/64, error -71 [ 1107.035065][ T5871] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1107.174099][ T5871] usb 5-1: device descriptor read/64, error -71 [ 1107.306493][ T5871] usb usb5-port1: attempt power cycle [ 1107.734084][ T5871] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1107.754915][ T5871] usb 5-1: device descriptor read/8, error -71 [ 1108.019798][ T5871] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1108.034803][ T5871] usb 5-1: device descriptor read/8, error -71 [ 1108.174309][ T5871] usb usb5-port1: unable to enumerate USB device [ 1108.476124][T11984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.548302][T11984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.588975][T11984] bond0 (unregistering): Released all slaves [ 1108.944944][T11984] tipc: Left network mode [ 1108.965583][T16063] openvswitch: netlink: IP tunnel dst address not specified [ 1110.619193][T16085] pim6reg: entered allmulticast mode [ 1110.964083][T11984] hsr_slave_0: left promiscuous mode [ 1111.004143][T11984] hsr_slave_1: left promiscuous mode [ 1111.005323][T11984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.005349][T11984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.163998][T11984] veth1_macvtap: left promiscuous mode [ 1111.164127][T11984] veth0_macvtap: left promiscuous mode [ 1111.166322][T11984] veth1_vlan: left promiscuous mode [ 1111.166528][T11984] veth0_vlan: left promiscuous mode [ 1111.550445][T16093] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3102'. [ 1112.752489][T16099] ceph: No mds server is up or the cluster is laggy [ 1112.756556][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 1112.757195][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 1113.558093][T16112] openvswitch: netlink: IP tunnel dst address not specified [ 1113.624530][T11984] team0 (unregistering): Port device 26±ÿþ€ removed [ 1113.664652][T11984] team0 (unregistering): Port device team_slave_0 removed [ 1114.515887][T15929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1114.631697][T15929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1114.692643][T15929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1114.740503][T15929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1115.787715][T15929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.944874][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.944953][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.030836][T15929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.098833][T11969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.099057][T11969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.187187][T11060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.187293][T11060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.561234][T15929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.853492][T15929] veth0_vlan: entered promiscuous mode [ 1117.926008][T15929] veth1_vlan: entered promiscuous mode [ 1118.769570][T15929] veth0_macvtap: entered promiscuous mode [ 1118.948493][T15929] veth1_macvtap: entered promiscuous mode [ 1119.501953][T15929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.551632][T15929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1119.636259][T11969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.641945][T11969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.680939][T11969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.744360][T11969] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.874240][T16188] openvswitch: netlink: IP tunnel dst address not specified [ 1121.311383][T11969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.311407][T11969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.045273][T16006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.045298][T16006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.123210][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1124.162363][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1124.171501][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1124.182456][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1124.188259][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1125.340263][T16218] chnl_net:caif_netlink_parms(): no params data found [ 1126.259537][T13118] Bluetooth: hci1: command tx timeout [ 1126.422232][T10675] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1126.574173][T10675] usb 5-1: Using ep0 maxpacket: 16 [ 1126.576571][T10675] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.576596][T10675] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1126.579775][T10675] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1126.579803][T10675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.579823][T10675] usb 5-1: Product: syz [ 1126.579837][T10675] usb 5-1: Manufacturer: syz [ 1126.579852][T10675] usb 5-1: SerialNumber: syz [ 1126.897498][T10675] usb 5-1: 0:2 : does not exist [ 1126.991398][T10675] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1127.122635][T10675] usb 5-1: USB disconnect, device number 59 [ 1127.248837][T16025] udevd[16025]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1127.914541][T16218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.914619][T16218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.914793][T16218] bridge_slave_0: entered allmulticast mode [ 1127.916702][T16218] bridge_slave_0: entered promiscuous mode [ 1127.936583][T16218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.830723][T13118] Bluetooth: hci1: command tx timeout [ 1128.841136][T16218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.841408][T16218] bridge_slave_1: entered allmulticast mode [ 1128.844881][T16218] bridge_slave_1: entered promiscuous mode [ 1129.051141][T16218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.096763][T16218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.211894][T16218] team0: Port device team_slave_0 added [ 1129.245393][T16218] team0: Port device team_slave_1 added [ 1129.254082][ T994] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1129.414152][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 1129.416575][ T994] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1129.416608][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1129.420109][ T994] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1129.420138][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.420158][ T994] usb 5-1: Product: syz [ 1129.420173][ T994] usb 