last executing test programs: 1m38.051441856s ago: executing program 1 (id=556): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x34000, 0x0) 1m37.911632048s ago: executing program 1 (id=558): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x54) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000040)={{@host, 0x3}, 0x2, 0x80000001, 0x4, 0x10001}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) truncate(0x0, 0x0) mlockall(0x2) r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) shmctl$SHM_UNLOCK(r6, 0xc) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x6) r7 = openat$fb1(0xffffff9c, &(0x7f0000000dc0), 0x80, 0x0) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) 1m36.50248589s ago: executing program 1 (id=563): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 1m36.17171825s ago: executing program 1 (id=565): socket$alg(0x26, 0x5, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x40003) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x22}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000000)='4\x00', 0xfffffffffffffefb) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$vcsn(&(0x7f0000000140), 0x49, 0x40301) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000070601020000000000020500010007000000050001000700000005000100070000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0xc890}, 0x2400c000) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x498, 0x0, 0x1, 0x164}, &(0x7f0000000dc0), &(0x7f00000001c0)) 1m35.94157952s ago: executing program 1 (id=569): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0xf, 0x4, 0x3]}, &(0x7f00000001c0)=0x50) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x40, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x0, 0x1, {0x8, 0x1}, {0x53, 0xfffe}, @period={0x5d, 0x8e, 0x5, 0x9, 0x101, {0x2, 0x9201, 0x5}, 0x0, 0x0}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700e0090500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1m35.461186293s ago: executing program 1 (id=570): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000001c0)='./file0\x00', 0x4a) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x3}, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048841}, 0x40000880) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x401, 0xfffffffd}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x340008e0}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="38000000e6c5feffe2d63f1f1c61b24c2d8ffe481b9563507766f4165118a085fa622f7c24ffa1e771d5a81e7c5ba1e1784377a9a026b4d874cda27aad539d138cd847e73eee456e006862c7d915433541ff7f1f72428d0d5a5ca3ab7c8b996aebc59660c61dda9375536b1d060d4ebd05c6173e8d4a8c1b6a3d859e746bc5cbed60224980658603d3b4fb3adeaceb4c00", @ANYRES16=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) close(r1) bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r7, 0x4) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="f5647074d001"]) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r9, &(0x7f00000001c0)='B', 0x1) close(r9) close(r7) umount2(&(0x7f0000000040)='./file0\x00', 0xc) openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1m35.425267409s ago: executing program 32 (id=570): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000001c0)='./file0\x00', 0x4a) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x3}, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048841}, 0x40000880) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x401, 0xfffffffd}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x340008e0}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="38000000e6c5feffe2d63f1f1c61b24c2d8ffe481b9563507766f4165118a085fa622f7c24ffa1e771d5a81e7c5ba1e1784377a9a026b4d874cda27aad539d138cd847e73eee456e006862c7d915433541ff7f1f72428d0d5a5ca3ab7c8b996aebc59660c61dda9375536b1d060d4ebd05c6173e8d4a8c1b6a3d859e746bc5cbed60224980658603d3b4fb3adeaceb4c00", @ANYRES16=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) close(r1) bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r7, 0x4) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="f5647074d001"]) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r9, &(0x7f00000001c0)='B', 0x1) close(r9) close(r7) umount2(&(0x7f0000000040)='./file0\x00', 0xc) openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) 10.794446358s ago: executing program 3 (id=871): socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005780)=@newchain={0x3780, 0x64, 0x10, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xfff1, 0xd}, {0xf, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_RATE={0x6, 0x5, {0x10, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x41}, @filter_kind_options=@f_cgroup={{0xb}, {0x2da8, 0x2, [@TCA_CGROUP_POLICE={0xc3c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0xfffffffa, 0x0, 0x9, 0x4, 0x9, 0x2d99, 0xa3, 0x2, 0x400, 0x10, 0x1, 0x5, 0x4566, 0x9, 0x6, 0x3, 0xe4b, 0x3, 0xfffffff7, 0x80, 0x5, 0xe4e1, 0x7f, 0x1, 0x2, 0x9, 0x2, 0x8, 0x0, 0xffffffff, 0x0, 0x7ff, 0x8000000, 0xfff, 0x9, 0x800, 0x5, 0x5, 0xffffffff, 0x3, 0x200, 0x0, 0xfffffff9, 0x8, 0x8, 0x81, 0x364, 0xfffffff8, 0x9, 0x80000001, 0x2, 0xe7e, 0x7, 0x6, 0x40, 0x9, 0xd9d, 0x2, 0x40000000, 0x9, 0xaad, 0x4, 0x40, 0x9, 0x5ba, 0x8, 0x5, 0x0, 0x9, 0x100, 0x3, 0x3, 0x80, 0x2295, 0xf, 0x3ff, 0x5, 0x7, 0x2, 0x4, 0x0, 0x8, 0x10000, 0x3ff, 0x5, 0x7, 0x1000, 0x9452, 0x2, 0xfffff000, 0xee8, 0x0, 0x8, 0x27, 0x5, 0x8000, 0xe, 0x9, 0x5, 0x6, 0x80000000, 0x5e, 0x7, 0x8, 0x2, 0x80000000, 0x2, 0x3, 0xd77, 0x1ff, 0xfffffffe, 0x0, 0x7, 0x7fff, 0xd6ba, 0xfff, 0x9, 0x7, 0x401, 0x1, 0x4e, 0x9, 0x2, 0x4, 0x0, 0x8, 0x1, 0xff, 0xffffffff, 0x3, 0x1, 0x1000000, 0x3, 0xa7f1, 0xfffffff7, 0x70c30d26, 0x6, 0x6, 0x2, 0x7, 0x250f90b3, 0x9, 0x38, 0x6, 0x0, 0x2, 0x3, 0x7, 0x9, 0x6d2, 0x7, 0x4, 0xb, 0x1, 0x1, 0x6e0a800, 0x100, 0x9, 0x12d6b12a, 0x7, 0x2, 0x1, 0x8, 0x101, 0x8, 0x94, 0x401, 0xe0, 0x6, 0xfffffffd, 0x7, 0x5, 0x5, 0x3, 0x5, 0x81, 0x6, 0x4, 0x800, 0x9, 0xe, 0xfffffffe, 0xe, 0xfffffff7, 0x9, 0x7, 0x800, 0x1, 0x10000, 0x3, 0xffff, 0x3, 0x683e, 0x5, 0x7, 0xfffffff8, 0x6, 0xf83c, 0x0, 0x2, 0x4, 0x18b4, 0x3, 0x6d2f, 0x2, 0xb, 0x6, 0x2d, 0xb, 0x1, 0xfffffffa, 0x4, 0x6b6, 0x8, 0x6, 0x8206, 0x0, 0xfffffff7, 0x3, 0xf738, 0xfff, 0xc, 0x7, 0x1, 0x0, 0x10001, 0x8, 0x79800000, 0x8, 0x491, 0x10, 0x2d, 0xab7, 0xa0a, 0x4, 0x0, 0x7, 0x7, 0x40000000, 0x8, 0xfffffe18, 0x2, 0x8, 0x2, 0x6, 0x0, 0x7, 0x81, 0x0, 0x0, 0x9, 0xfffffffd, 0x8, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4a6, 0x8, 0x3, 0x0, 0xfb73, 0xffff, 0x2, 0x1, 0x7, 0xe376, 0xd, 0x8000000, 0x5, 0x9, 0x737, 0x58e5be59, 0x7, 0xb1b, 0xde8, 0x6, 0x1ff, 0x9, 0xbd, 0x9, 0x2, 0x4000, 0x3, 0x5, 0x7, 0x7, 0xd5, 0x7, 0x8, 0x60, 0x6, 0xfffffff8, 0x9, 0xc, 0x8, 0xb, 0x2, 0x77, 0x2, 0x200, 0x800, 0x9, 0xfffffe01, 0xa940000, 0xd5d, 0x4, 0x9, 0x1, 0x1, 0x5, 0xffffff7a, 0x7632c089, 0x1, 0x7f, 0x4, 0x7fffffff, 0x67, 0x8, 0x57, 0x6, 0xb9, 0x100, 0x7ec5, 0x2, 0x7, 0x4c, 0x80000001, 0xfffffff8, 0x1, 0x3, 0x5, 0x0, 0xbab, 0x3, 0x5, 0x5, 0x7, 0x4, 0x8, 0xbf, 0xffffffff, 0x7ff, 0x8, 0x2, 0x1, 0x9a8, 0x300000, 0x6, 0x4, 0x7fff, 0x6, 0x1, 0x200, 0x4, 0x5, 0x9, 0x0, 0x79, 0x5, 0x4, 0x2, 0xb, 0x81, 0x0, 0x80000000, 0x8f66, 0x100, 0x1, 0x2f, 0x7aae, 0x2, 0x4, 0x60000, 0x9, 0xccf, 0x5, 0xfffffffc, 0x1, 0xf7c5, 0x0, 0x9, 0x8000, 0x1, 0x8, 0x0, 0x2, 0x80000001, 0x8000, 0xac, 0x7, 0x4, 0x6, 0xb37a, 0x800, 0x1, 0x800, 0x98c7, 0x10001, 0x40, 0x5, 0x5, 0x5, 0x6, 0x1, 0x2, 0x80, 0x9, 0x9, 0x1000, 0x7, 0x1, 0x101, 0x4, 0x1, 0x2, 0x7fff, 0x3, 0x1800000, 0x2, 0x8, 0xffffffff, 0x7f, 0x9de, 0x4, 0x0, 0x80000001, 0x2, 0x8, 0x3, 0x1, 0x6, 0x5, 0xfffffff7, 0x81, 0x2, 0xffff, 0x1, 0xff, 0x2, 0x5, 0x9, 0x28b, 0xc, 0x4, 0x7fffffff, 0x2, 0xd, 0xffff, 0x3, 0x10001, 0xa7ff, 0x95, 0xcc8c, 0xa, 0x2, 0x4, 0x100, 0x1, 0x8, 0xcc, 0x3, 0x71edf43c, 0x2, 0x4, 0x42, 0x0, 0x2, 0x80000001, 0x9, 0x200, 0x8000, 0x4, 0x101, 0xb0c3e24, 0x0, 0xfffffffc, 0x9, 0x0, 0x5, 0x2, 0x4, 0x3, 0x0, 0x4, 0xee1, 0x1, 0x1, 0x2, 0x1, 0x6, 0x6, 0x12, 0x80000001, 0xffffff27, 0x5b, 0x4, 0x64, 0x10, 0x1, 0xfffffff7, 0x1ff, 0x0, 0x6, 0x3, 0xf1, 0xb, 0x8000, 0x4, 0x3, 0x4, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}, @TCA_POLICE_RATE={0x404, 0x2, [0xce, 0xfffffc01, 0x2, 0x9, 0x8, 0x8, 0x2, 0x0, 0x9, 0x6, 0x7, 0x99ed, 0x7f, 0x40, 0x40, 0x6, 0x1, 0x80, 0x1, 0x2, 0x3, 0x24, 0x5, 0x3, 0xea9, 0x8000, 0xfffffffe, 0x6, 0x8, 0xffff, 0x4, 0xc, 0x0, 0x3, 0x2, 0x80, 0x2, 0x8, 0x9, 0x5, 0x6, 0x6, 0x7c, 0x86, 0x7, 0xfffffc01, 0x3, 0xc22, 0xb7, 0x7fff, 0x8001, 0x8, 0x2, 0x65, 0x4c, 0x2, 0x7fff, 0x7, 0x3, 0x0, 0x6, 0x1000, 0x0, 0xfffffff9, 0x4, 0x101, 0x3f4, 0x8, 0x5, 0x10000, 0x800, 0x3, 0x1, 0x8, 0x0, 0xfd, 0x81, 0x2, 0x3, 0x6, 0x0, 0x9, 0x7fffffff, 0x4, 0x3, 0x5, 0x2, 0x4, 0x6, 0x8, 0x3, 0x7f, 0xfffffffe, 0x2, 0x5, 0x5, 0x0, 0x8, 0x800, 0xc, 0x9, 0x5740, 0x7fff, 0x34ef, 0x8, 0x5, 0x7fff, 0xb760, 0x5, 0x0, 0x9, 0x4, 0x2f67, 0x6, 0xf69a, 0x4, 0x4, 0x3ff, 0x4, 0x8000, 0x7d34, 0xfffffff9, 0x6, 0x9, 0x81, 0xfffffffe, 0x4, 0x4, 0x3ff, 0x5, 0x97ea, 0x2, 0x5, 0x7fffffff, 0x7, 0x80000001, 0x4, 0xc53, 0x1, 0x2, 0x0, 0x9, 0x1, 0xfffffffe, 0x8, 0x7, 0x90, 0x9, 0x8, 0xffff, 0xf52, 0x6, 0x200, 0x5, 0x4, 0x2, 0x7, 0x7, 0xff, 0x0, 0x9, 0x8, 0xe1, 0x87, 0x3, 0x6d8, 0x2, 0x33ac0, 0x7fffffff, 0x3e, 0x4, 0x5, 0x5, 0xfffffff7, 0x9, 0x401, 0x0, 0x6, 0x5, 0x5, 0x7, 0x9, 0x5, 0x4, 0x23c, 0x1, 0x4, 0x7f, 0x74a9, 0xf3, 0x9, 0x5, 0xee, 0x2, 0x680, 0x6, 0xff, 0x8, 0x1, 0xf, 0x2, 0xfffffffa, 0x2, 0x0, 0xb3, 0x2, 0x3, 0x3, 0x8, 0x6, 0xfffffffe, 0x7, 0x8001, 0x7, 0x9, 0x8, 0x2d51, 0x5, 0x7, 0xff, 0x0, 0x80000001, 0x4, 0x65, 0xef, 0x6, 0x4, 0x7fffffff, 0x2, 0x5b, 0x5, 0x8, 0x90, 0xffff, 0x5, 0x80000001, 0x1670, 0x3417, 0x5, 0x6744082b, 0x100, 0x3, 0x92b2, 0x6, 0xd4, 0x8, 0x5, 0x100, 0x7f, 0x82c, 0x7, 0x43f, 0x3, 0x7fffffff, 0x0, 0xb]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x356}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbbdb}, @TCA_POLICE_RESULT={0x8}]}, @TCA_CGROUP_ACT={0xfd0, 0x1, [@m_pedit={0xfcc, 0x13, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x4, 0x44ca, 0x0, 0x6, 0x7fffffff}, 0x7, 0xb1, [{0x3, 0x7fffffff, 0x0, 0x6, 0x0, 0x446}, {0x12, 0xd, 0x9, 0xaace, 0x6}, {0x1, 0x7, 0x5, 0x2, 0x5, 0x3}, {0xaa, 0x10, 0x5, 0x80e, 0x1, 0xffff}, {0x2, 0x7373, 0x0, 0x0, 0x9, 0x1}, {0x9, 0x2, 0x2, 0x2, 0x3, 0x7}]}, [{0x76, 0x9, 0x6, 0x80000000, 0x1, 0x9}, {0x8000, 0x100, 0x7, 0xf, 0x7, 0xf7a}, {0x5, 0x7, 0x5, 0x2, 0x2, 0x400}, {0x1, 0x379, 0x0, 0x9, 0x3, 0x9}, {0xffffffff, 0x2, 0xffffffff, 0x80000000, 0x8, 0x10}, {0x5, 0x10, 0x3, 0x2, 0x9, 0x8}, {0xfff, 0x800, 0x8, 0x2, 0x2d, 0xffff3256}, {0x7, 0x8, 0x5, 0x5, 0x19d6, 0x5}, {0x56, 0xf3d, 0x3, 0x8000, 0x1, 0x7}, {0x7, 0x1, 0x641872de, 0x4d9, 0x2f6, 0x8}, {0x0, 0x9, 0xea, 0x2, 0x635e, 0x7}, {0xfffffffa, 0x7, 0x80, 0xfffffffa, 0xfffffff8, 0x4}, {0x2, 0x4, 0xf16, 0x6, 0x5, 0x7}, {0x2, 0xd10f, 0x9, 0x21, 0x3, 0x2}, {0x2, 0x3, 0xfffffff9, 0x76, 0x4, 0x6ce}, {0x80, 0x2ab, 0x0, 0x4, 0x0, 0x1}, {0x8, 0x100, 0x4, 0x6, 0x1, 0x401}, {0x4, 0x9, 0x6, 0x5b3, 0xc, 0x7f}, {0x6, 0x6, 0x1ff, 0x1, 0x1a8ea00, 0xfffffff4}, {0x9, 0x8, 0x3, 0x401, 0x0, 0x6}, {0x1ff, 0x1, 0x8, 0x0, 0x7, 0xe}, {0x3ff, 0x3, 0x5, 0x4, 0x7}, {0xffffffff, 0x7, 0x5, 0x401, 0x2, 0x6}, {0x6, 0xa2, 0x800, 0x1000, 0x3}, {0x9, 0xff, 0x9, 0x1b4, 0x1}, {0x6, 0x1ee77042, 0x1, 0x9, 0x7759, 0x9}, {0x7b25, 0x6, 0x86, 0x280000, 0xa, 0x18be}, {0x8, 0x20, 0x81, 0xfffffffa, 0x74e, 0x80000000}, {0x2020, 0x4, 0x1, 0xff, 0x2040, 0x80000000}, {0x6, 0x963d, 0xb, 0x6, 0x0, 0x2}, {0x8, 0x9, 0x2, 0x3, 0x427, 0x9}, {0x8, 0x7f, 0x10001, 0x1, 0x3, 0x767}, {0x2, 0x10001, 0x8, 0x4, 0x4e69, 0x3}, {0x6, 0x7, 0x9b7, 0xaac, 0x4, 0x10}, {0x9, 0x6, 0xfff, 0x7ff, 0x7, 0x3}, {0x751d969a, 0x8, 0x3, 0xc3e, 0x4, 0x4}, {0x2, 0x6dfe, 0xffff, 0x3c, 0x0, 0x2a4d}, {0x400, 0x7, 0xe9, 0x1, 0x1, 0x2}, {0xf36, 0x6, 0x9, 0x9, 0xfffff801, 0x4}, {0x1ff, 0x2, 0x2, 0xfa, 0xfffffff8, 0x5}, {0x6, 0x5, 0x7, 0x9, 0x5, 0xc}, {0xf, 0x8, 0x5, 0x8, 0xb, 0x3b058758}, {0xa1c, 0x7, 0x77b5, 0x2, 0x5, 0x10000}, {0x5, 0xff, 0x8946, 0x2, 0x5, 0xe2c}, {0x2, 0x2, 0x1, 0x2, 0x3, 0x2}, {0x23, 0x10000, 0x7572, 0x2, 0x6, 0x9}, {0x3, 0xfffffffb, 0x9, 0xfffffffb, 0x4, 0x8001}, {0x1, 0x4, 0x6, 0x2094, 0x200, 0x40}, {0x2, 0x3, 0x2, 0x5, 0xc5a, 0x3}, {0xffffffff, 0x3, 0x7, 0x4, 0x3ff, 0x9}, {0x7, 0xffff865e, 0x8, 0xdba9, 0x1, 0xffffffff}, {0x0, 0x3, 0x81, 0x3, 0x5, 0xc}, {0x100, 0x7, 0x7d, 0x98e, 0x7, 0xffff7fff}, {0x4, 0x0, 0x1, 0x8, 0x10001, 0x1ff}, {0x6, 0x4, 0x8, 0xa, 0x4, 0x10000}, {0x7, 0x7a, 0x3ff, 0x4, 0x200, 0x2}, {0x8001, 0x7, 0xfde9, 0x6, 0x9, 0x5}, {0x4, 0x4, 0x5, 0x7, 0xc5, 0x9}, {0xc247, 0xfffffffb, 0x7, 0x4, 0x40, 0x8}, {0x6, 0xb3, 0x8, 0xffff, 0x8a, 0xff}, {0x401, 0x7f, 0x18000, 0x3, 0x100}, {0x3, 0x6, 0x2, 0x400000, 0x9, 0x4}, {0x1200, 0x800, 0x8, 0x0, 0x81, 0x2}, {0x8, 0x320, 0x2, 0x6, 0x4, 0x90}, {0x6, 0x7, 0x1000, 0x9, 0xe, 0x7ff}, {0x1, 0x81, 0x9, 0x9, 0x3, 0x6}, {0x5, 0xc34, 0x4, 0x0, 0x97ae, 0x3e55}, {0x1000, 0x3ff, 0x4, 0xf, 0x0, 0x8}, {0xa, 0x3, 0x7ff, 0x0, 0xba9, 0x2}, {0x73, 0x5, 0x0, 0xcac, 0x1, 0xb}, {0xc06, 0xb9, 0x0, 0x1ff, 0x3, 0x7fffffff}, {0x800, 0x8, 0x9, 0xfffffff7, 0xfa, 0x7}, {0x5, 0x7, 0x7, 0x8, 0xffffffff, 0xdd}, {0x8, 0xffff, 0x1, 0x2, 0x2, 0xb1c1a61}, {0xe, 0x1, 0x9, 0x5, 0x7, 0x10}, {0x3, 0x7f, 0x5, 0x7, 0x3, 0x4}, {0x3, 0x6, 0xc4f, 0x4, 0x78a, 0x200}, {0x1000, 0x3, 0x725, 0x8, 0x8}, {0x8, 0x1, 0x0, 0x81, 0x101, 0xfffffff9}, {0x9, 0x5a9e, 0x0, 0xdf, 0x7, 0x10}, {0x1, 0x2, 0x2, 0x8, 0x1, 0x3}, {0x3, 0x4, 0x1, 0x2, 0x3, 0x1}, {0x1, 0xffff, 0x7, 0x400, 0x9, 0xe0000}, {0x2, 0x7, 0x8, 0x3, 0x400, 0x10}, {0x0, 0x1, 0x9, 0x6, 0x8}, {0x9, 0x2, 0x100, 0x7, 0xd, 0x6}, {0x8001, 0xd, 0x7ff, 0x3, 0x9, 0x1}, {0x401, 0xa7b4, 0x37, 0x7, 0x76, 0xd9}, {0x101, 0xe, 0x4, 0x0, 0x826, 0x4}, {0x0, 0x200, 0x6, 0x9, 0x0, 0x8001}, {0x7, 0x100, 0x6, 0x401, 0x3, 0xb1}, {0x1, 0x800, 0x4, 0xc, 0x1000, 0x8}, {0x7, 0x0, 0x5, 0x7, 0x84, 0x4}, {0x0, 0x0, 0xfffffffc, 0x6, 0x1, 0xe84}, {0x0, 0x820, 0x5, 0x8, 0x1cce6089, 0xff5}, {0x6, 0x6, 0xe5e7, 0xd, 0x400, 0x7}, {0x41a, 0x3ff, 0x101, 0x1, 0xa0eb, 0x3}, {0x5, 0x4, 0x7, 0xfffffffa, 0xa90d, 0x8}, {0x4, 0x6, 0x80, 0x7, 0x20000000, 0x7}, {0x1000, 0x4, 0x1f4, 0xfff, 0x9, 0x2}, {0x8, 0x401, 0x4, 0x5, 0x3f, 0x3}, {0x7, 0x4, 0xd2, 0x9, 0x2, 0xa7c}, {0xfffffffb, 0x3, 0x5, 0x8, 0x2, 0x4}, {0x987, 0x7f, 0x6, 0x8, 0x9d36, 0x8}, {0x0, 0x0, 0x5, 0x303, 0x9, 0x9}, {0x34f8, 0x8000, 0x5, 0x101, 0x1, 0x9}, {0x1, 0x101, 0x2, 0x3, 0x5, 0x789}, {0x7, 0x3, 0x5, 0x6, 0x0, 0x5}, {0x41, 0x400, 0x2, 0x6, 0x3, 0x2}, {0x0, 0x2, 0x0, 0x6, 0x1, 0xa4d}, {0x1, 0x93, 0x0, 0x5, 0x9, 0x1}, {0x0, 0x800, 0x8, 0x401, 0x6963, 0x4}, {0x400, 0x5, 0xd, 0xe, 0x8000}, {0x60000000, 0xffffffff, 0x2, 0x5, 0x4, 0x8}, {0x8, 0xe5e6, 0xffff51f3, 0x7, 0x8, 0x3}, {0x4, 0x2, 0x8, 0xffffffff, 0x1a, 0x8}, {0x400, 0x3, 0x407, 0x5230426d, 0x101, 0x2}, {0x7fffffff, 0x7, 0x7ff, 0x5, 0x4, 0xffffffff}, {0xaa, 0x5, 0x4, 0x7fffffff, 0x1, 0x800}, {0x1, 0x3, 0x2, 0x80, 0x8, 0x7}, {0xf, 0x3, 0x13, 0x8001, 0x7, 0x4}, {0x6a584586, 0x4, 0x9, 0x7, 0x8, 0xe}, {0x1000, 0x3e4, 0x1, 0x9, 0x7013, 0xfffffffa}, {0x3, 0xc5d, 0x6, 0x3, 0x1000, 0x7}, {0x7, 0x0, 0x6, 0x2, 0x3, 0x151}, {0x5, 0x9, 0x2, 0x6, 0x7ff, 0x52}, {0x8, 0x3, 0x4, 0x8, 0x2967, 0x4}, {0x2a573a02, 0xdc, 0xc0, 0x48ac, 0x2d5ff23, 0x10001}], [{0x0, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {}, {0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x11277bfca2f3b167}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x2, 0xb3bb9973cf09fa6}, {0x5}, {0x1}, {}, {}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0xb0a3727b1d0a61d8}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {}, {}, {0x1, 0x1}, {0xf5b5b9dbf3686b7c, 0x1}, {0x4}, {0x0, 0x66054ecc5fdaf82}, {0x5}, {0x4, 0x1}, {0x6, 0x1}, {0x3}, {0x5}, {0x0, 0xd553913e8a49f363}, {0x2}, {0x5, 0x1}, {0x3}, {0x7}, {0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0xfe0e0df92cb7a893}, {0x3}, {}, {0x1, 0x5d9ef20422a5ae7}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x5}, {0x4}]}}]}, {0xf0, 0x6, "fb9226dba05f7648735c34d081b8adebe10fbbdf0d8e5bd8323ab1624ca0b510cc0fd83c3cc56ef1eaa621a6b8cb39a7e92e1795fbe83b6747fc8f2e838d04f4156612cc3886d7590633245236db0da63c51258af375ab5c731855388b130fe38aa142b2dbbd909985e831846021ebcc4d2020923ac9ca16d70d22773cef263804775676d158ba7d55c084c9ccf92cec7a6a48593bcfb1b481b15ec1603a91c669e9c599408940f08bf1ffcd1699073c74d7f62feb9e3c958c9eb41fe6282bf4fe3077418d1395771d0bbc0705af4e89105f8f10bda276ec5650142ff77415462510a97c2a45c7a956c5ec58"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x1198, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0x10f4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x401, 0x8, 0x6}, {0xffffffffffffffff, 0x1, 0x5}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x9}, {{0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3}, {0x3, 0x4, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x100, 0x3, 0xfff}, {0x9, 0x7}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xd, 0x1, 0xb}, {0xa6a, 0x1, 0x4, 0x1, 0x5, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x8000}, {{0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0xb, 0x0, 0x8}, "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"}}, @TCF_EM_CONTAINER={0x20, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xbe3c}, "d1298fc07db068b298503ca265511acb69c0"}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x2b, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="8fc33c56", @TCF_META_TYPE_VAR="962fd89294102c27", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="f61a7b9f6b", @TCF_META_TYPE_VAR="cd40b0fa051c", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x80, 0x2}, {0x2, 0x28}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x200, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x18c, 0x3, 0x9}, {0x9, 0x20200000, 0x1, 0xa0bd}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xa, 0x2, 0xd6ca}, {0x5, 0x5, 0x0, "b8645fe854"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x80, 0x7, 0x5}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0xb}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x6b}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffff, 0x8}}]}}, @filter_kind_options=@f_route={{0xa}, {0x94c, 0x2, [@TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}]}, @TCA_ROUTE4_ACT={0x104, 0x6, [@m_police={0x100, 0xa, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4295, 0x0, 0x8, 0x1, 0x2, {0xe, 0x0, 0x6, 0xa6, 0x4}, {0x5, 0x2, 0x7, 0x4, 0x5, 0x10}, 0x8, 0x9, 0x1}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc02f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9e1}]]}, {0x73, 0x6, "ead7f4ff0fd98b0b3a9ff505e81752029efd2c34a29255d28da6983f5cc165bd270d8d2b487c2c197b629b9dce1d6453a1b52c9afd3ca3aabe1036a6394034cbe519caa3d349842738f25134894a8b42b5e695ce0ad8719ac14985f1a08ee222db75a59c25643036b7f5531959bcf5"}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}]}, @TCA_ROUTE4_POLICE={0x838, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0xffffffff, 