last executing test programs: 7.978103491s ago: executing program 1 (id=1588): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @empty, 0xe}}, 0x24) r7 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdf8}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x2000, 0x0, 0x0, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x7f, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r10, 0xc08c5336, &(0x7f0000000380)={0x80000004, 0xfffffffc, 0x1, 'queue0\x00'}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3704a688c03fccef3e273"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000740)="38eef39a9470e520a675d696d62d357d2dff6aa91ce585589f5a86b334887eccd0cf6d8e735499c5da5a4d563ad1b35f80fa0b64a2aff75617b3b1c35b8d3141773af29a42fdf17084264e7834faf8d112fffc49"}) 7.199538704s ago: executing program 4 (id=1592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) tee(r0, r1, 0x4, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 7.171957361s ago: executing program 4 (id=1593): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) memfd_secret(0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x400d855, &(0x7f0000000200)={0x11, 0xf6, r3, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000000c0)) 6.82498104s ago: executing program 4 (id=1595): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x5, &(0x7f0000000100)=@framed={{0x5, 0x0, 0x0, 0x0, 0xfffffe01, 0xffffffbc, 0x10, 0x20}, [@map_fd={0x18, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) r2 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe6, 0x3, 0x641f, 0xfffff07c, 0x8001], [0x7, 0x18, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x8, 0x800, 0x5]], '\x00', [{0x8000, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x1}, {0xf, 0x8, 0x1, 0x1, 0x1}, {0x2, 0x200, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x3, 0x0, 0x1}], '\x00', 0x2}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) r6 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x58400) ioctl$CEC_ADAP_S_PHYS_ADDR(r6, 0x40026102, &(0x7f0000000300)=0x4) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f00000001c0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x288100, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000240)={'veth0_macvtap\x00'}) 6.198113847s ago: executing program 1 (id=1596): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000480)={0x0, 0xfffffffe, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r5, 0x5, &(0x7f0000000040)={0x1, 0x0, 0x20000080, 0xfffffffffffffffb}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0xc0002101, 0x0, {0xfffe}}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r8, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000063c0)="5985d20392a438a118753a61ccd1d0e831", 0x11}], 0x1, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x81}], 0x1, 0x44804) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001006578746864720000140002800800014000000015000640000000020900010073797a30000000bcdac5ba8511a773000900020073797a3200000000140000001100010000000000000000000000000a00000000000000"], 0xa0}}, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000100)) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89ff, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r13 = dup3(r11, r10, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x1e}}}], 0x0, 0x0, 0x0}) recvmsg(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001c00)=""/4075, 0xfeb}], 0x1}, 0x20012101) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r13, 0x5501) 5.960198025s ago: executing program 1 (id=1597): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="3f00000000000000300012800b00010062726964676500002000028005000700080000000c002e00030000000300000005001700000000001591b59e4db4328c8dc8d20dfd6f4509c742caa1175def37938910188db1b1597e3d0b07274814811d99ba7c8590186f88a447d39ba0b8"], 0x50}}, 0x0) 5.868190408s ago: executing program 4 (id=1598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0x9}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x20, 0x5, 0x4, 0xd64, 0x4, 0x100000000, 0x2, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000001380)={0x2bc, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6a3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x36}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xae}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x359, 0x0, @remote}}, {0x14, 0x2, @in={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x32}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x26}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x512}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1513}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x6}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x5a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x0, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @private=0xa010100, 0x0, 0xffffff00, 'wg1\x00', 'pimreg\x00', {0xff}, {0xff}, 0x2, 0x2, 0xd4}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@broadcast, @multicast1, 0xff, 0xffffff00, 'veth0_to_bond\x00', '\x00', {0xff}, {}, 0x84, 0x0, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3]}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x7d8, 0x2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x6, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0x0, 0x200009fc, 0x0, 0x0, 0x0, [{0x4, 0x7, 0xc5, '\x00', 0x81}, {0x4, 0x4, 0x8, '\x00', 0xc}, {0x0, 0xc, 0xfc, '\x00', 0x13}, {0xa, 0x10, 0x1d, '\x00', 0x1f}, {0xf, 0xfb, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0x4b, 0x8e, 0x7, '\x00', 0x4e}, {0x3, 0x6, 0x6, '\x00', 0x1}, {0x0, 0x18, 0x40, '\x00', 0x4}, {0xd, 0x1, 0x4, '\x00', 0x2}, {0x7f, 0xc, 0xff, '\x00', 0x9d}, {0x9, 0x1, 0x2, '\x00', 0x7f}, {0x5, 0xa, 0x3b, '\x00', 0x2}, {0x7, 0x10, 0x8c, '\x00', 0x9}, {0xfe, 0xb, 0x1, '\x00', 0x44}, {0xe, 0x5, 0x4, '\x00', 0x81}, {0x8, 0x2, 0x7, '\x00', 0x8}, {0x6, 0x0, 0x2, '\x00', 0x42}, {0xed, 0x6, 0x0, '\x00', 0x81}, {0x81, 0x0, 0x10, '\x00', 0x7}, {0x2, 0x8, 0x97, '\x00', 0x83}, {0x6, 0x29, 0x9b, '\x00', 0x4}, {0x7f, 0x3, 0x3, '\x00', 0xd3}, {0x0, 0x8, 0x3a, '\x00', 0x5}]}}) 5.790077539s ago: executing program 3 (id=1599): r0 = socket(0x1e, 0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlinkprop={0x28, 0x6c, 0x923, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x80, 0x28403}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000800) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000040)=""/47, &(0x7f0000000080)=0x2f) close(r0) 5.692224428s ago: executing program 1 (id=1600): io_setup(0x5, &(0x7f0000000140)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40441, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x4000, r1, 0x0, 0x0, 0x7, 0x0, 0x2}]) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0xfe, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000001c0)={{}, "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"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r8, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r12, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f017a00bad104b000eeec360fc7310f1ad50f01c80f01c80f01c9f30faeeb0f0107", 0x22}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 5.691891101s ago: executing program 2 (id=1601): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r4 = fsopen(&(0x7f00000002c0)='minix\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\a\x00\x00\x00\x00\x00\x00\x00\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ftruncate(r3, 0xffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000033c0)={0x0, 0x0, 0x0}, 0x4004004) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee5010301090224"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 5.24762956s ago: executing program 3 (id=1604): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000140019010000000000"], 0x28}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x150, &(0x7f0000000440)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x11a, 0x3a, 0x1, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8f041a", 0x0, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@routing={0x2b, 0xe, 0x2, 0x22, 0x0, [@remote, @loopback, @mcast1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty]}, @dstopts={0x6, 0xc, '\x00', [@generic={0x5, 0x13, "cf652719bc795851da3185bd1cdf8515f10375"}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x48, {0x2, 0x10, 0x9, 0x1, [0x4, 0xffffffffffffffff, 0x9, 0x1, 0x984, 0x3, 0xd484, 0x8001]}}]}], "62fb"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x103241, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) r6 = socket$unix(0x1, 0x2, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x1000020, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x0, 0x0, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r9, @ANYBLOB="eb271c420e109764d1a762ecddc31da0ecfe86cbdd53b24bbd16e6c0540dc81e828d0e1c8e04758445b66cbdc46abe8e4d7c1cdf"], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x8001) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x16, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={0x2bc, 0x2a, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x2a8, 0x70, 0x0, 0x1, [@nested={0x4, 0x107}, @nested={0x29d, 0x14f, 0x0, 0x1, [@typed={0x4, 0x11d}, @generic="6438bdf9fc92b8a47e16f1f682375d31d577c416ce86650a20a852a72846593c61843b47811851e651b2a717fda828f3bdd3ba5133e96e15c955e90c50a002f93f42ef4e01ea055885c313153a1d955efab94c6666efa5da996584fa7b082faa8f3637c4ea81c527809710c1ee01d10da6154b21f95d42ebbb12a257b60cbfdaa5e7ba9b867e2d517c1b6ca2494c989accb7a9e0938b37381f690a1df095edaca0493fac0bfe2ce9226ae26b34da73206fca52c86be1f3579726f167e083d9c0a72ee2d0ec76b95c8d4833feed28df2b0272131167a1739f58c8ea17914570b234aff762f753975845bebb0d4350", @generic="2b818e82644584b834b5be96925ec36c0d7ab8e85b85733b748ec394a8c4613fc01face2e2bdf82c4459b421029cfb42b9d3ecbe21b5701c030af4f3fd14cc08b2904774fea1b6f928f8bfc84a4c8e04e052b38c0cfc74cf34fcce4b986cfef806b7dc1f896171840ef13a13a692", @typed={0x8, 0xae, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x4, 0x136}, @typed={0x1f, 0x12e, 0x0, 0x0, @str='\x84d\x84\x99\x99#s,o<\x85\xd5\xc0\xc2\xef\x19y\xe5\x864.\xeb\n\xfa\"\r\xcf'}, @typed={0x14, 0x11f, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="93f763b950eb1c87e5f1b65967625389027095ba4c47a5c52a26159a31d02e4180d5d815936ee03e1558d1b6a4644274509e95c49b281204e18d6a34d764d2e9501db88ab93f7528807dc6ebc21e8b3e048fe35f5bc41f41b76313ed7264af37701930c07ab44a8e56bfcffb64f1bb7d32e8390155c46d93533687d137b500b46fd72ee0887604737171d76861c267029a27dbfcab9440e6dc840ebdb341dbd02c6fce576e9cd42976ad46385a316646b3f7efbd1581e00eaa6fe5ace3d4ed53ac498b136492f71c916fc7b234455c11622c5f73e4", @typed={0x24, 0x81, 0x0, 0x0, @binary="33ebfae2e99b242c3f5f3bf93b4e06bf254a9a00d1b992e26284662d6ce179be"}]}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 4.624149104s ago: executing program 0 (id=1605): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1d, 0x69, 0x0, 0x9}]}) 4.48069709s ago: executing program 0 (id=1606): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xf7}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xd9}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x900, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000240), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r6 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r6, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0xc02, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) r8 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2b72646d618f9b8e8d8158d91da3"], 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') read$FUSE(r9, &(0x7f0000003940)={0x2020}, 0x2020) 3.821719121s ago: executing program 3 (id=1607): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x12, 0x1, 0x0, 0x0, {0x29, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff, 0x40000, 0x4], [0x7f, 0x0, 0x0, 0x6], 0x0, [0x1, 0x3]}, 0x0, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "31a2bbb9"}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x40090) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="c1fdffff1000010000000000000000000500000a14000000060a050000000600000000000a000100140000001100010000000000000000000a00000ae3a51dae174fe1dbcc7d7c35c0b58ea8a48a765284afb21951615106d24754d5deef82c4e04e0aaac9fa90"], 0x3c}, 0x1, 0x0, 0x0, 0x4048004}, 0x800) 3.320983151s ago: executing program 0 (id=1608): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) (async) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r7, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000200)=0x6) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000001c0)=0x9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 3.191769887s ago: executing program 4 (id=1609): syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002c00)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x44011}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x44, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4491}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x800}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000000c0)) r5 = syz_open_dev$rtc(&(0x7f0000000040), 0x8, 0x2804c2) r6 = socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0xa7, 0x2, 0x3, 0x1, 0x1, 0xf8, {0x9, 0x21, 0x5e15, 0xe8, 0x1, {0x22, 0x882}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0xe, 0xad}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0xd, 0x3}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x8, 0x8, 0x13, 0x20, 0x77}, 0x8, &(0x7f0000000440)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0xe4, &(0x7f0000000480)=@string={0xe4, 0x3, "9714cf7388d944e1590c2d4723ad985b662cb9bb0df36857d6df8f4ac96d676fed9cc622ffe8500203f7e40ad4e5170196d12d54a3dc8e00d8165d2bbf7f9a7554ee7d4bbde3498f17cee4355aa88894213cd02a1d69b1872e8e8c0998b96d74efcd4c04460f6901c3e0ccd8b270e96d88e92a5860b91891591fd80874f3a59a5ce6cbbf27961cb6c9059afb09523d0d30c776726e6c49dca448fed9a445008e1355ff93c4df922f185076085c59140fdfa716a8b25dc47c6d0651b98edc84837ea44e22adf7c41acdf149f9558ffb77c989919c9bee642b1ba2e39e4e4dc13b408d"}}, {0xa2, &(0x7f0000000580)=@string={0xa2, 0x3, "5c18afedd366f52f4379894082e4deea557ceb4cbe447b9f66efde187ff168c42fa4702f5f865da59a1af5c37eac8b3fd338ad62d58497090aaa1efe8c2876693f431a9b0f9172d31e42daddf3d6c795f4cb159a1fa396952ef7ceedd1d543023fa920ef6bafbe3a9c055229066916d21b95e7a83ebf1bfaaa9560cb5c4367a44d7973cd61bd40f5ff91e0cca2595bd89b127e1d0a5e4f9b83971643f23f60d0"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x808}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x813}}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vxcan0\x00', 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000002880)={{{@in=@multicast2, @in=@loopback, 0x4e20, 0x6, 0x4e21, 0x0, 0x2, 0x30, 0x0, 0x6c, r7, r8}, {0x1, 0x0, 0x8, 0x7, 0x81, 0x5, 0x5}, {0xff, 0x9, 0x80, 0x2}, 0x8, 0x6e6bb7, 0x2, 0x0, 0x3}, {{@in=@local, 0x4d5, 0xf}, 0x2, @in=@private=0xa010100, 0x3506, 0x6, 0x0, 0x7f, 0x10000, 0x3, 0x1}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x9, 0x82}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1837, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x6cb7e17f2edd8a8c, 0xe, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0xf8f}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x0, 0x5}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x80, 0x40, 0xff, 0x20, 0x6}, 0x5e, &(0x7f00000003c0)={0x5, 0xf, 0x5e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4f, 0x6, 0xfff9}, @ss_container_id={0x14, 0x10, 0x4, 0x14, "d58ff93e0307f3e823b86e9252363bd9"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "000200"}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0xf, 0xff00, 0x5, [0xff014f, 0xc00f, 0xc0, 0xfe800f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0xf, 0x7f}]}, 0x4, [{0x65, &(0x7f0000002b80)=@string={0x65, 0x3, "cc398c39f2a9da8b8ab4fcabaacdd1494f3a290678fc692cd0de620000000064609557a964c82b0ad233e76bbe19c189672b951c910542f1f8a924b6d206ee00355dc50152a53879d32ad0d77906174f88aa18f746bb6d6aed41ced4c1982e1bffad38"}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x414}}, {0xca, &(0x7f0000002a80)=@string={0xca, 0x3, "d0aff803e9d1d43f8175b2910f9f0f0397d293086a274f080a4336f06474e83699d5bdc4eac7fec5befad3616673fd0e9104ea7aaeaa94c825a3b73e663aee2bfc8e2bb13a0c2f1563187dfe95a3cf6a8e86a54ed4b2a6394b5b2602c5bfc77453723d1e8030d98a98b362f663217fd4db454eb9eb0196c8184f09a142f1bc784bd994209d29f22c162b8885a448004395402bd10d0bc9d151650928e8216e1d086a466081b7238150a0c01cef1ea91eb84c84053f22c05e7d1f90b9f76ed9a2fe3cb1bf0e310ae6"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x280000, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0xa, 0x23, 0x15, 0x1e, 0x9, 0x80000001, 0x4, 0x23, 0x1}}) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002980), 0x2) ioctl$AUTOFS_IOC_SETTIMEOUT(r10, 0x80049367, &(0x7f00000029c0)=0x29) 2.491934732s ago: executing program 3 (id=1610): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0x1a}, 0x20) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r1 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x255, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000670250404020014964680102030109024302010000000009042100021085d80009050402ff0300000007250180000500872266b8d895a718d2000000000000000000fe3c9ad0bc7dabdd92000000000070e9f36dffd56e149523b04f7553979abf48a538bc48c7e4a637cc4a89b541bee19126701eccf408bd99d59db466d75bebccb72b8d609c305cd95b3a54eb8b4cab9b90c524ddae7d03c45b03f767301ff08a7cbc2e734271681488df1ddf64a39a9a442ea517f609050702"], 0x0) 2.141826027s ago: executing program 1 (id=1611): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) sched_setattr(r5, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x200002, 0x1, 0x0, 0x9, 0x7661, 0x0, 0x1}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x3818, 0x8) r7 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x100) ioctl$EVIOCSREP(r7, 0x40084503, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8044) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4140aecd, 