last executing test programs: 1m0.635946164s ago: executing program 0 (id=472): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) 59.065863103s ago: executing program 0 (id=479): sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, 0x0, 0x40490c4) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x800) 58.813256178s ago: executing program 0 (id=481): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 58.512704833s ago: executing program 0 (id=483): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) unshare(0x22020600) umount2(&(0x7f0000000300)='./file0/file0\x00', 0x1) 58.189550123s ago: executing program 0 (id=484): socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 57.037795266s ago: executing program 0 (id=488): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0)=0x9, 0x4) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 56.394283143s ago: executing program 32 (id=488): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0)=0x9, 0x4) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 20.486238584s ago: executing program 2 (id=622): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) io_uring_setup(0x78ee, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfd, 0x909f}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17.34122391s ago: executing program 2 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) 15.225167601s ago: executing program 2 (id=633): socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 15.0841164s ago: executing program 4 (id=634): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd61a7000200442f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be0000000203009900000086dd080088be000000031c0885140100000000007b40080022eb0000000223022309020000008000000300ebb41b"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@wr_crn={0x67, 0x20, {0x8, 0x5}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x38}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.123611782s ago: executing program 4 (id=638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20040600) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 13.95336019s ago: executing program 5 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r3, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 11.897361303s ago: executing program 5 (id=643): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002a80)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000029c0)="834868", 0x3}, 0x68) 11.897110381s ago: executing program 3 (id=644): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11.476545413s ago: executing program 3 (id=645): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x4000080) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 11.375234793s ago: executing program 2 (id=646): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x44080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 9.371818904s ago: executing program 2 (id=648): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000540)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000003c0)={0x0, 0x8, 0x49, "ea4a43ef62d1a957e2137b115f96deba86c966cad4ffa8108ecb238c110aeba35ca0cec5dc93579ed1996d76f9fe925c9e4bba90b1a77a4f1053b1c28932cc344675ef59c9ce4e1669"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 7.766532424s ago: executing program 3 (id=651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000f96000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f0057860ffdbbf0000f3266b8090000000f23d00f21f86635000000080f23f80f211a66660fc73136f330ea0f0865660fae33b8ca008ee0", 0x38}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.642648507s ago: executing program 1 (id=652): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r4 = socket$inet6(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x70}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5505}, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) capset(0x0, &(0x7f0000000080)) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x1c, 0x0, 0x0}) 7.568465329s ago: executing program 4 (id=653): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xc0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) connect$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x7f, 0x6, @multicast}, 0x14) ioctl$NBD_DO_IT(r0, 0xab03) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.388690742s ago: executing program 1 (id=654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.979638172s ago: executing program 3 (id=655): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) close(0x4) 5.913270461s ago: executing program 5 (id=656): socket(0x200000000000011, 0x2, 0xd) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x100}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 5.730853319s ago: executing program 5 (id=657): quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)={0x1, 0x0, [{0x2, 0xfe, &(0x7f0000001680)=""/254}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/191, &(0x7f0000000140)=""/66, 0x80a0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 5.666359323s ago: executing program 1 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) 5.309923382s ago: executing program 4 (id=659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.981878011s ago: executing program 1 (id=660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)="04f6efd6f04f520076eaf3cb6fa8ed0f6e7190b4817eab96efd8383021abe166b7352c6dab641ac8aa8c6eb32cb61fc119b35ddf4a39a676eb85ba655ddd6077d68e2bc01a21ff8580e0c2a2d91230b80918624d7796211a3be66b0dbb384567cc972cff6873074480d76c0dadeff2f07de58c5adade547fe80de467479f21f64c0d79d6812b0059f61d", 0x8a, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x8, 0x80, 0xff, 0x2, 0x0, '\x00', 0x0, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xfb, 0xff, 0xd3, '\x00', 0x69}, {0x0, 0xfa, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x6}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x5, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0xc0, '\x00', 0x9}, {0x31, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x4d, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 3.15383232s ago: executing program 5 (id=661): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x83) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) creat(0x0, 0xd931d3864d39dcdb) 3.122014353s ago: executing program 4 (id=662): openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 3.04933695s ago: executing program 3 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d107000008000340000000011400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0x10, 0x3, 0x0) close(0x3) 2.925496846s ago: executing program 1 (id=664): openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x101000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x107ffd, 0x32c, 0x0, r0}, &(0x7f0000000800)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r1, 0x1000fd0, 0x4be, 0x28, 0x0, 0x0) 1.6998995s ago: executing program 1 (id=665): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0xfc, [@rand_addr=0x64010101]}]}}}}}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 1.295179219s ago: executing program 4 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)) 1.264702558s ago: executing program 5 (id=667): bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.253594772s ago: executing program 3 (id=668): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) move_pages(r0, 0x6, &(0x7f0000000180)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f00000001c0)=[0xffffffff], &(0x7f0000000200)=[0x0, 0x0], 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf2508"], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000000c0)="63966b2875") r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0xc5}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x9, 0xff}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x2, r1, 'id1\x00'}) ioctl$TCSETS(r4, 0x89f0, &(0x7f0000000500)={0x801, 0x7, 0x7, 0x4, 0x15, "bbd4c1bc808000"}) 0s ago: executing program 2 (id=669): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xf400, 0x1}, 0x8}, 0x94) socket(0x2a, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. [ 67.632825][ T5783] cgroup: Unknown subsys name 'net' [ 67.873580][ T5783] cgroup: Unknown subsys name 'cpuset' [ 67.929967][ T5783] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.485896][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.265714][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.265765][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.035861][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.046932][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.058830][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.069964][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.070556][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.071150][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.079878][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.080468][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.080949][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.082917][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.086782][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.089493][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.091760][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.092662][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.109899][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.110300][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.112497][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.114105][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.115916][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.117015][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.203200][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.204455][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.205802][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.209178][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.229951][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.939129][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 73.948628][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 73.996467][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 74.031261][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 74.134004][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 74.303886][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.304782][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.305067][ T5793] bridge_slave_0: entered allmulticast mode [ 74.306530][ T5793] bridge_slave_0: entered promiscuous mode [ 74.339049][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.339153][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.339424][ T5802] bridge_slave_0: entered allmulticast mode [ 74.341883][ T5802] bridge_slave_0: entered promiscuous mode [ 74.376509][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.376622][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.376769][ T5793] bridge_slave_1: entered allmulticast mode [ 74.378092][ T5793] bridge_slave_1: entered promiscuous mode [ 74.403518][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.403630][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.404082][ T5802] bridge_slave_1: entered allmulticast mode [ 74.406486][ T5802] bridge_slave_1: entered promiscuous mode [ 74.408079][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.408248][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.408712][ T5794] bridge_slave_0: entered allmulticast mode [ 74.412099][ T5794] bridge_slave_0: entered promiscuous mode [ 74.447849][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.447961][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.448110][ T5797] bridge_slave_0: entered allmulticast mode [ 74.451314][ T5797] bridge_slave_0: entered promiscuous mode [ 74.474293][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.474405][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.474911][ T5794] bridge_slave_1: entered allmulticast mode [ 74.477178][ T5794] bridge_slave_1: entered promiscuous mode [ 74.513447][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.513616][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.513760][ T5797] bridge_slave_1: entered allmulticast mode [ 74.515308][ T5797] bridge_slave_1: entered promiscuous mode [ 74.564469][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.586721][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.608607][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.608782][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.609968][ T5810] bridge_slave_0: entered allmulticast mode [ 74.612454][ T5810] bridge_slave_0: entered promiscuous mode [ 74.618331][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.641956][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.642283][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.642392][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.642532][ T5810] bridge_slave_1: entered allmulticast mode [ 74.645089][ T5810] bridge_slave_1: entered promiscuous mode [ 74.670536][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.711998][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.714756][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.757241][ T5793] team0: Port device team_slave_0 added [ 74.765254][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.766891][ T5802] team0: Port device team_slave_0 added [ 74.769054][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.789174][ T5793] team0: Port device team_slave_1 added [ 74.806480][ T5802] team0: Port device team_slave_1 added [ 75.083702][ T5797] team0: Port device team_slave_0 added [ 75.085790][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.129941][ T5797] team0: Port device team_slave_1 added [ 75.155531][ T5794] team0: Port device team_slave_0 added [ 75.181928][ T60] Bluetooth: hci3: command tx timeout [ 75.182059][ T60] Bluetooth: hci2: command tx timeout [ 75.182163][ T60] Bluetooth: hci1: command tx timeout [ 75.182442][ T5116] Bluetooth: hci0: command tx timeout [ 75.203550][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.203564][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.203587][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.209205][ T5794] team0: Port device team_slave_1 added [ 75.231528][ T5810] team0: Port device team_slave_0 added [ 75.233306][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.233318][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.233341][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.253526][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.253539][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.253562][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.257512][ T5810] team0: Port device team_slave_1 added [ 75.259603][ T5116] Bluetooth: hci4: command tx timeout [ 75.292878][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.292894][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.292918][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.315826][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.315839][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.315862][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.332339][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.332352][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.332376][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.383482][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.383496][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.383519][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.407051][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.407066][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.407090][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.452075][ T5793] hsr_slave_0: entered promiscuous mode [ 75.453504][ T5793] hsr_slave_1: entered promiscuous mode [ 75.526520][ T5797] hsr_slave_0: entered promiscuous mode [ 75.527864][ T5797] hsr_slave_1: entered promiscuous mode [ 75.528896][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 75.529001][ T5797] Cannot create hsr debugfs directory [ 75.591789][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.591805][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.591828][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.602940][ T5794] hsr_slave_0: entered promiscuous mode [ 75.604202][ T5794] hsr_slave_1: entered promiscuous mode [ 75.605063][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 75.605084][ T5794] Cannot create hsr debugfs directory [ 75.615707][ T5810] hsr_slave_0: entered promiscuous mode [ 75.616874][ T5810] hsr_slave_1: entered promiscuous mode [ 75.617794][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 75.617815][ T5810] Cannot create hsr debugfs directory [ 75.633991][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.634004][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.634027][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.108888][ T5802] hsr_slave_0: entered promiscuous mode [ 76.115470][ T5802] hsr_slave_1: entered promiscuous mode [ 76.115983][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 76.116001][ T5802] Cannot create hsr debugfs directory [ 76.626796][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.674205][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.704047][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.735780][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.840592][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.877214][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.895447][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.944600][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.047411][ T5794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.078931][ T5794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.126774][ T5794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.155306][ T5794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.260294][ T5116] Bluetooth: hci0: command tx timeout [ 77.260323][ T5116] Bluetooth: hci1: command tx timeout [ 77.260343][ T5116] Bluetooth: hci2: command tx timeout [ 77.260362][ T5116] Bluetooth: hci3: command tx timeout [ 77.263912][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.320338][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.339458][ T5796] Bluetooth: hci4: command tx timeout [ 77.370198][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.408451][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.487804][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.514110][ T5802] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.562213][ T5802] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.597612][ T5802] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.636942][ T5802] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.698712][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.728634][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.736827][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.773525][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.773905][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.776813][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.865709][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.892968][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.904314][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.904495][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.946428][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.946559][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.974496][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.976949][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.001772][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.001883][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.046292][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.047325][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.087041][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.125376][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.125464][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.166261][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.166661][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.192058][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.298803][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.345256][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.345412][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.401357][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.405171][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.458759][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.725331][ T5793] veth0_vlan: entered promiscuous mode [ 78.753221][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.795243][ T5793] veth1_vlan: entered promiscuous mode [ 78.825540][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.848623][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.966485][ T5793] veth0_macvtap: entered promiscuous mode [ 79.006438][ T5793] veth1_macvtap: entered promiscuous mode [ 79.014720][ T5797] veth0_vlan: entered promiscuous mode [ 79.095915][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.111190][ T5797] veth1_vlan: entered promiscuous mode [ 79.113865][ T5810] veth0_vlan: entered promiscuous mode [ 79.133999][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.174422][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.212128][ T5810] veth1_vlan: entered promiscuous mode [ 79.225454][ T1490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.238042][ T1490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.244655][ T1490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.256078][ T1490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.339603][ T5796] Bluetooth: hci3: command tx timeout [ 79.339633][ T5796] Bluetooth: hci2: command tx timeout [ 79.339653][ T5796] Bluetooth: hci1: command tx timeout [ 79.339672][ T5796] Bluetooth: hci0: command tx timeout [ 79.403325][ T5797] veth0_macvtap: entered promiscuous mode [ 79.420983][ T5116] Bluetooth: hci4: command tx timeout [ 79.497933][ T5797] veth1_macvtap: entered promiscuous mode [ 79.533214][ T5802] veth0_vlan: entered promiscuous mode [ 79.541744][ T5810] veth0_macvtap: entered promiscuous mode [ 79.577068][ T5810] veth1_macvtap: entered promiscuous mode [ 79.603508][ T5802] veth1_vlan: entered promiscuous mode [ 79.618735][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.618759][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.625764][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.651954][ T5794] veth0_vlan: entered promiscuous mode [ 79.666331][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.709030][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.735398][ T147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.737242][ T5794] veth1_vlan: entered promiscuous mode [ 79.738783][ T147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.762823][ T147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.763238][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.763253][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.765348][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.768774][ T147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.856371][ T147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.885353][ T147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.936392][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.955354][ T147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.024057][ T5802] veth0_macvtap: entered promiscuous mode [ 80.100939][ T5802] veth1_macvtap: entered promiscuous mode [ 80.222536][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.222551][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.228474][ T5794] veth0_macvtap: entered promiscuous mode [ 80.279980][ T5794] veth1_macvtap: entered promiscuous mode [ 80.305053][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.323904][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.323921][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.341273][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.394976][ T76] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.399108][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.399124][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.400984][ T76] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.414410][ T5879] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.436114][ T76] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.456244][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.456335][ T76] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.493854][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.493872][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.499112][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.591152][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 