last executing test programs: 2m37.433728999s ago: executing program 3 (id=124): r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m35.129639289s ago: executing program 3 (id=131): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2m33.64612573s ago: executing program 3 (id=137): socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) 2m30.878066215s ago: executing program 3 (id=147): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m30.400429858s ago: executing program 3 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000180)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="000001"]) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0xd8}, 0x14) 2m29.296465421s ago: executing program 3 (id=151): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x20040, 0x0) io_uring_enter(r0, 0x47f6, 0x40, 0x2, 0x0, 0x0) 2m27.924485261s ago: executing program 32 (id=151): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x20040, 0x0) io_uring_enter(r0, 0x47f6, 0x40, 0x2, 0x0, 0x0) 14.114962074s ago: executing program 5 (id=511): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 12.83012141s ago: executing program 1 (id=513): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 11.758154463s ago: executing program 5 (id=518): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 11.475953356s ago: executing program 5 (id=520): r0 = syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180)=r0, 0x12) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) r7 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) 10.460193702s ago: executing program 1 (id=521): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)='p', 0x1}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) 10.338140795s ago: executing program 5 (id=522): socket$can_bcm(0x1d, 0x2, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x6dc183) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x4}) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) 9.536366665s ago: executing program 5 (id=524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r4, 0x0, 0x201f00) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) 8.833922426s ago: executing program 2 (id=525): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbe, 0xd3, 0xb, 0x8, 0x1b3d, 0x1e6, 0x781f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd3, 0x0, 0x0, 0x70, 0x70, 0xd0}}]}}]}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x11) 8.363423376s ago: executing program 0 (id=527): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000300)={0x18, r4, 0x100000001}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]}) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x4) 8.14628565s ago: executing program 1 (id=528): setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x840, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x5, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)='\n\x00rGC', 0x0, 0xfffffffd, 0x19f9e939a30d04e, 0x4, 0x0}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 7.469780907s ago: executing program 0 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020601030000000000000000070000000900020073797a30000000000500010006000000050005000000000005000400000000000c00078008000840000000b60d000300686173683a6d616300"], 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x488d0}, 0x44004) 6.343915887s ago: executing program 1 (id=531): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1000003, {0x0, 0x0, 0x0, 0x0, 0xe82, 0x1800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1032, 0x20a}}}}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3c3}}, 0x20}}, 0x0) 6.209359133s ago: executing program 4 (id=532): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x455d, 0x7721, 0x12, 0x0, 0x4a) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5.935691658s ago: executing program 0 (id=533): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="800000000308010100000000000000000300003c000480080002400000000008000240df05007b08000240000007ff0800024000000033"], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008800) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.848101085s ago: executing program 4 (id=534): pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x3ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x4e1, &(0x7f0000000100)={0x0, 0x1ffff9, 0x10100, 0xfffffffe, 0x9}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x468f, 0xc4bc, 0x2d, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x110003) 5.490029626s ago: executing program 5 (id=535): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r4], 0x20, 0x6044}, 0x6) 5.479713386s ago: executing program 2 (id=536): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.188073713s ago: executing program 0 (id=537): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) 5.185839119s ago: executing program 1 (id=538): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) r5 = syz_usb_connect$cdc_ncm(0x2, 0x76, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r2, 0x7277, 0x0, 0x0, 0x0, 0x0) 4.153631856s ago: executing program 4 (id=539): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 4.075119328s ago: executing program 2 (id=540): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(r2, 0x0, 0x22) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 4.025947026s ago: executing program 4 (id=541): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x262e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x20000002) 2.361526755s ago: executing program 2 (id=542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/26, 0x1a}], 0x3}, 0x60002000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000240)=0x3fc, 0x9, 0x0) 1.91771618s ago: executing program 2 (id=543): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x6c48, 0x400, 0x4, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 1.91749061s ago: executing program 4 (id=544): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200440c1}, 0x4004001) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, r3}}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.80329314s ago: executing program 0 (id=545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x6c7, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x440f}}) io_uring_enter(r4, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, 0x0}}], 0x0, 0x0, 0x0}) 1.390976799s ago: executing program 4 (id=546): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) 1.189228721s ago: executing program 1 (id=547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 228.636811ms ago: executing program 2 (id=548): socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg(0xffffffffffffffff, &(0x7f000000b200)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)="ad4626c0557d8baa7fa17ea0ee57d470fa0f0ace0b746c20897cbc91e9ec962bd00034bc80f88291d1a9eb198e9fbaeb461c0cc65a1835fb2a089cb58f84bf94c2db6fd17b33738151337b947d57b4842e4eb64610444195f6eb7b2a9def70004fc5923073584d02f5790cfcf71492f963e2b3ecf3aa491e8a87297045f077e55a4885dd4f412d1b0efeb5eb70526bba5671616df63dea027397257da2d188bb4987b1c665d030058ae1a27e", 0xac}, {0x0}], 0x2}}], 0x1, 0x40000) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 0 (id=549): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 69.089272][ T5811] cgroup: Unknown subsys name 'net' [ 69.223499][ T5811] cgroup: Unknown subsys name 'cpuset' [ 69.232169][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.657092][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.443657][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.450142][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.956731][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.965980][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.974097][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.990157][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.000157][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.075258][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.083596][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.104672][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.112419][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.121274][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.130343][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.138233][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.145858][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.154111][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.161813][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.170417][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.178725][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.178889][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.193624][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.202081][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.202345][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.217481][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.226379][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.233824][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.243090][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.798028][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 73.880399][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 74.052266][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 74.136991][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.145235][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.152612][ T5826] bridge_slave_0: entered allmulticast mode [ 74.159647][ T5826] bridge_slave_0: entered promiscuous mode [ 74.168545][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 74.196194][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.204029][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.211552][ T5840] bridge_slave_0: entered allmulticast mode [ 74.219224][ T5840] bridge_slave_0: entered promiscuous mode [ 74.227270][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.235115][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.245961][ T5826] bridge_slave_1: entered allmulticast mode [ 74.253109][ T5826] bridge_slave_1: entered promiscuous mode [ 74.293192][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.300471][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.307667][ T5840] bridge_slave_1: entered allmulticast mode [ 74.314946][ T5840] bridge_slave_1: entered promiscuous mode [ 74.347039][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.390872][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.411749][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 74.473743][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.489528][ T5826] team0: Port device team_slave_0 added [ 74.508805][ T5826] team0: Port device team_slave_1 added [ 74.529226][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.575652][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.583156][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.590787][ T5838] bridge_slave_0: entered allmulticast mode [ 74.597688][ T5838] bridge_slave_0: entered promiscuous mode [ 74.644058][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.651294][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.658431][ T5838] bridge_slave_1: entered allmulticast mode [ 74.665909][ T5838] bridge_slave_1: entered promiscuous mode [ 74.683425][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.690713][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.698022][ T5837] bridge_slave_0: entered allmulticast mode [ 74.705154][ T5837] bridge_slave_0: entered promiscuous mode [ 74.718105][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.725277][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.752032][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.777097][ T5840] team0: Port device team_slave_0 added [ 74.783379][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.790581][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.797719][ T5837] bridge_slave_1: entered allmulticast mode [ 74.805102][ T5837] bridge_slave_1: entered promiscuous mode [ 74.822768][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.829736][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.855748][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.878675][ T5840] team0: Port device team_slave_1 added [ 74.916807][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.959042][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.966974][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.974676][ T5839] bridge_slave_0: entered allmulticast mode [ 74.982162][ T5839] bridge_slave_0: entered promiscuous mode [ 