0x0) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') lseek(0xffffffffffffffff, 0x1, 0x2) preadv(r8, 0x0, 0x0, 0x7c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff88a803f48100400081000200fb"], 0x0) 1.720191963s ago: executing program 2 (id=1612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800bf00100657874686472000024000280080001400000000c080003400000000008008a38712130be9d5e020007000000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c000780060001002b66000008000640000000030900010073797a30"], 0x114}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000a, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x21, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 1.42759813s ago: executing program 0 (id=1613): openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100"], 0x90}}, 0x0) 1.427299606s ago: executing program 2 (id=1614): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) (fail_nth: 2) 1.082877525s ago: executing program 2 (id=1615): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ppoll(&(0x7f00000002c0)=[{r1, 0x1046}], 0x1, 0x0, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0xbedffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) (async) io_uring_enter(r2, 0x2b93, 0xe9d0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r5, 0x3b8c, &(0x7f0000000080)={0x30, 0x0, 0x2000000, 0x0, 0x5, 0x400, 0x1, 0x0}) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x4008af83, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r9 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}}) (async) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, 0x0) (async) ptrace(0x10, 0x0) (async) ptrace$pokeuser(0x6, 0x0, 0x388, 0x7ffffffe) 886.65666ms ago: executing program 0 (id=1616): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) tee(r0, r1, 0x4, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 740.08531ms ago: executing program 0 (id=1617): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket$inet_tcp(0x2, 0x1, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (async) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f00000000c0)='./file1\x00', 0x6000081) (async) inotify_add_watch(r0, &(0x7f00000000c0)='./file1\x00', 0x6000081) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x400400, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x400400, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x6}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200000000001) socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r8, 0x107, 0x11, 0x0, &(0x7f0000000100)) (async) getsockopt$packet_int(r8, 0x107, 0x11, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x2805, 0x2}, 0x6a, 0x0) (async) landlock_create_ruleset(&(0x7f0000000140)={0x2805, 0x2}, 0x6a, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) 548.292722ms ago: executing program 3 (id=1618): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x84e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x60, 0x0, 0x808, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x8, 0x61, 0x7, 0x4, 0x7, 0xf, 0x0, 0x64, 0x5, 0x0, 0x8000, 0x0, 0x5c, 0xa0, 0xdf5, [0x7, 0x4]}}) preadv(r6, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) setns(0xffffffffffffffff, 0x8020000) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) io_setup(0xff, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000240)={0x18, r3}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20048080) 292.409374ms ago: executing program 1 (id=1619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0x9}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x20, 0x5, 0x4, 0xd64, 0x4, 0x100000000, 0x2, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000001380)={0x2b4, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6a3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x36}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xae}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x359, 0x0, @remote}}, {0x14, 0x2, @in={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x32}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x26}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x512}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1513}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x6}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x5a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x0, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @private=0xa010100, 0x0, 0xffffff00, 'wg1\x00', 'pimreg\x00', {0xff}, {0xff}, 0x2, 0x2, 0xd4}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@broadcast, @multicast1, 0xff, 0xffffff00, 'veth0_to_bond\x00', '\x00', {0xff}, {}, 0x84, 0x0, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3]}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x7d8, 0x2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x6, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0x0, 0x200009fc, 0x0, 0x0, 0x0, [{0x4, 0x7, 0xc5, '\x00', 0x81}, {0x4, 0x4, 0x8, '\x00', 0xc}, {0x0, 0xc, 0xfc, '\x00', 0x13}, {0xa, 0x10, 0x1d, '\x00', 0x1f}, {0xf, 0xfb, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0x4b, 0x8e, 0x7, '\x00', 0x4e}, {0x3, 0x6, 0x6, '\x00', 0x1}, {0x0, 0x18, 0x40, '\x00', 0x4}, {0xd, 0x1, 0x4, '\x00', 0x2}, {0x7f, 0xc, 0xff, '\x00', 0x9d}, {0x9, 0x1, 0x2, '\x00', 0x7f}, {0x5, 0xa, 0x3b, '\x00', 0x2}, {0x7, 0x10, 0x8c, '\x00', 0x9}, {0xfe, 0xb, 0x1, '\x00', 0x44}, {0xe, 0x5, 0x4, '\x00', 0x81}, {0x8, 0x2, 0x7, '\x00', 0x8}, {0x6, 0x0, 0x2, '\x00', 0x42}, {0xed, 0x6, 0x0, '\x00', 0x81}, {0x81, 0x0, 0x10, '\x00', 0x7}, {0x2, 0x8, 0x97, '\x00', 0x83}, {0x6, 0x29, 0x9b, '\x00', 0x4}, {0x7f, 0x3, 0x3, '\x00', 0xd3}, {0x0, 0x8, 0x3a, '\x00', 0x5}]}}) 95.035461ms ago: executing program 2 (id=1620): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000140)={0x0, 0x1410, 0x10100, 0x3, 0x1, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x300fff2) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1) semop(r6, &(0x7f0000000280)=[{0x1, 0xbbdd, 0x1000}, {0x2, 0xd, 0x800}], 0x2) semctl$GETNCNT(r6, 0x3, 0xe, 0x0) semctl$SETVAL(r6, 0x0, 0x10, &(0x7f00000000c0)) 0s ago: executing program 4 (id=1621): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) mremap(&(0x7f0000be4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00005f0000/0x2000)=nil) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, &(0x7f0000000340), &(0x7f0000000600)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x10, 0x7fff7ff9}]}) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000200)='\x00', &(0x7f0000000380)="09f68318fbe3da500e1ff6baa3787b7f537620a16c36e2a83c8dc10169ee9c94e33771b8e6988459bd31283f43ff48ccabf8b5b5bd9c29f3465c473c4d8156745c1996dec347685870234de7dd6c38e213b507d973b7969a23e8e7157b2c40b6bc5c97eb552a5b5ecbaf", 0x6a) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r4, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo\x00') (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r5, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 32) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000100)) openat$nullb(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) r7 = syz_io_uring_setup(0xc0a, &(0x7f00000002c0)={0x0, 0x200002f, 0x1000, 0x0, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x8, 0xc000000, &(0x7f0000000340)=[{&(0x7f0000000140)=""/10, 0xa}], 0x1, 0x12}) (rerun: 32) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): ate endpoint with address 0x6, skipping [ 436.390842][ T7129] usb 2-1: config 1 interface 189 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 436.443911][ T7129] usb 2-1: config 1 interface 74 has no altsetting 0 [ 436.501065][ T7129] usb 2-1: config 1 interface 223 has no altsetting 0 [ 436.509283][ T7129] usb 2-1: config 1 interface 8 has no altsetting 0 [ 436.519290][ T7129] usb 2-1: config 1 interface 189 has no altsetting 0 [ 436.532222][T11032] openvswitch: netlink: Missing key (keys=40, expected=80) [ 436.547467][ T7129] usb 2-1: New USB device found, idVendor=0dda, idProduct=0301, bcdDevice= 0.12 [ 436.558547][ T7129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.570033][ T7129] usb 2-1: Product: Б [ 436.575249][ T7129] usb 2-1: Manufacturer: ⿄죨诸ã¾ï±£é–«ã˜†à²›è°¼ä„…榼ë™í‡žã™—䧘下èˆæ´¤Ó¸ä‹œì¤“稇ᶿ밆ì“咙駽ëªä±’ [ 436.612317][T11007] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 436.927882][T11034] fuse: Bad value for 'fd' [ 436.952718][T11034] ipip1: entered promiscuous mode [ 436.983244][T11034] ipip1: entered allmulticast mode [ 437.454920][ T5897] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 437.607531][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.619048][ T5897] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 437.628622][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.637355][ T5969] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 437.654344][ T5897] usb 5-1: config 0 descriptor?? [ 437.807522][ T5969] usb 4-1: config 3 has an invalid descriptor of length 32, skipping remainder of the config [ 437.818757][ T5969] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 437.828398][ T5969] usb 4-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.849920][ T5969] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 437.860324][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.873612][ T5969] usb 4-1: Product: syz [ 437.878604][ T5969] usb 4-1: Manufacturer: syz [ 437.883451][ T5969] usb 4-1: SerialNumber: syz [ 437.940352][ T5969] cdc_ncm 4-1:3.0: invalid descriptor buffer length [ 437.947672][ T5969] cdc_ncm 4-1:3.0: CDC Union missing and no IAD found [ 437.955710][ T5969] cdc_ncm 4-1:3.0: bind() failure [ 438.126772][ T7129] usb-storage 2-1:1.74: USB Mass Storage device detected [ 438.146030][ T5969] usb 4-1: USB disconnect, device number 72 [ 438.171343][ T5897] usb 5-1: string descriptor 0 read error: -22 [ 438.172176][ T7129] usb-storage 2-1:1.74: Quirks match for vid 0dda pid 0301: 20 [ 438.220179][T11044] dlm: no locking on control device [ 438.271094][ T7129] usb-storage 2-1:1.223: USB Mass Storage device detected [ 438.303470][ T7129] usb-storage 2-1:1.223: Quirks match for vid 0dda pid 0301: 20 [ 438.378195][T11038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.409922][ T7129] usb-storage 2-1:1.8: USB Mass Storage device detected [ 438.415517][T11038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.442884][ T7129] usb-storage 2-1:1.8: Quirks match for vid 0dda pid 0301: 20 [ 438.504733][ T7129] usb-storage 2-1:1.189: USB Mass Storage device detected [ 438.531592][ T7129] usb-storage 2-1:1.189: Quirks match for vid 0dda pid 0301: 20 [ 438.596196][ T7129] usb 2-1: USB disconnect, device number 55 [ 438.658964][ T5897] usbhid 5-1:0.0: can't add hid device: -71 [ 438.670516][ T24] usb 3-1: USB disconnect, device number 63 [ 438.701936][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 438.750920][ T5897] usb 5-1: USB disconnect, device number 63 [ 438.918682][T11062] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 438.919555][T11063] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 439.395309][ T7129] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 439.415994][T11076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 439.484657][ T5969] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 439.585198][ T7129] usb 2-1: Using ep0 maxpacket: 32 [ 439.595184][ T7129] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 439.617871][ T7129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.655230][ T5969] usb 4-1: Using ep0 maxpacket: 32 [ 439.663620][ T7129] usb 2-1: config 0 descriptor?? [ 439.706837][ T5969] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 439.738441][ T5969] usb 4-1: config 0 has no interface number 0 [ 439.762878][ T5969] usb 4-1: config 0 interface 182 has no altsetting 0 [ 439.783751][ T5969] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 439.810069][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.826231][ T5969] usb 4-1: Product: syz [ 439.834457][ T5969] usb 4-1: Manufacturer: syz [ 439.843433][ T5969] usb 4-1: SerialNumber: syz [ 439.868900][ T5969] usb 4-1: config 0 descriptor?? [ 439.890867][ T5969] hub 4-1:0.182: bad descriptor, ignoring hub [ 439.915782][ T5969] hub 4-1:0.182: probe with driver hub failed with error -5 [ 439.944652][ T7129] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 439.970270][ T7129] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 440.007383][ T7129] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 440.033809][ T7129] usb 2-1: media controller created [ 440.108592][ T5969] kaweth 4-1:0.182: Firmware present in device. [ 440.126584][ T7129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.304819][ T5969] kaweth 4-1:0.182: Statistics collection: 0 [ 440.311224][ T5969] kaweth 4-1:0.182: Multicast filter limit: 0 [ 440.344816][ T5969] kaweth 4-1:0.182: MTU: 0 [ 440.363229][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.365920][ T5969] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 440.372054][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.397427][ T5969] kaweth 4-1:0.182: probe with driver kaweth failed with error -5 [ 440.426221][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 440.496139][ T5969] usb 4-1: USB disconnect, device number 73 [ 440.728608][T11093] 8021q: adding VLAN 0 to HW filter on device bond6 [ 440.930520][T11095] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 440.949310][T11095] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 440.958011][T11095] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 441.040615][T11106] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1173'. [ 441.056554][ T30] audit: type=1326 audit(1766297226.562:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.3.1175" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb26f8f749 code=0x0 [ 441.233470][T11114] dlm: non-version read from control device 36 [ 441.434998][ T7129] stb0899_attach: Driver disabled by Kconfig [ 441.441225][ T7129] az6027: no front-end attached [ 441.441225][ T7129] [ 441.501941][ T7129] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 441.519748][ T7129] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 441.542743][ T7129] dvb-usb: schedule remote query interval to 400 msecs. [ 441.576731][ T7129] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 441.857016][ T7129] usb 2-1: USB disconnect, device number 56 [ 441.976946][ T7129] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 442.224894][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 442.364889][ T10] usb 4-1: device descriptor read/64, error -71 [ 442.544899][ T5975] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 442.622306][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 442.799262][ T5975] usb 3-1: Using ep0 maxpacket: 16 [ 442.896473][ T10] usb 4-1: device descriptor read/64, error -71 [ 442.906714][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.921456][ T5975] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 442.931099][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.001161][T11138] lo: Caught tx_queue_len zero misconfig [ 443.036742][ T10] usb usb4-port1: attempt power cycle [ 443.163112][ T5975] usb 3-1: config 0 descriptor?? [ 443.518384][T11133] Can't find ip_set type € [ 443.603229][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 443.700075][ T10] usb 4-1: device descriptor read/8, error -71 [ 443.790405][ T5975] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 443.944892][ T10] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 443.963782][T11126] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1179'. [ 443.975728][ T10] usb 4-1: device descriptor read/8, error -71 [ 444.009798][ T7129] usb 3-1: USB disconnect, device number 64 [ 444.115983][ T10] usb usb4-port1: unable to enumerate USB device [ 444.452243][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'. [ 444.579065][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'. [ 444.633906][T11154] netlink: 'syz.2.1185': attribute type 4 has an invalid length. [ 444.945194][ T5975] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 445.096028][ T5975] usb 3-1: Using ep0 maxpacket: 16 [ 445.103505][ T5975] usb 3-1: config 0 has no interfaces? [ 445.112844][ T5975] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 445.287854][ T5975] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 445.323612][ T5975] usb 3-1: Manufacturer: syz [ 445.350756][ T5975] usb 3-1: config 0 descriptor?? [ 446.102829][T11154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.126722][T11154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.614942][ T10] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 446.622754][ T7129] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 446.764870][ T10] usb 5-1: device descriptor read/64, error -71 [ 446.784850][ T7129] usb 4-1: Using ep0 maxpacket: 16 [ 446.793404][ T7129] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 446.818554][ T7129] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 446.848069][ T7129] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.878135][ T7129] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.905943][ T7129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.921626][ T7129] usb 4-1: Product: syz [ 446.929450][ T7129] usb 4-1: Manufacturer: ó¤¹ [ 446.934270][ T7129] usb 4-1: SerialNumber: syz [ 447.024980][ T10] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 447.193483][T11176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1190'. [ 447.211330][ T10] usb 5-1: device descriptor read/64, error -71 [ 447.251536][T11176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1190'. [ 447.346501][ T10] usb usb5-port1: attempt power cycle [ 447.708760][ T5975] usb 3-1: USB disconnect, device number 65 [ 447.724883][ T10] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 447.774412][ T10] usb 5-1: device descriptor read/8, error -71 [ 448.044930][ T10] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 448.177618][ T10] usb 5-1: device descriptor read/8, error -71 [ 448.205117][ T5975] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 448.368484][ T5975] usb 2-1: unable to get BOS descriptor or descriptor too short [ 448.378076][ T5975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.403012][ T5975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.446648][ T5975] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.467864][ T10] usb usb5-port1: unable to enumerate USB device [ 448.489474][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.521886][ T5975] usb 2-1: Product: syz [ 448.536059][ T5975] usb 2-1: Manufacturer: syz [ 448.558935][ T5975] usb 2-1: SerialNumber: syz [ 448.648635][ T7129] usb 4-1: 0:2 : does not exist [ 448.709214][ T7129] usb 4-1: USB disconnect, device number 78 [ 449.516890][T11199] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[11199] [ 450.035167][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 450.195845][ T24] usb 5-1: device descriptor read/64, error -71 [ 450.452048][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 450.604885][ T24] usb 5-1: device descriptor read/64, error -71 [ 450.715444][ T24] usb usb5-port1: attempt power cycle [ 451.083648][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1199'. [ 451.097242][T11210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1199'. [ 451.110401][T11210] loop6: detected capacity change from 0 to 524288000 [ 451.411010][ T5975] usb 2-1: 0:2 : does not exist [ 451.435011][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 451.447002][ T5975] usb 2-1: USB disconnect, device number 57 [ 451.469723][ T24] usb 5-1: device descriptor read/8, error -71 [ 451.774938][ T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 452.049077][ T24] usb 5-1: device descriptor read/8, error -71 [ 452.178747][ T24] usb usb5-port1: unable to enumerate USB device [ 452.407606][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1202'. [ 452.417283][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1202'. [ 452.797362][T11224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1203'. [ 452.814553][T11222] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1201'. [ 452.829794][T11224] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1203'. [ 453.131914][ T30] audit: type=1326 audit(1766297238.622:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11225 comm="syz.4.1204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc276b8f749 code=0x0 [ 453.334293][T11240] netlink: 'syz.3.1208': attribute type 8 has an invalid length. [ 453.351089][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1208'. [ 453.390546][T11242] netlink: 'syz.3.1208': attribute type 8 has an invalid length. [ 453.403507][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1208'. [ 453.483919][T11242] bond0: entered promiscuous mode [ 453.489703][T11242] bond_slave_0: entered promiscuous mode [ 453.545149][T11242] bond_slave_1: entered promiscuous mode [ 453.646814][T11242] dummy0: entered promiscuous mode [ 453.744045][T11242] bond0: left promiscuous mode [ 453.762350][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1207'. [ 453.793588][T11242] bond_slave_0: left promiscuous mode [ 453.810183][T11242] bond_slave_1: left promiscuous mode [ 453.857078][T11242] dummy0: left promiscuous mode [ 453.878432][T11248] usb usb8: usbfs: process 11248 (syz.4.1209) did not claim interface 0 before use [ 454.022817][T11240] bond0: entered promiscuous mode [ 454.066240][T11244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1207'. [ 454.075785][T11240] bond_slave_0: entered promiscuous mode [ 454.082022][T11240] bond_slave_1: entered promiscuous mode [ 454.089424][T11240] dummy0: entered promiscuous mode [ 454.117656][T11245] loop6: detected capacity change from 0 to 524288000 [ 454.212138][T11240] bond0: left promiscuous mode [ 454.252626][T11240] bond_slave_0: left promiscuous mode [ 454.263071][T11240] bond_slave_1: left promiscuous mode [ 454.294994][T11240] dummy0: left promiscuous mode [ 454.357415][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1211'. [ 456.417135][T11281] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 456.424157][T11281] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 456.665145][T11281] vhci_hcd vhci_hcd.0: Device attached [ 456.927883][T11284] vhci_hcd: connection closed [ 456.929015][ T5990] vhci_hcd vhci_hcd.2: stop threads [ 457.002230][ T5990] vhci_hcd vhci_hcd.2: release socket [ 457.069571][ T5990] vhci_hcd vhci_hcd.2: disconnect device [ 457.115257][ T7129] usb 38-1: enqueue for inactive port 0 [ 457.164004][T11295] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 457.170752][T11295] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 457.288526][T11295] vhci_hcd vhci_hcd.0: Device attached [ 457.543912][T11296] vhci_hcd: connection closed [ 457.545414][ T5990] vhci_hcd vhci_hcd.3: stop threads [ 457.564963][ T5990] vhci_hcd vhci_hcd.3: release socket [ 457.606336][ T5990] vhci_hcd vhci_hcd.3: disconnect device [ 457.635070][ T5897] usb 40-1: SetAddress Request (2) to port 0 [ 457.657438][ T5897] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 457.737724][ T7129] usb usb38-port1: attempt power cycle [ 457.986320][T11312] __nla_validate_parse: 4 callbacks suppressed [ 457.986338][T11312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 458.063397][T11312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 458.196654][T11312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 458.356006][T11312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 458.385567][ T7129] usb usb38-port1: unable to enumerate USB device [ 458.504963][ T5880] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 458.657473][ T5880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.670674][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 458.686690][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 458.753644][ T5880] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 458.795161][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.912033][T11319] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 458.922613][ T5880] hub 5-1:1.0: bad descriptor, ignoring hub [ 458.949952][ T5880] hub 5-1:1.0: probe with driver hub failed with error -5 [ 458.980282][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 459.005245][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 459.048275][T11330] ksmbd: Unknown IPC event: 0, ignore. [ 459.056090][ T5880] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 459.083154][ T5880] cdc_wdm 5-1:1.0: Unknown control protocol [ 459.180293][ T7129] hid_parser_main: 1 callbacks suppressed [ 459.180310][ T7129] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0 [ 459.217022][ T7129] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0 [ 459.252053][ T7129] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0 [ 459.283048][ T7129] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0 [ 459.292531][ T7129] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0 [ 459.306161][ T7129] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0 [ 459.314149][ T7129] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0 [ 459.322698][ T7129] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0 [ 459.345582][ T7129] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0 [ 459.369599][ T7129] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0 [ 459.488858][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1231'. [ 459.502397][T11335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1231'. [ 459.518149][T11335] loop6: detected capacity change from 0 to 524288000 [ 459.606573][ T7129] hid-generic 0000:0000:0004.000E: hidraw0: HID v0.03 Device [syz1] on syz0 [ 459.868574][T11319] usb 5-1: reset full-speed USB device number 72 using dummy_hcd [ 460.075992][T11319] usb 5-1: device firmware changed [ 460.123480][T11319] cdc_wdm 5-1:1.0: Error autopm - -16 [ 460.123901][ T5880] usb 5-1: USB disconnect, device number 72 [ 460.222069][T11343] kvm: emulating exchange as write [ 460.365014][ T5880] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 460.588712][ T5880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.662670][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 460.732274][ T5880] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.811471][ T5880] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 460.856592][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.955544][T11331] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 461.051990][ T5880] hub 5-1:1.0: bad descriptor, ignoring hub [ 461.073636][ T5880] hub 5-1:1.0: probe with driver hub failed with error -5 [ 461.082498][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 461.090830][ T5880] cdc_wdm 5-1:1.0: skipping garbage [ 461.099696][ T5880] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 461.548514][T11362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1236'. [ 461.600131][ T5880] usb 5-1: USB disconnect, device number 73 [ 461.732606][T11364] openvswitch: netlink: Flow key attr not present in new flow. [ 461.792225][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1238'. [ 461.905482][T11371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.939430][T11371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.175974][ T5880] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 462.391608][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 462.412690][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 462.454859][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 111, changing to 7 [ 462.520524][ T5880] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 462.539588][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.556478][ T5880] usb 5-1: Product: syz [ 462.569312][ T5880] usb 5-1: Manufacturer: syz [ 462.599224][ T5880] usb 5-1: SerialNumber: syz [ 462.629068][ T5880] usb 5-1: config 0 descriptor?? [ 462.729629][ T5880] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 462.749464][ T5880] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 462.771240][ T5897] usb 40-1: device descriptor read/8, error -110 [ 463.217612][ T5897] usb usb40-port1: attempt power cycle [ 463.232573][ T5880] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 463.269767][ T5880] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 463.380908][T11371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.390176][T11371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.510688][ T5880] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 463.555479][ T5880] em28xx 5-1:0.0: No AC97 audio processor [ 463.653535][ T5880] usb 5-1: USB disconnect, device number 74 [ 463.702297][ T5880] em28xx 5-1:0.0: Disconnecting em28xx [ 463.797573][ T5897] usb usb40-port1: unable to enumerate USB device [ 463.807160][ T5880] em28xx 5-1:0.0: Freeing device [ 463.900718][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1247'. [ 463.936032][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1247'. [ 464.106012][ T5897] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 464.263153][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1249'. [ 464.294841][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 464.306055][ T5897] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 464.324379][ T5897] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 464.346912][T11415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1249'. [ 464.359270][T11415] loop6: detected capacity change from 0 to 524288000 [ 464.417590][ T5897] usb 2-1: config 1 has no interface number 1 [ 464.427534][ T5897] usb 2-1: too many endpoints for config 1 interface 2 altsetting 12: 66, using maximum allowed: 30 [ 464.467906][ T5897] usb 2-1: config 1 interface 2 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 464.604821][ T5897] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.657291][ T5897] usb 2-1: config 1 interface 2 has no altsetting 2 [ 464.701992][ T5897] usb 2-1: Dual-Role OTG device on HNP port [ 464.712411][ T5897] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.758652][T11423] IPv6: NLM_F_REPLACE set, but no existing node found! [ 464.768588][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.790986][T11421] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 464.821723][ T5897] usb 2-1: Product: syz [ 464.826958][ T5897] usb 2-1: Manufacturer: syz [ 464.850389][ T5897] usb 2-1: SerialNumber: syz [ 465.238552][ T5897] usb 2-1: USB disconnect, device number 58 [ 466.534401][T11437] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 466.682616][T11443] program syz.3.1255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.418592][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1257'. [ 467.620557][T11449] netlink: 'syz.1.1257': attribute type 13 has an invalid length. [ 467.628851][T11449] netlink: 'syz.1.1257': attribute type 27 has an invalid length. [ 468.270283][ T5880] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 468.424919][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 468.913997][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.925361][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.954199][ T5880] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 469.047361][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.058761][T11468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1262'. [ 469.124987][ T5880] usb 3-1: config 0 descriptor?? [ 469.149991][ T5880] hub 3-1:0.0: USB hub found [ 469.345306][ T5880] hub 3-1:0.0: 26 ports detected [ 469.350867][ T5880] hub 3-1:0.0: insufficient power available to use all downstream ports [ 469.392904][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1263'. [ 470.140441][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'. [ 470.152014][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1264'. [ 470.164372][T11485] loop6: detected capacity change from 0 to 524288000 [ 470.436726][ T5880] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 470.466523][ T5880] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 470.532179][ T5880] usbhid 3-1:0.0: can't add hid device: -32 [ 470.552869][ T5880] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 470.586317][T11491] binder: 11488:11491 ioctl c020aa04 200000001740 returned -22 [ 471.286950][ T5880] usb 3-1: USB disconnect, device number 66 [ 472.640923][T11528] netlink: 'syz.0.1271': attribute type 13 has an invalid length. [ 472.908883][T11528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.930873][T11528] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.063001][T11528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.173298][T11539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1274'. [ 473.341786][T11544] netlink: 'syz.1.1274': attribute type 13 has an invalid length. [ 473.349988][T11544] netlink: 'syz.1.1274': attribute type 27 has an invalid length. [ 474.434908][ T5880] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 474.607127][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.644895][ T5880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.044842][ T5880] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 475.044897][ T5880] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 475.044926][ T5880] usb 3-1: config 1 interface 1 has no altsetting 0 [ 475.051076][ T5880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.051112][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.051134][ T5880] usb 3-1: Product: syz [ 475.051149][ T5880] usb 3-1: Manufacturer: syz [ 475.051164][ T5880] usb 3-1: SerialNumber: syz [ 475.063248][ T5880] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 475.289027][ T30] audit: type=1400 audit(1766297260.782:105): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=11572 comm="syz.1.1283" [ 475.333630][ T5975] usb 3-1: USB disconnect, device number 67 [ 475.715219][ T5880] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 475.880666][T11587] loop9: detected capacity change from 0 to 8 [ 475.905972][T11587] Dev loop9: unable to read RDB block 8 [ 475.912837][T11587] loop9: unable to read partition table [ 475.924332][T11587] loop9: partition table beyond EOD, truncated [ 475.934849][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 475.941851][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 475.974225][T11587] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 475.975137][T11589] loop7: detected capacity change from 0 to 7 [ 475.995143][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 475.995857][T11589] Dev loop7: unable to read RDB block 7 [ 476.020856][T11589] loop7: AHDI p1 p2 [ 476.043106][ T5880] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 476.052777][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.071396][ T5880] usb 5-1: Product: syz [ 476.081643][ T5880] usb 5-1: Manufacturer: syz [ 476.091823][ T5880] usb 5-1: SerialNumber: syz [ 476.210558][ T5880] usb 5-1: config 0 descriptor?? [ 476.222085][ T5880] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 476.232793][ T5880] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 476.252393][T11589] loop7: partition table partially beyond EOD, truncated [ 476.261297][T11589] loop7: p1 start 1702000233 is beyond EOD, truncated [ 476.455142][ T5897] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 476.484936][ T7129] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 476.594998][ T5897] usb 4-1: device descriptor read/64, error -71 [ 476.638411][ T7129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.650171][ T7129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 476.663139][ T7129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 476.673545][ T7129] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 476.693823][ T7129] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 476.703738][ T7129] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 476.712365][ T7129] usb 3-1: Manufacturer: syz [ 476.719777][ T7129] usb 3-1: config 0 