0x8001, 0x9, 0x8, 0x7, 0x9864, 0x4, 0x9cd, 0x3, 0x8, 0x6, 0x46, 0x2, 0xff, 0x5, 0x11e, 0x8, 0x19, 0x0, 0x311db50f, 0x0, 0x5, 0x5, 0xa98, 0x8, 0x1, 0xfffffffd, 0x27d5, 0x9, 0xa, 0xd, 0x80000001, 0x9, 0x9, 0xf0, 0x5, 0x10, 0x6, 0xf, 0x9, 0x7, 0x8000, 0x5, 0x0, 0xe, 0x7, 0x3, 0x5, 0x5, 0x0, 0x1, 0xf, 0x39c, 0x7fff, 0x9, 0xc63e, 0x7, 0x7, 0x8, 0x80000001, 0x3, 0x5, 0xcead, 0x8, 0xffff, 0x9f, 0x4, 0x79f8, 0xdf, 0x38e, 0x0, 0x5, 0xa1b, 0x7, 0x100, 0x10001, 0x66, 0x0, 0x9, 0x10000000, 0x0, 0x200, 0x80, 0x1, 0x7, 0x8, 0xb2, 0x3, 0x3, 0xb, 0x9, 0x6, 0x3, 0x800, 0xf, 0x3, 0x73, 0x4, 0x6, 0x1, 0x9, 0x2, 0x3, 0x9, 0x8001, 0x46ec7e6e, 0x2, 0x6, 0x6, 0x1, 0x1, 0x4, 0x6, 0x8, 0x80, 0x9ab, 0x7, 0x3, 0x7fffffff, 0x81, 0x6, 0x0, 0x2, 0xa, 0xff, 0x9, 0x7, 0x7ff, 0xe8, 0x7, 0x8, 0x2, 0x1, 0x8, 0x1, 0xffff, 0x22, 0x5, 0x9, 0x2, 0xc7b8, 0xff, 0x0, 0x9, 0x6, 0xfffffff4, 0x0, 0xff, 0x4, 0x8, 0x3, 0x1, 0x0, 0x6, 0x8, 0xfffffffe, 0x1190, 0x205, 0x400, 0xa, 0x7, 0x1ed, 0x1, 0x8, 0xfff, 0x8, 0x2, 0xcf, 0x0, 0x80000000, 0xfffffff9, 0x3, 0xd1b, 0x2, 0x40000, 0x2000000, 0x9, 0x7, 0x7f, 0xe20, 0x6db7, 0x101, 0x10000, 0xfa1f, 0x40, 0x8, 0x7fff, 0x8, 0x81, 0x7, 0x3, 0x6, 0x1ff, 0x7f, 0xfffffffe, 0x3317a7a7, 0x7, 0x7, 0x5, 0x1, 0x234, 0x1800000, 0xfffff4de, 0x41, 0x3, 0x5, 0x1a81, 0x4f4, 0x400, 0x80000000, 0x1ff, 0xb, 0x30, 0x1, 0x8, 0x0, 0x1ff, 0x8, 0x9, 0x5, 0x7, 0xf, 0x7, 0x7, 0x2, 0x6, 0xf, 0x8, 0xa, 0x1000, 0x0, 0x101, 0x2082, 0x1, 0x5, 0x1, 0x1, 0x3, 0x7, 0xffff57af, 0xec7, 0x92, 0x9, 0x81, 0x9, 0x1, 0x7ff, 0x2, 0x7, 0x80, 0x401, 0x408500c, 0x6, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x42f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0xd, 0x2, 0x2, 0x2b, 0x1400, 0x3, 0x1, 0x586f6087, 0x5, 0x0, 0x2, 0x9, 0x6a7aa7a8, 0x8, 0x5, 0x8, 0x7f, 0x5, 0x0, 0xfffffff7, 0x401, 0x0, 0x7fffffff, 0x9, 0x24, 0xb5, 0x4113, 0x73, 0x8, 0x9, 0x7, 0x7, 0x8, 0x7ff, 0x3, 0x5, 0x100, 0x5, 0x8, 0x7, 0xb, 0x7, 0x1359, 0x1ff, 0x1, 0xfffffff8, 0x5, 0x0, 0x4e, 0x7ff, 0x101, 0x5, 0x0, 0x2, 0x7, 0xef7, 0x0, 0x9, 0x7f, 0xfff, 0x7, 0x1800000, 0x3, 0x8, 0xf, 0x7f, 0xc, 0x349, 0x2, 0x8, 0x9, 0x0, 0x5, 0x6, 0x80000000, 0x27d000, 0x5, 0x0, 0x1, 0x6, 0x4, 0xf, 0x32f, 0x9, 0x8, 0xe81, 0xe, 0x8, 0x1, 0x3, 0x9, 0x7fffffff, 0xfffffff8, 0xffffffff, 0x10000, 0x0, 0x6, 0x6, 0x4, 0x1, 0x5, 0x8, 0xa, 0x8f, 0x5, 0x9, 0x9, 0x4, 0x2, 0x1, 0x7, 0x3, 0x7, 0x5, 0xc, 0x3, 0x9, 0x3, 0x2, 0xd9, 0x8, 0x0, 0xd0, 0x7f, 0x6, 0xe, 0x8, 0x8, 0xe76, 0x7fffffff, 0xa13b, 0x3, 0x7, 0x7, 0x1, 0x6, 0x3, 0x1, 0x7, 0x7, 0x4, 0x6, 0x3, 0xffaa, 0x5be, 0x506761d9, 0x1, 0x2, 0x80000000, 0x1000, 0x7, 0x400, 0x7, 0x92f, 0x33c5, 0x1, 0x3, 0x3ff, 0x9, 0x6, 0x5, 0x853e, 0x1, 0x11, 0x6, 0x0, 0x5, 0x5859, 0x10, 0xff, 0xdde, 0x6113, 0x3, 0x3, 0x92, 0x4, 0x6, 0xf, 0x2, 0x4, 0x7, 0x98, 0x3, 0x7, 0xffff2b7e, 0x3, 0x8, 0xc, 0x1, 0x0, 0x0, 0x270dfd5e, 0x6, 0x7, 0x4, 0x3, 0x9, 0x7fff, 0x5, 0x2, 0x9, 0x6, 0x5, 0x401, 0x5905, 0x44, 0xf, 0x80000001, 0x4, 0xc, 0x9, 0x15, 0x2, 0xffff8000, 0x10, 0x5, 0x2, 0x1ff, 0x19d, 0xd, 0x6, 0x5, 0x1, 0x1, 0x2, 0x7, 0x8, 0x10, 0x1, 0x8, 0x1a, 0x400, 0x2, 0xdcce, 0x5, 0x7, 0x1, 0x4, 0xb0, 0x7, 0x0, 0x9, 0x2, 0x4bd, 0x42a9, 0x7f, 0x9, 0x2, 0x1000, 0xb, 0x5, 0x9, 0x10000, 0xef01, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x3780}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) 9.390523015s ago: executing program 3 (id=875): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="939e00000000", 0x0, 0xffffffff, 0x40, 0x2, 0x0}) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0xfffffffe, @loopback, 0x6}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x5, 0x6, 0x0, 0x100, 0xff, 0xc0000082, r2}) ioctl$BSG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000580)) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000680)="3f7d67eff117da64e2f36ab8cc2ef2f7054c8e34fdcd8ace9de9bdf0241c7937517e1e8cb67ff9be103231daf025cec44b0229e0c3dbf25bae204db6fc4034a40fd36aea12461e6374f189beaaeea987d1dcfb330b6bf408237be278a756447928071ce3b07883e028e86dc6649b", 0x6e) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f00000001c0)) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 8.951482622s ago: executing program 4 (id=879): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x530af311) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) 8.492616052s ago: executing program 2 (id=880): socket$alg(0x26, 0x5, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x1) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x2) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 6.943879081s ago: executing program 2 (id=883): socket$alg(0x26, 0x5, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x1) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x2) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 6.168035732s ago: executing program 3 (id=885): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x16, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000280)={0x2, 0x40000105, 0x0, 0x0}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250100000008002c00ff0300000500380000000000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 5.80995997s ago: executing program 4 (id=886): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf97250710000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000300000003000000"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x4) close(0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="50000000090601420000000000000000010000030900020073797a310000000005000100"], 0x50}, 0x1, 0x1000000, 0x0, 0xd24f4d577c621506}, 0x44) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, 0x0) 5.573997531s ago: executing program 2 (id=887): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) 4.970151249s ago: executing program 0 (id=888): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x3, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sg(0x0, 0x0, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000440)={r5, 0x2000, {0x0, 0x0, 0x0, 0x5, 0x7fffffffffffffff, 0x0, 0x0, 0xb, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffe6200b00"}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r5) r7 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b0001006261746164760000", @ANYRES32], 0x3c}}, 0x0) 4.881208503s ago: executing program 3 (id=889): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x16, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000280)={0x2, 0x40000105, 0x0, 0x0}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250100000008002c00ff0300000500380000000000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 4.533760923s ago: executing program 2 (id=890): socket$kcm(0x11, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) 4.271056059s ago: executing program 2 (id=891): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x1, 0xa, 0x4d38714, 0xc}}}}}}, 0x0) syz_open_procfs(0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) 4.010999755s ago: executing program 4 (id=892): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') openat(r1, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'rti802\x00', [0x8001, 0x513, 0x1, 0x8, 0x7fff, 0x2, 0x8, 0x8000, 0x854, 0x8, 0x6, 0x80000000, 0xb40, 0x1, 0x6, 0x35, 0x8, 0x4, 0x9e, 0x9, 0xf, 0xf0, 0x0, 0x800, 0xc3f, 0x7, 0x4, 0x9, 0x5, 0xfffffd5f, 0x7, 0x8]}) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0xffffffffffffffa3) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004800000180000007bb2531cc35495a293d9ffff9d984933f0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000000"], 0x48) unshare(0x22020400) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0x3, 0x8, 0x200, r7, 0x568b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c0000000400000004000000070072bf00000000", @ANYRES32=r8], 0x48) 3.917963427s ago: executing program 0 (id=893): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="939e00000000", 0x0, 0xffffffff, 0x40, 0x2, 0x0}) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0xfffffffe, @loopback, 0x6}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x5, 0x6, 0x0, 0x100, 0xff, 0xc0000082, r2}) ioctl$BSG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000580)) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000680)="3f7d67eff117da64e2f36ab8cc2ef2f7054c8e34fdcd8ace9de9bdf0241c7937517e1e8cb67ff9be103231daf025cec44b0229e0c3dbf25bae204db6fc4034a40fd36aea12461e6374f189beaaeea987d1dcfb330b6bf408237be278a756447928071ce3b07883e028e86dc6649b", 0x6e) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f00000001c0)) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3.677554431s ago: executing program 3 (id=894): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x530af311) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) 3.153530892s ago: executing program 4 (id=895): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0x465e, 0x400, 0x3, 0x31d}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x40, 0x4004, @fd_index, 0xf, 0x0, 0x0, 0x2, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, r7, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9], 0x6c}}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r10, 0xc2c45512, &(0x7f0000000580)={{0xa, 0x3, 0x9, 0x0, 'syz0\x00', 0x10000}, 0x0, [0x2, 0x506a, 0x80000000, 0x6eb1, 0x9, 0xffffffff, 0xf, 0xd, 0xc, 0x4, 0x6, 0xff, 0x9, 0x2, 0x2, 0xad, 0xd, 0x8, 0x7, 0x0, 0x7fffffff, 0x5f, 0x40, 0x0, 0x8000, 0x8, 0xe780, 0x9, 0xa8, 0x7, 0x2, 0x1, 0x8, 0x5, 0x7, 0x7ff, 0x10, 0x6, 0x1, 0x80, 0x1ff, 0xfff, 0x8, 0x2, 0x6, 0x3, 0x3, 0x7, 0x2, 0x0, 0x8, 0x6, 0x2, 0x9, 0x80, 0x6, 0x7, 0x7, 0x7ff, 0x9, 0x7, 0x2, 0x6, 0x6, 0x8, 0x3, 0x9, 0x3668077b, 0x76, 0x5, 0xffff9460, 0x1, 0x3, 0x5, 0x3, 0x0, 0x16e, 0x80000000, 0x3, 0x1000, 0x0, 0x9, 0xffffffff, 0xfff, 0xe8e4, 0xfffffff0, 0x2, 0x6, 0x10, 0x800, 0x16, 0x2f, 0x8, 0x6, 0x8ba6, 0x2, 0x3, 0x8001, 0x4, 0x7, 0x1, 0x3240, 0x65, 0x2, 0x7, 0x0, 0x6, 0xd00eb72c, 0x400, 0x3, 0x6171f0fa, 0x5, 0x3, 0x7, 0x5, 0x8589, 0x4, 0x10001, 0x994, 0x10000, 0x47, 0x6635, 0x4, 0xc2, 0x4687, 0xe3e3, 0x600000, 0x9]}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, &(0x7f0000000140)) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r11, 0xc008aec1, &(0x7f0000000740)={0xa, 0x0, [{0x2, 0x5, 0x1, 0x4, 0xfffffff8, 0x3ff, 0x4}, {0x6, 0x9, 0x6, 0xe, 0x2, 0xe, 0x9}, {0x40000000, 0x0, 0x6, 0x0, 0x200, 0xfd, 0xfffffffa}, {0x7, 0x4, 0x1, 0x200, 0x96, 0xe, 0x63455cca}, {0x80000008, 0x2, 0x2, 0x9, 0x2, 0xd84, 0x5}, {0xd, 0x80000000, 0x3, 0xa38a, 0x5d, 0x7007, 0x7}, {0x80000019, 0xf, 0x4, 0xfff, 0xc, 0x8, 0x7}, {0x80000000, 0x8, 0x1, 0x982, 0x6, 0x5, 0x9}, {0x80000019, 0x1ff, 0x0, 0x1, 0x7fff, 0x3, 0x2}, {0x7, 0x7, 0x2, 0x181, 0x40, 0x1, 0x8}]}) setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r3, 0x4e0d, 0x217, 0xa5, 0x0, 0x32) 2.151307388s ago: executing program 0 (id=896): socket$alg(0x26, 0x5, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x1) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x2) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.460622235s ago: executing program 4 (id=897): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x16, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000280)={0x2, 0x40000105, 0x0, 0x0}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250100000008002c00ff0300000500380000000000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1.227268038s ago: executing program 2 (id=898): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="939e00000000", 0x0, 0xffffffff, 0x40, 0x2, 0x0}) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0xfffffffe, @loopback, 0x6}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x5, 0x6, 0x0, 0x100, 0xff, 0xc0000082, r2}) ioctl$BSG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000580)) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000680)="3f7d67eff117da64e2f36ab8cc2ef2f7054c8e34fdcd8ace9de9bdf0241c7937517e1e8cb67ff9be103231daf025cec44b0229e0c3dbf25bae204db6fc4034a40fd36aea12461e6374f189beaaeea987d1dcfb330b6bf408237be278a756447928071ce3b07883e028e86dc6649b", 0x6e) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f00000001c0)) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x40000004, 0x0, @mcast1, @mcast1, 0x40, 0x80, 0xfffffffc, 0x4c4d}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.088805562s ago: executing program 0 (id=899): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x8) 911.197191ms ago: executing program 0 (id=900): socket$alg(0x26, 0x5, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x1) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x2) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 599.563779ms ago: executing program 3 (id=901): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) 170.609633ms ago: executing program 4 (id=902): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 1) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 0s ago: executing program 0 (id=903): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="939e00000000", 0x0, 0xffffffff, 0x40, 0x2, 0x0}) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0xfffffffe, @loopback, 0x6}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x5, 0x6, 0x0, 0x100, 0xff, 0xc0000082, r2}) ioctl$BSG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000580)) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000680)="3f7d67eff117da64e2f36ab8cc2ef2f7054c8e34fdcd8ace9de9bdf0241c7937517e1e8cb67ff9be103231daf025cec44b0229e0c3dbf25bae204db6fc4034a40fd36aea12461e6374f189beaaeea987d1dcfb330b6bf408237be278a756447928071ce3b07883e028e86dc6649b", 0x6e) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f00000001c0)) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x40000004, 0x0, @mcast1, @mcast1, 0x40, 0x80, 0xfffffffc, 0x4c4d}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ? __pfx_ksys_write+0x10/0x10 [ 175.895976][ T8043] __do_fast_syscall_32+0xe3/0x8c0 [ 175.895994][ T8043] do_fast_syscall_32+0x32/0x70 [ 175.896010][ T8043] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.896024][ T8043] RIP: 0023:0xf70bef6c [ 175.896032][ T8043] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 175.896043][ T8043] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 175.896054][ T8043] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 175.896060][ T8043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.896066][ T8043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.896072][ T8043] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 175.896078][ T8043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.896091][ T8043] [ 175.986110][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 175.986121][ T40] audit: type=1326 audit(1773675506.650:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.1.528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 175.996146][ T40] audit: type=1326 audit(1773675506.670:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.1.528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 176.004117][ T40] audit: type=1326 audit(1773675506.680:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.1.528" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 176.013284][ T40] audit: type=1326 audit(1773675506.680:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.1.528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 176.071164][ T40] audit: type=1326 audit(1773675506.690:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.1.528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 176.094375][ T8045] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 176.097173][ T40] audit: type=1326 audit(1773675506.740:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.1.528" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 176.102931][ T8049] FAULT_INJECTION: forcing a failure. [ 176.102931][ T8049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.108619][ T8049] CPU: 1 UID: 0 PID: 8049 Comm: syz.3.530 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.108639][ T8049] Tainted: [L]=SOFTLOCKUP [ 176.108643][ T8049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.108649][ T8049] Call Trace: [ 176.108653][ T8049] [ 176.108658][ T8049] dump_stack_lvl+0x100/0x190 [ 176.108692][ T8049] should_fail_ex.cold+0x5/0xa [ 176.108705][ T8049] save_fsave_header+0x14c/0x2f0 [ 176.108718][ T8049] ? debug_object_activate+0x331/0x490 [ 176.108736][ T8049] ? __pfx_save_fsave_header+0x10/0x10 [ 176.108754][ T8049] ? copy_fpstate_to_sigframe+0x2b8/0xb20 [ 176.108768][ T8049] ? __local_bh_enable_ip+0x9e/0x120 [ 176.108781][ T8049] copy_fpstate_to_sigframe+0x789/0xb20 [ 176.108797][ T8049] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 176.108814][ T8049] ? x86_task_fpu+0x5f/0x90 [ 176.108826][ T8049] get_sigframe+0x3fb/0x940 [ 176.108841][ T8049] ? __pfx_get_sigframe+0x10/0x10 [ 176.108853][ T8049] ? rcu_is_watching+0x12/0xc0 [ 176.108869][ T8049] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.108882][ T8049] ? siginfo_layout+0x156/0x290 [ 176.108901][ T8049] ia32_setup_rt_frame+0xed/0xb00 [ 176.108920][ T8049] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 176.108936][ T8049] ? __mutex_unlock_slowpath+0x15c/0x790 [ 176.108960][ T8049] arch_do_signal_or_restart+0x43f/0x770 [ 176.108973][ T8049] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 176.108990][ T8049] ? ksys_write+0x1ac/0x250 [ 176.109003][ T8049] exit_to_user_mode_loop+0x86/0x4a0 [ 176.109017][ T8049] do_int80_emulation+0x4b8/0x6b0 [ 176.109035][ T8049] asm_int80_emulation+0x1a/0x20 [ 176.109046][ T8049] RIP: 0023:0xf71e5cab [ 176.109055][ T8049] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 176.109065][ T8049] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 176.109076][ T8049] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00000000f549d5c0 [ 176.109082][ T8049] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.109088][ T8049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.109094][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.109100][ T8049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.109113][ T8049] [ 176.142235][ T40] audit: type=1326 audit(1773675506.740:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.1.528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 176.196954][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.528'. [ 176.205158][ T40] audit: type=1326 audit(1773675506.740:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.1.528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 176.212378][ T40] audit: type=1326 audit(1773675506.750:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.1.528" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 176.219000][ T40] audit: type=1326 audit(1773675506.750:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.1.528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 176.489941][ T1122] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 