last executing test programs: 13.698564412s ago: executing program 1 (id=146): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) (fail_nth: 8) 11.996975467s ago: executing program 1 (id=154): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = syz_open_dev$video4linux(&(0x7f0000000400), 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101b, 0xffffffffffffffff, 0x0, 0x0}) (async) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101b, 0xffffffffffffffff, 0x0, 0x0}) write$binfmt_misc(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x300, 0x108, 0x2d8, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x10, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x54}}, {}, [@jmp={0x5, 0x0, 0x1, 0x9, 0x0, 0x4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 11.734276806s ago: executing program 1 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000010ef0e010040000102030109022400010101008409040001010800010909210800030122f90709058103"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x8, 0x800, 0x7) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x9, 0xfff1}, {0x8, 0x3}, {0x7, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x604d080}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000135000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000118000/0x2000)=nil, &(0x7f00001ea000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) openat$tun(0xffffffffffffff9c, 0x0, 0x84000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 10.318806575s ago: executing program 4 (id=163): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/198, &(0x7f00000003c0)=0xc6) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x3, 0x3}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r4 = syz_usb_connect$uac3(0x1, 0x111, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1033, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x3, 0x1, 0xff, 0xd0, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x22, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x3c, 0x80000001}, [@selector_unit={0x6, 0x24, 0xc, 0x6, 0x1, "c2"}, @feature_unit={0xd, 0x24, 0x7, 0x6, 0x4, [0xd, 0x5db34daf15c793c3]}, @mixer_unit={0x6, 0x24, 0x5, 0x6, 0x7, 'T'}, @output_terminal={0x13, 0x24, 0x3, 0x6, 0x101, 0x5, 0x6, 0x10, 0x9, 0x3, 0x3, 0x1}, @selector_unit={0x6, 0x24, 0xc, 0x81, 0x1, 'F'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0xa0, 0xd, 'x`6'}, @as_header={0x17, 0x24, 0x1, 0x4, 0xb848, 0x1, 0x1, 0xbc, 0xfa, 0xa013, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x5}, @as_header={0x17, 0x24, 0x1, 0x2, 0x8001, 0x2, 0x1, 0x6, 0x7, 0x7754, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0xeb, 0x5, {0xa, 0x25, 0x25, 0x10000, 0x2, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xff, 0x4, 0x4, 0x6, "8c"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x2, 0x8, 0x4, "fa9d19", 'p\r'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x0, 0x6, 0x20, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x80, 0x80, {0xa, 0x25, 0x25, 0x5, 0x0, 0x7fff}}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x110, 0x3d, 0xfa, 0x93, 0x8}, 0xcf, &(0x7f00000005c0)={0x5, 0xf, 0xcf, 0x5, [@generic={0xae, 0x10, 0x2, "85b3e18cbb8e0b3d7d3753b0077b0ac9c1fd48133440388448052c56371ae0c43b271874e9607b57559c9dc852238be5e526926e2926dd6ac4b4b0ae3c8ad53600d7806994a54450e8be4fabe5e39c50e986db5d9c34ed03f87881fe2ce73516950d8a2c0e078e4c5ab338bb24ba0295fd94b77e77a95fcfa5689a45510722c3dd2d65222d4463859803bd29e279b57e62192795196894603f9d717928375a40526411f1bf4556b79d00ab"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0xa, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x9, 0x101}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x1, 0x1f, 0xa, 0x7}]}, 0x7, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x7d, &(0x7f0000000700)=@string={0x7d, 0x3, "ae5940431c9428dbc09f710a33a17f91ea16e78c08432507ac27e4c18bf2610750a260c012dc06f13427e7d7bd54c298af13041e9e54cd5382d836c00e71cb76f1f9852f03420b6f088dc7207c3a45bf434c88d8fd13d3ecd9e7a303f9f28016e4665219c423a9ee5287a476cf63794b6d6b268da5881128a59828"}}, {0x46, &(0x7f0000000840)=@string={0x46, 0x3, "08bc00e0a4f49da0114f35d392f80129f245cc088e037da9f9b35b1b8308c8e59739026cf9da29ae708410b19983ef22fc94453943cf95ea4c4daec17e949f363b4b7749"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x180a}}, {0xb1, &(0x7f0000000900)=@string={0xb1, 0x3, "e9b4c1412bf4107a8e99924d6dd814dd726de0a3f9c2c987b4979cf7034e51d3a58464b75514d0397a72c53844011868ccb0a2617ccde20e5f7c7e9f7f3c99bf3d25d7d352bd7743125234d78c3b986ccc032bd3edbf0bd690079bd0731d18794110a643930b306bfe90135aa23ba2f1a07f510aabe3533ca2e75af9a9b9f316854999e4ebdb59008758dfa8375ab153066260d82e6d736543c1c7849a16727839faca0080790c966aade2f899376b"}}, {0xa3, &(0x7f00000009c0)=@string={0xa3, 0x3, "54a8099f13919d019227d17f5e70c5d31635ca076ff14f51d9cd74f0d528f696e171bd75675ea9e5433e04633d46e6f54aba6647cf7f732c6b9a67896717e6084a92aeaecea30e325bc576e61cbfe604472d0bbda0f20c0f1db03aeaf75211311fd882aed6be55f062c7640e9f5eab7621fdb8d3e44e3bd9e60a735ba962705583e5fa5a20c857c4d6e05b34022efa244917eb6f86ecf4a445bdd7a3f21a86cc99"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_control_io$uac3(r4, &(0x7f0000000c80)={0x14, &(0x7f0000000b40)={0x20, 0x2, 0xd2, {0xd2, 0x4, "152c894bb3da9046d6519dfba65c30d207f0578f134d7c475673b84339ed87650fcfc15b612b814f473d2c1e7695af349f48a864e4f486f34aef16fa7ba969c973ac7fd8fd6b9a011aa2e1391f73709e161f810e289588519968ad273e685ef0836b5d918ed03b3cc50fbafa0ab2fcbe596694956c106db5d92df996737a3295bf2be1075d30c7fcdab10c800bf328617ff33edd59ca903176b5b83c5357b437d7f3eecf16e24cefc1480db0b23e931e5f5284cce3f97c0477ebe111b253684ea4bde3e717684343af2469b1ae0efcab"}}, &(0x7f0000000c40)={0x0, 0x3, 0x20, @string={0x20, 0x3, "98846deac91f3e29b5b2a31285a1dac9a1653570c16125de965e68876ef8"}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x20, 0x17, 0x4c, "e533b05d961cea77fdb4a3bed5538dd18e637d5df1373e479ceb22d675182169160809bf5bc4f0ddc32356c7a3b66b27e44c698198860255a205b56f31c8c987c0dbe11531e7205ae00afaec"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x8a}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000dc0)={0x20, 0x81, 0x1, 'A'}, &(0x7f0000000e00)={0x20, 0x82, 0x1, "a8"}, &(0x7f0000000e40)={0x20, 0x83, 0x1, "bc"}, &(0x7f0000000e80)={0x20, 0x84, 0x3, "589a3d"}, &(0x7f0000000ec0)={0x20, 0x85, 0x3, 'i ('}}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x40d, 0x70bd29, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x610c6, 0xc0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x804) syz_usb_control_io$hid(r1, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "288e51a1"}]}}, 0x0}, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x1, 0x3d, "11b8b746b3c75bfe8493a6a42f73b74a2ea95305570e887bd3557c532f1c44a30c6b0de5217ae90186a41b19bb0fe3d487ba591b76e2b27370f01d9663"}, 0x0}) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 8.621573954s ago: executing program 1 (id=167): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0x100, 0x0, 0x8, 0x7, 0x7}) (fail_nth: 1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 7.642702618s ago: executing program 2 (id=172): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x4, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xfffffeff, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0xfffffffd, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xacc, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0xffff3751, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x9, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.215062007s ago: executing program 4 (id=175): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) r0 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x5, @pix_mp={0x3, 0x40, 0x31435641, 0x6, 0x8, [{0x9, 0x4000}, {0x1000009, 0x7ffffffb}, {0x7f4d6e18, 0x2}, {0x1, 0x1ff}, {0xc000, 0x200}, {0x4000007, 0xffffffff}, {0x400, 0x1f}, {0x7311, 0x7fff}], 0xc3, 0x4, 0x8, 0x2, 0x6}}) 7.073710939s ago: executing program 4 (id=176): syz_usb_connect(0x2, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) 6.170030743s ago: executing program 0 (id=179): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000100)={0x30, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x1000, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_DIRENT(r1, 0x0, 0x0) memfd_create(0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000000)=0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r11, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r9, r10, 0x7, r11, &(0x7f00000000c0)={r8, 0xffffffffffffffff, 0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000700)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000740)=0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000780)={r12, 0x6}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_clone3(&(0x7f0000000640)={0x9200000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000003c0)=0x0, {0x1e}, &(0x7f0000000400)=""/35, 0x23, &(0x7f0000000500)=""/247, &(0x7f0000000600)=[r9, r10, r9, r9, r9, r9, r9, r9, r10, r10], 0xa, {r8}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x3, r13, 0x2, &(0x7f00000006c0)) 5.667578308s ago: executing program 2 (id=181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv2(r0, &(0x7f0000000000), 0x0, 0x3, 0x8, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 5.594709748s ago: executing program 4 (id=182): r0 = socket$kcm(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYRES16=r0], 0x14}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffd77}, 0x30004001) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0xfffffffd, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) io_setup(0x8, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x5760, 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000a40)={{0x12, 0x1, 0x250, 0x25, 0xdf, 0xca, 0x10, 0xb05, 0x1932, 0x135b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xdc}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000040)=@string={0x2}}, {0x37, &(0x7f0000000100)=@string={0x37, 0x3, "a475121ae9faf7120f59fd297aa2b254c4c5f3cb4bdd8bdfc8f305c379918e2bbf354bb963d46a96ad87294c8cdcbb6daeda6c00e9"}}]}) write(r2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r6, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) r7 = openat(r4, &(0x7f0000000180)='./mnt\x00', 0x101001, 0xa) r8 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "1c0f037046dd9a297f580590d4b62be987ad48288ac6a2d9e0e5bf58043eaa28fdb77395c01500d4486de69e249824cfcfc48c18c6f35659abc37f7ef36b679c", 0x33}, 0x48, 0xfffffffffffffffa) keyctl$instantiate(0xc, r8, 0x0, 0x0, 0xfffffffffffffffd) ioctl$BTRFS_IOC_ENCODED_READ(r7, 0x80809440, &(0x7f0000001d80)={&(0x7f0000001d00)=[{&(0x7f0000000280)="54262df457dccf083bcf588d81118888138a4c1e9f3fbc646a973d3085d626dced112c151d6538d404000000000000006c4d60b2037be8d37b1dc2205e471f73dddc9d522f4d3fdec5ef4cefa53597c00d", 0x51}, {&(0x7f0000000300)="bc60b0fc3502572794416ad92337a29298291cf4745770b7d4d98b7bae4a9e23e231975a694fe7f3384c65e7fa5e5d7f360d5548de65ce75cc031d07b7e2e99c9d4d25edc0941fdc3b1b5d9b57a31928de69c1cfd130579ee1807e", 0x5b}, {&(0x7f0000000380)="247a293762cc1d5bb4be5378cf2ccf14fe8cd07376534bf33f1b1fd5b38bdbc0e194b9fde3543b50c63fadb09f3978f753a9c2d711a67f1faec4da6f4cf960bd680f599bf0113db47770dbbf3a0d07feb2b00312d23c8cf1cfe160fb5d2face26e57516bd04fe161b84441a8fa22cd56887e2b8a81d4fac8f2ae3b1630f49400147b2a525745bb7fe3226e101eaa986fa6c9a27dde1fde2f15f5d1283936", 0x9e}, {&(0x7f00000006c0)="957b9711d9831ea51b75a4415fbf2afdcb6316f803600a1d93d291446695a2ded970fadb09722cb609ed80868061272df97cc651d059fe9346f96e047e1fe6ab4b129b176ce6eda2b63ef9a48dd798a82b51c6082f686b605f5cb677d5898dfd18142786f0f4849f8a6dbd4219b59a06a08bbf7aa75b8142ee1c2882ec083c3be98202651ca1f96d655f9eb1ec9d00df1b34f75894f471c23aed8acbecade84bbca357bae0eed332783048ec2fd1979ed6349998af0b8c5bfdd00345a9831b4917ce892d9bc446e8562f897953ddf3b7fbe4f60e8b89f915a241", 0xda}, {&(0x7f0000000440)="25b33d36808651691077bfaee51d7bd48535455379bb5d15d79928de626c1e10c54dcde862505869a2f0ed57704b8c2dd89417bb910e20d2b9aebfafaf385e7a8e6884f026714adf4da8c2ac272cfd2d55e90b499d0b207afd6b10744c70a45fcf77fb94785d0ff7c3d3905ff2681ad01fe080c857c24b3f6589df4a98297e46388bed832bcef227168bff0ba13d72f08c885637913cba131cf42f529d309a77e63c91eeb6b8a56ae4a154ff9ff4da9371de8279fe369394d63d4ffe105e2a2f8dab9c0a67881ba9248cd16e2f30d5ff6b2246fcb1c588b00fd1c57b6f333af7b1750a3c13f3fbfa2d1e51905087", 0xee}, {&(0x7f00000005c0)="77c1b8fc3fa9cf36a52608614b2bc7f3cdc1d931746483d7ee1b1ef28d19e2e25bbd39db995279dc5b33dd48ecd6bab2c906", 0x32}, {&(0x7f0000000d00)="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", 0x1000}], 0x7, 0x800000000000007, 0x0, 0x4, 0x6d, 0x1, 0x1, 0x1}) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x1010, r0, 0x5b9b2000) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0403d11, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @remote, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) 5.48855278s ago: executing program 1 (id=183): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)=@delchain={0x248, 0x65, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xb}, {0x2, 0xfff2}, {0xfff3, 0xe}}, [@TCA_RATE={0x6, 0x5, {0xb0, 0x5}}, @filter_kind_options=@f_cgroup={{0xb}, {0x210, 0x2, [@TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3314, 0x5, 0x5, 0x6, 0x2, {0x94, 0x2, 0xb, 0xfff7, 0x6, 0x7}, {0x6, 0x1, 0x7, 0x2, 0x1, 0x4}, 0x9, 0x0, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}]}, @TCA_CGROUP_ACT={0x1b8, 0x1, [@m_csum={0xbc, 0x0, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff0, 0x8, 0x10000000, 0x8, 0x7}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd0, 0x4, 0x4, 0x6, 0xf}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x20000000, 0x226e, 0x6}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2b0, 0x7, 0x10000000, 0xa33, 0x5}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x81, 0x3, 0x3b38, 0x6}, 0x78}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x8c, 0x8, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x7}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}]}, {0x51, 0x6, "0d8a725780252daa79c493983dc3230a108fee6a5d9b5ab093a90b9c317b16e4dc3b5b9daf3b2bf8eccc6642898d3e9146bbfb28347114ca37adb0d0154417b47d9c9c865d4da8a08fa4b17e0f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x6c, 0x1d, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x10000000, 0xc, 0x2, 0x101, {0x7, 0x2, 0x8000, 0x40, 0xffff, 0xfffffffa}, {0x7f, 0x1, 0x4, 0x3, 0x4, 0x5}, 0x7fffffff, 0x8, 0x8}}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x248}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r0, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) syz_usb_connect$uac1(0x0, 0x87, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000020820516004000010203010902750003010610090904000000010100000a240101000a000201020904010000010200000904010101010200000e24020104040502872badd4548107240104f600000905010900040401020725"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 5.426921353s ago: executing program 2 (id=184): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x1, 0x10000010001, 0x400000000005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = fanotify_init(0x200, 0x0) read(r1, 0x0, 0x0) 5.009588443s ago: executing program 0 (id=185): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r0, 0xfffffffffffffff5, 0x1) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000040)={0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xce) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xf6000000, 0x3a, 'usr:7jquota=', 0x3a, '', 0x3a, './file2'}, 0x33) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x200000000000000, {}, 0x1}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.694751852s ago: executing program 0 (id=186): r0 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x5, @pix_mp={0x3, 0x40, 0x31435641, 0x6, 0x8, [{0x9, 0x4000}, {0x1000009, 0x7ffffffb}, {0x7f4d6e18, 0x2}, {0x1, 0x1ff}, {0xc000, 0x200}, {0x4000007, 0xffffffff}, {0x400, 0x1f}, {0x7311, 0x7fff}], 0xc3, 0x4, 0x8, 0x2, 0x6}}) 4.635838977s ago: executing program 0 (id=187): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x10, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000180)=[0xfffffffffffffffc], 0x0, 0x6, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmmsg$alg(r2, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000007c0)="bb6b093d600f475119002a6859369c86ce446bbf8b69ff47c8efb837eccf6d5845139ac39562b177174bf7e383f70a34bf5f65ad1fb888920829d22f48778b4bec360e8fec46d2157a38d7d47eb0948775e111fdca2eb8425ce405f528f821ecbdf025fe9a194f151fb4658f7c35a2db73f216fb496734d5b8fbee9e6f286df5a4cfed630958fdafb57f", 0x8a}, {&(0x7f0000000cc0)="a0dd8175d826296e99aeb7aea5d32cc428171e0db04d53fdecfc64981b6b8d5d01e79eb2e07f68e94906c943e5a47300a631b28482026be5354d11562cb1237f43ac32f35027a83cb4ee9cf1cd2740e0d4db142c7b9aedf1225fdd9fa4d32a5b46df58350b5d2ff466", 0x69}, {&(0x7f0000000d40)="5b8edb43c9354197d3ca34cdbe6b11f88e290fda0894dd983141b1d1d42c8261277f0e27a7d22610d922b76270914ff56b7ced35e3fae8243073d269e1c8cad4a58a8b74b201069d8dcd3de19c634d72b77cc8ae616c36d9dafae38c3bcae230280a77157fe80bf53f072ddc61ba7cdc973672426049c32251461437c32c3d0e49665d1660ea721163c220887f6cbe976dc8ad3fce38e87019746ccebad95e31d3cc0bca4faa", 