last executing test programs: 7m8.350061371s ago: executing program 4 (id=5): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 6m53.166409306s ago: executing program 32 (id=5): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 3m5.791419467s ago: executing program 5 (id=566): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) pwritev2(r0, &(0x7f00000023c0)=[{0x0}], 0x1, 0x7, 0x100, 0xc) 3m5.736094183s ago: executing program 5 (id=567): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r3, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) syz_usb_connect$uac2(0x5, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100300000040732b130040000102030109027d000301053009080b00010107208c0904000000010120000924010040"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x114, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0xfffffffc, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@lifetime_val={0x24, 0x9, {0xf, 0x40000000000081, 0x9, 0x5f}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) set_mempolicy(0x8000, &(0x7f0000000000)=0x2, 0xffffffff) syz_usb_connect$uac3(0x2, 0x93, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 3m2.995736109s ago: executing program 5 (id=578): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f00000002c0)=""/166, 0xa6}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x40012032, 0x0) 3m2.736684618s ago: executing program 5 (id=580): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f7", 0x3c}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83", 0x6c}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={0x0, 0x44}}, 0x28000) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x5) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m1.414805356s ago: executing program 5 (id=585): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) 3m0.314190171s ago: executing program 5 (id=589): r0 = socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={0x0, r3, 0x4000, r3}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100028bd700000002000e3ffff"], 0x20}}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sync() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b) r7 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, &(0x7f0000000500)=ANY=[], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x14}}, 0x4000) 2m45.107029225s ago: executing program 33 (id=589): r0 = socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={0x0, r3, 0x4000, r3}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100028bd700000002000e3ffff"], 0x20}}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sync() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b) r7 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, &(0x7f0000000500)=ANY=[], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x14}}, 0x4000) 15.647184766s ago: executing program 6 (id=1057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0xfac, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xdfc, 0x1, [@m_ipt={0x1bc, 0x10, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x62, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a0bc30fe22fe588e428"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x284, 0x10, 0x0, 0x0, {{0x8}, {0x218, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x2, 0x3, "4c62fdb6c1d9e9751b85131383111291d855fa8a1919a06334c9969770bab9c51972ad6e414dec"}}, @TCA_IPT_TARG={0x59, 0x6, {0x1, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x1c4, 0x4, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x71, 0x6, {0x4, 'raw\x00', 0x7, 0x4, "4070d816b2e2b86206153d2099337b573c937fa2ca34882b17113ed3c465520b806c3d96367add9babdeb611d80920dbbac392f8caf0b228c5a13589c930e501809c55c053b1ff"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0xd9, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946726678b31c6e99991735b21d31e8ef19e018e2c901e8d267cac71a9d3597b71e9b60fdb165fe02e8f3eaeb5739f4dfd19be90f69d368cd4f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x44c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x401, 0x6, "70a24ef9108c05b0d6fe35c19e6fbbc8ce2b7ce5feef5e78cc8df17a52e5b3b76a72dc621e53cd6d2bdba898857bd406b61a096208fd81b1fcd3c2ffb28253bea3adbc068cc3bccc8d3e4a8b64096d11d1c126c598908d50969e9f26612923c2ea3e6075653b461816b80b8e8b3f12db1ea1e49f397342e8ee3a41992c6055ab3fa01fedff1d9c65c59b33171f7b6870cf6f432b0531416316a5557db06def5f83d40129611126fcd286f339beff737adf80f753814ea9f4fadaf0b20631a6da8fd0de2383e8b2ec49c292ce5979ae366c8a49736af41ef93a5b6504fd8bfb98d67fda539648b1ded01c57e630dc5475d72caf95a4e6cd3f4092af0b1b123f813895c3237288ed1cb67eda2dcca2233a2ce53ed3ddd345a03cd04a4d066c40a0ade38fddc3089150cb318ac7acbbed85d319a056e9bfc46a6c3eddd1f3bed484fcd0e407450d1be8fe54df1d8b2eac2818a24e2f80ebb620ce9f523a0ddfce1aabef0180b1df047739a1d8f1af0af63366040f2c3b2d23952e8bf23543935d1014adc9d726fe0257cafe226c0cfc7292b678e718c1c359414982a81d78b7499ee1425510230d4a02948551eca361e698c8349ab4086d639afe7c52053664091b4d3624f6a8235d223b6d416966229f3f74a6069041b4d0a2062adb74985a61809e365163119f8cd517d6bc62b6628afd80c969c5abcf3d90b06b056650034421c50b31f8bdc1a716f9e46dd74f66c7888e14d73bfd481fcdf523d03d9de1757b0848139f7233436d7d15b6c509cb7d5928f5f96b510ba232c917b6886510bb10148c03c3913036666750954fdbeb2d39621ec3d19fa070e7c3efd4468068f91dcb669b5ebb869c8d1f0460f0aac8a79d4627d500701057d1042a1c2bd762c261a542662e7f099a4f70d72377b1189a142a1e10d2d5a7affe2a8dfdd5ef60ba153f737f73db7e8fe680940d0c27e5c91b600807eea0b15de0a033acb216c623d0d729aa00f04e857a530a0ade44483f28bd32d65e6aea0c4b5d7c066ec9bbcddfe0939406aedd19953d3941fbef00cb31efe16157955203a27b6d536cd0a5c20ed282f3cbd7d1cc0f17a3a4c466c47e24a2bc5eb34667b5a2f1ea967309f54056596c375a23af35699088f129b64c18e20651bb7d94912d7dc8e21ab351046354d9034990b402ea724f20fee764ba85933dc422a7aa5f7077f9175cb1621b6d66cf264236598dbc26659d1ca1e9a4a22602093a79320126d85d6951665cea695580d5059809016023038ff1c8e6c5e8957b459950ed4373078e4da81635869c96e50f2555dff090ad530aaa89039b88d2b88da2ff5f929f5d85d2cf1becf600750a6188b9cda528978278255bbc0df989d5e655e52d14e3b405453f4d72a25954d58609fc5d6c41d74980e9136a3b4e8357c7ac55c9081f6318e656b9b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x3a8, 0x11, 0x0, 0x0, {{0x8}, {0x2c8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a86742f2ae2ebc984490fe68940b5658702910f2b9d1b952c7318ce607b082e9db"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x115, 0x6, {0x3, 'mangle\x00', 0x4, 0x3, "f0f8f66d602b6783655db39e1cc948a0421e5d1393f4cd635a25e30c1719f35655ebc220059a6505e7e8de74849c425e9217e4cc351477cb2a445b66dd468c00d32929d5f3c2ea9992c262f0d79d8d361d1556aa1b2e21c4f045af07d8fce62f3493ce450ef47273cf7908ed5026fd1b3a1cab1153f7eb0951daf2fe6068caa1c0009c82e29554c3e1e140318de7fe69d9f0ddfdf3e804596a90bd3292606e9c5e6bffa8eada25e7a7a23c72de1fe7524021e6d1598794e26d97e911adedaa05aabcc10c14d11c93b0573a89b82b3dc20539d38bc5cbcbeb2b05ec5b2ec752f0d774c4c85cdc87c849178f"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe9, 0x6, {0x7ff, 'security\x00', 0x2, 0x8, "fed0e0dacc4fc91d4e674122609e0a6162b34895637129fc809755c2b8d7d77e2e9bd17541036e25155b436d08daa8f6d6c96ee00292d32de94a5923b4762bed536f8d1b5634ea3ad83c7aa89e9a796237166ce1d5ce33a899c82ff0563bcc2c8e4abff8f2c8062ab102025a307c9c376b51089b89c2676f13aa867fc2c454cd141b4713532c3780d291e19348fea90fbfc1fe5d0d52c7ef25d06ebd7ca66eb9f552a3c5d6a9dcd88011be9ee1bd641a022baf2be1d2fb966f1087ad5ff211"}}]}, {0xb9, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c018a8c4dce0e1f509600cfc2deb018c8cedc9a9d619d63faf53492c28f9fd99c2952312d7437c45dc56b17dc63d3e5e97ab2a16ee79c81478e10ba888305e6817945a0b68306a971c4a2382bd9577b679196987065bd27745023d7a979e0bde20eb6328afee98a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x70, 0x1, [@m_ipt={0x6c, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x44, 0x6, "5b552808c4f855d42574e321cb5abef9071c2889dec481d329f3fd277e0f2b61e85d27e607a3831d6a64d9bd6b7fd54d812c60899c05ac69b067f62b5bdadcb9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0x4}, {0x90, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x60, 0x20, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x40, 'security\x00', 0x5}}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x4}, {0x90, 0x1, [@m_ipt={0x60, 0xd, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0xa, 'raw\x00', 0x7, 0x2}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x2c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xfac}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.223156426s ago: executing program 6 (id=1060): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd8", 0x4c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 8.957575407s ago: executing program 2 (id=1075): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendto(0xffffffffffffffff, &(0x7f0000000540)="0cc31a4098ddc80dadd3a0aa2bea9050d9f47bcde4cbb8170d3d61aabbdbd869e8a75ab95a3b8e8b960477dbbbbf5cb0fd4a98ea0032d054de676f19c5e1f84def57482d1b3eb94a2a1d3c0af33709610ece6cb54ae7f8c3ed385c3890244d348c9bcfb556ee478845ff23d8a9f2a492531e7c7ce719ef1983bdaf4008386323fc593be590321dbe51aa4ecabebf495efc0f722637337e20cc541399dc617deafa840b68f2b22e5f7c6afb3825871b966ab90a79a4d6d72f29a1e43abdf4d25f6352dfa26c57684224fdb0e14151550796aaa09b4669e71d9f4255f6", 0xdc, 0x4000, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 8.868095527s ago: executing program 6 (id=1076): ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, &(0x7f0000000340)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 8.838453526s ago: executing program 2 (id=1077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="f5af25bd7000000000000e000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 8.535104201s ago: executing program 2 (id=1079): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000740)) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 8.439321399s ago: executing program 6 (id=1080): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000001c0)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.651567132s ago: executing program 6 (id=1084): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) 3.845192397s ago: executing program 0 (id=1088): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4044814) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0xc, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}}}], 0x20}, 0x4008804) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b7, 0x8031, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='./file0\x00') close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000340)="f3e6", 0x2}], 0x1) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae35902b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0d04000000ac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9bc6ec163917bee3f5602f840a1759670ea43b7f596b347d8b9116506356d0279d21f6a0cab3056c27dec074e8dac12c1d99afcd84f82a47a0cb5093c7a221f7fb624e2f6e9eeca4e5050fc3be50bbdc62d41333b4243336a5590e49658a10b5c8624eb2410d68e64f230fdcf4689495c0bf62403c2eaad20d1d8fb185ebefac64aa0eb1d36ccacf61ec28b4ec24dba53b21ed5c5f727cccb0d614884908957138d2c30560e88f128af21ccc9fd64d229f35b2f76d0ee9e25f9e4390a55a8600449774ca116e3ba523c9c5d39abcf09a36127c17fc6194711f20307ead0d5bbbe2aa3f677156b8856411a8045159df771ac3e3d5828e359c24a59d65e92f4112fb697ab825536751f82e9d55e89853a03c693d418c4d2cccb61c6f60ad304a68d15fc20edaec9af4725f47c8e1724cfd5099a59147bcc872fafe7565f98c3c3edb83c96b0aff30779783467d4348d5e28d9afd5e77ce5dabc1c4d5d790339490703d9050ef8d919d5d5f71a26bd9b72ea53933eecb6cd8a09bc67f5a6b0450fbfcce6837ab696975ba8387815bfa1c497f37ed8b9151bb1105d5efbf3b5034e5bdde5fdb60f996c1fcf75201c52d47ab3b31a4112d6cb61c3beaeb97d03744cfb01409dd1b1258e0d5856df535c241017509a193043296e202834cc4eb50417c56f93093ca61a9c1373904faa2564ad469d8329dd1256f9648af69d6007d8bca7b566", 0x3d9}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb8", 0xe7}], 0x2}, 0x8400) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002f40)=[{&(0x7f00000003c0)="83072aab3809b0c37bc8502cc31089a8381258fd39432299bf2dd89a7ce64e5d245a28bd46a1690a297e83443e1f097a04ced9e08e1d78f7c8452a88912c6e6206ffae96c03eb790986f85396afb4161452bc9d397846b", 0x57}, {&(0x7f0000000600)="7e778f885b2ebf63c95616550ba449c94e608852bcef749edf56ebd46d8644666285c841fbff4abe5ee89466074578ec2bb97ae65556e298a08783378967379bdb9c3672c673276d8d7a180541663360b73400407d17a3c3e561bcacc90176e33bb7945e812d4c0a1284dc55c8b7e2c744740ce39e28d753cb61467d8743290cdd06ad21ea52c3d91d47598695371701cd79e26c6cdacbee0c5e39cd75c391a7a28a9409355ec392e5f95f801edba50fd6fcdd0b9e5c30467f78d97a7258990e31bb3b01b72eeaa77f7123f55e794c771b6d5ff8f672a79c74b6f398747f36ca1742c939246ea048437148cb9ce936fbfb893ddfece6", 0xf6}, {&(0x7f0000003ac0)="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", 0x1000}, {&(0x7f0000002940)="4197a5", 0x3}, {&(0x7f0000002980)="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", 0xfb}, {&(0x7f0000002a80)="5ec665021dcf20ce8cdbd84eee9c175b4d35668c2dec9c6cac46d80a0f1b9a3cede4748eec02d2ce9bbcca92807606b8cae2b74bdd469f1e3fb974fe87c565bd35c179b412db22cc64a555e9e747394a1444bfea298e219bd6c979caf980984897727340576f2f5dbaa179fc080945226dc89b1da3ffe325c43fe23673f25f860d9ec84f0041cd9d08e5dce1007f5da5c58e31c06df1a8e7829addf87c521cbe73a47c2d8b1fe115940c49a83b4f6bf5bb1b0e0e333387565ed41c074fab", 0xbe}, {&(0x7f0000002d40)="d3d52b6021df888e59fbfb83eb05cc23f567456c15139c116f0c2e9c9d01b46fdada2df0c036a953af2cf5b259c3674171239c85c7f08e12fff584c962da8acac87786c6", 0x44}, {&(0x7f0000002dc0)="150d79f01f17e716070d538370118604d4b7e56d01435e85ccbe53a50a7df3d18777", 0x22}, {&(0x7f0000002e00)="49eeb3dfa5256d44aada5987afea3111d0cd56c718565c972619c9fd429c153e2574458d7db2fbeedc96cb68fea796808daec145424c847ec3ddcbea1e9bc09dfd745a87871bb89021844470e42343213214d4759f5f05fc5736d93c50f7159899a9cce36e5f65a80c4ff9ff4401fea4f2154ea6e6fe66d6519163bae4f6c221e7454418410a6403", 0x88}, {&(0x7f0000000e00)="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", 0x184}], 0xa}, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.537418413s ago: executing program 1 (id=1089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0xf44, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xdfc, 0x1, [@m_ipt={0x1bc, 0x10, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x62, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a0bc30fe22fe588e428"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x284, 0x10, 0x0, 0x0, {{0x8}, {0x218, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x2, 0x3, "4c62fdb6c1d9e9751b85131383111291d855fa8a1919a06334c9969770bab9c51972ad6e414dec"}}, @TCA_IPT_TARG={0x59, 0x6, {0x1, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x1c4, 0x4, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x71, 0x6, {0x4, 'raw\x00', 0x7, 0x4, "4070d816b2e2b86206153d2099337b573c937fa2ca34882b17113ed3c465520b806c3d96367add9babdeb611d80920dbbac392f8caf0b228c5a13589c930e501809c55c053b1ff"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0xd9, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946726678b31c6e99991735b21d31e8ef19e018e2c901e8d267cac71a9d3597b71e9b60fdb165fe02e8f3eaeb5739f4dfd19be90f69d368cd4f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x44c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x401, 0x6, "70a24ef9108c05b0d6fe35c19e6fbbc8ce2b7ce5feef5e78cc8df17a52e5b3b76a72dc621e53cd6d2bdba898857bd406b61a096208fd81b1fcd3c2ffb28253bea3adbc068cc3bccc8d3e4a8b64096d11d1c126c598908d50969e9f26612923c2ea3e6075653b461816b80b8e8b3f12db1ea1e49f397342e8ee3a41992c6055ab3fa01fedff1d9c65c59b33171f7b6870cf6f432b0531416316a5557db06def5f83d40129611126fcd286f339beff737adf80f753814ea9f4fadaf0b20631a6da8fd0de2383e8b2ec49c292ce5979ae366c8a49736af41ef93a5b6504fd8bfb98d67fda539648b1ded01c57e630dc5475d72caf95a4e6cd3f4092af0b1b123f813895c3237288ed1cb67eda2dcca2233a2ce53ed3ddd345a03cd04a4d066c40a0ade38fddc3089150cb318ac7acbbed85d319a056e9bfc46a6c3eddd1f3bed484fcd0e407450d1be8fe54df1d8b2eac2818a24e2f80ebb620ce9f523a0ddfce1aabef0180b1df047739a1d8f1af0af63366040f2c3b2d23952e8bf23543935d1014adc9d726fe0257cafe226c0cfc7292b678e718c1c359414982a81d78b7499ee1425510230d4a02948551eca361e698c8349ab4086d639afe7c52053664091b4d3624f6a8235d223b6d416966229f3f74a6069041b4d0a2062adb74985a61809e365163119f8cd517d6bc62b6628afd80c969c5abcf3d90b06b056650034421c50b31f8bdc1a716f9e46dd74f66c7888e14d73bfd481fcdf523d03d9de1757b0848139f7233436d7d15b6c509cb7d5928f5f96b510ba232c917b6886510bb10148c03c3913036666750954fdbeb2d39621ec3d19fa070e7c3efd4468068f91dcb669b5ebb869c8d1f0460f0aac8a79d4627d500701057d1042a1c2bd762c261a542662e7f099a4f70d72377b1189a142a1e10d2d5a7affe2a8dfdd5ef60ba153f737f73db7e8fe680940d0c27e5c91b600807eea0b15de0a033acb216c623d0d729aa00f04e857a530a0ade44483f28bd32d65e6aea0c4b5d7c066ec9bbcddfe0939406aedd19953d3941fbef00cb31efe16157955203a27b6d536cd0a5c20ed282f3cbd7d1cc0f17a3a4c466c47e24a2bc5eb34667b5a2f1ea967309f54056596c375a23af35699088f129b64c18e20651bb7d94912d7dc8e21ab351046354d9034990b402ea724f20fee764ba85933dc422a7aa5f7077f9175cb1621b6d66cf264236598dbc26659d1ca1e9a4a22602093a79320126d85d6951665cea695580d5059809016023038ff1c8e6c5e8957b459950ed4373078e4da81635869c96e50f2555dff090ad530aaa89039b88d2b88da2ff5f929f5d85d2cf1becf600750a6188b9cda528978278255bbc0df989d5e655e52d14e3b405453f4d72a25954d58609fc5d6c41d74980e9136a3b4e8357c7ac55c9081f6318e656b9b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x3a8, 0x11, 0x0, 0x0, {{0x8}, {0x2c8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a86742f2ae2ebc984490fe68940b5658702910f2b9d1b952c7318ce607b082e9db"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x115, 0x6, {0x3, 'mangle\x00', 0x4, 0x3, "f0f8f66d602b6783655db39e1cc948a0421e5d1393f4cd635a25e30c1719f35655ebc220059a6505e7e8de74849c425e9217e4cc351477cb2a445b66dd468c00d32929d5f3c2ea9992c262f0d79d8d361d1556aa1b2e21c4f045af07d8fce62f3493ce450ef47273cf7908ed5026fd1b3a1cab1153f7eb0951daf2fe6068caa1c0009c82e29554c3e1e140318de7fe69d9f0ddfdf3e804596a90bd3292606e9c5e6bffa8eada25e7a7a23c72de1fe7524021e6d1598794e26d97e911adedaa05aabcc10c14d11c93b0573a89b82b3dc20539d38bc5cbcbeb2b05ec5b2ec752f0d774c4c85cdc87c849178f"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe9, 0x6, {0x7ff, 'security\x00', 0x2, 0x8, "fed0e0dacc4fc91d4e674122609e0a6162b34895637129fc809755c2b8d7d77e2e9bd17541036e25155b436d08daa8f6d6c96ee00292d32de94a5923b4762bed536f8d1b5634ea3ad83c7aa89e9a796237166ce1d5ce33a899c82ff0563bcc2c8e4abff8f2c8062ab102025a307c9c376b51089b89c2676f13aa867fc2c454cd141b4713532c3780d291e19348fea90fbfc1fe5d0d52c7ef25d06ebd7ca66eb9f552a3c5d6a9dcd88011be9ee1bd641a022baf2be1d2fb966f1087ad5ff211"}}]}, {0xb9, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c018a8c4dce0e1f509600cfc2deb018c8cedc9a9d619d63faf53492c28f9fd99c2952312d7437c45dc56b17dc63d3e5e97ab2a16ee79c81478e10ba888305e6817945a0b68306a971c4a2382bd9577b679196987065bd27745023d7a979e0bde20eb6328afee98a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x68, 