176.494337][ T1122] sr 2:0:0:0: [sr0] tag#3 Sense Key : Illegal Request [current] [ 176.496924][ T1122] sr 2:0:0:0: [sr0] tag#3 Add. Sense: Invalid command operation code [ 176.499565][ T1122] sr 2:0:0:0: [sr0] tag#3 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 176.502212][ T1122] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 176.505824][ T1122] buffer_io_error: 11 callbacks suppressed [ 176.505833][ T1122] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 176.664059][ T8057] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 176.757512][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 176.761462][ T8066] hsr_slave_0: left promiscuous mode [ 176.763921][ T8066] hsr_slave_1: left promiscuous mode [ 176.973361][ T8071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.537'. [ 177.023473][ T8057] netlink: 'syz.2.532': attribute type 10 has an invalid length. [ 177.059043][ T8077] netlink: 72 bytes leftover after parsing attributes in process `syz.1.538'. [ 177.197484][ T8084] netlink: 'syz.2.540': attribute type 5 has an invalid length. [ 177.228097][ T8084] FAULT_INJECTION: forcing a failure. [ 177.228097][ T8084] name failslab, interval 1, probability 0, space 0, times 0 [ 177.234763][ T8084] CPU: 1 UID: 0 PID: 8084 Comm: syz.2.540 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.234796][ T8084] Tainted: [L]=SOFTLOCKUP [ 177.234801][ T8084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.234808][ T8084] Call Trace: [ 177.234813][ T8084] [ 177.234818][ T8084] dump_stack_lvl+0x100/0x190 [ 177.234841][ T8084] should_fail_ex.cold+0x5/0xa [ 177.234855][ T8084] should_failslab+0xc2/0x120 [ 177.234869][ T8084] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 177.234887][ T8084] ? __alloc_skb+0x140/0x710 [ 177.234907][ T8084] __alloc_skb+0x140/0x710 [ 177.234921][ T8084] ? __alloc_skb+0x5b7/0x710 [ 177.234936][ T8084] ? __pfx___alloc_skb+0x10/0x10 [ 177.234956][ T8084] netlink_ack+0x117/0xb80 [ 177.234985][ T8084] netlink_rcv_skb+0x333/0x420 [ 177.235003][ T8084] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.235022][ T8084] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.235045][ T8084] ? netlink_deliver_tap+0x1ae/0xcc0 [ 177.235086][ T8084] netlink_unicast+0x5aa/0x870 [ 177.235114][ T8084] ? __pfx_netlink_unicast+0x10/0x10 [ 177.235147][ T8084] netlink_sendmsg+0x8b0/0xda0 [ 177.235171][ T8084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.235199][ T8084] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 177.235228][ T8084] __sys_sendto+0x468/0x4b0 [ 177.235250][ T8084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.235279][ T8084] ? __pfx___sys_sendto+0x10/0x10 [ 177.235312][ T8084] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 177.235354][ T8084] ? fput+0x79/0x100 [ 177.235376][ T8084] ? ksys_write+0x1ac/0x250 [ 177.235397][ T8084] __ia32_sys_sendto+0xdd/0x1b0 [ 177.235422][ T8084] ? __do_fast_syscall_32+0x94/0x8c0 [ 177.235482][ T8084] ? lockdep_hardirqs_on+0x78/0x100 [ 177.235510][ T8084] __do_fast_syscall_32+0xe3/0x8c0 [ 177.235542][ T8084] do_fast_syscall_32+0x32/0x70 [ 177.235571][ T8084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.235595][ T8084] RIP: 0023:0xf6feef6c [ 177.235612][ T8084] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 177.235636][ T8084] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 177.235661][ T8084] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 177.235674][ T8084] RDX: 0000000000000078 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.235685][ T8084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.235696][ T8084] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.235708][ T8084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.235734][ T8084] [ 177.441153][ T8088] netlink: 'syz.1.543': attribute type 1 has an invalid length. [ 177.453153][ T8088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.466895][ T8088] bond1: (slave geneve2): making interface the new active one [ 177.471087][ T8088] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 177.537368][ T8098] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 177.558523][ T8098] bond1: entered promiscuous mode [ 177.561501][ T8098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.595097][ T8098] bond1: (slave bridge1): making interface the new active one [ 177.597869][ T8098] bridge1: entered promiscuous mode [ 177.612031][ T8098] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 177.762853][ T8111] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 177.889819][ T8113] vivid-000: disconnect [ 177.897653][ T8113] loop7: detected capacity change from 0 to 7 [ 177.920133][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 177.924144][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 177.930344][ T8111] netlink: 'syz.3.549': attribute type 10 has an invalid length. [ 177.931117][ T8112] vivid-000: reconnect [ 177.942441][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.549'. [ 178.309468][ T34] usb 42-1: device descriptor read/8, error -110 [ 178.601856][ T8126] FAULT_INJECTION: forcing a failure. [ 178.601856][ T8126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.607331][ T8126] CPU: 2 UID: 0 PID: 8126 Comm: syz.0.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.607359][ T8126] Tainted: [L]=SOFTLOCKUP [ 178.607365][ T8126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.607377][ T8126] Call Trace: [ 178.607385][ T8126] [ 178.607392][ T8126] dump_stack_lvl+0x100/0x190 [ 178.607419][ T8126] should_fail_ex.cold+0x5/0xa [ 178.607437][ T8126] _copy_to_user+0x32/0xd0 [ 178.607481][ T8126] simple_read_from_buffer+0xcb/0x170 [ 178.607510][ T8126] proc_fail_nth_read+0x1af/0x230 [ 178.607534][ T8126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.607554][ T8126] ? rw_verify_area+0xce/0x6d0 [ 178.607589][ T8126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.607610][ T8126] vfs_read+0x1e4/0xb30 [ 178.607638][ T8126] ? __pfx_vfs_read+0x10/0x10 [ 178.607662][ T8126] ? find_held_lock+0x2b/0x80 [ 178.607681][ T8126] ? __fget_files+0x215/0x3d0 [ 178.607704][ T8126] ? __fget_files+0x21f/0x3d0 [ 178.607728][ T8126] ksys_read+0x12a/0x250 [ 178.607741][ T8126] ? __pfx_ksys_read+0x10/0x10 [ 178.607761][ T8126] do_int80_emulation+0x141/0x6b0 [ 178.607785][ T8126] asm_int80_emulation+0x1a/0x20 [ 178.607800][ T8126] RIP: 0023:0xf71f5cab [ 178.607812][ T8126] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 178.607837][ T8126] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 178.607857][ T8126] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54ad5d0 [ 178.607869][ T8126] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 178.607878][ T8126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.607887][ T8126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 178.607895][ T8126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.607916][ T8126] [ 178.700841][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.553'. [ 178.710473][ T34] usb usb42-port1: attempt power cycle [ 179.280454][ T34] usb usb42-port1: unable to enumerate USB device [ 180.399815][ T8153] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 180.596671][ T8153] netlink: 'syz.2.560': attribute type 10 has an invalid length. [ 180.711905][ T8158] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 180.792059][ T8160] netlink: 'syz.2.562': attribute type 12 has an invalid length. [ 180.841576][ T8158] /dev/sr0: Can't open blockdev [ 180.920220][ T8165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.564'. [ 181.291966][ T8171] netlink: 32 bytes leftover after parsing attributes in process `syz.1.565'. [ 181.511411][ T8179] bond0: (slave syz_tun): Releasing backup interface [ 181.915110][ T8189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.573'. [ 181.955558][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.960646][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.964610][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.967953][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.971223][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.184516][ T8190] chnl_net:caif_netlink_parms(): no params data found [ 182.316110][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.319526][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.322686][ T8190] bridge_slave_0: entered allmulticast mode [ 182.325957][ T8190] bridge_slave_0: entered promiscuous mode [ 182.331622][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.334127][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.336672][ T8190] bridge_slave_1: entered allmulticast mode [ 182.339694][ T8190] bridge_slave_1: entered promiscuous mode [ 182.349428][ T8210] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 182.351940][ T8210] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 182.354831][ T8210] vhci_hcd vhci_hcd.0: Device attached [ 182.358368][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.359878][ T8210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.572'. [ 182.363096][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.385505][ T8190] team0: Port device team_slave_0 added [ 182.390107][ T8190] team0: Port device team_slave_1 added [ 182.405166][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.407566][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.419780][ T8190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.426185][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.430332][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.440370][ T8190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.465301][ T8190] hsr_slave_0: entered promiscuous mode [ 182.467840][ T8190] hsr_slave_1: entered promiscuous mode [ 182.472503][ T8190] debugfs: 'hsr0' already exists in 'hsr' [ 182.474840][ T8190] Cannot create hsr debugfs directory [ 182.578475][ T1024] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 182.773768][ T8190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.782091][ T8190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.789729][ T8190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.796042][ T8190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.875924][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.894869][ T8190] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.904097][ T1205] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.906622][ T1205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.915134][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.917873][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.929455][ T1024] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 183.162087][ T8211] vhci_hcd: connection reset by peer [ 183.164727][ T1205] vhci_hcd vhci_hcd.2: stop threads [ 183.166489][ T1205] vhci_hcd vhci_hcd.2: release socket [ 183.168359][ T1205] vhci_hcd vhci_hcd.2: disconnect device [ 183.169002][ T8190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.376872][ T8190] veth0_vlan: entered promiscuous mode [ 183.386721][ T8190] veth1_vlan: entered promiscuous mode [ 183.405414][ T8190] veth0_macvtap: entered promiscuous mode [ 183.409875][ T8190] veth1_macvtap: entered promiscuous mode [ 183.423066][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.430088][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.437444][ T1205] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.440641][ T1205] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.444463][ T1205] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.448021][ T1205] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.485129][ T1205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.487804][ T1205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.514900][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.517907][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.580466][ T8238] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 183.693061][ T8238] netlink: 'syz.4.571': attribute type 10 has an invalid length. [ 183.704493][ T8238] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.990572][ T5948] Bluetooth: hci3: command tx timeout [ 184.993839][ T8271] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 185.049444][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 185.079307][ T58] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 185.105709][ T8271] netlink: 'syz.3.588': attribute type 10 has an invalid length. [ 185.219868][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 185.225961][ T24] usb 7-1: config 0 has no interfaces? [ 185.229200][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.232363][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 185.239689][ T24] usb 7-1: SerialNumber: syz [ 185.242482][ T24] usb 7-1: config 0 descriptor?? [ 185.250688][ T58] usb 9-1: Using ep0 maxpacket: 16 [ 185.254273][ T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.258653][ T58] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.262793][ T58] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 185.267166][ T58] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 185.369077][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.373204][ T58] usb 9-1: config 0 descriptor?? [ 185.456727][ T7028] usb 7-1: USB disconnect, device number 6 [ 185.787439][ T58] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 185.790634][ T58] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 185.795453][ T58] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 185.800037][ T58] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 185.804758][ T58] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 185.812555][ T58] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 185.942105][ T58] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 185.949611][ T58] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 186.050177][ T8284] random: crng reseeded on system resumption [ 186.060609][ T5988] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 186.061253][ T7028] usb 9-1: USB disconnect, device number 2 [ 186.064791][ T5988] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 186.069448][ T5948] Bluetooth: hci3: command tx timeout [ 186.070824][ T5988] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 186.077308][ T5988] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 186.535775][ T8292] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 186.538537][ T8292] overlayfs: overlapping lowerdir path [ 186.659641][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 186.813642][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 186.816700][ T24] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 186.832590][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 186.835586][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 186.839685][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 186.844707][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.847767][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.850959][ T24] usb 7-1: Product: syz [ 186.852418][ T24] usb 7-1: Manufacturer: syz [ 186.863489][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 186.875690][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 186.887082][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 186.889677][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 187.156203][ T8313] binder: 8311:8313 ioctl c0306201 800003c0 returned -14 [ 187.244877][ T8312] kvm: faulting far call emulation tainted memory [ 187.249639][ T8312] FAULT_INJECTION: forcing a failure. [ 187.249639][ T8312] name failslab, interval 1, probability 0, space 0, times 0 [ 187.255281][ T8312] CPU: 3 UID: 0 PID: 8312 Comm: syz.0.601 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.255310][ T8312] Tainted: [L]=SOFTLOCKUP [ 187.255316][ T8312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.255327][ T8312] Call Trace: [ 187.255334][ T8312] [ 187.255343][ T8312] dump_stack_lvl+0x100/0x190 [ 187.255377][ T8312] should_fail_ex.cold+0x5/0xa [ 187.255424][ T8312] should_failslab+0xc2/0x120 [ 187.255445][ T8312] __kmalloc_cache_noprof+0x7a/0x6f0 [ 187.255468][ T8312] ? binder_transaction+0x1c15/0x9ee0 [ 187.255493][ T8312] binder_transaction+0x1c15/0x9ee0 [ 187.255537][ T8312] ? __pfx_binder_transaction+0x10/0x10 [ 187.255555][ T8312] ? find_held_lock+0x2b/0x80 [ 187.255575][ T8312] ? finish_task_switch.isra.0+0x200/0xb80 [ 187.255597][ T8312] ? rcu_is_watching+0x12/0xc0 [ 187.255625][ T8312] ? finish_task_switch.isra.0+0x205/0xb80 [ 187.255643][ T8312] ? lockdep_hardirqs_on+0x78/0x100 [ 187.255669][ T8312] ? finish_task_switch.isra.0+0x205/0xb80 [ 187.255690][ T8312] ? rcu_is_watching+0x12/0xc0 [ 187.255716][ T8312] ? trace_sched_exit_tp+0x13a/0x180 [ 187.255739][ T8312] ? __schedule+0x1000/0x6120 [ 187.255772][ T8312] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 187.255800][ T8312] ? __lock_acquire+0x4a5/0x2630 [ 187.255824][ T8312] ? __lock_acquire+0x4a5/0x2630 [ 187.255848][ T8312] ? preempt_schedule_notrace+0x5f/0xd0 [ 187.255880][ T8312] ? find_held_lock+0x2b/0x80 [ 187.255897][ T8312] ? __might_fault+0xc5/0x140 [ 187.255922][ T8312] ? __might_fault+0xc5/0x140 [ 187.255958][ T8312] binder_thread_write+0x131f/0x4dd0 [ 187.255985][ T8312] ? __lock_acquire+0x4a5/0x2630 [ 187.256008][ T8312] ? __pfx_binder_thread_write+0x10/0x10 [ 187.256027][ T8312] ? binder_debug+0xe0/0x190 [ 187.256053][ T8312] ? __pfx_binder_debug+0x10/0x10 [ 187.256080][ T8312] ? binder_debug+0xe0/0x190 [ 187.256105][ T8312] ? __pfx_binder_debug+0x10/0x10 [ 187.256144][ T8312] ? __pfx_binder_ioctl+0x10/0x10 [ 187.256161][ T8312] binder_ioctl+0x2941/0x7610 [ 187.256183][ T8312] ? tomoyo_path_number_perm+0x28f/0x580 [ 187.256209][ T8312] ? tomoyo_path_number_perm+0x28f/0x580 [ 187.256234][ T8312] ? tomoyo_path_number_perm+0x188/0x580 [ 187.256256][ T8312] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.256276][ T8312] ? __pfx_binder_ioctl+0x10/0x10 [ 187.256300][ T8312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.256333][ T8312] ? do_vfs_ioctl+0x226/0x13e0 [ 187.256360][ T8312] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 187.256394][ T8312] ? find_held_lock+0x2b/0x80 [ 187.256409][ T8312] ? hook_file_ioctl_common+0x146/0x410 [ 187.256437][ T8312] ? __fget_files+0x21f/0x3d0 [ 187.256458][ T8312] ? __pfx_binder_ioctl+0x10/0x10 [ 187.256476][ T8312] compat_ptr_ioctl+0x6e/0xa0 [ 187.256500][ T8312] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 187.256524][ T8312] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 187.256554][ T8312] __do_fast_syscall_32+0xe3/0x8c0 [ 187.256585][ T8312] do_fast_syscall_32+0x32/0x70 [ 187.256612][ T8312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.256636][ T8312] RIP: 0023:0xf70bef6c [ 187.256653][ T8312] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 187.256670][ T8312] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 187.256688][ T8312] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0306201 [ 187.256699][ T8312] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.256709][ T8312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.256720][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.256730][ T8312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.256753][ T8312] [ 188.079573][ T1024] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 188.149341][ T5948] Bluetooth: hci3: command tx timeout [ 188.803866][ T8321] FAULT_INJECTION: forcing a failure. [ 188.803866][ T8321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.808596][ T8321] CPU: 1 UID: 0 PID: 8321 Comm: syz.3.603 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.808625][ T8321] Tainted: [L]=SOFTLOCKUP [ 188.808629][ T8321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.808635][ T8321] Call Trace: [ 188.808640][ T8321] [ 188.808645][ T8321] dump_stack_lvl+0x100/0x190 [ 188.808665][ T8321] should_fail_ex.cold+0x5/0xa [ 188.808678][ T8321] _copy_from_user+0x2e/0xd0 [ 188.808691][ T8321] kstrtouint_from_user+0xd6/0x1d0 [ 188.808706][ T8321] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 188.808721][ T8321] ? __lock_acquire+0x4a5/0x2630 [ 188.808737][ T8321] ? lock_acquire+0x1cf/0x380 [ 188.808753][ T8321] proc_fail_nth_write+0x83/0x220 [ 188.808767][ T8321] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 188.808784][ T8321] vfs_write+0x2aa/0x1070 [ 188.808794][ T8321] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 188.808808][ T8321] ? __pfx_vfs_write+0x10/0x10 [ 188.808829][ T8321] ? find_held_lock+0x2b/0x80 [ 188.808852][ T8321] ? __fget_files+0x215/0x3d0 [ 188.808864][ T8321] ? __fget_files+0x21f/0x3d0 [ 188.808877][ T8321] ksys_write+0x12a/0x250 [ 188.808887][ T8321] ? __pfx_ksys_write+0x10/0x10 [ 188.808900][ T8321] do_int80_emulation+0x141/0x6b0 [ 188.808918][ T8321] asm_int80_emulation+0x1a/0x20 [ 188.808929][ T8321] RIP: 0023:0xf71e5cab [ 188.808939][ T8321] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 188.808949][ T8321] RSP: 002b:00000000f547c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 188.808960][ T8321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f547c5d0 [ 188.808966][ T8321] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.808972][ T8321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.808977][ T8321] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.808983][ T8321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.808997][ T8321] [ 189.526710][ T8329] tmpfs: Bad value for 'mpol' [ 190.208825][ T1024] usb 7-1: USB disconnect, device number 7 [ 190.245564][ T5948] Bluetooth: hci3: command tx timeout [ 190.329352][ T7028] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 190.476063][ T8350] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 190.479338][ T7028] usb 5-1: Using ep0 maxpacket: 16 [ 190.479868][ T8350] overlayfs: overlapping lowerdir path [ 190.482793][ T7028] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.487173][ T7028] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 190.491102][ T7028] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.495540][ T7028] usb 5-1: config 1 interface 0 has no altsetting 0 [ 190.499495][ T7028] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 190.502461][ T7028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.505103][ T7028] usb 5-1: Product: syz [ 190.506492][ T7028] usb 5-1: Manufacturer: syz [ 190.508142][ T7028] usb 5-1: SerialNumber: syz [ 190.735022][ T7028] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 190.791536][ T8356] tracefs: Unknown parameter 'a0x0000000000000000' [ 190.797752][ T8356] gtp0: entered promiscuous mode [ 190.819964][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 190.857508][ T8358] binder: 8357:8358 unknown command 1077961493 [ 190.859849][ T8358] binder: 8357:8358 ioctl c0306201 80000380 returned -22 [ 190.923070][ T7028] usb 5-1: USB disconnect, device number 6 [ 191.130272][ T8366] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 191.132707][ T8366] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 191.135602][ T8366] vhci_hcd vhci_hcd.0: Device attached [ 191.187680][ T8369] vhci_hcd: connection closed [ 191.188422][ T13] vhci_hcd vhci_hcd.3: stop threads [ 191.196942][ T13] vhci_hcd vhci_hcd.3: release socket [ 191.218070][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 192.010879][ T8382] trusted_key: syz.4.621 sent an empty control message without MSG_MORE. [ 192.042603][ T8383] FAULT_INJECTION: forcing a failure. [ 192.042603][ T8383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.078137][ T8383] CPU: 1 UID: 0 PID: 8383 Comm: syz.2.620 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.078159][ T8383] Tainted: [L]=SOFTLOCKUP [ 192.078163][ T8383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.078169][ T8383] Call Trace: [ 192.078173][ T8383] [ 192.078177][ T8383] dump_stack_lvl+0x100/0x190 [ 192.078197][ T8383] should_fail_ex.cold+0x5/0xa [ 192.078210][ T8383] _copy_to_user+0x32/0xd0 [ 192.078224][ T8383] simple_read_from_buffer+0xcb/0x170 [ 192.078241][ T8383] proc_fail_nth_read+0x1af/0x230 [ 192.078255][ T8383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.078269][ T8383] ? rw_verify_area+0xce/0x6d0 [ 192.078284][ T8383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.078296][ T8383] vfs_read+0x1e4/0xb30 [ 192.078314][ T8383] ? __pfx_vfs_read+0x10/0x10 [ 192.078330][ T8383] ? find_held_lock+0x2b/0x80 [ 192.078341][ T8383] ? __fget_files+0x215/0x3d0 [ 192.078354][ T8383] ? __fget_files+0x21f/0x3d0 [ 192.078368][ T8383] ksys_read+0x12a/0x250 [ 192.078378][ T8383] ? __pfx_ksys_read+0x10/0x10 [ 192.078391][ T8383] do_int80_emulation+0x141/0x6b0 [ 192.078408][ T8383] asm_int80_emulation+0x1a/0x20 [ 192.078419][ T8383] RIP: 0023:0xf7125cab [ 192.078428][ T8383] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 192.078438][ T8383] RSP: 002b:00000000f53bc4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 192.078449][ T8383] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53bc5d0 [ 192.078455][ T8383] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 192.078461][ T8383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.078467][ T8383] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.078474][ T8383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.078494][ T8383] [ 192.316681][ T8388] XFS (nullb0): Invalid superblock magic number [ 193.392635][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.630'. [ 193.449474][ T8420] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 193.455876][ T8420] overlayfs: overlapping lowerdir path [ 193.742506][ T8425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.631'. [ 194.118899][ T8371] usblp0: removed [ 194.154134][ T8435] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 194.156523][ T8435] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 194.169430][ T8435] vhci_hcd vhci_hcd.0: Device attached [ 194.184114][ T8440] netlink: 76 bytes leftover after parsing attributes in process `syz.4.633'. [ 194.219826][ T8439] binder: 8438:8439 ioctl c0306201 800003c0 returned -14 [ 194.312511][ T8442] wg2 speed is unknown, defaulting to 1000 [ 194.322084][ T8442] wg2 speed is unknown, defaulting to 1000 [ 194.331906][ T8442] wg2 speed is unknown, defaulting to 1000 [ 194.459336][ T6824] usb 42-1: SetAddress Request (30) to port 0 [ 194.459404][ T6824] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 194.489942][ T1024] wg2 speed is unknown, defaulting to 1000 [ 194.492140][ T8442] infiniband syz2: set active [ 194.492488][ T8450] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 194.493960][ T8442] infiniband syz2: added wg2 [ 194.529808][ T8442] RDS/IB: syz2: added [ 194.531584][ T8442] smc: adding ib device syz2 with port count 1 [ 194.533819][ T8442] smc: ib device syz2 port 1 has no pnetid [ 194.539538][ T8442] wg2 speed is unknown, defaulting to 1000 [ 194.541108][ T8452] ptrace attach of "/syz-executor exec"[8453] was attempted by "/syz-executor exec"[8452] [ 194.549958][ T8452] binder: 8445:8452 ioctl c0306201 80000380 returned -14 [ 194.641170][ T8442] wg2 speed is unknown, defaulting to 1000 [ 194.737496][ T8442] wg2 speed is unknown, defaulting to 1000 [ 194.806065][ T1024] wg2 speed is unknown, defaulting to 1000 [ 194.829378][ T8436] vhci_hcd: connection reset by peer [ 194.831776][ T46] vhci_hcd vhci_hcd.2: stop threads [ 194.833564][ T46] vhci_hcd vhci_hcd.2: release socket [ 194.835527][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 194.838848][ T8442] wg2 speed is unknown, defaulting to 1000 [ 194.982747][ T8442] wg2 speed is unknown, defaulting to 1000 [ 195.033163][ T8450] netlink: 'syz.0.638': attribute type 10 has an invalid length. [ 195.156184][ T8456] binder: 8455:8456 ioctl c0306201 800003c0 returned -14 [ 195.389362][ T1460] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 195.415524][ T8464] binder: 8463:8464 ioctl c0306201 800003c0 returned -14 [ 195.540955][ T1460] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.544623][ T1460] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 195.548724][ T1460] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.552994][ T1460] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 195.556701][ T1460] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 195.562771][ T1460] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.576857][ T1460] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.607750][ T1460] usb 5-1: Product: syz [ 195.612484][ T1460] usb 5-1: Manufacturer: syz [ 195.645273][ T1460] cdc_wdm 5-1:1.0: skipping garbage [ 195.650491][ T1460] cdc_wdm 5-1:1.0: skipping garbage [ 195.660199][ T1460] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 195.669185][ T1460] cdc_wdm 5-1:1.0: Unknown control protocol [ 196.371707][ T8479] overlayfs: missing 'lowerdir' [ 197.859619][ T8491] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 198.134749][ T8497] netlink: 'syz.2.648': attribute type 10 has an invalid length. [ 198.953050][ T1024] usb 5-1: USB disconnect, device number 7 [ 198.958138][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.960490][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.479458][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 199.509458][ T6824] usb 42-1: device descriptor read/8, error -110 [ 199.897163][ T8526] binder: 8525:8526 ioctl c0306201 800003c0 returned -14 [ 199.936023][ T6824] usb usb42-port1: attempt power cycle [ 200.510699][ T6824] usb usb42-port1: unable to enumerate USB device [ 200.550747][ T10] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 200.553489][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.560370][ T10] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 200.563347][ T10] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 200.566008][ T10] usb 7-1: Manufacturer: syz [ 200.568815][ T10] usb 7-1: config 0 descriptor?? [ 200.619399][ T10] rc_core: IR keymap rc-hauppauge not found [ 200.622019][ T10] Registered IR keymap rc-empty [ 200.625107][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 200.629530][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input12 [ 200.829587][ T9] usb 7-1: USB disconnect, device number 8 [ 200.880121][ T8534] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 200.994287][ T8536] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 201.367558][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 201.367572][ T40] audit: type=1326 audit(1773675532.030:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 201.379604][ T40] audit: type=1326 audit(1773675532.030:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 201.387141][ T40] audit: type=1326 audit(1773675532.030:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 201.399272][ T40] audit: type=1326 audit(1773675532.030:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc2f97 code=0x7ffc0000 [ 201.406185][ T40] audit: type=1326 audit(1773675532.030:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 201.419413][ T40] audit: type=1326 audit(1773675532.030:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc2f97 code=0x7ffc0000 [ 201.447350][ T40] audit: type=1326 audit(1773675532.030:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 201.469462][ T40] audit: type=1326 audit(1773675532.030:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc2f97 code=0x7ffc0000 [ 201.477080][ T40] audit: type=1326 audit(1773675532.030:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 201.484642][ T40] audit: type=1326 audit(1773675532.030:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.659" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc2f97 code=0x7ffc0000 [ 201.884631][ T8555] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 201.886886][ T8555] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 201.889827][ T8555] vhci_hcd vhci_hcd.0: Device attached [ 201.893785][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.0.661'. [ 202.006889][ T8556] vhci_hcd: connection closed [ 202.007240][ T1205] vhci_hcd vhci_hcd.0: stop threads [ 202.012111][ T1205] vhci_hcd vhci_hcd.0: release socket [ 202.013995][ T1205] vhci_hcd vhci_hcd.0: disconnect device [ 202.069512][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 202.348034][ T8561] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 202.350263][ T8561] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 202.353804][ T8561] vhci_hcd vhci_hcd.0: Device attached [ 202.363204][ T8561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.663'. [ 202.629642][ T8563] vhci_hcd: connection closed [ 202.629904][ T224] vhci_hcd vhci_hcd.4: stop threads [ 202.636011][ T224] vhci_hcd vhci_hcd.4: release socket [ 202.638870][ T224] vhci_hcd vhci_hcd.4: disconnect device [ 202.699455][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 203.329375][ T8568] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 203.331124][ T8577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.665'. [ 203.331758][ T8568] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 203.350502][ T8568] vhci_hcd vhci_hcd.0: Device attached [ 203.410777][ T8580] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 203.412994][ T8580] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 203.415926][ T8580] vhci_hcd vhci_hcd.0: Device attached [ 203.546920][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 203.558035][ T8575] vhci_hcd: connection closed [ 203.558282][ T12] vhci_hcd vhci_hcd.0: stop threads [ 203.561863][ T12] vhci_hcd vhci_hcd.0: release socket [ 203.563668][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 203.590025][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 203.612121][ T8589] netlink: 72 bytes leftover after parsing attributes in process `syz.4.670'. [ 203.613012][ T10] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 203.618418][ T10] usb 37-1: enqueue for inactive port 0 [ 203.725283][ T1460] usb 44-1: SetAddress Request (18) to port 0 [ 203.735011][ T1460] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 203.743371][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 204.146146][ T8581] vhci_hcd: connection reset by peer [ 204.153693][ T12] vhci_hcd vhci_hcd.3: stop threads [ 204.155637][ T12] vhci_hcd vhci_hcd.3: release socket [ 204.157474][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 204.173186][ T8591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'. [ 204.178004][ T8591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.671'. [ 204.597064][ T8595] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 204.599341][ T8595] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 204.602235][ T8595] vhci_hcd vhci_hcd.0: Device attached [ 204.839392][ T7028] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 204.892768][ T34] usb 42-1: SetAddress Request (34) to port 0 [ 204.959546][ T34] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 205.051697][ T7028] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.055742][ T7028] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 205.064027][ T7028] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.068196][ T7028] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 205.074414][ T7028] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 205.086085][ T7028] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.090133][ T7028] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.099571][ T7028] usb 5-1: Product: syz [ 205.102636][ T7028] usb 5-1: Manufacturer: syz [ 205.116968][ T7028] cdc_wdm 5-1:1.0: skipping garbage [ 205.121124][ T7028] cdc_wdm 5-1:1.0: skipping garbage [ 205.126146][ T7028] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 205.129334][ T7028] cdc_wdm 5-1:1.0: Unknown control protocol [ 205.204354][ T8603] vhci_hcd: connection reset by peer [ 205.207083][ T1205] vhci_hcd vhci_hcd.2: stop threads [ 205.213269][ T1205] vhci_hcd vhci_hcd.2: release socket [ 205.216117][ T1205] vhci_hcd vhci_hcd.2: disconnect device [ 205.335836][ T8615] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 205.338077][ T8615] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 205.341294][ T8615] vhci_hcd vhci_hcd.0: Device attached [ 205.609399][ T6087] usb 46-1: SetAddress Request (2) to port 0 [ 205.612617][ T6087] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 205.979411][ T8616] vhci_hcd: connection reset by peer [ 205.981358][ T224] vhci_hcd vhci_hcd.4: stop threads [ 205.983089][ T224] vhci_hcd vhci_hcd.4: release socket [ 205.984998][ T224] vhci_hcd vhci_hcd.4: disconnect device [ 207.684450][ T10] usb 5-1: USB disconnect, device number 8 [ 207.731927][ T8629] kvm: pic: single mode not supported [ 207.731987][ T8629] kvm: pic: level sensitive irq not supported [ 207.745204][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 207.754589][ T8636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.682'. [ 207.767851][ T8632] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 207.770747][ T8632] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 207.775627][ T8632] vhci_hcd vhci_hcd.0: Device attached [ 207.790699][ T8632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.680'. [ 208.216764][ T8654] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 208.218938][ T8654] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 208.222116][ T8654] vhci_hcd vhci_hcd.0: Device attached [ 208.275510][ T8658] FAULT_INJECTION: forcing a failure. [ 208.275510][ T8658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.284137][ T8658] CPU: 2 UID: 0 PID: 8658 Comm: syz.0.687 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.284168][ T8658] Tainted: [L]=SOFTLOCKUP [ 208.284173][ T8658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.284183][ T8658] Call Trace: [ 208.284189][ T8658] [ 208.284196][ T8658] dump_stack_lvl+0x100/0x190 [ 208.284225][ T8658] should_fail_ex.cold+0x5/0xa [ 208.284247][ T8658] _copy_to_user+0x32/0xd0 [ 208.284270][ T8658] simple_read_from_buffer+0xcb/0x170 [ 208.284299][ T8658] proc_fail_nth_read+0x1af/0x230 [ 208.284321][ T8658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.284344][ T8658] ? rw_verify_area+0xce/0x6d0 [ 208.284368][ T8658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.284388][ T8658] vfs_read+0x1e4/0xb30 [ 208.284418][ T8658] ? __pfx_vfs_read+0x10/0x10 [ 208.284442][ T8658] ? find_held_lock+0x2b/0x80 [ 208.284460][ T8658] ? __fget_files+0x215/0x3d0 [ 208.284481][ T8658] ? __fget_files+0x21f/0x3d0 [ 208.284504][ T8658] ksys_read+0x12a/0x250 [ 208.284519][ T8658] ? __pfx_ksys_read+0x10/0x10 [ 208.284542][ T8658] do_int80_emulation+0x141/0x6b0 [ 208.284569][ T8658] asm_int80_emulation+0x1a/0x20 [ 208.284585][ T8658] RIP: 0023:0xf71f5cab [ 208.284598][ T8658] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 208.284615][ T8658] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 208.284632][ T8658] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ad5d0 [ 208.284642][ T8658] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 208.284652][ T8658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.284662][ T8658] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 208.284672][ T8658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.284696][ T8658] [ 208.549733][ T8638] vhci_hcd: connection closed [ 208.553746][ T13] vhci_hcd vhci_hcd.4: stop threads [ 208.557420][ T13] vhci_hcd vhci_hcd.4: release socket [ 208.569353][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 208.776039][ T8667] binder: 8665:8667 ioctl c0306201 80000640 returned -22 [ 208.925945][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.930617][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.172264][ T8667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.200836][ T8667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.286736][ T1460] usb 44-1: device descriptor read/8, error -110 [ 209.610876][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.615278][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.618412][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.623714][ T8655] vhci_hcd: connection closed [ 209.625695][ T12] vhci_hcd vhci_hcd.2: stop threads [ 209.635681][ T12] vhci_hcd vhci_hcd.2: release socket [ 209.649866][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 209.651981][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.975486][ T1460] usb usb44-port1: attempt power cycle [ 210.079699][ T34] usb 42-1: device descriptor read/8, error -110 [ 210.137507][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 210.162025][ T8677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.208735][ T8678] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 210.210915][ T8678] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 210.230679][ T8678] vhci_hcd vhci_hcd.0: Device attached [ 210.235919][ T8678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.690'. [ 210.551005][ T1460] usb usb44-port1: unable to enumerate USB device [ 210.639662][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 210.688383][ T8679] vhci_hcd: connection closed [ 210.689092][ T61] vhci_hcd vhci_hcd.3: stop threads [ 210.692165][ T61] vhci_hcd vhci_hcd.3: release socket [ 210.693760][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 210.713359][ T6087] usb 46-1: device descriptor read/8, error -110 [ 210.731090][ T24] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 210.751561][ T24] usb 43-1: enqueue for inactive port 0 [ 210.859394][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 210.869904][ T34] usb usb42-port1: attempt power cycle [ 211.150295][ T6087] usb usb46-port1: attempt power cycle [ 211.207362][ T8691] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 211.209654][ T8691] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.229440][ T8691] vhci_hcd vhci_hcd.0: Device attached [ 211.229796][ T59] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 211.234412][ T8691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 211.369307][ T829] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 211.399564][ T5988] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 211.449984][ T34] usb usb42-port1: unable to enumerate USB device [ 211.459565][ T5988] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 211.539703][ T829] usb 9-1: Using ep0 maxpacket: 16 [ 211.545755][ T829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.549747][ T829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.552970][ T829] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 211.557607][ T829] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 211.568588][ T829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.573659][ T829] usb 9-1: config 0 descriptor?? [ 211.718274][ T8692] vhci_hcd: connection reset by peer [ 211.721027][ T61] vhci_hcd vhci_hcd.0: stop threads [ 211.723474][ T61] vhci_hcd vhci_hcd.0: release socket [ 211.725397][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 211.830987][ T8702] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 211.833523][ T8702] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.836511][ T8702] vhci_hcd vhci_hcd.0: Device attached [ 211.981849][ T829] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 211.984371][ T829] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 211.987363][ T829] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 211.990980][ T829] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 211.994566][ T829] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 212.001606][ T829] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 212.026481][ T829] shield 0003:0955:7214.0016: Registered Thunderstrike controller [ 212.030567][ T829] shield 0003:0955:7214.0016: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 212.099483][ T9] usb 42-1: SetAddress Request (38) to port 0 [ 212.102535][ T9] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 212.239518][ T8705] random: crng reseeded on system resumption [ 212.246337][ T34] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 212.251062][ T34] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 212.256102][ T6007] usb 9-1: USB disconnect, device number 3 [ 212.259989][ T34] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 212.263861][ T34] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 212.426376][ T8709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.699'. [ 212.432463][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.699'. [ 212.444230][ T8709] FAULT_INJECTION: forcing a failure. [ 212.444230][ T8709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.450522][ T8709] CPU: 2 UID: 0 PID: 8709 Comm: syz.0.699 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.450548][ T8709] Tainted: [L]=SOFTLOCKUP [ 212.450554][ T8709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.450564][ T8709] Call Trace: [ 212.450570][ T8709] [ 212.450577][ T8709] dump_stack_lvl+0x100/0x190 [ 212.450604][ T8703] vhci_hcd: connection reset by peer [ 212.450605][ T8709] should_fail_ex.cold+0x5/0xa [ 212.450625][ T8709] _copy_from_user+0x2e/0xd0 [ 212.450645][ T8709] get_compat_msghdr+0xb3/0x4b0 [ 212.450667][ T8709] ? __pfx_get_compat_msghdr+0x10/0x10 [ 212.450702][ T8709] ___sys_sendmsg+0x1b6/0x1e0 [ 212.450721][ T8709] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.450766][ T8709] __sys_sendmsg+0x170/0x220 [ 212.450789][ T8709] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.450818][ T8709] ? __pfx_ksys_write+0x10/0x10 [ 212.450838][ T8709] __do_fast_syscall_32+0xe3/0x8c0 [ 212.450865][ T8709] do_fast_syscall_32+0x32/0x70 [ 212.450887][ T8709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.450907][ T8709] RIP: 0023:0xf70bef6c [ 212.450920][ T8709] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 212.450935][ T8709] RSP: 002b:00000000f546b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 212.450951][ T8709] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800005c0 [ 212.450962][ T8709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.450970][ T8709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.450979][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.450988][ T8709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.451008][ T8709] [ 212.490236][ T6087] usb usb46-port1: unable to enumerate USB device [ 212.549904][ T1205] vhci_hcd vhci_hcd.2: stop threads [ 212.552371][ T1205] vhci_hcd vhci_hcd.2: release socket [ 212.556585][ T1205] vhci_hcd vhci_hcd.2: disconnect device [ 213.498625][ T8724] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 213.501103][ T8724] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 213.504523][ T8724] vhci_hcd vhci_hcd.0: Device attached [ 214.057827][ T8725] vhci_hcd: connection closed [ 214.059208][ T12] vhci_hcd vhci_hcd.0: stop threads [ 214.070696][ T12] vhci_hcd vhci_hcd.0: release socket [ 214.076677][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 214.399596][ T8740] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 214.402724][ T8740] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.405761][ T8740] vhci_hcd vhci_hcd.0: Device attached [ 214.471534][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 214.471558][ T40] audit: type=1326 audit(1773675545.140:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.705" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feef6c code=0x0 [ 214.750069][ T34] usb 46-1: SetAddress Request (6) to port 0 [ 214.752428][ T34] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 215.039482][ T8741] vhci_hcd: connection reset by peer [ 215.041653][ T1205] vhci_hcd vhci_hcd.4: stop threads [ 215.043546][ T1205] vhci_hcd vhci_hcd.4: release socket [ 215.045608][ T1205] vhci_hcd vhci_hcd.4: disconnect device [ 216.051173][ T8760] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 216.054493][ T8760] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.197269][ T8760] vhci_hcd vhci_hcd.0: Device attached [ 216.546028][ T8761] vhci_hcd: connection closed [ 216.546746][ T100] vhci_hcd vhci_hcd.4: stop threads [ 216.549562][ T5988] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 216.551283][ T100] vhci_hcd vhci_hcd.4: release socket [ 216.555376][ T100] vhci_hcd vhci_hcd.4: disconnect device [ 217.149465][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 217.189448][ T9] usb 42-1: device descriptor read/8, error -110 [ 217.270985][ T40] audit: type=1326 audit(1773675547.940:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.4.715" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc2f6c code=0x0 [ 217.353072][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.357475][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 217.361198][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.365971][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 217.382798][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 217.429131][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.434633][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.438548][ T24] usb 5-1: Product: syz [ 217.441187][ T24] usb 5-1: Manufacturer: syz [ 217.518649][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 217.529775][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 217.540404][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 217.544654][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 217.810109][ T8785] random: crng reseeded on system resumption [ 217.812752][ T9] usb usb42-port1: attempt power cycle [ 217.820050][ T6007] usb usb38-port1: attempt power cycle [ 218.349435][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 218.370446][ T9] usb usb42-port1: unable to enumerate USB device [ 218.499452][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 218.503244][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.510318][ T24] usb 7-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 218.513967][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.517138][ T24] usb 7-1: Product: syz [ 218.519497][ T24] usb 7-1: Manufacturer: syz [ 218.521472][ T24] usb 7-1: SerialNumber: syz [ 218.524813][ T24] usb 7-1: config 0 descriptor?? [ 218.532716][ T24] gspca_main: t613-2.14.0 probing 17a1:0128 [ 218.733470][ T24] gspca_t613: unknown sensor 0000 [ 218.735756][ T24] t613 7-1:0.0: probe with driver t613 failed with error -22 [ 218.742163][ T24] usb 7-1: USB disconnect, device number 9 [ 219.379783][ T40] audit: type=1800 audit(1773675550.010:223): pid=8812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.720" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 219.903666][ T34] usb 46-1: device descriptor read/8, error -110 [ 220.109867][ T8818] usb 5-1: USB disconnect, device number 9 [ 220.183572][ T6007] usb usb38-port1: unable to enumerate USB device [ 220.298345][ T34] usb usb46-port1: attempt power cycle [ 220.801911][ T8829] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 220.804888][ T8829] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 220.808928][ T8829] vhci_hcd vhci_hcd.0: Device attached [ 220.860361][ T34] usb usb46-port1: unable to enumerate USB device [ 221.058543][ T8830] vhci_hcd: connection closed [ 221.058852][ T101] vhci_hcd vhci_hcd.0: stop threads [ 221.064803][ T101] vhci_hcd vhci_hcd.0: release socket [ 221.067427][ T101] vhci_hcd vhci_hcd.0: disconnect device [ 221.079386][ T34] usb 38-1: enqueue for inactive port 0 [ 221.482004][ T8823] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 221.484497][ T8823] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 221.487357][ T8823] vhci_hcd vhci_hcd.0: Device attached [ 221.493038][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.496696][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.598708][ T34] usb usb38-port1: attempt power cycle [ 221.610117][ T8835] vhci_hcd: connection closed [ 221.610474][ T100] vhci_hcd vhci_hcd.3: stop threads [ 221.616731][ T100] vhci_hcd vhci_hcd.3: release socket [ 221.619537][ T100] vhci_hcd vhci_hcd.3: disconnect device [ 221.874747][ T8839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.727'. [ 222.290122][ T34] usb usb38-port1: unable to enumerate USB device [ 222.419369][ T34] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 222.557177][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 222.746387][ T8854] loop6: detected capacity change from 0 to 524287999 [ 222.754949][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.759411][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.763886][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.767346][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.770127][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.778170][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.785073][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.797184][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.802006][ T5944] ldm_validate_partition_table(): Disk read failed. [ 222.809351][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.812467][ T5944] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.816012][ T5944] Dev loop6: unable to read RDB block 0 [ 222.821624][ T5944] loop6: unable to read partition table [ 222.955922][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 222.959749][ T8856] netlink: 3 bytes leftover after parsing attributes in process `syz.0.728'. [ 223.019373][ T8856] batadv1: entered allmulticast mode [ 223.441877][ T8854] ldm_validate_partition_table(): Disk read failed. [ 223.459170][ T8858] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 223.461569][ T8858] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.465340][ T8858] vhci_hcd vhci_hcd.0: Device attached [ 223.483152][ T8854] Dev loop6: unable to read RDB block 0 [ 223.485361][ T8854] loop6: unable to read partition table [ 223.488468][ T8854] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 223.493804][ T5944] ldm_validate_partition_table(): Disk read failed. [ 223.496057][ T5944] Dev loop6: unable to read RDB block 0 [ 223.499000][ T5944] loop6: unable to read partition table [ 223.508900][ T8855] ldm_validate_partition_table(): Disk read failed. [ 223.511853][ T8855] Dev loop6: unable to read RDB block 0 [ 223.513896][ T8855] loop6: unable to read partition table [ 223.516037][ T8855] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 223.519367][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 223.525178][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.529916][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.533740][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.538203][ T34] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 223.541533][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.547894][ T34] usb 9-1: config 0 descriptor?? [ 223.729666][ T9] usb 44-1: SetAddress Request (22) to port 0 [ 223.740127][ T9] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 223.957129][ T34] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 223.962478][ T34] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 223.965273][ T34] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 223.967985][ T34] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 223.970637][ T34] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 223.979065][ T34] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 223.993228][ T8859] vhci_hcd: connection reset by peer [ 223.994703][ T34] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 223.995788][ T12] vhci_hcd vhci_hcd.3: stop threads [ 224.006294][ T12] vhci_hcd vhci_hcd.3: release socket [ 224.008443][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 224.008968][ T34] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 224.215136][ T8873] random: crng reseeded on system resumption [ 224.233298][ T34] usb 9-1: USB disconnect, device number 4 [ 224.235466][ T8818] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 224.239391][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 224.249941][ T8818] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 224.257445][ T8818] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 224.271498][ T8818] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 224.400910][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 224.404043][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 224.407681][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.411075][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 