descriptor?? [ 476.829097][ T5880] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 476.834984][ T5897] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 476.838498][ T5880] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 476.974923][ T5897] usb 4-1: device descriptor read/64, error -71 [ 476.997720][ T7129] rc_core: IR keymap rc-hauppauge not found [ 477.003874][ T7129] Registered IR keymap rc-empty [ 477.009250][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.035060][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.053309][ T5880] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 477.061949][ T7129] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 477.074145][ T5880] em28xx 5-1:0.0: No AC97 audio processor [ 477.085597][ T5897] usb usb4-port1: attempt power cycle [ 477.102825][ T7129] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 [ 477.126810][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.145181][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.175003][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.195061][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.228175][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.255050][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.274942][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.304987][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.335041][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.365386][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.395725][ T7129] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 477.455195][ T5897] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 477.457099][ T7129] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 477.475763][ T7129] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 477.503009][ T7129] usb 3-1: USB disconnect, device number 68 [ 477.541869][ T5897] usb 4-1: device descriptor read/8, error -71 [ 477.832277][ T5897] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 477.875529][ T5897] usb 4-1: device descriptor read/8, error -71 [ 478.008822][ T5897] usb usb4-port1: unable to enumerate USB device [ 478.156290][T11614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1293'. [ 478.349877][T11618] netlink: 'syz.2.1293': attribute type 13 has an invalid length. [ 478.359944][T11618] netlink: 'syz.2.1293': attribute type 27 has an invalid length. [ 479.654928][ T5897] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 479.742087][ T5880] usb 5-1: USB disconnect, device number 75 [ 479.797189][ T5880] em28xx 5-1:0.0: Disconnecting em28xx [ 479.844251][ T5880] em28xx 5-1:0.0: Freeing device [ 479.860154][T11640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1298'. [ 479.875136][ T5897] usb 4-1: device descriptor read/64, error -71 [ 480.145610][ T5897] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 480.814075][T11662] netlink: 'syz.3.1304': attribute type 1 has an invalid length. [ 480.859325][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 481.320954][ T5834] dvb-usb: did not find the firmware file 'dvb-usb-gp8psk-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 481.415512][ T5834] dvb_usb_gp8psk 1-1:3.248: probe with driver dvb_usb_gp8psk failed with error -110 [ 481.476215][ T5834] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in cold state, will try to load a firmware [ 481.490020][ T5897] usb 4-1: device descriptor read/64, error -71 [ 481.513404][ T5834] usb 1-1: Direct firmware load for dvb-usb-gp8psk-01.fw failed with error -2 [ 481.523937][ T5834] usb 1-1: Falling back to sysfs fallback for: dvb-usb-gp8psk-01.fw [ 481.605319][ T5897] usb usb4-port1: attempt power cycle [ 481.965095][ T5897] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 482.067858][ T5897] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 482.082088][ T5897] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 482.108712][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 482.162384][ T5897] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 482.193756][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.212643][ T5897] usb 4-1: Product: syz [ 482.218874][ T5897] usb 4-1: Manufacturer: syz [ 482.235666][ T5897] usb 4-1: SerialNumber: syz [ 482.265715][ T5897] usb 4-1: config 0 descriptor?? [ 482.577208][T11689] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 482.583966][T11689] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 482.610916][T11689] vhci_hcd vhci_hcd.0: Device attached [ 482.664622][T11691] vhci_hcd: connection closed [ 482.665161][ T5988] vhci_hcd vhci_hcd.2: stop threads [ 482.684562][ T5988] vhci_hcd vhci_hcd.2: release socket [ 482.705372][ T5988] vhci_hcd vhci_hcd.2: disconnect device [ 482.716033][ T5880] usb 4-1: USB disconnect, device number 85 [ 483.447333][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1314'. [ 483.461388][T11704] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1314'. [ 484.365653][ T5897] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 484.535746][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 484.544248][ T5897] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 484.593441][ T5897] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 484.634460][ T5897] usb 4-1: config 166 has no interface number 0 [ 484.642419][ T5897] usb 4-1: config 166 has no interface number 1 [ 484.662286][ T5897] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 484.693522][ T5897] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 484.713113][ T5897] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 484.714872][ T7129] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 484.752583][ T5897] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 484.784830][ T5897] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 484.787192][T11697] sctp: [Deprecated]: syz.4.1313 (pid 11697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.787192][T11697] Use struct sctp_sack_info instead [ 484.835777][ T5897] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 484.863196][ T5897] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 484.872643][T11718] fuse: Bad value for 'fd' [ 484.877744][ T5897] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 484.900901][ T5897] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 484.924865][ T5897] usb 4-1: config 166 interface 177 has no altsetting 0 [ 484.932786][ T5897] usb 4-1: config 166 interface 34 has no altsetting 0 [ 484.934039][ T7129] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 484.943704][ T5897] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 484.958403][ T7129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.969462][ T7129] usb 2-1: config 0 has no interface number 0 [ 484.979689][ T7129] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 484.988579][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.991541][ T7129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.007654][ T5897] usb 4-1: Product: syz [ 485.009538][ T7129] usb 2-1: Product: syz [ 485.012860][ T5897] usb 4-1: Manufacturer: syz [ 485.016863][ T7129] usb 2-1: Manufacturer: syz [ 485.016885][ T7129] usb 2-1: SerialNumber: syz [ 485.020165][ T7129] usb 2-1: config 0 descriptor?? [ 485.045788][ T5897] usb 4-1: SerialNumber: syz [ 485.113521][ T7129] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 485.436595][ T5897] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 485.585259][ T5897] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 485.702990][ T5897] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 485.723339][ T5897] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 485.736347][ T5897] uvcvideo 4-1:166.34: No valid video chain found. [ 485.798369][ T5897] usb 4-1: USB disconnect, device number 86 [ 486.443738][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 486.846935][T11742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1321'. [ 487.476486][ T5880] usb 2-1: USB disconnect, device number 59 [ 487.556156][T11744] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 487.562732][T11744] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 487.612878][T11744] vhci_hcd vhci_hcd.0: Device attached [ 487.698456][T11745] vhci_hcd: connection closed [ 487.698765][ T5988] vhci_hcd vhci_hcd.2: stop threads [ 487.729344][ T5988] vhci_hcd vhci_hcd.2: release socket [ 487.787482][ T5988] vhci_hcd vhci_hcd.2: disconnect device [ 487.801833][ T7129] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 488.844940][ T5975] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 488.957694][T11775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1332'. [ 489.005359][ T5880] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 489.017253][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.033725][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.154244][ T5975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.185007][ T5975] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.205303][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.242819][ T5975] usb 3-1: config 0 descriptor?? [ 489.255218][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 489.292126][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.323542][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.343706][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 489.381219][ T5880] usb 5-1: New USB device found, idVendor=3923, idProduct=0371, bcdDevice=2d.a1 [ 489.434101][ T5880] usb 5-1: New USB device strings: Mfr=252, Product=111, SerialNumber=0 [ 489.456649][ T5880] usb 5-1: Product: syz [ 489.467469][ T5880] usb 5-1: Manufacturer: syz [ 489.491018][ T5880] usb 5-1: config 0 descriptor?? [ 489.689371][ T5975] hid_parser_main: 91 callbacks suppressed [ 489.689396][ T5975] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 489.795514][ T5975] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 489.803192][ T5975] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 489.874894][ T5975] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 489.932176][ T5975] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 489.953800][ T5975] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 489.964179][ T5975] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 490.012459][ T5975] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 490.027141][ T5975] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 490.044186][T11786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1331'. [ 490.065367][ T5880] usbhid 5-1:0.0: can't add hid device: -71 [ 490.071467][ T5880] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 490.126395][T11784] veth5: entered promiscuous mode [ 490.133997][ T5975] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 490.194033][ T5880] usb 5-1: USB disconnect, device number 76 [ 490.400396][ T7129] usb 3-1: USB disconnect, device number 69 [ 490.744012][T11804] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 490.751020][T11804] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 490.794810][T11804] vhci_hcd vhci_hcd.0: Device attached [ 490.815076][ T5975] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 490.871260][T11805] vhci_hcd: connection closed [ 490.871499][ T5941] vhci_hcd vhci_hcd.0: stop threads [ 490.905234][ T5941] vhci_hcd vhci_hcd.0: release socket [ 490.914847][ T5941] vhci_hcd vhci_hcd.0: disconnect device [ 490.954877][ T5975] usb 2-1: device descriptor read/64, error -71 [ 490.964913][ T5897] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 491.195091][ T5975] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 491.334862][ T5975] usb 2-1: device descriptor read/64, error -71 [ 491.374930][ T5880] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 491.455248][ T5975] usb usb2-port1: attempt power cycle [ 491.535084][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 491.543276][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.560420][ T5880] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 491.575010][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.589744][ T5880] usb 3-1: config 0 descriptor?? [ 491.789827][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1344'. [ 491.814856][ T5975] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 491.845408][T11833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1344'. [ 491.845598][ T5975] usb 2-1: device descriptor read/8, error -71 [ 491.866973][ T5918] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 491.889209][T11833] loop6: detected capacity change from 0 to 524288000 [ 492.025029][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 492.036051][ T5918] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 492.040059][ T5880] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 492.056298][ T5918] usb 4-1: config 1 has no interface number 1 [ 492.066054][ T5918] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 492.084002][ T5918] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 492.124850][ T5975] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 492.160376][ T5975] usb 2-1: device descriptor read/8, error -71 [ 492.168716][ T5918] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.188263][ T5918] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.202542][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.222795][ T5918] usb 4-1: Product: syz [ 492.227552][ T5918] usb 4-1: Manufacturer: syz [ 492.247851][ T5918] usb 4-1: SerialNumber: syz [ 492.257609][T11815] program syz.2.1341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.284888][ T5975] usb usb2-port1: unable to enumerate USB device [ 492.706062][ T5918] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 492.730907][T11839] ucma_write: process 1005 (syz.0.1349) changed security contexts after opening file descriptor, this is not allowed. [ 493.193723][ T30] audit: type=1326 audit(1766297278.692:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.0.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7f58f749 code=0x7ffc0000 [ 493.217395][ T30] audit: type=1326 audit(1766297278.692:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.0.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7efd7f58f749 code=0x7ffc0000 [ 493.277242][ T30] audit: type=1326 audit(1766297278.692:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.0.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7f58f749 code=0x7ffc0000 [ 493.302378][ T30] audit: type=1326 audit(1766297278.692:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.0.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efd7f58f749 code=0x7ffc0000 [ 493.339310][ T30] audit: type=1326 audit(1766297278.692:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.0.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7f58f749 code=0x7ffc0000 [ 493.363279][ T30] audit: type=1326 audit(1766297278.692:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.0.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7efd7f58f749 code=0x7ffc0000 [ 493.415115][ T30] audit: type=1326 audit(1766297278.692:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.0.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7f58f749 code=0x7ffc0000 [ 493.462416][ T30] audit: type=1326 audit(1766297278.692:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.0.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd7f58df90 code=0x7ffc0000 [ 493.597358][ T5918] usb 4-1: USB disconnect, device number 87 [ 493.698532][ T30] audit: type=1326 audit(1766297278.692:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.0.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7f58f749 code=0x7ffc0000 [ 493.761092][ T30] audit: type=1326 audit(1766297278.692:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.0.