0xa6}, {&(0x7f0000000e00)="7899acadbe509062546096a75a3fdfbeaa3310e68767b6ca8399564dd3fe6e954fcdba8260583f5bb81949f9350f1e120df21e59280880fe7f9415b60a33945011b82d642de390a7b39b0b1284875faa96a0bc46f665c0cb043ce736e7f24c2ba7a4c53be9f942c1b1d3fe0c8c18b15f90bdb7be3f162d19429857bc2c17fa5894ae017b26ff91e6a017f5daae19a97ac71771796ef9609a67b503fe0ca1bce5abd9e5bd963f81cebef1a1f4c9", 0xad}, {&(0x7f0000000ec0)="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", 0xff}], 0x5}, {0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="aa01bbd635600a0b33a66741b4f00615", 0x10}, {&(0x7f0000001080)="5a088459e393e82f1f57ef0b6269b80b80d8168f72186103282c9deee88204063d98ddbe4a8f7fbd3fb30fe81390a09b562733379fb4f17e3b5e842c65324a739101f2fe1962359c7d82007ca180bdcaa36acc5ffcfc87a482e1ccb26b0899dda27bb6697618f308799c09f082797060b96c3aaab3a51918a1adef861cdb39f67a9f60f4537844d1247939b0545bea38de07f52d8454262d0f2cac3eddc46a1f1f", 0xa1}], 0x2, 0x0, 0x0, 0x4000010}, {0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000012c0)="12cd4430219a4e134e24458797007dacb040dd23a8a6e9ce1a0d5094c2735278e637836f79da2f3490d3a7c0805433936f584e842be424ff303617d8a36facfae4d5a36e54bddadb296d22fe4de3a90e47efe6c09ac8eb65a757e20948ad23d2cd7102dced929564551fe8d5ab795f93b9998290578989da71228c38569d850213de54c36a24753c547e35dea6053294658d683210498a9575b34a4167fff8755eb9a2d51673550a2a61655b0e042e", 0xaf}, {&(0x7f0000001380)="ba2d5e8f93644d064c61828e4a49973051737e528fdc42bc250e1c6bce92f6633eb0bb957e2a2a169658232e0104109ebedf9db42be4a1791042589e17480ffefdc5d8c61c8b1d2a6141955b1d22b33792150c262d6d75bb3c7d", 0x5a}, {&(0x7f0000001400)="a9d859bec9c1bacf3d6a68787381be42349b8b1fe999bef105d6f795a0b4aba745b066423ee8f92c0b506c5d0b93f71955c40190fb82be72dda9bfb7443004ae7bcf7ea87002e5aba6e0554c0933ff5edacc578a9a8c10baf0353d9ac1450a8927c1edda24ddbdf5857b6eeca0fd2c653082942ec6f810c35a317ec0bffd1a99685a558b6dd80a64e91c91194588a8c109c9c598", 0x94}], 0x3, 0x0, 0x0, 0x24008014}, {0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001500)="c7c5c710ae47e6ea2d46c092bc90eaf435e3869488e175ef9c03fd10ce8f52a4399fbd0724b92a9ade65ad13ba88af42fb8b6ea19205039dd741d251a867a2f6b1c21568bab2db5efac1606b9f6ceaddcd4a2f39c09d6aa0092e002ea6097facbef724654e151304716fdad2", 0x6c}, {&(0x7f0000001580)="ef954fbbb5bcd3fc7f7361dd90157e10a7e9fc9ee3864da594c6920f273c37fdab3acffd1639b7d45272db903886fd0b19bc0ae0b4c04813aeca0a51f8f9cb25dde30ab0ab0e1aa97a324176ded4fe85d25d349782705e445c53", 0x5a}, {&(0x7f0000001600)="8659232e6cf530bfd489d0195aab1c0ff4914856632fa9147e3efdc3df2bb3e68d573e90662932b608f8b086333b521b58232c6f030d31506fc480bfff17ff63f99449ef1841245aca48c97741b6d09b03de1d234bd26989a86636385ac0783a644cc4304b3fd2516cb2225caa27f042896ed2f0aafb83e4004ca7d8b44b96dd7c09ccfd04b6f08539146d09bc8a55c5b8a5b94b605b9578d0f1efde1f5bbddd71622f8ec92ac6b75cb154c4bf06ed04fd8780b312c450bfc55b91db1c288cc2318f8f52008813e7f3854b6a6c8daf9a4566993f4096ec20ca704aea5f9808fdae423a89cdc19f898d1a07dd6f85d98f6361", 0xf2}, {&(0x7f0000001700)="a24ce547993a9214f1327bb5cc93268609dcdd32d6a182454d2a1743f3b62ec1640e8583d619cb9b191df9b9b4498c8768dd25e4fce76ec6c5d65ac6e3a348c366870c8360834b1243f6435095beedb40e9659115c9fa49dbd0c84df6780ea", 0x5f}], 0x4, 0x0, 0x0, 0x405}, {0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000017c0)="d1e3fdf1a41165246256f6660ab9f300db1b324a95c361d8bc8cef2932fe279cd662e35f2d42b3ee0b3e957694c3cbc69fcc1fff9a507d1c1156a39aee2fe6ef1d5a45e18be11d6c8b6dc407682d8632eb70864b32296d1aa88dacc97c3e8165e3c4c8f8691cef7a3529d385", 0x6c}, {&(0x7f0000001840)="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", 0xd80}, {&(0x7f0000002840)="ee03cc9de994cc48955bc827a767e0b25179510f6ef9f018cfe08e02d1bcd09ef33db715af9d8cc9c11d4919049d67df79fe60326973615a149c175b29d4fc1cf7544a4efeba7c562a9acf4bd9638834cbcdaf38a1c63d393c01e92436d938b86007c4bd3d0b5def10dcd4513354965e5547dead26d47c0cf7fbe13f76c0f9a80a13be0bf5a8", 0x86}, {&(0x7f0000002e00)="d159ec9baa92ecfcc1a0ef34d89d3ea6e9d1b64a92f2a542d2b4ec9f1630277a79fd568a296bd91992c419661219e7449d974467e02d98fbde2b59e21f162a75ac24fbae3336d04711d7ba908da6a6ff785db4a2bd1ebfb735a7f20c3f13724c313378e0b78ac34b100434f37ffe19f9629f305c1da92947c39e0131ffd39ada31a7f4e02cda61e02d3c0ee4c3d814d1310bd4a38137d0be7c47ad200802469cdfee6267685d8e1cf23d22ed4b8b0eeea4c5b1576dfc28e06a484d3d3f427189c65d6527b08fba7ae40a9310a73a6b0235f679b821802a364d30ccb8b9a0bd73261fbf36d0", 0xe5}], 0x4, &(0x7f0000002a00)=[@iv={0x20, 0x117, 0x2, 0x6, "8dc5c25546fe"}, @iv={0xc0, 0x117, 0x2, 0xa6, "73a48ec862ab3cde6ced1ee9d93ca35fbb8bfd6378381e937c677d83d104a818d3a44e67c4e81e71bf48287a6ceaddf64c9cce5d87cd556d3aba6f891c1c71321cff577da46d66d0dfcdc452a0da00a2d81941e102611b768ce8842d94f33e82024e35ef1da22dbe7de792623e3e7ec18802ef6e18e0729f861f39ac08938e4d877b7e6bad8eb9552f92f8e895d58556426ee0b78dd5e89fa728e522c4b0de41c4046f7fedcc"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x108, 0x117, 0x2, 0xee, "fd98759ec2a71b05ae7cebba55a4f1a11351bda99d16206df5c74686099bfd8beed942d0103d0f93540bf299a1ea0e6ca47868815118a2146cd57dd0a1859c89bec83a9ffaa2803e1c5daa14a88161ad17a207f653d09fa7baa6afd9c32023d13f6cc605e7824229ea9a1745406fcd3ac92a1bb498b5bf64b3aa65ab9f23c6613a70d7e9cf182e8ae275987e139fb1f8b112e69f958767bae39aabe95bfb3ae9441944017c0f2d2c53543573c9686115d41bd6a8a6df4c522d5384d6c3576c915476b23c83dac30787077da566be674d8256069b8a3fb454c2c1c23bccefc5316bdc9569ad41e574c0ed40af1968"}], 0x218, 0x20044005}], 0x5, 0x20040804) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io(r11, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r11, &(0x7f0000000500)={0x24, &(0x7f0000000380)={0x0, 0x22, 0x6e, {0x6e, 0xd, "6bd6c908fe71c6c07b4e9d3a4a0295f00fbb86965b8596cefdf5654e20b03c2b1efc9a612021f471652f3f73784f045efeb9d1ff8250098f2fbe50aefb5c039f107a7cb8eaebdbbb931a46c66765f9d755b63174eba16ba9d5c52abb340337412c41796bb6098bc8644da034"}}, &(0x7f0000000400)={0x0, 0x3, 0x79, @string={0x79, 0x3, "5d1407d9eaa1db4618da19e33ca0a878869db397fc15f181d57e684a3bc1c4607816bdea49ad50c3ccae08299035b0e076deb44ceb5e0402d5e2e72e0fc4158861fd982ac411cc8c724d017082bf7a8459a9610ee9c19f92a32842ca1fd4819602ccd56450cfcd0ae8da479ef3a0fa18bb673cf3612533"}}, &(0x7f0000000480)={0x0, 0x22, 0xe, {[@local=@item_012={0x2, 0x2, 0x9, "0dc9"}, @main=@item_4={0x3, 0x0, 0x9, "f2e4d6e1"}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_4={0x3, 0x1, 0x6, "1d3a0f0d"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x80, 0x1, {0x22, 0xc51}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000540)={0x40, 0x12, 0x47, "5c8e3e94912e09fc69ce6dd8337daac4dfae53f57e18f4ab8eeec3d5fd4f840f1aadd2a0400137766ec9251bdf968cc4993b516d4d3750a2359456ee392812edf829b1f887e4b5"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000680)={0x20, 0x1, 0xaf, "7a7a74a57f6ab08161821e4c3ba9e50a373c38a073833e24a2d8b4af8d6ae33128c1b0f9e5bce89a6a5231682dc9f0d116d0e26e4d519817527618d274d5f98fde6c8e8aefb274f3bb6fa853e2f237c787625dc090852779f5f3b5e574ca32afab4a7d1a05ce55d406e32c5f69bddaa113f3f69b479546836b201a564523c8c2e370c8bcf283f181ab1b20b36e47e123831cc0626d50a951d20e857897e7b20647826aeef4b916fd6810a5fc3916c9"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x9}}) 4.471099971s ago: executing program 2 (id=188): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fremovexattr(r0, &(0x7f0000000140)=@known='user.syz\x00') r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffff, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x7, 0x2, 0x651, 0x12c8000000000000, 0x8000009655, 0x225c17d03, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0x5, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d09, 0x3, 0x9}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) fchdir(r2) close(r2) write$char_usb(r2, &(0x7f00000001c0)="bca1f6127a61cbb43579c5224a8b7cae1232f38f0c38294f046b97ed6e852c328717f93e6f08ab2a4f006047181532bc5773c4cdb96c21e4adf4c965bcba1c9dfd7ee25adbc599a300654264b1d8b02978147a89f3fdc91b678b5fdc979fb781c8c7d40c9aa4d7056bc6296ad20b66b1a4da10c6bf8d0564f6edbea2b51c84e78532083c5507150863431259080eca2c1153fd674df28aee269fc03fdcf024a5b1b177f8a6fb27fbda4ad671b202d8806bf674d2b9", 0xb5) 3.777783412s ago: executing program 0 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f00000006c0)='P/') sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f00000014c0)=""/4098, 0x1002) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000019000109fdffffff0000000002"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x348, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r3], 0x68}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7aa4, &(0x7f0000000040)={0x0, 0x2937, 0x8, 0x0, 0x237}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xff, 0x95, 0x0, 0x2}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r6, 0x221d, 0xcb75, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.698152069s ago: executing program 4 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42040, 0x0) lseek(r2, 0xfffffffffffffff9, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0xfffffff8, 0x21}}]}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) sigaltstack(&(0x7f0000001000)={&(0x7f0000002100)=""/4114, 0x1, 0xdf01}, 0x0) r5 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x9, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 2.178796782s ago: executing program 1 (id=195): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0x100, 0x0, 0x8, 0x7, 0x7}) (fail_nth: 2) 1.642785929s ago: executing program 3 (id=199): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x14, 0x1, 0x0, 0x11, {{@in=@multicast1, @in=@broadcast, 0x4e22, 0xb, 0x3, 0x0, 0xa, 0x20, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}, 0x4000000, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0xa, @in=@remote, 0x34ff, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x6e}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffff9, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in6=@empty, 0x2, 0x1, 0x5, 0x0, 0x8}]}]}, 0x17c}}, 0x8044) 1.552958208s ago: executing program 3 (id=200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000000000000000002fbff0f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 1.444967197s ago: executing program 3 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4", 0x9}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001400)=[{&(0x7f0000000280)="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", 0xfe7}], 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) splice(r2, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r6, 0x0, 0x0) 1.31894473s ago: executing program 2 (id=202): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x1000000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x8000) 588.103391ms ago: executing program 0 (id=203): r0 = io_uring_setup(0x6074, &(0x7f00000000c0)={0x0, 0x7ee, 0x100, 0x0, 0x98}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x3ff) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000180)={0x8, 0x0, '\x00', @zc_export={r1}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xad, 0xb8, 0x8a, 0x20, 0x572, 0x41, 0xa7d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x75, 0xc0, 0x4, "", [{{0x9, 0x4, 0x55, 0x6, 0x0, 0x22, 0xf2, 0x59, 0xbf}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000b80)=r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'nicvf0\x00', 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000097c0)=[{{&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/209, 0xd1}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/86, 0x56}, {&(0x7f0000000600)=""/168, 0xa8}, {&(0x7f00000006c0)=""/74, 0x4a}, {&(0x7f0000000740)}], 0x8, &(0x7f0000000800)=""/98, 0x62}, 0x1}, {{&(0x7f0000000880)=@ax25={{0x3, @null}, [@null, @bcast, @null, @default, @default, @remote, @bcast, @null]}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000000900)=""/111, 0x6f}, {&(0x7f0000000980)=""/193, 0xc1}, {&(0x7f0000000a80)=""/17, 0x11}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/237, 0xed}, {&(0x7f0000002cc0)=""/160, 0xa0}, {&(0x7f0000002d80)=""/153, 0x99}], 0x8, &(0x7f0000002ec0)=""/186, 0xba}, 0x1}, {{&(0x7f0000002f80)=@xdp, 0x80, &(0x7f0000004140)=[{&(0x7f0000003000)=""/55, 0x37}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/203, 0xcb}], 0x3, &(0x7f0000004180)=""/250, 0xfa}}, {{&(0x7f0000004280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004300)=""/128, 0x80}], 0x1}, 0x5}, {{&(0x7f00000043c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004440)=""/40, 0x28}], 0x1, &(0x7f00000044c0)=""/238, 0xee}, 0x9}, {{&(0x7f00000045c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000009740)=[{&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/223, 0xdf}, {&(0x7f0000006740)=""/4096, 0x1000}, {&(0x7f0000007740)=""/4096, 0x1000}, {&(0x7f0000008740)=""/4096, 0x1000}], 0x6}}], 0x6, 0x100, &(0x7f0000009940)={0x0, 0x3938700}) 483.85851ms ago: executing program 4 (id=204): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0xb, @vbi={0x7ff, 0x4, 0x27f, 0x50424752, [0x5], [0x10001, 0x6], 0x108}}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x266a82, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @meta={0x50353543, 0x5cc1c41, 0xf73b, 0x167e, 0x10a076b}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106, 0x5}}, 0x20) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000140)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x17) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x2c7f}, {&(0x7f0000001480)="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", 0x1001}], 0x3) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000080)={0x28, 0x10000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x8ba96}) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001095494209911a3682afa010203010902120001010740010904520700ffffff"], 0x0) 298.702826ms ago: executing program 3 (id=205): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$kcm(0xa, 0x3, 0x3a) socket(0x2a, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000000c0)={0x6, 'syzkaller1\x00', {0x5}, 0xfffd}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="0adab400a37216dfa9d4596d67d767fba72e3b316332a25bd2eba4ec061d014f335fb9845e3c7f271d3f33e912f02c6fdfa347eeae7e725b1cdad1ce2f7d266f956f1aac5e3fd434cceb308ad4fad46d27824b8178d6dcd3d40a9fa8", @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 193.19593ms ago: executing program 3 (id=206): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1405, 0x100, 0x70bd2a, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) sendmmsg$unix(r2, &(0x7f0000010ac0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)="fabcdcc48706dced72833bc510f5e63797510e5f4a18e290ea641b1fe2d41532fb566c1683fbf8317dc25557b1e7e5bd6fdab6beb2f7", 0x36}, {&(0x7f0000000280)="a06f30f50d3d3773df632bf2b8e75cc26e72a9635392097539a9e29d2a734c9eb2375ef5a72d78f366798cd143ce6e1db6e23493fdec489238bf0f3b01a217ccd6b0745fe29e12d560aabef3d626ea473ff611d4138aa9f8b62e3b861b5932605da3", 0x62}], 0x2, 0x0, 0x0, 0x801}}], 0x1, 0x2000c000) 183.475515ms ago: executing program 2 (id=207): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xc0, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x34}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040050}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000040000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007"], 0x58}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000010) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000480)=0x1, 0x4) (async) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@local, 0x8b, 0x2, 0x3, 0xd, 0xe, 0xfff5}, 0x20) (async) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) (async) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r6, 0x0) (async) listen(r5, 0x80) (async) syz_usb_connect(0x0, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109024700010000080009046900000e010000082402010202"], 0x0) 0s ago: executing program 3 (id=208): ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) (async) syz_emit_ethernet(0x26, &(0x7f0000000040)={@broadcast, @empty, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x2}}, {@can={0xc, {{0x4, 0x1}, 0x6, 0x3, 0x0, 0x0, "ceb3d04f6fad9823"}}}}, &(0x7f0000000080)={0x0, 0x2, [0x7d, 0xb56, 0xe58, 0xb66]}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000100)={0x10000000, 0x2000, [0x9, 0xc6c1, 0x7, 0x4, 0x8a39, 0xcf], [0x200, 0x7fffffff, 0xffff0, 0x5, 0x8, 0x1], [0x6, 0xc520, 0x1, 0x101, 0x1, 0x3], '\x00', {0x3, 0x0, [{0x80000001, 0x200, 0x4, 0xfffffffa, 0x1, 0x8aa2, 0xc91d}, {0x4, 0x200, 0x2, 0x6, 0x101, 0x8, 0x9}, {0x80000019, 0x1, 0x3, 0x9, 0x9, 0x7, 0x7}]}}}) (async) r2 = fcntl$getown(r0, 0x9) getpgid(r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) (async) write$UHID_CREATE2(r1, &(0x7f0000000340)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x2e, 0x5, 0xd83, 0x80000001, 0x0, 0x464, "d03ca5f7249dc5a007cd1f2f2e467a134df6458802252299f91273af2b712827c7b930beee36c29b460855edfe1b"}}, 0x146) (async) r3 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000540)=0xfffffffa) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x38, &(0x7f0000000580)={0x35, 0x7, 0x1ff}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0xa0, 0x0}, 0x8) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880), 