5-1: Manufacturer: syz [ 1129.420188][ T994] usb 5-1: SerialNumber: syz [ 1129.544343][ T994] usb 5-1: config 0 descriptor?? [ 1129.592678][ T994] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input39 [ 1129.642306][ T994] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1129.740505][T16218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.740523][T16218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.740551][T16218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.743121][T16218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.743139][T16218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.743167][T16218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.865118][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3144'. [ 1129.870374][ T994] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1129.914967][ T994] usb 5-1: USB disconnect, device number 60 [ 1130.894209][T13118] Bluetooth: hci1: command tx timeout [ 1131.731055][T16218] hsr_slave_0: entered promiscuous mode [ 1131.732049][T16218] hsr_slave_1: entered promiscuous mode [ 1131.732660][T16218] debugfs: 'hsr0' already exists in 'hsr' [ 1131.732678][T16218] Cannot create hsr debugfs directory [ 1131.744217][T11982] bridge_slave_1: left allmulticast mode [ 1131.744239][T11982] bridge_slave_1: left promiscuous mode [ 1131.744429][T11982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.973367][T11982] bridge_slave_0: left allmulticast mode [ 1132.973400][T11982] bridge_slave_0: left promiscuous mode [ 1132.973700][T11982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.974166][T13118] Bluetooth: hci1: command tx timeout [ 1133.618177][T16287] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1134.276017][T11982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.524690][T11982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.282850][T11982] bond0 (unregistering): Released all slaves [ 1135.874131][T11982] tipc: Left network mode [ 1137.315670][T13118] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1137.432712][T16326] openvswitch: netlink: IP tunnel dst address not specified [ 1138.294038][T10587] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1138.454014][T10587] usb 4-1: Using ep0 maxpacket: 32 [ 1138.456279][T10587] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1138.456311][T10587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1138.458924][T10587] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1138.458946][T10587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.458958][T10587] usb 4-1: Product: syz [ 1138.458966][T10587] usb 4-1: Manufacturer: syz [ 1138.458974][T10587] usb 4-1: SerialNumber: syz [ 1138.462955][T10587] usb 4-1: config 0 descriptor?? [ 1138.614716][T10587] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 1138.636082][T10587] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1139.035046][T10587] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1140.064722][T10587] usb 4-1: USB disconnect, device number 79 [ 1140.324202][ T31] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1140.624016][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 1140.630397][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.630428][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1140.645521][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1140.645541][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.645553][ T31] usb 5-1: Product: syz [ 1140.645561][ T31] usb 5-1: Manufacturer: syz [ 1140.645569][ T31] usb 5-1: SerialNumber: syz [ 1140.884526][T11982] hsr_slave_0: left promiscuous mode [ 1140.954078][T11982] hsr_slave_1: left promiscuous mode [ 1140.960019][T11982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.001986][ T31] usb 5-1: 0:2 : does not exist [ 1141.023404][ T31] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1141.040569][T11982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.108804][T11982] pim6reg (unregistering): left allmulticast mode [ 1141.135674][ T31] usb 5-1: USB disconnect, device number 61 [ 1141.272945][T16025] udevd[16025]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1142.024806][T11982] team0 (unregistering): Port device team_slave_1 removed [ 1142.095730][T11982] team0 (unregistering): Port device team_slave_0 removed [ 1142.505412][T16377] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1144.010238][T14840] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1144.374157][T14840] usb 4-1: Using ep0 maxpacket: 32 [ 1144.407852][T14840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1144.407889][T14840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1144.411678][T14840] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1144.411711][T14840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.411731][T14840] usb 4-1: Product: syz [ 1144.411745][T14840] usb 4-1: Manufacturer: syz [ 1144.411760][T14840] usb 4-1: SerialNumber: syz [ 1144.540542][T14840] usb 4-1: config 0 descriptor?? [ 1144.563660][T14840] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 1144.843477][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3172'. [ 1145.616146][T16391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.649600][T16391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.650629][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3171'. [ 1145.675608][T14840] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 1145.975236][T14840] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 1145.998770][T14840] usb 4-1: USB disconnect, device number 80 [ 1146.034375][T16398] openvswitch: netlink: IP tunnel dst address not specified [ 1146.740022][T11984] batman_adv: batadv_iv_ogm_emit: mesh interface switch for queued OGM [ 1146.998573][T16405] fuse: Unknown parameter 'group_id00000000000000000000' [ 1147.615502][T16218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1147.731373][T16218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1147.840016][T16218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1147.872488][T16218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1149.020583][T16218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.081838][T16218] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.108928][T11060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.109085][T11060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.158159][T11060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.161009][T11060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.177000][T16461] fuse: Unknown parameter 'group_id00000000000000000000' [ 1150.387266][T16218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.033995][ T994] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1151.184008][ T994] usb 3-1: Using ep0 maxpacket: 32 [ 1151.199383][ T994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1151.199417][ T994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1151.219742][ T994] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1151.219773][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.219792][ T994] usb 3-1: Product: syz [ 1151.219805][ T994] usb 3-1: Manufacturer: syz [ 1151.219817][ T994] usb 3-1: SerialNumber: syz [ 1151.251005][ T994] usb 3-1: config 0 descriptor?? [ 1151.272987][T16218] veth0_vlan: entered promiscuous mode [ 1151.301578][ T994] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 1151.331254][ T994] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 1151.350980][T16218] veth1_vlan: entered promiscuous mode [ 1151.486307][ T994] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 1151.539541][T16218] veth0_macvtap: entered promiscuous mode [ 1151.571579][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3186'. [ 1151.594110][ T994] usb 3-1: USB disconnect, device number 52 [ 1151.609941][T16218] veth1_macvtap: entered promiscuous mode [ 1151.724624][T16218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.834882][T16218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.863070][T11982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.863336][T11982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.863396][T11982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.904989][T11982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.486946][T11060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.486971][T11060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.667929][T11984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.667953][T11984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.408567][T16506] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1156.569664][T16513] lo speed is unknown, defaulting to 1000 [ 1156.570637][T16513] lo speed is unknown, defaulting to 1000 [ 1156.644380][T16513] lo speed is unknown, defaulting to 1000 [ 1156.748156][T16513] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1157.026484][T16513] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1157.184278][T16513] lo speed is unknown, defaulting to 1000 [ 1157.187130][T16513] lo speed is unknown, defaulting to 1000 [ 1157.191284][T16513] lo speed is unknown, defaulting to 1000 [ 1157.194054][T16513] lo speed is unknown, defaulting to 1000 [ 1157.197256][T16513] lo speed is unknown, defaulting to 1000 [ 1157.200024][T16513] lo speed is unknown, defaulting to 1000 [ 1157.895673][T16523] fuse: Unknown parameter 'group_id00000000000000000000' [ 1158.673845][T16537] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1158.804198][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1158.944045][ T9] usb 4-1: device descriptor read/64, error -71 [ 1158.963707][T13118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1158.989274][T13118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1159.002174][T13118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1159.031209][T13118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1159.043235][T13118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1159.184291][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1159.191508][T16539] lo speed is unknown, defaulting to 1000 [ 1159.314004][ T9] usb 4-1: device descriptor read/64, error -71 [ 1159.424489][ T9] usb usb4-port1: attempt power cycle [ 1159.764807][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1159.804597][ T9] usb 4-1: device descriptor read/8, error -71 [ 1160.044054][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1160.065990][ T9] usb 4-1: device descriptor read/8, error -71 [ 1160.176780][ T9] usb usb4-port1: unable to enumerate USB device [ 1160.450378][T16549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3201'. [ 1160.450418][T16549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3201'. [ 1160.734562][ T5801] syz_tun (unregistering): left promiscuous mode [ 1160.804154][T16549] syz_tun: entered promiscuous mode [ 1160.838991][T16549] syz_tun: left promiscuous mode [ 1161.179456][ T5115] Bluetooth: hci4: command tx timeout [ 1161.358199][T16539] chnl_net:caif_netlink_parms(): no params data found [ 1164.707112][ T5115] Bluetooth: hci4: command tx timeout [ 1165.217274][T11969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.954083][T13118] Bluetooth: hci4: command tx timeout [ 1167.545364][T16596] fuse: Bad value for 'user_id' [ 1167.545386][T16596] fuse: Bad value for 'user_id' [ 1168.097618][T11969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.595238][T16609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1168.658449][T16608] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1169.005698][T13118] Bluetooth: hci4: command tx timeout [ 1169.289722][T11969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.626503][T16539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.626654][T16539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.626888][T16539] bridge_slave_0: entered allmulticast mode [ 1172.671378][T16539] bridge_slave_0: entered promiscuous mode [ 1172.700496][T16539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.700657][T16539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.700909][T16539] bridge_slave_1: entered allmulticast mode [ 1172.731477][T16539] bridge_slave_1: entered promiscuous mode [ 1173.336100][T11969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.567933][T16539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.585214][T16539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.840940][T16539] team0: Port device team_slave_0 added [ 1173.929561][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1173.929607][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1174.004943][T16539] team0: Port device team_slave_1 added [ 1174.044697][T16636] ip6gretap0: entered promiscuous mode [ 1174.049039][T16636] syz_tun: entered promiscuous mode [ 1174.064328][T16636] debugfs: 'hsr1' already exists in 'hsr' [ 1174.064356][T16636] Cannot create hsr debugfs directory [ 