74.991316][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.998522][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.005750][ T5839] bridge_slave_1: entered allmulticast mode [ 75.012858][ T5839] bridge_slave_1: entered promiscuous mode [ 75.022146][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.045027][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.046812][ T5833] Bluetooth: hci0: command tx timeout [ 75.052098][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.052140][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.097631][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.110478][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.139611][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.146665][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.172604][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.265299][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.276911][ T5838] team0: Port device team_slave_0 added [ 75.280152][ T5829] Bluetooth: hci3: command tx timeout [ 75.286779][ T5838] team0: Port device team_slave_1 added [ 75.288332][ T5831] Bluetooth: hci1: command tx timeout [ 75.299594][ T5833] Bluetooth: hci2: command tx timeout [ 75.304009][ T5826] hsr_slave_0: entered promiscuous mode [ 75.312953][ T5826] hsr_slave_1: entered promiscuous mode [ 75.320952][ T5837] team0: Port device team_slave_0 added [ 75.350385][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.360165][ T5833] Bluetooth: hci4: command tx timeout [ 75.374721][ T5837] team0: Port device team_slave_1 added [ 75.433916][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.441100][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.467629][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.484265][ T5840] hsr_slave_0: entered promiscuous mode [ 75.490806][ T5840] hsr_slave_1: entered promiscuous mode [ 75.496932][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 75.503158][ T5840] Cannot create hsr debugfs directory [ 75.544839][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.551923][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.578722][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.610282][ T5839] team0: Port device team_slave_0 added [ 75.623117][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.630379][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.656734][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.684973][ T5839] team0: Port device team_slave_1 added [ 75.708636][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.715930][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.741944][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.803414][ T5838] hsr_slave_0: entered promiscuous mode [ 75.809877][ T5838] hsr_slave_1: entered promiscuous mode [ 75.816119][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 75.821889][ T5838] Cannot create hsr debugfs directory [ 75.834510][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.842001][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.868422][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.917027][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.924679][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.950674][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.036882][ T5837] hsr_slave_0: entered promiscuous mode [ 76.043744][ T5837] hsr_slave_1: entered promiscuous mode [ 76.049798][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 76.055626][ T5837] Cannot create hsr debugfs directory [ 76.171011][ T5839] hsr_slave_0: entered promiscuous mode [ 76.177733][ T5839] hsr_slave_1: entered promiscuous mode [ 76.184149][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 76.189883][ T5839] Cannot create hsr debugfs directory [ 76.416004][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.452055][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.463151][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.494015][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.603005][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.621119][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.637326][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.647665][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.774177][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.784397][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.798285][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.816003][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.905121][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.916774][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.933318][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.945029][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.974585][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.048522][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.059026][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.078376][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.086801][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.097184][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.126242][ T5833] Bluetooth: hci0: command tx timeout [ 77.138473][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.145873][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.173979][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.181123][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.211837][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.257530][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.301540][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.318602][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.325734][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.348783][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.360149][ T5833] Bluetooth: hci2: command tx timeout [ 77.365597][ T5833] Bluetooth: hci1: command tx timeout [ 77.371224][ T5831] Bluetooth: hci3: command tx timeout [ 77.385194][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.392426][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.402397][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.409476][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.435868][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.443093][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.451415][ T5833] Bluetooth: hci4: command tx timeout [ 77.530874][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.604193][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.623590][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.678462][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.712500][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.729815][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.756344][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.769500][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.784580][ T5826] veth0_vlan: entered promiscuous mode [ 77.803756][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.810955][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.822082][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.829184][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.856300][ T5826] veth1_vlan: entered promiscuous mode [ 77.865907][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.873063][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.887403][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.894603][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.977641][ T5838] veth0_vlan: entered promiscuous mode [ 78.004752][ T5838] veth1_vlan: entered promiscuous mode [ 78.022914][ T5840] veth0_vlan: entered promiscuous mode [ 78.075231][ T5840] veth1_vlan: entered promiscuous mode [ 78.104860][ T5826] veth0_macvtap: entered promiscuous mode [ 78.126218][ T5838] veth0_macvtap: entered promiscuous mode [ 78.136057][ T5826] veth1_macvtap: entered promiscuous mode [ 78.166873][ T5838] veth1_macvtap: entered promiscuous mode [ 78.188349][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.207355][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.223318][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.245257][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.259748][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.273483][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.285376][ T5840] veth0_macvtap: entered promiscuous mode [ 78.302912][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.313813][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.324623][ T5840] veth1_macvtap: entered promiscuous mode [ 78.341612][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.350800][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.373032][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.382211][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.411815][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.422332][ T1106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.517863][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.543535][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.543881][ T5839] veth0_vlan: entered promiscuous mode [ 78.557559][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.572896][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.603108][ T3487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.612410][ T3487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.639789][ T5839] veth1_vlan: entered promiscuous mode [ 78.647799][ T3487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.657118][ T3487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.705976][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.721035][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.732465][ T5837] veth0_vlan: entered promiscuous mode [ 78.743051][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.763198][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.774137][ T5839] veth0_macvtap: entered promiscuous mode [ 78.806172][ T5839] veth1_macvtap: entered promiscuous mode [ 78.816589][ T5837] veth1_vlan: entered promiscuous mode [ 78.837928][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.902159][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.922421][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.986364][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.006010][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.029047][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.077972][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.113230][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.136437][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.159890][ T5837] veth0_macvtap: entered promiscuous mode [ 79.189179][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.202107][ T5833] Bluetooth: hci0: command tx timeout [ 79.237335][ T5837] veth1_macvtap: entered promiscuous mode [ 79.267363][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.307007][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.379594][ T5921] Zero length message leads to an empty skb [ 79.408018][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.440783][ T5833] Bluetooth: hci1: command tx timeout [ 79.440797][ T5829] Bluetooth: hci3: command tx timeout [ 79.440827][ T5829] Bluetooth: hci2: command tx timeout [ 79.521967][ T5831] Bluetooth: hci4: command tx timeout [ 79.551243][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.584831][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.679825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.694826][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.714738][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.840588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.860184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.868768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.877357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.886425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 79.927634][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.986957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.369371][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.372054][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.389628][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.421116][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.448926][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.608260][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.735286][ T5942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.950329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.958947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.011149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.280561][ T5831] Bluetooth: hci0: command tx timeout [ 81.435468][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.465733][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.561003][ T5831] Bluetooth: hci1: command tx timeout [ 81.566478][ T5831] Bluetooth: hci3: command tx timeout [ 81.572546][ T5829] Bluetooth: hci2: command tx timeout [ 81.620983][ T5833] Bluetooth: hci4: command tx timeout [ 81.675537][ T5950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.760103][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.779376][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.617374][ T5977] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 86.284196][ T6022] syzkaller0: entered promiscuous mode [ 86.323980][ T6022] syzkaller0: entered allmulticast mode [ 87.014551][ T9] cfg80211: failed to load regulatory.db [ 90.948535][ T6059] process 'syz.0.41' launched './file0' with NULL argv: empty string added [ 91.440323][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.744357][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 91.841390][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 91.861757][ T9] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 91.871794][ T9] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 91.879881][ T9] usb 2-1: Product: syz [ 91.884098][ T9] usb 2-1: Manufacturer: syz [ 91.889050][ T9] usb 2-1: SerialNumber: syz [ 94.430521][ T980] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.621344][ T43] usb 2-1: USB disconnect, device number 2 [ 94.671008][ T980] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 94.721818][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.823410][ T980] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 94.840353][ T980] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 94.927637][ T980] usb 4-1: Manufacturer: syz [ 94.962799][ T980] usb 4-1: config 0 descriptor?? [ 95.100009][ T980] rc_core: IR keymap rc-hauppauge not found [ 95.106370][ T980] Registered IR keymap rc-empty [ 95.116175][ T980] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 95.173368][ T980] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 95.302191][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 95.325344][ T980] usb 4-1: USB disconnect, device number 2 [ 95.683447][ T6110] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 95.751876][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 96.045800][ T6111] hsr_slave_1 (unregistering): left promiscuous mode [ 96.098708][ T6115] binder: BINDER_SET_CONTEXT_MGR already set [ 96.105658][ T6115] binder: 6113:6115 ioctl 4018620d 200000004a80 returned -16 [ 96.968761][ T6122] binder_alloc: 6120: binder_alloc_buf, no vma [ 97.326828][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.533566][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 97.550127][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 97.607332][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.663699][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 97.679557][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.712948][ T10] usb 3-1: Product: syz [ 97.717160][ T10] usb 3-1: Manufacturer: syz [ 97.729974][ T10] usb 3-1: SerialNumber: syz [ 97.750921][ T10] usb 3-1: config 0 descriptor?? [ 97.772662][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 97.786389][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 98.366833][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 98.375533][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 98.986246][ T10] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 99.003720][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 99.040199][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 99.267995][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 99.280564][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 99.370338][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 99.430245][ T10] usb 3-1: USB disconnect, device number 2 [ 101.469354][ T6182] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 102.134802][ T6191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.82'. [ 102.190303][ T6191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.82'. [ 103.270049][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.540028][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 103.555829][ T10] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 103.700024][ T10] usb 5-1: config 0 has no interface number 0 [ 104.249796][ T10] usb 5-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 104.369457][ T10] usb 5-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 104.380679][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.478220][ T10] usb 5-1: Product: syz [ 104.483584][ T10] usb 5-1: Manufacturer: syz [ 104.488231][ T10] usb 5-1: SerialNumber: syz [ 104.502233][ T10] usb 5-1: config 0 descriptor?? [ 104.508612][ T6210] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 104.536541][ T10] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 104.726792][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.736260][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.180900][ T43] usb 5-1: USB disconnect, device number 2 [ 108.697522][ T5922] IPVS: starting estimator thread 0... [ 109.316106][ T6287] IPVS: using max 50 ests per chain, 120000 per kthread [ 109.866229][ T6305] netlink: 'syz.4.113': attribute type 1 has an invalid length. [ 109.934011][ T6307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.113'. [ 109.938793][ T6305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.005276][ T6307] bond1: entered promiscuous mode [ 110.052883][ T6307] bond1: entered allmulticast mode [ 110.261323][ T6305] bond1: (slave dummy0): making interface the new active one [ 110.323828][ T6305] dummy0: entered promiscuous mode [ 110.356322][ T6305] dummy0: entered allmulticast mode [ 110.387119][ T6305] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 110.990015][ T5885] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.218935][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 111.235908][ T5885] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 111.251405][ T5885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.278677][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.290075][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.372905][ T5885] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.416099][ T5885] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.446390][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.556370][ T43] usb 4-1: USB disconnect, device number 3 [ 113.221136][ T6343] binder_alloc: 6340: binder_alloc_buf, no vma [ 113.353322][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056b4e000: rx timeout, send abort [ 113.854053][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056b3a400: rx timeout, send abort [ 114.362346][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056b3a400: abort rx timeout. Force session deactivation [ 114.769866][ T6361] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.842497][ T6355] kvm: pic: non byte read [ 115.086249][ T6355] kvm: pic: level sensitive irq not supported [ 115.086344][ T6355] kvm: pic: non byte read [ 115.172655][ T6355] kvm: pic: level sensitive irq not supported [ 115.172711][ T6355] kvm: pic: non byte read [ 116.208603][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 117.160734][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.367984][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 117.374484][ T10] usb 5-1: config 0 has an invalid interface number: 71 but max is 1 [ 117.382863][ T10] usb 5-1: config 0 has an invalid interface number: 220 but max is 1 [ 117.401315][ T10] usb 5-1: config 0 has no interface number 0 [ 117.417710][ T10] usb 5-1: config 0 has no interface number 1 [ 117.427820][ T10] usb 5-1: config 0 interface 71 has no altsetting 0 [ 117.445282][ T10] usb 5-1: config 0 interface 220 has no altsetting 0 [ 117.465913][ T10] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=1b.69 [ 117.477298][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.507633][ T10] usb 5-1: Product: syz [ 117.520573][ T10] usb 5-1: Manufacturer: syz [ 117.526179][ T10] usb 5-1: SerialNumber: syz [ 117.550299][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.559459][ T10] usb 5-1: config 0 descriptor?? [ 117.732278][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.745256][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.767063][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.782270][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 117.839318][ T9] usb 4-1: SerialNumber: syz [ 117.955693][ T10] usb 5-1: USB disconnect, device number 3 [ 118.497817][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.71/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.120871][ T9] usb 4-1: 0:2 : does not exist [ 119.363329][ T9] usb 4-1: USB disconnect, device number 4 [ 119.392787][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.918825][ T5922] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.112015][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 120.114520][ T6428] syzkaller0: entered promiscuous mode [ 120.149821][ T5922] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 120.159590][ T6428] syzkaller0: entered allmulticast mode [ 120.165504][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.184319][ T5922] usb 2-1: Product: syz [ 120.198644][ T5922] usb 2-1: Manufacturer: syz [ 120.466214][ T5922] usb 2-1: SerialNumber: syz [ 120.492247][ T5922] usb 2-1: config 0 descriptor?? [ 120.973553][ T5922] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 121.009862][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.050969][ T5922] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 121.109432][ T5922] usb 2-1: media controller created [ 121.199537][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.659269][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.682467][ T5922] zl10353_read_register: readreg error (reg=127, ret==0) [ 121.705421][ T5922] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 121.935868][ T5922] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 121.978434][ T5922] usb 2-1: USB disconnect, device number 3 [ 122.574448][ T5922] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 122.695691][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.077094][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.193581][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.717349][ T12] bridge_slave_1: left allmulticast mode [ 123.750812][ T12] bridge_slave_1: left promiscuous mode [ 123.790423][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.839242][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.851237][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.859359][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.899015][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.974231][ T12] bridge_slave_0: left allmulticast mode [ 123.979981][ T12] bridge_slave_0: left promiscuous mode [ 123.985701][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.051125][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.027264][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.043705][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.061994][ T12] bond0 (unregistering): Released all slaves [ 126.170344][ T5833] Bluetooth: hci0: command tx timeout [ 126.532685][ T6505] binder: 6504:6505 ioctl c0306201 0 returned -14 [ 128.208507][ T6472] chnl_net:caif_netlink_parms(): no params data found [ 128.244914][ T5833] Bluetooth: hci0: command tx timeout [ 128.732690][ T12] hsr_slave_0: left promiscuous mode [ 128.749083][ T12] hsr_slave_1: left promiscuous mode [ 128.759270][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.799036][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.841244][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.848674][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.885594][ T12] veth1_macvtap: left promiscuous mode [ 128.910150][ T12] veth0_macvtap: left promiscuous mode [ 128.922795][ T12] veth1_vlan: left promiscuous mode [ 128.938693][ T12] veth0_vlan: left promiscuous mode [ 130.323227][ T5833] Bluetooth: hci0: command tx timeout [ 130.675956][ T12] team0 (unregistering): Port device team_slave_1 removed [ 130.821760][ T12] team0 (unregistering): Port device team_slave_0 removed [ 132.400076][ T5833] Bluetooth: hci0: command tx timeout [ 132.899402][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905928][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.319984][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.689207][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 