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd7f58f749 code=0x7ffc0000 [ 493.762769][ T6866] udevd[6866]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.107808][ T5897] usb 3-1: USB disconnect, device number 70 [ 494.524924][ T5897] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 494.556026][T11871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1359'. [ 494.573325][T11871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1359'. [ 494.684051][T11875] netlink: 1712 bytes leftover after parsing attributes in process `syz.4.1360'. [ 494.697908][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.710684][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.723067][ T5897] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 494.733126][ T5897] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 494.741925][ T5897] usb 3-1: Manufacturer: syz [ 494.757460][ T5897] usb 3-1: config 0 descriptor?? [ 494.844079][ T5849] syz_tun (unregistering): left promiscuous mode [ 494.874863][ T5880] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 494.965844][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'. [ 494.977002][T11879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1361'. [ 494.988423][T11879] loop6: detected capacity change from 0 to 524288000 [ 495.042657][ T5897] usbhid 3-1:0.0: can't add hid device: -32 [ 495.063463][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 495.123772][ T5988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.124942][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 495.191997][ T5880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 495.213000][ T7129] usb 3-1: USB disconnect, device number 71 [ 495.230464][ T5880] usb 5-1: config 8 has an invalid interface number: 159 but max is 0 [ 495.261877][ T5880] usb 5-1: config 8 has no interface number 0 [ 495.290678][ T5880] usb 5-1: config 8 interface 159 has no altsetting 0 [ 495.326372][ T5880] usb 5-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 495.339383][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.359687][ T5880] usb 5-1: Product: syz [ 495.359901][ T5988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.373374][ T5880] usb 5-1: Manufacturer: syz [ 495.395859][ T5880] usb 5-1: SerialNumber: syz [ 495.562832][ T5988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.721500][ T5880] gspca_main: sonixj-2.14.0 probing 0c45:612a [ 495.742408][ T5880] gspca_sonixj: reg_w1 err -71 [ 495.760814][ T5880] sonixj 5-1:8.159: probe with driver sonixj failed with error -71 [ 495.832733][ T5880] usb 5-1: USB disconnect, device number 77 [ 495.884589][ T5988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.058995][T11887] loop7: detected capacity change from 0 to 7 [ 496.107791][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.117846][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 496.167972][T11885] loop7: detected capacity change from 7 to 0 [ 496.168081][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.184000][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 496.193155][ T5884] ldm_validate_partition_table(): Disk read failed. [ 496.193535][ T5988] bridge_slave_1: left allmulticast mode [ 496.204855][ T5884] Dev loop7: unable to read RDB block 0 [ 496.213434][ T5884] loop7: unable to read partition table [ 496.225539][ T5884] loop7: partition table beyond EOD, truncated [ 496.238241][T11889] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 496.249274][T11889] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 496.261473][T11889] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 496.272219][T11889] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 496.280351][ T5988] bridge_slave_1: left promiscuous mode [ 496.286770][T11889] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 496.296203][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.326403][ T5988] bridge_slave_0: left allmulticast mode [ 496.332202][ T5988] bridge_slave_0: left promiscuous mode [ 496.339647][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.360181][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 496.367868][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 496.375568][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 496.383460][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 496.392414][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 496.751666][ T5988] ip6gretap0 (unregistering): left promiscuous mode [ 496.784936][ T5880] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 496.999865][ T5880] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 497.013041][ T5880] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 497.023685][ T5880] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 497.082308][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.145645][T11893] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 497.192010][ T5880] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.665136][ T5880] usb 3-1: USB disconnect, device number 72 [ 498.432828][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.441887][T11889] Bluetooth: hci4: command tx timeout [ 498.465703][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.479789][ T5988] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 498.513609][ T5988] bond0 (unregistering): Released all slaves [ 498.529550][ T5988] bond1 (unregistering): Released all slaves [ 498.596857][ T5880] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 498.824962][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 498.865679][ T5988] tipc: Left network mode [ 498.866484][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.915805][ T5880] usb 3-1: config 0 has no interfaces? [ 498.921447][ T5880] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 499.254864][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.270947][ T5880] usb 3-1: config 0 descriptor?? [ 499.334189][T11921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1371'. [ 499.352504][T11921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1371'. [ 499.739846][ T5880] usb 3-1: USB disconnect, device number 73 [ 500.194567][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1372'. [ 500.470833][T11946] blktrace: Concurrent blktraces are not allowed on sg0 [ 500.525629][T11889] Bluetooth: hci4: command tx timeout [ 500.974904][ T5880] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 501.240071][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.301529][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.386033][ T5880] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.424887][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.474316][ T5880] usb 5-1: config 0 descriptor?? [ 501.512077][ T5880] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 501.545750][ T5918] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 501.716839][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 501.753114][ T5918] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 501.762844][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.779769][ T5918] usb 2-1: config 0 descriptor?? [ 501.828095][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.834638][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.859982][ T5880] usb 5-1: USB disconnect, device number 78 [ 501.958733][T11890] chnl_net:caif_netlink_parms(): no params data found [ 502.038703][T11959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1375'. [ 502.071007][T11959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1375'. [ 502.258154][T11955] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1374'. [ 502.313476][ T5988] hsr_slave_0: left promiscuous mode [ 502.359501][ T5988] hsr_slave_1: left promiscuous mode [ 502.384006][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.415515][T11965] loop2: detected capacity change from 0 to 7 [ 502.434694][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.444351][T11965] loop2: p4 [ 502.461605][T11965] loop2: partition table partially beyond EOD, truncated [ 502.486858][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.503925][T11965] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 502.595064][T11889] Bluetooth: hci4: command tx timeout [ 502.651502][ T5198] loop2: p4 [ 502.658423][ T5988] veth1_macvtap: left promiscuous mode [ 502.695890][ T5198] loop2: partition table partially beyond EOD, truncated [ 502.703277][ T5198] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 502.754167][ T5988] veth0_macvtap: left promiscuous mode [ 502.771523][ T5988] veth1_vlan: left promiscuous mode [ 502.785185][ T5988] veth0_vlan: left promiscuous mode [ 503.313425][ T5988] team0 (unregistering): Port device batadv1 removed [ 504.171206][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 504.234618][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 504.683854][T11889] Bluetooth: hci4: command tx timeout [ 505.141809][ T5918] usbhid 2-1:0.0: can't add hid device: -71 [ 505.156918][ T5918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 505.173100][ T5918] usb 2-1: USB disconnect, device number 64 [ 505.529667][T11890] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.554710][T11890] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.575139][T11890] bridge_slave_0: entered allmulticast mode [ 505.583499][T11890] bridge_slave_0: entered promiscuous mode [ 505.606965][ T5918] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 505.637622][T11890] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.655601][T11890] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.663320][T11890] bridge_slave_1: entered allmulticast mode [ 505.671909][T11890] bridge_slave_1: entered promiscuous mode [ 505.723278][ T5988] IPVS: stop unused estimator thread 0... [ 505.805298][ T5918] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 505.813809][ T5918] usb 2-1: config 1 has no interface number 0 [ 505.846026][ T5918] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 505.872183][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 505.872204][ T30] audit: type=1326 audit(1766297291.372:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12016 comm="syz.0.1384" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd7f58f749 code=0x0 [ 505.901087][ T5918] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 505.912785][ T5918] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.930425][ T5918] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 505.962701][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.974480][ T5918] usb 2-1: Product: syz [ 505.980563][ T5918] usb 2-1: Manufacturer: syz [ 505.988967][ T5918] usb 2-1: SerialNumber: syz [ 506.010656][T11890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.036601][T11890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.048383][T12000] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 506.236704][T12027] netlink: 'syz.4.1385': attribute type 3 has an invalid length. [ 506.249081][T11890] team0: Port device team_slave_0 added [ 506.263370][T12027] netlink: 'syz.4.1385': attribute type 1 has an invalid length. [ 506.273373][T11890] team0: Port device team_slave_1 added [ 506.280245][T12027] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1385'. [ 506.291938][T12000] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 506.531664][ T5918] usb 2-1: Incompatible driver and firmware versions [ 506.545721][T11890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.567593][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.640220][T11890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.695908][T11890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.721732][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.768671][T11890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.905660][T12043] input: syz1 as /devices/virtual/input/input26 [ 506.993695][T11890] hsr_slave_0: entered promiscuous mode [ 507.002073][T11890] hsr_slave_1: entered promiscuous mode [ 507.011798][T11890] debugfs: 'hsr0' already exists in 'hsr' [ 507.020179][T11890] Cannot create hsr debugfs directory [ 507.134130][T12049] input: syz0 as /devices/virtual/input/input27 [ 507.886697][ T5918] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 507.934909][ T5897] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 508.054928][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 508.066269][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 508.089717][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 508.108380][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 508.122562][ T5918] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 508.133077][ T5897] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 508.140708][T11890] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 508.141793][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.157315][ T5897] usb 5-1: config 0 has no interface number 0 [ 508.164059][ T5897] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.175775][ T5918] usb 3-1: Product: syz [ 508.180305][ T5918] usb 3-1: Manufacturer: syz [ 508.187393][ T5897] usb 5-1: config 0 interface 85 has no altsetting 0 [ 508.188320][T11890] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 508.201685][ T5918] usb 3-1: SerialNumber: syz [ 508.209365][ T5897] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 508.223564][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.233336][ T5918] usb 3-1: config 0 descriptor?? [ 508.239503][ T5897] usb 5-1: Product: syz [ 508.244551][ T5897] usb 5-1: Manufacturer: syz [ 508.251271][ T5918] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 508.262719][ T5897] usb 5-1: SerialNumber: syz [ 508.265550][T11890] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 508.268121][ T5918] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 508.290005][ T5897] usb 5-1: config 0 descriptor?? [ 508.314249][T11890] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 508.501710][ T5975] usb 2-1: USB disconnect, device number 65 [ 508.507145][T11890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.557219][T11890] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.559457][ T5897] appletouch 5-1:0.85: Failed to read mode from device. [ 508.572738][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.580453][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.623560][ T5897] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 508.651234][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.658840][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.676515][ T5897] usb 5-1: USB disconnect, device number 79 [ 508.859250][T11890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.889050][ T5918] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 508.908210][ T5918] em28xx 3-1:0.0: Config register raw data: 0x2d [ 508.923559][ T5918] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 508.923772][T11890] veth0_vlan: entered promiscuous mode [ 508.931800][ T5918] em28xx 3-1:0.0: No AC97 audio processor [ 508.962995][T11890] veth1_vlan: entered promiscuous mode [ 508.995461][ T5897] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 509.006334][T11890] veth0_macvtap: entered promiscuous mode [ 509.018550][T11890] veth1_macvtap: entered promiscuous mode [ 509.045952][T11890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.064906][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 509.069084][T11890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.090605][ T6071] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.108064][ T6071] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.119989][ T6071] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.129820][ T6071] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.177369][ T5897] usb 5-1: too many configurations: 86, using maximum allowed: 8 [ 509.191820][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 509.223329][ T5897] usb 5-1: can't read configurations, error -61 [ 509.255210][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 509.262851][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 509.278132][ T24] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 509.290787][ T24] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.306879][ T24] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 509.328444][ T6071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.350100][ T6071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.359158][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 509.374678][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 509.385124][ T5897] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 509.396854][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.426054][ T24] usb 2-1: config 0 descriptor?? [ 509.449982][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.461038][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.557056][ T5897] usb 5-1: too many configurations: 86, using maximum allowed: 8 [ 509.578725][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 509.594853][ T5897] usb 5-1: can't read configurations, error -61 [ 509.615660][ T5897] usb usb5-port1: attempt power cycle [ 509.701969][ T5918] usb 3-1: USB disconnect, device number 74 [ 509.863855][ T24] microsoft 0003:045E:00F9.0010: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0 [ 509.890844][ T24] microsoft 0003:045E:00F9.0010: no inputs found [ 509.922098][ T24] microsoft 0003:045E:00F9.0010: could not initialize ff, continuing anyway [ 509.965425][ T5897] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 510.008704][ T5897] usb 5-1: too many configurations: 86, using maximum allowed: 8 [ 510.027129][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 510.054054][ T5897] usb 5-1: can't read configurations, error -61 [ 510.088215][T12122] syzkaller0: entered promiscuous mode [ 510.104356][T12122] syzkaller0: entered allmulticast mode [ 510.197854][ T5897] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 510.256605][ T5897] usb 5-1: too many configurations: 86, using maximum allowed: 8 [ 510.279713][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 510.305718][ T5897] usb 5-1: can't read configurations, error -61 [ 510.313256][ T9] usb 2-1: USB disconnect, device number 66 [ 510.321448][ T5897] usb usb5-port1: unable to enumerate USB device [ 510.650897][T12101] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 510.799475][T12144] binder: 12143:12144 ioctl c0306201 200000000080 returned -14 [ 510.840858][T12101] usb 3-1: Using ep0 maxpacket: 8 [ 510.877095][T12101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 510.926935][T12101] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 510.955341][T12101] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 510.985426][T12101] usb 3-1: config 4 has no interface number 0 [ 511.011629][T12101] usb 3-1: string descriptor 0 read error: -22 [ 511.026784][T12101] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 511.054826][T12101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.123772][T12101] uvcvideo 3-1:4.147: Found multiple Units with ID 6 [ 511.158306][T12101] uvcvideo 3-1:4.147: Found UVC 0.02 device (04f2:b746) [ 511.187603][T12101] uvcvideo 3-1:4.147: No valid video chain found. [ 511.335168][ T5897] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 511.350914][T12134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.395800][T12134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.474055][T12101] usb 3-1: USB disconnect, device number 75 [ 511.587091][ T5897] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 511.610690][ T5897] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 511.633516][ T5897] usb 2-1: config 1 interface 0 has no altsetting 0 [ 511.657054][ T24] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 511.681208][ T5897] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 511.710418][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.730757][ T5897] usb 2-1: Product: syz [ 511.735404][ T5897] usb 2-1: Manufacturer: syz [ 511.740326][ T5897] usb 2-1: SerialNumber: syz [ 511.780250][T12158] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 511.815048][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 