80.615751][ T1018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.631719][ T5879] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 80.636063][ T1018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.644344][ T5879] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 80.644371][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.644389][ T5879] usb 3-1: Product: syz [ 80.644403][ T5879] usb 3-1: Manufacturer: syz [ 80.644417][ T5879] usb 3-1: SerialNumber: syz [ 80.690462][ T1018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.709537][ T5879] usb 3-1: config 0 descriptor?? [ 80.754805][ T1018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.767321][ T5879] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 80.767490][ T5879] usb 3-1: setting power ON [ 80.767902][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 80.836858][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 80.860145][ T5879] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 80.860228][ T5879] usb 3-1: media controller created [ 80.942548][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.947714][ T5911] dvb-usb: bulk message failed: -22 (3/0) [ 80.947737][ T5911] dvb-usb: bulk message failed: -22 (3/0) [ 80.987143][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.987161][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.073297][ T5879] usb 3-1: selecting invalid altsetting 6 [ 81.073333][ T5879] usb 3-1: digital interface selection failed (-22) [ 81.073353][ T5879] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 81.083821][ T5879] usb 3-1: setting power OFF [ 81.083922][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 81.083938][ T5879] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 81.083950][ T5879] (NULL device *): no alternate interface [ 81.242377][ T5879] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 81.248112][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.248128][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.389757][ T5879] usb 3-1: USB disconnect, device number 2 [ 81.419661][ T5116] Bluetooth: hci0: command tx timeout [ 81.419691][ T5116] Bluetooth: hci1: command tx timeout [ 81.419711][ T5116] Bluetooth: hci2: command tx timeout [ 81.419730][ T5116] Bluetooth: hci3: command tx timeout [ 81.473518][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.473536][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.510193][ T5796] Bluetooth: hci4: command tx timeout [ 81.533059][ T9] cfg80211: failed to load regulatory.db [ 81.693960][ T1457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.693980][ T1457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.825652][ T5933] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.355729][ T5944] netlink: 'syz.4.5': attribute type 8 has an invalid length. [ 82.649485][ T5953] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 82.990018][ T5959] program syz.0.20 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.191926][ T5960] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.383850][ T5977] pimreg: tun_chr_ioctl cmd 1074025677 [ 84.384015][ T5977] pimreg: linktype set to 280 [ 84.665118][ T5994] netlink: 36 bytes leftover after parsing attributes in process `syz.3.35'. [ 84.680738][ T5994] netlink: 36 bytes leftover after parsing attributes in process `syz.3.35'. [ 84.929554][ T5798] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.079387][ T5798] usb 3-1: Using ep0 maxpacket: 32 [ 85.088870][ T5798] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 85.088924][ T5798] usb 3-1: config 0 has no interface number 0 [ 85.088969][ T5798] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 85.088995][ T5798] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 85.133281][ T5798] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 85.133310][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.133329][ T5798] usb 3-1: Product: syz [ 85.133341][ T5798] usb 3-1: Manufacturer: syz [ 85.133355][ T5798] usb 3-1: SerialNumber: syz [ 85.204193][ T5798] usb 3-1: config 0 descriptor?? [ 85.320226][ T5879] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.389668][ T5858] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.419834][ T5798] radio-si470x 3-1:0.35: this is not a si470x device. [ 85.450859][ T5798] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 85.470188][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 85.477880][ T5879] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 85.477906][ T5879] usb 2-1: config 0 has no interface number 0 [ 85.477939][ T5879] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.478286][ T5879] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 85.478300][ T5879] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.478313][ T5879] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.478337][ T5879] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 85.478352][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.542642][ T5879] usb 2-1: config 0 descriptor?? [ 85.563909][ T5858] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 85.563935][ T5858] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 85.563953][ T5858] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 85.563971][ T5858] usb 5-1: config 220 has no interface number 2 [ 85.564081][ T5858] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 85.564107][ T5858] usb 5-1: config 220 interface 0 has no altsetting 0 [ 85.564124][ T5858] usb 5-1: config 220 interface 76 has no altsetting 0 [ 85.565516][ T5858] usb 5-1: config 220 interface 1 has no altsetting 0 [ 85.583981][ T5858] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 85.584056][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.584076][ T5858] usb 5-1: Product: syz [ 85.584089][ T5858] usb 5-1: Manufacturer: syz [ 85.584103][ T5858] usb 5-1: SerialNumber: syz [ 85.721677][ T5798] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 85.835366][ T5879] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 85.883592][ T808] usb 3-1: USB disconnect, device number 3 [ 85.929576][ T808] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 86.001581][ T5879] usb 2-1: USB disconnect, device number 2 [ 86.088779][ T5858] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 86.088828][ T5858] uvcvideo 5-1:220.0: No valid video chain found. [ 86.088943][ T5858] usb 5-1: selecting invalid altsetting 0 [ 86.102364][ T5879] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 86.185699][ T5858] usb 5-1: selecting invalid altsetting 0 [ 86.185721][ T5858] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 86.239051][ T5858] usb 5-1: USB disconnect, device number 2 [ 86.506930][ T6023] capability: warning: `syz.2.49' uses deprecated v2 capabilities in a way that may be insecure [ 86.549740][ T5796] Bluetooth: hci4: command tx timeout [ 88.003316][ T6057] Bluetooth: MGMT ver 1.23 [ 88.288735][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 90.189275][ T36] audit: type=1326 audit(1774216475.523:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6085 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e58fc799 code=0x7ffc0000 [ 90.189329][ T36] audit: type=1326 audit(1774216475.523:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6085 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e58fc799 code=0x7ffc0000 [ 90.192055][ T36] audit: type=1326 audit(1774216475.533:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6085 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e58fc799 code=0x7ffc0000 [ 90.199890][ T36] audit: type=1326 audit(1774216475.533:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6085 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f55e58fc799 code=0x7ffc0000 [ 90.199937][ T36] audit: type=1326 audit(1774216475.533:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6085 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e58fc799 code=0x7ffc0000 [ 90.199976][ T36] audit: type=1326 audit(1774216475.533:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6085 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e58fc799 code=0x7ffc0000 [ 90.200012][ T36] audit: type=1326 audit(1774216475.533:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6085 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e58fc799 code=0x7ffc0000 [ 90.200047][ T36] audit: type=1326 audit(1774216475.533:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6085 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e58fc799 code=0x7ffc0000 [ 90.200083][ T36] audit: type=1326 audit(1774216475.533:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6085 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f55e58fc799 code=0x7ffc0000 [ 90.200119][ T36] audit: type=1326 audit(1774216475.533:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6085 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e58fc799 code=0x7ffc0000 [ 91.721432][ T5999] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.462955][ T5999] usb 2-1: config 0 has no interfaces? [ 92.480746][ T5999] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=20.40 [ 92.480775][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.480795][ T5999] usb 2-1: Product: syz [ 92.480809][ T5999] usb 2-1: Manufacturer: syz [ 92.480823][ T5999] usb 2-1: SerialNumber: syz [ 92.576399][ T5999] usb 2-1: config 0 descriptor?? [ 92.650003][ T6119] program syz.2.86 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.826374][ T5865] usb 2-1: USB disconnect, device number 3 [ 92.908324][ T6127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.91'. [ 93.979459][ T6168] use of bytesused == 0 is deprecated and will be removed in the future, [ 93.979474][ T6168] use the actual size instead. [ 93.981691][ T6169] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 94.040197][ T5999] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.068802][ T6173] 9pnet_fd: p9_fd_create_unix (6173): problem connecting socket: ./file0: -30 [ 94.189393][ T5999] usb 3-1: Using ep0 maxpacket: 32 [ 94.192960][ T5999] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 94.192992][ T5999] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 94.193099][ T5999] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 94.193122][ T5999] usb 3-1: config 1 has no interface number 0 [ 94.193163][ T5999] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.193188][ T5999] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 94.193227][ T5999] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 94.193248][ T5999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.291529][ T5999] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 94.389348][ T5865] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.424520][ T6181] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 94.425173][ T6181] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 94.426077][ T6181] overlayfs: failed to get uuid (24/file0, err=-13); falling back to uuid=null. [ 94.515419][ T5999] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 94.559525][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 94.561161][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.561184][ T5865] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.564648][ T5865] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 94.564674][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.564692][ T5865] usb 4-1: Product: syz [ 94.564706][ T5865] usb 4-1: Manufacturer: syz [ 94.564720][ T5865] usb 4-1: SerialNumber: syz [ 94.582313][ T5865] usb 4-1: config 0 descriptor?? [ 94.820277][ T5999] usb 4-1: USB disconnect, device number 2 [ 95.259021][ T5999] usb 3-1: USB disconnect, device number 4 [ 95.268167][ T5999] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 95.882955][ T6212] warning: `syz.4.