last executing test programs: 8m41.565566156s ago: executing program 0 (id=1): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) unshare(0x22020400) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x13500, 0x0, 0x163}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r5, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) 8m41.301846498s ago: executing program 0 (id=6): r0 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x78, 0x48, 0x4, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, r1, 0x52a4ee3a}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) 8m40.994496183s ago: executing program 0 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) fcntl$setstatus(r0, 0x4, 0x2800) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x19, 0x0, 0x1, 0x48, 0x6, @multicast}, 0x14) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x1, 0x800, 0x6, 0xc000, 0x4, "0062ba7d8200000016001b000200f705096604"}) r5 = syz_open_pts(0xffffffffffffffff, 0xea283) dup3(r5, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0x148, 0xe8, 0x60, 0x1c0, 0x2a8, 0x2a8, 0x1c0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@ecn={{0x28}, {0x33, 0x31, 0x4, 0x2}}, @common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x7, 0x7f}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x100, 0xce3e}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x4, 0x1, 0xd8cb, 'netbios-ns\x00', 'syz1\x00', {0xa000000000000000}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2b8) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000040)='asymmetric\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r7) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 8m40.523408008s ago: executing program 32 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) fcntl$setstatus(r0, 0x4, 0x2800) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x19, 0x0, 0x1, 0x48, 0x6, @multicast}, 0x14) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x1, 0x800, 0x6, 0xc000, 0x4, "0062ba7d8200000016001b000200f705096604"}) r5 = syz_open_pts(0xffffffffffffffff, 0xea283) dup3(r5, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0x148, 0xe8, 0x60, 0x1c0, 0x2a8, 0x2a8, 0x1c0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@ecn={{0x28}, {0x33, 0x31, 0x4, 0x2}}, @common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x7, 0x7f}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x100, 0xce3e}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x4, 0x1, 0xd8cb, 'netbios-ns\x00', 'syz1\x00', {0xa000000000000000}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2b8) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000040)='asymmetric\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r7) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 30.925921884s ago: executing program 5 (id=2245): r0 = io_uring_setup(0x3249, &(0x7f0000000200)={0x0, 0x2c3f, 0x0, 0x2, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e51009894cae17d2b361d9fedae469737f49b6a39d85a1ca87cbbb9b8e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x3, 0x4, 0x6fa, 0x7ff}}) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x47456, 0x1080}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xe8, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 30.642098992s ago: executing program 5 (id=2246): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000001340)={0x4, 0x1, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/89, 0x59}, {&(0x7f00000010c0)=""/241, 0xf1}, {&(0x7f00000011c0)=""/210, 0xd2}], &(0x7f0000001300)=[0xcef5, 0x1000, 0x59ae9ad1, 0x1000000000, 0x7, 0x8]}, 0x20) (async) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000001380)=r1, 0x12) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001440)={'erspan0\x00', &(0x7f00000013c0)={'ip_vti0\x00', 0x0, 0x40, 0x8, 0x29, 0x100, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x66, 0x0, 0xf, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@lsrr={0x83, 0x1b, 0xc5, [@broadcast, @remote, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010101]}]}}}}}) bind$packet(r0, &(0x7f0000001480)={0x11, 0xf7, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f00000014c0)={0x0, 0xffff, 0x0, 0x0, r1}) r5 = syz_open_procfs(r4, &(0x7f0000001540)='oom_adj\x00') (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001580), 0x42900, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r7, 0xc0207511, &(0x7f00000015c0)={r3, 0xffff, 0x0, 0x0, r4}) tkill(r8, 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000001640)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x16, 0x0, "be0788875c9ccccc440dc2e4ec12b4739a99b67bb2ca8e6a8acc43fed4ad627ee21cd5387b8f0e0b9cf5e8edac677386b690ea5b214b02f7ca4f244cf9dd192e06f283a6fea6ad6cd358cffb11c200b3"}, 0xd8) (async) symlinkat(&(0x7f0000001740)='./file0\x00', r0, &(0x7f0000001780)='./file0\x00') (async) openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x86003, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001800)="0b56629119207a5c4618949987d0e237aece5e8aa8cf7ea7dcfba27e78eee24db25138c484d0d675e898def2423b80b22b4860198420a60f953403099ce9e8ee81", 0x41) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x0, 0x8e, 0xa5, &(0x7f0000001880)="200d3196abbc1837fb47cb672c5667318ac8d157c0ea90830d16fcf29899771b318b852de30bb8a18c2f66de0664812ece9d5b63e99f8e8f0f8231df5ba77c6b424a7b62f9c7a6bd90660b8f050c71265c175016cce4414e215a52c52e480eb463b2289a0227311516dcabe672322d3aa42d14c3dd47296767f7acff14c970b34d586d33e6048f78dec9ac67399e", &(0x7f0000001940)=""/165, 0xfffffffa, 0x0, 0xf1, 0x9c, &(0x7f0000001a00)="df82b506a192c1b05425773ac8458c65a933f8ec1bc6d3b3bcc9a0048cc1e0d860c3f62725e05c7b5f8fafe8fb9e528526ed972d4d3b327fadd5da5803ad83460c7980fccab394f0495e1e4b51e722302725a89dc654b6b4b60bd34b3d33cf32ebb7d1f8ccb522edc0260a26cfb7ebb8b163860a8701dadac05e1cf4b76e1e111e9d84f927fa3555a119b8679bd13bedf123a7427708fdb0c331003a9f717253aef15894502e0d18d9d2dc7426f74242eb9ae7ccf03b3c2de0fd602e2412f9dca6efd84f2991355e43eef4f309939cd23b55ffc733183b4292fe8cd01e24522743c26fa17abb6b13569676ab8e5de86fef", &(0x7f0000001b00)="e095b4c1103d59469b78291295455e31c80976c4e80e2a36a1df06d6c617fe4515ac2fb79941d2dead4ffb1d50055543ef139023d809c37d1ebac8d25b06c19cd492b4b44a5aa072e9ae3147c584f4c3079b50f3073cd7eeffb67625dee3262f9fc6a9d3999d72a2710509a0fccc00069f380d9e3aa7ad9955b71bc098f26f0c5ea1f62e4422b82446491432d046fc0dda6a3988a91ee8c5c33616fa", 0x7, 0x0, 0xfffffffc}, 0x50) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000001e00)={0x2, @win={{0x6, 0x1, 0x3, 0xbf0}, 0x0, 0x2, &(0x7f0000001d00)={{0x3, 0x4e3, 0x7, 0xc4}, &(0x7f0000001cc0)={{0x5, 0x80000000, 0x293a, 0x80000000}, &(0x7f0000001c80)={{0x0, 0xfff, 0x7fff, 0x5}, &(0x7f0000001c40)={{0x4, 0x101, 0x0, 0x5}}}}}, 0x5bc, &(0x7f0000001d40)="8621bf7f5b1b8a0c87df0c217e40a501628dfaf32cbe93afff405f49917b3811b9a755a894eac8c26177fdf810d73be7fe6ab2d3f4b91ccc72ecc968daac395b36907b838e1a94ecba1c55bdf40bb4c299cf3a1f68734a480ceae65e8377ec72467d22748dbde5b07cfb9246c5252f245ba26e492d6ddc3e34ac7134cb6f89b82a786cbf58aac7aaa126ddb5647bdd77389fe4ad27ccc4a947591ca87b6b608c646d2bdd2c0843", 0x8f}}) (async) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001f00)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r9, 0x3, &(0x7f0000001f40)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001f80), 0x880, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f0000001fc0)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000002000)=0x28) (async) r10 = socket$inet(0x2, 0x1, 0x8) write$dsp(r5, &(0x7f0000002040)="688ff5113e88f7fc20c149ef497ac5db1d2a74223f515d869c26c4296e74c81d18178f6e6da6d9ff74f218113ecaef848ae31bbbb82838a8305d95c4d32b57cbf32408ec82442aee27a06f67b05e66f563f4e094bf142b7ae598fff123367276a2e96b5b059abd5dac5a4f942fb86896342dfb9e3a", 0x75) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000002200)={&(0x7f00000020c0), 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x40, r11, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x20008000) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000002340)={r5, &(0x7f0000002240)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x10080, &(0x7f0000002280)={@align=0x100000001, {0xf62, 0x2, 0x7ff, 0x9}}, 0x9, &(0x7f00000022c0)={@_ha_fsid}, &(0x7f0000002300)=0x932c}) getsockopt$inet_int(r13, 0x0, 0x18, &(0x7f0000002380), &(0x7f00000023c0)=0x4) close(r10) 30.34389226s ago: executing program 5 (id=2247): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f00000020c0)=""/4082, 0xff2}], 0x1) (async) syz_usb_connect$uac2(0x2, 0xdd, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xdba, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x9, 0x0, 0x5, {0x8, 0xb, 0x1, 0x0, 0x1, 0xff, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x3, 0x19, 0xb}, [@source_unit={0x8, 0x24, 0xa, 0x6, 0x0, 0x83, 0x8, 0x4}, @source_unit={0x8, 0x24, 0xa, 0x1, 0x0, 0x2, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xcbcd, 0x0, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x6, 0xfd, 0x8, 0x7f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x318, 0x1, 0x7, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x76cf, 0xf0, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x2, 0x3, {0x8, 0x25, 0x1, 0x80, 0xc, 0x81, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x3, 0x81, 0x0, 0x1000, 0x2, 0x9, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x10}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0xf5, 0x1, "04"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x4, 0xc, {0x8, 0x25, 0x1, 0x2, 0xf, 0x6, 0x197}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x0, 0x5, 0xf8, 0x8, 0xfe}, 0x8, &(0x7f0000000240)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x820}}]}) 27.419424222s ago: executing program 5 (id=2259): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000e908010026bdef00ffdbdf250a00000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r7, 0x40103d02, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, 0x0, 0x4000000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) fsopen(0x0, 0x0) 22.718132924s ago: executing program 2 (id=2280): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810101400000000000109022400010000000009040000030300000009210000000122070009058103"], 0x0) syz_usb_connect$uac1(0x5, 0xd3, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x81, 0xb0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x43}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x5, 0x65, 0x5, 0x7, 0xc8}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x2, 0x9, 0x5, 0x7, 0xff}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x6, 0x2}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x3, 0x4, "08f26dbe"}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x4, 0x81, "26a41d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0x6, 0x8, "fde76afdd57f50cb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0xa1, 0x81, {0x7, 0x25, 0x1, 0x4, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff, 0x8, 0xc, "901c7bfb5e"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x7, 0x0, 0x7, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0xa7, 0x6, {0x7, 0x25, 0x1, 0xc, 0x1, 0xb}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x4, 0x96, 0x5b, 0xff, 0x2}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "79ea9f8cee78d4be4d500a766258b96a"}]}, 0x5, [{0xe6, &(0x7f0000000240)=@string={0xe6, 0x3, "8781c95f9a7fe1356cfa1a438ff70201f30eb2b9ed98d68e802c2dd8dcf0520d97bce1e3747ee6db8beec13a36fb5fc67766e3358847a3f13919102cae1adde1f69c9f13b6b5b32241b8c051f1bcd4dcaf8eea4f2ec867be24545975af49e40ecaed8e36049cb24fd1152872d1115666cb31064b7ee39bf821b8caf6b997abd0d4735181c83c60f67e36caee39f8cfb503519f328cbc61e58296145de292035cf3449b5867526b45869e73da83255f28cd964d19a328c4f1218e7438b450aaf8bca429e661495be297557e46f00737bffbeab0df05d419fc5bac955099e6fcdfa97f7a82"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x402}}, {0x33, &(0x7f00000003c0)=@string={0x33, 0x3, "6743ddac61ff015822cfa472fc18040e80f1237f81194619187059de0c2bfe45c97b54e37b19adcedef1fd6e9f1a8e480d"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0c}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200810000000100a3410926d"], 0x0, 0x0, 0x0, 0x0}, 0x0) 21.436421046s ago: executing program 1 (id=2284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x24008084) 21.315862062s ago: executing program 4 (id=2285): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000ce0000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000850000000e000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7fd, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x700, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000140)={[0x4]}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = epoll_create1(0x80000) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)={0x90000009}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) r6 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x8) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000847}, 0x8000002) 21.314408713s ago: executing program 1 (id=2286): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r4, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r9], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r10, r10], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 21.06459508s ago: executing program 1 (id=2287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x83, &(0x7f00000002c0)="8a00000002000000", 0x8) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x5, 0x1a4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010001fff26bd70000000000000dd0000", @ANYRES32=0x0, @ANYBLOB="00000000bb10030014001280090001007665746800000000040002"], 0x34}}, 0x24008000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) io_setup(0x8, &(0x7f0000000240)=0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r10, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r7, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r9}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r7, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r11}) connect$can_bcm(r5, &(0x7f0000000040), 0x10) io_submit(r6, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38, 0x0, 0x0, 0x2}]) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000001c0)) 20.523248739s ago: executing program 4 (id=2288): syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000000)) 20.24926903s ago: executing program 5 (id=2290): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010100ab51a0407b0500000000000000010902120001200000000904"], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60090000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000afefd02b71535a4600000"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010100ab51a0407b0500000000000000010902120001200000000904"], 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r0, 0x402) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60090000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000afefd02b71535a4600000"], 0x0) (async) 19.964344123s ago: executing program 1 (id=2292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003240)=@newtfilter={0x13a4, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x1374, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x7e}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1358, 0x6, [@m_ct={0x124, 0x20, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0xdd, 0x6, "eb44396f91ad70da3f830b725fdc44915f4c0e6ca8c1da643a85459a4387dd852f54b12c6287f168b3d701ae55a2bc18e9b88c7e3991f8f14480393f0ec6ececff7b568ef86ef9aeef05417d7e209557d61d698bea1acbcd6c315d97fe782e094a136f702670177abebfb1269f64a8ce0048df483e2d3a257ffd50134762cf5c88b3ac84a4da7ddbbe54fb170edef0dfbab1fa94a8a3cd11cb888fe0bd76bcc42bc4584d10876a1d1098729d5da9c34e53c1c8e9adedf68885479dd014b60147538a703c76f130ed93a5f2180b2457905aa0ca7309de061140"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x9c, 0x1b, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_FD={0x8}]}, {0x45, 0x6, "3b6a813d0cc6febf372c9178f8b28dd132865fe831452365560d8ee8e5ecf8be1f4192ffd1e606c57fb9c358dbb6ec1f871c4a64c8cf48a6f367fd5d9281cee8d6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x128, 0x18, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x621, 0x10000000, 0x10000, 0x10}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1fc1, 0x6}}]}, {0xbe, 0x6, "bbda4b132a74e2ee9902b87bf8eac2bf75f49ce90a8f1e833afd21b98cf20cb8ccf92bb923a995abbebb4b6cdd6172f643405474a31eae374542926cafde6407558a738fbb35a56fbe8b55017a7cd7dc7bdbeef2b4ff60488dea00209cc3b35603f300bd787a61b4dabf400a8ad10ce32365eb4fa5e7847c5a94ec8865062589608ae43ba96e03f83ea1c0f68753e9578f826a81832ae1392536dafc7cd661849a8eef2351caa9ded865d4d6b7006ebf8f0522136bff34c9f5a7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_bpf={0x174, 0x11, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x4, 0x0, 0xcfc7197, 0x1}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8000, 0x21, 0x4, 0x2, 0x6}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xb, 0x3, 0x8001, 0x6}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0xe2, 0x6, "5e8c47c760a2120cae4e404f2b06cf42a17cbc86dfd7603af235f8f872d92b23dc72ae0b79013c979f7980774fd27f40b93a0689c3ce6ab72614d91f129f5650a31cac800e343bec0b5829e2dc66e65e7493cdb3561474a1ac731e655da597e77a481ffe972499921f4979956160e02cbd019a54150d767417bb2e9a044632516df5c9fcd46f16b754502ccb27a433d3b0c337a6f61e34eff5b5d9f25ddeb91e61c1e37820e8e3909c9962b57fbbc325472426022032d2820da58dc92469ef85d64f5b2e0d3ad98267532f3b4e070b4e46755c4db671ac7cd06f66efe140"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xef8, 0x15, 0x0, 0x0, {{0xa}, {0xecc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x6, 0x1, 0xffffffffdffffff7, 0x3, 0x2}, 0x7, 0x9, [{0x3d2a, 0x800, 0x4, 0x2, 0x9, 0x101}, {0x3, 0x6, 0xf5bf, 0x3bb57f11, 0x8, 0x80ce}, {0x81, 0x5, 0x8, 0x2, 0xcfe, 0x3}, {0x6, 0x81, 0x9, 0x9, 0xf, 0x8}, {0x6, 0x4, 0x5, 0x80000001, 0x3, 0x2}, {0x7, 0xa, 0x6, 0x400, 0xf, 0x7}, {0x2, 0x7, 0x7, 0x1, 0x3, 0x2bf0a576}]}, [{0x4, 0x8, 0x0, 0x6, 0xfffffff7, 0x10000}, {0x200, 0x2, 0x3, 0x3, 0x5d, 0x5}, {0x2, 0x8, 0x81, 0x46, 0x8001, 0x9}, {0x1, 0x40000000, 0x2, 0x1, 0x400, 0x7}, {0x72, 0x6, 0xfffffffb, 0x9, 0xf, 0x7}, {0xff2, 0xc29, 0x5, 0x3, 0x8, 0xf}, {0x80000000, 0x5, 0x8, 0x6e, 0x7, 0x1}, {0xa0, 0x0, 0x4fc, 0x1, 0x2132, 0x6}, {0x2a, 0xffffffff, 0x800, 0x80000000, 0xffff, 0x9146}, {0x1, 0x2, 0x5, 0x9, 0x7, 0x3}, {0x0, 0xfffffff8, 0x401, 0x3, 0x5, 0x2}, {0x7f, 0x3, 0x2, 0x4, 0x1, 0x3}, {0x6, 0x8, 0x4, 0x1, 0x0, 0x100}, {0x7, 0x3, 0xd5, 0x3, 0x7, 0x4}, {0x1ff, 0x0, 0x3, 0x7, 0xa, 0xafc4}, {0x80000000, 0x9, 0x6, 0x7ff, 0x0, 0x4}, {0x10000, 0xc3, 0x6, 0x8, 0xc, 0x240000}, {0x40, 0x10, 0x7, 0x2, 0xfffffe00, 0x12000000}, {0x2, 0xfffffff9, 0x3850d7fd, 0xbc8, 0x9, 0x3}, {0x5, 0x209, 0x5071, 0x6aa, 0x40, 0x7}, {0x5, 0x4, 0x2, 0x4, 0xa, 0xfffffffd}, {0x2, 0xd, 0xa, 0xfe, 0x449, 0x8}, {0x0, 0x6770, 0x9, 0x1000, 0x5, 0x2}, {0x8, 0x4, 0xfffffffb, 0xffffdcfe, 0x1, 0x7f}, {0x3, 0x2, 0x4, 0x2, 0x8, 0x3}, {0x57a1, 0x6, 0xd7, 0x1ff, 0x3, 0x8001}, {0x234e, 0xfff, 0xfffffffb, 0x5e0, 0x7f, 0x9}, {0x9, 0x6, 0x9, 0xc, 0x0, 0x7}, {0x7f, 0x2, 0x4, 0x4, 0x80, 0x101}, {0x6, 0x5b, 0x6, 0x1, 0x3, 0x3}, {0xfffffff7, 0x9, 0x7, 0x2, 0x9, 0x7ff}, {0x5, 0x4, 0x8, 0xf1, 0x3, 0x10001}, {0xa, 0x1, 0x7, 0x9, 0xe4, 0x6}, {0x2000, 0x6, 0x5, 0xf16, 0x0, 0x3}, {0xfffffff7, 0x3, 0x7, 0x2, 0x3, 0x5e7e}, {0x9, 0x6, 0x6, 0xaa3c, 0x53d, 0x4}, {0x689, 0xfffffffe, 0x7fff, 0x401, 0x7, 0x6}, {0x5, 0xe90, 0x6, 0x2, 0x9e, 0x700}, {0x14, 0x8, 0x7ff, 0x1a2, 0x8, 0x3}, {0x8, 0x3, 0x2, 0x6, 0x7, 0x7}, {0x26fa, 0x0, 0x5, 0x0, 0x6, 0x6}, {0x76e, 0x807, 0xfffffffb, 0x7, 0x6, 0x1}, {0x1, 0x5e06f4fa, 0x5, 0xc, 0x1, 0x6}, {0x6, 0x2, 0x14a, 0x3548, 0x7, 0x81}, {0x1, 0x80000000, 0x1, 0x5cbd, 0xfffffffd, 0x200}, {0x3, 0x0, 0x1ff, 