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', 0x0, r0, 0x5, 0x4, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x13, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x4, 0xb2, &(0x7f0000000700)=""/178, 0x41000, 0x20, '\x00', 0x0, @fallback=0xc, r0, 0x8, &(0x7f00000007c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xa, 0x5}, 0x10, r6, r7, 0x4, &(0x7f0000000940)=[r8, r0, r0], &(0x7f0000000980)=[{0x1, 0x5, 0x2, 0x7}, {0x2, 0x5, 0x3}, {0x2, 0x3, 0xb, 0x9}, {0x2, 0x3, 0xd}], 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a80)={r9, r0, 0x31, 0x0, @void}, 0x10) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000ac0)) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000b00)='veth1\x00', 0x10) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000b40)=@assoc_value={0x0, 0x6}, &(0x7f0000000b80)=0x8) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000bc0)) (async) write(r0, &(0x7f0000000c00)="c6c7f9944aa48cf7de333b395a65594ad85828a99ae605cc3203690afd1a259aad1cd1304e5c9b569ff185c3589d4b3e8579c5bb66f1e3b3001d162dc402d9732bde4dd3e2f1c1e8f47e144a9a023a64b2eebcdba270860f9a5485816aea2dacf1a88b34573976071bee7db62ff05030aeeffd12bdfdb2813ae9d06b053467c5cb7d939382c186c93b536991aaf1c06841e6ac33e7649791ba5e7f4cef450df83fe8ddcee18d96ad3cd3b9b160bfdf6dd4693b2aa2115f1bbb419d18fb5f", 0xbe) close(r5) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r0, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000cc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) (async) syz_usb_connect(0x0, 0x313, &(0x7f0000000fc0)={{0x12, 0x1, 0x310, 0xb, 0x37, 0x91, 0x40, 0x1199, 0x6821, 0xbf97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x301, 0x3, 0x7f, 0xc, 0xa0, 0x4, "", [{{0x9, 0x4, 0xe, 0xb3, 0x8, 0xdd, 0x65, 0xa0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0xfffa, 0x22}, [@processing_unit={0x9, 0x24, 0x7, 0x5, 0x1, 0xf5, "0bd4"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x1}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x1, 0xff, "85bcb6"}]}, @hid_hid={0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x707}}], [{{0x9, 0x5, 0xa, 0x10, 0x10, 0x2, 0x9, 0x5}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x4, 0x34, 0x7}}, {{0x9, 0x5, 0x5, 0x4, 0x20, 0x2, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x29}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x4}]}}, {{0x9, 0x5, 0x86, 0x1, 0x40, 0x5, 0x6, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x6b, 0x8, 0xf9}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x4, 0x9c, 0x9, [@generic={0x54, 0xe, "fdbd45bf21688974a687f5d84713524210bf401cefc8759bc190f4ee3608df1069a1e758098982856439832a79b623648eb838efa1997464cd774fdd1ade1b335f70071f107d5767af0364d651a65d5a8d78"}, @generic={0x3f, 0x22, "b0cfbb922e4450a78ccba465595cf5eb1589be32f7b2240cc1f4020e8dc01f6ff7011d43ddb2beaea017526f126d549547b003780593aa4c19e834b5ea"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x1, 0x4, 0x2}}, {{0x9, 0x5, 0x80, 0x18, 0x0, 0xf2, 0xc, 0x7, [@generic={0x80, 0x30, "2513032d7f55397d158ed62bbb8d24c328e5dbda68203dd1d19b98f681a92a189f8e7c60923df8247199f85b342687fc3d641e30740f76bd0f55b40f8bcf0fcafd7bcbb3de3680396d1554967fa7953a3681b5697eb9b8928f8e47565a5913ba0fad1550222f60954841f84dc7c6519b4d88ee913d75e52dbebac8483ced"}]}}]}}, {{0x9, 0x4, 0xb9, 0xfa, 0x2, 0x73, 0xe5, 0x16, 0x1, [@generic={0xf8, 0xd, "2cb7d5e26de391c25155aab6ace88febd248824e76c09acae712a3c81d56dc880dec2f6d925432afddb88f404c192cd92ddf48583fbf91c257d3cd9e5c5ad6f2d57617f401d13ef426b977aff715f0f46d6c2d167c3d414033e1cc6e45e8205a92351f9ac709a47103f75a6a9493b533f098f743c9d7d3214695448d82310892ff433e656da5114389d309e1547bb32a0a88c0cff181671b15dcbeee660241db4f9a10834c15bb06b76ca91a9c4908b144705f28117dd93721b85d6845164c47298995d80e043b1705ba8e750053c1bd3d4ade991ea6ef9d4dc718e6fd0be583729dd4fc1997a63fb0d68efabba54e27433cefc4e3db"}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'Fs'}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3, 0x5, 0x9}, {0x6, 0x24, 0x1a, 0x6, 0x6}}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0xec, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xff, 0x74, 0x1}}]}}, {{0x9, 0x4, 0xcb, 0x6, 0x1, 0xf1, 0x6d, 0xda, 0x4a, [@hid_hid={0x9, 0x21, 0x3, 0xd7, 0x1, {0x22, 0xc44}}], [{{0x9, 0x5, 0xb, 0x1, 0x400, 0xf9, 0x10, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x40}]}}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x110, 0x4, 0x29, 0x9, 0x8, 0x8}, 0xf, &(0x7f0000001340)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x6}]}, 0x2, [{0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) (async) syz_extract_tcp_res(&(0x7f0000001440), 0xffff, 0x6) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001480)={0x0, {{0xa, 0x4e20, 0x1ff, @private2, 0x8}}, 0x1, 0x2, [{{0xa, 0x4e23, 0x2, @private2, 0xffffffff}}, {{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffff4}}]}, 0x190) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. [ 75.318689][ T5611] cgroup: Unknown subsys name 'net' [ 75.431107][ T5611] cgroup: Unknown subsys name 'cpuset' [ 75.440594][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.842342][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.322040][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.334741][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.344272][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.355826][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.363769][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.374245][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.381740][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.389371][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.390764][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.406077][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.413271][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.421021][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.430150][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.431221][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.437654][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.445373][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.461178][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.466807][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.470077][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.477232][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.483671][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.497975][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.508904][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.516927][ T4944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.527917][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.460077][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.468361][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.475536][ T5642] bridge_slave_0: entered allmulticast mode [ 82.482926][ T5642] bridge_slave_0: entered promiscuous mode [ 82.534549][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.541864][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.549216][ T5642] bridge_slave_1: entered allmulticast mode [ 82.556150][ T5642] bridge_slave_1: entered promiscuous mode [ 82.609299][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.616490][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.623858][ T5640] bridge_slave_0: entered allmulticast mode [ 82.631052][ T5640] bridge_slave_0: entered promiscuous mode [ 82.644363][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.651536][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.658755][ T5644] bridge_slave_0: entered allmulticast mode [ 82.665718][ T5644] bridge_slave_0: entered promiscuous mode [ 82.686991][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.694284][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.701519][ T5640] bridge_slave_1: entered allmulticast mode [ 82.708949][ T5640] bridge_slave_1: entered promiscuous mode [ 82.721981][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.730280][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.737669][ T5644] bridge_slave_1: entered allmulticast mode [ 82.744728][ T5644] bridge_slave_1: entered promiscuous mode [ 82.754830][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.805925][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.862827][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.870145][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.877293][ T5643] bridge_slave_0: entered allmulticast mode [ 82.884487][ T5643] bridge_slave_0: entered promiscuous mode [ 82.893965][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.903531][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.911176][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.918644][ T5639] bridge_slave_0: entered allmulticast mode [ 82.925620][ T5639] bridge_slave_0: entered promiscuous mode [ 82.935336][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.953947][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.961651][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.970374][ T5643] bridge_slave_1: entered allmulticast mode [ 82.977350][ T5643] bridge_slave_1: entered promiscuous mode [ 82.986256][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.995799][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.003081][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.010693][ T5639] bridge_slave_1: entered allmulticast mode [ 83.017890][ T5639] bridge_slave_1: entered promiscuous mode [ 83.027116][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.038712][ T5642] team0: Port device team_slave_0 added [ 83.085329][ T5642] team0: Port device team_slave_1 added [ 83.137209][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.148366][ T5640] team0: Port device team_slave_0 added [ 83.156562][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.168722][ T5644] team0: Port device team_slave_0 added [ 83.186318][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.197716][ T5640] team0: Port device team_slave_1 added [ 83.205569][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.216513][ T5644] team0: Port device team_slave_1 added [ 83.232086][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.239325][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.265348][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.314547][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.321753][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.348022][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.391375][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.398389][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.424662][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.444829][ T5643] team0: Port device team_slave_0 added [ 83.451171][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.458454][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.484782][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.498352][ T5639] team0: Port device team_slave_0 added [ 83.505123][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.512248][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.518746][ T50] Bluetooth: hci1: command tx timeout [ 83.539005][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.556864][ T5643] team0: Port device team_slave_1 added [ 83.572222][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.579330][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.606201][ T5636] Bluetooth: hci2: command tx timeout [ 83.606209][ T5628] Bluetooth: hci0: command tx timeout [ 83.606427][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.612384][ T50] Bluetooth: hci4: command tx timeout [ 83.617218][ T5628] Bluetooth: hci3: command tx timeout [ 83.631650][ T5639] team0: Port device team_slave_1 added [ 83.699841][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.706925][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.732954][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.765209][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.772634][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.798806][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.816358][ T5642] hsr_slave_0: entered promiscuous mode [ 83.822934][ T5642] hsr_slave_1: entered promiscuous mode [ 83.830533][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.837557][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.863549][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.899789][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.906853][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.932835][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.959330][ T5640] hsr_slave_0: entered promiscuous mode [ 83.965582][ T5640] hsr_slave_1: entered promiscuous mode [ 83.972125][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 83.978048][ T5640] Cannot create hsr debugfs directory [ 83.989289][ T5644] hsr_slave_0: entered promiscuous mode [ 83.995690][ T5644] hsr_slave_1: entered promiscuous mode [ 84.001961][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 84.007699][ T5644] Cannot create hsr debugfs directory [ 84.106660][ T5639] hsr_slave_0: entered promiscuous mode [ 84.113151][ T5639] hsr_slave_1: entered promiscuous mode [ 84.119378][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 84.125105][ T5639] Cannot create hsr debugfs directory [ 84.145129][ T5643] hsr_slave_0: entered promiscuous mode [ 84.151644][ T5643] hsr_slave_1: entered promiscuous mode [ 84.157717][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 84.163577][ T5643] Cannot create hsr debugfs directory [ 84.656284][ T5644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.668925][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.677341][ T5644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.687445][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.696389][ T5644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.706180][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.714215][ T5644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.724952][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.802501][ T5642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.815799][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.827368][ T5642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.837383][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.845771][ T5642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.855377][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.876993][ T5642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.887533][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.953610][ T5640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.964371][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.972799][ T5640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.982893][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.991216][ T5640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.001625][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.010069][ T5640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.019339][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.114590][ T5639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.127152][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.136123][ T5639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.145779][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.153961][ T5639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.163801][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.172164][ T5639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.183570][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.217230][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.326207][ T5643] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.335637][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.352161][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.361192][ T5643] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.371293][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.379358][ T5643] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.389177][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.397091][ T5643] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.409347][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.450021][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.457476][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.479510][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.500143][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.507264][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.551561][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.571555][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.597026][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.604152][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.611653][ T50] Bluetooth: hci1: command tx timeout [ 85.641089][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.648233][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.671066][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.677884][ T5636] Bluetooth: hci0: command tx timeout [ 85.684773][ T50] Bluetooth: hci3: command tx timeout [ 85.690895][ T5636] Bluetooth: hci4: command tx timeout [ 85.691039][ T5628] Bluetooth: hci2: command tx timeout [ 85.709511][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.734093][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.741219][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.777604][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.784728][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.823522][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.854200][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.861429][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.890824][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.898065][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.945801][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.967337][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.026738][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.052385][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.059497][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.073126][ T5639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.104788][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.111931][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.125540][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.173169][ T5644] veth0_vlan: entered promiscuous mode [ 86.201581][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.216848][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.243798][ T5644] veth1_vlan: entered promiscuous mode [ 86.296407][ T5642] veth0_vlan: entered promiscuous mode [ 86.353295][ T5642] veth1_vlan: entered promiscuous mode [ 86.369122][ T5639] veth0_vlan: entered promiscuous mode [ 86.381708][ T5644] veth0_macvtap: entered promiscuous mode [ 86.404507][ T5639] veth1_vlan: entered promiscuous mode [ 86.412999][ T5644] veth1_macvtap: entered promiscuous mode [ 86.432533][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.483112][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.492312][ T5640] veth0_vlan: entered promiscuous mode [ 86.511997][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.533192][ T5642] veth0_macvtap: entered promiscuous mode [ 86.541116][ T383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.550963][ T383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.576284][ T383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.586556][ T383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.609348][ T5640] veth1_vlan: entered promiscuous mode [ 86.622187][ T5642] veth1_macvtap: entered promiscuous mode [ 86.632478][ T5639] veth0_macvtap: entered promiscuous mode [ 86.666410][ T5639] veth1_macvtap: entered promiscuous mode [ 86.709959][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.746711][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.757526][ T5643] veth0_vlan: entered promiscuous mode [ 86.779387][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.806440][ T5640] veth0_macvtap: entered promiscuous mode [ 86.818354][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.838791][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.851036][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.870658][ T3381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.884695][ T5640] veth1_macvtap: entered promiscuous mode [ 86.895612][ T5643] veth1_vlan: entered promiscuous mode [ 86.913970][ T3381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.922766][ T3381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.946170][ T3381] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.955056][ T3381] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.979064][ T3381] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.980848][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.990840][ T3381] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.000011][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.041243][ T3381] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.053429][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.072154][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.121240][ T383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.136005][ T383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.150991][ T5644] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.168155][ T383] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.177698][ T383] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.275052][ T5643] veth0_macvtap: entered promiscuous mode [ 87.292120][ T5723] FAULT_INJECTION: forcing a failure. [ 87.292120][ T5723] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.293956][ T3381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.321816][ T5723] CPU: 0 UID: 0 PID: 5723 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 87.321839][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.321856][ T5723] Call Trace: [ 87.321863][ T5723] [ 87.321870][ T5723] dump_stack_lvl+0xe8/0x150 [ 87.321902][ T5723] should_fail_ex+0x40c/0x560 [ 87.321928][ T5723] _copy_from_user+0x2d/0xb0 [ 87.321946][ T5723] ___sys_recvmsg+0x173/0x5a0 [ 87.321969][ T5723] ? __pfx____sys_recvmsg+0x10/0x10 [ 87.321990][ T5723] ? __fget_files+0x2a/0x420 [ 87.322031][ T5723] do_recvmmsg+0x31a/0x7f0 [ 87.322056][ T5723] ? __pfx_do_recvmmsg+0x10/0x10 [ 87.322082][ T5723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 87.322106][ T5723] ? __fget_files+0x3a2/0x420 [ 87.322130][ T5723] __x64_sys_recvmmsg+0x198/0x250 [ 87.322150][ T5723] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 87.322174][ T5723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.322191][ T5723] do_syscall_64+0x174/0x580 [ 87.322211][ T5723] ? trace_irq_disable+0x3b/0x140 [ 87.322233][ T5723] ? clear_bhb_loop+0x40/0x90 [ 87.322253][ T5723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.322276][ T5723] RIP: 0033:0x7f196eb9ce59 [ 87.322297][ T5723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.322309][ T5723] RSP: 002b:00007f196fa4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 87.322333][ T5723] RAX: ffffffffffffffda RBX: 00007f196ee15fa0 RCX: 00007f196eb9ce59 [ 87.322345][ T5723] RDX: 0400000000000179 RSI: 0000200000000480 RDI: 0000000000000004 [ 87.322355][ T5723] RBP: 00007f196fa4d090 R08: 0000000000000000 R09: 0000000000000000 [ 87.322364][ T5723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.322373][ T5723] R13: 00007f196ee16038 R14: 00007f196ee15fa0 R15: 00007f196ef3fa48 [ 87.322397][ T5723] [ 87.322690][ T3381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.552359][ T5643] veth1_macvtap: entered promiscuous mode [ 87.617685][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.640856][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.641109][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.680713][ T5628] Bluetooth: hci1: command tx timeout [ 87.699343][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.733158][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.744006][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.760198][ T5628] Bluetooth: hci3: command tx timeout [ 87.762864][ T50] Bluetooth: hci2: command tx timeout [ 87.766270][ T5628] Bluetooth: hci4: command tx timeout [ 87.772675][ T5636] Bluetooth: hci0: command tx timeout [ 87.787020][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.799385][ T383] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.806213][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.819781][ T383] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.861890][ T383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.872051][ T383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.959723][ T383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.990122][ T383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.061022][ T383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.100806][ T383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.158943][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.179935][ T5736] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.208832][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.350552][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.394287][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.820938][ T5716] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.872465][ T5763] Zero length message leads to an empty skb [ 89.015414][ T5716] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 89.047538][ T5716] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 89.077020][ T5716] usb 4-1: config 171 has no interface number 0 [ 89.102751][ T5716] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 89.125195][ T5716] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 89.139785][ T5716] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 89.160302][ T5716] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 89.175295][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.183555][ T5697] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.191416][ T5716] usb 4-1: Product: syz [ 89.198748][ T5716] usb 4-1: Manufacturer: syz [ 89.204270][ T5716] usb 4-1: SerialNumber: syz [ 89.225991][ T5748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.353743][ T5697] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 89.374768][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.395240][ T5697] usb 1-1: Product: syz [ 89.403885][ T5697] usb 1-1: Manufacturer: syz [ 89.410294][ T5697] usb 1-1: SerialNumber: syz [ 89.425305][ T5769] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 89.435804][ T5697] usb 1-1: config 0 descriptor?? [ 89.458275][ T5716] ath6kl: Failed to submit usb control message: -71 [ 89.499354][ T5716] ath6kl: unable to send the bmi data to the device: -71 [ 89.529445][ T5716] ath6kl: Unable to send get target info: -71 [ 89.540357][ T5716] ath6kl: Failed to init ath6kl core: -71 [ 89.549249][ T5716] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 89.587489][ T5716] usb 4-1: USB disconnect, device number 2 [ 89.759326][ T5628] Bluetooth: hci1: command tx timeout [ 89.838274][ T5628] Bluetooth: hci3: command tx timeout [ 89.838287][ T5636] Bluetooth: hci4: command tx timeout [ 89.848761][ T50] Bluetooth: hci2: command tx timeout [ 89.855966][ T5636] Bluetooth: hci0: command tx timeout [ 89.943331][ T5777] capability: warning: `syz.1.14' uses 32-bit capabilities (legacy support in use) [ 90.315524][ T5763] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11'. [ 90.406224][ T5697] usb 1-1: Firmware version (0.0) predates our first public release. [ 90.439232][ T5697] usb 1-1: Please update to version 0.2 or newer [ 90.716196][ T5697] usb 1-1: USB disconnect, device number 2 [ 91.177406][ T5794] random: crng reseeded on system resumption [ 91.291069][ T5797] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18'. [ 91.292420][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 91.367679][ T5796] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 92.398294][ T5709] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.504224][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23'. [ 92.568831][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 92.579639][ T5709] usb 3-1: config 2 has an invalid interface number: 196 but max is 0 [ 92.602844][ T5709] usb 3-1: config 2 has no interface number 0 [ 92.630657][ T5709] usb 3-1: config 2 interface 196 has no altsetting 0 [ 92.655938][ T5816] team0: Port device team_slave_0 removed [ 92.663807][ T5709] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice= 9.71 [ 92.700877][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.725453][ T5709] usb 3-1: Product: syz [ 92.741216][ T5709] usb 3-1: Manufacturer: syz [ 92.752325][ T5709] usb 3-1: SerialNumber: syz [ 92.990177][ T5810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.064062][ T5810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.271778][ T5709] rndis_host 3-1:2.196: ACM capabilities 01, not really RNDIS? [ 93.364043][ T5709] usb 3-1: USB disconnect, device number 2 [ 93.696387][ T5844] syz_tun: entered promiscuous mode [ 93.702278][ T5846] FAULT_INJECTION: forcing a failure. [ 93.702278][ T5846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.738508][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz.4.32 Not tainted syzkaller #0 PREEMPT(full) [ 93.738532][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.738541][ T5846] Call Trace: [ 93.738549][ T5846] [ 93.738564][ T5846] dump_stack_lvl+0xe8/0x150 [ 93.738590][ T5846] should_fail_ex+0x40c/0x560 [ 93.738614][ T5846] _copy_from_user+0x2d/0xb0 [ 93.738629][ T5846] input_event_from_user+0xb1/0x290 [ 93.738647][ T5846] ? __pfx_input_event_from_user+0x10/0x10 [ 93.738671][ T5846] evdev_write+0x2c7/0x4c0 [ 93.738689][ T5846] ? __lock_acquire+0x683/0x2cf0 [ 93.738705][ T5846] ? __pfx_evdev_write+0x10/0x10 [ 93.738721][ T5846] ? bpf_lsm_file_permission+0x9/0x20 [ 93.738737][ T5846] ? security_file_permission+0x75/0x260 [ 93.738756][ T5846] ? rw_verify_area+0x203/0x4c0 [ 93.738771][ T5846] ? __pfx_evdev_write+0x10/0x10 [ 93.738786][ T5846] vfs_write+0x296/0xba0 [ 93.738805][ T5846] ? __pfx_vfs_write+0x10/0x10 [ 93.738820][ T5846] ? __fget_files+0x2a/0x420 [ 93.738834][ T5846] ? __fget_files+0x2a/0x420 [ 93.738844][ T5846] ? __fget_files+0x3a2/0x420 [ 93.738855][ T5846] ? __fget_files+0x2a/0x420 [ 93.738872][ T5846] ksys_write+0x150/0x270 [ 93.738887][ T5846] ? __pfx_ksys_write+0x10/0x10 [ 93.738907][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.738920][ T5846] do_syscall_64+0x174/0x580 [ 93.738936][ T5846] ? trace_irq_disable+0x3b/0x140 [ 93.738954][ T5846] ? clear_bhb_loop+0x40/0x90 [ 93.738969][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.738981][ T5846] RIP: 0033:0x7f88c3d9ce59 [ 93.738994][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.739004][ T5846] RSP: 002b:00007f88c4c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.739017][ T5846] RAX: ffffffffffffffda RBX: 00007f88c4015fa0 RCX: 00007f88c3d9ce59 [ 93.739026][ T5846] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000003 [ 93.739033][ T5846] RBP: 00007f88c4c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 93.739040][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.739047][ T5846] R13: 00007f88c4016038 R14: 00007f88c4015fa0 R15: 00007f88c413fa48 [ 93.739069][ T5846] [ 94.347874][ T5751] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.447841][ T5695] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.540110][ T5751] usb 5-1: Using ep0 maxpacket: 16 [ 94.562343][ T5751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.603905][ T5751] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 94.614651][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.622641][ T5695] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.622678][ T5695] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.622696][ T5695] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.622732][ T5695] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 94.622751][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.701719][ T5751] usb 5-1: config 0 descriptor?? [ 94.777212][ T5839] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 94.804135][ T809] cfg80211: failed to load regulatory.db [ 94.878041][ T5709] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.028277][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 95.042592][ T5709] usb 4-1: config 6 has an invalid interface number: 206 but max is 0 [ 95.055457][ T5709] usb 4-1: config 6 has no interface number 0 [ 95.062308][ T5709] usb 4-1: config 6 interface 206 has no altsetting 0 [ 95.075670][ T5709] usb 4-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=2e.c8 [ 95.086148][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.105309][ T5695] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 95.113550][ T5709] usb 4-1: Product:  [ 95.124299][ T5709] usb 4-1: Manufacturer: 䐊 [ 95.129826][ T5695] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 95.137924][ T5709] usb 4-1: SerialNumber: Й [ 95.142621][ T5695] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 95.150443][ T5695] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 95.154462][ T5751] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 95.161777][ T5695] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 95.196076][ T5695] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 95.210328][ T5695] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 95.221682][ T5695] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 95.229540][ T5695] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 95.236849][ T5695] logitech 0003:046D:C29C.0001: unknown main item tag 0x0 [ 95.258675][ T5695] logitech 0003:046D:C29C.0001: hidraw0: USB HID vff.fd Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 95.337824][ T5695] logitech 0003:046D:C29C.0001: no inputs found [ 95.403212][ T5695] usb 2-1: USB disconnect, device number 2 [ 95.434029][ T5709] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.645770][ T5709] snd-usb-audio 