133.735999][ T43] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 133.744477][ T43] usb 2-1: config 0 has no interface number 0 [ 133.756009][ T43] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 133.812305][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.939994][ T43] usb 2-1: config 0 descriptor?? [ 134.358117][ T43] viperboard 2-1:0.143: version 0.00 found at bus 002 address 004 [ 134.447186][ T43] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 134.478798][ T43] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 134.773488][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.805699][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.834715][ T6472] bridge_slave_0: entered allmulticast mode [ 134.880698][ T6472] bridge_slave_0: entered promiscuous mode [ 134.923666][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.974190][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.996079][ T6472] bridge_slave_1: entered allmulticast mode [ 135.003754][ T6472] bridge_slave_1: entered promiscuous mode [ 135.295037][ T6472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.601862][ T5922] usb 2-1: USB disconnect, device number 4 [ 136.139621][ T6472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.679061][ T6472] team0: Port device team_slave_0 added [ 136.724469][ T6472] team0: Port device team_slave_1 added [ 137.180099][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.360747][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.707014][ T6472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.809045][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.829382][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.233661][ T6472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.434737][ T6472] hsr_slave_0: entered promiscuous mode [ 138.531672][ T6472] hsr_slave_1: entered promiscuous mode [ 140.151637][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 142.034354][ T6472] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.097975][ T6472] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.354087][ T6472] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.364447][ T6472] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.964495][ T6472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.144375][ T6472] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.188922][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.196193][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.297351][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.304588][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.447533][ T6702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.198'. [ 143.458106][ T6702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.198'. [ 143.523225][ T6702] bridge0: entered promiscuous mode [ 143.529443][ T6702] ip6gretap0: entered promiscuous mode [ 143.820046][ T5896] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 143.832088][ T6472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.005954][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.210194][ T5896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 144.260101][ T5896] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 144.267320][ T6472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.340107][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.413143][ T5896] usb 1-1: config 0 descriptor?? [ 144.480492][ T5896] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 144.502189][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 144.512549][ T6712] syzkaller0: entered promiscuous mode [ 144.518050][ T6712] syzkaller0: entered allmulticast mode [ 144.531638][ T5896] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 144.559778][ T5896] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 144.594921][ T5896] usb 1-1: media controller created [ 144.597400][ T6472] veth0_vlan: entered promiscuous mode [ 144.604516][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.629228][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 144.646842][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.666446][ T5896] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 144.683308][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.693872][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 144.721189][ T6703] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 144.741057][ T5896] dvb-usb: schedule remote query interval to 150 msecs. [ 144.761998][ T6703] team0: Cannot enslave team device to itself [ 144.794306][ T6472] veth1_vlan: entered promiscuous mode [ 144.801781][ T5896] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 144.838836][ T6703] dibusb: i2c wr: len=8192 is too big! [ 144.838836][ T6703] [ 145.001997][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 145.007899][ T5896] dvb-usb: error while querying for an remote control event. [ 145.058601][ T6703] dvb-usb: bulk message failed: -22 (2/0) [ 145.102240][ T6703] dvb-usb: bulk message failed: -22 (4/0) [ 145.149495][ T5896] usb 1-1: USB disconnect, device number 2 [ 145.360423][ T5896] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 145.439448][ T6472] veth0_macvtap: entered promiscuous mode [ 145.494547][ T6472] veth1_macvtap: entered promiscuous mode [ 145.755964][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.777155][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.855888][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.900531][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.909548][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.946371][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.124093][ T6739] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.441583][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.455603][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.095754][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.103697][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.371805][ T6750] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 147.394866][ T6750] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 147.418451][ T6750] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 147.445869][ T6750] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 147.714843][ T6750] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 147.864696][ T6750] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 147.926618][ T6750] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 147.952395][ T6750] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 148.030115][ T6750] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 148.086578][ T6750] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 155.757992][ T6879] netlink: zone id is out of range [ 155.764886][ T6879] netlink: zone id is out of range [ 155.774712][ T6879] netlink: zone id is out of range [ 155.783863][ T6879] netlink: zone id is out of range [ 155.789445][ T6879] netlink: zone id is out of range [ 155.795889][ T6879] netlink: zone id is out of range [ 155.801295][ T6879] netlink: zone id is out of range [ 155.806499][ T6879] netlink: zone id is out of range [ 155.811977][ T6879] netlink: zone id is out of range [ 155.821032][ T6879] netlink: zone id is out of range [ 155.830099][ T5914] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.055376][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.066394][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.100032][ T5914] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 156.118853][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.206418][ T5914] usb 3-1: config 0 descriptor?? [ 156.770051][ T6899] ipt_REJECT: ECHOREPLY no longer supported. [ 156.859814][ T6900] syzkaller0: entered promiscuous mode [ 156.926007][ T6900] syzkaller0: entered allmulticast mode [ 157.343950][ T6900] tipc: Started in network mode [ 157.349053][ T6900] tipc: Node identity 1213f31637d3, cluster identity 4711 [ 157.361201][ T5914] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 157.417835][ T6900] tipc: Enabled bearer , priority 0 [ 157.447482][ T5914] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 157.515221][ T6898] tipc: Resetting bearer [ 157.568455][ T5914] usb 3-1: USB disconnect, device number 3 [ 157.618692][ T6898] tipc: Disabling bearer [ 158.070017][ T6906] fido_id[6906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 160.508230][ T6944] capability: warning: `syz.5.241' uses 32-bit capabilities (legacy support in use) [ 162.173033][ T6957] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.187705][ T5922] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 163.327376][ T6990] random: crng reseeded on system resumption [ 163.370118][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 163.401575][ T5922] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 163.413064][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.644190][ T5922] usb 2-1: config 0 descriptor?? [ 163.668146][ T5922] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 166.452037][ T5922] gspca_sonixj: reg_w1 err -71 [ 166.457960][ T5922] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 166.480837][ T5922] usb 2-1: USB disconnect, device number 5 [ 167.204416][ T7028] kvm: pic: single mode not supported [ 167.204440][ T7028] kvm: pic: level sensitive irq not supported [ 167.336584][ T7035] vlan2: entered promiscuous mode [ 167.491831][ T7035] vlan2: entered allmulticast mode [ 167.518228][ T7035] hsr_slave_1: entered allmulticast mode [ 167.645937][ T7036] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.336323][ T7058] syzkaller0: entered promiscuous mode [ 168.404907][ T7058] syzkaller0: entered allmulticast mode [ 168.423828][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 168.602124][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.625216][ T9] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 168.656161][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.675542][ T9] usb 6-1: Product: syz [ 168.686519][ T9] usb 6-1: Manufacturer: syz [ 168.696845][ T9] usb 6-1: SerialNumber: syz [ 168.718130][ T9] usb 6-1: config 0 descriptor?? [ 168.740669][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 168.763337][ T7066] syzkaller0: entered promiscuous mode [ 168.810412][ T7066] syzkaller0: entered allmulticast mode [ 168.948545][ T9] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 168.957306][ T9] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 169.392168][ T9] usb 6-1: USB disconnect, device number 2 [ 170.321087][ T5922] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.480382][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 170.543478][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 170.558189][ T5922] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 170.568111][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.625898][ T5922] usb 2-1: Product: syz [ 170.665437][ T5922] usb 2-1: Manufacturer: syz [ 170.682606][ T5922] usb 2-1: SerialNumber: syz [ 170.703109][ T5922] usb 2-1: config 0 descriptor?? [ 170.733920][ T7077] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.744379][ T5922] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.151158][ T5922] usb 2-1: USB disconnect, device number 6 [ 171.297088][ T7077] input: syz0 as /devices/virtual/input/input7 [ 175.263163][ T5896] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 175.630100][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 175.643828][ T5896] usb 3-1: config 0 has an invalid interface number: 59 but max is 0 [ 175.652539][ T5896] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 175.699979][ T5896] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 175.745603][ T5896] usb 3-1: config 0 has no interface number 0 [ 175.763910][ T5896] usb 3-1: config 0 interface 59 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 176.190301][ T5896] usb 3-1: config 0 interface 59 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 176.279975][ T5896] usb 3-1: config 0 interface 59 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 176.360443][ T5896] usb 3-1: config 0 interface 59 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 176.390397][ T5896] usb 3-1: config 0 interface 59 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 176.432488][ T5896] usb 3-1: config 0 interface 59 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 14 [ 176.609243][ T5896] usb 3-1: New USB device found, idVendor=045e, idProduct=d357, bcdDevice=a7.7c [ 176.639984][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.648022][ T5896] usb 3-1: Product: syz [ 176.687394][ T5896] usb 