last executing test programs: 25m23.818816288s ago: executing program 32 (id=446): openat$vcsu(0xffffff9c, &(0x7f0000000040), 0xc02, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 25m21.738472106s ago: executing program 33 (id=457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff4, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)='\'', 0x1}], 0x1}, 0x4) 25m16.9574536s ago: executing program 34 (id=463): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 23m28.771086868s ago: executing program 3 (id=657): accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x800) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e23, @loopback}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23m28.319321612s ago: executing program 3 (id=661): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f0000000300)='LL', 0x2, 0x2}) 23m28.259623462s ago: executing program 3 (id=662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x80084, 0x3, 0xe, 0x8e, "0060730000efa489040401000000000000f600"}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) 23m27.110929737s ago: executing program 3 (id=664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpgid(r0) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e1e, 0x3, 'sed\x00', 0x21, 0x2, 0x6e}, 0x2c) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x39) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3300000001000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES64=0x0], 0x20) 23m25.792810083s ago: executing program 3 (id=666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 23m25.662969426s ago: executing program 3 (id=667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 23m10.3062712s ago: executing program 35 (id=667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 14m15.918774299s ago: executing program 5 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r1, &(0x7f0000000140)=@phonet, &(0x7f00000001c0)=0x80, 0x800) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) 14m14.286013011s ago: executing program 5 (id=1641): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 14m13.803681318s ago: executing program 5 (id=1642): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0xff08) 14m12.606216868s ago: executing program 5 (id=1643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}}, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 14m11.427127776s ago: executing program 5 (id=1644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e21, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x88}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 14m11.112887882s ago: executing program 5 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020102100200000a00060008021100000000000800358e45ee97"], 0x44}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x19a) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0xf}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r7 = syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x40000000, 0x20000}, 0x0, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, 0x0, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000346000/0x1000)=nil) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x7, 0x0, [{0x890, 0x0, 0x2}, {0xa16, 0x0, 0xe4f5}, {0x313, 0x0, 0x7}, {0x9ab, 0x0, 0xe}, {0x4fd, 0x0, 0xfffffffffffffffa}, {0x3b9, 0x0, 0xfffffffffffffffb}, {0x3a4, 0x0, 0x9e}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f00)=@newtaction={0x77c, 0x1e, 0x109, 0x100, 0x0, {}, [{0x4}, {0xf4, 0x1, [@m_ctinfo={0x60, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x34, 0x6, "0bc408e4219bf6823f1b2fa51f5db228cd1d0ed0fd90f572632d4f4351a96b89fa261b46a121e28acbf8d7337a88a5d7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x90, 0x20, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @TCA_IFE_TYPE={0x6, 0x5, 0xffff}]}, {0x50, 0x6, "35026dd8fc7fcd97acd1f806de68c98b06d9539c66619cafe2c0c542579e547558cd697e12e6371dc21ec0c23b529d0d7a16f2956c7d618bba458a1c30a2e86f3ded4506de7ea6c499c407ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0xec, 0x1, [@m_xt={0xe8, 0x4, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x6f, 0x6, "f0162d2c147be47906488b82ec8ba5fffc3bcbf45243d1fb8311dd146c1c38847cc019cebc5cf15451505f0235acebac66d3e919e8103cab4b90982bb8ad649d7f184ade06e356b7fd2c8034f533860919eee0d5044812cab431867fc02116d6d73675fbc4d637afe8dfb2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x584, 0x1, [@m_sample={0x84, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x50, 0x6, "af26c30c18f618e9a6ef092f6750fe83c54f6d8d2564240d2b6faa4e44387ab9f2e0b05993c63e50e766f4be9bb22d4348474c31d5696e02cb646afff61fc55a20bdd97192aca60826827749"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xe8, 0x1d, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80000001, 0x6, 0x10000000, 0x3ff, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x6d3, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xbb3, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1, 0x3, 0x65a}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x7, 0x10000000, 0xfff, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3bf3, 0x8000, 0x20000000, 0x60, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x3, 0x4, 0x1480000, 0x200}}]}, {0x2c, 0x6, "c878e4cab0e18e2d873dfad72cc99f21e2db1c37d8ec2856cd5a96fa613843836bff28bb5aef83f9"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x174, 0x20, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x2, 0x8, 0x4ba0}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1d, 0x33ec, 0xffffffffffffffff, 0x7ff}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x10000000, 0xc407, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0xffffffffffffffff, 0xef32, 0x3}}}]}, {0xd2, 0x6, "b35f92eee3d337e59c7c363ed5cb4574a650b92cdf5e2d933b37a4f7d222bce33f49b2b1ff7e4df7e02d8751f4308123c56a5d8540b11ed4d4e048df2c0a034a45baee0345f0068be2263161d0864d77abbbcc0accbbe78fb0198a36260d146e537b05f54517c7d722eddad1bad03005fbc87979bad0c9bc9896cac19bcff943bfcdef0cad8564038efe67b7a313b141831fb09de938a3fbef61570f9ee37378220e1830a99ac256ebf3ee65b7ac295e12a6653806a340e5bc096e84e5c21b25599c3c7222e79cca92f4ded7a4ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x158, 0x1d, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1c06, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x9, 0x4, 0x2, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xb, 0x3, 0x8000, 0x6f6d}}]}, {0xed, 0x6, "e664f5243b1a14af4b88a1e122ac35eebea2b7d38e4a8af141f19e9b799d26c452fe96a7260d5eeed2e7c9bc3cf0b65435123a0d137ac6a31b9d12f3feea735b22dbc5eabda8afe52d2c1b51b03a9de86576ffcf8045dfb92dda40c48d032b1987c45ec70acba772e256b6592032f1c4a8a1a0cb11d08cf3206367e8ff3721cb99a70a247beeaee67228a47ed78d78d264cfb051dd888805d3a91a080bd95789fc8027a3045ba0c4c5980912fd2802177347e5535d57e59e44ab89666f25fc491eb9c0793e9efb43ff1eaae68d9ca639137efcc8930c25632f3731854cd3fc2c258c145d41962c1f21"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x148, 0x2, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf1, 0x5a1d615f, 0x4, 0x0, 0x9}, 0x6}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}]}, {0xc2, 0x6, "a286d7bab31f67bab9e71f99a968bc53e14f31802adc580763d7618e306a7d1b82478907df8f0deafb6aca7bde8910f90e6383eec00c76eaffc51447dc6fbf9c4cfda09813e7ad34d3a5f207dabb5d5797bac6d4d27e99afa0b2f62b64fd76232a101bb182f96ec7663846985df61cb2f1387851d7dfa9d7db289801d97e7c60240d061b0fefce666b9e4322d707893147390794d593f284aac6c43deaaaa22912bb473fe70cab9782aa273c4c26cfe623f29a6acd47991c9cf59e8003ed"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x77c}, 0x1, 0x2b1e}, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1, 0x8}, 0x8) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a000905000000000000000705", @ANYRES16=r2], 0x0) 13m54.372732187s ago: executing program 36 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020102100200000a00060008021100000000000800358e45ee97"], 0x44}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x19a) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0xf}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r7 = syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x40000000, 0x20000}, 0x0, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, 0x0, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000346000/0x1000)=nil) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x7, 0x0, [{0x890, 0x0, 0x2}, {0xa16, 0x0, 0xe4f5}, {0x313, 0x0, 0x7}, {0x9ab, 0x0, 0xe}, {0x4fd, 0x0, 0xfffffffffffffffa}, {0x3b9, 0x0, 0xfffffffffffffffb}, {0x3a4, 0x0, 0x9e}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f00)=@newtaction={0x77c, 0x1e, 0x109, 0x100, 0x0, {}, [{0x4}, {0xf4, 0x1, [@m_ctinfo={0x60, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x34, 0x6, "0bc408e4219bf6823f1b2fa51f5db228cd1d0ed0fd90f572632d4f4351a96b89fa261b46a121e28acbf8d7337a88a5d7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x90, 0x20, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @TCA_IFE_TYPE={0x6, 0x5, 0xffff}]}, {0x50, 0x6, "35026dd8fc7fcd97acd1f806de68c98b06d9539c66619cafe2c0c542579e547558cd697e12e6371dc21ec0c23b529d0d7a16f2956c7d618bba458a1c30a2e86f3ded4506de7ea6c499c407ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0xec, 0x1, [@m_xt={0xe8, 0x4, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x6f, 0x6, "f0162d2c147be47906488b82ec8ba5fffc3bcbf45243d1fb8311dd146c1c38847cc019cebc5cf15451505f0235acebac66d3e919e8103cab4b90982bb8ad649d7f184ade06e356b7fd2c8034f533860919eee0d5044812cab431867fc02116d6d73675fbc4d637afe8dfb2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x584, 