1174.295320][T16539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.295339][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.295365][T16539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.309306][T16539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.309323][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.309348][T16539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.980606][T16641] siw: device registration error -23 [ 1175.033358][T16539] hsr_slave_0: entered promiscuous mode [ 1175.050012][T16539] hsr_slave_1: entered promiscuous mode [ 1175.053754][T16539] debugfs: 'hsr0' already exists in 'hsr' [ 1175.053792][T16539] Cannot create hsr debugfs directory [ 1175.242565][T11969] bridge_slave_1: left allmulticast mode [ 1175.268523][T11969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.315720][T11969] bridge_slave_0: left allmulticast mode [ 1176.315752][T11969] bridge_slave_0: left promiscuous mode [ 1176.319338][T11969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.077204][T16656] kernel profiling enabled (shift: 63) [ 1177.077298][T16656] profiling shift: 63 too large [ 1177.761811][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.761892][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.137856][T16677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1180.386275][T16679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3233'. [ 1180.386315][T16679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3233'. [ 1181.176664][T11969] ip6gretap0 (unregistering): left promiscuous mode [ 1183.516433][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 1183.742063][T11969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1183.904882][T11969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.091572][T11969] bond0 (unregistering): Released all slaves [ 1185.383071][T11969] tipc: Left network mode [ 1186.749666][T16733] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.986245][T16741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1189.945878][T10675] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1190.114016][T10675] usb 1-1: Using ep0 maxpacket: 32 [ 1190.120605][T10675] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.120634][T10675] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1190.120674][T10675] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1190.120698][T10675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.188901][T10675] usb 1-1: config 0 descriptor?? [ 1190.669506][T11969] hsr_slave_0: left promiscuous mode [ 1190.712678][T11969] hsr_slave_1: left promiscuous mode [ 1190.734771][T11969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.734802][T11969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.788806][T11969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.788835][T11969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1190.876694][T11969] veth1_macvtap: left promiscuous mode [ 1190.876764][T11969] veth0_macvtap: left promiscuous mode [ 1190.876974][T11969] veth1_vlan: left promiscuous mode [ 1190.877154][T11969] veth0_vlan: left promiscuous mode [ 1193.125168][T11969] team0 (unregistering): Port device 26±ÿþ€ removed [ 1193.164994][T11969] team0 (unregistering): Port device team_slave_0 removed [ 1193.414679][T10675] usb 1-1: USB disconnect, device number 42 [ 1195.647592][T16539] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1196.754996][T16539] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1197.292221][T16539] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1198.395899][T16539] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1199.081016][T10675] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1199.944883][T16539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.964941][T16539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.978282][T16855] ceph: No mds server is up or the cluster is laggy [ 1200.022546][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.022733][T11963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.034749][ T1222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.034904][ T1222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.074787][ T5785] libceph: connect (1)[c::]:6789 error -101 [ 1200.075003][ T5785] libceph: mon0 (1)[c::]:6789 connect error [ 1200.174005][T10675] usb 3-1: Using ep0 maxpacket: 32 [ 1200.179590][T10675] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1200.179638][T10675] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1200.179663][T10675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.227453][T10675] usb 3-1: config 0 descriptor?? [ 1200.613743][T16867] lo speed is unknown, defaulting to 1000 [ 1201.186586][ T5871] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1201.323982][ T5871] usb 2-1: device descriptor read/64, error -71 [ 1201.387861][T16539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1201.575539][ T5871] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1201.714109][ T5871] usb 2-1: device descriptor read/64, error -71 [ 1201.824388][ T5871] usb usb2-port1: attempt power cycle [ 1202.322659][ T10] usb 3-1: USB disconnect, device number 53 [ 1202.364457][ T5871] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1203.254026][ T5871] usb 2-1: device descriptor read/8, error -71 [ 1203.434871][T16903] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3280'. [ 1203.449916][T16903] virtio-fs: tag <./cgroup> not found [ 1203.676892][ T5871] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1204.581095][ T5871] usb 2-1: device descriptor read/8, error -71 [ 1204.808777][ T5871] usb usb2-port1: unable to enumerate USB device [ 1205.997850][T16539] veth0_vlan: entered promiscuous mode [ 1206.015022][T16911] fuse: Bad value for 'group_id' [ 1206.015043][T16911] fuse: Bad value for 'group_id' [ 1206.080938][T16539] veth1_vlan: entered promiscuous mode [ 1206.177833][T16539] veth0_macvtap: entered promiscuous mode [ 1206.191473][T16539] veth1_macvtap: entered promiscuous mode [ 1206.217360][T16539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.223248][T16539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.518845][ T1222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.520611][ T1222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.522399][ T1222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.958236][ T1222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.340230][T11982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.340255][T11982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.593977][ T5950] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1210.914035][T10675] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1211.114538][ T5950] usb 3-1: device descriptor read/64, error -71 [ 1211.364131][ T5950] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1211.457240][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.457263][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.371661][T16967] ieee802154 phy0 wpan0: encryption failed: -22 [ 1213.725781][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1213.726077][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1213.734004][ T5950] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1214.162974][T16973] ceph: No mds server is up or the cluster is laggy [ 1214.295666][T16962] kvm: MWAIT instruction emulated as NOP! [ 1214.326919][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1214.329529][ T5950] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1214.329569][ T5950] usb 3-1: can't read configurations, error -71 [ 1214.396309][ T5785] libceph: connect (1)[c::]:6789 error -101 [ 1214.396537][ T5785] libceph: mon0 (1)[c::]:6789 connect error [ 1215.007271][T16992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1215.031162][T16992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1215.051515][T16992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1215.067359][T16992] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1215.070125][T16992] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1215.297829][T16992] Bluetooth: hci5: command 0x0406 tx timeout [ 1215.650271][T16988] lo speed is unknown, defaulting to 1000 [ 1217.213990][T16992] Bluetooth: hci2: command tx timeout [ 1217.232560][T16988] chnl_net:caif_netlink_parms(): no params data found [ 1218.364000][T10675] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1218.627877][T10675] usb 2-1: device descriptor read/64, error -71 [ 1218.868336][T16988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.868492][T16988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.868749][T16988] bridge_slave_0: entered allmulticast mode [ 1218.871363][T16988] bridge_slave_0: entered promiscuous mode [ 1218.929989][T16988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.946880][T16988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.947073][T16988] bridge_slave_1: entered allmulticast mode [ 1218.948774][T16988] bridge_slave_1: entered promiscuous mode [ 1219.044136][T10675] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1219.047790][T17015] lo speed is unknown, defaulting to 1000 [ 1219.293997][ T5115] Bluetooth: hci2: command tx timeout [ 1219.294328][T10675] usb 2-1: device descriptor read/64, error -71 [ 1219.375027][T16988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.404355][T10675] usb usb2-port1: attempt power cycle [ 1219.744058][T10675] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1219.766401][T10675] usb 2-1: device descriptor read/8, error -71 [ 1219.931256][T16988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.035740][T10675] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1220.067726][T10675] usb 2-1: device descriptor read/8, error -71 [ 1220.175953][T10675] usb usb2-port1: unable to enumerate USB device [ 1221.502128][ T5115] Bluetooth: hci2: command tx timeout [ 1221.609976][T16988] team0: Port device team_slave_0 added [ 1221.755301][T16988] team0: Port device team_slave_1 added [ 1223.331334][T16988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.331353][T16988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.331380][T16988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.545858][ T5115] Bluetooth: hci2: command tx timeout [ 1223.585222][T16988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.585241][T16988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.585280][T16988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.722092][T17060] ieee802154 phy0 wpan0: encryption failed: -22 [ 1224.137435][T16988] hsr_slave_0: entered promiscuous mode [ 1224.140095][T16988] hsr_slave_1: entered promiscuous mode [ 1224.141166][T16988] debugfs: 'hsr0' already exists in 'hsr' [ 1224.141192][T16988] Cannot create hsr debugfs directory [ 1225.744422][T16006] bridge_slave_1: left allmulticast mode [ 1225.744455][T16006] bridge_slave_1: left promiscuous mode [ 1225.745359][T16006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.976761][T16006] bridge_slave_0: left allmulticast mode [ 1226.976794][T16006] bridge_slave_0: left promiscuous mode [ 1226.996471][T16006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.700183][T17099] siw: device registration error -23 [ 1227.921944][T17101] ieee802154 phy0 wpan0: encryption failed: -22 [ 1228.483207][T10587] IPVS: starting estimator thread 0... [ 1228.624285][T17111] IPVS: using max 7 ests per chain, 16800 per kthread [ 1229.024812][T16006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.065375][T16006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1229.848834][T16006] bond0 (unregistering): Released all slaves [ 1230.378076][T17129] virtio-fs: tag <./cgroup> not found [ 1231.406924][T16006] tipc: Left network mode [ 1231.412802][T17123] lo speed is unknown, defaulting to 1000 [ 1231.844288][ T5950] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1231.994517][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 1231.997358][ T5950] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1231.998627][ T5950] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.998652][ T5950] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1231.998704][ T5950] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1232.002078][ T5950] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1232.002107][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.002128][ T5950] usb 5-1: Product: syz [ 1232.002142][ T5950] usb 5-1: Manufacturer: syz [ 1232.002156][ T5950] usb 5-1: SerialNumber: syz [ 1232.362424][ T5950] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1232.362479][ T5950] cdc_ncm 5-1:1.0: bind() failure [ 1232.400413][ T5950] usb 5-1: USB disconnect, device number 62 [ 1233.106785][T17158] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1234.097387][T17160] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.584057][T16006] hsr_slave_0: left promiscuous mode [ 1236.626410][T16006] hsr_slave_1: left promiscuous mode [ 1236.627560][T16006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.670056][T16006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.744889][T16006] pim6reg (unregistering): left allmulticast mode [ 1236.753729][T17183] kernel profiling enabled (shift: 63) [ 1236.753746][T17183] profiling shift: 63 too large [ 1237.073717][ T5950] IPVS: starting estimator thread 0... [ 1238.313565][T17187] IPVS: using max 6 ests per chain, 14400 per kthread [ 1238.824670][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.824783][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.294451][T16006] team0 (unregistering): Port device 26±ÿþ€ removed [ 1239.376620][T16006] team0 (unregistering): Port device team_slave_0 removed [ 1240.560669][T17203] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1241.888275][T16988] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1241.930031][T16988] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1242.055422][T16988] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1242.632714][T16988] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1243.146677][T17225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.053303][T17233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1244.053342][T17233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1244.300295][T10587] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1244.627022][T17242] kernel profiling enabled (shift: 63) [ 1244.627040][T17242] profiling shift: 63 too large [ 1244.891836][T10587] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1244.894227][T10587] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1244.894263][T10587] usb 2-1: can't read configurations, error -71 [ 1245.060899][T16988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.168337][T16988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.489638][T16905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.489850][T16905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.834880][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.840337][T11963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.442832][T17271] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1249.232599][T17282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.277910][T17283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3363'. [ 1250.173734][T16988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.615258][T16988] veth0_vlan: entered promiscuous mode [ 1250.620743][T16988] veth1_vlan: entered promiscuous mode [ 1250.764804][T16988] veth0_macvtap: entered promiscuous mode [ 1250.787841][T16988] veth1_macvtap: entered promiscuous mode [ 1250.890040][T16988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.963356][T16988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.011995][T11971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.012555][T11971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.012645][T11971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.012693][T11971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.301585][T17302] netlink: 'syz.4.3367': attribute type 6 has an invalid length. [ 1251.304973][T17302] QAT: failed to copy from user cfg_data. [ 1251.322669][T17302] IPv6: sit1: Disabled Multicast RS [ 1251.457806][ T5115] Bluetooth: hci1: command 0x0406 tx timeout [ 1251.712262][T17307] kernel profiling enabled (shift: 63) [ 1251.712285][T17307] profiling shift: 63 too large [ 1251.951808][T11967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.951833][T11967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.436158][T11963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.436182][T11963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.934070][ T9] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1255.398450][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1255.400144][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1255.400169][ T9] usb 3-1: can't read configurations, error -71 [ 1257.653858][T17348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3375'. [ 1257.955045][T17351] ieee802154 phy0 wpan0: encryption failed: -22 [ 1259.050094][T17356] kernel profiling enabled (shift: 63) [ 1259.050110][T17356] profiling shift: 63 too large [ 1261.255075][T17374] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1261.255390][T17374] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1261.284126][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3377'. [ 1261.598162][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 1261.598197][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3377'. [ 1261.666576][T17392] ieee802154 phy0 wpan0: encryption failed: -22 [ 1262.385119][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 1262.385270][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3377'. [ 1262.449539][T11060] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1262.453786][ T1222] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1262.454300][ T1222] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1262.454445][ T1222] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1262.753189][ T9] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1264.116528][T17403] siw: device registration error -23 [ 1264.687072][ T9] usb 5-1: device descriptor read/all, error -71 [ 1265.045318][T17412] kernel profiling enabled (shift: 63) [ 1265.045336][T17412] profiling shift: 63 too large [ 1267.290463][T17431] pimreg: entered allmulticast mode [ 1269.517542][T17447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3402'. [ 1269.518779][T17447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1270.368556][T17447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1274.044596][T17486] binder: 17485:17486 ioctl c0306201 0 returned -14 [ 1274.712809][T17495] pimreg: entered allmulticast mode [ 1275.478851][T17499] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3417'. [ 1275.480304][T17499] virtio-fs: tag <./cgroup> not found [ 1277.156867][T17504] pimreg: entered allmulticast mode [ 1279.881697][T17524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3426'. [ 1279.881735][T17524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3426'. [ 1279.910222][T17524] syz_tun: entered promiscuous mode [ 1280.146264][T17522] binder: 17521:17522 ioctl c0306201 0 returned -14 [ 1280.203582][T17524] syz_tun: left promiscuous mode [ 1281.854564][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 1283.397294][T17551] ieee802154 phy0 wpan0: encryption failed: -22 [ 1283.438153][T17554] fuse: Bad value for 'fd' [ 1283.808567][T17563] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3435'. [ 