0x1, [@m_ipt={0x64, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x3b, 0x6, "5b552808c4f855d42574e321cb5abef9071c2889dec481d329f3fd277e0f2b61e85d27e607a3831d6a64d9bd6b7fd54d812c60899c05ac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0x4}, {0x90, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x60, 0x20, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x40, 'security\x00', 0x5}}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x4}, {0x30, 0x1, [@m_ipt={0x2c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xf44}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.296641811s ago: executing program 3 (id=1090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r1, @ANYBLOB="f5af25bd7000000000000e000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 3.173323414s ago: executing program 3 (id=1091): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 3.076031962s ago: executing program 3 (id=1092): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2.903628247s ago: executing program 3 (id=1093): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xe088}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.405142842s ago: executing program 1 (id=1094): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be", 0x9}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 2.302669451s ago: executing program 1 (id=1095): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="40171100000006a44f3bee509f885eb420818774d5df04"], 0x0, 0x0, 0x0, 0x0}) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e20, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1c840, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3400000002030000000000000000000003000001080005400000000008000f000000002008000440000000180800054000000000d85f16ae"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x1) syz_io_uring_setup(0x7544, &(0x7f0000001380)={0x0, 0x43d3, 0x8000, 0x1, 0x48, 0x0, r1}, &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={0x0}) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0xa, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x84, 0x487, 0x0, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x3c) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRESHEX=r4, @ANYRES64=r4], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r5 = socket(0x1, 0x803, 0xfffffffc) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2.096024588s ago: executing program 0 (id=1096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0xf8, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x7c, 0x1, [@m_ipt={0x78, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x4d, 0x6, "5b552808c4f855d42574e321cb5abef9071c2889dec481d329f3fd277e0f2b61e85d27e607a3831d6a64d9bd6b7fd54d812c60899c05ac69b067f62b5bdadcb9bc9fee49c623547e8e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0x4}, {0x30, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x30, 0x1, [@m_ipt={0x2c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.655882492s ago: executing program 2 (id=1097): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/105, 0x69, 0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r0 = mq_open(&(0x7f0000000080)='\x00', 0x40, 0x80, &(0x7f0000000140)={0xf57, 0x26, 0x4, 0x4}) mq_notify(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000280)) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000340)={0xffffff26, "627b4c402301c5dc8cfaa3d8ff18cb4d81377a3176fc0dd5d9a5c88077212f38", 0x2, 0x4, 0x9, 0x9, 0x10, 0x1, 0x7f, 0x5}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) close(0x3) 1.650067898s ago: executing program 6 (id=1098): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) 1.47015726s ago: executing program 1 (id=1099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.423566954s ago: executing program 3 (id=1100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0xc8, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x7c, 0x1, [@m_ipt={0x78, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x4d, 0x6, "5b552808c4f855d42574e321cb5abef9071c2889dec481d329f3fd277e0f2b61e85d27e607a3831d6a64d9bd6b7fd54d812c60899c05ac69b067f62b5bdadcb9bc9fee49c623547e8e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0x4}, {0x30, 0x1, [@m_ipt={0x2c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.10243807s ago: executing program 2 (id=1101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r1, @ANYBLOB="f5af25bd7000000000000e000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 913.435195ms ago: executing program 0 (id=1102): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 868.588014ms ago: executing program 2 (id=1103): sync() r0 = socket$kcm(0x10, 0xd, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20202, 0x188) openat(r1, 0x0, 0x4400, 0x80) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) socket$pppl2tp(0x18, 0x1, 0x1) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000240)=0x28, 0x4) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) listen(r3, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16], 0x7) 599.352979ms ago: executing program 0 (id=1104): sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 542.604383ms ago: executing program 1 (id=1105): openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/asound/seq/clients\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendto(0xffffffffffffffff, &(0x7f0000000540)="0cc31a4098ddc80dadd3a0aa2bea9050d9f47bcde4cbb8170d3d61aabbdbd869e8a75ab95a3b8e8b960477dbbbbf5cb0fd4a98ea0032d054de676f19c5e1f84def57482d1b3eb94a2a1d3c0af33709610ece6cb54ae7f8c3ed385c3890244d348c9bcfb556ee478845ff23d8a9f2a492531e7c7ce719ef1983bdaf4008386323fc593be590321dbe51aa4ecabebf495efc0f722637337e20cc541399dc617deafa840b68f2b22e5f7c6afb3825871b966ab90a79a4d6d72f", 0xb8, 0x4000, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 300.427349ms ago: executing program 0 (id=1106): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000"], 0xa4}}, 0x0) 191.552509ms ago: executing program 1 (id=1107): sync() r0 = socket$kcm(0x10, 0xd, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20202, 0x188) openat(r1, 0x0, 0x4400, 0x80) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) socket$pppl2tp(0x18, 0x1, 0x1) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000240)=0x28, 0x4) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) listen(r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r5], 0x7) 112.728706ms ago: executing program 0 (id=1108): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) 0s ago: executing program 3 (id=1109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0xf4c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xdfc, 0x1, [@m_ipt={0x1bc, 0x10, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x62, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a0bc30fe22fe588e428"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x284, 0x10, 0x0, 0x0, {{0x8}, {0x218, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x2, 0x3, "4c62fdb6c1d9e9751b85131383111291d855fa8a1919a06334c9969770bab9c51972ad6e414dec"}}, @TCA_IPT_TARG={0x59, 0x6, {0x1, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x1c4, 0x4, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x71, 0x6, {0x4, 'raw\x00', 0x7, 0x4, "4070d816b2e2b86206153d2099337b573c937fa2ca34882b17113ed3c465520b806c3d96367add9babdeb611d80920dbbac392f8caf0b228c5a13589c930e501809c55c053b1ff"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0xd9, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946726678b31c6e99991735b21d31e8ef19e018e2c901e8d267cac71a9d3597b71e9b60fdb165fe02e8f3eaeb5739f4dfd19be90f69d368cd4f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x44c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x401, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x3a8, 0x11, 0x0, 0x0, {{0x8}, {0x2c8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a86742f2ae2ebc984490fe68940b5658702910f2b9d1b952c7318ce607b082e9db"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x115, 0x6, {0x3, 'mangle\x00', 0x4, 0x3, "f0f8f66d602b6783655db39e1cc948a0421e5d1393f4cd635a25e30c1719f35655ebc220059a6505e7e8de74849c425e9217e4cc351477cb2a445b66dd468c00d32929d5f3c2ea9992c262f0d79d8d361d1556aa1b2e21c4f045af07d8fce62f3493ce450ef47273cf7908ed5026fd1b3a1cab1153f7eb0951daf2fe6068caa1c0009c82e29554c3e1e140318de7fe69d9f0ddfdf3e804596a90bd3292606e9c5e6bffa8eada25e7a7a23c72de1fe7524021e6d1598794e26d97e911adedaa05aabcc10c14d11c93b0573a89b82b3dc20539d38bc5cbcbeb2b05ec5b2ec752f0d774c4c85cdc87c849178f"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe9, 0x6, {0x7ff, 'security\x00', 0x2, 0x8, "fed0e0dacc4fc91d4e674122609e0a6162b34895637129fc809755c2b8d7d77e2e9bd17541036e25155b436d08daa8f6d6c96ee00292d32de94a5923b4762bed536f8d1b5634ea3ad83c7aa89e9a796237166ce1d5ce33a899c82ff0563bcc2c8e4abff8f2c8062ab102025a307c9c376b51089b89c2676f13aa867fc2c454cd141b4713532c3780d291e19348fea90fbfc1fe5d0d52c7ef25d06ebd7ca66eb9f552a3c5d6a9dcd88011be9ee1bd641a022baf2be1d2fb966f1087ad5ff211"}}]}, {0xb9, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c018a8c4dce0e1f509600cfc2deb018c8cedc9a9d619d63faf53492c28f9fd99c2952312d7437c45dc56b17dc63d3e5e97ab2a16ee79c81478e10ba888305e6817945a0b68306a971c4a2382bd9577b679196987065bd27745023d7a979e0bde20eb6328afee98a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x70, 0x1, [@m_ipt={0x6c, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x44, 0x6, "5b552808c4f855d42574e321cb5abef9071c2889dec481d329f3fd277e0f2b61e85d27e607a3831d6a64d9bd6b7fd54d812c60899c05ac69b067f62b5bdadcb9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0x4}, {0x90, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x60, 0x20, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x40, 'security\x00', 0x5}}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x4}, {0x30, 0x1, [@m_ipt={0x2c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xf4c}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 8199][ T820] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 325.608296][ T820] usb 3-1: config 1 has no interface number 1 [ 325.608337][ T820] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 325.608374][ T820] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 325.612871][ T820] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.612895][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.612914][ T820] usb 3-1: Product: syz [ 325.612928][ T820] usb 3-1: Manufacturer: syz [ 325.612940][ T820] usb 3-1: SerialNumber: syz [ 325.703262][ T7593] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 325.805619][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 325.955561][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 325.958717][ T10] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 325.958745][ T10] usb 1-1: config 0 has no interface number 1 [ 325.958803][ T10] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 325.958843][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 325.963504][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 325.963533][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.963555][ T10] usb 1-1: Product: syz [ 325.963570][ T10] usb 1-1: Manufacturer: syz [ 325.963585][ T10] usb 1-1: SerialNumber: syz [ 325.993641][ T10] usb 1-1: config 0 descriptor?? [ 326.085399][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 326.175674][ T5718] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 326.244216][ T5719] usb 6-1: USB disconnect, device number 10 [ 326.274111][ T5719] em28xx 6-1:0.0: Disconnecting em28xx [ 326.311285][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 326.335085][ T10] usb 1-1: USB disconnect, device number 31 [ 326.346625][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 326.361648][ T5718] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 326.361676][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 326.374042][ T10] pvrusb2: Device being rendered inoperable [ 326.400393][ T5718] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 326.400478][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.400496][ T5718] usb 2-1: Product: syz [ 326.400509][ T5718] usb 2-1: Manufacturer: syz [ 326.400522][ T5718] usb 2-1: SerialNumber: syz [ 326.477282][ T10] pvrusb2: Device being rendered inoperable [ 326.532169][ T5718] usb 2-1: config 0 descriptor?? [ 326.541318][ T820] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 326.541514][ T820] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 326.571584][ T5718] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 326.571896][ T5718] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 326.810990][ T5719] em28xx 6-1:0.0: Freeing device [ 326.879692][ T820] usb 3-1: USB disconnect, device number 34 [ 327.025038][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.141571][ T5718] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 327.142242][ T5718] em28xx 2-1:0.0: Config register raw data: 0x56 [ 327.161548][ T5719] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 327.401931][ T5719] usb 6-1: Using ep0 maxpacket: 32 [ 327.418183][ T5718] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 327.418283][ T5718] em28xx 2-1:0.0: No AC97 audio processor [ 327.430142][ T5719] usb 6-1: unable to get BOS descriptor or descriptor too short [ 327.458443][ T5719] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 327.531557][ T5719] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 327.531626][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.531686][ T5719] usb 6-1: Product: syz [ 327.531757][ T5719] usb 6-1: Manufacturer: syz [ 327.531842][ T5719] usb 6-1: SerialNumber: syz [ 328.658018][ T5719] usb 6-1: Limiting number of CPorts to U8_MAX [ 328.659223][ T5719] usb 6-1: Not enough endpoints found in device, aborting! [ 328.805945][ T5718] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 329.464036][ T820] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 329.591711][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 329.626482][ T5718] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.626561][ T5718] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.656923][ T5718] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 329.656995][ T5718] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 329.657054][ T5718] usb 3-1: Product: syz [ 329.657080][ T5718] usb 3-1: Manufacturer: syz [ 329.876644][ T820] usb 1-1: Using ep0 maxpacket: 8 [ 329.914185][ T820] usb 1-1: config 1 has an invalid interface number: 64 but max is 6 [ 329.914258][ T820] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 329.914330][ T820] usb 1-1: config 1 has no interface number 0 [ 329.960412][ T820] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 329.960454][ T820] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 329.960521][ T820] usb 1-1: Product: syz [ 329.960596][ T820] usb 1-1: Manufacturer: syz [ 329.960653][ T820] usb 1-1: SerialNumber: syz [ 330.392264][ T5718] hub 3-1:4.0: USB hub found [ 331.415841][ T5878] usb 2-1: USB disconnect, device number 11 [ 332.763136][ T5878] em28xx 2-1:0.0: Disconnecting em28xx [ 334.706810][ T5718] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 335.458111][ T5719] usb 6-1: USB disconnect, device number 11 [ 335.463076][ T820] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 335.463349][ T820] visor 1-1:1.64: probe with driver visor failed with error -71 [ 335.816530][ T5718] usb 3-1: USB disconnect, device number 35 [ 335.948421][ T5878] em28xx 2-1:0.0: Freeing device [ 336.214347][ T820] usb 1-1: USB disconnect, device number 32 [ 337.087426][ T5878] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 337.225798][ T5878] usb 2-1: device descriptor read/64, error -71 [ 337.408528][ T7649] fuse: Bad value for 'fd' [ 337.535683][ T5878] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 337.672076][ T5878] usb 2-1: device descriptor read/64, error -71 [ 337.787861][ T5878] usb usb2-port1: attempt power cycle [ 338.536104][ T5878] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 338.676071][ T5878] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 338.859013][ T7673] syz_tun: entered allmulticast mode [ 338.886049][ T5878] usb 2-1: device not accepting address 15, error -71 [ 338.886487][ T5878] usb usb2-port1: unable to enumerate USB device [ 338.982390][ T7674] fuse: Bad value for 'fd' [ 339.183106][ T7671] syz_tun: left allmulticast mode [ 339.375987][ T5604] Bluetooth: Frame is too long (len 18, expected len 8) [ 339.456747][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz.5.500'. [ 340.675604][ T5878] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 340.838320][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 340.862925][ T5878] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.862959][ T5878] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.865340][ T5878] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 340.865366][ T5878] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 340.865385][ T5878] usb 6-1: Product: syz [ 340.865397][ T5878] usb 6-1: Manufacturer: syz [ 340.939552][ T5878] hub 6-1:4.0: USB hub found [ 340.986574][ T5925] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 341.135662][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 341.152641][ T5878] hub 6-1:4.0: 2 ports detected [ 341.157341][ T5925] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 341.157367][ T5925] usb 2-1: config 0 has no interface number 1 [ 341.157489][ T5925] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 341.157529][ T5925] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 341.213752][ T5925] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 341.213786][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.213807][ T5925] usb 2-1: Product: syz [ 341.213821][ T5925] usb 2-1: Manufacturer: syz [ 341.213836][ T5925] usb 2-1: SerialNumber: syz [ 341.276801][ T5925] usb 2-1: config 0 descriptor?? [ 341.317765][ T5925] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 341.814701][ T5925] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 341.907391][ T5925] usb 2-1: USB disconnect, device number 16 [ 341.935964][ T5925] pvrusb2: Device being rendered inoperable [ 341.967361][ T5925] pvrusb2: Device being rendered inoperable [ 342.436421][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.456427][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.475545][ T5878] hub 6-1:4.0: activate --> -90 [ 342.674847][ T5878] hub 6-1:4.0: hub_ext_port_status failed (err = -71) [ 342.675373][ T5878] hub 6-1:4.0: hub_ext_port_status failed (err = -71) [ 342.678391][ T5925] usb 6-1: USB disconnect, device number 12 [ 343.045681][ T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 343.142731][ T7699] fuse: Bad value for 'fd' [ 343.177465][ T10] usb 2-1: device descriptor read/64, error -71 [ 343.420338][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 343.555624][ T10] usb 2-1: device descriptor read/64, error -71 [ 343.666095][ T10] usb usb2-port1: attempt power cycle [ 343.740892][ T5925] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 343.885659][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 343.912822][ T5925] usb 6-1: unable to get BOS descriptor or descriptor too short [ 343.914190][ T5925] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 343.941760][ T5925] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 343.941783][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.941797][ T5925] usb 6-1: Product: syz [ 343.941807][ T5925] usb 6-1: Manufacturer: syz [ 343.941818][ T5925] usb 6-1: SerialNumber: syz [ 344.005616][ T10] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 344.026606][ T10] usb 2-1: device descriptor read/8, error -71 [ 344.105643][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 344.202081][ T7702] netlink: 64 bytes leftover after parsing attributes in process `syz.5.508'. [ 344.259860][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 344.277566][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 344.277633][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.277649][ T9] usb 3-1: Product: syz [ 344.277660][ T9] usb 3-1: Manufacturer: syz [ 344.277670][ T9] usb 3-1: SerialNumber: syz [ 344.284060][ T5925] usb 6-1: Cannot retrieve CPort count: -71 [ 344.284091][ T5925] usb 6-1: Cannot retrieve CPort count: -71 [ 344.284115][ T5925] es2_ap_driver 6-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 344.292589][ T10] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 344.321473][ T10] usb 2-1: device descriptor read/8, error -71 [ 344.383961][ T5925] usb 6-1: USB disconnect, device number 13 [ 344.409104][ T9] usb 3-1: config 0 descriptor?? [ 344.425956][ T10] usb usb2-port1: unable to enumerate USB device [ 344.462303][ T9] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 344.900209][ T9] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 345.615164][ T5878] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 346.314486][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.314876][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.410691][ T5878] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 346.410724][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.489051][ T5878] usb 6-1: selecting invalid altsetting 3 [ 346.489072][ T5878] comedi comedi5: could not set alternate setting 3 in high speed [ 346.489087][ T5878] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 346.523863][ T5878] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 346.580748][ T7720] dlm: no locking on control device [ 346.717008][ T7720] netlink: 68 bytes leftover after parsing attributes in process `syz.3.514'. [ 346.806859][ T5925] usb 6-1: USB disconnect, device number 14 [ 346.846833][ T7725] ucma_write: process 347 (syz.3.514) changed security contexts after opening file descriptor, this is not allowed. [ 347.795540][ T820] usb 3-1: USB disconnect, device number 36 [ 348.656812][ T7757] fuse: Bad value for 'fd' [ 350.305677][ T7789] dlm: no locking on control device [ 350.308784][ T7789] netlink: 68 bytes leftover after parsing attributes in process `syz.3.524'. [ 352.815665][ T820] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 352.975696][ T820] usb 1-1: Using ep0 maxpacket: 16 [ 353.001271][ T820] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 353.001302][ T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.001325][ T820] usb 1-1: Product: syz [ 353.001340][ T820] usb 1-1: Manufacturer: syz [ 353.001352][ T820] usb 1-1: SerialNumber: syz [ 353.056539][ T820] usb 1-1: config 0 descriptor?? [ 353.077772][ T820] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 353.277998][ T820] ssu100 1-1:0.0: probe with driver ssu100 failed with error -5 [ 353.511647][ T7837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.721397][ T7818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.722069][ T7818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.748107][ T820] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 353.905702][ T820] usb 6-1: Using ep0 maxpacket: 8 [ 353.909794][ T820] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 353.909819][ T820] usb 6-1: config 0 has no interface number 1 [ 353.909873][ T820] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 353.909911][ T820] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 353.967628][ T820] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 353.967662][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.967684][ T820] usb 6-1: Product: syz [ 353.967698][ T820] usb 6-1: Manufacturer: syz [ 353.967713][ T820] usb 6-1: SerialNumber: syz [ 354.010428][ T820] usb 6-1: config 0 descriptor?? [ 354.055355][ T820] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 354.345711][ T820] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 354.415994][ T820] usb 6-1: USB disconnect, device number 15 [ 354.422603][ T820] pvrusb2: Device being rendered inoperable [ 354.456052][ T820] pvrusb2: Device being rendered inoperable [ 354.859341][ T5925] usb 1-1: USB disconnect, device number 33 [ 355.537859][ T820] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 355.689160][ T820] usb 3-1: unable to get BOS descriptor or descriptor too short [ 355.704560][ T820] usb 3-1: config 13 has an invalid interface number: 50 but max is 3 [ 355.704587][ T820] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 355.704605][ T820] usb 3-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 355.704624][ T820] usb 3-1: config 13 has no interface number 0 [ 355.704668][ T820] usb 3-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 355.704694][ T820] usb 3-1: config 13 interface 50 has no altsetting 0 [ 355.769968][ T820] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 355.769996][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.770015][ T820] usb 3-1: Product: syz [ 355.770046][ T820] usb 3-1: Manufacturer: syz [ 355.770060][ T820] usb 3-1: SerialNumber: syz [ 356.075574][ T5925] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 356.229830][ T820] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 356.269607][ T5925] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 356.269651][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 356.269689][ T5925] usb 2-1: Product: syz [ 356.269704][ T5925] usb 2-1: SerialNumber: syz [ 356.320823][ T152] usb 3-1: Failed to submit usb control message: -71 [ 356.320861][ T152] usb 3-1: unable to send the bmi data to the device: -71 [ 356.320881][ T152] usb 3-1: unable to get target info from device [ 356.320897][ T152] usb 3-1: could not get target info (-71) [ 356.320983][ T152] usb 3-1: could not probe fw (-71) [ 356.324458][ T820] usb 3-1: USB disconnect, device number 37 [ 356.380164][ T5925] usb 2-1: config 0 descriptor?? [ 356.646697][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 356.768152][ T5925] hso 2-1:0.0: Failed to find BULK eps [ 357.081043][ T7911] 5ÿ: renamed from dummy0 (while UP) [ 357.116049][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.123966][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.268160][ T820] usb 2-1: USB disconnect, device number 21 [ 358.217221][ T2393] pvrusb2: request_firmware fatal error with code=-110 [ 358.217239][ T2393] pvrusb2: Failure uploading firmware1 [ 358.217247][ T2393] pvrusb2: Device initialization was not successful. [ 358.217255][ T2393] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 358.217265][ T2393] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 358.223004][ T2393] pvrusb2: Failed to submit write-control URB status=-19 [ 358.223671][ T31] pvrusb2: Device being rendered inoperable [ 358.257428][ T820] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 358.321172][ T2393] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 358.321201][ T2393] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 358.436067][ T820] usb 6-1: unable to get BOS descriptor or descriptor too short [ 358.449698][ T820] usb 6-1: config 13 has an invalid interface number: 50 but max is 3 [ 358.449770][ T820] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 358.449825][ T820] usb 6-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 358.449886][ T820] usb 6-1: config 13 has no interface number 0 [ 358.450001][ T820] usb 6-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 358.450081][ T820] usb 6-1: config 13 interface 50 has no altsetting 0 [ 358.528028][ T820] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 358.528059][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.528080][ T820] usb 6-1: Product: syz [ 358.528096][ T820] usb 6-1: Manufacturer: syz [ 358.528109][ T820] usb 6-1: SerialNumber: syz [ 359.398068][ T820] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 359.453417][ T820] usb 6-1: USB disconnect, device number 17 [ 359.483995][ T7630] usb 6-1: Failed to submit usb control message: -71 [ 359.484035][ T7630] usb 6-1: unable to send the bmi data to the device: -71 [ 359.484054][ T7630] usb 6-1: unable to get target info from device [ 359.484081][ T7630] usb 6-1: could not get target info (-71) [ 359.484182][ T7630] usb 6-1: could not probe fw (-71) [ 360.759803][ T7954] 5ÿ: renamed from dummy0 (while UP) [ 361.845619][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 362.059127][ T820] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 362.218949][ T820] usb 6-1: unable to get BOS descriptor or descriptor too short [ 362.220815][ T820] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.220841][ T820] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.224201][ T820] usb 6-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 362.224240][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.224260][ T820] usb 6-1: Product: syz [ 362.224274][ T820] usb 6-1: Manufacturer: syz [ 362.224294][ T820] usb 6-1: SerialNumber: syz [ 362.401210][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 362.404259][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.404284][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.437268][ T10] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 362.437298][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.437319][ T10] usb 1-1: Product: syz [ 362.437335][ T10] usb 1-1: Manufacturer: syz [ 362.437350][ T10] usb 1-1: SerialNumber: syz [ 362.643474][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.645297][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.834932][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.858659][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.142787][ T820] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 363.213038][ T820] usb 6-1: USB disconnect, device number 18 [ 363.356808][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.532487][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 363.552048][ T10] usb 1-1: USB disconnect, device number 34 [ 363.621077][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.299010][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.576'. [ 364.767408][ T5604] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 366.696535][ T820] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 367.469445][ T8051] fuse: Bad value for 'fd' [ 367.941448][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 368.917494][ T820] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 368.917530][ T820] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 368.917557][ T820] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 368.917583][ T820] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 368.917625][ T820] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 368.917651][ T820] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 368.917676][ T820] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 368.917702][ T820] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 368.917727][ T820] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 368.919977][ T820] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 369.183449][ T820] hid-generic 0006:0008:0001.000B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 369.672240][ T8065] fido_id[8065]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 372.394485][ T5604] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 376.506088][ T5925] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 376.739004][ T5925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.757870][ T5925] usb 1-1: config 13 has an invalid interface number: 50 but max is 3 [ 376.757898][ T5925] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 376.757975][ T5925] usb 1-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 376.758019][ T5925] usb 1-1: config 13 has no interface number 0 [ 376.758064][ T5925] usb 1-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 376.758108][ T5925] usb 1-1: config 13 interface 50 has no altsetting 0 [ 376.799094][ T5925] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 376.799175][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.799249][ T5925] usb 1-1: Product: syz [ 376.799290][ T5925] usb 1-1: Manufacturer: syz [ 376.799331][ T5925] usb 1-1: SerialNumber: syz [ 377.542716][ T5925] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 377.601643][ T5925] usb 1-1: USB disconnect, device number 35 [ 377.612856][ T1404] usb 1-1: Failed to submit usb control message: -71 [ 377.612889][ T1404] usb 1-1: unable to send the bmi data to the device: -71 [ 377.612908][ T1404] usb 1-1: unable to get target info from device [ 377.612924][ T1404] usb 1-1: could not get target info (-71) [ 377.613011][ T1404] usb 1-1: could not probe fw (-71) [ 378.728852][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.728918][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.764443][ T8166] kvm: pic: level sensitive irq not supported [ 381.764541][ T8166] kvm: pic: non byte read [ 381.764704][ T8166] kvm: pic: level sensitive irq not supported [ 381.764761][ T8166] kvm: pic: non byte read [ 381.764831][ T8166] kvm: pic: non byte read [ 381.764893][ T8166] kvm: pic: non byte read [ 381.764953][ T8166] kvm: pic: non byte read [ 381.765012][ T8166] kvm: pic: non byte read [ 381.765070][ T8166] kvm: pic: non byte read [ 381.765128][ T8166] kvm: pic: non byte read [ 381.765186][ T8166] kvm: pic: non byte read [ 381.765249][ T8166] kvm: pic: non byte read [ 383.007937][ T5878] hid_parser_main: 7 callbacks suppressed [ 383.007958][ T5878] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 383.007983][ T5878] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 383.008005][ T5878] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 383.008026][ T5878] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 383.008047][ T5878] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 383.008068][ T5878] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 383.008089][ T5878] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 383.008111][ T5878] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 383.008132][ T5878] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 383.008153][ T5878] hid-generic 0006:0008:0001.000C: unknown main item tag 0x0 [ 383.111963][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 383.197670][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 383.208959][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.227428][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.232924][ T5613] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 383.233426][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.372383][ T8199] syz.0.629 uses obsolete (PF_INET,SOCK_PACKET) [ 383.392744][ T5878] hid-generic 0006:0008:0001.000C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 384.254104][ T8208] fido_id[8208]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 385.406376][ T5613] Bluetooth: hci3: command tx timeout [ 387.378246][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.378646][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.378847][ T8190] bridge_slave_0: entered allmulticast mode [ 387.400377][ T8190] bridge_slave_0: entered promiscuous mode [ 387.435983][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.439121][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.439453][ T8190] bridge_slave_1: entered allmulticast mode [ 387.485568][ T5613] Bluetooth: hci3: command tx timeout [ 387.490469][ T8190] bridge_slave_1: entered promiscuous mode [ 387.788350][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.805368][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.325917][ T8277] netlink: 'syz.3.649': attribute type 4 has an invalid length. [ 389.105656][ T5613] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 389.565686][ T5613] Bluetooth: hci3: command tx timeout [ 389.659553][ T8190] team0: Port device team_slave_0 added [ 390.091129][ T8190] team0: Port device team_slave_1 added [ 390.221802][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.221820][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.221849][ T8190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.283904][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.283940][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.283970][ T8190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.702102][ T8296] fuse: root generation should be zero [ 390.754156][ T8190] hsr_slave_0: entered promiscuous mode [ 390.766932][ T8190] hsr_slave_1: entered promiscuous mode [ 390.769502][ T8190] debugfs: 'hsr0' already exists in 'hsr' [ 390.769527][ T8190] Cannot create hsr debugfs directory [ 391.649337][ T5613] Bluetooth: hci3: command tx timeout [ 394.935746][ T5925] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 396.235657][ T8340] netlink: 'syz.0.664': attribute type 4 has an invalid length. [ 396.775995][ T5925] usb 3-1: device descriptor read/64, error -71 [ 396.866936][ T8328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.897642][ T8190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 397.015716][ T5925] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 397.168608][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 397.170146][ T5925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.170168][ T5925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.173037][ T5925] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 397.173065][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.173086][ T5925] usb 3-1: Product: syz [ 397.173099][ T5925] usb 3-1: Manufacturer: syz [ 397.173115][ T5925] usb 3-1: SerialNumber: syz [ 397.549503][ T8339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.550504][ T8339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.585125][ T8190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.652379][ T5925] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 397.671928][ T5925] usb 3-1: USB disconnect, device number 39 [ 397.741003][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.829028][ T8190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.960499][ T8190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.152679][ T8190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 398.241109][ T8190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.248009][ T8190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 398.271863][ T8367] loop5: detected capacity change from 0 to 7 [ 398.290912][ T8367] Dev loop5: unable to read RDB block 7 [ 398.290938][ T8367] loop5: AHDI p1 [ 398.290966][ T8367] loop5: partition table partially beyond EOD, truncated [ 398.344464][ T8190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.831387][ T5718] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 399.051032][ T5718] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 399.051078][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.051098][ T5718] usb 1-1: Product: syz [ 399.051112][ T5718] usb 1-1: Manufacturer: syz [ 399.051125][ T5718] usb 1-1: SerialNumber: syz [ 399.142232][ T5718] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 399.197169][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.223574][ T5878] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 399.494621][ T8190] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.561532][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.561884][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.733183][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.745716][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.050227][ T5878] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 401.050658][ T5878] ath9k_htc: Failed to initialize the device [ 401.085782][ T9] usb 1-1: USB disconnect, device number 36 [ 401.278459][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 402.275645][ T5925] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 402.879190][ T5925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 402.901206][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.901236][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 402.933020][ T5925] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 402.933048][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.933066][ T5925] usb 1-1: Product: syz [ 402.933079][ T5925] usb 1-1: Manufacturer: syz [ 402.933093][ T5925] usb 1-1: SerialNumber: syz [ 403.335599][ T5718] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 403.459770][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.463237][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.485752][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 403.488475][ T5718] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.488506][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 403.488534][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 403.491672][ T5718] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 403.491699][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.491720][ T5718] usb 3-1: Product: syz [ 403.491735][ T5718] usb 3-1: Manufacturer: syz [ 403.491749][ T5718] usb 3-1: SerialNumber: syz [ 403.698848][ T5718] usb 3-1: config 0 descriptor?? [ 403.719564][ T5718] hub 3-1:0.0: bad descriptor, ignoring hub [ 403.719601][ T5718] hub 3-1:0.0: probe with driver hub failed with error -5 [ 403.808286][ T5925] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 404.318933][ T5925] usb 1-1: USB disconnect, device number 37 [ 404.336230][ T5718] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 404.462391][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.631124][ T5718] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 404.847911][ T8190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.972041][ T5718] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 405.130951][ T5718] usb 3-1: USB disconnect, device number 40 [ 405.279395][ T5613] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 405.715587][ T5719] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 405.758431][ T8190] veth0_vlan: entered promiscuous mode [ 405.782920][ T8190] veth1_vlan: entered promiscuous mode [ 405.846844][ T8190] veth0_macvtap: entered promiscuous mode [ 405.852694][ T8190] veth1_macvtap: entered promiscuous mode [ 405.878685][ T5719] usb 1-1: unable to get BOS descriptor or descriptor too short [ 405.900949][ T5719] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.900977][ T5719] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.930217][ T5719] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 405.930247][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.930269][ T5719] usb 1-1: Product: syz [ 405.930283][ T5719] usb 1-1: Manufacturer: syz [ 405.930298][ T5719] usb 1-1: SerialNumber: syz [ 406.038932][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.043774][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.159357][ T152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.159710][ T152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.164944][ T152] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.198181][ T152] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.303302][ T8446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.304501][ T8446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.579115][ T5719] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 406.623917][ T5719] usb 1-1: USB disconnect, device number 38 [ 406.680939][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.010962][ T8448] loop5: detected capacity change from 0 to 7 [ 407.030838][ T8448] Dev loop5: unable to read RDB block 7 [ 407.030882][ T8448] loop5: unable to read partition table [ 407.031145][ T8448] loop5: partition table beyond EOD, truncated [ 407.038829][ T8448] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 408.821744][ T7627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.821766][ T7627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.988764][ T5925] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 409.130140][ T7626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.130160][ T7626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.145826][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 409.162476][ T5925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 409.195866][ T5925] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 409.199504][ T5925] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 409.199531][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.199551][ T5925] usb 1-1: Product: syz [ 409.199564][ T5925] usb 1-1: Manufacturer: syz [ 409.199577][ T5925] usb 1-1: SerialNumber: syz [ 409.511141][ T5925] usb 1-1: Cannot retrieve CPort count: 0 [ 409.511190][ T5925] usb 1-1: Cannot retrieve CPort count: -5 [ 409.511225][ T5925] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -5 [ 409.712986][ T5925] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 409.772521][ T8461] netlink: 64 bytes leftover after parsing attributes in process `syz.0.695'. [ 409.861040][ T5719] usb 1-1: USB disconnect, device number 39 [ 409.874638][ T5925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 409.884064][ T5925] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 409.884090][ T5925] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 409.884110][ T5925] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 409.884132][ T5925] usb 2-1: config 13 has no interface number 0 [ 409.884193][ T5925] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 409.884221][ T5925] usb 2-1: config 13 interface 50 has no altsetting 0 [ 409.906255][ T5925] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 409.906283][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.906305][ T5925] usb 2-1: Product: syz [ 409.906319][ T5925] usb 2-1: Manufacturer: syz [ 409.906334][ T5925] usb 2-1: SerialNumber: syz [ 410.126300][ T5613] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 410.280665][ T8483] loop5: detected capacity change from 0 to 7 [ 410.303808][ T8483] Dev loop5: unable to read RDB block 7 [ 410.303836][ T8483] loop5: AHDI p1 [ 410.303865][ T8483] loop5: partition table partially beyond EOD, truncated [ 410.458794][ T5925] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 410.486980][ T5925] usb 2-1: USB disconnect, device number 23 [ 410.551717][ T13] usb 2-1: Failed to submit usb control message: -71 [ 410.551754][ T13] usb 2-1: unable to send the bmi data to the device: -71 [ 410.551772][ T13] usb 2-1: unable to get target info from device [ 410.551787][ T13] usb 2-1: could not get target info (-71) [ 410.551879][ T13] usb 2-1: could not probe fw (-71) [ 410.879780][ T8494] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 411.025604][ T5726] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 411.763094][ T5726] usb 1-1: unable to get BOS descriptor or descriptor too short [ 411.770389][ T5726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.770416][ T5726] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.824999][ T5726] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 411.825029][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.825047][ T5726] usb 1-1: Product: syz [ 411.825061][ T5726] usb 1-1: Manufacturer: syz [ 411.825074][ T5726] usb 1-1: SerialNumber: syz [ 412.370080][ T8493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.370739][ T8493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.600020][ T5726] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 412.626878][ T5726] usb 1-1: USB disconnect, device number 40 [ 413.189183][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.029803][ T5613] Bluetooth: Frame is too long (len 18, expected len 8) [ 414.119855][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.716'. [ 415.682285][ T8553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 415.968365][ T5719] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 417.131022][ T5719] usb 3-1: device not accepting address 41, error -71 [ 418.787891][ T8574] dlm: no locking on control device [ 419.365676][ T5718] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 419.525690][ T5719] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 419.525897][ T5718] usb 3-1: device descriptor read/64, error -71 [ 419.661217][ T2393] pvrusb2: request_firmware fatal error with code=-110 [ 419.661237][ T2393] pvrusb2: Failure uploading firmware1 [ 419.661244][ T2393] pvrusb2: Device initialization was not successful. [ 419.661262][ T2393] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 419.661270][ T2393] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 419.661378][ T31] pvrusb2: Device being rendered inoperable [ 419.708994][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 419.720507][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.720545][ T5719] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.723489][ T5719] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 419.723518][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.723541][ T5719] usb 2-1: Product: syz [ 419.723556][ T5719] usb 2-1: Manufacturer: syz [ 419.723572][ T5719] usb 2-1: SerialNumber: syz [ 419.966673][ T5718] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 420.077401][ T8589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.081289][ T8589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.095577][ T5718] usb 3-1: device descriptor read/64, error -71 [ 420.206042][ T5718] usb usb3-port1: attempt power cycle [ 420.547973][ T5718] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 420.568071][ T5718] usb 3-1: device descriptor read/8, error -71 [ 420.825651][ T5718] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 420.846390][ T5718] usb 3-1: device descriptor read/8, error -71 [ 420.958189][ T5718] usb usb3-port1: unable to enumerate USB device [ 421.838418][ T8626] netlink: 68 bytes leftover after parsing attributes in process `syz.0.732'. [ 422.021503][ T5719] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 422.035601][ T5719] usb 2-1: USB disconnect, device number 24 [ 422.290628][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.475594][ T5925] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 422.625664][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 422.642666][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 422.645181][ T5925] usb 4-1: config 230 has an invalid descriptor of length 1, skipping remainder of the config [ 422.645214][ T5925] usb 4-1: config 230 has 2 interfaces, different from the descriptor's value: 3 [ 422.684650][ T5925] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 422.684686][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.684713][ T5925] usb 4-1: Product: syz [ 422.684734][ T5925] usb 4-1: Manufacturer: syz [ 422.684750][ T5925] usb 4-1: SerialNumber: syz [ 422.960600][ T5925] usb 4-1: unit 4 not found! [ 422.960638][ T5925] usb 4-1: unit 0 not found! [ 423.181908][ T5925] snd-usb-audio 4-1:230.0: probe with driver snd-usb-audio failed with error -22 [ 423.220111][ T5925] usb 4-1: unit 4 not found! [ 423.220134][ T5925] usb 4-1: unit 0 not found! [ 423.237395][ T5613] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 425.476155][ T5925] snd-usb-audio 4-1:230.1: probe with driver snd-usb-audio failed with error -22 [ 425.499923][ T5925] usb 4-1: USB disconnect, device number 20 [ 425.745970][ T5613] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 425.821780][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:230.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.566855][ T868] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 427.775743][ T868] usb 4-1: Using ep0 maxpacket: 8 [ 427.812920][ T868] usb 4-1: config 1 has an invalid interface number: 64 but max is 6 [ 427.812979][ T868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 427.813033][ T868] usb 4-1: config 1 has no interface number 0 [ 427.881326][ T868] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 427.881372][ T868] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 427.881447][ T868] usb 4-1: Product: syz [ 427.881505][ T868] usb 4-1: Manufacturer: syz [ 427.881522][ T868] usb 4-1: SerialNumber: syz [ 428.796283][ T868] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 428.796635][ T868] visor 4-1:1.64: probe with driver visor failed with error -110 [ 429.747186][ T5719] usb 4-1: USB disconnect, device number 21 [ 431.459949][ T8713] netlink: 'syz.0.753': attribute type 4 has an invalid length. [ 431.943742][ T1232] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.186537][ T1232] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.271274][ T8729] macsec1: entered promiscuous mode [ 433.271300][ T8729] macsec1: entered allmulticast mode [ 433.468410][ T8736] loop5: detected capacity change from 0 to 7 [ 433.474265][ T8736] Dev loop5: unable to read RDB block 7 [ 433.474310][ T8736] loop5: unable to read partition table [ 433.474541][ T8736] loop5: partition table beyond EOD, truncated [ 433.477666][ T8736] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 433.981937][ T1232] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.644225][ T1232] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.745529][ T5925] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 436.664571][ T5925] usb 7-1: unable to get BOS descriptor or descriptor too short [ 436.674433][ T5925] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.674462][ T5925] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.704226][ T5925] usb 7-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 436.704258][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.704279][ T5925] usb 7-1: Product: syz [ 436.704293][ T5925] usb 7-1: Manufacturer: syz [ 436.704308][ T5925] usb 7-1: SerialNumber: syz [ 436.993217][ T8750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.001797][ T8750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.155107][ T5925] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 437.171889][ T5925] usb 7-1: USB disconnect, device number 2 [ 437.208969][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.799471][ T5613] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 438.015973][ T1232] bridge_slave_1: left allmulticast mode [ 438.016026][ T1232] bridge_slave_1: left promiscuous mode [ 438.016293][ T1232] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.035624][ T5718] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 438.115501][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 438.120693][ T1232] bridge_slave_0: left allmulticast mode [ 438.120722][ T1232] bridge_slave_0: left promiscuous mode [ 438.120935][ T1232] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.201287][ T5718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 438.202853][ T5718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.202876][ T5718] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.227451][ T5718] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 438.227532][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.227590][ T5718] usb 1-1: Product: syz [ 438.227623][ T5718] usb 1-1: Manufacturer: syz [ 438.227663][ T5718] usb 1-1: SerialNumber: syz [ 438.285776][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 438.301887][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 438.301914][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.301932][ T10] usb 2-1: Product: syz [ 438.301961][ T10] usb 2-1: Manufacturer: syz [ 438.301983][ T10] usb 2-1: SerialNumber: syz [ 438.346393][ T10] usb 2-1: config 