3-1: Manufacturer: syz [ 176.702996][ T5896] usb 3-1: SerialNumber: syz [ 176.711715][ T5922] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 176.752784][ T5896] usb 3-1: config 0 descriptor?? [ 176.922184][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 176.998794][ T5922] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 177.003812][ T5896] usb 3-1: USB disconnect, device number 4 [ 177.010079][ T5922] usb 1-1: config 0 has no interface number 0 [ 177.025866][ T5922] usb 1-1: config 0 interface 185 has no altsetting 0 [ 177.047303][ T5922] usb 1-1: New USB device found, idVendor=1435, idProduct=0828, bcdDevice=e1.b0 [ 177.127340][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.150704][ T5922] usb 1-1: Product: syz [ 177.156685][ T5922] usb 1-1: Manufacturer: syz [ 177.211783][ T5922] usb 1-1: SerialNumber: syz [ 177.355311][ T5922] usb 1-1: config 0 descriptor?? [ 177.689094][ T5922] usb 1-1: Could not find all expected endpoints [ 177.736236][ T5922] usb 1-1: USB disconnect, device number 3 [ 177.930240][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 178.024181][ T7177] binder: BINDER_SET_CONTEXT_MGR already set [ 178.030375][ T7177] binder: 7176:7177 ioctl 4018620d 200000000040 returned -16 [ 178.153291][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.172625][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.200172][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 178.222878][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.256941][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.266873][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.287461][ T10] usb 6-1: config 0 descriptor?? [ 178.672395][ T5922] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.045348][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 179.051415][ T5922] usb 3-1: config 0 has no interfaces? [ 179.067154][ T5922] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.115299][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.129582][ T5922] usb 3-1: Product: syz [ 179.140111][ T5922] usb 3-1: Manufacturer: syz [ 179.147643][ T5922] usb 3-1: SerialNumber: syz [ 179.161032][ T5922] usb 3-1: config 0 descriptor?? [ 179.416656][ T5896] usb 3-1: USB disconnect, device number 5 [ 179.640106][ T9] usb 6-1: USB disconnect, device number 3 [ 180.230009][ T30] audit: type=1804 audit(1764637922.574:2): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.304" name="/newroot/68/file1" dev="fuse" ino=1 res=1 errno=0 [ 182.755908][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 182.805982][ T43] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 183.297156][ T43] usb 5-1: config 7 has an invalid interface number: 252 but max is 0 [ 183.305589][ T43] usb 5-1: config 7 has no interface number 0 [ 183.312124][ T43] usb 5-1: config 7 interface 252 has no altsetting 0 [ 183.355148][ T43] usb 5-1: string descriptor 0 read error: -22 [ 183.362046][ T43] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 183.371498][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.800050][ T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.810129][ T5922] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 184.000234][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 184.005616][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 184.017357][ T43] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 184.092936][ T5922] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 184.110215][ T43] usb 2-1: config 0 has no interface number 0 [ 184.136744][ T5922] usb 1-1: config 0 has no interface number 0 [ 184.161852][ T43] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 184.176811][ T5922] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 184.196108][ T43] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 184.206198][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.220810][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.251392][ T5922] usb 1-1: Product: syz [ 184.260219][ T43] usb 2-1: Product: syz [ 184.267219][ T5922] usb 1-1: Manufacturer: syz [ 184.276710][ T43] usb 2-1: Manufacturer: syz [ 184.284696][ T5922] usb 1-1: SerialNumber: syz [ 184.293655][ T43] usb 2-1: SerialNumber: syz [ 184.305768][ T5922] usb 1-1: config 0 descriptor?? [ 184.323417][ T6858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.340691][ T43] usb 2-1: config 0 descriptor?? [ 184.343023][ T6858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.361959][ T5922] smsc95xx v2.0.0 [ 184.367086][ T7260] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 184.602411][ T7260] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 184.781047][ T5922] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 184.802132][ T5922] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 185.074407][ T7272] sctp: [Deprecated]: syz.5.317 (pid 7272) Use of int in max_burst socket option deprecated. [ 185.074407][ T7272] Use struct sctp_assoc_value instead [ 185.794785][ T9] usb 5-1: USB disconnect, device number 4 [ 187.161871][ T5922] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 187.209721][ T5922] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 187.370326][ T43] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 187.397145][ T43] asix 2-1:0.188: probe with driver asix failed with error -71 [ 187.494569][ T5922] usb 1-1: USB disconnect, device number 4 [ 187.512172][ T43] usb 2-1: USB disconnect, device number 7 [ 187.679985][ T5910] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.895078][ T5910] usb 3-1: config 0 has no interfaces? [ 187.977032][ T5910] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 187.998488][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.027394][ T5910] usb 3-1: Product: syz [ 188.033090][ T5910] usb 3-1: Manufacturer: syz [ 188.037730][ T5910] usb 3-1: SerialNumber: syz [ 188.062565][ T5910] usb 3-1: config 0 descriptor?? [ 188.529977][ T5910] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 188.630064][ T5896] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 188.751234][ T5910] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 188.762935][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.772384][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.789427][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.805525][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.822590][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.840145][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 188.843930][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.864403][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.874163][ T5896] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 188.874809][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.913620][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.925217][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.928556][ T5896] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.935464][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.014980][ T5896] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.209948][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.225809][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.274153][ T5896] usbtmc 6-1:16.0: bulk endpoints not found [ 189.305693][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.317464][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 189.356414][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.547280][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.592207][ T7321] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 189.664460][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.690939][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.698535][ T7319] macvlan2: entered promiscuous mode [ 189.722306][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.743447][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.762178][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.788688][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.816669][ T7319] macvlan2: entered allmulticast mode [ 189.822934][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.843255][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.971646][ T7319] bond1: entered promiscuous mode [ 189.985065][ T7319] bridge2: entered promiscuous mode [ 190.040232][ T7319] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.064141][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.078383][ T7319] bond1: left promiscuous mode [ 190.094597][ T7319] bridge2: left promiscuous mode [ 190.105522][ T5910] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 190.147979][ T5910] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 190.190039][ T5910] usb 2-1: Product: syz [ 190.202361][ T5910] usb 2-1: Manufacturer: syz [ 190.278178][ T5914] usb 3-1: USB disconnect, device number 6 [ 190.304175][ T5910] usb 2-1: SerialNumber: syz [ 190.348182][ T5910] usb 2-1: config 0 descriptor?? [ 190.390358][ T5910] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 190.825486][ T7337] netlink: 'syz.0.334': attribute type 27 has an invalid length. [ 191.201137][ T5910] usb 2-1: USB disconnect, device number 8 [ 191.216363][ T5910] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 191.738212][ T5896] usb 6-1: USB disconnect, device number 4 [ 191.963726][ T7349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.326185][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.333249][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.795870][ T7374] random: crng reseeded on system resumption [ 195.397307][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 196.251955][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.270092][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.283533][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 196.293126][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 196.306218][ T9] usb 2-1: Manufacturer: syz [ 196.350229][ T9] usb 2-1: config 0 descriptor?? [ 196.402409][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 196.408485][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 196.421537][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 196.427639][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 197.617929][ T9] cougar 0003:060B:700A.0003: unknown main item tag 0x0 [ 197.629998][ T9] cougar 0003:060B:700A.0003: unknown main item tag 0x0 [ 197.636992][ T9] cougar 0003:060B:700A.0003: unknown main item tag 0x0 [ 197.646205][ T9] cougar 0003:060B:700A.0003: unknown main item tag 0x0 [ 197.653272][ T9] cougar 0003:060B:700A.0003: unknown main item tag 0x0 [ 197.662266][ T9] cougar 0003:060B:700A.0003: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 197.849965][ T5910] usb 2-1: USB disconnect, device number 9 [ 197.896818][ T7392] fido_id[7392]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 198.158792][ T7400] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 198.165482][ T7400] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.213385][ T7400] vhci_hcd vhci_hcd.0: Device attached [ 198.860174][ T5914] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 199.090344][ T7403] vhci_hcd: connection reset by peer [ 199.099104][ T7415] syzkaller0: entered promiscuous mode [ 199.105111][ T44] vhci_hcd: stop threads [ 199.116077][ T44] vhci_hcd: release socket [ 199.121473][ T7415] syzkaller0: entered allmulticast mode [ 199.139834][ T44] vhci_hcd: disconnect device [ 200.351903][ T7434] netlink: 'syz.5.358': attribute type 7 has an invalid length. [ 200.363049][ T7434] netlink: 'syz.5.358': attribute type 8 has an invalid length. [ 200.541249][ T7438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.599711][ T7438] bond2: (slave ip6gretap1): making interface the new active one [ 200.821133][ T7438] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 201.704923][ T5910] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 201.949934][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 201.989524][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.105367][ T5910] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 202.150262][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.167733][ T5910] usb 1-1: config 0 descriptor?? [ 202.824368][ T5910] semitek 0003:1EA7:0907.0004: item fetching failed at offset 0/2 [ 202.874240][ T5910] semitek 0003:1EA7:0907.0004: probe with driver semitek failed with error -22 [ 203.359743][ T5910] usb 1-1: USB disconnect, device number 5 [ 203.509252][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 203.990474][ T5914] vhci_hcd: vhci_device speed not set [ 204.493589][ T5910] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 