0x91f, 0x9, 0x2}, {0x3, 0x0, 0x5d35, 0x6, 0x2, 0x6}, {0x0, 0x7, 0x5, 0x5, 0x1, 0xfffffc00}, {0x84a, 0xffffff81, 0x3, 0xfffffff9, 0x1000, 0x5}, {0x81, 0x7, 0xffffffff, 0x1, 0x81e, 0x401}, {0x8, 0x1, 0x10001, 0x7fff, 0x40, 0x5}, {0xcea, 0x2c, 0xf48, 0x1, 0x1, 0x7}, {0x3db4, 0x2, 0xd, 0x0, 0x6, 0x7}, {0x5, 0x80, 0x8, 0x7fffffff, 0x8, 0x402}, {0xfffffffe, 0xffffff3a, 0x5, 0x4, 0x9, 0x80}, {0xffff, 0x5, 0x7, 0x9, 0xb, 0x2}, {0x412, 0x8000, 0x3ff, 0x9, 0x9, 0xfffffffd}, {0x1, 0x2b, 0x3, 0x6, 0x8, 0x3ff}, {0x2, 0x3, 0x3ff, 0x10, 0x9, 0xe1cb}, {0x800, 0x10001, 0x475f, 0x3, 0x2, 0x2}, {0x7, 0xfffffffc, 0x4, 0x0, 0x7, 0x3}, {0x9, 0x9, 0x9, 0x7, 0x140, 0x5}, {0xcc, 0x6, 0x2, 0x6, 0x3b7, 0xec7c}, {0x20, 0xa, 0x1, 0x800002, 0x12a6, 0xe4e}, {0x8d, 0x6, 0x5, 0x2, 0x4, 0x5}, {0x7, 0x8, 0x2, 0x2, 0x8001, 0x302}, {0x0, 0x3, 0x4, 0x7, 0xb, 0x6}, {0x7ff, 0xfffffff2, 0x3, 0x5, 0x2, 0x80800}, {0x7, 0x1, 0xffffffff, 0x1, 0x4, 0x101}, {0xffffffff, 0x8, 0x8001f4, 0x7, 0xffff7fff, 0x1}, {0x8, 0x10, 0x9, 0x7, 0xffffffff}, {0x0, 0x2, 0xf, 0xb, 0x3, 0x1ff}, {0xd, 0x81, 0x59b44f09, 0x8, 0xda, 0xad}, {0x6, 0x0, 0x0, 0x9, 0x3, 0x5}, {0x800, 0x7fff, 0xffffffc0, 0x2000, 0x6, 0xf81}, {0xd079, 0x4, 0x275d, 0x9, 0x9, 0x2}, {0x3, 0x2b, 0xb, 0x6, 0xb0, 0x2}, {0x8, 0x5, 0x9, 0x959, 0x26a7aa5c, 0x23c}, {0x4, 0x1, 0x10000, 0x9, 0x1ff}, {0x2000, 0xfffffffa, 0x91e, 0x236, 0x48, 0x5}, {0x80000000, 0x3, 0x0, 0x0, 0x8, 0xa}, {0x9, 0x7, 0xff, 0x3, 0x1, 0xbe}, {0x8, 0xfffffffe, 0x931, 0x3, 0xfffeffff, 0x6}, {0x1, 0x8, 0x48, 0x7, 0xaae, 0x7}, {0xfffffffd, 0x8000, 0x18, 0xf1bc0, 0x8, 0xeb}, {0x3ff, 0x2, 0x7, 0x4, 0x4, 0x8}, {0x4, 0x4, 0x3, 0xd, 0x9, 0x80}, {0x81, 0x3, 0xa, 0x8, 0x7fff, 0x4}, {0x8, 0x6, 0x9, 0xc, 0xec, 0x9}, {0xd2, 0x3, 0x1, 0xffbffffb, 0x1, 0xe}, {0xffff1b68, 0x0, 0x80, 0xd, 0xfffffff7, 0x3}, {0x0, 0xfff, 0x7, 0x80000001, 0x0, 0x1}, {0x2, 0x9, 0x7, 0x1, 0x3, 0x8}, {0x504, 0xb18, 0xd, 0x8, 0x7ff, 0xfffffc00}, {0x400, 0xb8, 0xe881, 0x9, 0xfffff348, 0xfffffffd}, {0x4, 0x58, 0x9, 0x4, 0x23ed, 0x4}, {0xffffffff, 0xbd2, 0x5, 0x515, 0x7, 0x4}, {0x800, 0xa, 0x4, 0x1ff, 0x8, 0x5}, {0x81, 0x0, 0x4, 0x7, 0x401, 0x2}, {0x0, 0x8, 0x39, 0x6b, 0xea3, 0x8}, {0x2, 0x0, 0x4, 0xfc000000, 0x0, 0x3}, {0x6, 0x7, 0x1, 0x7, 0x4}, {0x40, 0x2, 0x6e5, 0x1, 0xfffffff7, 0x3}, {0x9, 0x3, 0x1000, 0x4, 0x8000, 0x3}, {0x9, 0xf, 0xfffffff9, 0x1, 0x0, 0x8}, {0x7, 0x6, 0x9, 0x3, 0x7fffffff, 0x1}, {0x8001, 0x0, 0x9, 0x7fffffff, 0x7, 0x1}, {0x1, 0x7fffffff, 0x5, 0x1, 0x7, 0x5}, {0x0, 0x1, 0x7fffffff, 0xffff8001, 0xffa, 0xffff15cf}, {0x2, 0x8000, 0x0, 0x7, 0x9, 0x6}, {0x6, 0xe46, 0x10001, 0x8, 0x6}, {0x2, 0x0, 0x2, 0x9, 0xd23, 0x4}, {0x6, 0x80000000, 0x7fff, 0x2, 0x7, 0x1}, {0x0, 0x9, 0x8001, 0x7, 0x4, 0x7d23}, {0x1, 0x5, 0x29f6f711, 0x5, 0x7, 0xa62e}, {0x6, 0xfffe0000, 0x8001, 0x9, 0x3ff, 0x2}, {0x8001, 0x1, 0xa, 0xfffffff7, 0x4, 0x5}, {0x2, 0x3f, 0x401, 0x6, 0x7f, 0x3}, {0x4, 0x0, 0x8, 0x12, 0xfffffff6, 0xcaa}, {0x4, 0x4, 0x3, 0x93d6, 0x5, 0x4}, {0x2, 0xa74, 0x1, 0x101, 0x30000000, 0x5}, {0x0, 0x0, 0xd1fc816b, 0x5, 0x7f, 0x8001}, {0x4000000, 0x0, 0x4, 0x2, 0x80000001, 0x3}, {0x4, 0xba2d, 0xd14, 0x8, 0xfff, 0x83}, {0xaf, 0x9, 0x3, 0x0, 0xfffffff7, 0x1}, {0x800, 0xffffffff, 0x6, 0x2, 0xa6, 0x3}, {0x9, 0x4000000, 0x5f, 0x520, 0x2, 0x1ff}, {0x4, 0x1000, 0xfffffffb, 0x8, 0x5, 0x8}], [{0x2}, {0x2}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {}, {}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x7, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4}, {0x3, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x3}, {0x1, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x7}, {}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {}, {0x2}, {}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x4}, {0x2, 0x9410fc66d8b95d}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2}, {0xffe795942c72a62a, 0x1}, {0x4}, {}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xf5d0e0b086677775, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0xcf52383f52c6b1bc, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x13a4}}, 0x20040054) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007da000/0x4000)=nil, &(0x7f00009fa000/0x3000)=nil, &(0x7f000033d000/0x1000)=nil, &(0x7f0000151000/0x2000)=nil, &(0x7f0000906000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000ea000/0x9000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$kvm(0xffffffffffffff9c, 0x0, 0x60303, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x1, 0x200401, 0x6, 0x5, 0x5, 0xfffffffd, 0x7}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48c, 0x0, 0xfffffffffffffffb}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) memfd_create(0x0, 0x1) fanotify_mark(0xffffffffffffffff, 0x200, 0x8, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x7}, 0x20) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000280)="2e835b752d04f1d4e3b168b9248f152bd4cbc2307e76ad66c56bd655524d8a083fc6696988d073601c04a6cf3df1b12d0e883007750bb8c8caede92722443c4702218bcd6d353b3dc35cbcff3a835b8af0bc57ceb5841c5820e034a308f6c6848d5a89c7664a431b517650d7e37a629efde2348ed3f23c12553e0bad48e424b07e11b465462257b2537f8ec96bf149287ab93d9d9c92", 0x96}, {&(0x7f0000000380)="08c3dd581f78", 0x6}, {&(0x7f00000003c0)="6bcd3e1dfe1499cf7cf3ee434f73271618106558c77fa734b514fece5c415dea0f411bb70799eee79eb499a3119b4b0d17a503ec8d96cafea86d9c05e8382578fc8de15ed73fafc83cac9a06f6e9cb732542c6ce97000cb13376f20d2a3d0516c2f6b90c997fc1073adbc9e05c67522b75be6e0685b91bef5ad51777aa8f6497db814a32af9b00485e93c2c5b89f533e3cbcb00551f54043fa265fba3f9ca136c3e4230ebc9495df90ca0717", 0xac}, {&(0x7f0000000540)="35d777719a82409021d457bf39fe6b313f556e83067791dee19a420dce27a922b99e51ed3b85ca9fe33a0dad4684d1e814cac20acf387e8070990e851d5489850f99ec417a290e428dafb37937fe0c47ad0487d47aa0140df59599e31fb5e8ec6f0e0936244cf614159c4096ef9737e7a333b90db6e0eeb7905a9be1369395a52761cafc0335c5e402268fb64774187f145d51872795bc2f67ddd26276fe2a13cb4a72b8d0b3b25f4275c59181caa4ae632439c517d3a76d8c9e30f1", 0xbc}, {&(0x7f0000000600)="717a2c74fc4c4e63b9e8c62802401772008d3b2ade46c7c776ed8a51da9235e0fa5a93cd0b7ff9ecbc21126d5e6aa9e620ac10a3c2f8c9e64c19d9999a1dcf8ebc4f964cc88b88ea81087a9ce06aae984a18ab047c636e66f1f8daf9e7d465d336f370d4e5306d3cfcb436ed8f98d767708c222722609ca2cf46b277ff5e", 0x7e}], 0x5, &(0x7f0000000740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@generic={0x7, 0x9, "7db7ec6bfe8de9"}, @lsrr={0x83, 0xb, 0xcd, [@multicast2, @broadcast]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xb, 0x3, 0x5, [{@loopback, 0x8000}, {@broadcast, 0xe15}, {@multicast2, 0x4}, {@multicast2, 0x5}, {@private=0xa010100, 0x7fff}]}, @rr={0x7, 0xb, 0x86, [@loopback, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xe0d5}, {@broadcast, 0x9}, {@rand_addr=0x64010100, 0x8}]}, @lsrr={0x83, 0x13, 0x1f, [@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xd8}, 0x20000810) ioctl$sock_proto_private(r9, 0x89ea, &(0x7f0000000100)="84ad2c1b8ec2e9") sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001800010000000010fbdbff250a01090000000100", @ANYRES32=0x0, @ANYBLOB="08001f"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0502030109024700010000000009046900000e010000182403010202"], 0x0) 19.771040462s ago: executing program 2 (id=2293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) r2 = socket(0x9, 0xa, 0x7) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'dvmrp1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'dvmrp1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create(0x8cf) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="30340800080211000001ffffffffffff500000000050030418000500a9002d1a0080046f000000000000000500060005000000000400000000c0"], 0x3a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4c020) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4c020) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) lseek(r8, 0x4000000007, 0x1) (async) lseek(r8, 0x4000000007, 0x1) rmdir(&(0x7f0000000180)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) 19.628358982s ago: executing program 4 (id=2294): mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe10, 0x10, &(0x7f0000000040), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x42) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$inet6(0xa, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r9, 0x5) shutdown(r9, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000080), 0x12) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000001c80)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x37, 0x1, 0x20, "3bd9e3280005fffffffbffb7e6e89a00a417000000e9268cd237c55d618e00", 0x51424752}) brk(0x200000ff8000) 19.166774307s ago: executing program 5 (id=2295): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000008c0)=""/146, 0x92}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000600)=""/156, 0x9c}, {&(0x7f0000001400)=""/97, 0x61}, {&(0x7f0000001480)=""/28, 0x1c}], 0x5}, 0xe9}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x20, 0x24, 0x16, {0x16, 0xc, "fcedfa253d8043e925819d25a1c63ac62b23c698"}}, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r5, 0xc018480d, 0x0) ioctl$HIDIOCGDEVINFO(r5, 0x801c4803, &(0x7f0000000440)=""/231) ioctl$HIDIOCGUSAGE(r3, 0x501c4814, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0xfffff803}) 19.166495725s ago: executing program 3 (id=2296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x24008084) 18.976912586s ago: executing program 3 (id=2297): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r4, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r9], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r10, r10], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 18.701956316s ago: executing program 3 (id=2298): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x10000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc851}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES64=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4890) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_disconnect(r2) 18.600134629s ago: executing program 1 (id=2299): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) epoll_create1(0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016519a0203010902"], 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) accept4$alg(r4, 0x0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_usb_connect$hid(0x5, 0x75, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000087d1e3831000000000001090224000100008083090400000903000100092104000901222800090581034000002bfe"], 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf207, 0x10000, 0x0, 0x1f2}, 0x0, 0x0, 0x0) (async) epoll_create(0x1) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002020000102505a1a440000102030109023b0001010540070904000802020633c7aa5628e187a1240001000d240f010300000007000700f6090582020002dbdb0000000000000406fb0351e03b5cc4a7ef4a15c5321fc92c505b2d7890288d7b85be867ab962313fbf0b"], 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r5], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x0, 0x2}) 18.550848103s ago: executing program 4 (id=2300): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x41341) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x4, "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"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001880)={0x20, 0x13, 0x1, 0x0, 0x25dfdbfd, "", [@nested={0x10, 0x98, 0x0, 0x0, [@typed={0xc, 0x114, 0x0, 0x0, @u64=0xffffffffffffffff}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x82000}, 0x4000800) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) 18.444796211s ago: executing program 1 (id=2301): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x38, 0xe1, 0xd, 0x8, 0x13d8, 0x1, 0x324c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x22, 0xff, 0x40, 0x4, "", [{{0x9, 0x4, 0x74, 0x3, 0x0, 0x34, 0xa3, 0xf1, 0x63}}]}}]}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x15, 0x5, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) read$FUSE(r2, &(0x7f0000001600)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x60, 0x12, 0x905, 0x70bd28, 0x25dfdbfe, {0x21, 0x9, 0xb, 0x0, {0x4e22, 0x4e26, [0xfffffffc, 0x923, 0x0, 0x6], [0x401, 0x4, 0x3, 0x2], 0x0, [0x10000, 0x2005]}, 0x31, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0714140002209c9523f92b005556a4f4"}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r4, &(0x7f0000000340)={0x9, 0x0, 0x83, 0x0, 0x1}, 0x8) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x8001) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0xffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) r6 = syz_open_dev$evdev(&(0x7f0000000240), 0xfffffffffffffffd, 0x500) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={{r6}, 0x9, 0xd3, 0x7}) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x7fffffffffffffff, 0x101000) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000280)=""/206) 18.240089875s ago: executing program 4 (id=2302): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xd82, 0x80000000, 0x3, 0x1, 0xe4, 0x8, 0x8, 0x1, 0x7, 0x6, 0xc0000, 0x7, 0x4, 0x2f9, 0x0, 0xffffffff, 0x2, 0xffffffff, 0x80, 0x0, 0xfffffffb, 0x5, 0x1, 0x380000, 0x3, 0x9, 0x9, 0x1ff, 0x400, 0x3, 0x3, 0x10, 0x7, 0x3, 0x0, 0x3, 0x9, 0x4, 0x81, 0x80000000, 0x0, 0x5, 0xf, 0x0, 0x1000, 0x10000, 0x0, 0x4, 0x4, 0x6, 0x0, 0xfffffffb, 0x1, 0x0, 0x73ee, 0x7ff, 0x4, 0x800, 0x200, 0x3, 0x4, 0x2, 0x6, 0x5, 0xe, 0x9, 0x4, 0x2, 0x3, 0x4, 0x6, 0x6, 0x80, 0xa, 0xa, 0x1da, 0x1, 0x5, 0x7, 0x3, 0x0, 0x1, 0x6, 0x8000, 0xbcca, 0x7e5, 0x3, 0xf, 0x1, 0x5, 0x7, 0x4, 0x8, 0x1, 0x8001, 0xe, 0xd, 0x645, 0x0, 0x7, 0x6, 0x7f, 0xffffff81, 0x401, 0x401, 0x3, 0xd3, 0x100, 0x5, 0x7, 0x10000, 0x7, 0x800, 0x5240, 0x1000, 0x0, 0x5e, 0x8000, 0xda289fc, 0x1, 0xe7b9, 0x80000001, 0x4, 0x2, 0x3, 0x5, 0x0, 0x3f, 0x2, 0x5, 0xa, 0x100, 0x3, 0x9, 0x401, 0xe4b, 0x6, 0x3, 0x4, 0x8, 0x1, 0x9, 0xc, 0x8, 0xfffffffe, 0x0, 0x9, 0x9, 0x1, 0xffffffff, 0x7, 0x800, 0x3, 0x0, 0x1, 0x9, 0xd3fb, 0x5, 0xffffffff, 0x400, 0x2, 0x200, 0x3e1e, 0x10002, 0x81, 0x4, 0x9, 0x5, 0x8, 0xffff, 0x1, 0x0, 0x7, 0x71, 0x6, 0x2, 0x9, 0x9, 0xb, 0xfffffffe, 0x200, 0x8, 0x6, 0xee7a, 0x7c61c8d9, 0x7, 0x7ff, 0x6, 0x7, 0x401, 0x4a3f, 0x2, 0x7, 0x7, 0x2, 0x1, 0x9, 0x9, 0x3, 0x3, 0xe, 0x2, 0x0, 0x7, 0x9, 0x4, 0x200, 0x1, 0x0, 0x2, 0x8, 0x6, 0xc34de82, 0xd, 0x0, 0x0, 0x0, 0x8, 0x6, 0x6b6f, 0xfffeffff, 0x0, 0xc, 0x65, 0x0, 0x40, 0x4, 0x4, 0x9, 0x4, 0x80000001, 0x35, 0x4, 0x3bf, 0xe90, 0x5, 0x7, 0x95d, 0x4, 0x2, 0x0, 0x3, 0x212, 0x1, 0x2, 0x1, 0x80, 0x6, 0x8, 0x80000001, 0x4, 0x7, 0x5, 0xb, 0x2]}]}]}}]}, 0x43c}}, 0x800) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x72, 0x80000}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0xfffffffc, 0x6727, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x2c}}, 0x20004810) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000040)=@x86={0x6, 0x0, 0x8, 0x0, 0x4000004, 0x8, 0x6, 0xb, 0x83, 0xe, 0x5, 0xa, 0x0, 0x101, 0x28, 0x0, 0x0, 0x0, 0x4, '\x00', 0xff, 0x9}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r11 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc821, 0xc000, 0x4, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fstat(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000301, r12, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x900) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 17.967068266s ago: executing program 4 (id=2303): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x2, 0x29a10f4c, 0xb, 0x2, 0x8, 0x3, 0x0, 0x0, 0x4}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)="9b7385220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553a187d0", 0x30}, {&(0x7f0000000540)='S\x00\x00', 0x3}], 0x2) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf0, 0x0, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) prlimit64(r9, 0x4, &(0x7f0000000440)={0x48, 0x3}, 0x0) getsockopt$sock_cred(r8, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000100)="0f2150daaf008066b8147e00000f23d80f21f86635400000e00f23f8260f01cf0fc79dfcf066b9d702000066b8f200000066ba000000000f300f1dfccf0f017d7b66b8010000000f23d00f21f86635100000020f23f8", 0x56}], 0x1, 0xe, 0x0, 0x0) 17.463820837s ago: executing program 2 (id=2304): socket$packet(0x11, 0x3, 0x300) inotify_init() fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x106, 0x2}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 17.195449145s ago: executing program 3 (id=2305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000) r1 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x9, @meta={0x3854454d, 0x31912aef, 0x33565348, 0x6661, 0x4c319713}}, 0x10000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) 17.173205845s ago: executing program 2 (id=2306): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x10040800) creat(&(0x7f0000000200)='./file0\x00', 0xe9d2c50bd1ba48c1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r1) read$FUSE(0xffffffffffffffff, &(0x7f0000001000)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000003040)={0x20, 0x0, r2, {0x5, 0x4, 0x1, 0x1}}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x1000000008005, 0x8, 0x7, 0x5, 0x4000, 0x1000, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/file0/../file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r6, 0x4004510d, &(0x7f0000000040)=0xac) memfd_create(&(0x7f0000000000)='@,-&,$\x00', 0x20000007) r10 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x8, &(0x7f0000000080), 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.782957451s ago: executing program 3 (id=2307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x24008084) 16.52222295s ago: executing program 2 (id=2308): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r4, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r9], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r10, r10], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 16.495948515s ago: executing program 3 (id=2309): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x2a, 0x100, 0x0, 0x9, 0x1d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000440)={0x0, 0x2, "5a77bd318786aeb202dfcdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881a50f68530c2b21a100ef00000000ff3111d6847e0c7f719e169a596e5fc008daefbae8f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171111d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c3ac6cb437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) r3 = fsopen(&(0x7f0000000740)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000400)="89070404", 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0xfffffe0000fffffd, 0x1ff, 0xffffffff}, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000600)={0x0, 0x1, "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"}) 16.216782049s ago: executing program 2 (id=2310): mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe10, 0x10, &(0x7f0000000040), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x42) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$inet6(0xa, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r9, 0x5) shutdown(r9, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000080), 0x12) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000001c80)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x37, 0x1, 0x20, "3bd9e3280005fffffffbffb7e6e89a00a417000000e9268cd237c55d618e00", 0x51424752}) brk(0x200000ff8000) 0s ago: executing program 33 (id=2295): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000008c0)=""/146, 0x92}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000600)=""/156, 0x9c}, {&(0x7f0000001400)=""/97, 0x61}, {&(0x7f0000001480)=""/28, 0x1c}], 0x5}, 0xe9}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x20, 0x24, 0x16, {0x16, 0xc, "fcedfa253d8043e925819d25a1c63ac62b23c698"}}, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r5, 0xc018480d, 