0 descriptor?? [ 438.378466][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 438.526560][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.527610][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.837867][ T10] gspca_ov534_9: reg_w failed -110 [ 440.129526][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.129599][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.185512][ T10] gspca_ov534_9: Unknown sensor 0000 [ 440.185618][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 440.620440][ T1232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.676497][ T1232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.723977][ T1232] bond0 (unregistering): Released all slaves [ 441.015090][ T5718] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 441.056125][ T5718] usb 1-1: USB disconnect, device number 41 [ 441.105176][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.567105][ T5718] usb 2-1: USB disconnect, device number 25 [ 442.117130][ T5719] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 442.278351][ T5613] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 442.278494][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 442.278522][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.278538][ T5613] Workqueue: hci2 hci_rx_work [ 442.278595][ T5613] Call Trace: [ 442.278604][ T5613] [ 442.278614][ T5613] dump_stack_lvl+0xe8/0x150 [ 442.278644][ T5613] sysfs_create_dir_ns+0x271/0x2a0 [ 442.278681][ T5613] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 442.278707][ T5613] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 442.278748][ T5613] ? rt_spin_unlock+0x160/0x200 [ 442.278774][ T5613] kobject_add_internal+0x631/0xd10 [ 442.278818][ T5613] kobject_add+0x163/0x240 [ 442.278856][ T5613] ? __pfx_kobject_add+0x10/0x10 [ 442.278897][ T5613] ? get_device_parent+0x370/0x3a0 [ 442.278929][ T5613] device_add+0x408/0xbb0 [ 442.278959][ T5613] hci_conn_add_sysfs+0xd5/0x210 [ 442.278991][ T5613] le_conn_complete_evt+0x10e6/0x16b0 [ 442.279037][ T5613] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 442.279073][ T5613] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 442.279102][ T5613] ? lockdep_hardirqs_on+0x7a/0x110 [ 442.279133][ T5613] ? skb_pull_data+0xfb/0x200 [ 442.279170][ T5613] hci_le_conn_complete_evt+0x187/0x470 [ 442.279212][ T5613] hci_event_packet+0x659/0xef0 [ 442.279248][ T5613] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 442.279270][ T5613] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 442.279300][ T5613] ? __pfx_hci_event_packet+0x10/0x10 [ 442.279327][ T5613] ? rt_spin_unlock+0x14f/0x200 [ 442.279354][ T5613] ? hci_send_to_monitor+0xe2/0x590 [ 442.279397][ T5613] hci_rx_work+0x3ee/0x1040 [ 442.279430][ T5613] ? process_scheduled_works+0xa70/0x1860 [ 442.279455][ T5613] process_scheduled_works+0xb5d/0x1860 [ 442.279507][ T5613] ? __pfx_process_scheduled_works+0x10/0x10 [ 442.279536][ T5613] ? assign_work+0x3d5/0x5e0 [ 442.279566][ T5613] worker_thread+0xa53/0xfc0 [ 442.279630][ T5613] kthread+0x388/0x470 [ 442.279658][ T5613] ? __pfx_worker_thread+0x10/0x10 [ 442.279678][ T5613] ? __pfx_kthread+0x10/0x10 [ 442.279707][ T5613] ret_from_fork+0x514/0xb70 [ 442.279733][ T5613] ? __pfx_ret_from_fork+0x10/0x10 [ 442.279756][ T5613] ? __switch_to+0xc79/0x1410 [ 442.279791][ T5613] ? __pfx_kthread+0x10/0x10 [ 442.279819][ T5613] ret_from_fork_asm+0x1a/0x30 [ 442.279863][ T5613] [ 442.280021][ T5613] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 442.285368][ T5613] Bluetooth: hci2: failed to register connection device [ 442.383747][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 442.416525][ T5719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.416607][ T5719] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.577146][ T5719] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 442.577239][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.577294][ T5719] usb 4-1: Product: syz [ 442.577330][ T5719] usb 4-1: Manufacturer: syz [ 442.577358][ T5719] usb 4-1: SerialNumber: syz [ 443.181110][ T868] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 443.185212][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.211452][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.935608][ T868] usb 1-1: Using ep0 maxpacket: 8 [ 443.940085][ T868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 443.941722][ T868] usb 1-1: config 4 interface 0 has no altsetting 0 [ 443.984646][ T868] usb 1-1: string descriptor 0 read error: -22 [ 443.984749][ T868] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 443.984775][ T868] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 444.063595][ T868] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 444.216372][ T868] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 444.216768][ T868] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 444.216820][ T868] usb 1-1: media controller created [ 444.291766][ T868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.376592][ T8834] loop5: detected capacity change from 0 to 7 [ 444.395155][ T8834] Dev loop5: unable to read RDB block 7 [ 444.395214][ T8834] loop5: unable to read partition table [ 444.396448][ T8834] loop5: partition table beyond EOD, truncated [ 444.399492][ T8834] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 444.571936][ T5719] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 444.630731][ T5719] usb 4-1: USB disconnect, device number 22 [ 444.929013][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.835150][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 445.843415][ T868] zl10353_read_register: readreg error (reg=127, ret==0) [ 446.100993][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 446.161490][ T868] usb 1-1: USB disconnect, device number 42 [ 446.288800][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 446.329548][ T8857] netlink: 'syz.6.794': attribute type 4 has an invalid length. [ 446.725585][ T1232] hsr_slave_0: left promiscuous mode [ 446.765753][ T1232] hsr_slave_1: left promiscuous mode [ 446.766870][ T1232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.766896][ T1232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.831826][ T1232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.831858][ T1232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.967404][ T1232] veth1_macvtap: left promiscuous mode [ 446.968456][ T1232] veth0_macvtap: left promiscuous mode [ 446.968712][ T1232] veth1_vlan: left promiscuous mode [ 446.968883][ T1232] veth0_vlan: left promiscuous mode [ 447.355644][ T5718] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 447.505693][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 447.509019][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 447.510270][ T5718] usb 4-1: config 4 interface 0 has no altsetting 0 [ 447.513631][ T5718] usb 4-1: string descriptor 0 read error: -22 [ 447.513715][ T5718] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 447.513733][ T5718] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 447.571049][ T5718] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 447.598590][ T5718] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 447.598848][ T5718] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 447.598879][ T5718] usb 4-1: media controller created [ 447.658333][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.077541][ T1232] team0 (unregistering): Port device team_slave_1 removed [ 448.137155][ T1232] team0 (unregistering): Port device team_slave_0 removed [ 448.765811][ T5718] zl10353_read_register: readreg error (reg=127, ret==0) [ 448.827147][ T5718] usb 4-1: USB disconnect, device number 23 [ 449.339357][ T5718] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 449.457331][ T8884] netlink: 'syz.2.801': attribute type 4 has an invalid length. [ 449.485595][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 449.486556][ T5718] usb 2-1: no configurations [ 449.486573][ T5718] usb 2-1: can't read configurations, error -22 [ 449.615690][ T5718] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 449.797086][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 449.798147][ T5718] usb 2-1: no configurations [ 449.798163][ T5718] usb 2-1: can't read configurations, error -22 [ 449.824381][ T5718] usb usb2-port1: attempt power cycle [ 450.175555][ T5718] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 450.196227][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 450.197027][ T5718] usb 2-1: no configurations [ 450.197043][ T5718] usb 2-1: can't read configurations, error -22 [ 450.325569][ T5718] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 450.352503][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 450.353524][ T5718] usb 2-1: no configurations [ 450.353541][ T5718] usb 2-1: can't read configurations, error -22 [ 450.353977][ T5718] usb usb2-port1: unable to enumerate USB device [ 452.085570][ T5925] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 452.987275][ T5925] usb 7-1: Using ep0 maxpacket: 8 [ 453.052128][ T5925] usb 7-1: config 1 has an invalid interface number: 64 but max is 6 [ 453.052192][ T5925] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 453.052281][ T5925] usb 7-1: config 1 has no interface number 0 [ 453.126823][ T5925] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 453.126882][ T5925] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 453.126944][ T5925] usb 7-1: Product: syz [ 453.127001][ T5925] usb 7-1: Manufacturer: syz [ 453.127018][ T5925] usb 7-1: SerialNumber: syz [ 454.049516][ T5718] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 454.075576][ T31] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 454.259884][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 454.355834][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 454.462279][ T31] usb 1-1: config 4 interface 0 has no altsetting 0 [ 454.498599][ T31] usb 1-1: string descriptor 0 read error: -22 [ 454.498777][ T31] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 454.498805][ T31] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 454.905326][ T31] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 455.239972][ T5925] usb 7-1: can't set config #1, error -71 [ 455.410314][ T5925] usb 7-1: USB disconnect, device number 3 [ 455.423671][ T31] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 455.505959][ T31] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 455.506030][ T31] usb 1-1: media controller created [ 455.915639][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 456.236163][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 456.460265][ T8927] netlink: 68 bytes leftover after parsing attributes in process `syz.6.810'. [ 456.635000][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 457.067636][ T5718] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 457.208806][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 457.247041][ T5718] usb 7-1: Using ep0 maxpacket: 32 [ 457.277892][ T5718] usb 7-1: unable to get BOS descriptor or descriptor too short [ 457.279985][ T5718] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 457.284125][ T5718] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 457.284153][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.284174][ T5718] usb 7-1: Product: syz [ 457.284189][ T5718] usb 7-1: Manufacturer: syz [ 457.284203][ T5718] usb 7-1: SerialNumber: syz [ 457.581240][ T5842] hid_parser_main: 7 callbacks suppressed [ 457.581325][ T5842] hid-generic 0006:0008:0001.000D: unknown main item tag 0x0 [ 457.581359][ T5842] hid-generic 0006:0008:0001.000D: unknown main item tag 0x0 [ 457.581387][ T5842] hid-generic 0006:0008:0001.000D: unknown main item tag 0x0 [ 457.581485][ T5842] hid-generic 0006:0008:0001.000D: unknown main item tag 0x0 [ 457.581515][ T5842] hid-generic 0006:0008:0001.000D: unknown main item tag 0x0 [ 457.581543][ T5842] hid-generic 0006:0008:0001.000D: unknown main item tag 0x0 [ 457.581572][ T5842] hid-generic 0006:0008:0001.000D: unknown main item tag 0x0 [ 457.582145][ T5842] hid-generic 0006:0008:0001.000D: unknown main item tag 0x0 [ 457.582176][ T5842] hid-generic 0006:0008:0001.000D: unknown main item tag 0x0 [ 457.582203][ T5842] hid-generic 0006:0008:0001.000D: unknown main item tag 0x0 [ 457.759978][ T5718] usb 7-1: Limiting number of CPorts to U8_MAX [ 457.761247][ T5718] usb 7-1: Not enough endpoints found in device, aborting! [ 457.947128][ T31] usb 1-1: USB disconnect, device number 43 [ 458.007148][ T8933] netlink: 64 bytes leftover after parsing attributes in process `syz.6.813'. [ 458.212461][ T5878] usb 7-1: USB disconnect, device number 4 [ 458.378506][ T5842] hid-generic 0006:0008:0001.000D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 458.632144][ T8961] loop5: detected capacity change from 0 to 7 [ 458.665842][ T8961] Dev loop5: unable to read RDB block 7 [ 458.665894][ T8961] loop5: unable to read partition table [ 458.666122][ T8961] loop5: partition table beyond EOD, truncated [ 458.666141][ T8961] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 458.761902][ T8959] fido_id[8959]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 459.227976][ T5878] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 459.388806][ T5878] usb 7-1: Using ep0 maxpacket: 32 [ 459.392256][ T5878] usb 7-1: unable to get BOS descriptor or descriptor too short [ 459.393470][ T5878] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 459.401806][ T5878] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 459.401889][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.401944][ T5878] usb 7-1: Product: syz [ 459.401979][ T5878] usb 7-1: Manufacturer: syz [ 459.402020][ T5878] usb 7-1: SerialNumber: syz [ 459.476946][ T5842] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 459.631540][ T5842] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 459.631564][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.631579][ T5842] usb 2-1: Product: syz [ 459.631589][ T5842] usb 2-1: Manufacturer: syz [ 459.631599][ T5842] usb 2-1: SerialNumber: syz [ 459.679587][ T5842] usb 2-1: config 0 descriptor?? [ 459.737159][ T5878] usb 7-1: Limiting number of CPorts to U8_MAX [ 459.738190][ T5878] usb 7-1: Not enough endpoints found in device, aborting! [ 459.931699][ T5842] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 460.208486][ T8971] netlink: 64 bytes leftover after parsing attributes in process `syz.6.819'. [ 460.289214][ T5925] usb 7-1: USB disconnect, device number 5 [ 460.555719][ T8993] netlink: 68 bytes leftover after parsing attributes in process `syz.3.823'. [ 461.450072][ T5842] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 461.496949][ T5842] usb 2-1: USB disconnect, device number 30 [ 461.533779][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 462.632085][ T9004] loop5: detected capacity change from 0 to 7 [ 462.690342][ T9004] Dev loop5: unable to read RDB block 7 [ 462.690392][ T9004] loop5: unable to read partition table [ 462.690598][ T9004] loop5: partition table beyond EOD, truncated [ 462.690618][ T9004] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 465.804514][ T9024] loop5: detected capacity change from 0 to 7 [ 465.817285][ T9024] Dev loop5: unable to read RDB block 7 [ 465.817328][ T9024] loop5: AHDI p1 [ 465.817352][ T9024] loop5: partition table partially beyond EOD, truncated [ 466.642357][ T9041] syzkaller1: entered promiscuous mode [ 466.642380][ T9041] syzkaller1: entered allmulticast mode [ 467.075585][ T5842] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 467.261094][ T5842] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 467.261130][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 467.261151][ T5842] usb 7-1: Product: syz [ 467.261167][ T5842] usb 7-1: SerialNumber: syz [ 467.364528][ T5842] usb 7-1: config 0 descriptor?? [ 467.753722][ T9058] loop5: detected capacity change from 0 to 7 [ 467.776541][ T9058] Dev loop5: unable to read RDB block 7 [ 467.776598][ T9058] loop5: unable to read partition table [ 467.776844][ T9058] loop5: partition table beyond EOD, truncated [ 467.776865][ T9058] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 468.915697][ T9061] syzkaller1: entered promiscuous mode [ 468.915723][ T9061] syzkaller1: entered allmulticast mode [ 468.940614][ T9043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.944441][ T9043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.194239][ T9074] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.843'. [ 469.468238][ T5925] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 469.896523][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 470.361502][ T5925] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.361533][ T5925] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.400325][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 470.415239][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 470.415268][ T5925] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 470.415287][ T5925] usb 2-1: Product: syz [ 470.415300][ T5925] usb 2-1: Manufacturer: syz [ 470.468866][ T5925] hub 2-1:4.0: USB hub found [ 470.724309][ T5925] hub 2-1:4.0: 2 ports detected [ 470.887721][ T9087] loop5: detected capacity change from 0 to 7 [ 470.905619][ T9087] Dev loop5: unable to read RDB block 7 [ 470.905643][ T9087] loop5: AHDI p1 [ 470.905667][ T9087] loop5: partition table partially beyond EOD, truncated [ 471.360865][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.364634][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.448152][ T5604] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 471.848150][ T5726] usb 2-1: USB disconnect, device number 31 [ 471.848297][ T5925] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 472.979806][ T9119] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.856'. [ 473.078620][ T9123] loop5: detected capacity change from 0 to 7 [ 473.083457][ T9123] Dev loop5: unable to read RDB block 7 [ 473.083485][ T9123] loop5: AHDI p1 [ 473.083510][ T9123] loop5: partition table partially beyond EOD, truncated [ 473.197414][ T5925] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 473.346049][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 473.350775][ T5925] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.350809][ T5925] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.398043][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 473.398072][ T5925] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 473.398094][ T5925] usb 2-1: Product: syz [ 473.398108][ T5925] usb 2-1: Manufacturer: syz [ 473.470052][ T5925] hub 2-1:4.0: USB hub found [ 473.556061][ T5718] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 473.685696][ T5925] hub 2-1:4.0: 2 ports detected [ 473.717556][ T5718] usb 1-1: Using ep0 maxpacket: 16 [ 473.732331][ T5718] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 473.732358][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.732377][ T5718] usb 1-1: Product: syz [ 473.732389][ T5718] usb 1-1: Manufacturer: syz [ 473.732402][ T5718] usb 1-1: SerialNumber: syz [ 474.409883][ T9117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.430169][ T9117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.486181][ T9133] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 474.855782][ T5718] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 474.900256][ T5718] usb 1-1: USB disconnect, device number 44 [ 474.931285][ T5925] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 474.932021][ T5842] usb 2-1: USB disconnect, device number 32 [ 475.394647][ T9143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.409657][ T9143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.610495][ T9148] syzkaller1: entered promiscuous mode [ 475.610552][ T9148] syzkaller1: entered allmulticast mode [ 475.658645][ T9143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.659172][ T9143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.435581][ T5718] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 476.598607][ T5718] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 476.598648][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.598674][ T5718] usb 1-1: Product: syz [ 476.598687][ T5718] usb 1-1: Manufacturer: syz [ 476.598700][ T5718] usb 1-1: SerialNumber: syz [ 476.704365][ T5718] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 476.789598][ T5842] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 477.235566][ T5718] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 477.392519][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 477.407656][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 477.443269][ T5718] usb 2-1: config 4 interface 0 has no altsetting 0 [ 477.474569][ T5718] usb 2-1: string descriptor 0 read error: -22 [ 477.474769][ T5718] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 477.474929][ T5718] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 477.601057][ T5718] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 477.686513][ T5925] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 477.755098][ T5718] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 477.772198][ T5718] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 477.791553][ T5718] usb 2-1: media controller created [ 477.825488][ T5925] usb 3-1: device descriptor read/64, error -71 [ 477.924837][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.057815][ T5842] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 478.058032][ T5842] ath9k_htc: Failed to initialize the device [ 478.086533][ T5925] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 478.216435][ T5925] usb 3-1: device descriptor read/64, error -71 [ 478.327279][ T5925] usb usb3-port1: attempt power cycle [ 478.375701][ T5842] usb 1-1: ath9k_htc: USB layer deinitialized [ 478.665673][ T5925] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 478.716400][ T5925] usb 3-1: device descriptor read/8, error -71 [ 478.932350][ T5718] zl10353_read_register: readreg error (reg=127, ret==0) [ 478.946205][ T868] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 478.955642][ T5925] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 478.986610][ T5925] usb 3-1: device descriptor read/8, error -71 [ 479.097667][ T868] usb 4-1: Using ep0 maxpacket: 8 [ 479.100060][ T5925] usb usb3-port1: unable to enumerate USB device [ 479.129098][ T868] usb 4-1: unable to get BOS descriptor or descriptor too short [ 479.141713][ T868] usb 4-1: config 4 interface 0 has no altsetting 0 [ 479.176402][ T868] usb 4-1: string descriptor 0 read error: -22 [ 479.176508][ T868] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 479.176533][ T868] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 479.245777][ T868] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 479.264888][ T868] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 479.265253][ T868] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 479.265302][ T868] usb 4-1: media controller created [ 479.305606][ T868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.501970][ T868] zl10353_read_register: readreg error (reg=127, ret==0) [ 479.787935][ T5718] usb 2-1: USB disconnect, device number 33 [ 479.809542][ T868] usb 4-1: USB disconnect, device number 25 [ 483.708788][ T5604] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 483.887468][ T5719] usb 1-1: USB disconnect, device number 45 [ 484.122840][ T5604] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 484.427784][ T9228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.428361][ T9228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.386578][ T5719] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 485.545476][ T5719] usb 2-1: Using ep0 maxpacket: 32 [ 485.554349][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 485.576865][ T5719] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 485.576889][ T5719] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 485.579944][ T5719] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 485.579972][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.579993][ T5719] usb 2-1: Product: syz [ 485.580008][ T5719] usb 2-1: Manufacturer: syz [ 485.580023][ T5719] usb 2-1: SerialNumber: syz [ 485.884859][ T9243] netlink: 64 bytes leftover after parsing attributes in process `syz.1.889'. [ 485.952091][ T868] usb 2-1: USB disconnect, device number 34 [ 487.535329][ T9278] fuse: Unknown parameter '0x0000000000000004' [ 487.779491][ T9282] loop5: detected capacity change from 0 to 7 [ 487.819671][ T9282] Dev loop5: unable to read RDB block 7 [ 487.819707][ T9282] loop5: AHDI p1 [ 487.819730][ T9282] loop5: partition table partially beyond EOD, truncated [ 490.694554][ T9336] loop5: detected capacity change from 0 to 7 [ 490.709028][ T9336] Dev loop5: unable to read RDB block 7 [ 490.709060][ T9336] loop5: AHDI p1 [ 490.709088][ T9336] loop5: partition table partially beyond EOD, truncated [ 491.955603][ T868] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 492.135758][ T5719] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 492.397621][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 492.541642][ T868] usb 1-1: Using ep0 maxpacket: 32 [ 492.704677][ T5719] usb 2-1: config 1 has an invalid interface number: 64 but max is 6 [ 492.704707][ T5719] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 492.704773][ T5719] usb 2-1: config 1 has no interface number 0 [ 492.765232][ T5719] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 492.765322][ T5719] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 492.765346][ T5719] usb 2-1: Product: syz [ 492.789410][ T5719] usb 2-1: Manufacturer: syz [ 492.789430][ T5719] usb 2-1: SerialNumber: syz [ 493.086900][ T868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 493.232691][ T868] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 493.514600][ T868] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 493.514630][ T868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.514650][ T868] usb 1-1: Product: syz [ 493.514663][ T868] usb 1-1: Manufacturer: syz [ 493.514677][ T868] usb 1-1: SerialNumber: syz [ 494.096832][ T5719] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 494.097201][ T5719] visor 2-1:1.64: probe with driver visor failed with error -110 [ 494.470533][ T868] usb 1-1: can't set config #7, error -71 [ 494.497967][ T868] usb 1-1: USB disconnect, device number 46 [ 494.680211][ T5719] usb 2-1: USB disconnect, device number 35 [ 494.874547][ T9370] dlm: no locking on control device [ 495.075489][ T868] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 495.245509][ T868] usb 1-1: Using ep0 maxpacket: 32 [ 495.250448][ T868] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 495.250474][ T868] usb 1-1: config 0 has no interface number 0 [ 495.250517][ T868] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 495.282628][ T868] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 495.282734][ T868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.282830][ T868] usb 1-1: Product: syz [ 495.282852][ T868] usb 1-1: Manufacturer: syz [ 495.282867][ T868] usb 1-1: SerialNumber: syz [ 495.359380][ T868] usb 1-1: config 0 descriptor?? [ 495.376890][ T9367] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 495.584991][ T9386] loop5: detected capacity change from 0 to 7 [ 495.601157][ T9386] Dev loop5: unable to read RDB block 7 [ 495.601185][ T9386] loop5: AHDI p1 [ 495.601214][ T9386] loop5: partition table partially beyond EOD, truncated [ 495.716039][ T9367] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 495.796168][ T5726] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 495.813457][ T5925] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 495.923224][ T868] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 495.923995][ T868] asix 1-1:0.188: probe with driver asix failed with error -61 [ 495.996987][ T5878] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 496.004776][ T5925] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 496.004805][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 496.004825][ T5925] usb 4-1: Product: syz [ 496.004840][ T5925] usb 4-1: SerialNumber: syz [ 496.027285][ T5726] usb 3-1: device descriptor read/64, error -71 [ 496.062098][ T5925] usb 4-1: config 0 descriptor?? [ 496.155516][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 496.158094][ T5878] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.158124][ T5878] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.161305][ T5878] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 496.161332][ T5878] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 496.161352][ T5878] usb 2-1: Product: syz [ 496.161366][ T5878] usb 2-1: Manufacturer: syz [ 496.242005][ T5878] hub 2-1:4.0: USB hub found [ 496.286221][ T5726] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 496.293385][ T5925] hso 4-1:0.0: Failed to find BULK eps [ 496.415806][ T5726] usb 3-1: device descriptor read/64, error -71 [ 496.448153][ T5878] hub 2-1:4.0: 2 ports detected [ 496.526739][ T5726] usb usb3-port1: attempt power cycle [ 496.652171][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.655132][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.876415][ T5726] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 496.914633][ T5726] usb 3-1: device descriptor read/8, error -71 [ 497.000490][ T9410] netlink: 24 bytes leftover after parsing attributes in process `syz.6.927'. [ 497.166470][ T5726] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 497.186949][ T5726] usb 3-1: device descriptor read/8, error -71 [ 497.296720][ T5726] usb usb3-port1: unable to enumerate USB device [ 497.679014][ T5878] hub 2-1:4.0: activate --> -90 [ 497.732344][ T5719] usb 1-1: USB disconnect, device number 47 [ 497.882251][ T9389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.885245][ T9389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.124936][ T5878] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 498.131056][ T5878] usb 2-1-port2: cannot reset (err = -71) [ 498.138493][ T5719] usb 2-1: USB disconnect, device number 36 [ 498.140639][ T5878] usb 2-1-port2: cannot reset (err = -71) [ 498.140662][ T5878] usb 2-1-port2: Cannot enable. Maybe the USB cable is bad? [ 498.141383][ T5878] usb 2-1-port2: attempt power cycle [ 501.407217][ T9449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.938'. [ 501.567886][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.567956][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.068412][ T9471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.068908][ T9471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.595953][ T5719] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 503.770292][ T5719] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 503.770325][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.770347][ T5719] usb 1-1: Product: syz [ 503.770362][ T5719] usb 1-1: Manufacturer: syz [ 503.770376][ T5719] usb 1-1: SerialNumber: syz [ 503.826546][ T5719] usb 1-1: config 0 descriptor?? [ 503.909514][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.910187][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.048332][ T5719] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 505.197171][ T9504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.201937][ T9504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.484527][ T5719] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 505.543600][ T5719] usb 1-1: USB disconnect, device number 48 [ 505.913055][ T9518] loop5: detected capacity change from 0 to 7 [ 505.922541][ T9518] Dev loop5: unable to read RDB block 7 [ 505.922563][ T9518] loop5: AHDI p1 [ 505.922587][ T9518] loop5: partition table partially beyond EOD, truncated [ 506.646727][ T9539] netlink: 'syz.3.970': attribute type 13 has an invalid length. [ 506.815629][ T5604] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 506.887484][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 507.151381][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.169042][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.267532][ T9549] loop5: detected capacity change from 0 to 7 [ 507.269423][ T9549] Dev loop5: unable to read RDB block 7 [ 507.269446][ T9549] loop5: AHDI p1 [ 507.269471][ T9549] loop5: partition table partially beyond EOD, truncated [ 508.088480][ T9539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.105492][ T5719] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 508.109301][ T9539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.270924][ T5719] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 508.270952][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 508.270969][ T5719] usb 3-1: Product: syz [ 508.270981][ T5719] usb 3-1: SerialNumber: syz [ 508.319131][ T5719] usb 3-1: config 0 descriptor?? [ 508.333287][ T5719] hso 3-1:0.0: Not our interface [ 509.546428][ T9573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.550653][ T9573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.836421][ T5726] usb 3-1: USB disconnect, device number 55 [ 512.257256][ T9586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.257930][ T9586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.585632][ T5878] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 512.739444][ T5878] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 512.739477][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 512.739491][ T5878] usb 2-1: Product: syz [ 512.739501][ T5878] usb 2-1: SerialNumber: syz [ 512.743770][ T5878] usb 2-1: config 0 descriptor?? [ 512.806469][ T6691] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.810538][ T6691] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.811647][ T7629] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.811694][ T7629] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.976128][ T5878] hso 2-1:0.0: Failed to find BULK eps [ 513.018390][ T9592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.019011][ T9592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.095055][ T9596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.098567][ T9596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.214573][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.215188][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.249904][ T9596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.252883][ T9596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.660286][ T9608] loop5: detected capacity change from 0 to 7 [ 513.661245][ T9608] Dev loop5: unable to read RDB block 7 [ 513.661284][ T9608] loop5: unable to read partition table [ 513.661466][ T9608] loop5: partition table beyond EOD, truncated [ 513.663248][ T9608] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 513.916558][ T9610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.919279][ T9610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.952199][ T9610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.960052][ T9610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.001926][ T9612] netlink: 'syz.1.995': attribute type 13 has an invalid length. [ 514.427068][ T868] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 514.575661][ T868] usb 1-1: Using ep0 maxpacket: 16 [ 514.581305][ T868] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 514.581337][ T868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 514.618089][ T868] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 514.618119][ T868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.618140][ T868] usb 1-1: Product: syz [ 514.618155][ T868] usb 1-1: Manufacturer: syz [ 514.618169][ T868] usb 1-1: SerialNumber: syz [ 514.658419][ T9612] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.679397][ T868] usb 1-1: config 0 descriptor?? [ 514.694910][ T868] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 514.694941][ T868] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 514.714494][ T9612] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.301161][ T868] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 515.301998][ T868] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 515.302767][ T868] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 515.302784][ T868] em28xx 1-1:0.0: No AC97 audio processor [ 515.697881][ T9612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.719634][ T9612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.735548][ T5718] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 515.887264][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 515.890878][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.890910][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.890951][ T5718] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 515.890976][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.939841][ T5718] usb 3-1: config 0 descriptor?? [ 515.960543][ T5718] hub 3-1:0.0: USB hub found [ 516.157279][ T5718] hub 3-1:0.0: 1 port detected [ 