224.414893][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 224.420429][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.423786][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.426783][ T24] usb 5-1: Product: syz [ 224.428401][ T24] usb 5-1: Manufacturer: syz [ 224.436054][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 224.438036][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 224.441366][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 224.443492][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 226.826412][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.738'. [ 227.166405][ T34] usb 5-1: USB disconnect, device number 10 [ 227.231123][ T8906] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 227.233311][ T8906] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 227.259374][ T8906] vhci_hcd vhci_hcd.0: Device attached [ 227.324626][ T8910] fuse: Unknown parameter '0x0000000000000006' [ 227.466862][ T8907] vhci_hcd: connection closed [ 227.467178][ T101] vhci_hcd vhci_hcd.4: stop threads [ 227.472358][ T101] vhci_hcd vhci_hcd.4: release socket [ 227.475378][ T101] vhci_hcd vhci_hcd.4: disconnect device [ 227.506921][ T8912] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 227.510002][ T8912] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 227.528856][ T8912] vhci_hcd vhci_hcd.0: Device attached [ 227.789577][ T10] usb 38-1: SetAddress Request (30) to port 0 [ 227.807513][ T10] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 228.084268][ T8913] vhci_hcd: connection reset by peer [ 228.087131][ T46] vhci_hcd vhci_hcd.0: stop threads [ 228.089698][ T46] vhci_hcd vhci_hcd.0: release socket [ 228.092625][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 228.795899][ T9] usb 44-1: device descriptor read/8, error -110 [ 229.330610][ T9] usb usb44-port1: attempt power cycle [ 229.935279][ T9] usb usb44-port1: unable to enumerate USB device [ 230.152863][ T8946] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 230.155161][ T8946] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 230.158742][ T8946] vhci_hcd vhci_hcd.0: Device attached [ 230.769851][ T8948] vhci_hcd: connection closed [ 230.774155][ T46] vhci_hcd vhci_hcd.0: stop threads [ 230.782165][ T46] vhci_hcd vhci_hcd.0: release socket [ 230.790045][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 232.145003][ T8968] wg2 speed is unknown, defaulting to 1000 [ 232.362519][ T8973] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 232.365406][ T8973] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 232.379517][ T8973] vhci_hcd vhci_hcd.0: Device attached [ 232.384672][ T8976] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 232.386855][ T8976] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 232.389546][ T8976] vhci_hcd vhci_hcd.0: Device attached [ 232.393912][ T8976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.753'. [ 232.596298][ T1460] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 232.617453][ T8974] vhci_hcd: connection closed [ 232.618369][ T12] vhci_hcd vhci_hcd.0: stop threads [ 232.623791][ T12] vhci_hcd vhci_hcd.0: release socket [ 232.626785][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 232.679371][ T1460] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 232.869535][ T8977] vhci_hcd: connection reset by peer [ 232.870338][ T10] usb 38-1: device descriptor read/8, error -110 [ 232.894571][ T1205] vhci_hcd vhci_hcd.3: stop threads [ 232.896401][ T1205] vhci_hcd vhci_hcd.3: release socket [ 232.898272][ T1205] vhci_hcd vhci_hcd.3: disconnect device [ 232.912818][ T8984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.757'. [ 233.270078][ T10] usb usb38-port1: attempt power cycle [ 233.301374][ T6007] IPVS: starting estimator thread 0... [ 233.389338][ T8998] IPVS: using max 45 ests per chain, 108000 per kthread [ 233.759466][ T6087] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 233.931579][ T6087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.936268][ T6087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.940519][ T6087] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.945971][ T6087] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.946218][ T9007] loop6: detected capacity change from 0 to 524287999 [ 233.950037][ T6087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.955731][ T9007] buffer_io_error: 56 callbacks suppressed [ 233.955790][ T9007] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.958581][ T6087] usb 5-1: config 0 descriptor?? [ 233.959193][ T9007] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.969194][ T9007] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.972685][ T9007] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.976117][ T9007] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.979926][ T9007] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.983793][ T9007] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.987845][ T9007] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.991547][ T9007] ldm_validate_partition_table(): Disk read failed. [ 233.994574][ T9007] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.003041][ T9007] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.007230][ T9007] Dev loop6: unable to read RDB block 0 [ 234.059802][ T10] usb usb38-port1: unable to enumerate USB device [ 234.063133][ T9007] loop6: unable to read partition table [ 234.072804][ T9007] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 234.125852][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 234.130176][ T9007] netlink: 3 bytes leftover after parsing attributes in process `syz.4.760'. [ 234.142265][ T9007] batadv1: entered allmulticast mode [ 234.189756][ T5944] ldm_validate_partition_table(): Disk read failed. [ 234.192428][ T5944] Dev loop6: unable to read RDB block 0 [ 234.194810][ T5944] loop6: unable to read partition table [ 234.232045][ T9009] loop6: unable to read partition table [ 234.235030][ T9009] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 234.406807][ T6087] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 234.758144][ T1024] usb 5-1: USB disconnect, device number 11 [ 234.759015][ T9003] plantronics 0003:047F:FFFF.0018: usb_submit_urb(ctrl) failed: -19 [ 235.922546][ T9037] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 235.924794][ T9037] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.931340][ T9037] vhci_hcd vhci_hcd.0: Device attached [ 235.944641][ T9037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.768'. [ 236.109395][ T6106] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 236.149470][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 236.179425][ T6106] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 236.189189][ T9042] vhci_hcd: connection reset by peer [ 236.193846][ T12] vhci_hcd vhci_hcd.2: stop threads [ 236.195853][ T12] vhci_hcd vhci_hcd.2: release socket [ 236.198050][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 236.339402][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 236.343219][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.347747][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.352991][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 236.358281][ T10] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 236.362310][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.367881][ T10] usb 9-1: config 0 descriptor?? [ 236.526309][ T9048] FAULT_INJECTION: forcing a failure. [ 236.526309][ T9048] name failslab, interval 1, probability 0, space 0, times 0 [ 236.531794][ T9048] CPU: 3 UID: 0 PID: 9048 Comm: syz.0.773 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.531820][ T9048] Tainted: [L]=SOFTLOCKUP [ 236.531825][ T9048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.531834][ T9048] Call Trace: [ 236.531841][ T9048] [ 236.531847][ T9048] dump_stack_lvl+0x100/0x190 [ 236.531876][ T9048] should_fail_ex.cold+0x5/0xa [ 236.531895][ T9048] should_failslab+0xc2/0x120 [ 236.531912][ T9048] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 236.531935][ T9048] ? __alloc_skb+0x140/0x710 [ 236.531965][ T9048] __alloc_skb+0x140/0x710 [ 236.531983][ T9048] ? __alloc_skb+0x5b7/0x710 [ 236.532002][ T9048] ? __pfx___alloc_skb+0x10/0x10 [ 236.532021][ T9048] ? find_held_lock+0x2b/0x80 [ 236.532036][ T9048] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 236.532061][ T9048] inet6_rt_notify+0x1d2/0x4c0 [ 236.532085][ T9048] fib6_add_rt2node+0x1f36/0x3c30 [ 236.532110][ T9048] ? fib6_nh_init+0x7d9/0x1c90 [ 236.532131][ T9048] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 236.532151][ T9048] ? fib6_add_1+0xe1c/0x1700 [ 236.532179][ T9048] ? fib6_add+0x60e/0x1d30 [ 236.532198][ T9048] fib6_add+0x60e/0x1d30 [ 236.532222][ T9048] ? do_raw_spin_lock+0x128/0x260 [ 236.532244][ T9048] ? __pfx_fib6_add+0x10/0x10 [ 236.532263][ T9048] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 236.532284][ T9048] ? __asan_memcpy+0x3c/0x60 [ 236.532309][ T9048] ip6_route_add+0xf9/0x1d0 [ 236.532327][ T9048] ipv6_route_ioctl+0x42d/0x5c0 [ 236.532350][ T9048] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 236.532380][ T9048] ? __might_fault+0xc5/0x140 [ 236.532400][ T9048] ? __might_fault+0xc5/0x140 [ 236.532428][ T9048] inet6_compat_ioctl+0x2db/0x360 [ 236.532449][ T9048] ? __pfx_inet6_compat_ioctl+0x10/0x10 [ 236.532477][ T9048] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 236.532500][ T9048] ? __pfx_inet6_compat_ioctl+0x10/0x10 [ 236.532521][ T9048] compat_sock_ioctl+0x179/0x760 [ 236.532541][ T9048] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 236.532563][ T9048] ? __fget_files+0x21f/0x3d0 [ 236.532581][ T9048] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 236.532600][ T9048] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 236.532624][ T9048] __do_fast_syscall_32+0xe3/0x8c0 [ 236.532650][ T9048] do_fast_syscall_32+0x32/0x70 [ 236.532672][ T9048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.532691][ T9048] RIP: 0023:0xf70bef6c [ 236.532704][ T9048] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 236.532718][ T9048] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 236.532736][ T9048] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000890b [ 236.532746][ T9048] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.532755][ T9048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.532764][ T9048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.532773][ T9048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.532794][ T9048] [ 236.711420][ T40] audit: type=1326 audit(1773675567.380:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 236.719069][ T40] audit: type=1326 audit(1773675567.380:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 236.726157][ T40] audit: type=1326 audit(1773675567.380:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.772" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 236.735431][ T40] audit: type=1326 audit(1773675567.380:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 236.742353][ T40] audit: type=1326 audit(1773675567.380:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 236.749570][ T40] audit: type=1326 audit(1773675567.380:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.772" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 236.757179][ T40] audit: type=1326 audit(1773675567.380:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 236.764622][ T40] audit: type=1326 audit(1773675567.380:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 236.772949][ T40] audit: type=1326 audit(1773675567.380:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.772" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 236.780348][ T40] audit: type=1326 audit(1773675567.400:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9044 comm="syz.3.772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 236.793569][ T10] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 236.796944][ T10] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 236.800770][ T10] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 236.803020][ T10] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 236.811410][ T10] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 236.825424][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 236.864508][ T10] shield 0003:0955:7214.0019: Registered Thunderstrike controller [ 236.874055][ T10] shield 0003:0955:7214.0019: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 237.042541][ T9062] random: crng reseeded on system resumption [ 237.054791][ T6029] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 237.054801][ T6007] usb 9-1: USB disconnect, device number 5 [ 237.062169][ T6029] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 237.076451][ T6029] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 237.085260][ T6029] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 237.829367][ T1460] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 238.658514][ T9079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.780'. [ 238.954814][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.781'. [ 239.639398][ T6087] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 239.789431][ T6087] usb 9-1: Using ep0 maxpacket: 16 [ 239.793410][ T6087] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.798388][ T6087] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.803357][ T6087] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 239.809123][ T6087] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 239.813142][ T6087] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.818325][ T6087] usb 9-1: config 0 descriptor?? [ 240.044898][ T9105] FAULT_INJECTION: forcing a failure. [ 240.044898][ T9105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.051886][ T9105] CPU: 2 UID: 0 PID: 9105 Comm: syz.2.787 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.051909][ T9105] Tainted: [L]=SOFTLOCKUP [ 240.051914][ T9105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.051921][ T9105] Call Trace: [ 240.051926][ T9105] [ 240.051931][ T9105] dump_stack_lvl+0x100/0x190 [ 240.051955][ T9105] should_fail_ex.cold+0x5/0xa [ 240.051983][ T9105] _copy_from_user+0x2e/0xd0 [ 240.052000][ T9105] drm_ioctl+0x520/0xc60 [ 240.052018][ T9105] ? __pfx_drm_dropmaster_ioctl+0x10/0x10 [ 240.052037][ T9105] ? __pfx_drm_ioctl+0x10/0x10 [ 240.052060][ T9105] drm_compat_ioctl+0x376/0x4b0 [ 240.052079][ T9105] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 240.052095][ T9105] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 240.052114][ T9105] __do_fast_syscall_32+0xe3/0x8c0 [ 240.052135][ T9105] do_fast_syscall_32+0x32/0x70 [ 240.052151][ T9105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.052169][ T9105] RIP: 0023:0xf6feef6c [ 240.052183][ T9105] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 240.052194][ T9105] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 240.052207][ T9105] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000641f [ 240.052213][ T9105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.052220][ T9105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.052226][ T9105] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 240.052233][ T9105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.052249][ T9105] [ 240.251241][ T6087] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 240.253587][ T6087] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 240.255937][ T6087] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 240.258239][ T6087] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 240.945879][ T9117] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 240.952740][ T9117] overlayfs: overlapping lowerdir path [ 241.030543][ T6087] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 241.048481][ T6087] input: HID 0955:7214 Haptics as /devices/virtual/input/input16 [ 241.062848][ T6087] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 241.066534][ T6087] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 241.129693][ T24] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 241.136691][ T24] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 241.143600][ T6087] usb 9-1: USB disconnect, device number 6 [ 241.150148][ T24] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 241.155052][ T24] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 241.259436][ T6106] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 242.434765][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.795'. [ 243.481241][ T8818] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 243.485862][ T8818] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 243.489449][ T8818] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 243.493988][ T8818] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 243.498889][ T8818] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 243.503432][ T8818] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 243.513391][ T8818] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 243.517727][ T8818] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 243.524645][ T8818] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 243.530177][ T9159] block device autoloading is deprecated and will be removed. [ 243.531195][ T8818] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 243.550250][ T8818] hid-generic 0006:0004:0009.001B: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 244.524788][ T9170] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 244.528160][ T9170] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 244.531567][ T9170] vhci_hcd vhci_hcd.0: Device attached [ 244.539444][ T9170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.804'. [ 244.743033][ T24] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 245.049468][ T9171] vhci_hcd: connection closed [ 245.054438][ T46] vhci_hcd vhci_hcd.4: stop threads [ 245.067702][ T46] vhci_hcd vhci_hcd.4: release socket [ 245.074507][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 245.424453][ T9182] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 245.426980][ T9182] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 245.431110][ T9182] vhci_hcd vhci_hcd.0: Device attached [ 245.490317][ T24] usb 45-1: new full-speed USB device number 4 using vhci_hcd [ 245.493709][ T24] usb 45-1: enqueue for inactive port 0 [ 245.559572][ T24] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 245.724245][ T6087] usb 42-1: SetAddress Request (42) to port 0 [ 245.738691][ T6087] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 246.047687][ T9183] vhci_hcd: connection reset by peer [ 246.050449][ T1205] vhci_hcd vhci_hcd.2: stop threads [ 246.053649][ T1205] vhci_hcd vhci_hcd.2: release