204.661815][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 204.688181][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 204.702575][ T7469] syzkaller0: entered promiscuous mode [ 204.708080][ T7469] syzkaller0: entered allmulticast mode [ 204.799828][ T5910] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 204.829654][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.872138][ T5910] usb 6-1: config 0 descriptor?? [ 204.894484][ T7472] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 205.467096][ T5910] usbhid 6-1:0.0: can't add hid device: -71 [ 205.482284][ T5910] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 205.646670][ T980] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 205.675874][ T5910] usb 6-1: USB disconnect, device number 5 [ 205.840166][ T980] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.860640][ T980] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 205.885522][ T980] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.897664][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.917869][ T7482] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 205.933659][ T980] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.043551][ T7489] loop7: detected capacity change from 0 to 16384 [ 206.616526][ T980] usb 5-1: USB disconnect, device number 5 [ 211.062076][ T5910] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 211.241547][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 211.254677][ T5910] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 211.280284][ T5910] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.362213][ T5910] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.384322][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.402140][ T5910] usb 3-1: Product: syz [ 211.407044][ T5910] usb 3-1: Manufacturer: syz [ 211.419938][ T5910] usb 3-1: SerialNumber: syz [ 211.714448][ T5910] usb 3-1: 0:2 : does not exist [ 211.736538][ T5910] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 211.804913][ T5910] usb 3-1: USB disconnect, device number 7 [ 211.872647][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.910168][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 215.273564][ T9] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 215.333460][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 215.425824][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.584646][ T9] usb 2-1: Product: syz [ 215.600008][ T9] usb 2-1: Manufacturer: syz [ 215.604655][ T9] usb 2-1: SerialNumber: syz [ 215.941130][ T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 216.085269][ T9] net_ratelimit: 242 callbacks suppressed [ 216.085292][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 216.108086][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 216.122468][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 216.130462][ T43] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 216.138912][ T43] usb 3-1: config 0 has no interface number 0 [ 216.164579][ T43] usb 3-1: config 0 interface 12 has no altsetting 0 [ 216.218528][ T43] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 216.241441][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.351131][ T43] usb 3-1: Product: syz [ 216.369220][ T43] usb 3-1: Manufacturer: syz [ 216.376226][ T43] usb 3-1: SerialNumber: syz [ 216.393086][ T43] usb 3-1: config 0 descriptor?? [ 216.438178][ T7581] syzkaller0: entered promiscuous mode [ 216.444325][ T7581] syzkaller0: entered allmulticast mode [ 218.496171][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 218.558896][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 218.597702][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 218.652849][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 218.727822][ T9] usb 2-1: USB disconnect, device number 10 [ 219.598643][ T43] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 219.607364][ T43] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 219.690145][ T43] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 219.709125][ T43] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 219.811189][ T43] usb 3-1: USB disconnect, device number 8 [ 220.649950][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 220.802627][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.827186][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.827238][ T43] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 220.827260][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.851512][ T43] usb 3-1: config 0 descriptor?? [ 220.931167][ T7619] tipc: Enabled bearer , priority 0 [ 220.938950][ T7619] syzkaller0: entered promiscuous mode [ 220.938971][ T7619] syzkaller0: entered allmulticast mode [ 220.955810][ T7619] tipc: Resetting bearer [ 220.966925][ T7618] tipc: Resetting bearer [ 220.986644][ T7618] tipc: Disabling bearer [ 221.278816][ T43] hid-retrode 0003:0403:97C1.0005: unknown main item tag 0x0 [ 221.278867][ T43] hid-retrode 0003:0403:97C1.0005: unknown main item tag 0x0 [ 221.283281][ T43] hid-retrode 0003:0403:97C1.0005: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.2-1/input0 [ 221.737324][ T5886] usb 3-1: USB disconnect, device number 9 [ 222.639383][ T7640] netlink: 72 bytes leftover after parsing attributes in process `syz.4.415'. [ 222.831776][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 222.980659][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 223.010133][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 223.017104][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.037122][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.083564][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.116971][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.170505][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.190397][ T10] usb 3-1: config index 0 descriptor too short (expected 215, got 45) [ 223.223376][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 223.239953][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.249512][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.282020][ T10] usb 3-1: Product: syz [ 223.286236][ T10] usb 3-1: Manufacturer: syz [ 223.388163][ T10] usb 3-1: SerialNumber: syz [ 223.415465][ T7652] netlink: 92 bytes leftover after parsing attributes in process `syz.0.418'. [ 223.540901][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 223.546927][ T9] usbtmc 6-1:16.0: can't read capabilities [ 223.829421][ T9] usb 6-1: USB disconnect, device number 6 [ 223.846877][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 223.894241][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 225.145245][ T7679] netlink: 'syz.4.422': attribute type 27 has an invalid length. [ 225.739198][ T7684] tipc: Enabled bearer , priority 0 [ 225.773626][ T7684] syzkaller0: entered promiscuous mode [ 225.794793][ T7684] syzkaller0: entered allmulticast mode [ 225.967885][ T7684] tipc: Resetting bearer [ 226.043099][ T7683] tipc: Resetting bearer [ 226.058764][ T7683] tipc: Disabling bearer [ 226.200265][ T5914] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 226.370185][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO [ 226.382136][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 226.383328][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 226.396153][ T5914] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 226.601472][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 226.619961][ T5914] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 226.639020][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.640567][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 226.674721][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 226.700680][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 226.737548][ T10] usb 3-1: USB disconnect, device number 10 [ 226.758400][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 226.801013][ T5914] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 226.861421][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.902252][ T5914] usb 5-1: Product: syz [ 226.983813][ T5914] usb 5-1: Manufacturer: syz [ 227.009505][ T5914] usb 5-1: SerialNumber: syz [ 227.303445][ T5914] usb 5-1: config 0 descriptor?? [ 227.310585][ T5914] hub 5-1:0.0: bad descriptor, ignoring hub [ 227.316768][ T5914] hub 5-1:0.0: probe with driver hub failed with error -5 [ 228.012193][ T7727] syzkaller0: entered promiscuous mode [ 228.017901][ T7727] syzkaller0: entered allmulticast mode [ 228.070256][ T5886] usb 5-1: USB disconnect, device number 6 [ 229.682644][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'. [ 229.845098][ T7752] tipc: Started in network mode [ 229.889760][ T7752] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 229.902957][ T7752] tipc: Enabled bearer , priority 10 [ 230.000112][ T7761] netlink: 'syz.2.438': attribute type 10 has an invalid length. [ 230.335199][ T7761] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 230.473818][ T7761] team0: Failed to send options change via netlink (err -105) [ 230.481737][ T7761] team0: Port device netdevsim0 added [ 231.022316][ T5886] tipc: Node number set to 1 [ 231.579578][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 231.591449][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.600140][ T7795] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.099342][ T7813] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 233.180794][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 233.360554][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 233.396095][ T5886] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 233.439787][ T5886] usb 1-1: config 0 has no interface number 0 [ 233.453053][ T5914] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 233.463702][ T5886] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01e6, bcdDevice=78.1f [ 233.478669][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.507356][ T5886] usb 1-1: Product: syz [ 233.516931][ T5886] usb 1-1: Manufacturer: syz [ 233.529620][ T5886] usb 1-1: SerialNumber: syz [ 233.553345][ T5886] usb 1-1: config 0 descriptor?? [ 233.644111][ T5886] ftdi_sio 1-1:0.211: FTDI USB Serial Device converter detected [ 233.810184][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 233.813003][ T5886] ftdi_sio ttyUSB0: unknown device type: 0x781f [ 233.832081][ T5886] usb 1-1: USB disconnect, device number 6 [ 233.838272][ T5914] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 233.862537][ T5886] ftdi_sio 1-1:0.211: device disconnected [ 233.886001][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.032670][ T7837] netlink: 48 bytes leftover after parsing attributes in process `syz.5.451'. [ 234.185139][ T5914] usb 2-1: Product: syz [ 234.196951][ T5914] usb 2-1: Manufacturer: syz [ 234.209619][ T5914] usb 2-1: SerialNumber: syz [ 234.266656][ T5914] usb 2-1: config 0 descriptor?? [ 234.519198][ T5914] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 235.245538][ T5914] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 235.255304][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 235.337744][ T7818] bond_slave_0: entered promiscuous mode [ 235.343752][ T7818] bond_slave_1: entered promiscuous mode [ 235.471022][ T7818] macvlan2: entered promiscuous mode [ 235.535666][ T7818] bond0: entered promiscuous mode [ 235.619002][ T7818] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 235.767619][ T5886] usb 2-1: USB disconnect, device number 11 [ 236.309943][ T5914] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 236.426929][ T7882] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 236.429953][ T5886] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 236.440243][ T7882] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 236.548918][ T7886] random: crng reseeded on system resumption [ 236.646732][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 236.709055][ T5914] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 236.710261][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 236.725996][ T5914] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 236.748507][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 236.761031][ T5886] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 236.770681][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.781811][ T5914] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.781839][ T5886] usb 6-1: Product: syz [ 236.837105][ T5914] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 237.243146][ T5886] usb 6-1: Manufacturer: syz [ 237.249264][ T5886] usb 6-1: SerialNumber: syz [ 237.257805][ T5886] usb 6-1: config 0 descriptor?? [ 237.345926][ T5886] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 