516.362221][ T5718] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 516.362249][ T5718] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 516.404378][ T5718] usbhid 3-1:0.0: can't add hid device: -71 [ 516.404506][ T5718] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 516.457823][ T5718] usb 3-1: USB disconnect, device number 56 [ 516.611743][ T9638] loop5: detected capacity change from 0 to 7 [ 516.614806][ T9638] Dev loop5: unable to read RDB block 7 [ 516.614836][ T9638] loop5: unable to read partition table [ 516.614983][ T9638] loop5: partition table beyond EOD, truncated [ 516.615028][ T9638] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 517.173516][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.174049][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.257061][ T5719] usb 1-1: USB disconnect, device number 49 [ 517.274175][ T5719] em28xx 1-1:0.0: Disconnecting em28xx [ 517.286711][ T5718] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 517.364078][ T5719] em28xx 1-1:0.0: Freeing device [ 517.399351][ T7629] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.405327][ T7629] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.424132][ T66] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.424674][ T66] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.435585][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 517.465648][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.465681][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.465722][ T5718] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 517.465748][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.532172][ T5718] usb 3-1: config 0 descriptor?? [ 517.564581][ T5718] hub 3-1:0.0: USB hub found [ 517.674685][ T9650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.678317][ T9650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.739877][ T5718] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 517.926023][ T5719] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 518.010900][ T9652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.015025][ T9652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.079726][ T5719] usb 1-1: unable to get BOS descriptor or descriptor too short [ 518.100968][ T5719] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.100992][ T5719] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 518.120233][ T5719] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 518.120931][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.120987][ T5719] usb 1-1: Product: syz [ 518.121647][ T5719] usb 1-1: Manufacturer: syz [ 518.121700][ T5719] usb 1-1: SerialNumber: syz [ 518.168297][ T5718] usbhid 3-1:0.0: can't add hid device: -71 [ 518.168370][ T5718] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 518.313712][ T5718] usb 3-1: USB disconnect, device number 57 [ 518.439799][ T9648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.441564][ T9648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.633278][ T5719] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 518.652844][ T5719] usb 1-1: USB disconnect, device number 50 [ 518.788657][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.044606][ T9668] loop5: detected capacity change from 0 to 7 [ 519.056293][ T9668] Dev loop5: unable to read RDB block 7 [ 519.056345][ T9668] loop5: unable to read partition table [ 519.056613][ T9668] loop5: partition table beyond EOD, truncated [ 519.056644][ T9668] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 519.541707][ T9675] dlm: no locking on control device [ 519.980488][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.981063][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.667820][ T9685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.818114][ T9685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.371116][ T9702] netlink: 'syz.3.1023': attribute type 13 has an invalid length. [ 522.958093][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.990885][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.220277][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.220887][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.317288][ T868] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 523.470439][ T868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 523.472964][ T868] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.472989][ T868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 523.504927][ T868] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 523.504958][ T868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.504979][ T868] usb 1-1: Product: syz [ 523.504994][ T868] usb 1-1: Manufacturer: syz [ 523.505011][ T868] usb 1-1: SerialNumber: syz [ 523.704824][ T9745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.709336][ T9745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.789616][ T9735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.790301][ T9735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.016474][ T868] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 524.056989][ T868] usb 1-1: USB disconnect, device number 51 [ 524.104409][ T5697] udevd[5697]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.002710][ T9764] kvm: kvm [9762]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 526.101241][ T9769] syzkaller1: entered promiscuous mode [ 526.101266][ T9769] syzkaller1: entered allmulticast mode [ 526.464884][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.467021][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.797258][ T9747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.975599][ T5719] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 526.994486][ T9786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.995133][ T9786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.087956][ T9788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.088677][ T9788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.125523][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 527.128276][ T5719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.128324][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.128350][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 527.128369][ T5719] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 527.128393][ T5719] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.129502][ T5719] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 527.129526][ T5719] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 527.129543][ T5719] usb 3-1: Manufacturer: syz [ 527.134745][ T5719] usb 3-1: config 0 descriptor?? [ 527.185575][ T868] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 527.365456][ T868] usb 1-1: Using ep0 maxpacket: 32 [ 527.371338][ T868] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.371373][ T868] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.381126][ T868] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 527.381156][ T868] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 527.381178][ T868] usb 1-1: Product: syz [ 527.381193][ T868] usb 1-1: Manufacturer: syz [ 527.446772][ T868] hub 1-1:4.0: USB hub found [ 527.474331][ T9791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.474943][ T9791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.545506][ T5719] rc_core: IR keymap rc-hauppauge not found [ 527.545529][ T5719] Registered IR keymap rc-empty [ 527.554351][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.567787][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.603825][ T5719] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 527.616651][ T5719] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 527.651622][ T868] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 527.684482][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.696831][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.708805][ C1] mceusb 3-1:0.0: long-range (0x75) receiver active [ 527.728651][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.735118][ C1] rc rc0: IR event FIFO is full! [ 527.735135][ C1] rc rc0: IR event FIFO is full! [ 527.735148][ C1] rc rc0: IR event FIFO is full! [ 527.735161][ C1] rc rc0: IR event FIFO is full! [ 527.735173][ C1] rc rc0: IR event FIFO is full! [ 527.735478][ C1] rc rc0: IR event FIFO is full! [ 527.735496][ C1] rc rc0: IR event FIFO is full! [ 527.735509][ C1] rc rc0: IR event FIFO is full! [ 527.735522][ C1] rc rc0: IR event FIFO is full! [ 527.735536][ C1] rc rc0: IR event FIFO is full! [ 527.735548][ C1] rc rc0: IR event FIFO is full! [ 527.735883][ C1] rc rc0: IR event FIFO is full! [ 527.735928][ C1] rc rc0: IR event FIFO is full! [ 527.735978][ C1] rc rc0: IR event FIFO is full! [ 527.736013][ C1] rc rc0: IR event FIFO is full! [ 527.736400][ C1] rc rc0: IR event FIFO is full! [ 527.736450][ C1] rc rc0: IR event FIFO is full! [ 527.736484][ C1] rc rc0: IR event FIFO is full! [ 527.736517][ C1] rc rc0: IR event FIFO is full! [ 527.736558][ C1] rc rc0: IR event FIFO is full! [ 527.737580][ C1] rc rc0: IR event FIFO is full! [ 527.737612][ C1] rc rc0: IR event FIFO is full! [ 527.737648][ C1] rc rc0: IR event FIFO is full! [ 527.737673][ C1] rc rc0: IR event FIFO is full! [ 527.738026][ C1] rc rc0: IR event FIFO is full! [ 527.738064][ C1] rc rc0: IR event FIFO is full! [ 527.738093][ C1] rc rc0: IR event FIFO is full! [ 527.738124][ C1] rc rc0: IR event FIFO is full! [ 527.738161][ C1] rc rc0: IR event FIFO is full! [ 527.738192][ C1] rc rc0: IR event FIFO is full! [ 527.738223][ C1] rc rc0: IR event FIFO is full! [ 527.738595][ C1] rc rc0: IR event FIFO is full! [ 527.738934][ C1] rc rc0: IR event FIFO is full! [ 527.738971][ C1] rc rc0: IR event FIFO is full! [ 527.739001][ C1] rc rc0: IR event FIFO is full! [ 527.739037][ C1] rc rc0: IR event FIFO is full! [ 527.739067][ C1] rc rc0: IR event FIFO is full! [ 527.739098][ C1] rc rc0: IR event FIFO is full! [ 527.739456][ C1] rc rc0: IR event FIFO is full! [ 527.739872][ C1] rc rc0: IR event FIFO is full! [ 527.739910][ C1] rc rc0: IR event FIFO is full! [ 527.739953][ C1] rc rc0: IR event FIFO is full! [ 527.740006][ C1] rc rc0: IR event FIFO is full! [ 527.740046][ C1] rc rc0: IR event FIFO is full! [ 527.740075][ C1] rc rc0: IR event FIFO is full! [ 527.740108][ C1] rc rc0: IR event FIFO is full! [ 527.740137][ C1] rc rc0: IR event FIFO is full! [ 527.740166][ C1] rc rc0: IR event FIFO is full! [ 527.740195][ C1] rc rc0: IR event FIFO is full! [ 527.740229][ C1] rc rc0: IR event FIFO is full! [ 527.740554][ C1] rc rc0: IR event FIFO is full! [ 527.740589][ C1] rc rc0: IR event FIFO is full! [ 527.740618][ C1] rc rc0: IR event FIFO is full! [ 527.740653][ C1] rc rc0: IR event FIFO is full! [ 527.740670][ C1] rc rc0: IR event FIFO is full! [ 527.740704][ C1] rc rc0: IR event FIFO is full! [ 527.741023][ C1] rc rc0: IR event FIFO is full! [ 527.741068][ C1] rc rc0: IR event FIFO is full! [ 527.741091][ C1] rc rc0: IR event FIFO is full! [ 527.741129][ C1] rc rc0: IR event FIFO is full! [ 527.741158][ C1] rc rc0: IR event FIFO is full! [ 527.741193][ C1] rc rc0: IR event FIFO is full! [ 527.741227][ C1] rc rc0: IR event FIFO is full! [ 527.741646][ C1] rc rc0: IR event FIFO is full! [ 527.741691][ C1] rc rc0: IR event FIFO is full! [ 527.742474][ C1] rc rc0: IR event FIFO is full! [ 527.742515][ C1] rc rc0: IR event FIFO is full! [ 527.742549][ C1] rc rc0: IR event FIFO is full! [ 527.742594][ C1] rc rc0: IR event FIFO is full! [ 527.742629][ C1] rc rc0: IR event FIFO is full! [ 527.743064][ C1] rc rc0: IR event FIFO is full! [ 527.743105][ C1] rc rc0: IR event FIFO is full! [ 527.743139][ C1] rc rc0: IR event FIFO is full! [ 527.743173][ C1] rc rc0: IR event FIFO is full! [ 527.743213][ C1] rc rc0: IR event FIFO is full! [ 527.743607][ C1] rc rc0: IR event FIFO is full! [ 527.743648][ C1] rc rc0: IR event FIFO is full! [ 527.743979][ C1] rc rc0: IR event FIFO is full! [ 527.744018][ C1] rc rc0: IR event FIFO is full! [ 527.744057][ C1] rc rc0: IR event FIFO is full! [ 527.744070][ C1] rc rc0: IR event FIFO is full! [ 527.744381][ C1] rc rc0: IR event FIFO is full! [ 527.744444][ C1] rc rc0: IR event FIFO is full! [ 527.744485][ C1] rc rc0: IR event FIFO is full! [ 527.744511][ C1] rc rc0: IR event FIFO is full! [ 527.744550][ C1] rc rc0: IR event FIFO is full! [ 527.744936][ C1] rc rc0: IR event FIFO is full! [ 527.744977][ C1] rc rc0: IR event FIFO is full! [ 527.745011][ C1] rc rc0: IR event FIFO is full! [ 527.745044][ C1] rc rc0: IR event FIFO is full! [ 527.745486][ C1] rc rc0: IR event FIFO is full! [ 527.745502][ C1] rc rc0: IR event FIFO is full! [ 527.745516][ C1] rc rc0: IR event FIFO is full! [ 527.745530][ C1] rc rc0: IR event FIFO is full! [ 527.745544][ C1] rc rc0: IR event FIFO is full! [ 527.746736][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.746892][ C1] rc rc0: IR event FIFO is full! [ 527.746909][ C1] rc rc0: IR event FIFO is full! [ 527.747310][ C1] rc rc0: IR event FIFO is full! [ 527.747350][ C1] rc rc0: IR event FIFO is full! [ 527.747390][ C1] rc rc0: IR event FIFO is full! [ 527.747449][ C1] rc rc0: IR event FIFO is full! [ 527.747463][ C1] rc rc0: IR event FIFO is full! [ 527.747482][ C1] rc rc0: IR event FIFO is full! [ 527.747857][ C1] rc rc0: IR event FIFO is full! [ 527.747887][ C1] rc rc0: IR event FIFO is full! [ 527.747921][ C1] rc rc0: IR event FIFO is full! [ 527.747949][ C1] rc rc0: IR event FIFO is full! [ 527.747977][ C1] rc rc0: IR event FIFO is full! [ 527.748005][ C1] rc rc0: IR event FIFO is full! [ 527.748038][ C1] rc rc0: IR event FIFO is full! [ 527.748066][ C1] rc rc0: IR event FIFO is full! [ 527.748100][ C1] rc rc0: IR event FIFO is full! [ 527.748487][ C1] rc rc0: IR event FIFO is full! [ 527.748548][ C1] rc rc0: IR event FIFO is full! [ 527.748589][ C1] rc rc0: IR event FIFO is full! [ 527.748622][ C1] rc rc0: IR event FIFO is full! [ 527.748661][ C1] rc rc0: IR event FIFO is full! [ 527.748682][ C1] rc rc0: IR event FIFO is full! [ 527.749862][ C1] rc rc0: IR event FIFO is full! [ 527.749880][ C1] rc rc0: IR event FIFO is full! [ 527.749909][ C1] rc rc0: IR event FIFO is full! [ 527.749929][ C1] rc rc0: IR event FIFO is full! [ 527.750358][ C1] rc rc0: IR event FIFO is full! [ 527.750400][ C1] rc rc0: IR event FIFO is full! [ 527.750462][ C1] rc rc0: IR event FIFO is full! [ 527.750496][ C1] rc rc0: IR event FIFO is full! [ 527.750536][ C1] rc rc0: IR event FIFO is full! [ 527.750570][ C1] rc rc0: IR event FIFO is full! [ 527.750604][ C1] rc rc0: IR event FIFO is full! [ 527.750644][ C1] rc rc0: IR event FIFO is full! [ 527.751017][ C1] rc rc0: IR event FIFO is full! [ 527.751058][ C1] rc rc0: IR event FIFO is full! [ 527.751442][ C1] rc rc0: IR event FIFO is full! [ 527.751473][ C1] rc rc0: IR event FIFO is full! [ 527.751515][ C1] rc rc0: IR event FIFO is full! [ 527.751555][ C1] rc rc0: IR event FIFO is full! [ 527.751584][ C1] rc rc0: IR event FIFO is full! [ 527.751613][ C1] rc rc0: IR event FIFO is full! [ 527.751642][ C1] rc rc0: IR event FIFO is full! [ 527.751664][ C1] rc rc0: IR event FIFO is full! [ 527.751996][ C1] rc rc0: IR event FIFO is full! [ 527.752026][ C1] rc rc0: IR event FIFO is full! [ 527.752384][ C1] rc rc0: IR event FIFO is full! [ 527.752427][ C1] rc rc0: IR event FIFO is full! [ 527.752457][ C1] rc rc0: IR event FIFO is full! [ 527.752491][ C1] rc rc0: IR event FIFO is full! [ 527.752520][ C1] rc rc0: IR event FIFO is full! [ 527.752542][ C1] rc rc0: IR event FIFO is full! [ 527.752571][ C1] rc rc0: IR event FIFO is full! [ 527.752599][ C1] rc rc0: IR event FIFO is full! [ 527.752627][ C1] rc rc0: IR event FIFO is full! [ 527.752960][ C1] rc rc0: IR event FIFO is full! [ 527.752990][ C1] rc rc0: IR event FIFO is full! [ 527.753019][ C1] rc rc0: IR event FIFO is full! [ 527.753054][ C1] rc rc0: IR event FIFO is full! [ 527.753082][ C1] rc rc0: IR event FIFO is full! [ 527.753115][ C1] rc rc0: IR event FIFO is full! [ 527.753143][ C1] rc rc0: IR event FIFO is full! [ 527.753513][ C1] rc rc0: IR event FIFO is full! [ 527.753549][ C1] rc rc0: IR event FIFO is full! [ 527.753585][ C1] rc rc0: IR event FIFO is full! [ 527.753614][ C1] rc rc0: IR event FIFO is full! [ 527.754215][ C1] rc rc0: IR event FIFO is full! [ 527.754229][ C1] rc rc0: IR event FIFO is full! [ 527.754241][ C1] rc rc0: IR event FIFO is full! [ 527.754253][ C1] rc rc0: IR event FIFO is full! [ 527.754571][ C1] rc rc0: IR event FIFO is full! [ 527.754601][ C1] rc rc0: IR event FIFO is full! [ 527.754636][ C1] rc rc0: IR event FIFO is full! [ 527.754664][ C1] rc rc0: IR event FIFO is full! [ 527.754688][ C1] rc rc0: IR event FIFO is full! [ 527.754723][ C1] rc rc0: IR event FIFO is full! [ 527.754751][ C1] rc rc0: IR event FIFO is full! [ 527.755093][ C1] rc rc0: IR event FIFO is full! [ 527.755123][ C1] rc rc0: IR event FIFO is full! [ 527.755158][ C1] rc rc0: IR event FIFO is full! [ 527.755180][ C1] rc rc0: IR event FIFO is full! [ 527.755642][ C1] rc rc0: IR event FIFO is full! [ 527.755672][ C1] rc rc0: IR event FIFO is full! [ 527.755701][ C1] rc rc0: IR event FIFO is full! [ 527.755793][ C1] rc rc0: IR event FIFO is full! [ 527.755833][ C1] rc rc0: IR event FIFO is full! [ 527.755867][ C1] rc rc0: IR event FIFO is full! [ 527.755895][ C1] rc rc0: IR event FIFO is full! [ 527.755928][ C1] rc rc0: IR event FIFO is full! [ 527.755976][ C1] rc rc0: IR event FIFO is full! [ 527.756359][ C1] rc rc0: IR event FIFO is full! [ 527.756400][ C1] rc rc0: IR event FIFO is full! [ 527.756444][ C1] rc rc0: IR event FIFO is full! [ 527.756484][ C1] rc rc0: IR event FIFO is full! [ 527.756869][ C1] rc rc0: IR event FIFO is full! [ 527.757307][ C1] rc rc0: IR event FIFO is full! [ 527.757348][ C1] rc rc0: IR event FIFO is full! [ 527.757389][ C1] rc rc0: IR event FIFO is full! [ 527.757433][ C1] rc rc0: IR event FIFO is full! [ 527.757473][ C1] rc rc0: IR event FIFO is full! [ 527.759125][ C1] rc rc0: IR event FIFO is full! [ 527.759143][ C1] rc rc0: IR event FIFO is full! [ 527.759159][ C1] rc rc0: IR event FIFO is full! [ 527.759174][ C1] rc rc0: IR event FIFO is full! [ 527.759189][ C1] rc rc0: IR event FIFO is full! [ 527.759458][ C1] rc rc0: IR event FIFO is full! [ 527.759507][ C1] rc rc0: IR event FIFO is full! [ 527.759553][ C1] rc rc0: IR event FIFO is full! [ 527.759593][ C1] rc rc0: IR event FIFO is full! [ 527.759639][ C1] rc rc0: IR event FIFO is full! [ 527.760720][ C1] rc rc0: IR event FIFO is full! [ 527.760766][ C1] rc rc0: IR event FIFO is full! [ 527.760807][ C1] rc rc0: IR event FIFO is full! [ 