511.823210][T12158] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 511.830844][ T24] usb 4-1: device descriptor read/64, error -71 [ 512.080963][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 512.100079][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.130834][ T10] usb 5-1: config 0 descriptor?? [ 512.144888][ T24] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 512.180380][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 512.267546][T12187] bridge0: port 3(veth0_to_bridge) entered blocking state [ 512.284856][ T24] usb 4-1: device descriptor read/64, error -71 [ 512.317255][T12187] bridge0: port 3(veth0_to_bridge) entered disabled state [ 512.326955][T12187] veth0_to_bridge: entered allmulticast mode [ 512.385879][T12187] veth0_to_bridge: entered promiscuous mode [ 512.403587][ T24] usb usb4-port1: attempt power cycle [ 512.716260][T12196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1408'. [ 512.804988][ T24] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 512.928350][ T5897] (unnamed net_device) (uninitialized): Assigned a random MAC address: 92:1d:39:23:53:a2 [ 512.948910][T12194] netlink: 'syz.0.1408': attribute type 13 has an invalid length. [ 512.978280][T12194] netlink: 'syz.0.1408': attribute type 27 has an invalid length. [ 513.001279][ T24] usb 4-1: device descriptor read/8, error -71 [ 513.024256][ T5897] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 513.107819][ T5897] usb 2-1: USB disconnect, device number 67 [ 513.277025][ T24] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 513.310721][ T24] usb 4-1: device descriptor read/8, error -71 [ 513.437027][ T24] usb usb4-port1: unable to enumerate USB device [ 514.256698][ T5897] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 514.517813][ T10] usb 5-1: USB disconnect, device number 84 [ 514.635113][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 514.658223][ T5897] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.681888][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 514.714300][ T5897] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 514.744605][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.784863][ T5897] usb 2-1: config 0 descriptor?? [ 515.411215][ T5897] hid-u2fzero 0003:20A0:4287.0011: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.1-1/input0 [ 515.455507][ T5897] hid-u2fzero 0003:20A0:4287.0011: NitroKey U2F LED initialised [ 515.505340][ T5897] hid-u2fzero 0003:20A0:4287.0011: NitroKey U2F RNG initialised [ 515.656546][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.677647][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.075986][ T30] audit: type=1326 audit(1766297301.582:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12248 comm="syz.0.1416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd7f58f749 code=0x0 [ 517.063025][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 517.328922][ T10] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 517.360854][ T10] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 517.406144][ T10] usb 4-1: config 171 has no interface number 0 [ 517.424220][ T10] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 517.499891][ T10] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.564889][ T10] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 517.814009][ T5897] usb 2-1: USB disconnect, device number 68 [ 517.844621][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 517.955915][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.964344][ T10] usb 4-1: Product: syz [ 518.013433][ T10] usb 4-1: Manufacturer: syz [ 518.033552][ T10] usb 4-1: SerialNumber: syz [ 518.067171][T12276] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 518.096156][T12297] tunl0: entered allmulticast mode [ 518.440218][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 518.651473][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 518.658593][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.715011][ T24] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c [ 518.751162][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.801159][ T24] usb 5-1: Product: syz [ 518.834510][ T24] usb 5-1: Manufacturer: syz [ 518.855348][ T24] usb 5-1: SerialNumber: syz [ 519.014954][T12101] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 519.092758][ T24] empeg 5-1:1.0: empeg converter detected [ 519.119105][ T24] empeg 5-1:1.0: probe with driver empeg failed with error -71 [ 519.156938][ T10] ath6kl: Failed to submit usb control message: -110 [ 519.166001][ T24] usb 5-1: USB disconnect, device number 85 [ 519.169262][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 519.195285][ T10] ath6kl: Unable to send get target info: -110 [ 519.204858][T12101] usb 3-1: Using ep0 maxpacket: 32 [ 519.223336][T12101] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 519.233083][ T10] ath6kl: Failed to init ath6kl core: -110 [ 519.242808][T12101] usb 3-1: config 0 has no interface number 0 [ 519.288422][ T10] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 519.297645][T12101] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 519.336905][T12101] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 519.398560][T12101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.437837][T12101] usb 3-1: Product: syz [ 519.447252][T12101] usb 3-1: Manufacturer: syz [ 519.452301][T12101] usb 3-1: SerialNumber: syz [ 519.487555][T12101] usb 3-1: config 0 descriptor?? [ 519.514110][T12305] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 519.700079][ T24] usb 4-1: USB disconnect, device number 92 [ 519.751417][T12305] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 520.272411][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1434'. [ 520.304518][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1434'. [ 520.588723][T12101] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 520.600279][T12101] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 520.657472][T12333] tipc: Enabled bearer , priority 0 [ 520.666120][T12333] syzkaller0: entered promiscuous mode [ 520.670426][T12101] asix 3-1:0.188: probe with driver asix failed with error -61 [ 520.672305][T12333] syzkaller0: entered allmulticast mode [ 520.890567][T12333] tipc: Resetting bearer [ 520.899029][T12332] tipc: Resetting bearer [ 520.975907][T12332] tipc: Disabling bearer [ 521.354907][ T5897] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 521.514807][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 521.523698][ T5897] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 521.581111][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.594168][ T5897] usb 2-1: config 0 has no interface number 0 [ 521.606512][ T5897] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 521.636425][ T5897] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 521.649704][ T5897] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 521.696667][ T5897] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 521.720979][ T5897] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 521.740163][ T5897] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 521.760122][ T5897] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 521.780149][ T5897] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 521.798249][T12343] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1440'. [ 521.815172][ T5897] usb 2-1: config 0 interface 239 has no altsetting 0 [ 521.869281][ T5897] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 521.884451][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.898720][ T5897] usb 2-1: Product: syz [ 521.906438][ T5897] usb 2-1: Manufacturer: syz [ 521.914559][ T5897] usb 2-1: SerialNumber: syz [ 521.933005][ T5897] usb 2-1: config 0 descriptor?? [ 521.944687][T12349] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1428'. [ 521.963093][T12336] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 521.973492][T12336] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 521.997833][T11889] Bluetooth: hci5: urb ffff888027626d00 submission failed (90) [ 522.534005][ T5897] usb 2-1: USB disconnect, device number 69 [ 522.945004][T12101] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 522.990850][ T5880] usb 3-1: USB disconnect, device number 76 [ 523.075419][T12101] usb 4-1: device descriptor read/64, error -71 [ 523.121273][ T30] audit: type=1326 audit(1766297308.622:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.1.1446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94fa58f749 code=0x0 [ 523.326584][T12101] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 523.336882][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 523.348694][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 523.474944][T12101] usb 4-1: device descriptor read/64, error -71 [ 523.620907][T12101] usb usb4-port1: attempt power cycle [ 523.985058][T12101] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 524.015968][T12101] usb 4-1: device descriptor read/8, error -71 [ 524.285105][T12101] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 524.406402][T12101] usb 4-1: device descriptor read/8, error -71 [ 524.595335][T12101] usb usb4-port1: unable to enumerate USB device [ 525.154937][T12101] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 525.253656][T12397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.280613][T12397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.305074][T12101] usb 3-1: Using ep0 maxpacket: 32 [ 525.312435][T12101] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.324541][T12101] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.337908][T12101] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 525.351777][T12101] usb 3-1: config 0 interface 0 has no altsetting 0 [ 525.366937][T12101] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 525.377299][T12101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.390450][T12101] usb 3-1: config 0 descriptor?? [ 525.504834][ T5897] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 525.677236][ T5897] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 525.692854][ T5897] usb 5-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 525.730935][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 525.783143][ T5897] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 525.802784][ T5897] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 525.825097][ T5897] usb 5-1: Manufacturer: syz [ 525.846213][ T5897] usb 5-1: config 0 descriptor?? [ 525.870604][ T5897] igorplugusb 5-1:0.0: incorrect number of endpoints [ 526.056407][ T5897] usb 5-1: USB disconnect, device number 86 [ 526.135234][T12416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1458'. [ 526.268010][T12422] netlink: 'syz.1.1458': attribute type 13 has an invalid length. [ 526.276776][T12422] netlink: 'syz.1.1458': attribute type 27 has an invalid length. [ 527.028541][T11566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.078390][T11566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.216785][T12101] usbhid 3-1:0.0: can't add hid device: -71 [ 527.235070][T12435] ptrace attach of "./syz-executor exec"[12434] was attempted by "./syz-executor exec"[12435] [ 527.316446][T12101] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 527.383174][T12101] usb 3-1: USB disconnect, device number 77 [ 527.824915][ T5880] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 528.065544][ T5880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 528.074831][T12101] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 528.094579][ T5880] usb 5-1: not running at top speed; connect to a high speed hub [ 528.117393][ T5880] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 528.154027][ T5880] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 528.187354][ T5880] usb 5-1: config 4 has no interface number 0 [ 528.228522][ T5880] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 528.242842][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.251384][T12101] usb 3-1: Using ep0 maxpacket: 32 [ 528.290097][T12101] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 528.301800][ T5880] usb 5-1: Product: syz [ 528.310162][T12101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.318628][ T5880] usb 5-1: Manufacturer: syz [ 528.327761][T12101] usb 3-1: Product: syz [ 528.333899][ T5880] usb 5-1: SerialNumber: syz [ 528.343597][T12101] usb 3-1: Manufacturer: syz [ 528.366820][T12101] usb 3-1: SerialNumber: syz [ 528.404311][T12101] usb 3-1: config 0 descriptor?? [ 528.650085][T12101] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 528.659562][T12101] eb 9a 47 80 9b f8 7a f0 [ 528.664477][T12101] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 528.868354][T12101] usb 3-1: USB disconnect, device number 78 [ 528.908270][T12450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1467'. [ 529.428232][ T5880] uvcvideo 5-1:4.147: Found UVC 0.00 device syz (04f2:b746) [ 529.452739][ T5880] uvcvideo 5-1:4.147: No valid video chain found. [ 529.483521][ T5880] usb 5-1: USB disconnect, device number 87 [ 529.938131][T12459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1468'. [ 530.106678][T12466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.130349][T12466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.375488][ T5897] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 531.645137][T12489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1475'. [ 531.785641][T12491] netlink: 'syz.0.1475': attribute type 13 has an invalid length. [ 531.793802][T12491] netlink: 'syz.0.1475': attribute type 27 has an invalid length. [ 531.815237][ T5897] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 531.905448][ T5975] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 531.926103][T12493] binder: 12492:12493 ioctl 89f1 2000000002c0 returned -22 [ 531.981643][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.000905][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 532.068976][ T5975] usb 2-1: config 6 has an invalid interface number: 232 but max is 0 [ 532.077518][ T5975] usb 2-1: config 6 has no interface number 0 [ 532.087717][ T5897] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 532.104803][ T5975] usb 2-1: config 6 interface 232 has no altsetting 0 [ 532.124775][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.149838][ T5975] usb 2-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice=dc.87 [ 532.161512][ T5897] usb 4-1: config 0 descriptor?? [ 532.169591][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.192130][ T5897] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 532.202863][ T5975] usb 2-1: Product: syz [ 532.211741][ T5975] usb 2-1: Manufacturer: syz [ 532.222658][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 532.234775][ T5975] usb 2-1: SerialNumber: syz [ 532.280130][ T5897] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 532.314081][ T5897] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 532.333691][ T5897] usb 4-1: media controller created [ 532.380142][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 532.392504][T12481] dvb-usb: bulk message failed: -22 (2/0) [ 532.500581][T12476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.526002][T12476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.775117][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 532.798659][ T5897] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 532.869855][ T5897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 532.952964][ T5897] dvb-usb: schedule remote query interval to 150 msecs. [ 532.990506][ T5897] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 533.110589][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 533.130792][T12500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1478'. [ 533.151427][ T5897] usb 4-1: USB disconnect, device number 98 [ 533.430115][ T5897] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 533.893466][ T5975] usb 2-1: can't set first interface for hiFace device. [ 533.981255][ T5975] snd-usb-hiface 2-1:6.232: probe with driver snd-usb-hiface failed with error -5 [ 533.987075][ T30] audit: type=1326 audit(1766297319.482:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12501 comm="syz.4.1480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc276b8f749 code=0x0 [ 533.994165][ T5975] usb 2-1: USB disconnect, device number 70 [ 534.484825][ T5975] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 535.598678][ T5975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.614018][ T5975] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.629001][ T5975] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 535.639489][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 535.661517][ T5975] usb 3-1: SerialNumber: syz [ 535.899142][ T5975] usb 3-1: 0:2 : does not exist [ 535.904191][ T5975] usb 3-1: unit 5 not found! [ 536.007249][ T5975] usb 3-1: USB disconnect, device number 79 [ 536.086705][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.048536][T12549] fuse: Bad value for 'fd' [ 537.614032][T12559] xt_hashlimit: size too large, truncated to 1048576 [ 537.637185][T12559] xt_hashlimit: max too large, truncated to 1048576 [ 537.732593][T12560] tipc: Enabling of bearer rejected, failed to enable media [ 537.883035][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 538.117264][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'. [ 538.127135][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'. [ 538.995076][ T5897] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 539.134876][ T5897] usb 5-1: device descriptor read/64, error -71 [ 539.164790][T12588] netlink: 'syz.2.1498': attribute type 4 has an invalid length. [ 539.235488][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 539.390665][ T5897] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 539.404910][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 539.521250][ T10] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 539.563006][ T10] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 539.594850][ T5897] usb 5-1: device descriptor read/64, error -71 [ 539.645808][ T10] usb 2-1: config 127 has no interface number 1 [ 539.667564][ T10] usb 2-1: config 127 interface 171 has no altsetting 0 [ 539.725178][ T5897] usb usb5-port1: attempt power cycle [ 539.878938][ T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 539.905885][ T30] audit: type=1326 audit(1766297325.412:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.0.1499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd7f58f749 code=0x0 [ 540.074861][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.094834][ T10] usb 2-1: Product: syz [ 540.100586][ T10] usb 2-1: Manufacturer: syz [ 540.165085][ T10] usb 2-1: SerialNumber: syz [ 540.384931][ T5897] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 541.176228][ T5897] usb 5-1: device descriptor read/8, error -71 [ 541.555213][ T5897] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 541.624897][T12101] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 541.799325][T12101] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.844939][T12101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 541.898695][T12101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 541.936650][T12101] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.199078][T12101] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.262067][T12101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.325418][T12101] usb 4-1: config 0 descriptor?? [ 542.776921][T12101] plantronics 0003:047F:FFFF.0012: ignoring exceeding usage max [ 542.817402][ T5834] dvb-usb: did not find the firmware file 'dvb-usb-gp8psk-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 542.875581][T12101] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 542.904908][ T5834] dvb_usb_gp8psk 1-1:3.211: probe with driver dvb_usb_gp8psk failed with error -110 [ 543.009423][ T5834] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in cold state, will try to load a firmware [ 543.033518][ T5897] usb 5-1: device descriptor read/8, error -71 [ 543.102195][ T5834] usb 1-1: Direct firmware load for dvb-usb-gp8psk-01.fw failed with error -2 [ 543.164885][ T5834] usb 1-1: Falling back to sysfs fallback for: dvb-usb-gp8psk-01.fw [ 543.205166][T12611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1502'. [ 543.272972][ T10] xr_serial 2-1:127.171: xr_serial converter detected [ 543.291535][ T10] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 543.304243][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 543.341624][ T10] usb 2-1: USB disconnect, device number 71 [ 543.366297][ T5897] usb usb5-port1: unable to enumerate USB device [ 543.390352][ T10] xr_serial 2-1:127.171: device disconnected [ 543.438500][T12613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.801416][T12625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1506'. [ 543.831581][T12625] input: syz0 as /devices/virtual/input/input31 [ 543.864879][ T10] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 544.007212][T12629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1508'. [ 544.017294][T12629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1508'. [ 544.077145][ T10] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 544.085924][ T10] usb 2-1: config 0 has no interface number 0 [ 544.093288][ T10] usb 2-1: config 0 interface 29 has no altsetting 0 [ 544.127364][ T10] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 544.153795][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.163166][ T10] usb 2-1: Product: syz [ 544.167736][ T10] usb 2-1: Manufacturer: syz [ 544.172632][ T10] usb 2-1: SerialNumber: syz [ 544.201991][ T10] usb 2-1: config 0 descriptor?? [ 544.419726][ T10] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 544.625141][ T10] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 544.628385][ T5897] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 544.632881][ T10] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 544.678232][ T9] usb 4-1: USB disconnect, device number 99 [ 544.771477][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 544.800879][ T10] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 544.884494][T12637] batadv_slave_1: entered promiscuous mode [ 544.891707][ T10] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -22 [ 544.947678][ T10] usb 2-1: USB disconnect, device number 72 [ 544.975164][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 544.989280][ T5897] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 545.009284][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.057291][ T5897] usb 3-1: Product: syz [ 545.061612][ T5897] usb 3-1: Manufacturer: syz [ 545.069524][ T5897] usb 3-1: SerialNumber: syz [ 545.088139][ T5897] usb 3-1: config 0 descriptor?? [ 545.098465][ T5897] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 545.275618][ T129] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 545.464866][ T129] usb 4-1: Using ep0 maxpacket: 8 [ 545.496684][ T129] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 545.499005][T12644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.515637][T12644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.537866][ T129] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 545.575235][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.596990][ T129] usb 4-1: Product: syz [ 545.601365][ T129] usb 4-1: Manufacturer: syz [ 545.616799][ T129] usb 4-1: SerialNumber: syz [ 545.621875][ T5897] gspca_sonixj: reg_r err -71 [ 545.633822][ T5897] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 545.655242][ T129] usb 4-1: config 0 descriptor?? [ 545.677274][ T129] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 545.689300][ T5897] usb 3-1: USB disconnect, device number 80 [ 545.702644][ T129] usb 4-1: setting power ON [ 545.728327][ T129] dvb-usb: bulk message failed: -22 (2/0) [ 545.760777][ T129] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 545.810057][ T129] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 545.824938][ T129] usb 4-1: media controller created [ 545.853115][ T129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 545.873955][T12637] dvb-usb: bulk message failed: -22 (3/0) [ 545.891042][T12637] cxusb: i2c rd: len=4100 is too big! [ 545.891042][T12637] [ 545.923236][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 545.971060][ T129] usb 4-1: selecting invalid altsetting 6 [ 545.992457][ T129] usb 4-1: digital interface selection failed (-22) [ 546.015441][ T129] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 546.036709][ T129] usb 4-1: setting power OFF [ 546.041919][ T129] dvb-usb: bulk message failed: -22 (2/0) [ 546.066237][ T129] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 546.158312][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1513'. [ 546.179905][ T129] (NULL device *): no alternate interface [ 546.197012][ T5941] wlan0: Trigger new scan to find an IBSS to join [ 546.217456][T12659] loop6: detected capacity change from 0 to 524288000 [ 546.656616][T12681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1519'. [ 546.668259][T12681] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1519'. [ 546.734691][T12678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1520'. [ 547.683503][T12689] netlink: 'syz.4.1522': attribute type 3 has an invalid length. [ 547.761787][ T129] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 547.815555][ T129] usb 4-1: USB disconnect, device number 100 [ 548.593176][T12714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.807210][T12714] __nla_validate_parse: 4 callbacks suppressed [ 548.807306][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 548.882364][T12715] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 549.035046][T12721] input: syz1 as /devices/virtual/input/input32 [ 549.752860][T12737] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1532'. [ 550.222431][ T60] wlan0: Trigger new scan to find an IBSS to join [ 550.895187][ T5975] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 550.939543][T12757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 551.098618][ T5975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.123488][ T5975] usb 2-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 551.165700][ T5975] usb 2-1: config 0 interface 0 has no altsetting 0 [ 551.181846][ T5975] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 551.224998][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.248604][T11561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.258522][ T5975] usb 2-1: config 0 descriptor?? [ 551.298980][ T5975] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 551.758147][T12750] : entered promiscuous mode [ 551.829971][T12776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.325598][T12776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.428564][T12101] usb 2-1: USB disconnect, device number 73 [ 552.434143][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1544'. [ 552.446326][T12778] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 553.162263][T12101] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 553.365012][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 553.383111][T12101] usb 3-1: Using ep0 maxpacket: 16 [ 553.404902][T12101] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 553.415982][T12101] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.448098][T12101] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.473993][T12101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.534884][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 553.665882][T12101] usb 3-1: Product: syz [ 553.671257][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 553.684394][T12101] usb 3-1: Manufacturer: syz [ 553.699234][T12101] usb 3-1: SerialNumber: syz [ 553.708556][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 553.739149][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.777941][ T9] usb 4-1: Product: syz [ 553.787814][ T9] usb 4-1: Manufacturer: syz [ 553.808730][ T9] usb 4-1: SerialNumber: syz [ 553.871675][ T9] usb 4-1: config 0 descriptor?? [ 553.905235][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 553.928619][ T9] usb 4-1: Detected FT232R [ 554.231563][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 554.340626][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 554.396360][ T9] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 554.491814][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 554.625369][ T9] usb 4-1: USB disconnect, device number 101 [ 554.840341][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 554.887011][ T9] ftdi_sio 4-1:0.0: device disconnected [ 555.832493][ T5897] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 555.998893][T12101] usb 3-1: 0:2 : does not exist [ 556.004886][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 556.020938][ T5897] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 556.039249][ T5897] usb 4-1: config 0 has no interface number 0 [ 556.043248][T12101] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 556.046536][ T5897] usb 4-1: config 0 interface 85 has no altsetting 0 [ 556.067396][ T5897] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 556.089121][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.102439][T12101] usb 3-1: USB disconnect, device number 81 [ 556.136418][ T5897] usb 4-1: Product: syz [ 556.170094][ T5897] usb 4-1: Manufacturer: syz [ 556.183166][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.200756][ T5897] usb 4-1: SerialNumber: syz [ 556.221530][ T5897] usb 4-1: config 0 descriptor?? [ 556.250292][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'. [ 556.293208][ T5897] appletouch 4-1:0.85: Could not find int-in endpoint [ 556.348046][ T5897] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 556.456367][ T5897] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 556.686964][T12833] gtp0: entered promiscuous mode [ 556.699076][T12833] gtp0: entered allmulticast mode [ 557.170624][T12836] program syz.1.1561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.212995][T12838] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 557.415232][ T5897] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 557.566930][ T5897] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 557.575741][ T5897] usb 2-1: config 0 has no interface number 0 [ 557.587857][ T5897] usb 2-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 557.605009][ T5897] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.623840][ T5897] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.708764][ T5897] usb 2-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 557.728896][T12849] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 557.874658][ T5897] usb 2-1: config 0 interface 16 has no altsetting 0 [ 557.882452][ T5897] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 557.892030][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.912396][ T5897] usb 2-1: config 0 descriptor?? [ 558.020533][T12853] syzkaller1: entered promiscuous mode [ 558.026680][T12853] syzkaller1: entered allmulticast mode [ 558.130370][T12836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.144585][T12836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.543200][ T5975] usb 4-1: USB disconnect, device number 102 [ 559.143071][ T30] audit: type=1400 audit(1766297344.612:131): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=12861 comm="syz.2.1570" [ 559.287328][ T5897] usbhid 2-1:0.16: can't add hid device: -71 [ 559.294119][ T5897] usbhid 2-1:0.16: probe with driver usbhid failed with error -71 [ 559.325116][ T5897] usb 2-1: USB disconnect, device number 74 [ 559.795118][ T5897] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 559.894834][T12101] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 559.955137][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 559.967875][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 559.989575][ T5897] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 6 [ 559.999052][ T5897] usb 2-1: can't read configurations, error -22 [ 560.048775][T12101] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 560.058966][T12101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.076148][T12101] usb 4-1: config 0 descriptor?? [ 560.124238][T12101] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 560.135010][ T5897] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 560.304960][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 560.314592][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 560.324325][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.342395][ T5897] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 6 [ 560.355432][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.361519][ T5897] usb 2-1: can't read configurations, error -22 [ 560.370589][ T5897] usb usb2-port1: attempt power cycle [ 560.371052][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.399184][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.434000][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.460251][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.485726][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.524366][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.555659][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.582691][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.680303][T12101] gspca_cpia1: usb_control_msg 03, error -71 [ 560.710403][T12101] gspca_cpia1: usb_control_msg 01, error -71 [ 560.728381][ T5897] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 560.739942][T12101] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 560.758022][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 560.766740][T12101] usb 4-1: USB disconnect, device number 103 [ 560.791052][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 560.806755][ T5897] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 6 [ 560.870011][ T5897] usb 2-1: can't read configurations, error -22 [ 561.014880][ T5897] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 561.033452][T12880] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 561.045910][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 561.053146][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 561.094843][T12101] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 561.111546][ T5897] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 6 [ 561.120634][ T5897] usb 2-1: can't read configurations, error -22 [ 561.141236][ T5897] usb usb2-port1: unable to enumerate USB device [ 561.254612][T12101] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 561.264089][T12101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.274523][T12101] usb 4-1: Product: syz [ 561.279942][T12101] usb 4-1: Manufacturer: syz [ 561.286180][T12101] usb 4-1: SerialNumber: syz [ 561.312488][T12101] usb 4-1: config 0 descriptor?? [ 561.327250][T12101] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 561.454868][ T5897] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 561.569503][T12101] gspca_sunplus: reg_r err -71 [ 561.590248][T12101] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 561.604814][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 561.605054][T12101] usb 4-1: USB disconnect, device number 104 [ 561.630689][ T5897] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 561.653331][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.674652][ T5897] usb 5-1: Product: syz [ 561.682257][ T5897] usb 5-1: Manufacturer: syz [ 561.689425][ T5897] usb 5-1: SerialNumber: syz [ 561.711841][ T5897] usb 5-1: config 0 descriptor?? [ 561.898610][T12893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'. [ 561.961104][ T5897] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 562.050252][T12101] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 562.207017][T12101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.218575][T12101] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 562.238740][T12101] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 562.259400][T12101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.294479][T12101] usb 4-1: config 0 descriptor?? [ 562.414385][T12900] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1576'. [ 562.425041][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1576'. [ 562.435908][T12900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1576'. [ 562.751135][T12101] kovaplus 0003:1E7D:2D50.