1283.836421][T17563] virtio-fs: tag <./cgroup> not found [ 1285.586727][T17570] binder: 17568:17570 ioctl c0306201 0 returned -14 [ 1285.610342][T17572] netlink: 'syz.4.3438': attribute type 6 has an invalid length. [ 1285.616407][T17572] QAT: failed to copy from user cfg_data. [ 1287.286224][T17581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1287.286262][T17581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1287.336594][T17581] syz_tun: entered promiscuous mode [ 1287.490561][T17581] syz_tun: left promiscuous mode [ 1287.516380][T17585] Illegal XDP return value 4294967294 on prog (id 60) dev N/A, expect packet loss! [ 1287.984044][ T37] kauditd_printk_skb: 37 callbacks suppressed [ 1287.984058][ T37] audit: type=1326 audit(1774423398.720:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb38b9c799 code=0x7ffc0000 [ 1287.984383][ T37] audit: type=1326 audit(1774423398.730:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb38b9c799 code=0x7ffc0000 [ 1289.038042][ T37] audit: type=1326 audit(1774423399.780:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdb38b9c799 code=0x7ffc0000 [ 1289.038105][ T37] audit: type=1326 audit(1774423399.780:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb38b9c799 code=0x7ffc0000 [ 1289.038152][ T37] audit: type=1326 audit(1774423399.780:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb38b9c799 code=0x7ffc0000 [ 1289.059917][ T37] audit: type=1326 audit(1774423399.780:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdb38b9c799 code=0x7ffc0000 [ 1289.059971][ T37] audit: type=1326 audit(1774423399.800:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb38b9c799 code=0x7ffc0000 [ 1289.060010][ T37] audit: type=1326 audit(1774423399.800:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb38b9c799 code=0x7ffc0000 [ 1289.080568][ T37] audit: type=1326 audit(1774423399.820:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fdb38b9c799 code=0x7ffc0000 [ 1289.080627][ T37] audit: type=1326 audit(1774423399.820:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb38b9c799 code=0x7ffc0000 [ 1289.739529][T17603] ieee802154 phy0 wpan0: encryption failed: -22 [ 1290.524494][T17601] fuse: Unknown parameter '0x0000000000000003' [ 1292.465807][T17618] binder: 17613:17618 ioctl c0306201 0 returned -14 [ 1295.601068][T17632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3457'. [ 1295.601108][T17632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3457'. [ 1299.784015][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1299.936181][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1299.939323][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1299.940882][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.940918][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1299.940972][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1299.976969][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1299.977001][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.977022][ T9] usb 4-1: Product: syz [ 1299.977035][ T9] usb 4-1: Manufacturer: syz [ 1299.977047][ T9] usb 4-1: SerialNumber: syz [ 1300.345357][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.345437][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.527642][T17677] siw: device registration error -23 [ 1300.826568][ T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1300.826620][ T9] cdc_ncm 4-1:1.0: bind() failure [ 1300.845025][ T9] usb 4-1: USB disconnect, device number 85 [ 1301.633352][T17685] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1306.654931][T10675] libceph: connect (1)[c::]:6789 error -101 [ 1306.655155][T10675] libceph: mon0 (1)[c::]:6789 connect error [ 1306.918835][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 1306.919071][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 1307.043539][T17697] ceph: No mds server is up or the cluster is laggy [ 1307.436188][T10675] libceph: connect (1)[c::]:6789 error -101 [ 1307.436412][T10675] libceph: mon0 (1)[c::]:6789 connect error [ 1309.259240][T17719] kernel profiling enabled (shift: 63) [ 1309.259258][T17719] profiling shift: 63 too large [ 1312.355155][T17742] fuse: Unknown parameter '0x0000000000000003' [ 1312.995037][T17749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1316.210484][T17771] kernel profiling enabled (shift: 63) [ 1316.210532][T17771] profiling shift: 63 too large [ 1317.598751][T17783] fuse: Unknown parameter '0x0000000000000003' [ 1319.620006][T17800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1322.736482][T17827] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3508'. [ 1324.571879][T17834] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1327.460124][T17873] Option ' ' to dns_resolver key: bad/missing value [ 1328.971018][T17879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1329.267827][T16945] libceph: connect (1)[c::]:6789 error -101 [ 1329.518507][T17880] ceph: No mds server is up or the cluster is laggy [ 1329.616414][T16945] libceph: mon0 (1)[c::]:6789 connect error [ 1330.119700][T10675] libceph: connect (1)[c::]:6789 error -101 [ 1330.119932][T10675] libceph: mon0 (1)[c::]:6789 connect error [ 1330.286076][T17895] kernel profiling enabled (shift: 63) [ 1330.286123][T17895] profiling shift: 63 too large [ 1337.056401][T17940] kernel profiling enabled (shift: 63) [ 1337.056450][T17940] profiling shift: 63 too large [ 1337.124051][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3539'. [ 1338.332166][T16992] Bluetooth: hci2: command 0x0406 tx timeout [ 1346.276227][T18006] kernel profiling enabled (shift: 63) [ 1346.276274][T18006] profiling shift: 63 too large [ 1347.034047][T16945] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1347.454252][T18012] Option ' ' to dns_resolver key: bad/missing value [ 1348.341107][T16945] usb 3-1: Using ep0 maxpacket: 32 [ 1349.427866][T16945] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1349.427913][T16945] usb 3-1: can't read configurations, error -71 [ 1349.760011][T18020] pimreg: entered allmulticast mode [ 1353.889986][T18049] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1354.267632][T18055] kernel profiling enabled (shift: 63) [ 1354.267678][T18055] profiling shift: 63 too large [ 1355.043201][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3565'. [ 1355.519536][T18064] Option ' ' to dns_resolver key: bad/missing value [ 1357.413897][ T5871] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1357.601893][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 