527.760840][ C1] rc rc0: IR event FIFO is full! [ 527.760872][ C1] rc rc0: IR event FIFO is full! [ 527.761199][ C1] rc rc0: IR event FIFO is full! [ 527.761242][ C1] rc rc0: IR event FIFO is full! [ 527.761280][ C1] rc rc0: IR event FIFO is full! [ 527.761313][ C1] rc rc0: IR event FIFO is full! [ 527.761766][ C1] rc rc0: IR event FIFO is full! [ 527.762541][ C1] rc rc0: IR event FIFO is full! [ 527.762938][ C1] rc rc0: IR event FIFO is full! [ 527.762977][ C1] rc rc0: IR event FIFO is full! [ 527.763009][ C1] rc rc0: IR event FIFO is full! [ 527.763055][ C1] rc rc0: IR event FIFO is full! [ 527.763107][ C1] rc rc0: IR event FIFO is full! [ 527.763152][ C1] rc rc0: IR event FIFO is full! [ 527.763192][ C1] rc rc0: IR event FIFO is full! [ 527.763585][ C1] rc rc0: IR event FIFO is full! [ 527.763613][ C1] rc rc0: IR event FIFO is full! [ 527.767038][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.792015][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.809903][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.833534][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.863333][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.895841][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.924317][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 529.058175][ T5719] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version b6 [ 529.058200][ T5719] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x75 active) [ 529.099281][ T5719] usb 3-1: USB disconnect, device number 58 [ 530.286223][ T868] usb 1-1: USB disconnect, device number 52 [ 530.608618][ T9817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.609291][ T9817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.735848][ T5719] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 530.745654][ T868] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 531.006218][ T868] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 531.006260][ T868] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 531.006290][ T868] usb 1-1: Product: syz [ 531.006308][ T868] usb 1-1: SerialNumber: syz [ 531.012545][ T868] usb 1-1: config 0 descriptor?? [ 531.013168][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 531.055145][ T5719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.055215][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.055249][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 531.055271][ T5719] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 531.055292][ T5719] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.102436][ T5719] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 531.102464][ T5719] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 531.102485][ T5719] usb 3-1: Manufacturer: syz [ 531.158696][ T5719] usb 3-1: config 0 descriptor?? [ 531.324399][ T868] hso 1-1:0.0: Failed to find BULK eps [ 531.354730][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.365877][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.505482][ T5719] rc_core: IR keymap rc-hauppauge not found [ 531.505503][ T5719] Registered IR keymap rc-empty [ 531.506582][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.533755][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.550655][ T5719] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 531.554727][ T5719] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 531.584709][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.595612][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.615640][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.635593][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.655572][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.675567][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.695616][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.715537][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.735589][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.755554][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 531.757271][ T9813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.763466][ T9813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.809671][ T5719] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 531.809697][ T5719] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 531.846534][ T5719] usb 3-1: USB disconnect, device number 59 [ 532.038234][ T9828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.038811][ T9828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.335849][ T5719] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 533.517425][ T5719] usb 3-1: Using ep0 maxpacket: 8 [ 533.586610][ T5719] usb 3-1: config 1 has an invalid interface number: 64 but max is 6 [ 533.586692][ T5719] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 533.586717][ T5719] usb 3-1: config 1 has no interface number 0 [ 533.648451][ T5719] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 533.648493][ T5719] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 533.648554][ T5719] usb 3-1: Product: syz [ 533.648570][ T5719] usb 3-1: Manufacturer: syz [ 533.648653][ T5719] usb 3-1: SerialNumber: syz [ 534.946643][ T5719] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 534.946967][ T5719] visor 3-1:1.64: probe with driver visor failed with error -110 [ 535.732501][ T5842] usb 3-1: USB disconnect, device number 60 [ 535.800462][ T9854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.804112][ T9854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.172417][ T5613] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 538.083964][ T9874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.084597][ T9874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.276731][ T9884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.277607][ T9884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.310325][ T9882] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 538.897045][ T9898] netlink: 'syz.2.1079': attribute type 13 has an invalid length. [ 539.008438][ T9902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.010818][ T9902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.096799][ T9902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.099012][ T9902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.512259][ T9898] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.527818][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.211366][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.216437][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.413356][ T5613] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 543.328188][ T9898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.351361][ T9898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.091654][ T9928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.094603][ T9928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.198990][ T9936] loop5: detected capacity change from 0 to 7 [ 544.200290][ T9936] Dev loop5: unable to read RDB block 7 [ 544.200321][ T9936] loop5: AHDI p1 [ 544.200349][ T9936] loop5: partition table partially beyond EOD, truncated [ 544.674237][ T9941] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 544.952727][ T9944] loop5: detected capacity change from 0 to 7 [ 544.954034][ T9944] Dev loop5: unable to read RDB block 7 [ 544.954053][ T9944] loop5: AHDI p1 [ 544.954071][ T9944] loop5: partition table partially beyond EOD, truncated [ 545.085956][ T9946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.088443][ T9946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.163758][ T9946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.167761][ T9946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.594535][ T152] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.611053][ T152] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.613285][ T152] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.613344][ T152] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.576761][ T9967] loop5: detected capacity change from 0 to 7 [ 546.579537][ T9967] Dev loop5: unable to read RDB block 7 [ 546.579564][ T9967] loop5: AHDI p1 [ 546.579592][ T9967] loop5: partition table partially beyond EOD, truncated [ 547.137298][ T9976] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1106'. [ 547.353574][ [ 547.353574][ T5604] ================================================================== [ 547.353593][ T5604] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190 [ 547.353635][ T5604] Read of size 8 at addr ffff88802b7d1780 by task kworker/u9:2/5604 [ 547.353653][ T5604] [ 547.353668][ T5604] CPU: 0 UID: 0 PID: 5604 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 547.353696][ T5604] Tainted: [L]=SOFTLOCKUP [ 547.353704][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.353719][ T5604] Workqueue: hci2 hci_rx_work [ 547.353746][ T5604] Call Trace: [ 547.353754][ T5604] [ 547.353763][ T5604] dump_stack_lvl+0xe8/0x150 [ 547.353788][ T5604] print_address_description+0x55/0x1e0 [ 547.353824][ T5604] ? __list_del_entry_valid_or_report+0x92/0x190 [ 547.353855][ T5604] print_report+0x58/0x70 [ 547.353876][ T5604] kasan_report+0x117/0x150 [ 547.353902][ T5604] ? __list_del_entry_valid_or_report+0x92/0x190 [ 547.353939][ T5604] __list_del_entry_valid_or_report+0x92/0x190 [ 547.353972][ T5604] bt_accept_unlink+0x39/0x260 [ 547.354001][ T5604] l2cap_sock_teardown_cb+0x17e/0x490 [ 547.354027][ T5604] l2cap_chan_del+0xb5/0x610 [ 547.354049][ T5604] ? l2cap_conn_del+0x331/0x570 [ 547.354071][ T5604] l2cap_conn_del+0x33d/0x570 [ 547.354094][ T5604] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 547.354114][ T5604] hci_disconn_complete_evt+0x501/0x950 [ 547.354145][ T5604] hci_event_packet+0x6ab/0xef0 [ 547.354173][ T5604] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 547.354192][ T5604] ? __pfx_hci_disconn_complete_evt+0x10/0x10 [ 547.354217][ T5604] ? __pfx_hci_event_packet+0x10/0x10 [ 547.354242][ T5604] ? rt_spin_unlock+0x14f/0x200 [ 547.354262][ T5604] ? __pfx_hci_cmd_sync_complete+0x10/0x10 [ 547.354291][ T5604] ? hci_send_to_monitor+0xe2/0x590 [ 547.354325][ T5604] hci_rx_work+0x3ee/0x1040 [ 547.354353][ T5604] ? process_scheduled_works+0xa70/0x1860 [ 547.354376][ T5604] process_scheduled_works+0xb5d/0x1860 [ 547.354417][ T5604] ? __pfx_process_scheduled_works+0x10/0x10 [ 547.354443][ T5604] ? assign_work+0x3d5/0x5e0 [ 547.354467][ T5604] worker_thread+0xa53/0xfc0 [ 547.354504][ T5604] kthread+0x388/0x470 [ 547.354531][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 547.354552][ T5604] ? __pfx_kthread+0x10/0x10 [ 547.354579][ T5604] ret_from_fork+0x514/0xb70 [ 547.354603][ T5604] ? __pfx_ret_from_fork+0x10/0x10 [ 547.354634][ T5604] ? __switch_to+0xc79/0x1410 [ 547.354666][ T5604] ? __pfx_kthread+0x10/0x10 [ 547.354692][ T5604] ret_from_fork_asm+0x1a/0x30 [ 547.354744][ T5604] [ 547.354751][ T5604] [ 547.354763][ T5604] Allocated by task 5718: [ 547.354773][ T5604] kasan_save_track+0x3e/0x80 [ 547.354791][ T5604] __kasan_kmalloc+0x93/0xb0 [ 547.354809][ T5604] __kmalloc_cache_noprof+0x3a6/0x690 [ 547.354836][ T5604] usb_set_configuration+0x3c9/0x2110 [ 547.354858][ T5604] usb_generic_driver_probe+0x8d/0x150 [ 547.354878][ T5604] usb_probe_device+0x1c4/0x3b0 [ 547.354899][ T5604] really_probe+0x267/0xaf0 [ 547.354920][ T5604] __driver_probe_device+0x1ef/0x380 [ 547.354940][ T5604] driver_probe_device+0x4f/0x240 [ 547.354963][ T5604] __device_attach_driver+0x279/0x430 [ 547.354985][ T5604] bus_for_each_drv+0x25b/0x2f0 [ 547.355011][ T5604] __device_attach+0x2c8/0x450 [ 547.355031][ T5604] device_initial_probe+0xa1/0xd0 [ 547.355051][ T5604] bus_probe_device+0x12d/0x220 [ 547.355077][ T5604] device_add+0x7e9/0xbb0 [ 547.355095][ T5604] usb_new_device+0x9f8/0x16e0 [ 547.355121][ T5604] hub_event+0x2a49/0x4f60 [ 547.355140][ T5604] process_scheduled_works+0xb5d/0x1860 [ 547.355158][ T5604] worker_thread+0xa53/0xfc0 [ 547.355176][ T5604] kthread+0x388/0x470 [ 547.355198][ T5604] ret_from_fork+0x514/0xb70 [ 547.355216][ T5604] ret_from_fork_asm+0x1a/0x30 [ 547.355238][ T5604] [ 547.355243][ T5604] Freed by task 5718: [ 547.355252][ T5604] kasan_save_track+0x3e/0x80 [ 547.355268][ T5604] kasan_save_free_info+0x46/0x50 [ 547.355293][ T5604] __kasan_slab_free+0x5c/0x80 [ 547.355311][ T5604] kfree+0x1c5/0x6c0 [ 547.355327][ T5604] device_release+0xc4/0x1f0 [ 547.355350][ T5604] kobject_put+0x228/0x560 [ 547.355375][ T5604] usb_disable_device+0x611/0x8d0 [ 547.355394][ T5604] usb_disconnect+0x315/0x970 [ 547.355420][ T5604] hub_event+0x1cf9/0x4f60 [ 547.355437][ T5604] process_scheduled_works+0xb5d/0x1860 [ 547.355455][ T5604] worker_thread+0xa53/0xfc0 [ 547.355474][ T5604] kthread+0x388/0x470 [ 547.355496][ T5604] ret_from_fork+0x514/0xb70 [ 547.355514][ T5604] ret_from_fork_asm+0x1a/0x30 [ 547.355536][ T5604] [ 547.355540][ T5604] The buggy address belongs to the object at ffff88802b7d1000 [ 547.355540][ T5604] which belongs to the cache kmalloc-2k of size 2048 [ 547.355558][ T5604] The buggy address is located 1920 bytes inside of [ 547.355558][ T5604] freed 2048-byte region [ffff88802b7d1000, ffff88802b7d1800) [ 547.355579][ T5604] [ 547.355585][ T5604] The buggy address belongs to the physical page: [ 547.355602][ T5604] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b7d1000 pfn:0x2b7d0 [ 547.355623][ T5604] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 547.355639][ T5604] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 547.355664][ T5604] page_type: f5(slab) [ 547.355682][ T5604] raw: 0080000000000240 ffff88801a011000 ffffea0000d08c10 ffffea0000a0ba10 [ 547.355701][ T5604] raw: ffff88802b7d1000 0000000800080007 00000000f5000000 0000000000000000 [ 547.355721][ T5604] head: 0080000000000240 ffff88801a011000 ffffea0000d08c10 ffffea0000a0ba10 [ 547.355738][ T5604] head: ffff88802b7d1000 0000000800080007 00000000f5000000 0000000000000000 [ 547.355755][ T5604] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 547.355772][ T5604] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 547.355782][ T5604] page dumped because: kasan: bad access detected [ 547.355798][ T5604] page_owner tracks the page as allocated [ 547.355805][ T5604] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15701176796, free_ts 0 [ 547.355847][ T5604] post_alloc_hook+0x231/0x280 [ 547.355868][ T5604] get_page_from_freelist+0x27c8/0x2840 [ 547.355892][ T5604] __alloc_frozen_pages_noprof+0x18d/0x380 [ 547.355920][ T5604] allocate_slab+0x77/0x660 [ 547.355945][ T5604] refill_objects+0x33c/0x3d0 [ 547.355989][ T5604] __pcs_replace_empty_main+0x373/0x720 [ 547.356019][ T5604] __kmalloc_cache_noprof+0x44e/0x690 [ 547.356041][ T5604] usb_hub_create_port_device+0x7f/0xc30 [ 547.356065][ T5604] hub_probe+0x26f8/0x3c30 [ 547.356085][ T5604] usb_probe_interface+0x659/0xc70 [ 547.356110][ T5604] really_probe+0x267/0xaf0 [ 547.356133][ T5604] __driver_probe_device+0x1ef/0x380 [ 547.356157][ T5604] driver_probe_device+0x4f/0x240 [ 547.356181][ T5604] __device_attach_driver+0x279/0x430 [ 547.356206][ T5604] bus_for_each_drv+0x25b/0x2f0 [ 547.356235][ T5604] __device_attach+0x2c8/0x450 [ 547.356256][ T5604] page_owner free stack trace missing [ 547.356265][ T5604] [ 547.356270][ T5604] Memory state around the buggy address: [ 547.356281][ T5604] ffff88802b7d1680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 547.356296][ T5604] ffff88802b7d1700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 547.356309][ T5604] >ffff88802b7d1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 547.356321][ T5604] ^ [ 547.356331][ T5604] ffff88802b7d1800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 547.356345][ T5604] ffff88802b7d1880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 547.356356][ T5604] ================================================================== [ 547.356865][ T5604] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 547.356928][ T5604] CPU: 0 UID: 0 PID: 5604 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 547.357005][ T5604] Tainted: [L]=SOFTLOCKUP [ 547.357028][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.357083][ T5604] Workqueue: hci2 hci_rx_work [ 547.357188][ T5604] Call Trace: [ 547.357208][ T5604] [ 547.357235][ T5604] vpanic+0x56c/0xa60 [ 547.357304][ T5604] ? __pfx_vpanic+0x10/0x10 [ 547.357374][ T5604] ? __pfx___schedule+0x10/0x10 [ 547.357399][ T5604] panic+0xc5/0xd0 [ 547.357422][ T5604] ? __pfx_panic+0x10/0x10 [ 547.357446][ T5604] ? preempt_schedule_thunk+0x16/0x30 [ 547.357492][ T5604] ? __list_del_entry_valid_or_report+0x92/0x190 [ 547.357523][ T5604] check_panic_on_warn+0x89/0xb0 [ 547.357550][ T5604] ? __list_del_entry_valid_or_report+0x92/0x190 [ 547.357579][ T5604] end_report+0x73/0x170 [ 547.357600][ T5604] ? __list_del_entry_valid_or_report+0x92/0x190 [ 547.357626][ T5604] kasan_report+0x128/0x150 [ 547.357647][ T5604] ? __list_del_entry_valid_or_report+0x92/0x190 [ 547.357678][ T5604] __list_del_entry_valid_or_report+0x92/0x190 [ 547.357709][ T5604] bt_accept_unlink+0x39/0x260 [ 547.357735][ T5604] l2cap_sock_teardown_cb+0x17e/0x490 [ 547.357758][ T5604] l2cap_chan_del+0xb5/0x610 [ 547.357779][ T5604] ? l2cap_conn_del+0x331/0x570 [ 547.357799][ T5604] l2cap_conn_del+0x33d/0x570 [ 547.357827][ T5604] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 547.357847][ T5604] hci_disconn_complete_evt+0x501/0x950 [ 547.357876][ T5604] hci_event_packet+0x6ab/0xef0 [ 547.357901][ T5604] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 547.357919][ T5604] ? __pfx_hci_disconn_complete_evt+0x10/0x10 [ 547.357942][ T5604] ? __pfx_hci_event_packet+0x10/0x10 [ 547.357964][ T5604] ? rt_spin_unlock+0x14f/0x200 [ 547.357981][ T5604] ? __pfx_hci_cmd_sync_complete+0x10/0x10 [ 547.358006][ T5604] ? hci_send_to_monitor+0xe2/0x590 [ 547.358036][ T5604] hci_rx_work+0x3ee/0x1040 [ 547.358061][ T5604] ? process_scheduled_works+0xa70/0x1860 [ 547.358082][ T5604] process_scheduled_works+0xb5d/0x1860 [ 547.358118][ T5604] ? __pfx_process_scheduled_works+0x10/0x10 [ 547.358142][ T5604] ? assign_work+0x3d5/0x5e0 [ 547.358163][ T5604] worker_thread+0xa53/0xfc0 [ 547.358194][ T5604] kthread+0x388/0x470 [ 547.358235][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 547.358254][ T5604] ? __pfx_kthread+0x10/0x10 [ 547.358279][ T5604] ret_from_fork+0x514/0xb70 [ 547.358303][ T5604] ? __pfx_ret_from_fork+0x10/0x10 [ 547.358325][ T5604] ? __switch_to+0xc79/0x1410 [ 547.358355][ T5604] ? __pfx_kthread+0x10/0x10 [ 547.358392][ T5604] ret_from_fork_asm+0x1a/0x30 [ 547.358423][ T5604] [ 547.359233][ T5604] Kernel Offset: disabled