0x0) ioctl$HIDIOCGDEVINFO(r5, 0x801c4803, &(0x7f0000000440)=""/231) ioctl$HIDIOCGUSAGE(r3, 0x501c4814, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0xfffff803}) kernel console output (not intermixed with test programs): 9067][T12691] Call Trace: [ 447.569075][T12691] [ 447.569083][T12691] dump_stack_lvl+0xe8/0x150 [ 447.569115][T12691] should_fail_ex+0x40c/0x560 [ 447.569142][T12691] _copy_to_user+0x31/0xb0 [ 447.569170][T12691] simple_read_from_buffer+0xe1/0x170 [ 447.569199][T12691] proc_fail_nth_read+0x1bb/0x230 [ 447.569227][T12691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 447.569255][T12691] ? rw_verify_area+0x24a/0x4c0 [ 447.569284][T12691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 447.569307][T12691] vfs_read+0x213/0xa80 [ 447.569339][T12691] ? __pfx___mutex_lock+0x10/0x10 [ 447.569366][T12691] ? __pfx_vfs_read+0x10/0x10 [ 447.569394][T12691] ? __fget_files+0x2a/0x420 [ 447.569421][T12691] ? __fget_files+0x3a2/0x420 [ 447.569443][T12691] ? __fget_files+0x2a/0x420 [ 447.569480][T12691] ksys_read+0x150/0x270 [ 447.569508][T12691] ? __pfx_ksys_read+0x10/0x10 [ 447.569543][T12691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.569563][T12691] do_syscall_64+0x174/0x580 [ 447.569588][T12691] ? trace_irq_disable+0x3b/0x140 [ 447.569611][T12691] ? clear_bhb_loop+0x40/0x90 [ 447.569634][T12691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.569653][T12691] RIP: 0033:0x7f5841f5e68e [ 447.569670][T12691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 447.569687][T12691] RSP: 002b:00007f58401f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 447.569706][T12691] RAX: ffffffffffffffda RBX: 00007f58401f66c0 RCX: 00007f5841f5e68e [ 447.569719][T12691] RDX: 000000000000000f RSI: 00007f58401f60a0 RDI: 0000000000000004 [ 447.569731][T12691] RBP: 00007f58401f6090 R08: 0000000000000000 R09: 0000000000000000 [ 447.569743][T12691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.569754][T12691] R13: 00007f5842226038 R14: 00007f5842225fa0 R15: 00007f584234fa48 [ 447.569783][T12691] [ 447.916822][ T10] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 448.130009][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.146792][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.167145][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 448.185008][ T5718] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.208078][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 448.218043][ T5718] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 448.232842][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.304569][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.317077][ T10] usb 6-1: config 0 descriptor?? [ 448.326757][ T5718] usb 3-1: config 0 descriptor?? [ 448.668440][ T5718] usbhid 3-1:0.0: can't add hid device: -71 [ 448.680182][ T4991] Dev loop2: unable to read RDB block 7 [ 448.688663][ T4991] loop2: unable to read partition table [ 448.694973][ T4991] loop2: partition table beyond EOD, truncated [ 448.697988][ T5718] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 448.754571][ T5718] usb 3-1: USB disconnect, device number 96 [ 448.764931][ T10] plantronics 0003:047F:FFFF.0026: reserved main item tag 0xd [ 448.782467][T12712] syzkaller0: entered promiscuous mode [ 448.790478][T12712] syzkaller0: entered allmulticast mode [ 448.803801][T12712] FAULT_INJECTION: forcing a failure. [ 448.803801][T12712] name failslab, interval 1, probability 0, space 0, times 0 [ 448.818125][ T10] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 448.830644][T12712] CPU: 1 UID: 0 PID: 12712 Comm: syz.2.1933 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.830674][T12712] Tainted: [L]=SOFTLOCKUP [ 448.830682][T12712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 448.830692][T12712] Call Trace: [ 448.830700][T12712] [ 448.830709][T12712] dump_stack_lvl+0xe8/0x150 [ 448.830744][T12712] should_fail_ex+0x40c/0x560 [ 448.830771][T12712] should_failslab+0xa8/0x100 [ 448.830801][T12712] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 448.830824][T12712] ? skb_clone+0x212/0x3a0 [ 448.830842][T12712] ? skb_clone+0x212/0x3a0 [ 448.830866][T12712] skb_clone+0x212/0x3a0 [ 448.830883][T12712] ? dev_queue_xmit_nit+0x25c/0xac0 [ 448.830913][T12712] dev_queue_xmit_nit+0x28d/0xac0 [ 448.830940][T12712] ? dev_queue_xmit_nit+0x2d/0xac0 [ 448.830973][T12712] dev_hard_start_xmit+0x1c1/0x830 [ 448.831008][T12712] sch_direct_xmit+0x257/0x4c0 [ 448.831041][T12712] ? __pfx_sch_direct_xmit+0x10/0x10 [ 448.831066][T12712] ? seqcount_lockdep_reader_access+0xea/0x100 [ 448.831092][T12712] ? ktime_get+0x1f5/0x220 [ 448.831137][T12712] __qdisc_run+0xb11/0x1620 [ 448.831182][T12712] __dev_queue_xmit+0x1c00/0x37f0 [ 448.831215][T12712] ? __dev_queue_xmit+0x29b/0x37f0 [ 448.831239][T12712] ? _copy_from_iter+0x21b/0x1660 [ 448.831266][T12712] ? skb_set_owner_w+0x263/0x3d0 [ 448.831285][T12712] ? __pfx___dev_queue_xmit+0x10/0x10 [ 448.831312][T12712] ? __pfx__copy_from_iter+0x10/0x10 [ 448.831352][T12712] ? __pfx_packet_parse_headers+0x10/0x10 [ 448.831382][T12712] ? packet_xmit+0x68/0x330 [ 448.831401][T12712] ? skb_put+0x112/0x210 [ 448.831424][T12712] packet_sendmsg+0x3d95/0x5040 [ 448.831441][T12712] ? aa_file_perm+0x18b/0x15f0 [ 448.831483][T12712] ? __lock_acquire+0x683/0x2cf0 [ 448.831524][T12712] ? __pfx_packet_sendmsg+0x10/0x10 [ 448.831554][T12712] ? __might_fault+0xaf/0x130 [ 448.831575][T12712] ? __pfx_aa_sk_perm+0x10/0x10 [ 448.831606][T12712] ? aa_sock_msg_perm+0xf1/0x1b0 [ 448.831629][T12712] ? __pfx_packet_sendmsg+0x10/0x10 [ 448.831648][T12712] sock_sendmsg_nosec+0x13a/0x180 [ 448.831673][T12712] __sys_sendto+0x408/0x5a0 [ 448.831699][T12712] ? ksys_write+0x1e6/0x270 [ 448.831730][T12712] ? __pfx___sys_sendto+0x10/0x10 [ 448.831753][T12712] ? __mutex_unlock_slowpath+0x731/0x900 [ 448.831806][T12712] ? __pfx_ksys_write+0x10/0x10 [ 448.831838][T12712] __x64_sys_sendto+0xde/0x100 [ 448.831865][T12712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.831884][T12712] do_syscall_64+0x174/0x580 [ 448.831905][T12712] ? trace_irq_disable+0x3b/0x140 [ 448.831918][T12712] ? clear_bhb_loop+0x40/0x90 [ 448.831931][T12712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.831941][T12712] RIP: 0033:0x7fc15e39de59 [ 448.831952][T12712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.831961][T12712] RSP: 002b:00007fc15f313028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 448.831979][T12712] RAX: ffffffffffffffda RBX: 00007fc15e625fa0 RCX: 00007fc15e39de59 [ 448.831987][T12712] RDX: 000000000000000e RSI: 00002000000005c0 RDI: 0000000000000005 [ 448.831993][T12712] RBP: 00007fc15f313090 R08: 0000200000000140 R09: 0000000000000014 [ 448.832000][T12712] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000001 [ 448.832006][T12712] R13: 00007fc15e626038 R14: 00007fc15e625fa0 R15: 00007fc15e74fa48 [ 448.832021][T12712] [ 449.341612][T12687] syzkaller0: entered promiscuous mode [ 449.347176][T12687] syzkaller0: entered allmulticast mode [ 449.359310][ T5625] usb 6-1: USB disconnect, device number 103 [ 449.608803][T12715] fido_id[12715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 450.443316][ T29] audit: type=1800 audit(1784235791.198:1204): pid=12720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1934" name="/" dev="fuse" ino=4 res=0 errno=0 [ 450.546923][T12746] No buffer was provided with the request [ 450.558386][ T46] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 450.701430][ T46] usb 3-1: device descriptor read/64, error -71 [ 450.740053][ T10] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 450.747960][ T5625] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 450.846186][T12756] kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 450.855664][T12756] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 450.866413][T12756] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 450.875247][T12756] kvm: requested 169295 ns i8254 timer period limited to 200000 ns [ 450.883678][ T5625] usb 6-1: device descriptor read/64, error -71 [ 450.895381][T12756] kvm: requested 127390 ns i8254 timer period limited to 200000 ns [ 450.907963][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 450.917327][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 450.925605][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.937680][ T10] usb 5-1: config 0 has no interface number 0 [ 450.944199][ T10] usb 5-1: config 0 interface 8 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 450.948212][ T46] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 450.955678][ T10] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 450.979323][ T10] usb 5-1: config 0 interface 8 has no altsetting 0 [ 450.989085][ T10] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 450.998949][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.007032][ T10] usb 5-1: Product: syz [ 451.011463][ T10] usb 5-1: Manufacturer: syz [ 451.016130][ T10] usb 5-1: SerialNumber: syz [ 451.025154][ T10] usb 5-1: config 0 descriptor?? [ 451.088206][ T46] usb 3-1: device descriptor read/64, error -71 [ 451.128026][ T5625] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 451.199204][ T46] usb usb3-port1: attempt power cycle [ 451.257902][ T5625] usb 6-1: device descriptor read/64, error -71 [ 451.368223][ T5625] usb usb6-port1: attempt power cycle [ 451.500553][T12740] syzkaller1: entered promiscuous mode [ 451.519645][T12740] syzkaller1: entered allmulticast mode [ 451.548077][ T46] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 451.578766][ T46] usb 3-1: device descriptor read/8, error -71 [ 451.718150][ T5625] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 451.778677][ T5625] usb 6-1: device descriptor read/8, error -71 [ 451.858983][ T46] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 451.899777][ T46] usb 3-1: device descriptor read/8, error -71 [ 452.018587][ T46] usb usb3-port1: unable to enumerate USB device [ 452.027962][ T5625] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 452.069241][ T5625] usb 6-1: device descriptor read/8, error -71 [ 452.085353][ T10] ath6kl: Failed to submit usb control message: -71 [ 452.113583][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 452.137872][ T10] ath6kl: Unable to send get target info: -71 [ 452.144905][ T10] ath6kl: Failed to init ath6kl core: -71 [ 452.154226][ T10] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 452.186366][ T10] usb 5-1: USB disconnect, device number 122 [ 452.188677][ T5625] usb usb6-port1: unable to enumerate USB device [ 452.468043][ T5625] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 452.619543][ T5625] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.630878][ T5625] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.646446][ T5625] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.656365][ T5625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.664857][ T5625] usb 4-1: Product: syz [ 452.670165][ T5625] usb 4-1: Manufacturer: syz [ 452.674908][ T5625] usb 4-1: SerialNumber: syz [ 452.695467][ T5625] cdc_ncm 4-1:1.0: skipping garbage [ 452.704086][ T5625] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 452.712539][ T5625] cdc_ncm 4-1:1.0: bind() failure [ 452.731249][ T5625] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 452.749300][ T5625] cdc_ncm 4-1:1.1: bind() failure [ 452.895596][ T5875] usb 4-1: USB disconnect, device number 113 [ 453.118727][ T5625] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 453.267967][ T5625] usb 5-1: Using ep0 maxpacket: 32 [ 453.274706][ T5625] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 453.283640][ T5625] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.294229][ T5625] usb 5-1: config 0 has no interface number 0 [ 453.300606][ T5625] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.316141][ T5625] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 453.329166][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.337310][ T5625] usb 5-1: Product: syz [ 453.341852][ T5625] usb 5-1: Manufacturer: syz [ 453.346465][ T5625] usb 5-1: SerialNumber: syz [ 453.351238][ T5875] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 453.370154][ T5625] usb 5-1: config 0 descriptor?? [ 453.383255][ T5625] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 453.392652][ T5625] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 453.508270][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 453.523693][ T5875] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 453.537508][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.547301][ T5875] usb 2-1: Product: syz [ 453.552260][ T5875] usb 2-1: Manufacturer: syz [ 453.556953][ T5875] usb 2-1: SerialNumber: syz [ 453.571515][ T5875] usb 2-1: config 0 descriptor?? [ 453.586200][ T5625] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 453.607691][ T5875] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 453.619569][ T5625] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 453.635823][ T5875] pctv452e: pctv452e_power_ctrl: 1 [ 453.635823][ T5875] [ 453.651303][ T5625] usb 5-1: USB disconnect, device number 123 [ 453.665688][ T5875] usb 2-1: selecting invalid altsetting 3 [ 453.687472][ T5875] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 453.687472][ T5875] [ 453.726043][ T5875] dvb-usb: bulk message failed: -22 (5/0) [ 453.751341][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 453.776366][ T5875] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 453.786435][ T5875] usb 2-1: media controller created [ 453.792868][ T5875] dvb-usb: bulk message failed: -22 (8/0) [ 453.800773][ T5875] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 453.827075][ T5875] dvb-usb: MAC address reading failed. [ 453.865727][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 453.934823][ T5875] DVB: Unable to find symbol stb0899_attach() [ 453.942653][ T5875] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 453.969232][ T10] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 454.059519][ T5875] rc_core: IR keymap rc-tt-1500 not found [ 454.070052][ T5875] Registered IR keymap rc-empty [ 454.080762][ T5875] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 454.093918][ T5875] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input50 [ 454.107962][ T5625] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 454.116410][ T5875] dvb-usb: schedule remote query interval to 100 msecs. [ 454.124409][ T5875] pctv452e: pctv452e_power_ctrl: 0 [ 454.124409][ T5875] [ 454.132048][ T5875] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 454.160612][ T5875] usb 2-1: USB disconnect, device number 112 [ 454.173032][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.216625][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.236780][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 454.257921][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.288078][ T5625] usb 5-1: Using ep0 maxpacket: 32 [ 454.293311][ T5704] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 454.307293][ T10] usb 3-1: config 0 descriptor?? [ 454.327289][ T5625] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 454.363704][ T5625] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.414696][ T5625] usb 5-1: config 0 has no interface number 0 [ 454.435478][ T5875] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 454.455429][ T5625] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.468950][ T5704] usb 4-1: device descriptor read/64, error -71 [ 454.502201][ T5625] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 454.531364][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.541261][ T5625] usb 5-1: Product: syz [ 454.545577][ T5625] usb 5-1: Manufacturer: syz [ 454.551600][ T5625] usb 5-1: SerialNumber: syz [ 454.573130][ T5625] usb 5-1: config 0 descriptor?? [ 454.587289][ T5625] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 454.601555][ T5625] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 454.602672][T12823] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1971'. [ 454.648636][T12823] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1971'. [ 454.720081][ T5704] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 454.735156][ T10] hid_parser_main: 7 callbacks suppressed [ 454.735253][ T10] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 454.752316][ T10] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 454.759726][ T10] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 454.767189][ T10] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 454.775135][ T10] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 454.785339][ T5625] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 454.797628][ T10] cm6533_jd 0003:0D8C:0022.0027: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 454.861869][ T5704] usb 4-1: device descriptor read/64, error -71 [ 454.979360][ T5704] usb usb4-port1: attempt power cycle [ 454.992532][T12808] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 455.002155][ T5625] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 455.010405][T12808] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 455.035659][ T10] usb 3-1: USB disconnect, device number 101 [ 455.201646][ T9] usb 5-1: USB disconnect, device number 124 [ 455.207912][ T5703] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 455.224469][ T9] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 455.249379][ T29] audit: type=1804 audit(1784235796.008:1205): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1973" name="bus" dev="ramfs" ino=53521 res=1 errno=0 [ 455.347934][ T5704] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 455.369230][ T5704] usb 4-1: device descriptor read/8, error -71 [ 455.376300][ T5703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.386981][ T5703] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.413113][ T5703] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 455.422524][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.434636][ T5703] usb 6-1: Product: syz [ 455.451505][ T5703] usb 6-1: Manufacturer: syz [ 455.464997][ T5703] usb 6-1: SerialNumber: syz [ 455.476613][ T5703] usb 6-1: config 0 descriptor?? [ 455.490205][ T5703] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 455.502098][ T5703] imon 6-1:0.0: unable to initialize intf0, err -19 [ 455.516330][ T5703] imon:imon_probe: failed to initialize context! [ 455.538226][ T5703] imon 6-1:0.0: unable to register, err -19 [ 455.608079][ T5704] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 455.639447][ T5704] usb 4-1: device descriptor read/8, error -71 [ 455.756803][T12840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.758550][ T5704] usb usb4-port1: unable to enumerate USB device [ 455.806278][T12840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.890823][ T5704] usb 6-1: USB disconnect, device number 108 [ 455.966180][ T29] audit: type=1800 audit(1784235796.718:1206): pid=12834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1973" name="bus" dev="ramfs" ino=53521 res=0 errno=0 [ 456.022841][ T29] audit: type=1800 audit(1784235796.748:1207): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1973" name="bus" dev="ramfs" ino=53521 res=0 errno=0 [ 456.050274][T12845] netlink: 'syz.2.1977': attribute type 1 has an invalid length. [ 456.070062][ T9] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 456.172213][T12848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1977'. [ 456.194285][T12845] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 456.224991][ T7681] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 456.240593][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 456.248961][ T7681] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 456.250098][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.274221][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.285220][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 456.300500][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.301750][T12848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.339920][ T9] usb 5-1: config 0 descriptor?? [ 456.379591][ T9] hub 5-1:0.0: USB hub found [ 456.386402][ T7681] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 456.408726][ T7681] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 456.565026][T12850] loop4: detected capacity change from 0 to 2640 [ 456.577526][ T9] hub 5-1:0.0: 1 port detected [ 456.592232][T12852] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 456.599570][T12850] buffer_io_error: 6 callbacks suppressed [ 456.599588][T12850] Buffer I/O error on dev loop4, logical block 0, async page read [ 456.619307][T12850] Buffer I/O error on dev loop4, logical block 0, async page read [ 456.647100][T12850] Buffer I/O error on dev loop4, logical block 0, async page read [ 456.698375][T12850] Buffer I/O error on dev loop4, logical block 0, async page read [ 456.713469][T12850] Buffer I/O error on dev loop4, logical block 0, async page read [ 456.727092][T12850] Buffer I/O error on dev loop4, logical block 0, async page read [ 456.744066][T12850] Buffer I/O error on dev loop4, logical block 0, async page read [ 456.757461][T12850] Buffer I/O error on dev loop4, logical block 0, async page read [ 456.767499][T12850] ldm_validate_partition_table(): Disk read failed. [ 456.775371][T12850] Buffer I/O error on dev loop4, logical block 0, async page read [ 456.784001][T12850] Buffer I/O error on dev loop4, logical block 0, async page read [ 456.793802][T12850] Dev loop4: unable to read RDB block 0 [ 456.801478][T12850] loop4: unable to read partition table [ 456.817418][T12850] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 456.870667][T12843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.897782][T12843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.932853][ T29] audit: type=1800 audit(1784235797.688:1208): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1980" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 457.032028][ T9] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 457.039619][ T9] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 457.059034][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 457.074891][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 457.095077][T12862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1982'. [ 457.119937][ T9] usb 5-1: USB disconnect, device number 125 [ 457.135899][T12862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1982'. [ 457.308326][ T5703] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 457.459497][ T5703] usb 2-1: Using ep0 maxpacket: 8 [ 457.517986][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 457.537978][ T5704] usb 6-1: new low-speed USB device number 109 using dummy_hcd [ 457.688057][ T5704] usb 6-1: Invalid ep0 maxpacket: 64 [ 457.696682][ T10] usb 4-1: config 255 has an invalid interface number: 97 but max is 1 [ 457.717445][ T10] usb 4-1: config 255 has an invalid interface descriptor of length 2, skipping [ 457.742378][ T10] usb 4-1: config 255 has an invalid interface number: 227 but max is 1 [ 457.766923][ T10] usb 4-1: config 255 has no interface number 0 [ 457.784513][ T10] usb 4-1: config 255 has no interface number 1 [ 457.807403][ T10] usb 4-1: config 255 interface 97 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.840877][ T10] usb 4-1: config 255 interface 97 has no altsetting 0 [ 457.848458][ T5704] usb 6-1: new low-speed USB device number 110 using dummy_hcd [ 457.856627][ T10] usb 4-1: config 255 interface 227 has no altsetting 0 [ 457.875682][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 457.895202][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.922065][ T10] usb 4-1: Product: syz [ 457.933371][ T10] usb 4-1: Manufacturer: syz [ 457.950627][ T10] usb 4-1: SerialNumber: syz [ 458.010297][ T5704] usb 6-1: Invalid ep0 maxpacket: 64 [ 458.024761][ T5704] usb usb6-port1: attempt power cycle [ 458.176931][T12878] fuse: Unknown parameter 'default_permissionsς˂}iBe!hba*Pc[XAuc'^;#Bx+' [ 458.198724][ T10] rndis_host 4-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 458.314485][ T10] usb 4-1: USB disconnect, device number 118 [ 458.378030][ T5704] usb 6-1: new low-speed USB device number 111 using dummy_hcd [ 458.428551][ T5704] usb 6-1: Invalid ep0 maxpacket: 64 [ 458.568207][ T5704] usb 6-1: new low-speed USB device number 112 using dummy_hcd [ 458.612247][ T5704] usb 6-1: Invalid ep0 maxpacket: 64 [ 458.621387][ T5704] usb usb6-port1: unable to enumerate USB device [ 458.822903][T12886] x_tables: duplicate underflow at hook 2 [ 458.928050][ T10] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 458.988217][ T5704] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 459.019331][ T5703] usb 2-1: unable to get BOS descriptor or descriptor too short [ 459.030153][ T5703] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 459.037761][ T5703] usb 2-1: can't read configurations, error -71 [ 459.099937][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 459.117340][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 459.129560][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.146606][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.149748][ T5704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.174212][ T5704] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.190851][ T10] usb 3-1: string descriptor 0 read error: -22 [ 459.192043][ T5704] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 459.199620][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.224626][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.232025][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.235951][ T5704] usb 5-1: Product: syz [ 459.253907][ T5704] usb 5-1: Manufacturer: syz [ 459.259147][ T5704] usb 5-1: SerialNumber: syz [ 459.262594][ T10] usb 3-1: 0:2 : does not exist [ 459.269920][ T5704] usb 5-1: config 0 descriptor?? [ 459.282854][ T5704] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 459.291511][ T5704] imon 5-1:0.0: unable to initialize intf0, err -19 [ 459.299311][ T5704] imon:imon_probe: failed to initialize context! [ 459.306071][ T5704] imon 5-1:0.0: unable to register, err -19 [ 459.550698][T12894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.560245][T12894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.579628][ T5704] usb 5-1: USB disconnect, device number 126 [ 459.966506][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'. [ 460.152303][T12919] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1988'. [ 460.359858][ T9] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 460.469950][T12925] netlink: 45 bytes leftover after parsing attributes in process `syz.5.1998'. [ 460.540421][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 460.552002][T12925] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1998'. [ 460.566683][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.595278][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 460.626189][ T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 460.671720][ T9] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 460.732339][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.755175][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 460.772089][ T9] usb 4-1: string descriptor 0 read error: -22 [ 460.780483][ T9] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 460.797526][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.820375][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 460.844958][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 460.864703][ T10] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 460.914228][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 460.974463][ T10] usb 3-1: USB disconnect, device number 102 [ 461.048964][ T5703] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 461.109613][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 461.209938][ T5703] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 461.222799][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.239252][ T5703] usb 6-1: config 0 descriptor?? [ 461.259414][ T5703] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 461.490214][ T5703] gspca_sunplus: reg_w_riv err -71 [ 461.507669][ T5704] usb 4-1: USB disconnect, device number 119 [ 461.529748][ T5703] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 461.577236][ T5703] usb 6-1: USB disconnect, device number 113 [ 461.776266][T12941] syzkaller0: entered promiscuous mode [ 461.795917][T12941] syzkaller0: entered allmulticast mode [ 461.808015][ T10] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 461.982871][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.012377][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 462.031543][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.066254][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.094714][T12945] syzkaller0: entered promiscuous mode [ 462.102606][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.125454][T12945] syzkaller0: entered allmulticast mode [ 462.138114][ T10] usb 3-1: Product: syz [ 462.150478][ T10] usb 3-1: Manufacturer: syz [ 462.170057][ T10] usb 3-1: SerialNumber: syz [ 462.214777][ T10] cdc_mbim 3-1:1.0: skipping garbage [ 462.244864][ T10] usb 3-1: selecting invalid altsetting 1 [ 462.441579][ T5718] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 462.471470][ T5718] hid-generic 0000:0000:0000.0028: item fetching failed at offset 6/31 [ 462.482898][T12956] netlink: 'syz.5.2004': attribute type 1 has an invalid length. [ 462.490838][ T5704] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 462.495405][ T5718] hid-generic 0000:0000:0000.0028: probe with driver hid-generic failed with error -22 [ 462.531873][T12956] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 462.661879][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 462.723069][ T10] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 462.732884][ T10] cdc_mbim 3-1:1.0: bind() failure [ 462.761034][ T5704] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 462.812313][ T5704] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 462.812430][ T10] usb 3-1: USB disconnect, device number 103 [ 462.855843][ T5704] usb 4-1: config 0 interface 0 has no altsetting 0 [ 462.868398][T12968] xt_cgroup: path and classid specified [ 462.892183][ T5704] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 462.926268][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.955270][ T5704] usb 4-1: Product: syz [ 462.973275][ T5704] usb 4-1: Manufacturer: syz [ 462.986223][ T5704] usb 4-1: SerialNumber: syz [ 463.014177][ T5704] usb 4-1: config 0 descriptor?? [ 463.064421][T12970] bond0: Device is already in use. [ 463.088083][ T9] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 463.266474][ T5704] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 463.278967][ T5704] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 463.282281][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.327108][ T5704] usb 4-1: USB disconnect, device number 120 [ 463.345318][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 463.404738][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 463.438870][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.464261][ T9] usb 2-1: Product: syz [ 463.469176][ T9] usb 2-1: Manufacturer: syz [ 463.474231][ T9] usb 2-1: SerialNumber: syz [ 463.509944][ T9] usb 2-1: config 0 descriptor?? [ 463.535036][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 463.551901][ T9] imon 2-1:0.0: unable to initialize intf0, err -19 [ 463.568617][ T9] imon:imon_probe: failed to initialize context! [ 463.580895][ T9] imon 2-1:0.0: unable to register, err -19 [ 463.789648][T12966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.816442][T12966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.863552][ T46] usb 2-1: USB disconnect, device number 115 [ 464.048166][ T5704] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 464.063933][T13007] sit0: entered promiscuous mode [ 464.076653][T13007] netlink: 'syz.3.2016': attribute type 1 has an invalid length. [ 464.085493][T13007] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2016'. [ 464.188230][ T5704] usb 6-1: device descriptor read/64, error -71 [ 464.438862][ T5704] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 464.498433][ T189] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 464.588778][ T5704] usb 6-1: device descriptor read/64, error -71 [ 464.671221][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.704434][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.707090][ T5704] usb usb6-port1: attempt power cycle [ 464.726263][ T189] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 464.749944][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.772365][ T189] usb 5-1: config 0 descriptor?? [ 465.077905][ T5704] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 465.097955][ T5703] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 465.110271][ T5704] usb 6-1: device descriptor read/8, error -71 [ 465.207694][ T189] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 465.228600][ T189] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 465.236812][ T189] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 465.246547][ T189] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 465.253835][ T189] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 465.258137][ T5703] usb 2-1: device descriptor read/64, error -71 [ 465.265256][ T189] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 465.274191][ T189] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 465.288714][ T189] pyra 0003:1E7D:2CF6.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 465.358209][ T5704] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 465.395246][ T5704] usb 6-1: device descriptor read/8, error -71 [ 465.403474][ T189] pyra 0003:1E7D:2CF6.0029: couldn't init struct pyra_device [ 465.418801][ T189] pyra 0003:1E7D:2CF6.0029: couldn't install mouse [ 465.438565][ T189] pyra 0003:1E7D:2CF6.0029: probe with driver pyra failed with error -32 [ 465.508646][ T5704] usb usb6-port1: unable to enumerate USB device [ 465.521150][ T5703] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 465.658179][ T5703] usb 2-1: device descriptor read/64, error -71 [ 465.768330][ T5703] usb usb2-port1: attempt power cycle [ 466.118014][ T5703] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 466.139034][ T5703] usb 2-1: device descriptor read/8, error -71 [ 466.378088][ T5703] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 466.398634][ T5703] usb 2-1: device descriptor read/8, error -71 [ 466.508323][ T5703] usb usb2-port1: unable to enumerate USB device [ 466.602449][T13057] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2022'. [ 466.681597][T13061] kthread_run failed with err -4 [ 466.836069][T13072] netlink: 'syz.5.2025': attribute type 1 has an invalid length. [ 466.921053][T13072] 8021q: adding VLAN 0 to HW filter on device bond9 [ 466.932573][T13073] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 467.039543][ T5630] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 467.457959][ T189] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 467.641254][ T189] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.651717][ T189] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.674258][ T189] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 467.686407][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.695084][ T189] usb 6-1: Product: syz [ 467.699811][ T189] usb 6-1: Manufacturer: syz [ 467.705051][ T189] usb 6-1: SerialNumber: syz [ 467.721614][ T189] usb 6-1: config 0 descriptor?? [ 467.751214][ T189] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 467.774942][ T189] imon 6-1:0.0: unable to initialize intf0, err -19 [ 467.796751][ T189] imon:imon_probe: failed to initialize context! [ 467.821561][ T189] imon 6-1:0.0: unable to register, err -19 [ 468.009590][T13088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.048068][T13088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.107272][ T189] usb 6-1: USB disconnect, device number 118 [ 468.381400][ T5704] usb 5-1: USB disconnect, device number 127 [ 501.442802][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.449213][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 528.068670][T13107] program syz.2.2033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.236416][T13116] tipc: Can't bind to reserved service type 0 [ 528.237562][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.249692][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.280350][T13110] netlink: 'syz.1.2032': attribute type 4 has an invalid length. [ 528.658248][ T5703] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 528.738154][ T189] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 528.819227][ T5703] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 528.834774][ T5703] usb 6-1: config 1 has no interface number 0 [ 528.858021][ T5703] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 528.872842][ T5703] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 528.919673][ T189] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.935034][ T5703] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.960402][ T189] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.984639][ T189] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 529.000150][ T5703] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 529.013116][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.025346][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.027934][ T189] usb 3-1: Product: syz [ 529.052521][ T189] usb 3-1: Manufacturer: syz [ 529.053106][ T5703] usb 6-1: Product: syz [ 529.068526][ T5703] usb 6-1: Manufacturer: syz [ 529.073277][ T189] usb 3-1: SerialNumber: syz [ 529.079561][ T5703] usb 6-1: SerialNumber: syz [ 529.095740][ T189] usb 3-1: config 0 descriptor?? [ 529.112162][T13128] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 529.131862][ T189] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 529.156671][ T189] imon 3-1:0.0: unable to initialize intf0, err -19 [ 529.175527][ T189] imon:imon_probe: failed to initialize context! [ 529.187631][ T189] imon 3-1:0.0: unable to register, err -19 [ 529.188476][ T5625] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 529.352747][T13128] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 529.360534][ T5625] usb 5-1: Using ep0 maxpacket: 16 [ 529.380593][ T5625] usb 5-1: unable to get BOS descriptor or descriptor too short [ 529.392988][T13153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.397594][ T5625] usb 5-1: config 3 has an invalid interface number: 74 but max is 0 [ 529.411763][ T5625] usb 5-1: config 3 has no interface number 0 [ 529.418302][ T5625] usb 5-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 529.434113][ T5625] usb 5-1: config 3 interface 74 altsetting 1 bulk endpoint 0xD has invalid maxpacket 8 [ 529.434163][T13153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.444661][ T5625] usb 5-1: config 3 interface 74 has no altsetting 0 [ 529.482468][ T5625] usb 5-1: New USB device found, idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 529.492743][ T10] usb 3-1: USB disconnect, device number 104 [ 529.493236][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.507394][ T5625] usb 5-1: Product: syz [ 529.512015][ T5625] usb 5-1: Manufacturer: syz [ 529.530824][ T5625] usb 5-1: SerialNumber: syz [ 529.554122][T13143] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 529.658086][ T189] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 529.782405][ T5625] ipaq 5-1:3.74: PocketPC PDA converter detected [ 529.797731][ T5703] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 529.813468][ T5625] usb 5-1: active config #3 != 1 ?? [ 529.817852][ T189] usb 2-1: Using ep0 maxpacket: 16 [ 529.828778][ T5625] usb 5-1: USB disconnect, device number 2 [ 529.830026][ T189] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 529.848952][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 529.866798][ T189] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 529.885063][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.913230][ T189] usb 2-1: Product: syz [ 529.921886][ T189] usb 2-1: Manufacturer: syz [ 529.932538][ T189] usb 2-1: SerialNumber: syz [ 529.941760][ T189] usb 2-1: config 0 descriptor?? [ 529.950471][ T189] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 529.971285][T13128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.982246][T13128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.000344][ T5703] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 530.007143][ T5703] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 530.015530][ T5703] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 530.023371][ T5703] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 530.042310][ T5703] usb 6-1: USB disconnect, device number 119 [ 530.064514][ T5703] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 530.151004][ T5703] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 530.171550][ T5625] usb 2-1: USB disconnect, device number 120 [ 530.197875][ T10] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 530.318311][ T189] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 530.357093][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 530.369913][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.379040][ T10] usb 4-1: Product: syz [ 530.383772][ T10] usb 4-1: Manufacturer: syz [ 530.388619][ T10] usb 4-1: SerialNumber: syz [ 530.488248][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.528301][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.548791][ T189] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.592546][ T189] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.610812][T13171] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2052'. [ 530.613502][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.634643][ T189] usb 3-1: config 0 descriptor?? [ 530.767858][ T5625] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 530.829254][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 530.853658][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 530.868009][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2052'. [ 530.948525][ T5625] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 530.974071][ T5625] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 530.983696][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 530.994312][ T5625] usb 5-1: Product: syz [ 530.999106][ T5625] usb 5-1: Manufacturer: syz [ 530.999255][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2056'. [ 531.003741][ T5625] usb 5-1: SerialNumber: syz [ 531.024634][ T5625] usb 5-1: config 0 descriptor?? [ 531.044508][ T5625] ims_pcu 5-1:0.0: Zero length descriptor [ 531.053745][ T5625] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 531.096454][ T189] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 531.118442][ T5703] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 531.138930][T13184] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 531.243289][T13169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.254071][T13169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.268621][T13169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.280846][ T5703] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 531.292599][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.293013][T13169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.304444][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.310215][ T5703] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 531.327341][ T5703] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 531.348284][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.365212][T13180] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 531.381121][ T5703] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 531.397281][ T5625] usb 5-1: USB disconnect, device number 3 [ 531.611925][ T189] usb 2-1: USB disconnect, device number 121 [ 532.056525][T13203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2060'. [ 532.105290][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 532.119241][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 532.602128][T13163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.619891][T13163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.632324][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 532.648435][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 532.660690][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 532.690206][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 532.717616][ T10] usb 4-1: USB disconnect, device number 121 [ 532.758016][ T5703] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 532.918523][ T5703] usb 6-1: Using ep0 maxpacket: 32 [ 532.935355][ T5703] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 532.981948][ T5703] usb 6-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 0.40 [ 533.007154][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.025605][ T5703] usb 6-1: Product: syz [ 533.032015][ T5703] usb 6-1: Manufacturer: 鲻棃䡾쑞詧螖䞨ꬰ皛꿦垏㈓沁࣠砚忆✱鿨蘆蛡匃㓡㝸腌⎛ㄊၮ払狀氼ퟝ䈍૑﩮熿橣冾굈ꚲ籕뻡栣ࣝ넙肾禈 [ 533.052346][ T5703] usb 6-1: SerialNumber: syz [ 533.159798][ T5625] usb 3-1: USB disconnect, device number 105 [ 533.258164][ T5704] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 533.305013][ T5703] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 533.393654][ T5703] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 533.412446][ T5703] usb 6-1: USB disconnect, device number 120 [ 533.427864][ T5704] usb 5-1: Invalid ep0 maxpacket: 64 [ 533.461303][T13131] udevd[13131]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.587326][ T29] audit: type=1326 audit(1784235874.338:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.3.2076" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1214b9de59 code=0x7ffc0000 [ 533.612581][ T5704] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 533.621687][ T29] audit: type=1326 audit(1784235874.358:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.3.2076" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1214b9de59 code=0x7ffc0000 [ 533.651215][ T29] audit: type=1326 audit(1784235874.358:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.3.2076" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1214b9de59 code=0x7ffc0000 [ 533.677111][ T29] audit: type=1326 audit(1784235874.358:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.3.2076" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1214b9de59 code=0x7ffc0000 [ 533.716638][ T29] audit: type=1326 audit(1784235874.358:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.3.2076" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1214b9de59 code=0x7ffc0000 [ 533.747938][ T29] audit: type=1326 audit(1784235874.388:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.3.2076" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1214b5e68e code=0x7ffc0000 [ 533.784296][ T29] audit: type=1326 audit(1784235874.388:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.3.2076" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1214b9de59 code=0x7ffc0000 [ 533.810477][ T5625] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 533.822166][ T29] audit: type=1326 audit(1784235874.388:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.3.2076" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1214b9de59 code=0x7ffc0000 [ 533.848039][ T5704] usb 5-1: Invalid ep0 maxpacket: 64 [ 533.854555][ T5704] usb usb5-port1: attempt power cycle [ 533.861869][ T29] audit: type=1326 audit(1784235874.388:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.3.2076" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1214b9de59 code=0x7ffc0000 [ 533.907442][ T29] audit: type=1326 audit(1784235874.398:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.3.2076" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f1214b9de59 code=0x7ffc0000 [ 533.988306][ T5625] usb 3-1: device descriptor read/64, error -71 [ 534.197879][ T5704] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 534.218542][ T5704] usb 5-1: Invalid ep0 maxpacket: 64 [ 534.228055][ T9] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 534.238644][ T5625] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 534.267946][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 534.298114][ T5703] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 534.348041][ T5704] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 534.369377][ T5704] usb 5-1: Invalid ep0 maxpacket: 64 [ 534.375122][ T5704] usb usb5-port1: unable to enumerate USB device [ 534.377883][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 534.381646][ T5625] usb 3-1: device descriptor read/64, error -71 [ 534.389000][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 534.403493][ T9] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 534.413668][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 534.422070][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 534.431572][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.440163][ T9] usb 6-1: Product: syz [ 534.444524][ T9] usb 6-1: Manufacturer: syz [ 534.449378][ T9] usb 6-1: SerialNumber: syz [ 534.455963][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 534.460112][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.466251][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.478640][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.488825][ T9] usb 6-1: config 0 descriptor?? [ 534.499857][ T10] usb 2-1: Product: syz [ 534.506594][ T5703] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 534.510797][ T10] usb 2-1: Manufacturer: syz [ 534.520981][ T5625] usb usb3-port1: attempt power cycle [ 534.524542][ T10] usb 2-1: SerialNumber: syz [ 534.531328][ T5703] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 534.539418][ T10] usb 2-1: config 0 descriptor?? [ 534.549349][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.563347][ T5703] usb 4-1: config 0 descriptor?? [ 534.878316][ T5625] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 534.908463][ T9] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 534.919693][ T5625] usb 3-1: device descriptor read/8, error -71 [ 534.954301][ T10] usb 2-1: Firmware: major: 0, minor: 7, hardware type: ATUSB (0) [ 534.990165][ T5703] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 535.131018][ T9] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 535.177417][ T9] usb 6-1: USB disconnect, device number 121 [ 535.185968][ T5625] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 535.186953][ T10] usb 2-1: failed to fetch extended address, random address set [ 535.240079][ T5625] usb 3-1: device descriptor read/8, error -71 [ 535.303771][ T10] usb 2-1: USB disconnect, device number 122 [ 535.349179][ T5625] usb usb3-port1: unable to enumerate USB device [ 535.534788][T13278] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2083'. [ 535.548591][T13278] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2083'. [ 536.097974][ T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 536.147894][ T189] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 536.237928][ T10] usb 2-1: device descriptor read/64, error -71 [ 536.309616][ T189] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 536.318100][ T189] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 536.326225][ T189] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 536.335411][ T189] usb 6-1: config 0 has no interface number 0 [ 536.341602][ T189] usb 6-1: config 0 has no interface number 1 [ 536.348283][ T189] usb 6-1: too many endpoints for config 0 interface 4 altsetting 109: 182, using maximum allowed: 30 [ 536.360050][ T189] usb 6-1: config 0 interface 4 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 536.373652][ T189] usb 6-1: config 0 interface 4 has no altsetting 0 [ 536.373661][ T5703] usb 4-1: reset high-speed USB device number 122 using dummy_hcd [ 536.390523][ T189] usb 6-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 536.401268][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.409514][ T189] usb 6-1: Product: syz [ 536.413713][ T189] usb 6-1: Manufacturer: syz [ 536.418839][ T189] usb 6-1: SerialNumber: syz [ 536.425900][ T189] usb 6-1: config 0 descriptor?? [ 536.438253][ T189] cdc_acm 6-1:0.51: probe with driver cdc_acm failed with error -22 [ 536.438281][ T5625] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 536.487979][ T10] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 536.572567][T13301] netlink: 'syz.2.2090': attribute type 1 has an invalid length. [ 536.583346][T13301] netlink: 'syz.2.2090': attribute type 2 has an invalid length. [ 536.619004][ T5625] usb 5-1: Using ep0 maxpacket: 16 [ 536.619147][ T10] usb 2-1: device descriptor read/64, error -71 [ 536.632047][ T5625] usb 5-1: unable to get BOS descriptor or descriptor too short [ 536.659349][ T5625] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.683858][ T5625] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.714055][ T5625] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 536.733158][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.753441][ T5625] usb 5-1: Product: syz [ 536.760834][ T10] usb usb2-port1: attempt power cycle [ 536.766274][ T5625] usb 5-1: Manufacturer: syz [ 536.766295][ T5625] usb 5-1: SerialNumber: syz [ 536.997402][ T5625] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 537.007369][ T5625] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 537.128041][ T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 537.158698][ T10] usb 2-1: device descriptor read/8, error -71 [ 537.256407][T13316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 537.408000][ T10] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 537.428845][ T10] usb 2-1: device descriptor read/8, error -71 [ 537.455100][ T5625] usb 5-1: USB disconnect, device number 8 [ 537.539261][ T10] usb usb2-port1: unable to enumerate USB device [ 537.607876][ T46] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 537.615654][ T5703] usb 4-1: device descriptor read/64, error -71 [ 537.769915][ T46] usb 3-1: config 0 has no interfaces? [ 537.777635][ T46] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 537.787239][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.795459][ T46] usb 3-1: Product: syz [ 537.800386][ T46] usb 3-1: Manufacturer: syz [ 537.805038][ T46] usb 3-1: SerialNumber: syz [ 537.812186][ T46] usb 3-1: config 0 descriptor?? [ 537.858520][ T5703] usb 4-1: reset high-speed USB device number 122 using dummy_hcd [ 538.023646][ T5703] usb 4-1: device firmware changed [ 538.059517][ T5704] usb 4-1: USB disconnect, device number 122 [ 538.249256][ T5704] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 538.291800][T13318] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.303988][T13318] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 538.387352][T13318] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 538.395353][T13318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.417215][ T10] usb 3-1: USB disconnect, device number 110 [ 538.449994][ T5704] usb 4-1: unable to get BOS descriptor or descriptor too short [ 538.474813][ T5704] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 538.493479][ T5704] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 538.503106][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.521797][ T5704] usb 4-1: Product: syz [ 538.532984][ T5704] usb 4-1: Manufacturer: syz [ 538.541161][ T5704] usb 4-1: SerialNumber: syz [ 538.569164][ T5630] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 538.690273][T13350] xt_connbytes: Forcing CT accounting to be enabled [ 538.762655][ T5704] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 538.856842][ T9] usb 6-1: USB disconnect, device number 122 [ 538.960053][ T5704] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 538.999298][ T5704] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 539.030243][ T5703] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 539.242617][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.256023][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.266168][ T5703] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 539.327624][ T5703] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 539.366894][ T5704] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 539.393326][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.438964][ T5703] usb 5-1: config 0 descriptor?? [ 539.530171][ T5704] usb 4-1: USB disconnect, device number 123 [ 539.597530][T13131] udevd[13131]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.737905][ T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 539.892844][ T5703] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 539.905283][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 539.924265][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 539.943442][ T9] usb 2-1: config 0 has no interface number 0 [ 539.983796][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 540.019518][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.053375][ T9] usb 2-1: Product: syz [ 540.067240][T13377] netlink: 'syz.5.2112': attribute type 8 has an invalid length. [ 540.069129][ T9] usb 2-1: Manufacturer: syz [ 540.104997][ T9] usb 2-1: SerialNumber: syz [ 540.158018][ T9] usb 2-1: config 0 descriptor?? [ 540.182038][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 540.192906][T13353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.231896][T13353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.256454][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 540.352824][T13388] netlink: 396 bytes leftover after parsing attributes in process `syz.3.2115'. [ 540.429967][T13366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.453146][T13366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.495890][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 540.559418][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 540.687390][T13406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2119'. [ 540.743620][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.093691][T13413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.133764][T13413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.142220][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2111'. [ 541.322405][T13418] input: syz0 as /devices/virtual/input/input51 [ 541.993489][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 542.237907][ T9] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 542.246608][ T9] usb 5-1: device reset changed ep0 maxpacket size! [ 542.254500][T13321] usb 5-1: USB disconnect, device number 9 [ 542.338517][ T5703] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 542.369309][T13446] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 