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.996611][ T6216] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.299960][ T6228] netlink: 88 bytes leftover after parsing attributes in process `syz.3.137'. [ 97.142710][ T6260] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.143127][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 97.349408][ T5865] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.475931][ T6268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.503622][ T5865] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 97.503647][ T5865] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 97.503666][ T5865] usb 4-1: config 220 has no interface number 2 [ 97.503726][ T5865] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 97.503752][ T5865] usb 4-1: config 220 interface 0 has no altsetting 0 [ 97.503768][ T5865] usb 4-1: config 220 interface 76 has no altsetting 0 [ 97.503785][ T5865] usb 4-1: config 220 interface 1 has no altsetting 0 [ 97.507513][ T5865] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 97.507540][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.507559][ T5865] usb 4-1: Product: syz [ 97.507573][ T5865] usb 4-1: Manufacturer: syz [ 97.507595][ T5865] usb 4-1: SerialNumber: syz [ 97.699370][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.795903][ T5865] usb 4-1: selecting invalid altsetting 0 [ 97.805093][ T5865] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 97.805124][ T5865] uvcvideo 4-1:220.0: No valid video chain found. [ 97.837118][ T5865] usb 4-1: selecting invalid altsetting 0 [ 97.837142][ T5865] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 97.866579][ T5865] usb 4-1: USB disconnect, device number 3 [ 97.881217][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 97.884407][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.884436][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.884458][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.884496][ T43] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 97.884518][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.959730][ T43] usb 1-1: config 0 descriptor?? [ 98.062486][ T6280] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 98.524896][ T43] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 98.524937][ T43] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 98.524965][ T43] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 98.524988][ T43] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 98.525014][ T43] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 98.525038][ T43] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 98.525078][ T43] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 98.525104][ T43] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 98.525130][ T43] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 98.525156][ T43] a4tech 0003:09DA:000A.0001: unknown main item tag 0x0 [ 98.525236][ T43] a4tech 0003:09DA:000A.0001: item fetching failed at offset 40/41 [ 98.525998][ T43] a4tech 0003:09DA:000A.0001: parse failed [ 98.526104][ T43] a4tech 0003:09DA:000A.0001: probe with driver a4tech failed with error -22 [ 98.739691][ T31] usb 1-1: USB disconnect, device number 2 [ 99.049314][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.207413][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 99.218220][ T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 99.218249][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.256751][ T43] pvrusb2: Hardware description: Terratec Grabster AV400 [ 99.256767][ T43] pvrusb2: ********** [ 99.256774][ T43] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 99.256784][ T43] pvrusb2: Important functionality might not be entirely working. [ 99.256791][ T43] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 99.256801][ T43] pvrusb2: ********** [ 99.317738][ T6301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.170'. [ 99.451339][ T2371] pvrusb2: Invalid write control endpoint [ 99.476463][ T6304] input: syz0 as /devices/virtual/input/input5 [ 99.647705][ T43] usb 5-1: USB disconnect, device number 3 [ 99.648863][ T2371] pvrusb2: Invalid write control endpoint [ 99.648890][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 99.648899][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 99.648906][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 99.648915][ T2371] pvrusb2: Device being rendered inoperable [ 99.699929][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 99.699992][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 99.737823][ T2371] pvrusb2: Attached sub-driver cx25840 [ 99.737838][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 99.737847][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 99.911881][ T6310] Zero length message leads to an empty skb [ 101.879324][ T5858] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.030169][ T5858] usb 1-1: Using ep0 maxpacket: 8 [ 102.119775][ T5858] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 102.119806][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.148808][ T5858] usb 1-1: config 0 descriptor?? [ 102.157213][ T6363] loop2: detected capacity change from 0 to 7 [ 102.193404][ T5858] pwc: Logitech QuickCam Zoom USB webcam detected. [ 102.193419][ T5858] pwc: Warning: more than 1 configuration available. [ 102.353410][ T5858] pwc: Failed to set LED on/off time (-71) [ 102.353829][ T5858] pwc: send_video_command error -71 [ 102.353841][ T5858] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 102.353950][ T5858] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 102.396874][ T5858] usb 1-1: USB disconnect, device number 3 [ 102.561694][ T6369] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.199'. [ 103.437707][ T6390] ======================================================= [ 103.437707][ T6390] WARNING: The mand mount option has been deprecated and [ 103.437707][ T6390] and is ignored by this kernel. Remove the mand [ 103.437707][ T6390] option from the mount to silence this warning. [ 103.437707][ T6390] ======================================================= [ 103.798243][ T6402] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.739333][ T5865] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.901560][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 104.903074][ T6414] netlink: 'syz.4.221': attribute type 29 has an invalid length. [ 104.906375][ T6414] netlink: 'syz.4.221': attribute type 29 has an invalid length. [ 104.906381][ T5865] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 104.906404][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.907188][ T6414] netlink: 500 bytes leftover after parsing attributes in process `syz.4.221'. [ 104.989530][ T5865] pvrusb2: Hardware description: Terratec Grabster AV400 [ 104.989546][ T5865] pvrusb2: ********** [ 104.989552][ T5865] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 104.989563][ T5865] pvrusb2: Important functionality might not be entirely working. [ 104.989572][ T5865] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 104.989582][ T5865] pvrusb2: ********** [ 105.171625][ T2371] pvrusb2: Invalid write control endpoint [ 105.199329][ T5858] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.283495][ T2371] pvrusb2: Invalid write control endpoint [ 105.283508][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 105.283514][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 105.283519][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 105.283525][ T2371] pvrusb2: Device being rendered inoperable [ 105.283553][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 105.283590][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 105.345190][ T2371] pvrusb2: Attached sub-driver cx25840 [ 105.345204][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 105.345213][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 105.371770][ T5858] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 105.371814][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.371840][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.371860][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 105.374091][ T5858] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 105.374118][ T5858] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 105.374139][ T5858] usb 2-1: Manufacturer: syz [ 105.398850][ T6398] pvrusb2: Attempted to execute control transfer when device not ok [ 105.415200][ T5872] usb 1-1: USB disconnect, device number 4 [ 105.474728][ T6427] process 'syz.2.225' launched './file0' with NULL argv: empty string added [ 105.491733][ T5858] usb 2-1: config 0 descriptor?? [ 106.114512][ T5858] hid_parser_main: 5 callbacks suppressed [ 106.114534][ T5858] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 106.664167][ T5858] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 108.169042][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 108.180977][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 108.184514][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 108.184667][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 108.202654][ T6464] ceph: No mds server is up or the cluster is laggy [ 108.294115][ T5872] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.479305][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 108.495089][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 108.495121][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.518328][ T5872] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.518356][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.518375][ T5872] usb 5-1: Product: syz [ 108.518388][ T5872] usb 5-1: Manufacturer: syz [ 108.518402][ T5872] usb 5-1: SerialNumber: syz [ 108.576947][ T5872] usb 5-1: config 0 descriptor?? [ 108.610826][ T5872] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.610860][ T5872] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 108.834586][ T6484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.075593][ T5865] usb 2-1: USB disconnect, device number 4 [ 109.212708][ T5872] em28xx 5-1:0.0: unknown em28xx chip ID (223) [ 109.414287][ T5872] em28xx 5-1:0.0: Config register raw data: 0xdf [ 109.614964][ T5872] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 109.614983][ T5872] em28xx 5-1:0.0: No AC97 audio processor [ 109.648565][ T5872] usb 5-1: USB disconnect, device number 4 [ 109.650906][ T5865] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.705180][ T5872] em28xx 5-1:0.0: Disconnecting em28xx [ 109.781050][ T5872] em28xx 5-1:0.0: Freeing device [ 109.849350][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 109.851692][ T5865] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 109.851717][ T5865] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 109.851737][ T5865] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 109.851757][ T5865] usb 1-1: config 1 has no interface number 0 [ 109.851800][ T5865] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.851826][ T5865] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 109.851864][ T5865] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 109.851886][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.943996][ T5865] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 110.075816][ T6509] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 110.088497][ T5865] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 110.107765][ T6509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.259378][ T5865] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.425901][ T5865] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 110.426134][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.426155][ T5865] usb 2-1: Product: syz [ 110.426169][ T5865] usb 2-1: Manufacturer: syz [ 110.426183][ T5865] usb 2-1: SerialNumber: syz [ 110.500101][ T5865] usb 2-1: config 0 descriptor?? [ 110.518671][ T5865] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 005 [ 110.599399][ T5858] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.735418][ T5872] usb 1-1: USB disconnect, device number 5 [ 110.752179][ T5872] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 110.752286][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.752313][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.754922][ T5858] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.754945][ T5858] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 110.754963][ T5858] usb 5-1: Manufacturer: syz [ 110.824787][ T5858] usb 5-1: config 0 descriptor?? [ 110.931077][ T5865] (null): failure reading functionality [ 110.952575][ T5865] i2c i2c-1: connected i2c-tiny-usb device [ 111.171626][ T5865] usb 2-1: USB disconnect, device number 5 [ 111.343706][ T5858] usbhid 5-1:0.0: can't add hid device: -71 [ 111.343825][ T5858] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 111.371266][ T5858] usb 5-1: USB disconnect, device number 5 [ 112.049389][ T5865] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.262700][ T5865] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 114.262731][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.271484][ T5865] usb 1-1: config 0 descriptor?? [ 114.297626][ T5865] cp210x 1-1:0.0: cp210x converter detected [ 114.462235][ T5999] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 114.612959][ T5999] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.612987][ T5999] usb 3-1: config 0 has no interface number 0 [ 114.613028][ T5999] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 114.613048][ T5999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.623360][ T5999] usb 3-1: config 0 descriptor?? [ 114.651958][ T5999] usb 3-1: selecting invalid altsetting 1 [ 114.653043][ T5999] dvb_ttusb_budget: ttusb_init_controller: error [ 114.653058][ T5999] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 114.683536][ T5865] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 114.722313][ T5858] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.723770][ T5865] usb 1-1: cp210x converter now attached to ttyUSB0 [ 114.796666][ T5999] DVB: Unable to find symbol cx22700_attach() [ 114.844661][ T5999] DVB: Unable to find symbol tda10046_attach() [ 114.844670][ T5999] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 114.875688][ T5999] usb 3-1: USB disconnect, device number 5 [ 114.891681][ T5858] usb 4-1: Using ep0 maxpacket: 8 [ 114.898881][ T5858] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 114.898921][ T5858] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 114.898955][ T5858] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.898971][ T5858] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.898984][ T5858] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.898996][ T5858] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.899010][ T5858] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 114.899025][ T5858] usb 4-1: config 168 interface 0 has no altsetting 0 [ 114.905736][ T5879] usb 1-1: USB disconnect, device number 6 [ 114.911011][ T5858] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 114.911048][ T5858] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 114.911086][ T5858] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.911112][ T5858] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.911136][ T5858] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.911162][ T5858] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.911187][ T5858] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 114.911212][ T5858] usb 4-1: config 168 interface 0 has no altsetting 0 [ 114.912745][ T5858] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 114.912779][ T5858] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 114.912815][ T5858] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.912848][ T5858] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.912872][ T5858] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.912898][ T5858] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.912923][ T5858] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 114.912949][ T5858] usb 4-1: config 168 interface 0 has no altsetting 0 [ 114.916206][ T5858] usb 4-1: string descriptor 0 read error: -22 [ 114.916333][ T5858] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 114.916354][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.036419][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 115.111112][ T5858] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 115.211766][ T5879] cp210x 1-1:0.0: device disconnected [ 115.279378][ T5798] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.366676][ T5858] usb 4-1: USB disconnect, device number 4 [ 115.440588][ T5798] usb 5-1: Using ep0 maxpacket: 8 [ 115.449370][ T5798] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 115.449423][ T5798] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.449445][ T5798] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.449469][ T5798] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.449490][ T5798] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.449530][ T5798] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.449551][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.730208][ T5798] usb 5-1: usb_control_msg returned -32 [ 115.730257][ T5798] usbtmc 5-1:16.0: can't read capabilities [ 115.779068][ T6579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.270'. [ 116.381396][ T5796] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 117.106708][ T5872] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.261660][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 117.264225][ T5872] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 117.264251][ T5872] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 117.264271][ T5872] usb 1-1: config 166 has no interface number 0 [ 117.264288][ T5872] usb 1-1: config 166 has no interface number 1 [ 117.264342][ T5872] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 117.264362][ T5872] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 117.264397][ T5872] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 117.264421][ T5872] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 117.264446][ T5872] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 117.264471][ T5872] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 117.264495][ T5872] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 117.264520][ T5872] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 117.264541][ T5872] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 117.264566][ T5872] usb 1-1: config 166 interface 177 has no altsetting 0 [ 117.264584][ T5872] usb 1-1: config 166 interface 34 has no altsetting 0 [ 117.267710][ T5872] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 117.267739][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.267758][ T5872] usb 1-1: Product: syz [ 117.267773][ T5872] usb 1-1: Manufacturer: syz [ 117.267787][ T5872] usb 1-1: SerialNumber: syz [ 117.399362][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.510188][ T5872] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 117.561216][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.561249][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.561272][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.561367][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.561390][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.567724][ T43] usb 4-1: config 0 descriptor?? [ 117.710406][ T5865] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.715687][ T5872] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 117.872848][ T5865] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 117.872875][ T5865] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 117.872894][ T5865] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 117.872969][ T5865] usb 2-1: config 220 has no interface number 2 [ 117.873038][ T5865] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 117.873065][ T5865] usb 2-1: config 220 interface 0 has no altsetting 0 [ 117.873178][ T5865] usb 2-1: config 220 interface 76 has no altsetting 0 [ 117.873197][ T5865] usb 2-1: config 220 interface 1 has no altsetting 0 [ 117.879934][ T5865] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 117.879960][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.879979][ T5865] usb 2-1: Product: syz [ 117.879993][ T5865] usb 2-1: Manufacturer: syz [ 117.880006][ T5865] usb 2-1: SerialNumber: syz [ 117.940420][ T31] usb 5-1: USB disconnect, device number 6 [ 118.093370][ T5872] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 118.149460][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 118.149496][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 118.149518][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 118.149540][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 118.149564][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 118.149587][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 118.149611][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 118.149635][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 118.149660][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 118.149694][ T43] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 118.157416][ T5872] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 118.157448][ T5872] uvcvideo 1-1:166.34: No valid video chain found. [ 118.180017][ T5865] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 118.180048][ T5865] uvcvideo 2-1:220.0: No valid video chain found. [ 118.180104][ T5865] usb 2-1: selecting invalid altsetting 0 [ 118.226365][ T5872] usb 1-1: USB disconnect, device number 7 [ 118.238148][ T43] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 118.268565][ T5865] usb 2-1: selecting invalid altsetting 0 [ 118.268601][ T5865] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 118.376290][ T5865] usb 2-1: USB disconnect, device number 6 [ 118.392843][ T31] usb 4-1: USB disconnect, device number 5 [ 118.538040][ T6615] fido_id[6615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 118.649370][ T43] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 118.761130][ T5872] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 119.050456][ T43] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 119.050614][ T43] usb 5-1: config 0 has no interface number 0 [ 119.051024][ T43] usb 5-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 119.051075][ T43] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 119.127598][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 119.278312][ T5872] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 119.278782][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.288609][ T43] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 119.292205][ T43] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 119.292228][ T43] usb 5-1: Manufacturer: syz [ 119.292242][ T43] usb 5-1: SerialNumber: syz [ 119.633074][ T43] usb 5-1: config 0 descriptor?? [ 119.634366][ T5872] usb 3-1: config 0 descriptor?? [ 119.672189][ T5872] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 119.743741][ T6625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.352688][ T43] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 120.378012][ T43] usb 5-1: USB disconnect, device number 7 [ 120.849336][ T5872] gspca_sonixj: reg_w1 err -71 [ 120.869412][ T5872] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 120.884806][ T5872] usb 3-1: USB disconnect, device number 6 [ 121.012059][ T6646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.339351][ T5872] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 122.394068][ T6664] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 122.501508][ T5872] usb 1-1: config 1 interface 0 has no altsetting 0 [ 122.506649][ T5872] usb 1-1: string descriptor 0 read error: -22 [ 122.506787][ T5872] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40 [ 122.506810][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.620697][ T5798] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 122.771810][ T5798] usb 3-1: Using ep0 maxpacket: 16 [ 122.774697][ T5798] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.774719][ T5798] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.779141][ T5798] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.779168][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.830367][ T5798] usb 3-1: Product: syz [ 122.830389][ T5798] usb 3-1: Manufacturer: syz [ 122.830403][ T5798] usb 3-1: SerialNumber: syz [ 123.058737][ T5872] samsung 0003:0419:0001.0004: item 0 0 0 8 parsing failed [ 123.065904][ T5872] samsung 0003:0419:0001.0004: parse failed [ 123.065974][ T5872] samsung 0003:0419:0001.0004: probe with driver samsung failed with error -22 [ 123.087015][ T5798] usb 3-1: 0:2 : does not exist [ 123.108607][ T5798] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 123.251479][ T5879] usb 1-1: USB disconnect, device number 8 [ 123.278027][ T5798] usb 3-1: USB disconnect, device number 7 [ 123.396034][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.179542][ T5798] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 124.329317][ T5798] usb 3-1: Using ep0 maxpacket: 8 [ 124.333422][ T5798] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 124.333453][ T5798] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 124.338990][ T5798] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.339017][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.339036][ T5798] usb 3-1: Product: syz [ 124.339050][ T5798] usb 3-1: Manufacturer: syz [ 124.339064][ T5798] usb 