4-1:6.206: probe with driver snd-usb-audio failed with error -2 [ 95.683095][ T5709] usb 4-1: USB disconnect, device number 3 [ 95.714074][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.824826][ T5751] IPVS: starting estimator thread 0... [ 95.898975][ T5716] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.921501][ T5890] IPVS: using max 34 ests per chain, 81600 per kthread [ 96.099446][ T5716] usb 1-1: too many configurations: 204, using maximum allowed: 8 [ 96.121311][ T5716] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 96.132539][ T5716] usb 1-1: can't read configurations, error -61 [ 96.277946][ T5716] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.449250][ T5716] usb 1-1: too many configurations: 204, using maximum allowed: 8 [ 96.470797][ T5716] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 96.481977][ T5716] usb 1-1: can't read configurations, error -61 [ 96.493068][ T5716] usb usb1-port1: attempt power cycle [ 96.527838][ T5709] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.687841][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 96.694936][ T5709] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 96.706031][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.724680][ T5709] usb 4-1: config 0 has no interface number 0 [ 96.737997][ T5709] usb 4-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.754767][ T5709] usb 4-1: config 0 interface 52 has no altsetting 0 [ 96.766346][ T5709] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 96.785813][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.809506][ T5751] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.810785][ T5709] usb 4-1: config 0 descriptor?? [ 96.837933][ T5716] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.881361][ T5716] usb 1-1: too many configurations: 204, using maximum allowed: 8 [ 96.914210][ T5716] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 96.938014][ T5716] usb 1-1: can't read configurations, error -61 [ 96.970697][ T5751] usb 3-1: Using ep0 maxpacket: 16 [ 96.990484][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.024151][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.052112][ T5751] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 97.080461][ T5716] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 97.100292][ T5751] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 97.120076][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.138265][ T5716] usb 1-1: too many configurations: 204, using maximum allowed: 8 [ 97.163340][ T5751] usb 3-1: config 0 descriptor?? [ 97.175887][ T5716] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 97.195123][ T5716] usb 1-1: can't read configurations, error -61 [ 97.217165][ T5716] usb usb1-port1: unable to enumerate USB device [ 97.346872][ T5695] usb 5-1: USB disconnect, device number 2 [ 97.856500][ T5751] usbhid 3-1:0.0: can't add hid device: -71 [ 97.866461][ T5751] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 97.886383][ T5751] usb 3-1: USB disconnect, device number 3 [ 98.083957][ T5709] usb 4-1: string descriptor 0 read error: -71 [ 98.112413][ T5709] usb 4-1: Can not set alternate setting to 1, error: -71 [ 98.141668][ T5709] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 98.174210][ T5751] IPVS: starting estimator thread 0... [ 98.186582][ T5709] usb 4-1: USB disconnect, device number 4 [ 98.280524][ T5920] IPVS: using max 33 ests per chain, 79200 per kthread [ 98.633808][ T5932] netlink: 'syz.1.55': attribute type 21 has an invalid length. [ 98.677889][ T5751] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.699700][ T5932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.55'. [ 98.857848][ T5751] usb 5-1: Using ep0 maxpacket: 32 [ 98.889860][ T5751] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.909399][ T5751] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.930589][ T5751] usb 5-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40 [ 98.940412][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.963240][ T5751] usb 5-1: Product: syz [ 98.969051][ T5751] usb 5-1: Manufacturer: syz [ 98.980711][ T5751] usb 5-1: SerialNumber: syz [ 99.234489][ T5751] usb 5-1: 0:1 : does not exist [ 99.245858][ T5751] usb 5-1: unit 5 not found! [ 99.254786][ T5751] usb 5-1: unit 3 not found! [ 99.394424][ T5751] usb 5-1: USB disconnect, device number 3 [ 100.836387][ T5933] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 101.153927][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 101.757886][ T5709] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 101.938302][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 101.954651][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 101.978119][ T5709] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 101.997607][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.020234][ T5709] usb 1-1: Product: syz [ 102.033808][ T5709] usb 1-1: Manufacturer: syz [ 102.051455][ T5709] usb 1-1: SerialNumber: syz [ 102.069978][ T5709] usb 1-1: config 0 descriptor?? [ 102.093263][ T5709] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 102.115631][ T5709] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 102.177361][ T5965] trusted_key: encrypted_key: insufficient parameters specified [ 102.191004][ T5965] trusted_key: encrypted_key: keylen parameter is missing [ 102.341606][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.470801][ T5979] syzkaller0: entered promiscuous mode [ 102.496480][ T5979] syzkaller0: entered allmulticast mode [ 102.700321][ T5709] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 102.926770][ T5969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.197102][ T5751] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.209007][ T5709] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 103.209135][ T5709] em28xx 1-1:0.0: board has no eeprom [ 103.377864][ T5751] usb 4-1: Using ep0 maxpacket: 16 [ 103.387921][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.400696][ T5751] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 103.420774][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.446930][ T5751] usb 4-1: config 0 descriptor?? [ 103.525099][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.628297][ T5709] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 103.637502][ T5709] em28xx 1-1:0.0: dvb set to bulk mode. [ 103.644696][ T5695] em28xx 1-1:0.0: Binding DVB extension [ 103.717849][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 103.724928][ T10] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 103.759507][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.791344][ T10] usb 3-1: config 0 descriptor?? [ 103.807506][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 103.911619][ T5751] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 104.347917][ T5751] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.510144][ T5751] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 104.520306][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.534417][ T5751] usb 5-1: config 0 descriptor?? [ 104.840525][ T5969] em28xx 1-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 104.872542][ T995] usb 1-1: USB disconnect, device number 7 [ 105.011085][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.022224][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.040325][ T5751] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 105.052056][ T995] em28xx 1-1:0.0: Disconnecting em28xx [ 105.077866][ T5695] em28xx 1-1:0.0: Registering input extension [ 105.092795][ T995] em28xx 1-1:0.0: Closing input extension [ 105.148344][ T10] gspca_vc032x: reg_w err -110 [ 105.153240][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.158727][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.169571][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.187493][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.206487][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.230579][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.247918][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.258392][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.268938][ T995] em28xx 1-1:0.0: Freeing device [ 105.274859][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.290650][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.303156][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.310158][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.317152][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.322610][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.329210][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.334584][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.340164][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.345546][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.351138][ T10] gspca_vc032x: Unknown sensor... [ 105.356337][ T10] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 105.376209][ T10] usb 3-1: USB disconnect, device number 4 [ 106.067945][ T5751] [drm:udl_init] *ERROR* Selecting channel failed [ 106.223281][ T5751] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 106.239845][ T5751] [drm] Initialized udl on minor 2 [ 106.251702][ T995] usb 4-1: USB disconnect, device number 5 [ 106.259589][ T5751] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 106.402746][ T5751] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 106.416293][ T809] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 106.428998][ T809] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 106.445148][ T6015] netlink: 52 bytes leftover after parsing attributes in process `syz.3.83'. [ 106.499137][ T5751] usb 5-1: USB disconnect, device number 4 [ 106.677831][ T5716] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.720618][ T6017] syzkaller0: entered promiscuous mode [ 106.746306][ T6017] syzkaller0: entered allmulticast mode [ 106.828127][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 106.852377][ T5716] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 106.861971][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.891412][ T5716] usb 3-1: Product: syz [ 106.900478][ T5716] usb 3-1: Manufacturer: syz [ 106.907440][ T5716] usb 3-1: SerialNumber: syz [ 106.947220][ T5716] usb 3-1: config 0 descriptor?? [ 106.971397][ T5716] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 106.985250][ T6020] tipc: Started in network mode [ 107.028121][ T6020] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 107.052585][ T6020] tipc: Enabled bearer , priority 21 [ 107.447915][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.495933][ T5751] usb 3-1: USB disconnect, device number 5 [ 107.515970][ T5984] Set syz1 is full, maxelem 65536 reached [ 107.528629][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 107.619199][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 107.632931][ T10] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 107.644079][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.653754][ T6005] syzkaller1: entered promiscuous mode [ 107.662275][ T6005] syzkaller1: entered allmulticast mode [ 107.664136][ T10] usb 4-1: Product: syz [ 107.688413][ T5695] hid_parser_main: 23 callbacks suppressed [ 107.688432][ T5695] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.705119][ T10] usb 4-1: Manufacturer: syz [ 107.719919][ T10] usb 4-1: SerialNumber: syz [ 107.738579][ T10] usb 4-1: config 0 descriptor?? [ 107.753534][ T5695] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.777378][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 107.788451][ T995] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.823016][ T6005] binder: 6002:6005 ioctl 4018620d 0 returned -22 [ 107.884084][ T6011] binder: 6002:6011 ioctl c0306201 0 returned -14 [ 107.957844][ T995] usb 5-1: Using ep0 maxpacket: 8 [ 107.981622][ T6030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.009406][ T6030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.049659][ T5716] tipc: Node number set to 8432298 [ 108.073961][ T995] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.114268][ T995] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 108.146042][ T995] usb 5-1: can't read configurations, error -71 [ 108.378483][ T5716] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.560841][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 108.592421][ T5716] usb 3-1: config 6 has an invalid interface number: 206 but max is 0 [ 108.626283][ T5716] usb 3-1: config 6 has no interface number 0 [ 108.657478][ T5716] usb 3-1: config 6 interface 206 has no altsetting 0 [ 108.701981][ T5716] usb 3-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=2e.c8 [ 108.730945][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.756629][ T5716] usb 3-1: Product:  [ 108.770093][ T5716] usb 3-1: Manufacturer: 䐊 [ 108.784774][ T5716] usb 3-1: SerialNumber: Й [ 108.885480][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.898465][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.000948][ T10] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 109.018016][ T995] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.024881][ T5716] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.110065][ T5716] snd-usb-audio 3-1:6.206: probe with driver snd-usb-audio failed with error -2 [ 109.131621][ T5716] usb 3-1: USB disconnect, device number 6 [ 109.163284][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.192408][ T5695] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.202626][ T995] usb 5-1: Using ep0 maxpacket: 32 [ 109.210955][ T995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58554, setting to 1024 [ 109.227672][ T995] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.237592][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.257402][ T6047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.92'. [ 109.271118][ T6047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.92'. [ 109.278506][ T995] usb 5-1: config 0 descriptor?? [ 109.286932][ T6040] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 109.289393][ T6047] xt_l2tp: v2 tid > 0xffff: 65537 [ 109.304968][ T995] hub 5-1:0.0: USB hub found [ 109.369307][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.380768][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.390695][ T5695] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.405029][ T5695] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.414247][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.434940][ T5695] usb 2-1: config 0 descriptor?? [ 109.484839][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.93'. [ 109.501270][ T995] hub 5-1:0.0: 29 ports detected [ 109.510214][ T995] hub 5-1:0.0: insufficient power available to use all downstream ports [ 109.533433][ T6051] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 109.547611][ T6051] netlink: 76 bytes leftover after parsing attributes in process `syz.0.93'. [ 109.834300][ T10] gspca_se401: read req failed req 0x06 error -19 [ 109.880703][ T10] usb 4-1: USB disconnect, device number 6 [ 109.920431][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 110.041879][ T995] usb 5-1: USB disconnect, device number 6 [ 110.192714][ T5695] usbhid 2-1:0.0: can't add hid device: -71 [ 110.218271][ T5695] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 110.280403][ T5695] usb 2-1: USB disconnect, device number 3 [ 110.389383][ T6060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.95'. [ 110.959670][ T6064] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 110.966511][ T6064] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 111.023982][ T6064] vhci_hcd vhci_hcd.0: Device attached [ 111.218766][ T6071] vhci_hcd: connection closed [ 111.226344][ T5867] vhci_hcd vhci_hcd.2: stop threads [ 111.259376][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 111.271894][ T5867] vhci_hcd vhci_hcd.2: release socket [ 111.289728][ T5867] vhci_hcd vhci_hcd.2: disconnect device [ 111.308749][ T995] usb 38-1: SetAddress Request (2) to port 0 [ 111.320787][ T995] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 111.349552][ T995] usb 38-1: enqueue for inactive port 0 [ 111.421817][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 111.432524][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 111.445038][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.462088][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.474838][ T10] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 111.486316][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.496280][ T10] usb 4-1: Product: syz [ 111.501379][ T10] usb 4-1: Manufacturer: syz [ 111.508141][ T10] usb 4-1: SerialNumber: syz [ 111.549130][ T5716] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 111.674601][ T6083] kvm: pic: non byte write [ 111.738687][ T995] usb usb38-port1: attempt power cycle [ 111.749749][ T10] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 111.766711][ T5716] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.783985][ T10] usb 4-1: 3:0: failed to get current value for ch 2 (-71) [ 111.788224][ T5716] usb 1-1: not running at top