0x1, [@m_sample={0x84, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x50, 0x6, "af26c30c18f618e9a6ef092f6750fe83c54f6d8d2564240d2b6faa4e44387ab9f2e0b05993c63e50e766f4be9bb22d4348474c31d5696e02cb646afff61fc55a20bdd97192aca60826827749"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xe8, 0x1d, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80000001, 0x6, 0x10000000, 0x3ff, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x6d3, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xbb3, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1, 0x3, 0x65a}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x7, 0x10000000, 0xfff, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3bf3, 0x8000, 0x20000000, 0x60, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x3, 0x4, 0x1480000, 0x200}}]}, {0x2c, 0x6, "c878e4cab0e18e2d873dfad72cc99f21e2db1c37d8ec2856cd5a96fa613843836bff28bb5aef83f9"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x174, 0x20, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x2, 0x8, 0x4ba0}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1d, 0x33ec, 0xffffffffffffffff, 0x7ff}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x10000000, 0xc407, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0xffffffffffffffff, 0xef32, 0x3}}}]}, {0xd2, 0x6, "b35f92eee3d337e59c7c363ed5cb4574a650b92cdf5e2d933b37a4f7d222bce33f49b2b1ff7e4df7e02d8751f4308123c56a5d8540b11ed4d4e048df2c0a034a45baee0345f0068be2263161d0864d77abbbcc0accbbe78fb0198a36260d146e537b05f54517c7d722eddad1bad03005fbc87979bad0c9bc9896cac19bcff943bfcdef0cad8564038efe67b7a313b141831fb09de938a3fbef61570f9ee37378220e1830a99ac256ebf3ee65b7ac295e12a6653806a340e5bc096e84e5c21b25599c3c7222e79cca92f4ded7a4ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x158, 0x1d, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1c06, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x9, 0x4, 0x2, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xb, 0x3, 0x8000, 0x6f6d}}]}, {0xed, 0x6, "e664f5243b1a14af4b88a1e122ac35eebea2b7d38e4a8af141f19e9b799d26c452fe96a7260d5eeed2e7c9bc3cf0b65435123a0d137ac6a31b9d12f3feea735b22dbc5eabda8afe52d2c1b51b03a9de86576ffcf8045dfb92dda40c48d032b1987c45ec70acba772e256b6592032f1c4a8a1a0cb11d08cf3206367e8ff3721cb99a70a247beeaee67228a47ed78d78d264cfb051dd888805d3a91a080bd95789fc8027a3045ba0c4c5980912fd2802177347e5535d57e59e44ab89666f25fc491eb9c0793e9efb43ff1eaae68d9ca639137efcc8930c25632f3731854cd3fc2c258c145d41962c1f21"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x148, 0x2, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf1, 0x5a1d615f, 0x4, 0x0, 0x9}, 0x6}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}]}, {0xc2, 0x6, "a286d7bab31f67bab9e71f99a968bc53e14f31802adc580763d7618e306a7d1b82478907df8f0deafb6aca7bde8910f90e6383eec00c76eaffc51447dc6fbf9c4cfda09813e7ad34d3a5f207dabb5d5797bac6d4d27e99afa0b2f62b64fd76232a101bb182f96ec7663846985df61cb2f1387851d7dfa9d7db289801d97e7c60240d061b0fefce666b9e4322d707893147390794d593f284aac6c43deaaaa22912bb473fe70cab9782aa273c4c26cfe623f29a6acd47991c9cf59e8003ed"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x77c}, 0x1, 0x2b1e}, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1, 0x8}, 0x8) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a000905000000000000000705", @ANYRES16=r2], 0x0) 10m38.707179273s ago: executing program 6 (id=2010): socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create(0x2) epoll_create(0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0xffffffff, 0x400000009, 0x10000000, 0xb, 0xffff}, 0x0, 0x0) 10m37.56397218s ago: executing program 6 (id=2011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10m36.949033108s ago: executing program 6 (id=2012): openat$drirender128(0xffffffffffffff9c, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)="87", 0x1) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x200008c0) 10m35.755658478s ago: executing program 6 (id=2017): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e00", 0x3, 0x4000000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019200)={0x11, 0x0, 0x0, 0x0, 0x800, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) io_uring_setup(0x42f00, &(0x7f00000004c0)={0x0, 0xe8e3, 0x400, 0x20001, 0x2d6}) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x5, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "653c1b4e82844461df245d602e571157637b2b264d65f76409a869d62cec2666", "2e2bb08b16c51ac62f5a95c880e2467137a74f00e71e64160700", "aed417062feee7c199b98743ad7e98588e00", "9fcc63648d5ca6f91b8d245971ee8a08460e7400", "21acd16f247aae4d9e6d207292339e96294b6d8b1491fae6922d6d21831cdac0", "81f44df52305410a0af0460a", 0x4, 0x5, 0x6, 0x7, 0x7ffffffd}}) 10m33.734419497s ago: executing program 6 (id=2024): r0 = socket$l2tp(0x2, 0x2, 0x73) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x4e22, @local}, 0x10) 10m32.47935697s ago: executing program 6 (id=2026): syz_open_dev$dvb_demux(0x0, 0x7a5966a2, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) 10m17.112520647s ago: executing program 37 (id=2026): syz_open_dev$dvb_demux(0x0, 0x7a5966a2, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) 6m29.771265784s ago: executing program 9 (id=2639): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003900)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 6m24.907347297s ago: executing program 9 (id=2652): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0x80, 0xffffff01, 0x100001, 0x3, 0x200000, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0xfffffffc, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x80, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000003080), 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 6m24.235215687s ago: executing program 8 (id=2654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x40000001) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x340a) 6m23.583194179s ago: executing program 9 (id=2656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x985980) ioctl$BLKSECDISCARD(r1, 0x127d, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="2c385a7af3", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) r8 = socket(0xa, 0x802, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000000), 0x4) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000500)='\x00\x00', 0x2, r3) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000000700)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67e100000000000001", @ANYRES16=r2, @ANYRESHEX=r1, @ANYRES16, @ANYRES16=r8]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m22.439707038s ago: executing program 9 (id=2659): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) 6m21.836571473s ago: executing program 9 (id=2660): syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x340, 0x84, 0x3c, 0xf4, 0x20, 0x10ce, 0xea6a, 0xef2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x7, 0x80, 0x1, "", [{{0x9, 0x4, 0x7b, 0x5, 0x1, 0x83, 0x70, 0x32, 0x3, [], [{{0x9, 0x5, 0xd, 0x1c, 0x3ff, 0x67, 0x6, 0x7}}]}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) 6m21.482326026s ago: executing program 8 (id=2661): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 6m17.805514225s ago: executing program 8 (id=2666): r0 = socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m17.481979817s ago: executing program 9 (id=2667): syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9}}}, 0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) 6m16.648255616s ago: executing program 38 (id=2667): syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xb, 0xc9}}}, 0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) 6m16.564796788s ago: executing program 8 (id=2669): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) 6m15.888972466s ago: executing program 8 (id=2671): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x7}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x1, 0xd8, 0x6, @random="4e9e4e0e6598"}, 0x14) 6m10.10350552s ago: executing program 8 (id=2675): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 6m9.7250046s ago: executing program 39 (id=2675): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 4.243313485s ago: executing program 2 (id=3921): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$FUSE_NOTIFY_RESEND(r0, 0x0, 0x0) 4.243024302s ago: executing program 1 (id=3922): socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xb, 0x8) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r4, 0x1}], 0x1, 0x101) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7, 0x3}, {}]}]}}, &(0x7f0000000f40)=""/4077, 0x36, 0xfed, 0x2}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.98537996s ago: executing program 2 (id=3923): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$AUTOFS_IOC_READY(r1, 0x7439, 0x0) 3.755840451s ago: executing program 2 (id=3925): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb236100000001"], 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0xffff, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280), 0x0) 3.402677776s ago: executing program 4 (id=3927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.891586387s ago: executing program 1 (id=3930): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.687285824s ago: executing program 1 (id=3932): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mprotect(&(0x7f0000053000/0x3000)=nil, 