237.355366][ T5886] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 237.405906][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 237.434149][ T5914] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 237.470485][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.552699][ T5914] usb 1-1: config 0 descriptor?? [ 237.769875][ C0] hrtimer: interrupt took 59450 ns [ 237.906465][ T5886] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 237.998577][ T5914] microsoft 0003:045E:00F9.0006: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.0-1/input0 [ 238.143923][ T5914] microsoft 0003:045E:00F9.0006: no inputs found [ 238.169341][ T5914] microsoft 0003:045E:00F9.0006: could not initialize ff, continuing anyway [ 238.329164][ T5886] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 238.351249][ T5886] em28xx 6-1:0.0: board has no eeprom [ 238.770074][ T5886] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 238.770104][ T5886] em28xx 6-1:0.0: dvb set to bulk mode. [ 238.773685][ T5914] usb 1-1: USB disconnect, device number 7 [ 238.775155][ T9] em28xx 6-1:0.0: Binding DVB extension [ 239.763104][ T7875] em28xx 6-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 239.783722][ T5922] usb 6-1: USB disconnect, device number 7 [ 239.790655][ T5922] em28xx 6-1:0.0: Disconnecting em28xx [ 240.063994][ T9] em28xx 6-1:0.0: Registering input extension [ 240.498140][ T5922] em28xx 6-1:0.0: Closing input extension [ 240.900336][ T5922] em28xx 6-1:0.0: Freeing device [ 241.279995][ T5922] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 241.479982][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 241.492186][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 241.559635][ T5922] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 241.589402][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.608399][ T5922] usb 6-1: Product: syz [ 241.616363][ T5922] usb 6-1: Manufacturer: syz [ 241.629176][ T5922] usb 6-1: SerialNumber: syz [ 241.650733][ T5922] usb 6-1: config 0 descriptor?? [ 241.677410][ T5922] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 241.725291][ T5922] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 241.953741][ T7963] geneve2: entered promiscuous mode [ 242.087023][ T7970] tipc: Started in network mode [ 242.092753][ T7970] tipc: Node identity 22697b9c59fa, cluster identity 4711 [ 242.115887][ T7970] tipc: Enabled bearer , priority 0 [ 242.142173][ T7972] syzkaller0: entered promiscuous mode [ 242.147723][ T7972] syzkaller0: entered allmulticast mode [ 242.309407][ T5922] em28xx 6-1:0.0: chip ID is em2765 [ 242.315577][ T7970] tipc: Resetting bearer [ 242.359073][ T7969] tipc: Resetting bearer [ 242.609638][ T7969] tipc: Disabling bearer [ 242.700286][ T10] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 242.873122][ T10] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 242.919789][ T10] usb 3-1: config 7 has no interface number 0 [ 242.936444][ T10] usb 3-1: config 7 interface 252 has no altsetting 0 [ 242.967931][ T10] usb 3-1: string descriptor 0 read error: -22 [ 242.978002][ T10] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 243.010711][ T5922] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 243.018721][ T5922] em28xx 6-1:0.0: board has no eeprom [ 243.052036][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.527473][ T5922] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 243.594730][ T5922] em28xx 6-1:0.0: dvb set to bulk mode. [ 243.603485][ T43] em28xx 6-1:0.0: Binding DVB extension [ 244.016756][ T9] usb 6-1: USB disconnect, device number 8 [ 244.023491][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 244.058484][ T43] em28xx 6-1:0.0: Registering input extension [ 244.066108][ T9] em28xx 6-1:0.0: Closing input extension [ 244.087502][ T9] em28xx 6-1:0.0: Freeing device [ 244.849386][ T7994] netlink: 'syz.1.489': attribute type 27 has an invalid length. [ 245.118308][ T9] usb 3-1: USB disconnect, device number 11 [ 246.389810][ T8010] kvm: pic: level sensitive irq not supported [ 246.389976][ T8010] kvm: pic: non byte read [ 246.400831][ T8010] kvm: pic: level sensitive irq not supported [ 246.400895][ T8010] kvm: pic: non byte read [ 246.421691][ T8013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.484'. [ 246.491441][ T8013] team_slave_0: entered promiscuous mode [ 246.497293][ T8013] team_slave_1: entered promiscuous mode [ 246.537377][ T8013] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 246.585654][ T8013] team_slave_0: left promiscuous mode [ 246.591145][ T8013] team_slave_1: left promiscuous mode [ 246.777753][ T8015] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 247.063422][ T8023] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 247.752268][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 248.191248][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 248.213575][ T8032] create_pit_timer: 1 callbacks suppressed [ 248.213592][ T8032] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 248.248095][ T8032] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 248.278834][ T8032] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 248.341203][ T8032] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 248.359291][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 248.391682][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 248.408066][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 248.430037][ T8032] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 248.459643][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 248.468998][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.527732][ T10] usb 2-1: Product: syz [ 248.534233][ T10] usb 2-1: Manufacturer: syz [ 248.554251][ T10] usb 2-1: SerialNumber: syz [ 248.581506][ T10] usb 2-1: config 0 descriptor?? [ 248.629725][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 248.639496][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 249.750733][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 249.757419][ T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 249.776833][ T30] audit: type=1800 audit(1764637992.144:3): pid=8041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.494" name="bus" dev="ramfs" ino=20058 res=0 errno=0 [ 249.820031][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 249.971714][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.983136][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.017374][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.095804][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.127130][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.143208][ T9] usb 5-1: config 0 descriptor?? [ 250.368733][ T10] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 250.384229][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 250.396363][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 250.410707][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 250.591080][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 251.360468][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 251.395778][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 251.455108][ T10] usb 2-1: USB disconnect, device number 12 [ 252.240317][ T43] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 252.486569][ T43] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.506657][ T43] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.519366][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 252.980490][ T5914] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 253.039991][ T43] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 253.058855][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.120895][ T43] usb 2-1: config 0 descriptor?? [ 253.610030][ T30] audit: type=1326 audit(1764637995.884:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8066 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6f38f749 code=0x7ffc0000 [ 253.656136][ T8084] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 253.680247][ T8084] kvm: requested 71238 ns i8254 timer period limited to 200000 ns [ 253.694099][ T30] audit: type=1326 audit(1764637996.004:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8066 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd6f38f749 code=0x7ffc0000 [ 253.850222][ T8084] kvm: requested 77942 ns i8254 timer period limited to 200000 ns [ 254.273921][ T8084] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 254.289971][ T30] audit: type=1326 audit(1764637996.004:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8066 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6f38f749 code=0x7ffc0000 [ 254.320109][ T30] audit: type=1326 audit(1764637996.004:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8066 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd6f38f749 code=0x7ffc0000 [ 254.342302][ T5914] usb 5-1: device descriptor read/64, error -71 [ 254.362237][ T30] audit: type=1326 audit(1764637996.004:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8066 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6f38f749 code=0x7ffc0000 [ 254.372950][ T8084] kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 254.384569][ T30] audit: type=1326 audit(1764637996.004:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8066 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd6f38f749 code=0x7ffc0000 [ 254.482149][ T8084] kvm: requested 71238 ns i8254 timer period limited to 200000 ns [ 254.550674][ T8084] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 254.591326][ T8084] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 254.630413][ T8084] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 254.649958][ T5914] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 254.678377][ T8084] kvm: requested 145828 ns i8254 timer period limited to 200000 ns [ 254.764382][ T5914] usb 5-1: device reset changed ep0 maxpacket size! [ 254.771344][ T30] audit: type=1326 audit(1764637997.094:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8066 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6f38f749 code=0x7ffc0000 [ 254.793813][ T980] usb 5-1: USB disconnect, device number 7 [ 254.885710][ T30] audit: type=1326 audit(1764637997.094:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8066 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6f38f749 code=0x7ffc0000 [ 255.041256][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 255.059990][ T980] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 255.080205][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 255.119610][ T43] usb 2-1: USB disconnect, device number 13 [ 255.259910][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 255.298634][ T980] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 255.346115][ T980] usb 5-1: config 0 has no interface number 0 [ 255.377356][ T980] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 255.417381][ T980] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 255.466615][ T980] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 255.486074][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.517255][ T980] usb 5-1: Product: syz [ 255.535977][ T980] usb 5-1: Manufacturer: syz [ 255.711550][ T980] usb 5-1: SerialNumber: syz [ 255.743646][ T980] usb 5-1: config 0 descriptor?? [ 255.751926][ T8089] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 255.765270][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.775858][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.790468][ T8089] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 256.109325][ T8089] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 256.126529][ T8089] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 256.259946][ T5914] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 256.566930][ T5914] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 256.624934][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.749909][ T5914] usb 3-1: Product: syz [ 256.759936][ T5914] usb 3-1: Manufacturer: syz [ 256.784716][ T5914] usb 3-1: SerialNumber: syz [ 257.915110][ T5914] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 257.972753][ T5914] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 258.013192][ T5914] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 258.023207][ T980] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 258.094208][ T5914] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 258.130356][ T5914] usb 3-1: USB disconnect, device number 12 [ 258.515949][ T980] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 258.568304][ T980] asix 5-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 258.578631][ T980] asix 