speed; connect to a high speed hub [ 111.812461][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 111.827643][ T5716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.831772][ T10] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 111.857845][ T5716] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.867710][ T10] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 111.877459][ T10] usb 4-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 111.892408][ T10] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 111.900188][ T10] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 111.912113][ T10] usb 4-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 111.926524][ T10] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 111.936280][ T5716] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 111.936625][ T10] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 111.957904][ T10] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3) [ 111.968598][ T10] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3) [ 111.978509][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.978971][ T10] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 111.999273][ T10] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 112.007889][ T5716] usb 1-1: Product: syz [ 112.008884][ T10] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 112.021827][ T5716] usb 1-1: Manufacturer: syz [ 112.025766][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 112.040982][ T5716] usb 1-1: SerialNumber: syz [ 112.044740][ T10] usb 4-1: 3:0: cannot get min/max values for control 8 (id 3) [ 112.059333][ T10] usb 4-1: 3:0: cannot get min/max values for control 8 (id 3) [ 112.071110][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 112.093340][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 112.109873][ T10] usb 4-1: 3:0: cannot get min/max values for control 11 (id 3) [ 112.119890][ T10] usb 4-1: 3:0: cannot get min/max values for control 12 (id 3) [ 112.140660][ T10] usb 4-1: 3:0: cannot get min/max values for control 12 (id 3) [ 112.159052][ T10] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 112.170306][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 112.218946][ T10] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 112.229391][ T10] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 112.315529][ T10] usb 4-1: USB disconnect, device number 7 [ 112.337231][ T995] usb usb38-port1: unable to enumerate USB device [ 112.382957][ T5716] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 112.418867][ T5716] usb 1-1: 3:0: failed to get current value for ch 2 (-71) [ 112.439692][ T5716] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 112.464058][ T5716] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 112.481194][ T5716] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 112.496195][ T5716] usb 1-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 112.507690][ T5716] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 112.531988][ T5716] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 112.554069][ T5716] usb 1-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 112.581025][ T5716] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 112.605862][ T5716] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 112.625135][ T5716] usb 1-1: 3:0: cannot get min/max values for control 4 (id 3) [ 112.650928][ T5716] usb 1-1: 3:0: cannot get min/max values for control 4 (id 3) [ 112.660609][ T5716] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 112.669110][ T5716] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 112.700407][ T5716] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 112.715689][ T5716] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 112.735310][ T5716] usb 1-1: 3:0: cannot get min/max values for control 8 (id 3) [ 112.744443][ T5716] usb 1-1: 3:0: cannot get min/max values for control 8 (id 3) [ 112.753046][ T5716] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 112.774391][ T5716] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 112.796366][ T6100] FAULT_INJECTION: forcing a failure. [ 112.796366][ T6100] name failslab, interval 1, probability 0, space 0, times 0 [ 112.796428][ T6100] CPU: 0 UID: 0 PID: 6100 Comm: syz.1.108 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.796448][ T6100] Tainted: [L]=SOFTLOCKUP [ 112.796454][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.796462][ T6100] Call Trace: [ 112.796469][ T6100] [ 112.796475][ T6100] dump_stack_lvl+0xe8/0x150 [ 112.796499][ T6100] should_fail_ex+0x40c/0x560 [ 112.796526][ T6100] should_failslab+0xa8/0x100 [ 112.796547][ T6100] __kmalloc_cache_noprof+0xa8/0x660 [ 112.796573][ T6100] ? drm_atomic_commit_alloc+0xa9/0x100 [ 112.796592][ T6100] ? drm_atomic_commit_alloc+0xa9/0x100 [ 112.796620][ T6100] drm_atomic_commit_alloc+0xa9/0x100 [ 112.796641][ T6100] drm_client_modeset_commit_atomic+0x122/0x7e0 [ 112.796665][ T6100] ? rcu_is_watching+0x15/0xb0 [ 112.796684][ T6100] ? trace_contention_end+0x3d/0x140 [ 112.796707][ T6100] ? __mutex_lock+0x30d/0x1550 [ 112.796732][ T6100] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 112.796781][ T6100] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.796810][ T6100] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 112.796838][ T6100] drm_fb_helper_pan_display+0x3e9/0xbe0 [ 112.796871][ T6100] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 112.796889][ T6100] fb_pan_display+0x3a3/0x6a0 [ 112.796916][ T6100] bit_update_start+0x4c/0x1e0 [ 112.796941][ T6100] fbcon_modechanged+0xb30/0x1140 [ 112.796972][ T6100] fb_set_var_from_user+0x99/0xc0 [ 112.796992][ T6100] do_fb_ioctl+0x5d9/0x750 [ 112.797027][ T6100] ? __pfx_do_fb_ioctl+0x10/0x10 [ 112.797089][ T6100] ? __fget_files+0x2a/0x420 [ 112.797109][ T6100] ? __fget_files+0x3a2/0x420 [ 112.797127][ T6100] ? __fget_files+0x2a/0x420 [ 112.797146][ T6100] ? bpf_lsm_file_ioctl+0x9/0x20 [ 112.797168][ T6100] ? __pfx_fb_ioctl+0x10/0x10 [ 112.797189][ T6100] __se_sys_ioctl+0xfc/0x170 [ 112.797206][ T6100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.797223][ T6100] do_syscall_64+0x174/0x580 [ 112.797244][ T6100] ? trace_irq_disable+0x3b/0x140 [ 112.797266][ T6100] ? clear_bhb_loop+0x40/0x90 [ 112.797286][ T6100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.797302][ T6100] RIP: 0033:0x7fdc2779ce59 [ 112.797318][ T6100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.797330][ T6100] RSP: 002b:00007fdc286ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.797347][ T6100] RAX: ffffffffffffffda RBX: 00007fdc27a15fa0 RCX: 00007fdc2779ce59 [ 112.797359][ T6100] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003 [ 112.797369][ T6100] RBP: 00007fdc286ab090 R08: 0000000000000000 R09: 0000000000000000 [ 112.797378][ T6100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.797387][ T6100] R13: 00007fdc27a16038 R14: 00007fdc27a15fa0 R15: 00007fdc27b3fa48 [ 112.797419][ T6100] [ 112.803571][ T5716] usb 1-1: 3:0: cannot get min/max values for control 11 (id 3) [ 112.804724][ T5716] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 112.805216][ T5716] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 112.805586][ T5716] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 112.806130][ T5716] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 112.828579][ T5716] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 112.829367][ T5716] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 112.878555][ T5716] usb 1-1: USB disconnect, device number 8 [ 113.483091][ T5716] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.619464][ T5716] usb 1-1: device descriptor read/64, error -71 [ 113.736680][ T6112] netlink: 'syz.2.112': attribute type 10 has an invalid length. [ 113.752212][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.772520][ T6112] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 113.867441][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 113.877876][ T5716] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 113.923483][ T6119] bond1 (unregistering): Released all slaves [ 114.030252][ T5716] usb 1-1: device descriptor read/64, error -71 [ 114.150363][ T5716] usb usb1-port1: attempt power cycle [ 114.177939][ T5709] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.308653][ T5709] usb 2-1: device descriptor read/64, error -71 [ 114.507912][ T5716] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 114.528602][ T5716] usb 1-1: device descriptor read/8, error -71 [ 114.559489][ T5709] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.638915][ T995] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 114.707844][ T5709] usb 2-1: device descriptor read/64, error -71 [ 114.760899][ T6128] FAULT_INJECTION: forcing a failure. [ 114.760899][ T6128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.774320][ T6128] CPU: 1 UID: 0 PID: 6128 Comm: syz.2.116 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.774347][ T6128] Tainted: [L]=SOFTLOCKUP [ 114.774352][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.774361][ T6128] Call Trace: [ 114.774367][ T6128] [ 114.774374][ T6128] dump_stack_lvl+0xe8/0x150 [ 114.774399][ T6128] should_fail_ex+0x40c/0x560 [ 114.774425][ T6128] _copy_from_user+0x2d/0xb0 [ 114.774444][ T6128] ___sys_sendmsg+0x1c6/0x360 [ 114.774461][ T6128] ? __lock_acquire+0x683/0x2cf0 [ 114.774481][ T6128] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.774529][ T6128] ? __fget_files+0x2a/0x420 [ 114.774544][ T6128] ? __fget_files+0x3a2/0x420 [ 114.774567][ T6128] __x64_sys_sendmsg+0x1b1/0x290 [ 114.774586][ T6128] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.774618][ T6128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.774636][ T6128] do_syscall_64+0x174/0x580 [ 114.774656][ T6128] ? trace_irq_disable+0x3b/0x140 [ 114.774686][ T6128] ? clear_bhb_loop+0x40/0x90 [ 114.774706][ T6128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.774722][ T6128] RIP: 0033:0x7f196eb9ce59 [ 114.774738][ T6128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.774750][ T6128] RSP: 002b:00007f196fa4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.774767][ T6128] RAX: ffffffffffffffda RBX: 00007f196ee15fa0 RCX: 00007f196eb9ce59 [ 114.774778][ T6128] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 114.774788][ T6128] RBP: 00007f196fa4d090 R08: 0000000000000000 R09: 0000000000000000 [ 114.774797][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.774806][ T6128] R13: 00007f196ee16038 R14: 00007f196ee15fa0 R15: 00007f196ef3fa48 [ 114.774832][ T6128] [ 114.963279][ T5709] usb usb2-port1: attempt power cycle [ 115.006480][ T995] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.015216][ T995] usb 5-1: not running at top speed; connect to a high speed hub [ 115.026633][ T995] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.036570][ T5716] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 115.042812][ T995] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.064562][ T995] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 115.085628][ T5716] usb 1-1: device descriptor read/8, error -71 [ 115.096341][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.114867][ T995] usb 5-1: Product: syz [ 115.121133][ T995] usb 5-1: Manufacturer: syz [ 115.134244][ T6130] sctp: [Deprecated]: syz.3.117 (pid 6130) Use of int in max_burst socket option deprecated. [ 115.134244][ T6130] Use struct sctp_assoc_value instead [ 115.150662][ T995] usb 5-1: SerialNumber: syz [ 115.198709][ T5716] usb usb1-port1: unable to enumerate USB device [ 115.242708][ T6134] input: syz1 as /devices/virtual/input/input6 [ 115.347902][ T5709] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.367985][ T995] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 115.378838][ T5709] usb 2-1: device descriptor read/8, error -71 [ 115.407487][ T995] usb 5-1: 3:0: failed to get current value for ch 2 (-71) [ 115.416697][ T995] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 115.430448][ T995] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 115.439770][ T995] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 115.451550][ T5636] Bluetooth: hci1: unknown advertising packet type: 0xaf [ 115.451973][ T995] usb 5-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 115.466467][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.475988][ T995] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 115.484305][ T995] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 115.494588][ T995] usb 5-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 115.502699][ T995] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 115.512047][ T995] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 115.520805][ T995] usb 5-1: 3:0: cannot get min/max values for control 4 (id 3) [ 115.530006][ T995] usb 5-1: 3:0: cannot get min/max values for control 4 (id 3) [ 115.539487][ T995] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 115.552076][ T995] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 115.560682][ T995] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 115.575677][ T995] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 115.593272][ T995] usb 5-1: 3:0: cannot get min/max values for control 8 (id 3) [ 115.603004][ T995] usb 5-1: 3:0: cannot get min/max values for control 8 (id 3) [ 115.613420][ T995] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 115.627477][ T995] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 115.635308][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 115.641135][ T5709] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.653427][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 115.667522][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 115.678701][ T5709] usb 2-1: device descriptor read/8, error -71 [ 115.685299][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 115.695043][ T10] usb 3-1: Product: syz [ 115.700300][ T995] usb 5-1: 3:0: cannot get min/max values for control 11 (id 3) [ 115.708339][ T10] usb 3-1: Manufacturer: syz [ 115.713588][ T10] usb 3-1: SerialNumber: syz [ 115.718787][ T995] usb 5-1: 3:0: cannot get min/max values for control 12 (id 3) [ 115.729485][ T10] usb 3-1: config 0 descriptor?? [ 115.741894][ T995] usb 5-1: 3:0: cannot get min/max values for control 12 (id 3) [ 115.751856][ T6132] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 115.760053][ T995] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 115.783799][ T995] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 115.796213][ T5709] usb usb2-port1: unable to enumerate USB device [ 115.839480][ T995] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 115.848568][ T995] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 115.886877][ T995] usb 5-1: USB disconnect, device number 7 [ 115.936504][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.067110][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 116.462038][ T6153] kvm: pic: non byte write [ 116.669575][ T809] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 116.840425][ T809] usb 5-1: config 0 has an invalid interface number: 22 but max is 0 [ 116.848873][ T809] usb 5-1: config 0 has no interface number 0 [ 116.855075][ T809] usb 5-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 96, changing to 10 [ 116.887652][ T809] usb 5-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid maxpacket 17369, setting to 1024 [ 116.907176][ T809] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 116.919597][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.922795][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.941675][ T809] usb 5-1: config 0 descriptor?? [ 116.959293][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.051543][ T5751] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 117.151753][ T5717] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.214675][ T5751] usb 1-1: device descriptor read/64, error -71 [ 117.287954][ T5716] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 117.439631][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 117.447108][ T5716] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 117.457151][ T5716] usb 2-1: config 0 has no interface number 1 [ 117.463484][ T5716] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 117.474674][ T5751] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 117.482403][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.493754][ T5716] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.506761][ T5716] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 117.516075][ T5717] usb 4-1: device descriptor read/64, error -71 [ 117.522487][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.530634][ T5716] usb 2-1: Product: syz [ 117.534849][ T5716] usb 2-1: Manufacturer: syz [ 117.539582][ T5716] usb 2-1: SerialNumber: syz [ 117.547378][ T5716] usb 2-1: config 0 descriptor?? [ 117.553524][ T6148] syz.4.123 uses obsolete (PF_INET,SOCK_PACKET) [ 117.565202][ T809] usbhid 5-1:0.22: can't add hid device: -71 [ 117.573311][ T5716] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 117.581463][ T809] usbhid 5-1:0.22: probe with driver usbhid failed with error -71 [ 117.610493][ T809] usb 5-1: USB disconnect, device number 8 [ 117.638578][ T5751] usb 1-1: device descriptor read/64, error -71 [ 117.748166][ T5751] usb usb1-port1: attempt power cycle [ 117.768662][ T5717] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 117.876744][ T2369] pvrusb2: Failed to submit write-control URB status=-90 [ 117.897821][ T5716] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 117.911971][ T2369] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 117.913751][ T5716] usb 2-1: USB disconnect, device number 8 [ 117.922235][ T2369] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 117.944110][ T5717] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 117.955919][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.972488][ T5717] usb 4-1: config 0 descriptor?? [ 117.985222][ T5717] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 118.097831][ T5751] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 118.118951][ T5751] usb 1-1: device descriptor read/8, error -71 [ 118.179911][ T809] usb 3-1: USB disconnect, device number 7 [ 118.357959][ T5751] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 118.391374][ T6170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.411791][ T5751] usb 1-1: device descriptor read/8, error -71 [ 118.420861][ T6170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.486640][ T5717] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 118.538290][ T5751] usb usb1-port1: unable to enumerate USB device [ 118.861802][ T6175] program syz.4.