1357.612275][ T5871] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1357.612296][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.647259][ T5871] usb 4-1: config 0 descriptor?? [ 1358.025803][ T5871] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1359.765229][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1359.773331][ T5871] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1359.773398][ T5871] usb 4-1: media controller created [ 1359.875672][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1361.182806][ T5871] DVB: Unable to find symbol dib7000p_attach() [ 1361.182823][ T5871] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1361.833679][T18114] kernel profiling enabled (shift: 63) [ 1361.833699][T18114] profiling shift: 63 too large [ 1362.642269][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.642347][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.767420][ T5871] rc_core: IR keymap rc-dib0700-rc5 not found [ 1362.767445][ T5871] Registered IR keymap rc-empty [ 1362.767795][ T5871] dvb-usb: could not initialize remote control. [ 1362.767805][ T5871] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1362.858828][ T5871] usb 4-1: USB disconnect, device number 86 [ 1362.923933][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1363.024768][ T5871] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1363.083936][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1363.084673][ T10] usb 1-1: too many configurations: 14, using maximum allowed: 8 [ 1363.100141][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1363.100170][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.100188][ T10] usb 1-1: Product: syz [ 1363.100200][ T10] usb 1-1: Manufacturer: syz [ 1363.100214][ T10] usb 1-1: SerialNumber: syz [ 1363.107721][ T10] usb 1-1: config 0 descriptor?? [ 1363.142265][ [ 1363.142265][ T10] ================================================================== [ 1363.142326][ T10] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1363.142449][ T10] Read of size 8 at addr ffffc9001b564008 by task kworker/0:1/10 [ 1363.142464][ T10] [ 1363.142501][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1363.142526][ T10] Tainted: [L]=SOFTLOCKUP [ 1363.142532][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1363.142544][ T10] Workqueue: usb_hub_wq hub_event [ 1363.142620][ T10] Call Trace: [ 1363.142628][ T10] [ 1363.142636][ T10] dump_stack_lvl+0xe8/0x150 [ 1363.142710][ T10] print_report+0xba/0x230 [ 1363.142745][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1363.142783][ T10] kasan_report+0x117/0x150 [ 1363.142854][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1363.142876][ T10] __list_add_valid_or_report+0x4e/0x130 [ 1363.142897][ T10] kcov_remote_stop+0x457/0x680 [ 1363.142923][ T10] hub_event+0x49d8/0x4f60 [ 1363.142960][ T10] ? __pfx_hub_event+0x10/0x10 [ 1363.142982][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 1363.143014][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 1363.143038][ T10] process_scheduled_works+0xb6e/0x18c0 [ 1363.143073][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1363.143099][ T10] ? assign_work+0x3d5/0x5e0 [ 1363.143123][ T10] worker_thread+0xa53/0xfc0 [ 1363.143157][ T10] kthread+0x388/0x470 [ 1363.143177][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1363.143199][ T10] ? __pfx_kthread+0x10/0x10 [ 1363.143218][ T10] ret_from_fork+0x51e/0xb90 [ 1363.143244][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1363.143266][ T10] ? __switch_to+0xc7d/0x1450 [ 1363.143316][ T10] ? __pfx_kthread+0x10/0x10 [ 1363.143335][ T10] ret_from_fork_asm+0x1a/0x30 [ 1363.143358][ T10] [ 1363.143384][ T10] [ 1363.143389][ T10] The buggy address belongs to a vmalloc virtual mapping [ 1363.143423][ T10] Memory state around the buggy address: [ 1363.143434][ T10] ffffc9001b563f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1363.143445][ T10] ffffc9001b563f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1363.143457][ T10] >ffffc9001b564000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1363.143466][ T10] ^ [ 1363.143475][ T10] ffffc9001b564080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1363.143487][ T10] ffffc9001b564100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1363.143496][ T10] ================================================================== [ 1363.143507][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1363.143522][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1363.143546][ T10] Tainted: [L]=SOFTLOCKUP [ 1363.143552][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1363.143563][ T10] Workqueue: usb_hub_wq hub_event [ 1363.143581][ T10] Call Trace: [ 1363.143588][ T10] [ 1363.143594][ T10] vpanic+0x56c/0xa60 [ 1363.143620][ T10] ? __pfx_vpanic+0x10/0x10 [ 1363.143649][ T10] panic+0xc5/0xd0 [ 1363.143672][ T10] ? __pfx_panic+0x10/0x10 [ 1363.143696][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1363.143716][ T10] ? rcu_is_watching+0x15/0xb0 [ 1363.143745][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1363.143764][ T10] check_panic_on_warn+0x89/0xb0 [ 1363.143797][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1363.143816][ T10] end_report+0x73/0x180 [ 1363.143833][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1363.143852][ T10] kasan_report+0x128/0x150 [ 1363.143870][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1363.143893][ T10] __list_add_valid_or_report+0x4e/0x130 [ 1363.143913][ T10] kcov_remote_stop+0x457/0x680 [ 1363.143936][ T10] hub_event+0x49d8/0x4f60 [ 1363.143972][ T10] ? __pfx_hub_event+0x10/0x10 [ 1363.143994][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 1363.144017][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 1363.144040][ T10] process_scheduled_works+0xb6e/0x18c0 [ 1363.144074][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1363.144100][ T10] ? assign_work+0x3d5/0x5e0 [ 1363.144124][ T10] worker_thread+0xa53/0xfc0 [ 1363.144157][ T10] kthread+0x388/0x470 [ 1363.144174][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1363.144197][ T10] ? __pfx_kthread+0x10/0x10 [ 1363.144215][ T10] ret_from_fork+0x51e/0xb90 [ 1363.144239][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1363.144261][ T10] ? __switch_to+0xc7d/0x1450 [ 1363.144282][ T10] ? __pfx_kthread+0x10/0x10 [ 1363.144308][ T10] ret_from_fork_asm+0x1a/0x30 [ 1363.144331][ T10] [ 1363.144621][ T10] Kernel Offset: disabled