0x3000, 0x1000002) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) unshare(0x22020400) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x141000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000640)={0x39, 0x1}) sendmmsg(r1, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000100)={0x0, 0x80000000, 0xcdd, '\x00', &(0x7f0000000080)=0xc}) 2.542801893s ago: executing program 4 (id=3934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_getevents(0x0, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r0, 0x0) 2.267996515s ago: executing program 4 (id=3936): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000020000400501"], 0x48}}, 0x20000814) 2.1058789s ago: executing program 4 (id=3938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd01000000000014120000600000000308"], 0xfdef) 2.091291597s ago: executing program 1 (id=3939): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010058}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/22, 0x16}], 0x2}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.991294388s ago: executing program 7 (id=3940): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 1.836676185s ago: executing program 7 (id=3942): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x8, "7b807005005a4fc30ce0e60542e84423b48e277209f789e408b565e81a71a796"}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) socket$inet6(0x10, 0x3, 0x5) 1.716289791s ago: executing program 0 (id=3943): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1) unshare(0x28020480) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffe, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.481345728s ago: executing program 0 (id=3944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.473957856s ago: executing program 7 (id=3945): socketpair$nbd(0x1, 0x1, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f51, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80, 0x122) 1.337318714s ago: executing program 7 (id=3946): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.301958058s ago: executing program 4 (id=3947): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x6c000000, 0xf, 0x5, 0x4007c9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.228272687s ago: executing program 1 (id=3948): madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.122196529s ago: executing program 1 (id=3949): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000180)={r1}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x4100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x3) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x281, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x8000) write$vga_arbiter(r4, &(0x7f0000000000)=@unlock_all, 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec000000250001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000005000000000a00000000000000272fd039e825eb02b09ba33aeed705341662e2feb65ffb6a85c70920d8e0e039c3289cc7eee4c3eda32f8a3468cb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xec}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$sndpcmp(&(0x7f0000000000), 0xd420, 0x4082) 959.812755ms ago: executing program 0 (id=3950): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001180)={0x0, 0x4}, &(0x7f00000011c0)=0x8) 877.427374ms ago: executing program 7 (id=3951): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, 0x0) 773.532687ms ago: executing program 0 (id=3952): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}]}]}], {0x14}}, 0x8c}}, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000080)={0x0, 0x40, 0x14, '\x00', &(0x7f0000000040)=0x1}) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000100)={0x12, 0x4, &(0x7f00000000c0)="550d24cf5b342295be7666ec18e3da23ad2ebad51abfceebeb4f", {0x3ff, 0x401, 0x33424752, 0x6, 0x80000000, 0x9, 0xa, 0x6}}) 728.657881ms ago: executing program 7 (id=3953): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x5a) sendmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000200)="3e14248f50e08c21257e458e4976912209875dca761931f15dcf025186f5cededba499c252e973a6c7c0", 0x2a}, {&(0x7f00000002c0)="32259abb475edf2a5bb9400aad5973074c79e38221cf6c11cb9964f5e2f5d7eba0fbd71153d379", 0x27}, {&(0x7f0000000600)="9b09ad799c2878dd53f16afe703161cab997f5a79d62973516e48044d4fc18704cd170d7aab8d98335f0d6ff9697fe231e6a21a1b982dd0837fd28948c6c2f32335bcc81be2b37cff5312c59b08d12a31b", 0x51}, {&(0x7f0000000680)="f64c8db55d4f92a71708c6fe3ce82a09deb74d46771c21c461ba1885fe3ecd9bb9d97b960234084057d7744d754b6d655649147c3ba970b7da8c96483c8c0cba4805c7764f1952e638a1284b06801ffa0dd73c6a9292058393f007d2f7ae9f51b3b0cb3236b63a941112b2d9628e0080e32f03dd5b76c559", 0x78}, {&(0x7f0000000700)="18dee82661ca68b8beab654639bb48adc3bd1da78c078255a3c61b1bf91bd4396de68899667758ecd887f64135289d06695f7cb9374223", 0x37}, {&(0x7f0000000a40)="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", 0xca1}], 0x6}}], 0x1, 0x8000) 701.553134ms ago: executing program 4 (id=3954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000580), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x9}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002140)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000440)}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x2324e5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) socket$inet_udp(0x2, 0x2, 0x0) 635.712399ms ago: executing program 2 (id=3955): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x8, "7b807005005a4fc30ce0e60542e84423b48e277209f789e408b565e81a71a796"}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) socket$inet6(0x10, 0x3, 0x5) 512.607338ms ago: executing program 0 (id=3956): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair(0x6, 0x4, 0x4, &(0x7f0000000240)) dup(r0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/134, 0x86}, {0x0}], 0x2, 0x3f, 0x83) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) fsopen(&(0x7f0000000100)='qnx6\x00', 0x1) 223.563533ms ago: executing program 2 (id=3957): socketpair$nbd(0x1, 0x1, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f51, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80, 0x122) 84.406598ms ago: executing program 0 (id=3958): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010058}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/22, 0x16}], 0x2}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 2 (id=3959): madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) kernel console output (not intermixed with test programs): ce= 0.00 [ 1536.661173][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.690809][ T36] usb 1-1: config 0 descriptor?? [ 1536.726977][ T36] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1536.793293][T19334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.895254][T19334] 8021q: adding VLAN 0 to HW filter on device team0 [ 1536.896395][T18985] veth0_vlan: entered promiscuous mode [ 1536.930494][ T3211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.930648][ T3211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1537.157510][T18985] veth1_vlan: entered promiscuous mode [ 1537.162632][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.162757][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1537.697902][T18985] veth0_macvtap: entered promiscuous mode [ 1537.747895][T18985] veth1_macvtap: entered promiscuous mode [ 1537.915967][T18985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1537.944020][T18985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.134724][ T3211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.154721][T17284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.162452][ T3211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.162767][ T3211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.405887][T17285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.405910][T17285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.510070][ T5738] usb 1-1: USB disconnect, device number 22 [ 1540.080655][T19727] kvm: kvm [19725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7930 [ 1540.132011][T19727] kvm: kvm [19725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100006060 [ 1540.319056][T13205] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1540.386633][T13205] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1540.390787][T13205] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1540.401411][T13205] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1540.425208][T13205] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1541.931232][T19447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1541.988138][T19447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1542.028584][T19334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.045158][T19447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1542.162214][T19447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1542.448183][T19447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1542.567893][T19447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1542.746772][T13205] Bluetooth: hci0: command tx timeout [ 1543.025023][T19447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1543.072129][T19447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1543.350975][T19792] kvm: kvm [19791]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7930 [ 1543.357514][T19792] kvm: kvm [19791]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100006060 [ 1544.382499][ T1164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.824610][T13205] Bluetooth: hci0: command tx timeout [ 1545.193719][ T1164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.833679][ T1164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.955745][T19334] veth0_vlan: entered promiscuous mode [ 1546.461352][ T1164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.526489][T19334] veth1_vlan: entered promiscuous mode [ 1546.880847][T19737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.880992][T19737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.881245][T19737] bridge_slave_0: entered allmulticast mode [ 1546.904282][T13205] Bluetooth: hci0: command tx timeout [ 1546.916506][T19737] bridge_slave_0: entered promiscuous mode [ 1546.960429][T19737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.960647][T19737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.960912][T19737] bridge_slave_1: entered allmulticast mode [ 1546.981524][T19737] bridge_slave_1: entered promiscuous mode [ 1547.048722][T19447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.123581][T19737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.166241][T19737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.203691][T19334] veth0_macvtap: entered promiscuous mode [ 1547.372233][T19737] team0: Port device team_slave_0 added [ 1547.440456][T19737] team0: Port device team_slave_1 added [ 1547.441853][T19334] veth1_macvtap: entered promiscuous mode [ 1547.486867][T19447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1547.550291][T19737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.550304][T19737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1547.550320][T19737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.599640][T19737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.599652][T19737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1547.599668][T19737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.920847][ T1164] bridge_slave_1: left allmulticast mode [ 1547.920889][ T1164] bridge_slave_1: left promiscuous mode [ 1547.921222][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.005413][ T1164] bridge_slave_0: left allmulticast mode [ 1548.005440][ T1164] bridge_slave_0: left promiscuous mode [ 1548.005625][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.323478][T19832] kvm: kvm [19831]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffef0000f6ed [ 1548.323553][T19832] kvm: kvm [19831]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1548.333540][T19832] kvm: kvm [19831]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff650000766d [ 1548.333631][T19832] kvm: kvm [19831]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1548.343125][T19832] kvm: kvm [19831]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff650000f6ed [ 1548.343215][T19832] kvm: kvm [19831]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1548.352863][T19832] kvm: kvm [19831]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff650000766d [ 1548.352953][T19832] kvm: kvm [19831]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1548.362591][T19832] kvm: kvm [19831]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff650000f6ed [ 1548.362680][T19832] kvm: kvm [19831]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1549.014685][T13205] Bluetooth: hci0: command tx timeout [ 1549.597710][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.656778][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.697776][ T1164] bond0 (unregistering): Released all slaves [ 1549.877877][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.878035][T17285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.408212][T19830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1550.620255][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.620434][T17285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.791451][T19737] hsr_slave_0: entered promiscuous mode [ 1550.793298][T19737] hsr_slave_1: entered promiscuous mode [ 1550.804956][T19737] debugfs: 'hsr0' already exists in 'hsr' [ 1550.804984][T19737] Cannot create hsr debugfs directory [ 1550.843779][T19334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.079822][T19842] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2987'. [ 1551.130264][T19334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.497776][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.497855][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.611696][ T7502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.668880][ T7502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.980294][ T7502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.015300][ T7502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.505367][ T1164] hsr_slave_0: left promiscuous mode [ 1552.544270][ T1164] hsr_slave_1: left promiscuous mode [ 1552.545247][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.545268][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.585374][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1552.585405][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.665999][ T1164] veth1_macvtap: left promiscuous mode [ 1552.666069][ T1164] veth0_macvtap: left promiscuous mode [ 1552.666217][ T1164] veth1_vlan: left promiscuous mode [ 1552.666358][ T1164] veth0_vlan: left promiscuous mode [ 1553.506548][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 1553.564995][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 1556.061622][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1556.271484][ T3211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.271506][ T3211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.746019][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.746045][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.041509][T19905] fuse: Unknown parameter '0x0000000000000003' [ 1558.467777][T19447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1558.581304][T19927] syzkaller1: entered promiscuous mode [ 1558.581334][T19927] syzkaller1: entered allmulticast mode [ 1559.010653][T19938] netlink: 'syz.4.3013': attribute type 1 has an invalid length. [ 1559.053460][T19939] fuse: Unknown parameter '0x0000000000000003' [ 1559.550563][T19447] veth0_vlan: entered promiscuous mode [ 1559.725338][T19447] veth1_vlan: entered promiscuous mode [ 1560.790175][T19447] veth0_macvtap: entered promiscuous mode [ 1560.831348][T19447] veth1_macvtap: entered promiscuous mode [ 1561.005139][T19737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1561.099108][T19737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1561.145576][T19737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1561.168752][T19969] fuse: Unknown parameter '0x0000000000000003' [ 1561.189506][T19737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1561.202567][T19737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1561.232314][T19737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1561.256167][T19737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1561.308163][T19737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1561.325587][T19447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1561.427331][T19447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1561.507730][T17285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.594562][T17285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.721414][T17284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.761877][T17284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.331208][T19979] syzkaller1: entered promiscuous mode [ 1562.331228][T19979] syzkaller1: entered allmulticast mode [ 1562.464144][T19984] netlink: 'syz.7.3024': attribute type 1 has an invalid length. [ 1563.425955][T19984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1563.607851][T19985] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 1564.585623][ T3211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1564.585647][ T3211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.159503][T20013] netlink: 'syz.4.3034': attribute type 1 has an invalid length. [ 1565.375999][ T7502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.376025][ T7502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.394421][T19737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1565.782830][T19737] 8021q: adding VLAN 0 to HW filter on device team0 [ 1565.820857][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.821130][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.899099][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.899253][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1568.024913][T20057] netlink: 'syz.7.3043': attribute type 1 has an invalid length. [ 1568.154159][T20057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1569.325184][T20059] bond2: (slave syz_tun): Releasing backup interface [ 1569.454555][T20059] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 1570.148471][T20077] kvm_pr_unimpl_wrmsr: 128 callbacks suppressed [ 1570.148497][T20077] kvm: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1000076ee [ 1570.152587][T20077] kvm: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10000f86e [ 1570.168858][T20077] kvm: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xf86d [ 1570.168957][T20077] kvm: kvm [20076]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1570.169552][T20077] kvm: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x76ed [ 1570.171753][T20077] kvm: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xf86d [ 1570.182432][T20077] kvm: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x76ed [ 1570.182524][T20077] kvm: kvm [20076]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1570.191612][T20077] kvm_intel: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf86d [ 1570.214300][T20077] kvm: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x76ed [ 1570.219476][T20077] kvm: kvm [20076]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1570.238541][T20077] kvm_intel: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf86d [ 1570.252516][T20077] kvm_intel: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf86d [ 1570.329968][T20077] kvm_intel: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf86d [ 1570.353537][T20077] kvm_intel: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf86d [ 1570.360830][T20077] kvm_intel: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf86d [ 1570.423224][T20077] kvm_intel: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf86d [ 1570.480151][T20077] kvm_intel: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf86d [ 1570.511374][T20077] kvm_intel: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf86d [ 1570.519243][T20077] kvm_intel: kvm [20076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf86d [ 1570.717876][T19737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1570.955248][T19737] veth0_vlan: entered promiscuous mode [ 1570.976556][T19737] veth1_vlan: entered promiscuous mode [ 1571.040890][T19737] veth0_macvtap: entered promiscuous mode [ 1571.070555][T19737] veth1_macvtap: entered promiscuous mode [ 1571.132761][T19737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1571.168057][T19737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1571.200304][ T7502] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.203075][ T7502] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.226621][ T7502] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.227418][ T7502] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.388744][T17285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.388770][T17285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.486800][ T3689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.486825][ T3689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1573.583787][T20116] binder: BINDER_SET_CONTEXT_MGR already set [ 1573.583805][T20116] binder: 20114:20116 ioctl 4018620d 200000004a80 returned -16 [ 1574.178829][T20132] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1574.854232][T13861] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1575.007015][T13861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.007079][T13861] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1575.007107][T13861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1575.007135][T13861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1575.007164][T13861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1575.007191][T13861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1575.007214][T13861] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1575.010173][T13861] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1575.010201][T13861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.010221][T13861] usb 3-1: Product: syz [ 1575.010235][T13861] usb 3-1: Manufacturer: syz [ 1575.010249][T13861] usb 3-1: SerialNumber: syz [ 1575.139625][T13861] usb 3-1: config 0 descriptor?? [ 1575.140927][T20141] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1575.166455][T11984] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1575.167584][T13861] ati_remote 3-1:0.0: Initializing ati_remote hardware failed. [ 1575.167862][T13861] ati_remote 3-1:0.0: probe with driver ati_remote failed with error -5 [ 1575.349792][T11984] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1575.349826][T11984] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.349842][T11984] usb 2-1: config 8 has no interface number 0 [ 1575.349870][T11984] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1575.349885][T11984] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 1575.349901][T11984] usb 2-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1575.349916][T11984] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1575.349936][T11984] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1575.349950][T11984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.391997][ T1007] usb 3-1: USB disconnect, device number 7 [ 1575.489080][T20153] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1575.784888][T11984] usb 2-1: string descriptor 0 read error: -71 [ 1575.792331][T11984] ir_toy 2-1:8.177: required endpoints not found [ 1575.929687][T11984] usb 2-1: USB disconnect, device number 3 [ 1575.931984][T20116] syz.7.3057 (20116): drop_caches: 2 [ 1576.540495][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1576.540518][ T37] audit: type=1326 audit(1778373090.241:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.0.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1576.540576][ T37] audit: type=1326 audit(1778373090.241:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.0.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1576.540618][ T37] audit: type=1326 audit(1778373090.251:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.0.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1576.540663][ T37] audit: type=1326 audit(1778373090.251:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.0.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1576.540711][ T37] audit: type=1326 audit(1778373090.251:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.0.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1576.540759][ T37] audit: type=1326 audit(1778373090.251:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.0.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1576.540806][ T37] audit: type=1326 audit(1778373090.251:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.0.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1576.540861][ T37] audit: type=1326 audit(1778373090.251:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.0.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1576.540907][ T37] audit: type=1326 audit(1778373090.251:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.0.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1576.540953][ T37] audit: type=1326 audit(1778373090.251:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.0.3075" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1580.680276][T20215] syz.2.3084 (20215): drop_caches: 2 [ 1581.712694][T20283] netlink: 'syz.2.3103': attribute type 12 has an invalid length. [ 1581.712717][T20283] netlink: 'syz.2.3103': attribute type 29 has an invalid length. [ 1581.712733][T20283] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3103'. [ 1582.411175][T20295] netlink: 'syz.2.3106': attribute type 1 has an invalid length. [ 1583.835177][T20328] netlink: 'syz.1.3115': attribute type 12 has an invalid length. [ 1583.835204][T20328] netlink: 'syz.1.3115': attribute type 29 has an invalid length. [ 1583.835219][T20328] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3115'. [ 1584.816905][T20342] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3117'. [ 1588.068490][T20303] syz.7.3107 (20303): drop_caches: 2 [ 1591.084254][ T5706] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1591.238108][ T5706] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1591.244704][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1591.244739][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1591.244763][ T5706] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1591.244810][ T5706] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1591.244834][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.358927][ T5706] usb 1-1: config 0 descriptor?? [ 1592.796498][ T5706] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1593.038457][T20429] syz.2.3144 (20429): drop_caches: 2 [ 1594.043544][ T5909] usb 1-1: USB disconnect, device number 23 [ 1596.489410][T20493] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.3160'. [ 1596.495844][T20493] openvswitch: netlink: Key type 8270 is out of range max 32 [ 1597.554317][T14124] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1597.758877][T14124] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1597.758915][T14124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1597.758945][T14124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1597.758968][T14124] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1597.759013][T14124] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1597.759037][T14124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.899974][T14124] usb 3-1: config 0 descriptor?? [ 1598.666111][T20511] syz.7.3166 (20511): drop_caches: 2 [ 1598.737783][T14124] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1599.082488][T20518] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1599.253138][ T36] usb 3-1: USB disconnect, device number 8 [ 1599.434253][ T5734] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1599.594272][ T5734] usb 1-1: Using ep0 maxpacket: 8 [ 1599.600509][ T5734] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.600571][ T5734] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1599.600616][ T5734] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1599.600642][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.685043][ T5734] usbtmc 1-1:16.0: bulk endpoints not found [ 1600.307079][T20549] syz.2.3182 (20549): drop_caches: 2 [ 1600.312006][T20549] syz.2.3182 (20549): drop_caches: 2 [ 1600.394348][ T5734] usb 1-1: USB disconnect, device number 24 [ 1601.378540][T20580] syz.2.3194 (20580): drop_caches: 2 [ 1601.414253][ T36] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1601.503629][T20580] syz.2.3194 (20580): drop_caches: 2 [ 1601.572533][ T36] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1601.572572][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1601.572600][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1601.572623][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1601.572671][ T36] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1601.572696][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.651723][ T36] usb 1-1: config 0 descriptor?? [ 1602.246232][T20591] fuse: Bad value for 'group_id' [ 1602.246254][T20591] fuse: Bad value for 'group_id' [ 1602.274703][ T5734] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1602.414116][ T36] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1602.439720][ T5734] usb 2-1: Using ep0 maxpacket: 32 [ 1602.470160][ T5734] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1602.470181][ T5734] usb 2-1: config 0 has no interface number 0 [ 1602.470213][ T5734] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1602.545547][ T5734] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1602.545581][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.545602][ T5734] usb 2-1: Product: syz [ 1602.545617][ T5734] usb 2-1: Manufacturer: syz [ 1602.545633][ T5734] usb 2-1: SerialNumber: syz [ 1602.604345][ T5734] usb 2-1: config 0 descriptor?? [ 1602.623627][T20583] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1602.846585][T20600] netlink: 'syz.2.3201': attribute type 1 has an invalid length. [ 1603.137252][ T8042] usb 1-1: USB disconnect, device number 25 [ 1603.138351][T20582] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1603.324809][T20603] fido_id[20603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1603.354114][T20600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1603.575129][ T5734] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1603.575426][ T5734] asix 2-1:0.188: probe with driver asix failed with error -61 [ 1603.790751][T20609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3203'. [ 1605.785898][T20629] fuse: Bad value for 'group_id' [ 1605.785921][T20629] fuse: Bad value for 'group_id' [ 1606.431655][T20640] netlink: 'syz.4.3215': attribute type 1 has an invalid length. [ 1606.709156][T20647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3216'. [ 1606.814447][T20640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1608.005643][ T8042] usb 2-1: USB disconnect, device number 4 [ 1608.442138][T20665] fuse: Bad value for 'group_id' [ 1608.442161][T20665] fuse: Bad value for 'group_id' [ 1609.146987][ T8042] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1609.308735][ T8042] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1609.308774][ T8042] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1609.308803][ T8042] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1609.308827][ T8042] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1609.308875][ T8042] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1609.308899][ T8042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.358471][ T8042] usb 1-1: config 0 descriptor?? [ 1610.701587][T20695] fuse: Bad value for 'fd' [ 1610.913187][ T8042] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1611.444597][ T5909] usb 1-1: USB disconnect, device number 26 [ 1612.918902][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.918982][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.954264][ T5738] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1618.107090][ T5738] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 1618.107123][ T5738] usb 5-1: config 8 has no interface number 0 [ 1618.107170][ T5738] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1618.107200][ T5738] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 1618.107230][ T5738] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1618.107253][ T5738] usb 5-1: config 8 interface 177 has no altsetting 0 [ 1618.107291][ T5738] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1618.107334][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.210884][T20784] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1618.573232][ T5738] usb 5-1: string descriptor 0 read error: -71 [ 1618.647565][ T5738] ir_toy 5-1:8.177: required endpoints not found [ 1618.709103][ T5738] usb 5-1: USB disconnect, device number 2 [ 1618.814255][ T5706] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1618.954402][ T5706] usb 3-1: device descriptor read/64, error -71 [ 1619.214266][ T5706] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1619.394279][ T5706] usb 3-1: device descriptor read/64, error -71 [ 1619.658052][ T5706] usb usb3-port1: attempt power cycle [ 1620.924236][ T5706] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1620.945456][ T5706] usb 3-1: device descriptor read/8, error -71 [ 1621.187895][ T5706] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1621.208330][ T5706] usb 3-1: device descriptor read/8, error -71 [ 1621.235254][ T8042] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1621.314901][ T5706] usb usb3-port1: unable to enumerate USB device [ 1621.424304][ T8042] usb 5-1: Using ep0 maxpacket: 32 [ 1621.438240][ T8042] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.483280][ T8042] usb 5-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1621.530460][ T8042] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1621.530496][ T8042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.530515][ T8042] usb 5-1: Product: syz [ 1621.530531][ T8042] usb 5-1: Manufacturer: syz [ 1621.530545][ T8042] usb 5-1: SerialNumber: syz [ 1621.616285][ T8042] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1621.616406][ T8042] imon 5-1:155.0: unable to initialize intf0, err -19 [ 1621.616427][ T8042] imon:imon_probe: failed to initialize context! [ 1621.616439][ T8042] imon 5-1:155.0: unable to register, err -19 [ 1622.074295][ T5738] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1622.238757][ T5738] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1622.238791][ T5738] usb 1-1: config 8 has no interface number 0 [ 1622.238841][ T5738] usb 1-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1622.238869][ T5738] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 1622.238898][ T5738] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1622.238920][ T5738] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1622.238969][ T5738] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1622.238994][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.338255][T20845] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1622.561811][ T5738] usb 1-1: string descriptor 0 read error: -71 [ 1622.576444][ T5738] ir_toy 1-1:8.177: required endpoints not found [ 1622.615497][ T5738] usb 1-1: USB disconnect, device number 27 [ 1623.976016][T20870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3287'. [ 1624.003816][ T8042] usb 5-1: USB disconnect, device number 3 [ 1625.544455][ T5706] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1625.701401][ T5706] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1625.701436][ T5706] usb 2-1: config 8 has no interface number 0 [ 1625.701485][ T5706] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1625.701513][ T5706] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 1625.701542][ T5706] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1625.701565][ T5706] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1625.701602][ T5706] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1625.701626][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.821745][T20892] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1626.078028][ T5706] usb 2-1: string descriptor 0 read error: -71 [ 1626.091965][ T5706] ir_toy 2-1:8.177: required endpoints not found [ 1626.115861][ T5706] usb 2-1: USB disconnect, device number 5 [ 1626.205777][ T8042] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1626.368876][ T8042] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1626.368914][ T8042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1626.368940][ T8042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1626.368963][ T8042] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1626.369008][ T8042] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1626.369031][ T8042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.482093][ T8042] usb 5-1: config 0 descriptor?? [ 1626.716054][ T5706] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1626.914430][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 1626.935645][ T5706] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.935710][ T5706] usb 1-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1626.946374][ T5706] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1626.946403][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.946423][ T5706] usb 1-1: Product: syz [ 1626.946436][ T5706] usb 1-1: Manufacturer: syz [ 1626.946449][ T5706] usb 1-1: SerialNumber: syz [ 1627.016004][ T8042] usbhid 5-1:0.0: can't add hid device: -71 [ 1627.016107][ T8042] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1627.018725][ T8042] usb 5-1: USB disconnect, device number 4 [ 1627.208981][T13861] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1627.212945][ T8956] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1627.295782][ T8956] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1627.456227][T13861] usb 3-1: config 0 has no interfaces? [ 1627.458695][T13861] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1627.458727][T13861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1627.458753][T13861] usb 3-1: SerialNumber: syz [ 1627.476569][ T5706] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1627.476667][ T5706] imon 1-1:155.0: unable to initialize intf0, err -19 [ 1627.476685][ T5706] imon:imon_probe: failed to initialize context! [ 1627.476696][ T5706] imon 1-1:155.0: unable to register, err -19 [ 1627.649618][T13861] usb 3-1: config 0 descriptor?? [ 1628.121460][ T5706] usb 3-1: USB disconnect, device number 13 [ 1628.711487][T20929] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1628.957724][ T8042] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1629.115317][ T8042] usb 5-1: no configurations [ 1629.115363][ T8042] usb 5-1: can't read configurations, error -22 [ 1629.294424][ T8042] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1629.460023][ T8042] usb 5-1: no configurations [ 1629.460038][ T8042] usb 5-1: can't read configurations, error -22 [ 1629.462584][ T8042] usb usb5-port1: attempt power cycle [ 1629.529381][ T8956] usb 1-1: USB disconnect, device number 28 [ 1629.995412][ T8042] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1630.033844][ T8042] usb 5-1: no configurations [ 1630.033865][ T8042] usb 5-1: can't read configurations, error -22 [ 1630.174360][ T8042] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1630.229777][ T8042] usb 5-1: no configurations [ 1630.229811][ T8042] usb 5-1: can't read configurations, error -22 [ 1630.234991][ T8042] usb usb5-port1: unable to enumerate USB device [ 1630.278274][T20961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1631.542628][T20963] syz.1.3318 (20963) used greatest stack depth: 18120 bytes left [ 1631.593172][T20968] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1632.225695][ T5706] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1632.374947][ T5706] usb 5-1: Using ep0 maxpacket: 32 [ 1632.381880][ T5706] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.381952][ T5706] usb 5-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1632.431178][ T5706] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1632.431211][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.431233][ T5706] usb 5-1: Product: syz [ 1632.431248][ T5706] usb 5-1: Manufacturer: syz [ 1632.431263][ T5706] usb 5-1: SerialNumber: syz [ 1632.493347][ T5706] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1632.493543][ T5706] imon 5-1:155.0: unable to initialize intf0, err -19 [ 1632.493565][ T5706] imon:imon_probe: failed to initialize context! [ 1632.493578][ T5706] imon 5-1:155.0: unable to register, err -19 [ 1633.274282][ T5706] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1633.450115][ T5706] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1633.450154][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1633.450181][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1633.450205][ T5706] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1633.450252][ T5706] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1633.450277][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.537778][ T5706] usb 1-1: config 0 descriptor?? [ 1633.876258][T21014] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1634.131067][ T5706] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1634.654245][T20073] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1634.772282][ T8042] usb 1-1: USB disconnect, device number 29 [ 1634.807510][T20073] usb 2-1: config 0 has no interfaces? [ 1634.852503][T20073] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1634.852537][T20073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.852557][T20073] usb 2-1: Product: syz [ 1634.852573][T20073] usb 2-1: Manufacturer: syz [ 1634.852586][T20073] usb 2-1: SerialNumber: syz [ 1634.893046][T20073] usb 2-1: config 0 descriptor?? [ 1634.946104][T20073] usb 5-1: USB disconnect, device number 9 [ 1634.964238][T13861] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1635.117818][T13861] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1635.117863][T13861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1635.117891][T13861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1635.117914][T13861] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1635.117959][T13861] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1635.117983][T13861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.122852][ T8042] usb 2-1: USB disconnect, device number 6 [ 1635.229415][T13861] usb 3-1: config 0 descriptor?? [ 1635.469816][T13205] Bluetooth: hci5: command 0x0406 tx timeout [ 1635.762717][T13861] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1635.794250][ T5706] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1635.863867][T21030] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1635.948196][ T5706] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1635.948229][ T5706] usb 1-1: config 8 has no interface number 0 [ 1635.948278][ T5706] usb 1-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1635.948307][ T5706] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 1635.948335][ T5706] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1635.948358][ T5706] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1635.948395][ T5706] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1635.948420][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.164683][T21026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1636.594236][ T8042] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1636.594521][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1636.604893][T21031] input: syz0 as /devices/virtual/input/input24 [ 1636.734488][ T8042] usb 5-1: device descriptor read/64, error -32 [ 1636.862520][ T5706] usb 1-1: string descriptor 0 read error: -71 [ 1636.957900][ T5706] ir_toy 1-1:8.177: required endpoints not found [ 1636.974252][ T8042] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1637.060997][ T5706] usb 1-1: USB disconnect, device number 30 [ 1637.124444][ T8042] usb 5-1: Using ep0 maxpacket: 16 [ 1637.126988][ T8042] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.127046][ T8042] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x26, changing to 0x6 [ 1637.127075][ T8042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1637.127148][ T8042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1637.127171][ T8042] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1637.129239][ T8042] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1637.129267][ T8042] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1637.129288][ T8042] usb 5-1: Manufacturer: syz [ 1637.268756][ T8042] usb 5-1: config 0 descriptor?? [ 1638.702922][ T5734] usb 5-1: USB disconnect, device number 11 [ 1638.744322][T14124] usb 3-1: USB disconnect, device number 14 [ 1639.706431][ T8042] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1639.880088][ T8042] usb 3-1: Using ep0 maxpacket: 32 [ 1639.882859][ T8042] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.882919][ T8042] usb 3-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1639.931571][ T8042] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1639.931605][ T8042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.931626][ T8042] usb 3-1: Product: syz [ 1639.931641][ T8042] usb 3-1: Manufacturer: syz [ 1639.931655][ T8042] usb 3-1: SerialNumber: syz [ 1639.969465][T14124] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1640.030113][ T8042] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1640.030227][ T8042] imon 3-1:155.0: unable to initialize intf0, err -19 [ 1640.030246][ T8042] imon:imon_probe: failed to initialize context! [ 1640.030259][ T8042] imon 3-1:155.0: unable to register, err -19 [ 1640.101305][T14124] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1640.216069][T21073] fido_id[21073]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1640.364316][T13861] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1640.399085][T21075] fuse: Unknown parameter '0x0000000000000003' [ 1640.530324][T13861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.530387][T13861] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1640.530416][T13861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1640.530441][T13861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1640.530469][T13861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1640.530494][T13861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1640.530515][T13861] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1640.584654][T21011] Bluetooth: hci2: command 0x0406 tx timeout [ 