socket [ 246.055682][ T1205] vhci_hcd vhci_hcd.2: disconnect device [ 246.345159][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 246.348467][ T9199] netlink: 3 bytes leftover after parsing attributes in process `syz.3.812'. [ 246.355152][ T9199] batadv1: entered allmulticast mode [ 248.522356][ T9217] FAULT_INJECTION: forcing a failure. [ 248.522356][ T9217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.529396][ T9217] CPU: 2 UID: 0 PID: 9217 Comm: syz.4.818 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.529423][ T9217] Tainted: [L]=SOFTLOCKUP [ 248.529427][ T9217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.529433][ T9217] Call Trace: [ 248.529439][ T9217] [ 248.529444][ T9217] dump_stack_lvl+0x100/0x190 [ 248.529465][ T9217] should_fail_ex.cold+0x5/0xa [ 248.529486][ T9217] _copy_to_user+0x32/0xd0 [ 248.529507][ T9217] do_pages_stat+0x559/0x7f0 [ 248.529535][ T9217] ? __pfx_do_pages_stat+0x10/0x10 [ 248.529565][ T9217] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 248.529585][ T9217] ? lockdep_hardirqs_on+0x78/0x100 [ 248.529606][ T9217] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 248.529624][ T9217] kernel_move_pages+0xecf/0x13f0 [ 248.529640][ T9217] ? __mutex_unlock_slowpath+0x15c/0x790 [ 248.529657][ T9217] ? __pfx_kernel_move_pages+0x10/0x10 [ 248.529671][ T9217] ? __fget_files+0x21f/0x3d0 [ 248.529702][ T9217] ? fput+0x79/0x100 [ 248.529717][ T9217] ? ksys_write+0x1ac/0x250 [ 248.529729][ T9217] __ia32_sys_move_pages+0xdd/0x1b0 [ 248.529743][ T9217] ? __do_fast_syscall_32+0x94/0x8c0 [ 248.529759][ T9217] ? lockdep_hardirqs_on+0x78/0x100 [ 248.529774][ T9217] __do_fast_syscall_32+0xe3/0x8c0 [ 248.529792][ T9217] do_fast_syscall_32+0x32/0x70 [ 248.529809][ T9217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.529826][ T9217] RIP: 0023:0xf7fc2f6c [ 248.529837][ T9217] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 248.529847][ T9217] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 248.529859][ T9217] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000001 [ 248.529866][ T9217] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000080000180 [ 248.529872][ T9217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.529878][ T9217] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 248.529885][ T9217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.529900][ T9217] [ 249.127979][ T9228] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 249.131376][ T9228] overlayfs: overlapping lowerdir path [ 249.754576][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 249.758471][ T9232] netlink: 3 bytes leftover after parsing attributes in process `syz.3.822'. [ 249.767424][ T9232] batadv2: entered allmulticast mode [ 250.229366][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 250.379387][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 250.384207][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.388678][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.393136][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 250.398832][ T34] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 250.403924][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.408837][ T34] usb 7-1: config 0 descriptor?? [ 250.831232][ T34] hid_parser_main: 7 callbacks suppressed [ 250.831246][ T34] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 250.837169][ T34] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 250.841321][ T34] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 250.844492][ T34] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 250.847505][ T34] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 250.856265][ T34] input: HID 0955:7214 Haptics as /devices/virtual/input/input17 [ 250.875429][ T34] shield 0003:0955:7214.001C: Registered Thunderstrike controller [ 250.878893][ T34] shield 0003:0955:7214.001C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 251.070334][ T6087] usb 42-1: device descriptor read/8, error -110 [ 251.090632][ T6007] usb 7-1: USB disconnect, device number 10 [ 251.094041][ T8818] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 251.103913][ T8818] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 251.120921][ T8818] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 251.129132][ T8818] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 251.713800][ T6087] usb usb42-port1: attempt power cycle [ 251.831702][ T9252] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 251.834808][ T9252] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 251.838589][ T9252] vhci_hcd vhci_hcd.0: Device attached [ 252.111404][ T6007] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 252.115260][ T6007] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 252.118650][ T6007] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 252.129547][ T24] usb 38-1: SetAddress Request (34) to port 0 [ 252.132376][ T24] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 252.149807][ T6007] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 252.153259][ T6007] hid-generic 0006:0004:0009.001D: unknown main item tag 0x0 [ 252.169866][ T6007] hid-generic 0006:0004:0009.001D: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 252.184144][ T9253] vhci_hcd: connection reset by peer [ 252.187165][ T132] vhci_hcd vhci_hcd.0: stop threads [ 252.189911][ T132] vhci_hcd vhci_hcd.0: release socket [ 252.192532][ T132] vhci_hcd vhci_hcd.0: disconnect device [ 252.245391][ T6007] hid-generic 0006:0004:0009.001E: hidraw2: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 252.299932][ T6087] usb usb42-port1: unable to enumerate USB device [ 252.811455][ T9264] ntfs3(nullb0): Primary boot signature is not NTFS. [ 253.013411][ T9264] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 253.658880][ T9278] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 253.661822][ T9278] overlayfs: overlapping lowerdir path [ 253.672229][ T9288] loop6: detected capacity change from 0 to 524287999 [ 253.675269][ T9288] buffer_io_error: 25 callbacks suppressed [ 253.675285][ T9288] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.680215][ T9288] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.683275][ T9288] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.686328][ T9288] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.689510][ T9288] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.692732][ T9288] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.695616][ T9288] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.698816][ T9288] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.702280][ T9288] ldm_validate_partition_table(): Disk read failed. [ 253.709550][ T9288] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.712691][ T9288] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.715426][ T9288] Dev loop6: unable to read RDB block 0 [ 253.717457][ T9288] loop6: unable to read partition table [ 253.719882][ T9288] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 253.918918][ T9288] ldm_validate_partition_table(): Disk read failed. [ 253.922641][ T9288] Dev loop6: unable to read RDB block 0 [ 253.926608][ T9288] loop6: unable to read partition table [ 253.929106][ T9288] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 254.229435][ T1024] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 254.332524][ T9296] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 254.334677][ T9296] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 254.449502][ T6087] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 254.458783][ T9296] vhci_hcd vhci_hcd.0: Device attached [ 254.465437][ T9305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.835'. [ 254.469949][ T1024] usb 5-1: Using ep0 maxpacket: 16 [ 254.474627][ T1024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.479664][ T1024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.484598][ T1024] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 254.491109][ T1024] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 254.494984][ T1024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.515418][ T1024] usb 5-1: config 0 descriptor?? [ 254.649551][ T8818] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 254.709505][ T8818] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 255.058587][ T1024] input: HID 0955:7214 Haptics as /devices/virtual/input/input18 [ 255.112182][ T1024] shield 0003:0955:7214.001F: Registered Thunderstrike controller [ 255.116407][ T1024] shield 0003:0955:7214.001F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 255.243360][ T9292] random: crng reseeded on system resumption [ 255.252142][ T29] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 255.252363][ T34] usb 5-1: USB disconnect, device number 12 [ 255.256162][ T29] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 255.264180][ T29] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 255.268149][ T29] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 255.305415][ T9300] vhci_hcd: connection reset by peer [ 255.325414][ T1205] vhci_hcd vhci_hcd.3: stop threads [ 255.328427][ T1205] vhci_hcd vhci_hcd.3: release socket [ 255.332866][ T1205] vhci_hcd vhci_hcd.3: disconnect device [ 255.819509][ T29] hid-generic 0006:0004:0009.0020: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 255.863409][ T6087] usb 9-1: Using ep0 maxpacket: 16 [ 255.867305][ T6087] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.871423][ T6087] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.874673][ T6087] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 255.879484][ T6087] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 255.882519][ T6087] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.887412][ T6087] usb 9-1: config 0 descriptor?? [ 256.344558][ T6087] hid_parser_main: 51 callbacks suppressed [ 256.344571][ T6087] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 256.349455][ T6087] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 256.354222][ T6087] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 256.356710][ T6087] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 256.359366][ T6087] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 256.368206][ T6087] input: HID 0955:7214 Haptics as /devices/virtual/input/input19 [ 256.385721][ T6087] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 256.388415][ T6087] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 256.615063][ T6087] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 256.615398][ T34] usb 9-1: USB disconnect, device number 7 [ 256.618861][ T6087] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 256.627830][ T6087] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 256.633815][ T6087] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 257.152839][ T9330] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 257.155786][ T9330] overlayfs: overlapping lowerdir path [ 257.203270][ T24] usb 38-1: device descriptor read/8, error -110 [ 257.459358][ T6106] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 257.609354][ T6106] usb 9-1: Using ep0 maxpacket: 16 [ 257.613464][ T6106] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.618469][ T6106] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.623634][ T6106] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 257.629750][ T6106] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 257.633679][ T6106] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.640315][ T6106] usb 9-1: config 0 descriptor?? [ 258.050041][ T6106] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 258.052531][ T6106] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 258.054737][ T6106] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 258.056936][ T6106] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 258.059681][ T6106] shield 0003:0955:7214.0022: unknown main item tag 0x0 [ 258.064380][ T6106] input: HID 0955:7214 Haptics as /devices/virtual/input/input20 [ 258.093519][ T6106] shield 0003:0955:7214.0022: Registered Thunderstrike controller [ 258.098492][ T6106] shield 0003:0955:7214.0022: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 258.340318][ T9334] random: crng reseeded on system resumption [ 258.349313][ T6029] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 258.349695][ T34] usb 9-1: USB disconnect, device number 8 [ 258.354602][ T6029] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 258.362924][ T6029] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 258.367797][ T6029] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 258.367990][ T24] usb usb38-port1: attempt power cycle [ 259.239538][ T34] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 259.287052][ T24] usb usb38-port1: unable to enumerate USB device [ 259.488438][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.494527][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.498438][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.514040][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.517729][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.552230][ T34] usb 7-1: config 0 descriptor?? [ 259.870851][ T8818] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 260.139037][ T34] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 260.380364][ T24] hid-generic 0006:0004:0009.0024: hidraw2: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 260.391916][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.394610][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.108542][ T9370] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 261.110785][ T9370] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 261.128195][ T9370] vhci_hcd vhci_hcd.0: Device attached [ 261.432185][ C3] plantronics 0003:047F:FFFF.0023: usb_submit_urb(ctrl) failed: -1 [ 261.446563][ T6029] usb 38-1: SetAddress Request (38) to port 0 [ 261.448696][ T6029] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 261.993830][ T9371] vhci_hcd: connection reset by peer [ 261.996087][ T1205] vhci_hcd vhci_hcd.0: stop threads [ 261.998672][ T1205] vhci_hcd vhci_hcd.0: release socket [ 262.001287][ T1205] vhci_hcd vhci_hcd.0: disconnect device [ 262.950288][ T34] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 262.955308][ T34] usb 7-1: device reset changed ep0 maxpacket size! [ 262.960322][ T1460] usb 7-1: USB disconnect, device number 11 [ 263.069426][ T29] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 263.119433][ T1460] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 263.251145][ T29] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.254423][ T29] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 263.258955][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.262437][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 263.266117][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 263.271812][ T29] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.275046][ T29] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.277995][ T29] usb 9-1: Product: syz [ 263.279726][ T29] usb 9-1: Manufacturer: syz [ 263.288677][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 263.292347][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 263.298267][ T29] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 263.299370][ T1460] usb 7-1: Using ep0 maxpacket: 16 [ 263.300811][ T29] cdc_wdm 9-1:1.0: Unknown control protocol [ 263.304862][ T1460] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.308702][ T1460] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.312040][ T1460] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 263.316900][ T1460] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 263.320234][ T1460] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.324076][ T1460] usb 7-1: config 0 descriptor?? [ 264.191624][ T9388] random: crng reseeded on system resumption [ 264.638833][ T1460] hid_parser_main: 17 callbacks suppressed [ 264.638847][ T1460] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 264.643481][ T1460] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 264.645636][ T7028] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 264.645951][ T1460] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 264.645966][ T1460] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 264.648522][ T7028] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 264.650856][ T1460] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 264.652154][ T1460] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 264.653556][ T7028] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 264.664579][ T7028] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 264.667477][ T7028] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 264.680365][ T1460] shield 0003:0955:7214.0025: Registered Thunderstrike controller [ 264.680962][ T7028] hid-generic 0006:0004:0009.0026: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 264.683120][ T1460] shield 0003:0955:7214.0025: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 264.749576][ T5923] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 264.753436][ T5923] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 264.758375][ T1460] usb 7-1: USB disconnect, device number 12 [ 265.538828][ T9418] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 265.541159][ T9418] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 265.562369][ T9418] vhci_hcd vhci_hcd.0: Device attached [ 265.710902][ T5923] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 265.720960][ T5923] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 265.896011][ T6106] usb 9-1: USB disconnect, device number 9 [ 265.949697][ T29] usb 42-1: SetAddress Request (46) to port 0 [ 265.951901][ T29] usb 42-1: new SuperSpeed USB device number 46 using vhci_hcd [ 266.154308][ T9419] vhci_hcd: connection reset by peer [ 266.156695][ T61] vhci_hcd vhci_hcd.2: stop threads [ 266.158669][ T61] vhci_hcd vhci_hcd.2: release socket [ 266.162203][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 266.621875][ T9435] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 266.624534][ T9435] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 266.636708][ T9435] vhci_hcd vhci_hcd.0: Device attached [ 266.909385][ T6087] usb 44-1: SetAddress Request (26) to port 0 [ 266.912357][ T6087] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 267.233548][ T9436] vhci_hcd: connection reset by peer [ 267.242535][ T100] vhci_hcd vhci_hcd.3: stop threads [ 267.244597][ T100] vhci_hcd vhci_hcd.3: release socket [ 267.248095][ T100] vhci_hcd vhci_hcd.3: disconnect device [ 267.854080][ T6029] usb 38-1: device descriptor read/8, error -110 [ 268.283203][ T6029] usb usb38-port1: attempt power cycle [ 268.579668][ T8818] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 268.657671][ T9464] lo speed is unknown, defaulting to 1000 [ 268.661252][ T9464] lo speed is unknown, defaulting to 1000 [ 268.665781][ T9464] lo speed is unknown, defaulting to 1000 [ 268.675113][ T9464] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 268.694214][ T9464] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 268.725858][ T9464] lo speed is unknown, defaulting to 1000 [ 268.730381][ T9464] lo speed is unknown, defaulting to 1000 [ 268.734393][ T9464] lo speed is unknown, defaulting to 1000 [ 268.738394][ T9464] lo speed is unknown, defaulting to 1000 [ 268.741255][ T8818] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 268.741282][ T8818] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 268.748910][ T8818] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 268.752689][ T8818] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 268.757858][ T8818] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 268.765079][ T8818] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 268.770629][ T8818] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 268.770812][ T9464] lo speed is unknown, defaulting to 1000 [ 268.774436][ T8818] usb 9-1: Product: syz [ 268.778071][ T8818] usb 9-1: Manufacturer: syz [ 268.791188][ T8818] cdc_wdm 9-1:1.0: skipping garbage [ 268.793483][ T8818] cdc_wdm 9-1:1.0: skipping garbage [ 268.800294][ T8818] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 268.802374][ T8818] cdc_wdm 9-1:1.0: Unknown control protocol [ 268.860387][ T6029] usb usb38-port1: unable to enumerate USB device [ 271.037581][ T9489] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 271.040614][ T9489] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 271.051308][ T9489] vhci_hcd vhci_hcd.0: Device attached [ 271.489563][ T1460] usb 38-1: SetAddress Request (42) to port 0 [ 271.492595][ T1460] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd [ 271.550264][ T29] usb 42-1: device descriptor read/8, error -110 [ 271.601560][ T9490] vhci_hcd: connection reset by peer [ 271.606177][ T58] usb 9-1: USB disconnect, device number 10 [ 271.606685][ T224] vhci_hcd vhci_hcd.0: stop threads [ 271.615807][ T224] vhci_hcd vhci_hcd.0: release socket [ 271.619531][ T224] vhci_hcd vhci_hcd.0: disconnect device [ 271.755613][ T24] hid_parser_main: 12 callbacks suppressed [ 271.755642][ T24] hid-generic 0006:0004:0009.0027: unknown main item tag 0x0 [ 271.762452][ T24] hid-generic 0006:0004:0009.0027: unknown main item tag 0x0 [ 271.766110][ T24] hid-generic 0006:0004:0009.0027: unknown main item tag 0x0 [ 271.771431][ T24] hid-generic 0006:0004:0009.0027: unknown main item tag 0x0 [ 271.776207][ T24] hid-generic 0006:0004:0009.0027: unknown main item tag 0x0 [ 271.780826][ T24] hid-generic 0006:0004:0009.0027: unknown main item tag 0x0 [ 271.784217][ T24] hid-generic 0006:0004:0009.0027: unknown main item tag 0x0 [ 271.787852][ T24] hid-generic 0006:0004:0009.0027: unknown main item tag 0x0 [ 271.804507][ T24] hid-generic 0006:0004:0009.0027: unknown main item tag 0x0 [ 271.808386][ T24] hid-generic 0006:0004:0009.0027: unknown main item tag 0x0 [ 271.816700][ T24] hid-generic 0006:0004:0009.0027: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 271.841424][ T9499] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 271.844648][ T9499] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.851803][ T9499] vhci_hcd vhci_hcd.0: Device attached [ 271.855742][ T9499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.886'. [ 271.955380][ T29] usb usb42-port1: attempt power cycle [ 271.989548][ T6087] usb 44-1: device descriptor read/8, error -110 [ 272.049386][ T6029] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 272.110583][ T6029] usb 45-1: new full-speed USB device number 5 using vhci_hcd [ 272.369515][ T9504] vhci_hcd: connection reset by peer [ 272.376849][ T100] vhci_hcd vhci_hcd.4: stop threads [ 272.381446][ T100] vhci_hcd vhci_hcd.4: release socket [ 272.384145][ T100] vhci_hcd vhci_hcd.4: disconnect device [ 272.420387][ T6087] usb usb44-port1: attempt power cycle [ 272.539844][ T29] usb usb42-port1: unable to enumerate USB device [ 272.860977][ T9519] loop6: detected capacity change from 0 to 524287999 [ 272.863958][ T9519] buffer_io_error: 24 callbacks suppressed [ 272.863968][ T9519] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.869103][ T9519] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.872240][ T9519] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.875673][ T9519] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.879050][ T9519] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.882258][ T9519] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.885196][ T9519] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.888346][ T9519] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.891411][ T9519] ldm_validate_partition_table(): Disk read failed. [ 272.894166][ T9519] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.898511][ T9519] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.901953][ T9519] Dev loop6: unable to read RDB block 0 [ 272.904913][ T9519] loop6: unable to read partition table [ 272.907905][ T9519] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 272.972886][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 272.976136][ T9519] netlink: 3 bytes leftover after parsing attributes in process `syz.0.888'. [ 272.996519][ T9519] batadv2: entered allmulticast mode [ 273.022054][ T6087] usb usb44-port1: unable to enumerate USB device [ 273.149856][ T9522] loop6: unable to read partition table [ 273.152516][ T9522] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 273.289431][ T8818] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 273.440693][ T8818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.444424][ T8818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.447613][ T8818] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.452439][ T8818] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.455483][ T8818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.459952][ T8818] usb 7-1: config 0 descriptor?? [ 273.640104][ T6106] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 273.789459][ T6106] usb 5-1: Using ep0 maxpacket: 16 [ 273.792402][ T6106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.796003][ T6106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.799680][ T6106] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.804246][ T6106] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 273.807317][ T6106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.811463][ T6106] usb 5-1: config 0 descriptor?? [ 273.875544][ T8818] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 274.225130][ T6106] input: HID 0955:7214 Haptics as /devices/virtual/input/input22 [ 274.250262][ T6106] shield 0003:0955:7214.0029: Registered Thunderstrike controller [ 274.253955][ T6106] shield 0003:0955:7214.0029: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 274.472390][ T9538] random: crng reseeded on system resumption [ 274.484481][ T9] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 274.489577][ T9] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 274.495388][ T9] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 274.506586][ T6106] usb 5-1: USB disconnect, device number 13 [ 274.509373][ T9] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 275.189534][ C3] plantronics 0003:047F:FFFF.0028: usb_submit_urb(ctrl) failed: -1 [ 275.962330][ T6106] usb 7-1: USB disconnect, device number 13 [ 276.489348][ T6106] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 276.559402][ T1460] usb 38-1: device descriptor read/8, error -110 [ 276.673143][ T9] hid-generic 0006:0004:0009.002A: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 276.799289][ T6106] usb 7-1: Using ep0 maxpacket: 16 [ 276.821391][ T6106] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.829091][ T6106] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.838143][ T6106] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 276.848386][ T6106] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 276.851687][ T6106] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.856889][ T6106] usb 7-1: config 0 descriptor?? [ 276.970605][ T1460] usb usb38-port1: attempt power cycle [ 277.151594][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.902'. [ 277.269692][ T6029] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 277.281583][ T6106] hid_parser_main: 29 callbacks suppressed [ 277.281601][ T6106] shield 0003:0955:7214.002B: unknown main item tag 0x0 [ 277.293913][ T6106] shield 0003:0955:7214.002B: unknown main item tag 0x0 [ 277.298833][ T6106] shield 0003:0955:7214.002B: unknown main item tag 0x0 [ 277.307765][ T6106] shield 0003:0955:7214.002B: unknown main item tag 0x0 [ 277.310907][ T6106] shield 0003:0955:7214.002B: unknown main item tag 0x0 [ 277.315024][ T6106] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 277.338623][ T6106] shield 0003:0955:7214.002B: Registered Thunderstrike controller [ 277.347378][ T6106] shield 0003:0955:7214.002B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 277.474170][ T9544] random: crng reseeded on system resumption [ 277.482321][ T5923] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 277.482410][ T58] usb 7-1: USB disconnect, device number 14 [ 277.486007][ T5923] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 277.495504][ T5923] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 277.496166][ T58] ------------[ cut here ]------------ [ 277.499190][ T5923] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 277.501140][ T58] workqueue: work disable count underflowed [ 277.501152][ T58] WARNING: kernel/workqueue.c:4410 at enable_work+0x2d1/0x320, CPU#1: kworker/1:1/58 [ 277.501183][ T58] Modules linked in: [ 277.501216][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.515738][ T58] Tainted: [L]=SOFTLOCKUP [ 277.517427][ T58] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.520788][ T58] Workqueue: usb_hub_wq hub_event [ 277.522480][ T58] RIP: 0010:enable_work+0x2d1/0x320 [ 277.524188][ T58] Code: ff e8 e3 83 38 00 e8 7e c5 bd 09 e9 61 ff ff ff e8 d4 83 38 00 90 0f 0b 90 e9 17 fe ff ff e8 c6 83 38 00 48 8d 3d 5f 2b 0d 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 7a 10 a4 00 e9 [ 277.530577][ T1460] usb usb38-port1: unable to enumerate USB device SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 277.530992][ T58] RSP: 0018:ffffc9000079f3b0 EFLAGS: 00010093 [ 277.536714][ T58] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81cf92d0 [ 277.540121][ T58] RDX: ffff8880210824c0 RSI: ffffffff81cf949a RDI: ffffffff90dcc000 [ 277.542962][ T58] RBP: ffff88806aa2e738 R08: 0000000000000007 R09: 0000000000000000 [ 277.545762][ T58] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 277.548548][ T58] R13: 1ffff920000f3e77 R14: ffff88806aa2e698 R15: 000000007fffffff [ 277.552187][ T58] FS: 0000000000000000(0000) GS:ffff88809724a000(0000) knlGS:0000000000000000 [ 277.556343][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.559135][ T58] CR2: 00000000f5443ff4 CR3: 0000000056bef000 CR4: 0000000000352ef0 [ 277.562619][ T58] Call Trace: [ 277.564525][ T58] [ 277.565843][ T58] ? __pfx_enable_work+0x10/0x10 [ 277.568151][ T58] ? __pfx___might_resched+0x10/0x10 [ 277.570529][ T58] cancel_delayed_work_sync+0x96/0xf0 [ 277.572837][ T58] thermal_zone_device_unregister+0x28e/0x4e0 [ 277.575453][ T58] ? __pfx_shield_remove+0x10/0x10 [ 277.577625][ T58] power_supply_unregister+0x10a/0x150 [ 277.580144][ T58] shield_remove+0x75/0x130 [ 277.582344][ T58] ? __pfx_shield_remove+0x10/0x10 [ 277.584578][ T58] hid_device_remove+0xd1/0x270 [ 277.586659][ T58] ? __pfx_hid_device_remove+0x10/0x10 [ 277.589032][ T58] device_remove+0xcb/0x180 [ 277.590978][ T58] device_release_driver_internal+0x42e/0x600 [ 277.593526][ T58] bus_remove_device+0x22f/0x440 [ 277.595745][ T58] device_del+0x376/0x9b0 [ 277.597640][ T58] ? __pfx_device_del+0x10/0x10 [ 277.599851][ T58] ? do_raw_spin_lock+0x128/0x260 [ 277.601877][ T58] ? find_held_lock+0x2b/0x80 [ 277.603566][ T58] hid_destroy_device+0x19c/0x240 [ 277.605349][ T58] usbhid_disconnect+0xa0/0xe0 [ 277.606945][ T58] usb_unbind_interface+0x1dd/0x9e0 [ 277.608676][ T58] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 277.610455][ T58] ? __pfx_usb_unbind_interface+0x10/0x10 [ 277.612280][ T58] device_remove+0x12a/0x180 [ 277.613881][ T58] device_release_driver_internal+0x42e/0x600 [ 277.615883][ T58] bus_remove_device+0x22f/0x440 [ 277.617558][ T58] device_del+0x376/0x9b0 [ 277.619005][ T58] ? __pfx_device_del+0x10/0x10 [ 277.620792][ T58] ? kobject_put+0xb9/0x640 [ 277.622483][ T58] usb_disable_device+0x367/0x810 [ 277.624273][ T58] usb_disconnect+0x2e2/0x9a0 [ 277.625971][ T58] hub_event+0x1d0c/0x4af0 [ 277.627490][ T58] ? __lock_acquire+0x4a5/0x2630 [ 277.629149][ T58] ? do_raw_spin_unlock+0x145/0x1e0 [ 277.630811][ T58] ? __pfx_hub_event+0x10/0x10 [ 277.632411][ T58] ? debug_object_deactivate+0x2e4/0x3b0 [ 277.634250][ T58] ? perf_trace_sched_pi_setprio+0x640/0x750 [ 277.636266][ T58] ? rcu_is_watching+0x12/0xc0 [ 277.637909][ T58] process_one_work+0xa23/0x19a0 [ 277.639685][ T58] ? __pfx_process_one_work+0x10/0x10 [ 277.641575][ T58] ? __pfx_hub_event+0x10/0x10 [ 277.643291][ T58] worker_thread+0x5ef/0xe50 [ 277.644929][ T58] ? kthread+0x13a/0x450 [ 277.646342][ T58] ? __pfx_worker_thread+0x10/0x10 [ 277.648209][ T58] kthread+0x370/0x450 [ 277.649767][ T58] ? __pfx_kthread+0x10/0x10 [ 277.651501][ T58] ret_from_fork+0x754/0xd80 [ 277.653182][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 277.655085][ T58] ? __switch_to+0x7b4/0x1120 [ 277.656856][ T58] ? __pfx_kthread+0x10/0x10 [ 277.658516][ T58] ret_from_fork_asm+0x1a/0x30 [ 277.660297][ T58] [ 277.661500][ T58] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 277.664658][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.669035][ T58] Tainted: [L]=SOFTLOCKUP [ 277.670836][ T58] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.675174][ T58] Workqueue: usb_hub_wq hub_event [ 277.677251][ T58] Call Trace: [ 277.678771][ T58] [ 277.679955][ T58] dump_stack_lvl+0x100/0x190 [ 277.681747][ T58] vpanic+0x552/0x970 [ 277.683338][ T58] ? __pfx_vpanic+0x10/0x10 [ 277.685210][ T58] panic+0xd1/0xe0 [ 277.686481][ T58] ? __pfx_panic+0x10/0x10 [ 277.687992][ T58] ? check_panic_on_warn+0x1f/0x90 [ 277.689749][ T58] check_panic_on_warn.cold+0x19/0x34 [ 277.691832][ T58] ? enable_work+0x2d1/0x320 [ 277.693886][ T58] __warn.cold+0x191/0x348 [ 277.695483][ T58] __report_bug+0x296/0x3d0 [ 277.697083][ T58] ? enable_work+0x2d1/0x320 [ 277.698662][ T58] ? __pfx___report_bug+0x10/0x10 [ 277.700432][ T58] ? __pfx_debug_object_free+0x10/0x10 [ 277.702342][ T58] ? enable_work+0x2ca/0x320 [ 277.704071][ T58] ? enable_work+0x100/0x320 [ 277.705759][ T58] ? find_held_lock+0x2b/0x80 [ 277.707545][ T58] ? __flush_work+0x928/0xcb0 [ 277.709397][ T58] ? __flush_work+0x928/0xcb0 [ 277.711342][ T58] report_bug_entry+0xe1/0x290 [ 277.713044][ T58] ? enable_work+0x2d1/0x320 [ 277.714612][ T58] handle_bug+0x1cd/0x2a0 [ 277.716059][ T58] exc_invalid_op+0x17/0x50 [ 277.717651][ T58] asm_exc_invalid_op+0x1a/0x20 [ 277.719499][ T58] RIP: 0010:enable_work+0x2d1/0x320 [ 277.721454][ T58] Code: ff e8 e3 83 38 00 e8 7e c5 bd 09 e9 61 ff ff ff e8 d4 83 38 00 90 0f 0b 90 e9 17 fe ff ff e8 c6 83 38 00 48 8d 3d 5f 2b 0d 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 7a 10 a4 00 e9 [ 277.728282][ T58] RSP: 0018:ffffc9000079f3b0 EFLAGS: 00010093 [ 277.730498][ T58] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81cf92d0 [ 277.733260][ T58] RDX: ffff8880210824c0 RSI: ffffffff81cf949a RDI: ffffffff90dcc000 [ 277.735861][ T58] RBP: ffff88806aa2e738 R08: 0000000000000007 R09: 0000000000000000 [ 277.738829][ T58] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 277.741482][ T58] R13: 1ffff920000f3e77 R14: ffff88806aa2e698 R15: 000000007fffffff [ 277.744152][ T58] ? enable_work+0x100/0x320 [ 277.745751][ T58] ? enable_work+0x2ca/0x320 [ 277.747472][ T58] ? __pfx_enable_work+0x10/0x10 [ 277.749243][ T58] ? __pfx___might_resched+0x10/0x10 [ 277.751247][ T58] cancel_delayed_work_sync+0x96/0xf0 [ 277.753182][ T58] thermal_zone_device_unregister+0x28e/0x4e0 [ 277.755334][ T58] ? __pfx_shield_remove+0x10/0x10 [ 277.757179][ T58] power_supply_unregister+0x10a/0x150 [ 277.759000][ T58] shield_remove+0x75/0x130 [ 277.760537][ T58] ? __pfx_shield_remove+0x10/0x10 [ 277.762325][ T58] hid_device_remove+0xd1/0x270 [ 277.763960][ T58] ? __pfx_hid_device_remove+0x10/0x10 [ 277.765795][ T58] device_remove+0xcb/0x180 [ 277.767314][ T58] device_release_driver_internal+0x42e/0x600 [ 277.769301][ T58] bus_remove_device+0x22f/0x440 [ 277.770946][ T58] device_del+0x376/0x9b0 [ 277.772391][ T58] ? __pfx_device_del+0x10/0x10 [ 277.774011][ T58] ? do_raw_spin_lock+0x128/0x260 [ 277.775725][ T58] ? find_held_lock+0x2b/0x80 [ 277.777389][ T58] hid_destroy_device+0x19c/0x240 [ 277.779092][ T58] usbhid_disconnect+0xa0/0xe0 [ 277.780667][ T58] usb_unbind_interface+0x1dd/0x9e0 [ 277.782487][ T58] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 277.784312][ T58] ? __pfx_usb_unbind_interface+0x10/0x10 [ 277.786275][ T58] device_remove+0x12a/0x180 [ 277.787825][ T58] device_release_driver_internal+0x42e/0x600 [ 277.789922][ T58] bus_remove_device+0x22f/0x440 [ 277.791711][ T58] device_del+0x376/0x9b0 [ 277.793251][ T58] ? __pfx_device_del+0x10/0x10 [ 277.795007][ T58] ? kobject_put+0xb9/0x640 [ 277.796539][ T58] usb_disable_device+0x367/0x810 [ 277.798211][ T58] usb_disconnect+0x2e2/0x9a0 [ 277.799787][ T58] hub_event+0x1d0c/0x4af0 [ 277.801397][ T58] ? __lock_acquire+0x4a5/0x2630 [ 277.803056][ T58] ? do_raw_spin_unlock+0x145/0x1e0 [ 277.804939][ T58] ? __pfx_hub_event+0x10/0x10 [ 277.806715][ T58] ? debug_object_deactivate+0x2e4/0x3b0 [ 277.808756][ T58] ? perf_trace_sched_pi_setprio+0x640/0x750 [ 277.811185][ T58] ? rcu_is_watching+0x12/0xc0 [ 277.813240][ T58] process_one_work+0xa23/0x19a0 [ 277.815335][ T58] ? __pfx_process_one_work+0x10/0x10 [ 277.817555][ T58] ? __pfx_hub_event+0x10/0x10 [ 277.819548][ T58] worker_thread+0x5ef/0xe50 [ 277.821522][ T58] ? kthread+0x13a/0x450 [ 277.823290][ T58] ? __pfx_worker_thread+0x10/0x10 [ 277.825459][ T58] kthread+0x370/0x450 [ 277.827325][ T58] ? __pfx_kthread+0x10/0x10 [ 277.829100][ T58] ret_from_fork+0x754/0xd80 [ 277.830749][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 277.832565][ T58] ? __switch_to+0x7b4/0x1120 [ 277.834144][ T58] ? __pfx_kthread+0x10/0x10 [ 277.835784][ T58] ret_from_fork_asm+0x1a/0x30 [ 277.837382][ T58] [ 277.839281][ T58] Kernel Offset: disabled [ 277.840946][ T58] Rebooting in 86400 seconds..