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 563.048541][T12101] kovaplus 0003:1E7D:2D50.0013: couldn't init struct kovaplus_device [ 563.057330][T12101] kovaplus 0003:1E7D:2D50.0013: couldn't install mouse [ 563.071767][T12101] kovaplus 0003:1E7D:2D50.0013: probe with driver kovaplus failed with error -32 [ 563.266400][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.277816][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.526216][T12101] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 563.705175][T12101] usb 3-1: device descriptor read/64, error -71 [ 563.791738][ T10] usb 4-1: USB disconnect, device number 105 [ 563.944853][T12101] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 564.085335][T12101] usb 3-1: device descriptor read/64, error -71 [ 564.197077][T12101] usb usb3-port1: attempt power cycle [ 564.557941][T12101] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 564.615708][T12101] usb 3-1: device descriptor read/8, error -71 [ 564.728232][ T5897] usb write operation failed. (-71) [ 564.766329][ T5897] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 564.824325][ T5897] dvbdev: DVB: registering new adapter (Terratec H7) [ 564.847172][ T5897] usb 5-1: media controller created [ 564.853410][ T5897] usb read operation failed. (-71) [ 564.860667][ T5897] usb write operation failed. (-71) [ 564.870538][T12101] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 564.915460][T12101] usb 3-1: device descriptor read/8, error -71 [ 564.949363][ T5897] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 565.023964][ T5897] usb 5-1: USB disconnect, device number 92 [ 565.039851][T12101] usb usb3-port1: unable to enumerate USB device [ 565.648935][T12942] random: crng reseeded on system resumption [ 567.227296][T12959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1596'. [ 567.984842][ T5918] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 568.144831][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 568.152706][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.165898][ T5918] usb 2-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 568.221681][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.267829][ T5918] usb 2-1: config 0 descriptor?? [ 568.444293][T12984] netlink: 'syz.2.1603': attribute type 10 has an invalid length. [ 568.460886][T12984] team0: Port device dummy0 added [ 568.471368][T12984] netlink: 'syz.2.1603': attribute type 10 has an invalid length. [ 568.529225][T12984] team0: Port device dummy0 removed [ 568.679621][T12984] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 568.875854][ T5897] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 569.305415][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 569.334649][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.374916][ T5897] usb 3-1: config 0 has no interfaces? [ 569.431210][ T5897] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 569.442317][ T5897] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 569.456098][ T5897] usb 3-1: Product: syz [ 569.469182][ T5897] usb 3-1: Manufacturer: syz [ 569.485830][ T5897] usb 3-1: SerialNumber: syz [ 569.511719][ T5897] usb 3-1: config 0 descriptor?? [ 569.819217][T12985] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1603'. [ 570.484918][ T10] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 570.668142][ T10] usb 5-1: device descriptor read/64, error -71 [ 570.937649][ T10] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 571.096962][ T10] usb 5-1: device descriptor read/64, error -71 [ 571.169613][ T5918] usbhid 2-1:0.0: can't add hid device: -71 [ 571.179744][ T5918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 571.205450][ T10] usb usb5-port1: attempt power cycle [ 571.230753][ T5918] usb 2-1: USB disconnect, device number 79 [ 571.327231][ T129] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 571.555954][ T10] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 571.558456][ T129] usb 4-1: config 0 has an invalid interface number: 33 but max is 0 [ 571.576749][ T5897] usb 3-1: USB disconnect, device number 86 [ 571.605696][ T10] usb 5-1: device descriptor read/8, error -71 [ 571.608988][ T129] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.627404][ T129] usb 4-1: config 0 has no interface number 0 [ 571.633921][ T129] usb 4-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 571.676328][ T129] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 571.696602][ T129] usb 4-1: config 0 interface 33 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 571.713033][T13016] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1612'. [ 571.725207][T13016] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1612'. [ 571.764048][ T129] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 571.784504][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.797592][ T129] usb 4-1: Product: syz [ 571.803606][ T129] usb 4-1: Manufacturer: syz [ 571.868825][ T10] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 571.877060][ T129] usb 4-1: SerialNumber: syz [ 571.893888][ T129] usb 4-1: config 0 descriptor?? [ 571.910191][ T10] usb 5-1: device descriptor read/8, error -71 [ 571.910992][T13009] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 571.925784][T13022] FAULT_INJECTION: forcing a failure. [ 571.925784][T13022] name failslab, interval 1, probability 0, space 0, times 0 [ 571.941550][ T129] hdpvr 4-1:0.33: Could not find bulk-in endpoint [ 571.948543][T13022] CPU: 1 UID: 0 PID: 13022 Comm: syz.2.1614 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.948565][T13022] Tainted: [L]=SOFTLOCKUP [ 571.948569][T13022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.948576][T13022] Call Trace: [ 571.948580][T13022] [ 571.948586][T13022] dump_stack_lvl+0x189/0x250 [ 571.948605][T13022] ? __pfx____ratelimit+0x10/0x10 [ 571.948618][T13022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.948631][T13022] ? __pfx__printk+0x10/0x10 [ 571.948650][T13022] ? __pfx___might_resched+0x10/0x10 [ 571.948666][T13022] should_fail_ex+0x414/0x560 [ 571.948687][T13022] should_failslab+0xa8/0x100 [ 571.948702][T13022] kmem_cache_alloc_noprof+0x88/0x710 [ 571.948720][T13022] ? io_submit_one+0x11f/0x1430 [ 571.948733][T13022] io_submit_one+0x11f/0x1430 [ 571.948753][T13022] ? __pfx_io_submit_one+0x10/0x10 [ 571.948765][T13022] ? __might_fault+0xb0/0x130 [ 571.948789][T13022] ? __might_fault+0xb0/0x130 [ 571.948807][T13022] __se_sys_io_submit+0x185/0x320 [ 571.948825][T13022] ? __pfx___se_sys_io_submit+0x10/0x10 [ 571.948840][T13022] ? ksys_write+0x22a/0x250 [ 571.948857][T13022] ? do_syscall_64+0xbe/0xf80 [ 571.948872][T13022] do_syscall_64+0xfa/0xf80 [ 571.948889][T13022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.948901][T13022] ? clear_bhb_loop+0x60/0xb0 [ 571.948915][T13022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.948927][T13022] RIP: 0033:0x7f27c018f749 [ 571.948939][T13022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.948949][T13022] RSP: 002b:00007f27c1047038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 571.948963][T13022] RAX: ffffffffffffffda RBX: 00007f27c03e5fa0 RCX: 00007f27c018f749 [ 571.948971][T13022] RDX: 0000200000004540 RSI: 0000000000000001 RDI: 00007f27c1026000 [ 571.948979][T13022] RBP: 00007f27c1047090 R08: 0000000000000000 R09: 0000000000000000 [ 571.948986][T13022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.948994][T13022] R13: 00007f27c03e6038 R14: 00007f27c03e5fa0 R15: 00007f27c050fa28 [ 571.949013][T13022] [ 571.949687][ T129] hdpvr 4-1:0.33: probe with driver hdpvr failed with error -12 [ 572.078182][ T10] usb usb5-port1: unable to enumerate USB device [ 572.105626][T13021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1613'. [ 572.246214][T13021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1613'. [ 572.255776][ T129] usb 4-1: USB disconnect, device number 106 [ 573.483583][ T31] INFO: task kworker/1:9:6018 blocked for more than 143 seconds. [ 573.503755][ T31] Tainted: G L syzkaller #0 [ 573.512679][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.524982][ T31] task:kworker/1:9 state:D stack:20592 pid:6018 tgid:6018 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 573.562893][ T31] Workqueue: events request_firmware_work_func [ 573.602567][ T31] Call Trace: [ 573.611794][ T31] [ 573.625024][ T31] __schedule+0x14bc/0x5000 [ 573.652905][ T31] ? __pfx___schedule+0x10/0x10 [ 573.678576][ T31] ? schedule+0x91/0x360 [ 573.806908][ T31] schedule+0x165/0x360 [ 573.861034][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.881186][T13056] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 573.881186][T13056] The task syz.2.1620 (13056) triggered the difference, watch for misbehavior. [ 573.923993][ T31] __mutex_lock+0x7e6/0x1350 [ 573.935842][ T31] ? __mutex_lock+0x5bb/0x1350 [ 573.949697][ T31] ? ath9k_hif_usb_firmware_cb+0x332/0x4c0 [ 573.960966][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.973373][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 573.984768][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 573.991721][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 574.104893][ T31] ? complete_all+0x11c/0x310 [ 574.112281][ T31] ath9k_hif_usb_firmware_cb+0x332/0x4c0 [ 574.119384][ T31] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 574.126104][ T31] request_firmware_work_func+0x105/0x1c0 [ 574.171667][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 574.178282][ T31] process_scheduled_works+0xad1/0x1770 [ 574.184765][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.191488][ T31] worker_thread+0x8a0/0xda0 [ 574.243485][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 574.264405][ T31] ? __kthread_parkme+0x7b/0x200 [ 574.320469][ T31] kthread+0x711/0x8a0 [ 574.343585][ T31] ? __pfx_worker_thread+0x10/0x10 [ 574.366959][ T31] ? __pfx_kthread+0x10/0x10 [ 574.380122][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.397250][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 574.404813][ T31] ? __pfx_kthread+0x10/0x10 [ 574.414165][ T31] ret_from_fork+0x599/0xb30 [ 574.428894][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.447222][ T31] ? __switch_to_asm+0x39/0x70 [ 574.464428][ T31] ? __switch_to_asm+0x33/0x70 [ 574.482913][ T31] ? __pfx_kthread+0x10/0x10 [ 574.498434][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.521208][ T31] [ 574.525114][ T31] [ 574.525114][ T31] Showing all locks held in the system: [ 574.545158][ T31] 1 lock held by khungtaskd/31: [ 574.552770][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 574.568553][ T31] 2 locks held by kworker/u8:4/60: [ 574.574064][ T31] #0: ffff88801c742948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 574.623629][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 574.652954][ T31] 2 locks held by getty/5594: [ 574.686537][ T31] #0: ffff88814cf070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.703044][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 574.733944][ T31] 6 locks held by kworker/0:3/5834: [ 574.740938][ T31] #0: ffff88801d686d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 574.760148][ T31] #1: ffffc900040afb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 574.817286][ T31] #2: ffff888028331198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 574.832160][ T31] #3: ffff888056631198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 574.844485][ T31] #4: ffff88801dfa2160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 574.854526][ T31] #5: ffffffff8dde6830 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 574.872421][ T31] 4 locks held by udevd/5937: [ 574.877928][ T31] #0: ffff88804a158d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 574.897125][ T31] #1: ffff888055c4cc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 574.919940][ T31] #2: ffff888054d2df08 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 574.929995][ T31] #3: ffff888056631198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 574.941773][ T31] 3 locks held by kworker/1:9/6018: [ 574.948696][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 574.960319][ T31] #1: ffffc900049efb80 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 574.984902][ T31] #2: ffff888028331198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x332/0x4c0 [ 574.996762][ T31] 1 lock held by syz.1.1619/13040: [ 575.002175][ T31] #0: ffffffff8df47440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 575.013059][ T31] 4 locks held by syz.1.1619/13043: [ 575.019274][ T31] [ 575.061300][ T31] ============================================= [ 575.061300][ T31] [ 575.080437][ T31] NMI backtrace for cpu 0 [ 575.080464][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 575.080489][ T31] Tainted: [L]=SOFTLOCKUP [ 575.080496][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.080503][ T31] Call Trace: [ 575.080508][ T31] [ 575.080515][ T31] dump_stack_lvl+0x189/0x250 [ 575.080536][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.080551][ T31] ? __pfx__printk+0x10/0x10 [ 575.080573][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 575.080591][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 575.080608][ T31] ? __pfx__printk+0x10/0x10 [ 575.080626][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 575.080644][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 575.080661][ T31] sys_info+0x135/0x170 [ 575.080674][ T31] watchdog+0xf95/0xfe0 [ 575.080692][ T31] ? watchdog+0x20a/0xfe0 [ 575.080711][ T31] kthread+0x711/0x8a0 [ 575.080727][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.080742][ T31] ? __pfx_kthread+0x10/0x10 [ 575.080757][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.080774][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 575.080785][ T31] ? __pfx_kthread+0x10/0x10 [ 575.080800][ T31] ret_from_fork+0x599/0xb30 [ 575.080813][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.080828][ T31] ? __switch_to_asm+0x39/0x70 [ 575.080843][ T31] ? __switch_to_asm+0x33/0x70 [ 575.080856][ T31] ? __pfx_kthread+0x10/0x10 [ 575.080871][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.080895][ T31] [ 575.080899][ T31] Sending NMI from CPU 0 to CPUs 1: [ 575.241963][ C1] NMI backtrace for cpu 1 [ 575.241985][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.242006][ C1] Tainted: [L]=SOFTLOCKUP [ 575.242012][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.242022][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 575.242045][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 575.242059][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 575.242075][ C1] RAX: ef4b348490383600 RBX: ffffffff81978fda RCX: ef4b348490383600 [ 575.242088][ C1] RDX: 0000000000000001 RSI: ffffffff8d79261c RDI: ffffffff8bc08360 [ 575.242099][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 575.242110][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822070 [ 575.242121][ C1] R13: 1ffff11003956b70 R14: 0000000000000001 R15: 0000000000000001 [ 575.242133][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 575.242146][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.242158][ C1] CR2: 000020000032d030 CR3: 000000007551a000 CR4: 00000000003526f0 [ 575.242175][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 575.242185][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 575.242196][ C1] Call Trace: [ 575.242203][ C1] [ 575.242210][ C1] default_idle+0x13/0x20 [ 575.242228][ C1] default_idle_call+0x73/0xb0 [ 575.242248][ C1] do_idle+0x1ea/0x520 [ 575.242265][ C1] ? irqentry_exit+0x5ba/0x660 [ 575.242284][ C1] ? __pfx_do_idle+0x10/0x10 [ 575.242307][ C1] cpu_startup_entry+0x44/0x60 [ 575.242420][ C1] start_secondary+0x101/0x110 [ 575.242442][ C1] common_startup_64+0x13e/0x147 [ 575.242479][ C1] [ 575.437606][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 575.444502][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 575.455367][ T31] Tainted: [L]=SOFTLOCKUP [ 575.459894][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.470305][ T31] Call Trace: [ 575.473698][ T31] [ 575.476667][ T31] dump_stack_lvl+0x99/0x250 [ 575.481463][ T31] ? __asan_memcpy+0x40/0x70 [ 575.486168][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.491385][ T31] ? __pfx__printk+0x10/0x10 [ 575.496023][ T31] vpanic+0x237/0x6d0 [ 575.500104][ T31] ? __pfx_vpanic+0x10/0x10 [ 575.504803][ T31] ? preempt_schedule_common+0x83/0xd0 [ 575.510475][ T31] panic+0xb9/0xc0 [ 575.514567][ T31] ? __pfx_panic+0x10/0x10 [ 575.518993][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 575.524571][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 575.530946][ T31] watchdog+0xfdf/0xfe0 [ 575.535654][ T31] ? watchdog+0x20a/0xfe0 [ 575.540087][ T31] kthread+0x711/0x8a0 [ 575.544220][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.548916][ T31] ? __pfx_kthread+0x10/0x10 [ 575.553695][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.559065][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 575.564455][ T31] ? __pfx_kthread+0x10/0x10 [ 575.569262][ T31] ret_from_fork+0x599/0xb30 [ 575.573862][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.578989][ T31] ? __switch_to_asm+0x39/0x70 [ 575.584116][ T31] ? __switch_to_asm+0x33/0x70 [ 575.589154][ T31] ? __pfx_kthread+0x10/0x10 [ 575.593758][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.598545][ T31] [ 575.602296][ T31] Kernel Offset: disabled [ 575.606626][ T31] Rebooting in 86400 seconds..