5-1:0.251: probe with driver asix failed with error -5 [ 258.597920][ T980] usb 5-1: USB disconnect, device number 8 [ 263.282970][ T8167] loop7: detected capacity change from 16384 to 0 [ 263.293455][ C1] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 263.303418][ C1] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 263.739971][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 263.899972][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 263.907213][ T43] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 263.915967][ T43] usb 3-1: config 0 has no interface number 0 [ 264.092159][ T43] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01e6, bcdDevice=78.1f [ 264.101655][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.109669][ T43] usb 3-1: Product: syz [ 264.139944][ T43] usb 3-1: Manufacturer: syz [ 264.144677][ T43] usb 3-1: SerialNumber: syz [ 264.201415][ T43] usb 3-1: config 0 descriptor?? [ 264.226918][ T43] ftdi_sio 3-1:0.211: FTDI USB Serial Device converter detected [ 264.272034][ T43] ftdi_sio ttyUSB0: unknown device type: 0x781f [ 264.307916][ T8179] kvm: pic: non byte write [ 264.349772][ T8179] kvm: pic: non byte write [ 264.430510][ T43] usb 3-1: USB disconnect, device number 13 [ 264.451737][ T43] ftdi_sio 3-1:0.211: device disconnected [ 264.632346][ T8183] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 264.902175][ T8185] veth3: entered promiscuous mode [ 264.966856][ T8185] bond1: (slave veth3): Enslaving as an active interface with a down link [ 265.138172][ T8183] bond1: (slave veth5): Enslaving as an active interface with a down link [ 265.148060][ T8189] bond1: entered promiscuous mode [ 265.177035][ T8189] bond1: entered allmulticast mode [ 265.221637][ T8189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.717130][ T5914] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 268.904104][ T5914] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 268.928975][ T5914] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 268.955037][ T5914] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 268.973274][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.048168][ T8234] bridge0: port 3(hsr0) entered blocking state [ 269.068527][ T8234] bridge0: port 3(hsr0) entered disabled state [ 269.101482][ T8234] hsr0: entered allmulticast mode [ 269.230179][ T8234] hsr_slave_0: entered allmulticast mode [ 269.259400][ T8234] hsr_slave_1: entered allmulticast mode [ 269.358202][ T8234] hsr0: entered promiscuous mode [ 269.375162][ T8234] bridge0: port 3(hsr0) entered blocking state [ 269.381773][ T8234] bridge0: port 3(hsr0) entered forwarding state [ 271.120307][ C1] [ 271.122701][ C1] ============================================ [ 271.128849][ C1] WARNING: possible recursive locking detected [ 271.135006][ C1] syzkaller #0 Not tainted [ 271.139420][ C1] -------------------------------------------- [ 271.145560][ C1] syz.0.549/8255 is trying to acquire lock: [ 271.151431][ C1] ffff888034374f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 271.160481][ C1] [ 271.160481][ C1] but task is already holding lock: [ 271.167832][ C1] ffff8880243bef30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 271.178093][ C1] [ 271.178093][ C1] other info that might help us debug this: [ 271.186138][ C1] Possible unsafe locking scenario: [ 271.186138][ C1] [ 271.193660][ C1] CPU0 [ 271.196923][ C1] ---- [ 271.200182][ C1] lock(&hsr->seqnr_lock); [ 271.204667][ C1] lock(&hsr->seqnr_lock); [ 271.209148][ C1] [ 271.209148][ C1] *** DEADLOCK *** [ 271.209148][ C1] [ 271.217266][ C1] May be due to missing lock nesting notation [ 271.217266][ C1] [ 271.225563][ C1] 8 locks held by syz.0.549/8255: [ 271.230565][ C1] #0: ffffc90000a08be0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 271.240728][ C1] #1: ffffffff8df3d0a0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x83/0x360 [ 271.249849][ C1] #2: ffff8880243bef30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 271.260577][ C1] #3: ffffffff8df3d0a0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 271.270043][ C1] #4: ffffffff8df3d100 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 271.279944][ C1] #5: ffffffff8df3d0a0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 271.289178][ C1] #6: ffffffff8df3d100 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 271.299069][ C1] #7: ffffffff8df3d0a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 271.308182][ C1] [ 271.308182][ C1] stack backtrace: [ 271.314073][ C1] CPU: 1 UID: 0 PID: 8255 Comm: syz.0.549 Not tainted syzkaller #0 PREEMPT(full) [ 271.314089][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.314101][ C1] Call Trace: [ 271.314107][ C1] [ 271.314113][ C1] dump_stack_lvl+0x189/0x250 [ 271.314129][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.314141][ C1] ? __pfx__printk+0x10/0x10 [ 271.314151][ C1] ? do_raw_spin_lock+0x121/0x290 [ 271.314166][ C1] print_deadlock_bug+0x28b/0x2a0 [ 271.314178][ C1] validate_chain+0x1a3f/0x2140 [ 271.314191][ C1] ? skb_network_protocol+0x4fe/0x760 [ 271.314205][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.314217][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 271.314228][ C1] ? __pfx_skb_network_protocol+0x10/0x10 [ 271.314241][ C1] ? eth_type_trans+0x3a8/0x760 [ 271.314255][ C1] __lock_acquire+0xab9/0xd20 [ 271.314266][ C1] ? hsr_dev_xmit+0x237/0x360 [ 271.314274][ C1] lock_acquire+0x120/0x360 [ 271.314283][ C1] ? hsr_dev_xmit+0x237/0x360 [ 271.314293][ C1] ? hsr_dev_xmit+0x237/0x360 [ 271.314300][ C1] _raw_spin_lock_bh+0x36/0x50 [ 271.314310][ C1] ? hsr_dev_xmit+0x237/0x360 [ 271.314317][ C1] hsr_dev_xmit+0x237/0x360 [ 271.314325][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 271.314333][ C1] dev_hard_start_xmit+0x2d7/0x830 [ 271.314349][ C1] __dev_queue_xmit+0x1b8d/0x3b50 [ 271.314360][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 271.314369][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 271.314379][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.314391][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 271.314400][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 271.314413][ C1] ? ebt_do_table+0x265b/0x2820 [ 271.314426][ C1] ? __lock_acquire+0xab9/0xd20 [ 271.314440][ C1] br_dev_queue_push_xmit+0x6c5/0x890 [ 271.314452][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 271.314461][ C1] ? NF_HOOK+0x9e/0x3c0 [ 271.314470][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 271.314478][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 271.314487][ C1] NF_HOOK+0x320/0x3c0 [ 271.314496][ C1] ? NF_HOOK+0x9e/0x3c0 [ 271.314504][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 271.314513][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 271.314526][ C1] br_forward_finish+0xd3/0x130 [ 271.314534][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 271.314543][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 271.314551][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 271.314559][ C1] NF_HOOK+0x320/0x3c0 [ 271.314568][ C1] ? NF_HOOK+0x9e/0x3c0 [ 271.314576][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 271.314585][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 271.314595][ C1] __br_forward+0x41e/0x600 [ 271.314604][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 271.314613][ C1] ? __pfx___br_forward+0x10/0x10 [ 271.314622][ C1] ? skb_clone+0x246/0x3a0 [ 271.314636][ C1] maybe_deliver+0xb5/0x160 [ 271.314646][ C1] br_flood+0x31a/0x6a0 [ 271.314656][ C1] ? br_dev_xmit+0x185/0x1840 [ 271.314667][ C1] br_dev_xmit+0x11b3/0x1840 [ 271.314678][ C1] ? br_dev_xmit+0x185/0x1840 [ 271.314690][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 271.314700][ C1] ? validate_xmit_xfrm+0xbf/0x1160 [ 271.314713][ C1] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 271.314727][ C1] dev_hard_start_xmit+0x2d7/0x830 [ 271.314743][ C1] __dev_queue_xmit+0x1b8d/0x3b50 [ 271.314752][ C1] ? kasan_save_track+0x4f/0x80 [ 271.314760][ C1] ? kasan_save_track+0x3e/0x80 [ 271.314775][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 271.314784][ C1] ? ___sys_recvmsg+0x12e/0x510 [ 271.314797][ C1] ? do_recvmmsg+0x307/0x770 [ 271.314808][ C1] ? __x64_sys_recvmmsg+0x190/0x240 [ 271.314821][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.314832][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 271.314851][ C1] ? __copy_skb_header+0xa7/0x550 [ 271.314874][ C1] ? __asan_memcpy+0x40/0x70 [ 271.314887][ C1] ? __skb_clone+0x63/0x7a0 [ 271.314900][ C1] ? __skb_clone+0x483/0x7a0 [ 271.314912][ C1] ? hsr_addr_subst_dest+0x307/0xac0 [ 271.314926][ C1] ? skb_clone+0x246/0x3a0 [ 271.314939][ C1] hsr_forward_skb+0x158b/0x2860 [ 271.314951][ C1] ? hsr_forward_skb+0x9e/0x2860 [ 271.314961][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 271.314970][ C1] ? do_raw_spin_lock+0x121/0x290 [ 271.314984][ C1] ? __asan_memset+0x22/0x50 [ 271.314996][ C1] ? __skb_pad+0x405/0x610 [ 271.315005][ C1] send_hsr_supervision_frame+0x731/0xcb0 [ 271.315016][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 271.315026][ C1] hsr_announce+0x1d5/0x360 [ 271.315034][ C1] ? hsr_announce+0x83/0x360 [ 271.315042][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 271.315052][ C1] call_timer_fn+0x17e/0x5f0 [ 271.315062][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 271.315070][ C1] ? call_timer_fn+0xbe/0x5f0 [ 271.315079][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 271.315089][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.315099][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.315109][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 271.315117][ C1] __run_timer_base+0x61a/0x860 [ 271.315128][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 271.315142][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 271.315157][ C1] run_timer_softirq+0xb7/0x180 [ 271.315166][ C1] handle_softirqs+0x286/0x870 [ 271.315176][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 271.315187][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 271.315198][ C1] __irq_exit_rcu+0xca/0x1f0 [ 271.315207][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 271.315218][ C1] irq_exit_rcu+0x9/0x30 [ 271.315226][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 271.315237][ C1] [ 271.315241][ C1] [ 271.315244][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.315254][ C1] RIP: 0010:kasan_check_range+0x1d3/0x2c0 [ 271.315266][ C1] Code: 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 b8 00 00 00 49 ff c3 49 ff cc 75 ee <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3e 3c 25 09 cc 45 84 ff 75 63 41 [ 271.315274][ C1] RSP: 0018:ffffc9000f22f9e8 EFLAGS: 00000256 [ 271.315284][ C1] RAX: 00007ffffffff001 RBX: 0000000000000000 RCX: ffffffff848b38e9 [ 271.315290][ C1] RDX: 0000000000000001 RSI: 0000000000000038 RDI: ffffc9000f22faa0 [ 271.315296][ C1] RBP: ffffc9000f22fc30 R08: ffffc9000f22fad7 R09: 1ffff92001e45f5a [ 271.315303][ C1] R10: dffffc0000000000 R11: fffff52001e45f5b R12: 0000000000000007 [ 271.315309][ C1] R13: dffffc0000000000 R14: fffff52001e45f5b R15: 1ffff92001e45f54 [ 271.315318][ C1] ? _copy_from_user+0x69/0xb0 [ 271.315330][ C1] _copy_from_user+0x69/0xb0 [ 271.315339][ C1] ___sys_recvmsg+0x12e/0x510 [ 271.315351][ C1] ? trace_irq_disable+0x37/0x110 [ 271.315363][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 271.315381][ C1] ? __might_fault+0xb0/0x130 [ 271.315390][ C1] do_recvmmsg+0x307/0x770 [ 271.315405][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 271.315419][ C1] ? count_memcg_event_mm+0x21/0x260 [ 271.315435][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 271.315448][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 271.315462][ C1] ? do_syscall_64+0xbe/0xfa0 [ 271.315474][ C1] do_syscall_64+0xfa/0xfa0 [ 271.315485][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.315495][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.315504][ C1] ? clear_bhb_loop+0x60/0xb0 [ 271.315514][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.315525][ C1] RIP: 0033:0x7f739578f749 [ 271.315543][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.315550][ C1] RSP: 002b:00007f73939f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 271.315560][ C1] RAX: ffffffffffffffda RBX: 00007f73959e6090 RCX: 00007f739578f749 [ 271.315566][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 271.315572][ C1] RBP: 00007f7395813f91 R08: 0000000000000000 R09: 0000000000000000 [ 271.315578][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 271.315583][ C1] R13: 00007f73959e6128 R14: 00007f73959e6090 R15: 00007f7395b0fa28 [ 271.315593][ C1] [ 272.286851][ T43] usb 6-1: USB disconnect, device number 9