542.407841][T13321] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 542.418302][ T5704] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 542.507835][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 542.516918][ T5703] usb 6-1: unable to get BOS descriptor or descriptor too short [ 542.526199][ T5703] usb 6-1: no configurations [ 542.531459][ T5703] usb 6-1: can't read configurations, error -22 [ 542.531958][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 542.550357][ T9] usb 2-1: USB disconnect, device number 127 [ 542.569714][T13321] usb 5-1: Using ep0 maxpacket: 32 [ 542.587522][T13321] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 542.588477][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 542.597083][ T5704] usb 4-1: Using ep0 maxpacket: 16 [ 542.624231][T13321] usb 5-1: config 0 has no interface number 0 [ 542.630858][T13321] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 542.649063][T13321] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 542.649199][ T5704] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 542.656195][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 542.659970][ T5704] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.676107][ T9] quatech2 2-1:0.51: device disconnected [ 542.678931][ T5703] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 542.703980][ T5704] usb 4-1: config 0 has no interface number 0 [ 542.711217][ T5704] usb 4-1: config 0 interface 9 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 542.726510][ T5704] usb 4-1: config 0 interface 9 has no altsetting 0 [ 542.733547][T13321] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 542.743843][T13321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.752715][T13321] usb 5-1: Product: syz [ 542.757242][T13321] usb 5-1: Manufacturer: syz [ 542.762550][T13321] usb 5-1: SerialNumber: syz [ 542.769976][ T5704] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 542.779642][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.789760][ T5704] usb 4-1: Product: syz [ 542.796652][T13321] usb 5-1: config 0 descriptor?? [ 542.811004][ T5704] usb 4-1: Manufacturer: syz [ 542.817266][ T5704] usb 4-1: SerialNumber: syz [ 542.829901][ T5704] usb 4-1: config 0 descriptor?? [ 542.841597][T13456] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 542.852503][T13456] PKCS7: Only support pkcs7_signedData type [ 542.878150][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 542.885647][ T5703] usb 6-1: unable to get BOS descriptor or descriptor too short [ 542.895862][ T5703] usb 6-1: no configurations [ 542.905011][ T5703] usb 6-1: can't read configurations, error -22 [ 542.923933][ T5703] usb usb6-port1: attempt power cycle [ 543.062941][T13441] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 543.110320][T13321] radio-si470x 5-1:0.35: this is not a si470x device. [ 543.171229][ T5704] usb 4-1: USB disconnect, device number 124 [ 543.298498][ T5703] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 543.369121][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 543.380026][T13321] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 543.400041][ T5703] usb 6-1: unable to get BOS descriptor or descriptor too short [ 543.419941][T13321] usb 5-1: USB disconnect, device number 10 [ 543.426485][ T5703] usb 6-1: no configurations [ 543.437670][ T5703] usb 6-1: can't read configurations, error -22 [ 543.580769][ T5703] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 543.618782][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 543.625796][ T5703] usb 6-1: unable to get BOS descriptor or descriptor too short [ 543.633597][ T5703] usb 6-1: no configurations [ 543.641051][ T5703] usb 6-1: can't read configurations, error -22 [ 543.654947][ T5703] usb usb6-port1: unable to enumerate USB device [ 543.979672][ T5703] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 544.031165][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 544.048082][T13473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2140'. [ 544.067571][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 544.087314][T13473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2140'. [ 544.158373][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 544.192643][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 544.225339][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 544.247259][ T5703] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 544.261293][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.275255][ T5703] usb 3-1: Product: syz [ 544.282514][ T5703] usb 3-1: Manufacturer: syz [ 544.290117][ T5703] usb 3-1: SerialNumber: syz [ 544.301428][ T5703] usb 3-1: config 0 descriptor?? [ 544.323862][ T5703] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 544.341048][ T5703] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 544.377930][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 544.448003][ T189] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 544.537913][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 544.548560][ T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 544.558838][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 544.570967][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 544.581540][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 544.612585][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 544.630136][ T189] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.644383][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.657834][ T189] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.673860][ T189] usb 5-1: config 0 interface 0 has no altsetting 0 [ 544.680938][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.693670][ T189] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 544.704812][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.716413][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.741607][ T189] usb 5-1: config 0 descriptor?? [ 544.928058][ T5703] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 544.935475][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 544.936212][ T5703] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 544.958405][ T9] usbtmc 2-1:16.0: can't read capabilities [ 544.972675][ T5703] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 544.981740][ T5703] em28xx 3-1:0.0: No AC97 audio processor [ 545.200059][ T189] monterey 0003:0566:3004.002D: unknown main item tag 0x0 [ 545.209054][ T189] monterey 0003:0566:3004.002D: unknown main item tag 0x0 [ 545.216448][ T189] monterey 0003:0566:3004.002D: unknown main item tag 0x0 [ 545.235100][ T189] monterey 0003:0566:3004.002D: hidraw0: USB HID v10.09 Device [HID 0566:3004] on usb-dummy_hcd.4-1/input0 [ 545.399536][ T189] usb 5-1: USB disconnect, device number 11 [ 545.557917][ T5703] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 545.698198][ T5703] usb 4-1: device descriptor read/64, error -71 [ 545.947981][ T5703] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 546.098260][ T5703] usb 4-1: device descriptor read/64, error -71 [ 546.177959][ T189] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 546.208636][ T5703] usb usb4-port1: attempt power cycle [ 546.329603][ T189] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 546.340887][ T189] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 546.351012][ T189] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 546.360381][ T189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.371791][T13503] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 546.382446][ T189] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 546.389878][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 546.527936][ T10] usb 5-1: device descriptor read/64, error -71 [ 546.548095][ T5703] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 546.568566][ T5703] usb 4-1: device descriptor read/8, error -71 [ 546.593021][ T189] usb 6-1: USB disconnect, device number 127 [ 546.762027][T13511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.770706][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 546.778778][T13511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.818188][ T5703] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 546.838954][ T5703] usb 4-1: device descriptor read/8, error -71 [ 546.907987][ T10] usb 5-1: device descriptor read/64, error -71 [ 546.949620][ T5703] usb usb4-port1: unable to enumerate USB device [ 547.018371][ T10] usb usb5-port1: attempt power cycle [ 547.156767][ T5703] usb 2-1: USB disconnect, device number 2 [ 547.180669][T13513] netlink: 'syz.5.2151': attribute type 1 has an invalid length. [ 547.205452][T13513] netlink: 'syz.5.2151': attribute type 12 has an invalid length. [ 547.222139][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 547.241259][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2152'. [ 547.252121][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 547.261585][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2152'. [ 547.358388][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 547.389911][ T10] usb 5-1: device descriptor read/8, error -71 [ 547.608218][T13321] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 547.617891][ T5703] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 547.628000][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 547.648431][ T10] usb 5-1: device descriptor read/8, error -71 [ 547.758234][ T10] usb usb5-port1: unable to enumerate USB device [ 547.780751][T13321] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.792414][T13321] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 547.802480][T13321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.813047][ T5703] usb 2-1: New USB device found, idVendor=0499, idProduct=100a, bcdDevice= 0.40 [ 547.825677][T13321] usb 6-1: config 0 descriptor?? [ 547.832301][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.836294][ T10] usb 3-1: USB disconnect, device number 111 [ 547.852130][T13321] pwc: Askey VC010 type 2 USB webcam detected. [ 547.862689][ T5703] usb 2-1: Product: syz [ 547.867300][ T5703] usb 2-1: Manufacturer: syz [ 547.872231][ T5703] usb 2-1: SerialNumber: syz [ 547.882906][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 547.946820][ T10] em28xx 3-1:0.0: Freeing device [ 548.247888][ T10] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 548.409041][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 548.419925][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 548.440840][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 548.455064][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 548.458822][T13321] pwc: recv_control_msg error -71 req 02 val 2700 [ 548.471392][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.482151][T13321] pwc: recv_control_msg error -71 req 02 val 2c00 [ 548.503137][T13321] pwc: recv_control_msg error -71 req 04 val 1000 [ 548.539179][ T10] usb 3-1: config 0 descriptor?? [ 548.564397][T13321] pwc: recv_control_msg error -71 req 04 val 1300 [ 548.580291][T13321] pwc: recv_control_msg error -71 req 04 val 1400 [ 548.596366][T13321] pwc: recv_control_msg error -71 req 02 val 2000 [ 548.605312][T13321] pwc: recv_control_msg error -71 req 02 val 2100 [ 548.615309][T13321] pwc: recv_control_msg error -71 req 04 val 1500 [ 548.623307][T13321] pwc: recv_control_msg error -71 req 02 val 2500 [ 548.637498][T13321] pwc: recv_control_msg error -71 req 02 val 2400 [ 548.654687][T13321] pwc: recv_control_msg error -71 req 02 val 2600 [ 548.674712][T13321] pwc: recv_control_msg error -71 req 02 val 2900 [ 548.686505][T13321] pwc: recv_control_msg error -71 req 02 val 2800 [ 548.698927][T13321] pwc: recv_control_msg error -71 req 04 val 1100 [ 548.706998][T13321] pwc: recv_control_msg error -71 req 04 val 1200 [ 548.725103][T13321] pwc: Registered as video103. [ 548.840815][T13321] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input53 [ 548.945539][T13321] usb 6-1: USB disconnect, device number 2 [ 548.957544][T13543] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2159'. [ 549.040210][ T10] apple 0003:05AC:027C.002E: unknown main item tag 0x3 [ 549.056975][ T10] apple 0003:05AC:027C.002E: unknown main item tag 0x4 [ 549.097212][ T10] apple 0003:05AC:027C.002E: reserved main item tag 0xd [ 549.238899][ T10] apple 0003:05AC:027C.002E: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.2-1/input0 [ 549.293807][T13550] sctp: [Deprecated]: syz.3.2160 (pid 13550) Use of int in maxseg socket option. [ 549.293807][T13550] Use struct sctp_assoc_value instead [ 549.388547][ T10] usb 3-1: USB disconnect, device number 112 [ 549.451267][T13550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 549.497587][ T5703] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.506893][ T5703] usb 2-1: MIDIStreaming interface descriptor not found [ 549.518571][ T5703] usb 2-1: too many endpoints [ 549.603088][ T5703] usb 2-1: USB disconnect, device number 3 [ 549.702410][T13135] udevd[13135]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.738009][ T5704] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 549.924803][ T5704] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 549.942381][ T5704] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 549.961913][ T5704] usb 5-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice= 0.40 [ 549.971556][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.983389][ T5704] usb 5-1: Product: syz [ 549.987599][ T5704] usb 5-1: Manufacturer: syz [ 549.992897][ T5704] usb 5-1: SerialNumber: syz [ 550.241156][T13554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.245672][T13569] veth1_macvtap: entered allmulticast mode [ 550.251504][T13554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.261770][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 550.273475][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 550.291254][ T5704] usb 5-1: unit 5 not found! [ 550.362201][ T5704] usb 5-1: selecting invalid altsetting 1 [ 550.368091][ T5703] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 550.383303][ T5704] snd-usb-caiaq 5-1:1.1: can't set alt interface. [ 550.395459][ T5704] usb 5-1: unable to init card! (ret=-5) [ 550.402090][ T5704] snd-usb-caiaq 5-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 550.418572][ T5704] usb 5-1: selecting invalid altsetting 1 [ 550.434581][ T5704] snd-usb-caiaq 5-1:1.2: can't set alt interface. [ 550.447667][ T5704] usb 5-1: unable to init card! (ret=-5) [ 550.454051][ T5704] snd-usb-caiaq 5-1:1.2: probe with driver snd-usb-caiaq failed with error -5 [ 550.467389][ T5704] usb 5-1: USB disconnect, device number 16 [ 550.531491][T13131] udevd[13131]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.549819][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.579457][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.623685][ T5703] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 550.660573][ T5703] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 550.687802][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.716618][ T5703] usb 4-1: config 0 descriptor?? [ 550.859307][ T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 551.028467][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 551.042250][ T9] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 551.061222][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 551.071652][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.080671][ T9] usb 3-1: Product: syz [ 551.085006][ T9] usb 3-1: Manufacturer: syz [ 551.096649][ T9] usb 3-1: SerialNumber: syz [ 551.119137][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 551.126731][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 551.185367][ T5703] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 551.213518][T13589] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2173'. [ 551.248018][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 551.341704][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.359371][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.398054][ T10] usb 5-1: device descriptor read/64, error -71 [ 551.495418][ T9] usb 4-1: USB disconnect, device number 3 [ 551.588283][ T5703] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 551.637953][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 551.757849][ T5703] usb 6-1: Using ep0 maxpacket: 32 [ 551.765834][ T5703] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 551.776519][ T5703] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 551.777937][ T10] usb 5-1: device descriptor read/64, error -71 [ 551.790997][ T5703] usb 6-1: config 0 interface 0 has no altsetting 0 [ 551.809910][ T5703] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 551.819367][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.827501][ T5703] usb 6-1: Product: syz [ 551.833643][ T5703] usb 6-1: Manufacturer: syz [ 551.842055][ T5703] usb 6-1: SerialNumber: syz [ 551.852258][ T5703] usb 6-1: config 0 descriptor?? [ 551.908194][ T10] usb usb5-port1: attempt power cycle [ 552.247964][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 552.278570][ T10] usb 5-1: device descriptor read/8, error -71 [ 552.292974][T13589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.320655][T13589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.336857][T13610] ipvlan0: Caught tx_queue_len zero misconfig [ 552.357850][ T5703] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 552.528621][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 552.543486][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 552.554292][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 552.565155][ T10] usb 5-1: device descriptor read/8, error -71 [ 552.577657][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 552.589839][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 552.600562][T13612] bridge0: port 3(veth0_to_bridge) entered blocking state [ 552.608355][T13612] bridge0: port 3(veth0_to_bridge) entered disabled state [ 552.616079][T13612] veth0_to_bridge: entered allmulticast mode [ 552.624735][T13612] veth0_to_bridge: entered promiscuous mode [ 552.635252][T13612] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 552.653095][T13612] bridge0: port 3(veth0_to_bridge) entered blocking state [ 552.660378][T13612] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 552.678499][ T10] usb usb5-port1: unable to enumerate USB device [ 552.685757][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 552.708581][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 552.726853][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 552.742695][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 552.756615][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 552.767709][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 552.792687][T13616] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 553.719538][ T10] r8152-cfgselector 3-1: USB disconnect, device number 113 [ 554.107904][ T10] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 554.267884][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 554.275690][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 554.285158][ T10] usb 3-1: config 1 has an invalid interface number: 78 but max is 0 [ 554.294249][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 554.303187][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 554.314373][ T10] usb 3-1: config 1 has no interface number 0 [ 554.320944][ T10] usb 3-1: too many endpoints for config 1 interface 78 altsetting 2: 178, using maximum allowed: 30 [ 554.332038][ T10] usb 3-1: config 1 interface 78 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 178 [ 554.345422][ T10] usb 3-1: config 1 