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.892247][ T5717] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 119.958449][ T6196] Cannot find set identified by id 0 to match [ 120.253216][ T24] usb 4-1: USB disconnect, device number 9 [ 120.328876][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.517893][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 120.555828][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 120.592788][ T10] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 120.615158][ T10] usb 3-1: Product: syz [ 120.627126][ T10] usb 3-1: Manufacturer: syz [ 120.637834][ T10] usb 3-1: SerialNumber: syz [ 120.663529][ T10] usb 3-1: config 0 descriptor?? [ 120.702644][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 121.048053][ T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 121.082033][ T10] gspca_zc3xx: reg_r err -32 [ 121.098969][ T10] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 121.118178][ T5718] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 121.220405][ T24] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 121.252026][ T24] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 121.286659][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 121.302529][ T5718] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 121.334734][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.342371][ T5718] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 121.391459][ T5718] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 121.411761][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.436559][ T5718] usb 5-1: Product: syz [ 121.451542][ T5718] usb 5-1: Manufacturer: syz [ 121.469427][ T5718] usb 5-1: SerialNumber: syz [ 121.716880][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.745810][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.786027][ T5718] usb 5-1: selecting invalid altsetting 1 [ 121.843591][ T24] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 121.849902][ T5718] usb 5-1: selecting invalid altsetting 1 [ 121.904510][ T5718] usb 5-1: selecting invalid altsetting 1 [ 121.927631][ T24] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input7 [ 121.999456][ T24] input: failed to attach handler kbd to device input7, error: -5 [ 122.153251][ T24] usb 4-1: USB disconnect, device number 10 [ 122.284843][ T1119] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 122.309745][ T5718] usb 5-1: USB disconnect, device number 9 [ 122.410800][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.738910][ T5709] usb 3-1: USB disconnect, device number 8 [ 122.877975][ T5718] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 123.039488][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 123.059720][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.094463][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.116137][ T5718] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 123.137109][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 123.137852][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.190317][ T5718] usb 5-1: Product: syz [ 123.210781][ T5718] usb 5-1: Manufacturer: syz [ 123.229073][ T5718] usb 5-1: SerialNumber: syz [ 123.246560][ T5718] usb 5-1: config 0 descriptor?? [ 123.246655][ T6229] FAULT_INJECTION: forcing a failure. [ 123.246655][ T6229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.318960][ T6229] CPU: 0 UID: 0 PID: 6229 Comm: syz.3.148 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.318983][ T6229] Tainted: [L]=SOFTLOCKUP [ 123.318987][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.318996][ T6229] Call Trace: [ 123.319002][ T6229] [ 123.319007][ T6229] dump_stack_lvl+0xe8/0x150 [ 123.319029][ T6229] should_fail_ex+0x40c/0x560 [ 123.319049][ T6229] _copy_from_user+0x2d/0xb0 [ 123.319064][ T6229] __sys_bpf+0x2e7/0xd90 [ 123.319083][ T6229] ? __pfx___sys_bpf+0x10/0x10 [ 123.319101][ T6229] ? __fget_files+0x2a/0x420 [ 123.319125][ T6229] ? ksys_write+0x242/0x270 [ 123.319140][ T6229] ? __pfx_ksys_write+0x10/0x10 [ 123.319156][ T6229] __x64_sys_bpf+0xba/0xd0 [ 123.319174][ T6229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.319187][ T6229] do_syscall_64+0x174/0x580 [ 123.319203][ T6229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.319216][ T6229] ? clear_bhb_loop+0x40/0x90 [ 123.319231][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.319242][ T6229] RIP: 0033:0x7f8ba239ce59 [ 123.319255][ T6229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.319265][ T6229] RSP: 002b:00007f8ba332f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.319281][ T6229] RAX: ffffffffffffffda RBX: 00007f8ba2615fa0 RCX: 00007f8ba239ce59 [ 123.319301][ T6229] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 0000000000000000 [ 123.319309][ T6229] RBP: 00007f8ba332f090 R08: 0000000000000000 R09: 0000000000000000 [ 123.319320][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.319327][ T6229] R13: 00007f8ba2616038 R14: 00007f8ba2615fa0 R15: 00007f8ba273fa48 [ 123.319347][ T6229] [ 123.579046][ T6241] FAULT_INJECTION: forcing a failure. [ 123.579046][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 123.595585][ T6241] CPU: 1 UID: 0 PID: 6241 Comm: syz.1.146 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.595616][ T6241] Tainted: [L]=SOFTLOCKUP [ 123.595622][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.595631][ T6241] Call Trace: [ 123.595638][ T6241] [ 123.595644][ T6241] dump_stack_lvl+0xe8/0x150 [ 123.595669][ T6241] should_fail_ex+0x40c/0x560 [ 123.595696][ T6241] should_failslab+0xa8/0x100 [ 123.595716][ T6241] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 123.595743][ T6241] ? ethnl_default_set_doit+0x97c/0xfe0 [ 123.595762][ T6241] ? ethnl_default_set_doit+0x97c/0xfe0 [ 123.595782][ T6241] ? ethnl_default_set_doit+0x169/0xfe0 [ 123.595813][ T6241] kmemdup_noprof+0x2b/0x70 [ 123.595833][ T6241] ethnl_default_set_doit+0x97c/0xfe0 [ 123.595863][ T6241] genl_family_rcv_msg_doit+0x233/0x340 [ 123.595891][ T6241] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 123.595924][ T6241] ? bpf_lsm_capable+0x9/0x20 [ 123.595938][ T6241] ? security_capable+0x7e/0x2c0 [ 123.595963][ T6241] genl_rcv_msg+0x614/0x7a0 [ 123.595990][ T6241] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.596009][ T6241] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 123.596029][ T6241] ? __pfx_ref_tracker_free+0x10/0x10 [ 123.596051][ T6241] ? __asan_memcpy+0x40/0x70 [ 123.596072][ T6241] ? __skb_clone+0x5c/0x6c0 [ 123.596094][ T6241] netlink_rcv_skb+0x226/0x4a0 [ 123.596112][ T6241] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.596134][ T6241] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.596165][ T6241] ? down_read+0x2be/0x330 [ 123.596185][ T6241] genl_rcv+0x28/0x40 [ 123.596203][ T6241] netlink_unicast+0x7bb/0x940 [ 123.596237][ T6241] netlink_sendmsg+0x813/0xb40 [ 123.596264][ T6241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.596285][ T6241] ? aa_sock_msg_perm+0xf1/0x1b0 [ 123.596309][ T6241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.596325][ T6241] sock_sendmsg_nosec+0x13a/0x180 [ 123.596349][ T6241] ____sys_sendmsg+0x54e/0x850 [ 123.596376][ T6241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.596403][ T6241] ? import_iovec+0x73/0xa0 [ 123.596423][ T6241] ___sys_sendmsg+0x2a5/0x360 [ 123.596438][ T6241] ? __lock_acquire+0x683/0x2cf0 [ 123.596459][ T6241] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.596511][ T6241] ? __fget_files+0x2a/0x420 [ 123.596526][ T6241] ? __fget_files+0x3a2/0x420 [ 123.596552][ T6241] __x64_sys_sendmsg+0x1b1/0x290 [ 123.596574][ T6241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.596607][ T6241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.596626][ T6241] do_syscall_64+0x174/0x580 [ 123.596648][ T6241] ? clear_bhb_loop+0x40/0x90 [ 123.596668][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.596684][ T6241] RIP: 0033:0x7fdc2779ce59 [ 123.596700][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.596713][ T6241] RSP: 002b:00007fdc286ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.596730][ T6241] RAX: ffffffffffffffda RBX: 00007fdc27a15fa0 RCX: 00007fdc2779ce59 [ 123.596741][ T6241] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 123.596751][ T6241] RBP: 00007fdc286ab090 R08: 0000000000000000 R09: 0000000000000000 [ 123.596760][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.596769][ T6241] R13: 00007fdc27a16038 R14: 00007fdc27a15fa0 R15: 00007fdc27b3fa48 [ 123.596804][ T6241] [ 123.935303][ T5718] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 124.181192][ T5718] rc_core: IR keymap rc-imon-pad not found [ 124.204655][ T5718] Registered IR keymap rc-empty [ 124.233133][ T5718] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 124.289982][ T5718] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 124.362862][ T5718] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 124.385642][ T5718] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 124.408831][ T6257] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 124.428972][ T6257] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 124.438527][ T5718] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:10> initialized [ 124.558116][ T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 124.709284][ T24] usb 3-1: device descriptor read/64, error -71 [ 124.969549][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 124.971574][ T5751] usb 5-1: USB disconnect, device number 10 [ 124.982693][ T24] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 125.119277][ T24] usb 3-1: device descriptor read/64, error -71 [ 125.229925][ T24] usb usb3-port1: attempt power cycle [ 125.433268][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 125.569018][ T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 125.588462][ T24] usb 3-1: device descriptor read/8, error -71 [ 125.677928][ T5751] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 125.837835][ T5751] usb 4-1: Using ep0 maxpacket: 8 [ 125.842977][ T24] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 125.856913][ T5751] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.870371][ T24] usb 3-1: device descriptor read/8, error -71 [ 125.876899][ T5751] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 125.884596][ T5751] usb 4-1: can't read configurations, error -71 [ 125.937874][ T5718] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.988878][ T24] usb usb3-port1: unable to enumerate USB device [ 126.090830][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.103689][ T5718] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 126.112833][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.123718][ T5718] usb 5-1: config 0 descriptor?? [ 126.535644][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.545716][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.564305][ T5718] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 126.583031][ T5718] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input11 [ 126.688527][ T5718] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 127.614383][ T6289] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 127.658288][ T29] audit: type=1326 audit(1782445319.051:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.3.168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ba239ce59 code=0x0 [ 127.781919][ T6292] loop5: detected capacity change from 0 to 2640 [ 127.817660][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 127.854645][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 127.876058][ T6295] dvmrp12: entered allmulticast mode [ 127.879748][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 127.898898][ T6292] Buffer I/O error on dev loop5, logical block 0, async page read [ 127.927606][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 127.947271][ T6292] Buffer I/O error on dev loop5, logical block 0, async page read [ 127.969350][ T6292] Buffer I/O error on dev loop5, logical block 0, async page read [ 127.975836][ T6299] usb usb7: usbfs: process 6299 (syz.0.170) did not claim interface 0 before use [ 127.989586][ T5641] Buffer I/O error on dev loop5, logical block 0, async page read [ 128.000944][ T6292] Buffer I/O error on dev loop5, logical block 0, async page read [ 128.019420][ T6292] Buffer I/O error on dev loop5, logical block 0, async page read [ 128.039486][ T6292] ldm_validate_partition_table(): Disk read failed. [ 128.058877][ T6292] Dev loop5: unable to read RDB block 0 [ 128.072774][ T6292] loop5: unable to read partition table [ 128.092573][ T6292] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 128.246353][ T6303] netlink: 180 bytes leftover after parsing attributes in process `syz.2.171'. Stopping sshd: stopped /usr/sbin/sshd (pid 5379) OK Stopping crond: [ 128.638487][ T5751] usb 3-1: new high-speed USB device number 13 using dummy_hcd stopped /usr/sbin/crond (pid 5363) OK [ 128.724292][ T5709] usb 5-1: USB disconnect, device number 11 [ 128.733236][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 128.840237][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.863902][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.894218][ T5751] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 128.920261][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.950027][ T5751] usb 3-1: config 0 descriptor?? Stopping dhcpcd... [ 129.027956][ T5717] usb 1-1: new high-speed USB device number 17 using dummy_hcd stopped /sbin/dhcpcd (pid 5288) [ 129.178625][ T5717] usb 1-1: Using ep0 maxpacket: 8 Stopping network: [ 129.211387][ T5717] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.243571][ T5717] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 129.273901][ T5717] usb 1-1: can't read configurations, error -71 [ 129.277917][ T5709] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 129.402748][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 129.426077][ T6333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.451549][ T5709] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 129.464467][ T6333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.481048][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.498627][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.537307][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.552723][ T5709] usb 5-1: config 0 descriptor?? [ 129.583949][ T5709] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 129.627079][ T5751] usbhid 3-1:0.0: can't add hid device: -71 [ 129.656133][ T5751] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 129.689277][ T5751] usb 3-1: USB disconnect, device number 13 [ 129.772649][ T5709] gspca_cpia1: usb_control_msg 05, error -71 [ 129.819259][ T5709] gspca_cpia1: usb_control_msg 01, error -71 [ 129.841036][ T5709] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 129.876170][ T5709] usb 5-1: USB disconnect, device number 12 OK Stopping iptables: OK [ 130.407858][ T5709] usb 4-1: new high-speed USB device number 13 using dummy_hcd Stopping system message bus: [ 130.578265][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 130.604281][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.656164][ T5709] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.686511][ T5709] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.714901][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.744624][ T5709] usb 4-1: Product: syz [ 130.766878][ T5709] usb 4-1: Manufacturer: syz [ 130.780921][ T5709] usb 4-1: SerialNumber: syz [ 130.827351][ T5709] usb 4-1: 0:2 : does not exist [ 130.839950][ T5717] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 131.017815][ T5717] usb 5-1: Using ep0 maxpacket: 16 [ 131.028717][ T5709] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 131.031365][ T5717] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.063121][ T5717] usb 5-1: config 9 has no interfaces? [ 131.071299][ T5717] usb 5-1: language id specifier not provided by device, defaulting to English [ 131.090523][ T5717] usb 5-1: New USB device found, idVendor=0b05, idProduct=1932, bcdDevice=13.5b [ 131.108673][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.120818][ T5709] usb 4-1: USB disconnect, device number 13 [ 131.142793][ T5717] usb 5-1: Product: syz [ 131.152593][ T5717] usb 5-1: Manufacturer: 疤ᨒ﫩ዷ夏⧽ꉺ咲엄쯳쌅酹⮎㖿륋푣陪螭䰩涻l [ 131.176534][ T5717] usb 5-1: SerialNumber: syz [ 131.182176][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory done [ 131.436653][ T5717] usb 5-1: USB disconnect, device number 13 [ 131.697172][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 131.775207][ T6393] FAULT_INJECTION: forcing a failure. [ 131.775207][ T6393] name failslab, interval 1, probability 0, space 0, times 0 [ 131.788118][ T5709] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 131.796048][ T6393] CPU: 0 UID: 0 PID: 6393 Comm: syz.3.190 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.796076][ T6393] Tainted: [L]=SOFTLOCKUP [ 131.796082][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 131.796091][ T6393] Call Trace: [ 131.796097][ T6393] [ 131.796104][ T6393] dump_stack_lvl+0xe8/0x150 [ 131.796129][ T6393] should_fail_ex+0x40c/0x560 [ 131.796153][ T6393] should_failslab+0xa8/0x100 [ 131.796172][ T6393] __kmalloc_cache_noprof+0xa8/0x660 [ 131.796197][ T6393] ? iommufd_test+0x2258/0x6050 [ 131.796218][ T6393] ? iommufd_test+0x2258/0x6050 [ 131.796243][ T6393] iommufd_test+0x2258/0x6050 [ 131.796273][ T6393] ? __pfx___up_read+0x10/0x10 [ 131.796293][ T6393] ? __pfx_iommufd_test+0x10/0x10 [ 131.796314][ T6393] ? do_user_addr_fault+0xb8e/0x1340 [ 131.796337][ T6393] ? do_user_addr_fault+0xc4a/0x1340 [ 131.796368][ T6393] ? irqentry_exit+0x218/0x8f0 [ 131.796391][ T6393] ? lockdep_hardirqs_on+0x7a/0x110 [ 131.796410][ T6393] ? irqentry_exit+0x218/0x8f0 [ 131.796429][ T6393] ? trace_irq_disable+0x3b/0x140 [ 131.796467][ T6393] ? rep_movs_alternative+0x4a/0xa0 [ 131.796490][ T6393] iommufd_fops_ioctl+0x465/0x600 [ 131.796512][ T6393] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 131.796534][ T6393] ? __fget_files+0x2a/0x420 [ 131.796554][ T6393] ? __fget_files+0x2a/0x420 [ 131.796573][ T6393] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.796593][ T6393] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 131.796610][ T6393] __se_sys_ioctl+0xfc/0x170 [ 131.796629][ T6393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.796647][ T6393] do_syscall_64+0x174/0x580 [ 131.796667][ T6393] ? trace_irq_disable+0x3b/0x140 [ 131.796688][ T6393] ? clear_bhb_loop+0x40/0x90 [ 131.796707][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.796723][ T6393] RIP: 0033:0x7f8ba239ce59 [ 131.796738][ T6393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.796751][ T6393] RSP: 002b:00007f8ba332f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.796769][ T6393] RAX: ffffffffffffffda RBX: 00007f8ba2615fa0 RCX: 00007f8ba239ce59 [ 131.796780][ T6393] RDX: 0000200000006fc0 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 131.796791][ T6393] RBP: 00007f8ba332f090 R08: 0000000000000000 R09: 0000000000000000 [ 131.796800][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.796809][ T6393] R13: 00007f8ba2616038 R14: 00007f8ba2615fa0 R15: 00007f8ba273fa48 [ 131.796835][ T6393] [ 132.168081][ T5709] usb 3-1: device descriptor read/64, error -71 Stopping klogd: [ 132.414470][ T5709] usb 3-1: new high-speed USB device number 15 using dummy_hcd OK [ 132.550350][ T5709] usb 3-1: device descriptor read/64, error -71 [ 132.559036][ T5751] usb 1-1: new high-speed USB device number 19 using dummy_hcd Stopping acpid: [ 132.668230][ T5709] usb usb3-port1: attempt power cycle [ 132.727948][ T5751] usb 1-1: Using ep0 maxpacket: 16 [ 132.735309][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.746262][ T995] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 132.755749][ T5751] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 132.765031][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.775320][ T5751] usb 1-1: config 0 descriptor?? [ 132.897844][ T995] usb 5-1: Using ep0 maxpacket: 16 [ 132.904753][ T995] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.911634][ T995] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 132.921171][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.931868][ T995] usb 5-1: config 0 descriptor?? [ 133.017850][ T5709] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 133.038682][ T5709] usb 3-1: device descriptor read/8, error -71 [ 133.072531][ T6411] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.194'. [ 133.082278][ T6411] openvswitch: netlink: Message has 512 unknown bytes. [ 133.188395][ T5751] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 133.277915][ T5709] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 133.309977][ T5709] usb 3-1: device descriptor read/8, error -71 [ 133.420827][ T5709] usb usb3-port1: unable to enumerate USB device OK Stopping syslogd: stopped /sbin/syslogd (pid 4976) OK umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 134.366918][ T6429] netlink: 300 bytes leftover after parsing attributes in process `syz.3.199'. [ 134.462497][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 134.877916][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 135.059874][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 135.077391][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 135.102737][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 135.126530][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 135.147928][ T9] usb 4-1: Product: syz [ 135.160935][ T9] usb 4-1: Manufacturer: syz [ 135.174539][ T9] usb 4-1: SerialNumber: syz [ 135.224488][ T9] usb 4-1: config 0 descriptor?? [ 135.246371][ T6433] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.340197][ T5751] usb 1-1: USB disconnect, device number 19 [ 135.416932][ T995] usbhid 5-1:0.0: can't add hid device: -71 [ 135.438943][ T995] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 135.481996][ T995] usb 5-1: USB disconnect, device number 14 [ 135.496906][ T809] usb 4-1: USB disconnect, device number 14 [ 135.788135][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.796058][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.797969][ T5751] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 135.847406][ T6447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.207'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 135.965144][ T4994] udevd[4994]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes [ 136.108282][ T809] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 136.125436][ T5751] usb 1-1: device descriptor read/all, error -71 Connection to 10.128.1.106 closed by remote host. [ 137.022370][ T5865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.120326][ T5865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.201921][ T5865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 137.345644][ T5865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.436603][ T5865] bridge_slave_1: left promiscuous mode [ 137.443895][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.455581][ T5865] bridge_slave_0: left allmulticast mode [ 137.461729][ T5865] bridge_slave_0: left promiscuous mode [ 137.469884][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.597669][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.612899][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.624425][ T5865] bond0 (unregistering): Released all slaves [ 137.870388][ T5865] hsr_slave_0: left promiscuous mode [ 137.877070][ T5865] hsr_slave_1: left promiscuous mode [ 137.883034][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.890925][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.899324][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.906726][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.925491][ T5865] veth1_macvtap: left promiscuous mode [ 137.932100][ T5865] veth0_macvtap: left promiscuous mode [ 137.938581][ T5865] veth1_vlan: left promiscuous mode [ 137.943869][ T5865] veth0_vlan: left promiscuous mode [ 138.124519][ T5865] team0 (unregistering): Port device team_slave_1 removed [ 138.139070][ T5865] team0 (unregistering): Port device team_slave_0 removed [ 138.303379][ T2369] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 138.304265][ T6455] smc: removing smcd device lo [ 138.315204][ T2369] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 138.328220][ T2369] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 138.338798][ T2369] pvrusb2: Failure uploading firmware1 [ 138.345014][ T2369] pvrusb2: Device initialization was not successful. [ 138.351853][ T2369] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 138.362749][ T2369] pvrusb2: Failed to submit write-control URB status=-19 [ 138.364316][ T5716] pvrusb2: Device being rendered inoperable [ 138.370689][ T2369] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 138.394625][ T2369] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 138.404918][ T2369] ------------[ cut here ]------------ [ 138.410576][ T2369] ret [ 138.410604][ T2369] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x755/0xa40, CPU#0: pvrusb2-context/2369 [ 138.426413][ T2369] Modules linked in: [ 138.430547][ T2369] CPU: 0 UID: 0 PID: 2369 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 138.441865][ T2369] Tainted: [L]=SOFTLOCKUP [ 138.446202][ T2369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.456275][ T2369] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 138.462613][ T2369] Code: b4 fb e9 48 fc ff ff e8 09 e3 b4 fb c6 05 6e 6b 0b 0a 01 48 c7 c7 80 e4 54 8c e8 a6 61 16 fb e9 70 fc ff ff e8 ec e2 b4 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 80 e5 54 8c 4c 89 e2 e8 b6 ef 1a fb e9 [ 138.482468][ T2369] RSP: 0018:ffffc90006767680 EFLAGS: 00010293 [ 138.488935][ T2369] RAX: ffffffff86114db4 RBX: dffffc0000000000 RCX: ffff88802c1f5d00 [ 138.496902][ T2369] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 138.505321][ T2369] RBP: 0000000000000001 R08: ffffffff9032d2f7 R09: 1ffffffff2065a5e [ 138.513346][ T2369] R10: dffffc0000000000 R11: fffffbfff2065a5f R12: ffffffff8cafb460 [ 138.521332][ T2369] R13: 0000000000001770 R14: ffff88807e3890b0 R15: 00000000fffffff5 [ 138.529324][ T2369] FS: 0000000000000000(0000) GS:ffff888125227000(0000) knlGS:0000000000000000 [ 138.538273][ T2369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.544842][ T2369] CR2: 00007f797981ae9c CR3: 0000000033fa6000 CR4: 00000000003526f0 [ 138.552822][ T2369] Call Trace: [ 138.556090][ T2369] [ 138.559127][ T2369] ? kfree+0x1c5/0x640 [ 138.563210][ T2369] _request_firmware+0x1049/0x1780 [ 138.568344][ T2369] ? __pfx__request_firmware+0x10/0x10 [ 138.573796][ T2369] ? pvr2_send_request_ex+0x1a8c/0x2240 [ 138.579350][ T2369] request_firmware+0x36/0x50 [ 138.584017][ T2369] pvr2_locate_firmware+0xb3/0x500 [ 138.589454][ T2369] pvr2_upload_firmware1+0x1bd/0x940 [ 138.594733][ T2369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.601078][ T2369] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 138.606902][ T2369] pvr2_hdw_initialize+0x425/0x3c60 [ 138.612122][ T2369] ? __mutex_trylock_common+0x15f/0x270 [ 138.617658][ T2369] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 138.623298][ T2369] ? rcu_is_watching+0x15/0xb0 [ 138.628083][ T2369] ? trace_contention_end+0x3d/0x140 [ 138.633390][ T2369] ? pvr2_context_thread_func+0x279/0xc10 [ 138.639116][ T2369] ? __mutex_unlock_slowpath+0x731/0x900 [ 138.644740][ T2369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.650738][ T2369] ? __pfx_pvr2_context_notify+0x10/0x10 [ 138.656360][ T2369] pvr2_context_thread_func+0x504/0xc10 [ 138.661918][ T2369] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 138.667998][ T2369] ? __pfx_autoremove_wake_function+0x10/0x10 [ 138.674051][ T2369] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 138.679885][ T2369] ? __kthread_parkme+0x71/0x1f0 [ 138.684814][ T2369] ? __kthread_parkme+0x196/0x1f0 [ 138.690146][ T2369] kthread+0x388/0x470 [ 138.694211][ T2369] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 138.700625][ T2369] ? __pfx_kthread+0x10/0x10 [ 138.705225][ T2369] ret_from_fork+0x514/0xb70 [ 138.709837][ T2369] ? __pfx_ret_from_fork+0x10/0x10 [ 138.714937][ T2369] ? __switch_to+0xc89/0x1420 [ 138.719672][ T2369] ? __pfx_kthread+0x10/0x10 [ 138.724283][ T2369] ret_from_fork_asm+0x1a/0x30 [ 138.729094][ T2369] [ 138.732120][ T2369] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.739403][ T2369] CPU: 0 UID: 0 PID: 2369 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 138.750688][ T2369] Tainted: [L]=SOFTLOCKUP [ 138.754998][ T2369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.765034][ T2369] Call Trace: [ 138.768300][ T2369] [ 138.771215][ T2369] vpanic+0x56c/0xa60 [ 138.775180][ T2369] ? __pfx__printk+0x10/0x10 [ 138.779762][ T2369] ? __pfx_vpanic+0x10/0x10 [ 138.784253][ T2369] ? is_bpf_text_address+0x292/0x2b0 [ 138.789532][ T2369] ? is_bpf_text_address+0x26/0x2b0 [ 138.794720][ T2369] panic+0xc5/0xd0 [ 138.798438][ T2369] ? __pfx_panic+0x10/0x10 [ 138.802849][ T2369] ? ret_from_fork_asm+0x1a/0x30 [ 138.807777][ T2369] __warn+0x315/0x4c0 [ 138.811750][ T2369] ? firmware_fallback_sysfs+0x755/0xa40 [ 138.817361][ T2369] ? firmware_fallback_sysfs+0x755/0xa40 [ 138.822975][ T2369] __report_bug+0x331/0x530 [ 138.827471][ T2369] ? firmware_fallback_sysfs+0x755/0xa40 [ 138.833114][ T2369] ? __pfx___report_bug+0x10/0x10 [ 138.838129][ T2369] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 138.843482][ T2369] ? __up_read+0x29c/0x930 [ 138.847898][ T2369] ? firmware_fallback_sysfs+0x755/0xa40 [ 138.853526][ T2369] report_bug+0x16a/0x220 [ 138.857850][ T2369] ? firmware_fallback_sysfs+0x755/0xa40 [ 138.863474][ T2369] ? firmware_fallback_sysfs+0x757/0xa40 [ 138.869102][ T2369] handle_bug+0x9c/0x200 [ 138.873426][ T2369] exc_invalid_op+0x1a/0x50 [ 138.877923][ T2369] asm_exc_invalid_op+0x1a/0x20 [ 138.882778][ T2369] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 138.889009][ T2369] Code: b4 fb e9 48 fc ff ff e8 09 e3 b4 fb c6 05 6e 6b 0b 0a 01 48 c7 c7 80 e4 54 8c e8 a6 61 16 fb e9 70 fc ff ff e8 ec e2 b4 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 80 e5 54 8c 4c 89 e2 e8 b6 ef 1a fb e9 [ 138.908636][ T2369] RSP: 0018:ffffc90006767680 EFLAGS: 00010293 [ 138.914693][ T2369] RAX: ffffffff86114db4 RBX: dffffc0000000000 RCX: ffff88802c1f5d00 [ 138.922677][ T2369] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 138.930724][ T2369] RBP: 0000000000000001 R08: ffffffff9032d2f7 R09: 1ffffffff2065a5e [ 138.938687][ T2369] R10: dffffc0000000000 R11: fffffbfff2065a5f R12: ffffffff8cafb460 [ 138.946645][ T2369] R13: 0000000000001770 R14: ffff88807e3890b0 R15: 00000000fffffff5 [ 138.954699][ T2369] ? firmware_fallback_sysfs+0x754/0xa40 [ 138.960389][ T2369] ? kfree+0x1c5/0x640 [ 138.964480][ T2369] _request_firmware+0x1049/0x1780 [ 138.969589][ T2369] ? __pfx__request_firmware+0x10/0x10 [ 138.975040][ T2369] ? pvr2_send_request_ex+0x1a8c/0x2240 [ 138.980579][ T2369] request_firmware+0x36/0x50 [ 138.985241][ T2369] pvr2_locate_firmware+0xb3/0x500 [ 138.990386][ T2369] pvr2_upload_firmware1+0x1bd/0x940 [ 138.995676][ T2369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.001669][ T2369] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 139.007476][ T2369] pvr2_hdw_initialize+0x425/0x3c60 [ 139.012664][ T2369] ? __mutex_trylock_common+0x15f/0x270 [ 139.018209][ T2369] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 139.023849][ T2369] ? rcu_is_watching+0x15/0xb0 [ 139.028620][ T2369] ? trace_contention_end+0x3d/0x140 [ 139.033913][ T2369] ? pvr2_context_thread_func+0x279/0xc10 [ 139.039819][ T2369] ? __mutex_unlock_slowpath+0x731/0x900 [ 139.045461][ T2369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.051448][ T2369] ? __pfx_pvr2_context_notify+0x10/0x10 [ 139.057100][ T2369] pvr2_context_thread_func+0x504/0xc10 [ 139.062643][ T2369] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 139.068708][ T2369] ? __pfx_autoremove_wake_function+0x10/0x10 [ 139.074796][ T2369] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 139.080596][ T2369] ? __kthread_parkme+0x71/0x1f0 [ 139.085519][ T2369] ? __kthread_parkme+0x196/0x1f0 [ 139.090532][ T2369] kthread+0x388/0x470 [ 139.094585][ T2369] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 139.100637][ T2369] ? __pfx_kthread+0x10/0x10 [ 139.105218][ T2369] ret_from_fork+0x514/0xb70 [ 139.109823][ T2369] ? __pfx_ret_from_fork+0x10/0x10 [ 139.114923][ T2369] ? __switch_to+0xc89/0x1420 [ 139.119599][ T2369] ? __pfx_kthread+0x10/0x10 [ 139.124176][ T2369] ret_from_fork_asm+0x1a/0x30 [ 139.128936][ T2369] [ 139.132379][ T2369] Kernel Offset: disabled [ 139.136702][ T2369] Rebooting in 86400 seconds..