3-1: SerialNumber: syz [ 124.663966][ T5798] cdc_ncm 3-1:1.0: bind() failure [ 124.705756][ T5798] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 124.705802][ T5798] cdc_ncm 3-1:1.1: bind() failure [ 124.751864][ T5798] usb 3-1: USB disconnect, device number 8 [ 125.769405][ T809] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.991051][ T809] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 125.991097][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.991119][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 125.991159][ T809] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 125.991186][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.010828][ T809] usb 3-1: config 0 descriptor?? [ 126.085564][ T5798] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.139417][ T5858] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.239656][ T5798] usb 2-1: Using ep0 maxpacket: 8 [ 126.255106][ T5798] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.257073][ T5798] usb 2-1: config 4 interface 0 has no altsetting 0 [ 126.277760][ T5798] usb 2-1: string descriptor 0 read error: -22 [ 126.277870][ T5798] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 126.277883][ T5798] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 126.289280][ T5858] usb 1-1: Using ep0 maxpacket: 8 [ 126.294392][ T5858] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 126.294417][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.294488][ T5858] usb 1-1: Product: syz [ 126.294502][ T5858] usb 1-1: Manufacturer: syz [ 126.294515][ T5858] usb 1-1: SerialNumber: syz [ 126.345823][ T5858] usb 1-1: config 0 descriptor?? [ 126.375098][ T5858] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 126.424185][ T5798] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 126.467544][ T809] holtek_kbd 0003:04D9:A055.0005: item fetching failed at offset 5/7 [ 126.481064][ T809] holtek_kbd 0003:04D9:A055.0005: probe with driver holtek_kbd failed with error -22 [ 126.530337][ T5798] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.531586][ T5798] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 126.531697][ T5798] usb 2-1: media controller created [ 126.577983][ T5798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.703725][ T809] usb 3-1: USB disconnect, device number 9 [ 126.712817][ T5116] Bluetooth: hci1: command 0x0406 tx timeout [ 127.432032][ T5858] usb 1-1: USB disconnect, device number 9 [ 127.681315][ T809] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 127.689390][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 127.708701][ T5798] zl10353_read_register: readreg error (reg=127, ret==0) [ 127.816727][ T5798] usb 2-1: USB disconnect, device number 7 [ 127.839333][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 127.841082][ T809] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 127.841110][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.843352][ T809] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 127.843377][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.843396][ T809] usb 3-1: Product: syz [ 127.843410][ T809] usb 3-1: Manufacturer: syz [ 127.843424][ T809] usb 3-1: SerialNumber: syz [ 127.866750][ T809] usb 3-1: config 0 descriptor?? [ 127.922242][ T809] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 127.922275][ T809] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 128.524624][ T809] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 128.526737][ T809] em28xx 3-1:0.0: Config register raw data: 0xa1 [ 128.526758][ T809] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 128.526773][ T809] em28xx 3-1:0.0: No AC97 audio processor [ 128.966645][ T809] usb 3-1: USB disconnect, device number 10 [ 130.319335][ T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.428693][ T6789] sp0: Synchronizing with TNC [ 130.572751][ T6787] syz.4.351 (6787) used greatest stack depth: 17176 bytes left [ 130.577208][ T43] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 130.577236][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.577254][ T43] usb 3-1: Product: syz [ 130.577268][ T43] usb 3-1: Manufacturer: syz [ 130.577280][ T43] usb 3-1: SerialNumber: syz [ 130.681669][ T43] usb 3-1: config 0 descriptor?? [ 130.969332][ T5920] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 131.031591][ T6801] input: syz0 as /devices/virtual/input/input7 [ 131.149366][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 131.152552][ T5920] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 131.152767][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.152791][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.152879][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.152903][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.152944][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.152966][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.552226][ T43] usb 3-1: Firmware version (0.0) predates our first public release. [ 131.552251][ T43] usb 3-1: Please update to version 0.2 or newer [ 131.649485][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 131.649503][ T36] audit: type=1326 audit(1774216517.977:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6802 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed0dfc799 code=0x7ffc0000 [ 131.653335][ T36] audit: type=1326 audit(1774216517.987:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6802 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ed0dfc799 code=0x7ffc0000 [ 131.655065][ T36] audit: type=1326 audit(1774216517.987:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6802 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3ed0dfc799 code=0x7ffc0000 [ 131.655693][ T36] audit: type=1326 audit(1774216517.987:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6802 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3ed0dfc799 code=0x7ffc0000 [ 131.656317][ T36] audit: type=1326 audit(1774216517.987:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6802 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3ed0dfc799 code=0x7ffc0000 [ 131.657055][ T36] audit: type=1326 audit(1774216517.987:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6802 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3ed0dfc799 code=0x7ffc0000 [ 131.657713][ T36] audit: type=1326 audit(1774216517.987:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6802 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3ed0dfc799 code=0x7ffc0000 [ 131.658236][ T36] audit: type=1326 audit(1774216517.987:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6802 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3ed0dfc799 code=0x7ffc0000 [ 131.658851][ T36] audit: type=1326 audit(1774216517.987:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6802 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3ed0dfc799 code=0x7ffc0000 [ 131.662160][ T36] audit: type=1326 audit(1774216517.997:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6802 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3ed0dfc799 code=0x7ffc0000 [ 131.788770][ T43] usb 3-1: USB disconnect, device number 11 [ 132.086814][ T6808] usbtmc 5-1:16.0: simple usb_control_msg failed -71 [ 132.150305][ T5865] usb 5-1: USB disconnect, device number 8 [ 132.273599][ T6812] syz.0.358 uses obsolete (PF_INET,SOCK_PACKET) [ 132.593428][ T6814] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 132.706146][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.706212][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.756481][ T6823] netlink: 'syz.4.362': attribute type 3 has an invalid length. [ 132.949329][ T5865] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 133.181990][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.182072][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.386622][ T5865] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 133.386676][ T5865] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 133.386719][ T5865] usb 1-1: Manufacturer: syz [ 133.801426][ T5865] usb 1-1: config 0 descriptor?? [ 133.970718][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 133.971050][ T6831] chnl_net:caif_netlink_parms(): no params data found [ 135.693390][ T5865] uclogic 0003:256C:006D.0006: v1 frame probing failed: -71 [ 135.693505][ T5865] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 135.693618][ T5865] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 135.723909][ T5865] usb 1-1: USB disconnect, device number 10 [ 137.132121][ T6878] netlink: 204 bytes leftover after parsing attributes in process `syz.2.382'. [ 138.315436][ T6897] netlink: 51 bytes leftover after parsing attributes in process `syz.1.391'. [ 139.492910][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 139.853580][ T6927] batadv_slave_0: entered promiscuous mode [ 140.204766][ T6925] batadv_slave_0: left promiscuous mode [ 140.259329][ T5920] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 140.435017][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 140.437107][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 140.437138][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.437158][ T5920] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.437181][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 140.437202][ T5920] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 140.437238][ T5920] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 140.437260][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.442399][ T5920] usb 3-1: config 0 descriptor?? [ 140.649511][ T5796] Bluetooth: hci5: urb ffff888029505900 submission failed (90) [ 140.719098][ T6949] evm: overlay not supported [ 140.727994][ T5920] usb 3-1: USB disconnect, device number 12 [ 140.809352][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.981850][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 141.045079][ T43] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 141.045108][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.045126][ T43] usb 5-1: Product: syz [ 141.045139][ T43] usb 5-1: Manufacturer: syz [ 141.045153][ T43] usb 5-1: SerialNumber: syz [ 141.330196][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.411957][ T43] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 143.429537][ T43] usb 5-1: USB disconnect, device number 9 [ 143.868005][ T6986] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.996725][ T6996] netlink: 52 bytes leftover after parsing attributes in process `syz.1.427'. [ 144.048604][ T7000] netlink: 52 bytes leftover after parsing attributes in process `syz.1.427'. [ 144.409410][ T5865] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 144.582498][ T5865] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.582534][ T5865] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.582572][ T5865] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.582594][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.588778][ T7004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.627848][ T5865] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.709662][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'. [ 145.085536][ T7034] loop3: detected capacity change from 0 to 7 [ 145.138345][ T5865] usb 1-1: USB disconnect, device number 11 [ 145.177381][ T5813] loop3: [POWERTEC] p1 [ 145.188817][ T5813] loop3: p1 start 1651864365 is beyond EOD, truncated [ 145.260957][ T7034] loop3: [POWERTEC] p1 [ 145.261197][ T7034] loop3: p1 start 1651864365 is beyond EOD, truncated [ 147.989662][ T5798] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 148.265619][ T5798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.265645][ T5798] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.265681][ T5798] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.265703][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.305739][ T5879] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 148.399571][ T7112] fuse: Bad value for 'fd' [ 148.427627][ T5798] usb 4-1: config 0 descriptor?? [ 148.581550][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 149.073291][ T31] usb 4-1: USB disconnect, device number 6 [ 150.269674][ T809] IPVS: starting estimator thread 0... [ 150.361446][ T7142] IPVS: using max 9 ests per chain, 21600 per kthread [ 151.074333][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 151.075263][ T5879] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 151.075283][ T5879] usb 5-1: can't read configurations, error -71 [ 151.459321][ T5879] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 151.916709][ T5879] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.916726][ T5879] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.916738][ T5879] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.958808][ T5879] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 151.958835][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.958855][ T5879] usb 5-1: Product: syz [ 151.958868][ T5879] usb 5-1: Manufacturer: syz [ 151.958882][ T5879] usb 5-1: SerialNumber: syz [ 152.035485][ T5879] usblp0: Disabling reads from problematic bidirectional printer [ 152.271125][ T5879] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 152.524633][ T5879] usb 5-1: USB disconnect, device number 11 [ 152.576889][ T7149] usblp0: removed [ 152.679320][ T7161] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 152.767951][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.776958][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.782893][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.789142][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.793628][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.848133][ T1435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.023180][ T7169] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.223229][ T1435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.419433][ T5798] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 153.482368][ T1435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.583272][ T5798] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.583301][ T5798] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.583323][ T5798] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.597803][ T5798] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 153.597831][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 153.597850][ T5798] usb 5-1: Product: syz [ 153.597863][ T5798] usb 5-1: Manufacturer: syz [ 153.597876][ T5798] usb 5-1: SerialNumber: syz [ 153.864955][ T1435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.910661][ T5798] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 153.920243][ T5879] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 154.106034][ T5865] usb 5-1: USB disconnect, device number 12 [ 154.123864][ T5865] usblp0: removed [ 154.124882][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.124905][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.128208][ T5879] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.128234][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.128254][ T5879] usb 3-1: SerialNumber: syz [ 154.282614][ T7164] chnl_net:caif_netlink_parms(): no params data found [ 154.439602][ T5879] usb 3-1: 0:2 : does not exist [ 154.439686][ T5879] usb 3-1: unit 5: unexpected type 0x09 [ 154.525486][ T5879] usb 3-1: USB disconnect, device number 13 [ 154.592814][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.649642][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.651597][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.651781][ T7164] bridge_slave_0: entered allmulticast mode [ 154.654236][ T7164] bridge_slave_0: entered promiscuous mode [ 154.656888][ T1435] bridge_slave_1: left allmulticast mode [ 154.657007][ T1435] bridge_slave_1: left promiscuous mode [ 154.703730][ T1435] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.859661][ T5796] Bluetooth: hci2: command tx timeout [ 154.938106][ T1435] bridge_slave_0: left allmulticast mode [ 154.938134][ T1435] bridge_slave_0: left promiscuous mode [ 154.938389][ T1435] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.998360][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'. [ 156.883132][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 156.883203][ T36] audit: type=1326 audit(1774216543.217:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7218 comm="syz.4.510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55e58fc799 code=0x0 [ 156.941461][ T5116] Bluetooth: hci2: command tx timeout [ 156.998632][ T5796] block nbd4: Receive control failed (result -32) [ 157.007989][ T7221] block nbd4: shutting down sockets [ 157.270461][ T1435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.331866][ T1435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.352265][ T1435] bond0 (unregistering): Released all slaves [ 157.363902][ T1435] bond1 (unregistering): Released all slaves [ 157.422846][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.422963][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.423173][ T7164] bridge_slave_1: entered allmulticast mode [ 157.425898][ T7164] bridge_slave_1: entered promiscuous mode [ 158.912814][ T7164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.922489][ T7164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.025621][ T5796] Bluetooth: hci2: command tx timeout [ 159.053884][ T7164] team0: Port device team_slave_0 added [ 159.057507][ T7164] team0: Port device team_slave_1 added [ 159.059364][ T5999] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 159.141909][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.141925][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.141947][ T7164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.144111][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.144124][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.144148][ T7164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.219777][ T5999] usb 3-1: Using ep0 maxpacket: 16 [ 159.223169][ T5999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.223198][ T5999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.223219][ T5999] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.223258][ T5999] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.223280][ T5999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.274131][ T5999] usb 3-1: config 0 descriptor?? [ 159.498800][ T7164] hsr_slave_0: entered promiscuous mode [ 159.508478][ T7164] hsr_slave_1: entered promiscuous mode [ 159.517419][ T7164] debugfs: 'hsr0' already exists in 'hsr' [ 159.517458][ T7164] Cannot create hsr debugfs directory [ 159.696691][ T5999] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 159.707581][ T5999] hid_parser_main: 6 callbacks suppressed [ 159.707602][ T5999] microsoft 0003:045E:07DA.0007: unknown main item tag 0x4 [ 159.732320][ T5999] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 159.732359][ T5999] microsoft 0003:045E:07DA.0007: no inputs found [ 159.732373][ T5999] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 159.986941][ T5865] usb 3-1: USB disconnect, device number 14 [ 160.076787][ T7254] fido_id[7254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 160.470194][ T5872] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 160.765067][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 160.949127][ T5872] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 160.951969][ T5872] usb 5-1: config 2 has no interface number 0 [ 160.953473][ T5872] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 160.954839][ T5872] usb 5-1: config 2 interface 88 has no altsetting 0 [ 161.110484][ T5796] Bluetooth: hci2: command tx timeout [ 161.139480][ T5872] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 161.139509][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.139527][ T5872] usb 5-1: Product: syz [ 161.139540][ T5872] usb 5-1: Manufacturer: syz [ 161.139553][ T5872] usb 5-1: SerialNumber: syz [ 161.186873][ T7260] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.417415][ T7260] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.501712][ T7276] netlink: 'syz.2.524': attribute type 4 has an invalid length. [ 161.730477][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.879392][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 161.882800][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.882822][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.885957][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.885974][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.885984][ T43] usb 4-1: Product: syz [ 161.885992][ T43] usb 4-1: Manufacturer: syz [ 161.885999][ T43] usb 4-1: SerialNumber: syz [ 162.180360][ T43] usb 4-1: 0:2 : does not exist [ 162.217908][ T43] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 162.439267][ T5872] asix 5-1:2.88 (unnamed net_device) (uninitialized): invalid hw address, using random [ 162.556948][ T43] usb 4-1: USB disconnect, device number 7 [ 162.642258][ T5872] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 162.642287][ T5872] asix 5-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 162.642570][ T5872] asix 5-1:2.88: probe with driver asix failed with error -71 [ 162.720520][ T5872] usb 5-1: USB disconnect, device number 13 [ 162.801159][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.028580][ T43] kernel write not supported for file /amidi2 (pid: 43 comm: kworker/1:1) [ 163.419493][ T1435] hsr_slave_0: left promiscuous mode [ 163.459516][ T1435] hsr_slave_1: left promiscuous mode [ 163.460761][ T1435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.460832][ T1435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.506290][ T1435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.506315][ T1435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.678809][ T1435] veth1_macvtap: left promiscuous mode [ 163.679068][ T1435] veth0_macvtap: left promiscuous mode [ 163.684146][ T1435] veth1_vlan: left promiscuous mode [ 163.684516][ T1435] veth0_vlan: left promiscuous mode [ 165.020113][ T1435] team0 (unregistering): Port device team_slave_1 removed [ 165.069836][ T1435] team0 (unregistering): Port device team_slave_0 removed [ 165.922146][ T7164] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.004923][ T5879] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.154257][ T5879] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 166.154288][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.154308][ T5879] usb 3-1: Product: syz [ 166.154322][ T5879] usb 3-1: Manufacturer: syz [ 166.154336][ T5879] usb 3-1: SerialNumber: syz [ 166.202274][ T7164] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.331238][ T7164] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.417321][ T7164] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.623267][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 166.623331][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 167.425708][ T7164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.531439][ T7164] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.583806][ T1457] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.584917][ T1457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.330753][ T7383] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 168.330774][ T7383] netlink: 224 bytes leftover after parsing attributes in process `syz.4.555'. [ 168.503277][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.504155][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.718179][ T7380] syz.1.554 (7380) used greatest stack depth: 16920 bytes left [ 168.747793][ T7392] syzkaller1: entered promiscuous mode [ 168.747815][ T7392] syzkaller1: entered allmulticast mode [ 168.766409][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 168.768962][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 168.779576][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 168.779629][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 168.781075][ T5879] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 168.847158][ T5879] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 168.874189][ T5879] usb 3-1: USB disconnect, device number 15 [ 170.749206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 171.284434][ T7164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.659395][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.316983][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 173.317016][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 173.621629][ T7164] veth0_vlan: entered promiscuous mode [ 173.636967][ T7164] veth1_vlan: entered promiscuous mode [ 173.787890][ T7164] veth0_macvtap: entered promiscuous mode [ 173.812129][ T7164] veth1_macvtap: entered promiscuous mode [ 173.870841][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.887929][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.937104][ T1490] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.938224][ T1490] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.938630][ T1490] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.938866][ T1490] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.413769][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.414724][ T31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 174.414757][ T31] usb 4-1: can't read configurations, error -71 [ 174.517179][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.517199][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.518996][ T36] audit: type=1326 audit(1774216560.847:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7484 comm="syz.1.574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f609552c799 code=0x0 [ 174.611873][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.611893][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.870547][ T43] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 175.811285][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.812322][ T43] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 175.812358][ T43] usb 3-1: can't read configurations, error -71 [ 176.006522][ T7507] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.578'. [ 176.062034][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 176.273950][ T7514] syz.4.579 (7514) used greatest stack depth: 15688 bytes left [ 181.209355][ T809] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 181.369550][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 181.386247][ T809] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 181.386275][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.386295][ T809] usb 3-1: Product: syz [ 181.386309][ T809] usb 3-1: Manufacturer: syz [ 181.386323][ T809] usb 3-1: SerialNumber: syz [ 181.408518][ T809] usb 3-1: config 0 descriptor?? [ 181.432580][ T809] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 183.215114][ T809] gspca_ov534_9: reg_r err -71 [ 183.469288][ T809] gspca_ov534_9: Unknown sensor 0000 [ 183.469383][ T809] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 183.479105][ T809] usb 3-1: USB disconnect, device number 18 [ 183.549431][ T5920] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 183.724816][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.724850][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.724898][ T5920] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 183.724921][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.794551][ T5920] usb 4-1: config 0 descriptor?? [ 185.277846][ T5920] hid-led 0003:27B8:01ED.0008: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 186.275901][ T5920] hid-led 0003:27B8:01ED.0008: ThingM blink(1) initialized [ 186.314900][ T5920] usb 4-1: USB disconnect, device number 10 [ 186.371360][ T7634] fido_id[7634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 186.592808][ T31] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 186.757739][ T31] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.425794][ T7661] netlink: 17780 bytes leftover after parsing attributes in process `syz.5.619'. [ 189.093859][ T36] audit: type=1326 audit(1774216575.427:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7669 comm="syz.2.622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f1448c799 code=0x0 [ 193.952333][ T7711] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 194.167889][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.167953][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.344700][ T7728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.735646][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 196.735687][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 196.735713][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 197.739542][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 202.534666][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 202.688932][ T36] audit: type=1326 audit(1774216589.017:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.4.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55e58fc799 code=0x0 [ 203.326088][ T7819] block nbd4: shutting down sockets [ 203.439347][ T5858] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 204.841345][ T5858] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 204.841376][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.841395][ T5858] usb 3-1: Product: syz [ 204.841409][ T5858] usb 3-1: Manufacturer: syz [ 204.841423][ T5858] usb 3-1: SerialNumber: syz [ 205.789763][ T5858] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 205.789824][ T5858] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 206.054725][ T36] audit: type=1326 audit(1774216592.377:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609552c799 code=0x7ffc0000 [ 206.054790][ T36] audit: type=1326 audit(1774216592.387:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f609552c799 code=0x7ffc0000 [ 206.058234][ T36] audit: type=1326 audit(1774216592.387:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609552c799 code=0x7ffc0000 [ 206.185057][ T36] audit: type=1326 audit(1774216592.387:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609552c799 code=0x7ffc0000 [ 206.205547][ T36] audit: type=1326 audit(1774216592.537:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609552c799 code=0x7ffc0000 [ 206.208648][ T36] audit: type=1326 audit(1774216592.537:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609552c799 code=0x7ffc0000 [ 206.255794][ T36] audit: type=1326 audit(1774216592.567:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f609552c799 code=0x7ffc0000 [ 206.256749][ T36] audit: type=1326 audit(1774216592.587:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609552c799 code=0x7ffc0000 [ 206.257073][ T36] audit: type=1326 audit(1774216592.587:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609552c799 code=0x7ffc0000 [ 207.720826][ T5858] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 207.720887][ T5858] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 207.723054][ T5858] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 207.727845][ T7881] bridge_slave_0: left allmulticast mode [ 207.727872][ T7881] bridge_slave_0: left promiscuous mode [ 207.732386][ T7881] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.950214][ T5858] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 207.970062][ T5858] usb 3-1: USB disconnect, device number 19 [ 208.010257][ T7881] bridge_slave_1: left allmulticast mode [ 208.010286][ T7881] bridge_slave_1: left promiscuous mode [ 208.010515][ T7881] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.240286][ T7897] kAFS: No cell specified [ 208.846153][ T20] ------------[ cut here ]------------ [ 208.846165][ T20] ODEBUG: free active (active state 0) object: ffff88805baaba78 object type: timer_list hint: br_ip6_multicast_port_query_expired+0x0/0x380 [ 208.846227][ T20] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: rcuc/0/20 [ 208.846259][ T20] Modules linked in: [ 208.846290][ T20] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 208.846310][ T20] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.846320][ T20] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 208.846344][ T20] Code: 89 44 24 20 e8 57 34 82 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 78 a6 8b 48 c7 c2 c0 7d a6 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 208.846360][ T20] RSP: 0018:ffffc90000197a90 EFLAGS: 00010246 [ 208.846375][ T20] RAX: ffffffff89f26b20 RBX: ffffffff998410e8 RCX: 0000000000000000 [ 208.846388][ T20] RDX: ffffffff8ba67dc0 RSI: ffffffff8ba67840 RDI: ffffffff8f7495c0 [ 208.846400][ T20] RBP: ffffffff8b4f58a0 R08: ffff88805baaba78 R09: ffffffff8b4f6be0 [ 208.846412][ T20] R10: dffffc0000000000 R11: ffffffff81b0b2a0 R12: ffff88805baabc00 [ 208.846424][ T20] R13: ffffffff8f7495c0 R14: ffff88805baab000 R15: ffff88805baaba78 [ 208.846437][ T20] FS: 0000000000000000(0000) GS:ffff888126339000(0000) knlGS:0000000000000000 [ 208.846452][ T20] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.846463][ T20] CR2: 00005568e5c01030 CR3: 000000002a424000 CR4: 00000000003526f0 [ 208.846485][ T20] Call Trace: [ 208.846492][ T20] [ 208.846499][ T20] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 208.846558][ T20] kfree+0x13a/0x6c0 [ 208.846584][ T20] ? kobject_put+0x228/0x560 [ 208.846608][ T20] kobject_put+0x228/0x560 [ 208.846630][ T20] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 208.846654][ T20] rcu_cpu_kthread+0x99e/0x1470 [ 208.846681][ T20] ? rcu_cpu_kthread+0x205/0x1470 [ 208.846709][ T20] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 208.846727][ T20] ? schedule+0x90/0x360 [ 208.846760][ T20] ? smpboot_thread_fn+0x4d/0xa50 [ 208.846786][ T20] smpboot_thread_fn+0x541/0xa50 [ 208.846813][ T20] ? smpboot_thread_fn+0x4d/0xa50 [ 208.846846][ T20] kthread+0x388/0x470 [ 208.846866][ T20] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 208.846899][ T20] ? __pfx_kthread+0x10/0x10 [ 208.846919][ T20] ret_from_fork+0x51e/0xb90 [ 208.846947][ T20] ? __pfx_ret_from_fork+0x10/0x10 [ 208.846969][ T20] ? __switch_to+0xc7d/0x1450 [ 208.846993][ T20] ? __pfx_kthread+0x10/0x10 [ 208.847014][ T20] ret_from_fork_asm+0x1a/0x30 [ 208.847042][ T20] [ 208.847054][ T20] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 208.847063][ T20] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 208.847075][ T20] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.847081][ T20] Call Trace: [ 208.847085][ T20] [ 208.847089][ T20] vpanic+0x56c/0xa60 [ 208.847105][ T20] ? __pfx__printk+0x10/0x10 [ 208.847116][ T20] ? __pfx_vpanic+0x10/0x10 [ 208.847129][ T20] ? is_bpf_text_address+0x292/0x2b0 [ 208.847144][ T20] ? is_bpf_text_address+0x26/0x2b0 [ 208.847161][ T20] panic+0xc5/0xd0 [ 208.847176][ T20] ? __pfx_panic+0x10/0x10 [ 208.847195][ T20] ? ret_from_fork_asm+0x1a/0x30 [ 208.847207][ T20] __warn+0x315/0x4f0 [ 208.847221][ T20] ? debug_check_no_obj_freed+0x405/0x550 [ 208.847235][ T20] ? debug_check_no_obj_freed+0x405/0x550 [ 208.847248][ T20] __report_bug+0x29a/0x540 [ 208.847266][ T20] ? debug_check_no_obj_freed+0x405/0x550 [ 208.847279][ T20] ? __pfx___report_bug+0x10/0x10 [ 208.847299][ T20] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 208.847317][ T20] report_bug_entry+0x19a/0x290 [ 208.847332][ T20] ? debug_check_no_obj_freed+0x44a/0x550 [ 208.847344][ T20] ? debug_check_no_obj_freed+0x44f/0x550 [ 208.847355][ T20] handle_bug+0xce/0x200 [ 208.847367][ T20] exc_invalid_op+0x1a/0x50 [ 208.847378][ T20] asm_exc_invalid_op+0x1a/0x20 [ 208.847391][ T20] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 208.847410][ T20] Code: 89 44 24 20 e8 57 34 82 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 78 a6 8b 48 c7 c2 c0 7d a6 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 208.847418][ T20] RSP: 0018:ffffc90000197a90 EFLAGS: 00010246 [ 208.847427][ T20] RAX: ffffffff89f26b20 RBX: ffffffff998410e8 RCX: 0000000000000000 [ 208.847435][ T20] RDX: ffffffff8ba67dc0 RSI: ffffffff8ba67840 RDI: ffffffff8f7495c0 [ 208.847442][ T20] RBP: ffffffff8b4f58a0 R08: ffff88805baaba78 R09: ffffffff8b4f6be0 [ 208.847449][ T20] R10: dffffc0000000000 R11: ffffffff81b0b2a0 R12: ffff88805baabc00 [ 208.847456][ T20] R13: ffffffff8f7495c0 R14: ffff88805baab000 R15: ffff88805baaba78 [ 208.847466][ T20] ? __pfx_timer_debug_hint+0x10/0x10 [ 208.847483][ T20] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 208.847502][ T20] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 208.847524][ T20] kfree+0x13a/0x6c0 [ 208.847538][ T20] ? kobject_put+0x228/0x560 [ 208.847551][ T20] kobject_put+0x228/0x560 [ 208.847562][ T20] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 208.847578][ T20] rcu_cpu_kthread+0x99e/0x1470 [ 208.847602][ T20] ? rcu_cpu_kthread+0x205/0x1470 [ 208.847630][ T20] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 208.847650][ T20] ? schedule+0x90/0x360 [ 208.847680][ T20] ? smpboot_thread_fn+0x4d/0xa50 [ 208.847707][ T20] smpboot_thread_fn+0x541/0xa50 [ 208.847726][ T20] ? smpboot_thread_fn+0x4d/0xa50 [ 208.847745][ T20] kthread+0x388/0x470 [ 208.847756][ T20] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 208.847771][ T20] ? __pfx_kthread+0x10/0x10 [ 208.847782][ T20] ret_from_fork+0x51e/0xb90 [ 208.847798][ T20] ? __pfx_ret_from_fork+0x10/0x10 [ 208.847811][ T20] ? __switch_to+0xc7d/0x1450 [ 208.847825][ T20] ? __pfx_kthread+0x10/0x10 [ 208.847837][ T20] ret_from_fork_asm+0x1a/0x30 [ 208.847855][ T20] [ 208.848017][ T20] Kernel Offset: disabled