interface 78 has no altsetting 0 [ 554.355197][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=df.57 [ 554.365312][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.373459][ T10] usb 3-1: Product: syz [ 554.377938][ T10] usb 3-1: Manufacturer: syz [ 554.382580][ T10] usb 3-1: SerialNumber: syz [ 554.417979][ T189] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 554.569872][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 554.579994][ T189] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 554.589844][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 554.608774][ T10] spcp8x5 3-1:1.78: required endpoints missing [ 554.615530][ T189] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 554.629987][ T10] usb 3-1: USB disconnect, device number 114 [ 554.636070][ T189] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 554.649193][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.673615][ T189] usb 5-1: config 0 descriptor?? [ 555.002117][ T189] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 555.010333][T13625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.019423][ T189] hdpvr 5-1:0.0: device init failed [ 555.025007][ T189] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 555.046365][T13625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.458023][ T189] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 555.617981][ T189] usb 3-1: Using ep0 maxpacket: 32 [ 555.632494][ T189] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 555.654469][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 555.673757][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 555.693371][ T189] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 555.709013][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.730620][ T189] usb 3-1: config 0 descriptor?? [ 555.745327][T13628] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 555.763401][ T189] hub 3-1:0.0: USB hub found [ 555.960906][ T189] hub 3-1:0.0: 2 ports detected [ 556.299105][ T189] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 556.314997][ T189] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 556.334153][ T189] usbhid 3-1:0.0: can't add hid device: -71 [ 556.348584][ T189] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 556.379002][ T189] usb 3-1: USB disconnect, device number 115 [ 557.936332][ T5703] usb 6-1: USB disconnect, device number 3 [ 558.175715][ T9] usb 5-1: USB disconnect, device number 21 [ 558.467260][T13635] CUSE: unknown device info "n|zQC*" [ 558.495123][T13635] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 558.556015][T13635] CUSE: unknown device info "" [ 558.581313][T13635] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 558.675102][T13647] dvmrp8: entered allmulticast mode [ 558.690417][T13635] CUSE: DEVNAME unspecified [ 559.163880][T13649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.720687][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 559.923053][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 559.975578][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.032858][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 560.071883][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.129655][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 560.164220][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 560.206586][ T9] usb 3-1: Product: syz [ 560.231103][ T9] usb 3-1: Manufacturer: syz [ 560.285705][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 560.310597][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 560.367997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 560.425956][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 560.459700][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 560.767959][ T189] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 560.811931][ T9] usb 3-1: USB disconnect, device number 116 [ 560.958848][ T189] usb 5-1: Using ep0 maxpacket: 32 [ 560.990909][ T189] usb 5-1: unable to get BOS descriptor or descriptor too short [ 561.017420][ T189] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 561.059647][ T189] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 561.077888][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.101031][ T189] usb 5-1: Product: syz [ 561.116126][ T189] usb 5-1: Manufacturer: syz [ 561.146233][ T189] usb 5-1: SerialNumber: syz [ 561.414158][ T189] usb 5-1: Limiting number of CPorts to U8_MAX [ 561.479828][ T189] usb 5-1: Not enough endpoints found in device, aborting! [ 561.726519][ T10] usb 5-1: USB disconnect, device number 22 [ 562.239566][ T5703] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 562.479958][ T5703] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 562.522163][ T5703] usb 4-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 562.571192][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.681653][ T5703] keyspan 4-1:8.0: Keyspan - (without firmware) converter detected [ 562.884193][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.892187][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.193125][T13707] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2201'. [ 563.457982][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 563.648140][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 563.659265][ T10] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 563.678126][ T10] usb 5-1: config 0 has no interface number 0 [ 563.692691][ T10] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 563.707903][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.724296][ T10] usb 5-1: Product: syz [ 563.737854][ T10] usb 5-1: Manufacturer: syz [ 563.742915][ T10] usb 5-1: SerialNumber: syz [ 563.761604][ T10] usb 5-1: config 0 descriptor?? [ 563.774315][ T10] hub 5-1:0.89: bad descriptor, ignoring hub [ 563.791356][ T10] hub 5-1:0.89: probe with driver hub failed with error -5 [ 563.802943][ T10] option 5-1:0.89: GSM modem (1-port) converter detected [ 563.818042][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 563.834978][ T10] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 563.998150][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 564.007900][ T9] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 564.019636][ T9] usb 6-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 564.047698][ T9] usb 6-1: Product: syz [ 564.059449][ T9] usb 6-1: Manufacturer: syz [ 564.085789][ T9] usb 6-1: SerialNumber: syz [ 564.091114][ T189] usb 5-1: USB disconnect, device number 23 [ 564.123580][ T9] usb 6-1: config 0 descriptor?? [ 564.150020][ T189] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 564.186107][ T189] option 5-1:0.89: device disconnected [ 564.931818][ T9] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 564.987994][ T189] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 565.203265][ T189] usb 5-1: Using ep0 maxpacket: 32 [ 565.249487][ T189] usb 5-1: config 0 has no interfaces? [ 565.270912][ T189] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 565.305637][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.337705][ T189] usb 5-1: Product: syz [ 565.353940][ T189] usb 5-1: Manufacturer: syz [ 565.371707][ T189] usb 5-1: SerialNumber: syz [ 565.401359][ T189] usb 5-1: config 0 descriptor?? [ 565.492463][ T9] usb 6-1: [UEAGLE-ATM] interface 1 not found [ 565.505764][ T9] ueagle-atm 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 565.651563][T13729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.686327][T13729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.710391][ T9] usb 6-1: USB disconnect, device number 4 [ 565.791334][ T189] usb 5-1: USB disconnect, device number 24 [ 566.794523][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 566.794545][ T29] audit: type=1326 audit(1784235907.528:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.4.2212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80419de59 code=0x7ffc0000 [ 566.932616][ T29] audit: type=1326 audit(1784235907.548:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.4.2212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80419de59 code=0x7ffc0000 [ 567.089736][ T29] audit: type=1326 audit(1784235907.548:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.4.2212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa80419de59 code=0x7ffc0000 [ 567.249119][ T29] audit: type=1326 audit(1784235907.548:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.4.2212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80419de59 code=0x7ffc0000 [ 567.418856][ T29] audit: type=1326 audit(1784235907.548:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.4.2212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80419de59 code=0x7ffc0000 [ 567.543721][ T29] audit: type=1326 audit(1784235907.598:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.4.2212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa80419de59 code=0x7ffc0000 [ 567.624828][T13750] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2214'. [ 567.651895][ T29] audit: type=1326 audit(1784235907.598:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.4.2212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80419de59 code=0x7ffc0000 [ 567.778730][ T29] audit: type=1326 audit(1784235907.598:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.4.2212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa80419de59 code=0x7ffc0000 [ 567.807700][ T29] audit: type=1326 audit(1784235907.598:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.4.2212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80419de59 code=0x7ffc0000 [ 568.016904][ T29] audit: type=1326 audit(1784235907.598:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.4.2212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa80419de59 code=0x7ffc0000 [ 568.172612][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2215'. [ 568.453280][T13759] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 568.760472][T13759] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.813720][T13759] bridge0: left allmulticast mode [ 568.864614][T13759] dummy0: left promiscuous mode [ 569.310871][T13759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.409952][T13759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.775181][T13759] veth3: left promiscuous mode [ 569.800007][T13759] vlan2: left promiscuous mode [ 569.810000][T13759] bridge0: left promiscuous mode [ 569.851619][T12906] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.888448][T12906] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.919039][T12906] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.947453][T12906] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.990716][T12906] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.020194][T12906] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.052344][T12906] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.101519][T12906] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.184701][T13774] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 570.215336][T13774] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 570.243562][T13774] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 570.264000][T13774] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 570.283703][T13774] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 570.580633][T13791] random: crng reseeded on system resumption [ 570.652957][T13791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.758642][T13791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.086256][T13778] netlink: 'syz.5.2223': attribute type 34 has an invalid length. [ 571.108598][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2223'. [ 571.263963][T13778] bond10: option lacp_strict: invalid value (255) [ 571.297021][T13806] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2229'. [ 571.323860][T13778] bond10 (unregistering): Released all slaves [ 571.450160][T13809] netlink: 'syz.4.2229': attribute type 4 has an invalid length. [ 571.469254][ T5718] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 571.672608][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 571.696875][ T5718] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 571.730668][ T5718] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 571.747841][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.766296][ T5718] usb 3-1: Product: syz [ 571.770787][ T5718] usb 3-1: Manufacturer: syz [ 571.792256][ T5718] usb 3-1: SerialNumber: syz [ 572.237969][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 572.244924][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 572.319736][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 572.326614][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 572.334539][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 572.473651][ T5718] usb 3-1: USB disconnect, device number 117 [ 572.750899][T13131] udevd[13131]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.787134][T13831] x_tables: duplicate underflow at hook 1 [ 573.895391][T13832] binder: 13830:13832 ioctl c0306201 200000000080 returned -14 [ 574.174616][T13836] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 574.275528][T13844] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2239'. [ 574.308998][T13844] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2239'. [ 574.462661][T13848] x_tables: duplicate underflow at hook 1 [ 574.757908][ T5718] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 574.928961][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 574.962831][ T5718] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 574.979584][T13852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.003060][ T5718] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 575.019922][ T5703] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 575.028623][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 575.042624][T13852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.047920][ T5718] usb 2-1: Product: syz [ 575.077661][ T5718] usb 2-1: Manufacturer: syz [ 575.089617][ T5718] usb 2-1: SerialNumber: syz [ 575.110915][ T5718] usb 2-1: config 0 descriptor?? [ 575.131632][T13848] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 575.152064][ T5718] hub 2-1:0.0: bad descriptor, ignoring hub [ 575.172500][ T5718] hub 2-1:0.0: probe with driver hub failed with error -5 [ 575.229694][ T5703] usb 5-1: Using ep0 maxpacket: 16 [ 575.256351][ T5703] usb 5-1: unable to get BOS descriptor or descriptor too short [ 575.305008][ T5703] usb 5-1: config 3 has an invalid interface number: 74 but max is 0 [ 575.329989][ T5703] usb 5-1: config 3 has no interface number 0 [ 575.336974][ T5703] usb 5-1: config 3 interface 74 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 575.358985][ T5703] usb 5-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 575.382516][ T5703] usb 5-1: config 3 interface 74 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 575.401862][ T5703] usb 5-1: config 3 interface 74 altsetting 1 bulk endpoint 0xD has invalid maxpacket 8 [ 575.419979][ T5703] usb 5-1: config 3 interface 74 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 575.458767][ T5703] usb 5-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 575.458845][ T5703] usb 5-1: config 3 interface 74 altsetting 1 endpoint 0x81 has invalid maxpacket 9507, setting to 1024 [ 575.458900][ T5703] usb 5-1: config 3 interface 74 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 575.458961][ T5703] usb 5-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0x49, changing to 0x9 [ 575.459003][ T5703] usb 5-1: config 3 interface 74 altsetting 1 endpoint 0x9 has invalid maxpacket 17751, setting to 1024 [ 575.459061][ T5703] usb 5-1: config 3 interface 74 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 575.459100][ T5703] usb 5-1: config 3 interface 74 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 7 [ 575.459158][ T5703] usb 5-1: config 3 interface 74 has no altsetting 0 [ 575.482632][ T5703] usb 5-1: New USB device found, idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 575.482695][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.482752][ T5703] usb 5-1: Product: syz [ 575.482785][ T5703] usb 5-1: Manufacturer: syz [ 575.482817][ T5703] usb 5-1: SerialNumber: syz [ 575.491444][T13856] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 575.491665][T13856] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 575.491846][T13856] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 575.528028][ T5718] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 575.620090][T13868] bridge6: entered promiscuous mode [ 575.708637][T13868] bridge6: entered allmulticast mode [ 575.740255][T13856] netlink: 'syz.4.2244': attribute type 32 has an invalid length. [ 575.740321][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 575.835345][T13856] bond5: Setting coupled_control to off (0) [ 575.861003][ T5718] usb 6-1: Using ep0 maxpacket: 32 [ 575.879882][ T5718] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 575.888697][ T5718] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 575.907563][ T5718] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 575.958753][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 575.996312][ T5718] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 576.040034][ T5718] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 576.092255][ T5718] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 576.113570][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.140464][ T5718] usb 6-1: config 0 descriptor?? [ 576.287949][T13878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.308538][T13878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.344129][T13878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.356856][ T5718] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 576.366995][T13878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.384264][ T5718] usb 6-1: USB disconnect, device number 5 [ 576.420869][ T5718] usblp1: removed [ 576.629871][T13884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.688173][T13884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.728056][ T5718] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 576.748984][ T9] usb 2-1: USB disconnect, device number 4 [ 576.878692][ T5718] usb 6-1: Using ep0 maxpacket: 32 [ 576.887535][ T5718] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 576.904743][ T5718] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 576.923800][ T5718] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 576.943155][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 576.968582][ T5718] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 576.987012][ T5718] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 577.011368][ T5718] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 577.030222][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.055719][ T5718] usb 6-1: config 0 descriptor?? [ 577.285666][ T5718] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 577.309983][T13866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.360165][T13866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.454703][T13900] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2255'. [ 577.471990][T13900] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2255'. [ 577.487003][T13321] usb 6-1: USB disconnect, device number 6 [ 577.512924][T13321] usblp0: removed [ 577.538296][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 577.538331][ T29] audit: type=1400 audit(1784235918.288:1304): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=13898 comm="syz.3.2256" [ 577.811084][ T5703] ipaq 5-1:3.74: PocketPC PDA converter detected [ 577.842545][ T5703] usb 5-1: active config #3 != 1 ?? [ 578.020592][ T5703] usb 5-1: USB disconnect, device number 25 [ 578.095462][T13908] loop6: detected capacity change from 0 to 2640 [ 578.183353][T13155] buffer_io_error: 11 callbacks suppressed [ 578.183505][T13155] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.249304][T13155] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.296663][T13155] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.350575][T13155] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.411030][T13155] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.760965][T13923] geneve1: entered promiscuous mode [ 578.825752][T13926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2261'. [ 579.706440][T13939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 580.117995][ T5718] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 580.288154][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 580.338605][ T5703] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 580.341970][ T5718] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 580.391804][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.420711][T13951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.445485][ T5718] usb 2-1: config 0 descriptor?? [ 580.482706][ T5718] as10x_usb: device has been detected [ 580.496909][T13951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.516547][ T5718] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 580.554584][ T5703] usb 3-1: config 3 has an invalid interface number: 153 but max is 0 [ 580.564535][ T5703] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 580.586763][ T5703] usb 3-1: config 3 has no interface number 0 [ 580.604680][ T5703] usb 3-1: config 3 interface 153 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 580.638410][ T5718] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 580.657596][ T5703] usb 3-1: config 3 interface 153 has no altsetting 0 [ 580.719930][ T5703] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=90.80 [ 580.747703][T13929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.748631][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.769666][ T5703] usb 3-1: Product: syz [ 580.770050][T13929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.774845][ T5703] usb 3-1: Manufacturer: syz [ 580.796544][ T5703] usb 3-1: SerialNumber: syz [ 580.835986][ T5718] as10x_usb: error during firmware upload part1 [ 580.852911][ T5718] Registered device nBox DVB-T Dongle [ 580.863164][ T5718] usb 2-1: USB disconnect, device number 5 [ 580.972005][ T5718] Unregistered device nBox DVB-T Dongle [ 580.975645][ T5718] as10x_usb: device has been disconnected [ 581.050694][T13959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.075949][T13959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.196550][ T5703] qmi_wwan 3-1:3.153: probe with driver qmi_wwan failed with error -22 [ 581.315826][ T5703] usb 3-1: USB disconnect, device number 118 [ 581.662845][T13977] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2276'. [ 582.020988][ T9] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 582.192084][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.202816][T13985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.232255][ T9] usb 3-1: config 0 has no interface number 0 [ 582.261116][ T9] usb 3-1: too many endpoints for config 0 interface 1 altsetting 48: 48, using maximum allowed: 30 [ 582.279959][T13985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.306014][ T9] usb 3-1: config 0 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 582.364247][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 582.384527][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 582.408038][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.447999][ T9] usb 3-1: Product: syz [ 582.456175][ T9] usb 3-1: Manufacturer: syz [ 582.471958][ T9] usb 3-1: SerialNumber: syz [ 582.498328][ T9] usb 3-1: config 0 descriptor?? [ 582.720610][T13977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.766266][T13977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.941022][ T9] usb 3-1: selecting invalid altsetting 1 [ 583.125135][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 583.166885][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 583.222433][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 583.257649][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'. [ 583.338861][T13996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.393982][ T9] DVB: Unable to find symbol stv0299_attach() [ 583.570251][ T9] DVB: Unable to find symbol tda8083_attach() [ 583.593610][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 583.632540][ T9] usb 3-1: USB disconnect, device number 119 [ 583.942601][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2282'. [ 584.033582][T14000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.117892][ T9] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 584.129905][T14000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.316502][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.359408][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.389902][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 584.414687][ T9] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 584.424741][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.468453][ T9] usb 3-1: config 0 descriptor?? [ 584.732728][T13992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.761134][T13992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.961451][T14013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.009435][ T9] steelseries 0003:1038:1410.0030: unknown main item tag 0x1 [ 585.023231][ T9] steelseries 0003:1038:1410.0030: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 585.247942][ T9] usb 3-1: USB disconnect, device number 120 [ 585.658220][ T5718] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 585.741286][T14028] cifs: Unknown parameter 'g' [ 585.767532][T14028] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 585.840451][ T5718] usb 6-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 585.881277][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.964991][ T5718] usb-storage 6-1:32.0: USB Mass Storage device detected [ 586.025856][ T5718] usb-storage 6-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 586.164691][T14025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.212399][T14025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.387228][ T5718] usb 6-1: USB disconnect, device number 7 [ 586.857887][ T5718] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 586.982636][T14054] binder: BINDER_SET_CONTEXT_MGR already set [ 586.994113][T14054] binder: 14053:14054 ioctl 4018620d 200000000100 returned -16 [ 587.072633][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.087507][T14059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.113532][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.146690][T14059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.170493][ T5718] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 587.211002][ T5718] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 587.220062][T14059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.220840][T14059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.237546][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.256090][ T5718] usb 6-1: config 0 descriptor?? [ 587.386728][T14059] syzkaller0: entered promiscuous mode [ 587.394584][T14059] syzkaller0: entered allmulticast mode [ 587.547980][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 587.730777][ T9] usb 2-1: config 34 has an invalid interface number: 116 but max is 0 [ 587.740916][ T9] usb 2-1: config 34 has no interface number 0 [ 587.761181][ T9] usb 2-1: config 34 interface 116 has no altsetting 0 [ 587.780774][ T9] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 587.799647][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.824807][ T9] usb 2-1: Product: syz [ 587.848551][ T9] usb 2-1: Manufacturer: syz [ 587.866008][ T9] usb 2-1: SerialNumber: syz [ 587.881645][ T5718] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 588.198595][T14048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.209469][T14048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.417745][ C1] sched: DL replenish lagged too much [ 624.378399][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.625963][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 711.475263][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 711.500126][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.367706][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 721.374705][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5734/1:b..l [ 721.383348][ C0] rcu: (detected by 0, t=10502 jiffies, g=102357, q=1227 ncpus=2) [ 721.391268][ C0] task:syz-executor state:R running task stack:21304 pid:5734 tgid:5734 ppid:1 task_flags:0x40054c flags:0x00080003 [ 721.406523][ C0] Call Trace: [ 721.409927][ C0] [ 721.412975][ C0] __schedule+0x17d9/0x56c0 [ 721.417758][ C0] ? __pfx___schedule+0x10/0x10 [ 721.422841][ C0] ? idr_get_next+0x283/0x350 [ 721.427700][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 721.433163][ C0] preempt_schedule_common+0x82/0xd0 [ 721.438482][ C0] preempt_schedule_thunk+0x16/0x40 [ 721.443735][ C0] _raw_read_unlock+0x3f/0x50 [ 721.448520][ C0] zap_pid_ns_processes+0x2b5/0x5f0 [ 721.453792][ C0] ? zap_pid_ns_processes+0x129/0x5f0 [ 721.459203][ C0] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 721.464956][ C0] ? _raw_write_unlock_irq+0x23/0x50 [ 721.470275][ C0] do_exit+0x1fd8/0x2360 [ 721.474600][ C0] ? cgroup1_freezing+0x20/0x350 [ 721.479582][ C0] ? __pfx_do_exit+0x10/0x10 [ 721.484205][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 721.489300][ C0] do_group_exit+0x22d/0x2f0 [ 721.493920][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 721.499152][ C0] get_signal+0x121b/0x12c0 [ 721.503703][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 721.509334][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 721.514371][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 721.520569][ C0] exit_to_user_mode_loop+0x104/0x730 [ 721.525999][ C0] ? rcu_is_watching+0x15/0xb0 [ 721.530967][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.537096][ C0] do_syscall_64+0x353/0x580 [ 721.541813][ C0] ? trace_irq_disable+0x3b/0x140 [ 721.546885][ C0] ? clear_bhb_loop+0x40/0x90 [ 721.551589][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.557496][ C0] RIP: 0033:0x7f5059b9f62a [ 721.562736][ C0] RSP: 002b:00007f5059f4f6b8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 721.571210][ C0] RAX: 0000000000000000 RBX: 00007f5059f4f740 RCX: 00007f5059b9f62a [ 721.579204][ C0] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 721.587192][ C0] RBP: 0000000000000003 R08: 00007f5059f4f6dc R09: 0000000000000000 [ 721.595184][ C0] R10: 00007f5059f4f740 R11: 0000000000000212 R12: 00007f5059ded900 [ 721.603180][ C0] R13: 00007f5059f4f6dc R14: 0000000000000000 R15: 00007f5059dedfc0 [ 721.611195][ C0] [ 721.614230][ C0] rcu: rcu_preempt kthread starved for 243 jiffies! g102357 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 721.625349][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 721.635333][ C0] rcu: RCU grace-period kthread stack dump: [ 721.641232][ C0] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 721.654748][ C0] Call Trace: [ 721.658040][ C0] [ 721.660985][ C0] __schedule+0x17d9/0x56c0 [ 721.665539][ C0] ? __pfx___schedule+0x10/0x10 [ 721.670475][ C0] ? schedule+0x90/0x2b0 [ 721.674746][ C0] schedule+0x164/0x2b0 [ 721.678935][ C0] schedule_timeout+0x152/0x2c0 [ 721.683818][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 721.689218][ C0] ? __pfx_process_timeout+0x10/0x10 [ 721.694533][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 721.700370][ C0] ? prepare_to_swait_event+0x322/0x350 [ 721.705941][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 721.710841][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 721.717025][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 721.722337][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 721.727602][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 721.733469][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 721.738084][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 721.743316][ C0] ? __kthread_parkme+0x71/0x1f0 [ 721.748313][ C0] ? __kthread_parkme+0x196/0x1f0 [ 721.753366][ C0] kthread+0x388/0x470 [ 721.757460][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 721.762688][ C0] ? __pfx_kthread+0x10/0x10 [ 721.767309][ C0] ret_from_fork+0x514/0xb70 [ 721.771935][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 721.777076][ C0] ? __switch_to+0xc89/0x1420 [ 721.781780][ C0] ? __pfx_kthread+0x10/0x10 [ 721.786400][ C0] ret_from_fork_asm+0x1a/0x30 [ 721.791202][ C0] [ 721.794240][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 721.800580][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 721.811135][ C0] Tainted: [L]=SOFTLOCKUP [ 721.815472][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 721.825542][ C0] RIP: 0010:NF_HOOK+0x23e/0x3f0 [ 721.830585][ C0] Code: 48 89 84 24 80 00 00 00 4d 89 fd 4c 89 bc 24 88 00 00 00 4d 89 f7 48 8b 7c 24 18 48 8d 74 24 60 48 89 da 31 c9 e8 e2 5f 4d ff <89> c3 43 c7 44 34 04 f8 f8 f8 f8 66 43 c7 44 34 08 f8 f8 eb 10 4d [ 721.850215][ C0] RSP: 0018:ffffc90000006e00 EFLAGS: 00000282 [ 721.856305][ C0] RAX: 0000000000000000 RBX: ffff888076e0e100 RCX: ffffffff8e88ef40 [ 721.864295][ C0] RDX: 0000000000000100 RSI: ffffffff900a7b00 RDI: 0000000000000002 [ 721.872284][ C0] RBP: ffffc90000006f10 R08: ffffffff8e88ef40 R09: 0000000000000004 [ 721.880281][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: 1ffff92000000dc8 [ 721.888269][ C0] R13: ffffffff8a9f6270 R14: dffffc0000000000 R15: dffffc0000000000 [ 721.896352][ C0] FS: 0000000000000000(0000) GS:ffff888124f56000(0000) knlGS:0000000000000000 [ 721.905301][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 721.911902][ C0] CR2: 0000200000112030 CR3: 0000000073b58000 CR4: 00000000003526f0 [ 721.919900][ C0] Call Trace: [ 721.923199][ C0] [ 721.926054][ C0] ? NF_HOOK+0xa2/0x3f0 [ 721.930239][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 721.934849][ C0] ? net_generic+0x1e/0x240 [ 721.939591][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 721.945687][ C0] ? net_generic+0x1e/0x240 [ 721.950217][ C0] br_forward_finish+0xd3/0x130 [ 721.955092][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 721.961008][ C0] br_nf_forward_finish+0xa76/0xea0 [ 721.966243][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 721.972000][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 721.977543][ C0] ? NF_HOOK+0xa2/0x6e0 [ 721.981731][ C0] ? NF_HOOK+0xa2/0x6e0 [ 721.985911][ C0] NF_HOOK+0x64e/0x6e0 [ 721.990006][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 721.994878][ C0] ? net_generic+0x1e/0x240 [ 721.999415][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 722.005167][ C0] ? net_generic+0x1e/0x240 [ 722.009701][ C0] ? net_generic+0x1e/0x240 [ 722.014236][ C0] br_nf_forward_ip+0x7eb/0xa30 [ 722.019123][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 722.024871][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 722.030098][ C0] nf_hook_slow+0xc5/0x220 [ 722.034670][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 722.040152][ C0] NF_HOOK+0x23e/0x3f0 [ 722.044246][ C0] ? NF_HOOK+0xa2/0x3f0 [ 722.048422][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 722.053040][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 722.058529][ C0] ? skb_clone+0x246/0x3a0 [ 722.063090][ C0] ? br_flood+0x623/0x8d0 [ 722.067442][ C0] ? br_handle_vlan+0x5e/0x530 [ 722.072298][ C0] __br_forward+0x397/0x540 [ 722.076821][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 722.082317][ C0] br_handle_frame_finish+0x1175/0x1990 [ 722.087894][ C0] ? kasan_save_track+0x4f/0x80 [ 722.092824][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 722.098765][ C0] ? nf_hook_slow+0x176/0x220 [ 722.103488][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 722.109424][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 722.114400][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 722.119884][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 722.125806][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 722.131105][ C0] ? lock_acquire+0x106/0x350 [ 722.135818][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 722.141832][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 722.147764][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 722.153171][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 722.158756][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 722.164691][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 722.171219][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 722.176452][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 722.182730][ C0] br_handle_frame+0x127f/0x1510 [ 722.187705][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 722.193019][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 722.198939][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 722.204250][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.209484][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 722.214793][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 722.220551][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 722.225682][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 722.231858][ C0] ? ip6_rcv_finish+0x265/0x280 [ 722.236737][ C0] ? NF_HOOK+0x336/0x3c0 [ 722.241016][ C0] ? process_backlog+0x3c3/0x1860 [ 722.246071][ C0] ? process_backlog+0x3c3/0x1860 [ 722.251113][ C0] ? process_backlog+0x3c3/0x1860 [ 722.256159][ C0] process_backlog+0x706/0x1860 [ 722.261037][ C0] ? process_backlog+0x3c3/0x1860 [ 722.266092][ C0] __napi_poll+0xaa/0x330 [ 722.270448][ C0] net_rx_action+0x61d/0xf50 [ 722.275071][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 722.280310][ C0] ? lapic_next_event+0x11/0x20 [ 722.285220][ C0] handle_softirqs+0x225/0x840 [ 722.290005][ C0] ? __irq_exit_rcu+0xca/0x220 [ 722.294795][ C0] __irq_exit_rcu+0xca/0x220 [ 722.299424][ C0] irq_exit_rcu+0x9/0x30 [ 722.303687][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 722.309349][ C0] [ 722.312291][ C0] [ 722.315229][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 722.321224][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 722.326879][ C0] Code: 5c 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 2a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 722.346507][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000242 [ 722.352754][ C0] RAX: 00000000011df7e3 RBX: ffffffff819ab33c RCX: 0000000080000001 [ 722.360745][ C0] RDX: 0000000000000001 RSI: ffffffff8e22b72d RDI: ffffffff8c4bd980 [ 722.368742][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 722.377085][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 722.385169][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 722.393175][ C0] ? do_idle+0x1cc/0x540 [ 722.397636][ C0] default_idle+0x9/0x20 [ 722.401898][ C0] default_idle_call+0x72/0xb0 [ 722.406688][ C0] do_idle+0x1cc/0x540 [ 722.410784][ C0] ? __pfx_do_idle+0x10/0x10 [ 722.415429][ C0] cpu_startup_entry+0x43/0x60 [ 722.420217][ C0] rest_init+0x2de/0x300 [ 722.424482][ C0] start_kernel+0x392/0x3e0 [ 722.429163][ C0] x86_64_start_reservations+0x24/0x30 [ 722.434710][ C0] x86_64_start_kernel+0x137/0x1b0 [ 722.439850][ C0] common_startup_64+0x13e/0x157 [ 722.444912][ C0]