1640.689568][T13861] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1640.689601][T13861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.689621][T13861] usb 5-1: Product: syz [ 1640.689636][T13861] usb 5-1: Manufacturer: syz [ 1640.689650][T13861] usb 5-1: SerialNumber: syz [ 1640.719309][T13861] usb 5-1: config 0 descriptor?? [ 1640.722912][T21067] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1640.733861][T13861] ati_remote 5-1:0.0: Initializing ati_remote hardware failed. [ 1640.737934][T13861] ati_remote 5-1:0.0: probe with driver ati_remote failed with error -5 [ 1640.977740][T14124] usb 5-1: USB disconnect, device number 12 [ 1641.323022][T21070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.355332][T21070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.018283][T21070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1642.030199][T21070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1642.291869][T21089] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1642.376222][ T8042] usb 3-1: USB disconnect, device number 15 [ 1642.834231][ T36] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1642.987540][ T36] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1642.987578][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1642.987606][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1642.987629][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1642.987674][ T36] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1642.987698][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.002821][ T36] usb 1-1: config 0 descriptor?? [ 1643.104624][ T5909] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1643.257162][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.257200][ T5909] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1643.257216][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1643.257281][ T5909] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1643.257296][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.277893][ T5909] usb 3-1: config 0 descriptor?? [ 1643.388806][ T5909] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1643.548039][ T8042] usb 3-1: USB disconnect, device number 16 [ 1643.551433][ T36] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1644.311449][ T5734] usb 1-1: USB disconnect, device number 31 [ 1644.349585][T21099] netlink: 'syz.4.3363': attribute type 12 has an invalid length. [ 1644.349614][T21099] netlink: 'syz.4.3363': attribute type 29 has an invalid length. [ 1644.349630][T21099] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3363'. [ 1644.349884][T13724] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.351229][T13724] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.351403][T13724] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.351443][T13724] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.091448][ T36] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1645.234391][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 1645.239127][ T36] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.239170][ T36] usb 5-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1645.242192][ T36] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1645.243066][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.243172][ T36] usb 5-1: Product: syz [ 1645.243189][ T36] usb 5-1: Manufacturer: syz [ 1645.243202][ T36] usb 5-1: SerialNumber: syz [ 1645.277841][ T36] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1645.277940][ T36] imon 5-1:155.0: unable to initialize intf0, err -19 [ 1645.277956][ T36] imon:imon_probe: failed to initialize context! [ 1645.277976][ T36] imon 5-1:155.0: unable to register, err -19 [ 1645.603284][T21124] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3368'. [ 1645.734252][T11984] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1645.887046][T11984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1645.887105][T11984] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1645.887131][T11984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.931804][T11984] usb 2-1: config 0 descriptor?? [ 1646.160062][T11984] usbhid 2-1:0.0: can't add hid device: -71 [ 1646.160160][T11984] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1646.183178][T11984] usb 2-1: USB disconnect, device number 7 [ 1646.744414][T11984] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1646.896620][T11984] usb 2-1: Using ep0 maxpacket: 32 [ 1646.911870][T11984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.911928][T11984] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1646.911953][T11984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.958678][T11984] usb 2-1: config 0 descriptor?? [ 1646.987273][T11984] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1647.024900][T11984] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1647.407582][T11984] usb 2-1: USB disconnect, device number 8 [ 1647.407919][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 1647.517319][T11984] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1648.925317][ T8042] usb 5-1: USB disconnect, device number 13 [ 1649.719196][T21191] fuse: Unknown parameter 'group_id00000000000000000000' [ 1651.734265][ T5734] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1651.906091][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1651.906128][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1651.906148][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1651.906162][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1651.906188][ T5734] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1651.906202][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.931009][T21175] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3389'. [ 1651.944619][ T36] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1652.042233][ T5734] usb 3-1: config 0 descriptor?? [ 1652.124328][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 1652.126987][ T36] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.127037][ T36] usb 5-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1652.130260][ T36] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1652.130279][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.130291][ T36] usb 5-1: Product: syz [ 1652.130301][ T36] usb 5-1: Manufacturer: syz [ 1652.130309][ T36] usb 5-1: SerialNumber: syz [ 1652.346498][ T36] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1652.346561][ T36] imon 5-1:155.0: unable to initialize intf0, err -19 [ 1652.346617][ T36] imon:imon_probe: failed to initialize context! [ 1652.346626][ T36] imon 5-1:155.0: unable to register, err -19 [ 1652.528116][ T5734] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1652.528141][ T5734] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1652.528156][ T5734] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1652.528170][ T5734] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1652.528185][ T5734] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1652.528199][ T5734] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1652.528214][ T5734] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1652.528229][ T5734] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1652.528243][ T5734] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1652.528258][ T5734] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1652.809827][ T5734] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1652.936378][ T5734] usb 3-1: USB disconnect, device number 17 [ 1653.020564][T21214] fido_id[21214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1655.336096][ T5734] usb 5-1: USB disconnect, device number 14 [ 1656.882692][T21247] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1658.168806][T21252] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3414'. [ 1658.585328][T11984] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1658.734244][T11984] usb 5-1: Using ep0 maxpacket: 32 [ 1658.736852][T11984] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.736912][T11984] usb 5-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1658.780462][T11984] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1658.780497][T11984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.780519][T11984] usb 5-1: Product: syz [ 1658.780534][T11984] usb 5-1: Manufacturer: syz [ 1658.780550][T11984] usb 5-1: SerialNumber: syz [ 1658.870245][T11984] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1658.870306][T11984] imon 5-1:155.0: unable to initialize intf0, err -19 [ 1658.870318][T11984] imon:imon_probe: failed to initialize context! [ 1658.870325][T11984] imon 5-1:155.0: unable to register, err -19 [ 1661.347778][ T8042] usb 5-1: USB disconnect, device number 15 [ 1664.716468][ T8042] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1664.844298][ T8042] usb 3-1: device descriptor read/64, error -71 [ 1664.953319][T21308] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1665.096100][ T8042] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1665.225587][ T8042] usb 3-1: device descriptor read/64, error -71 [ 1665.338038][ T8042] usb usb3-port1: attempt power cycle [ 1665.674241][ T8042] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1665.679452][T21334] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1665.707021][ T8042] usb 3-1: device descriptor read/8, error -71 [ 1665.944575][ T8042] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1665.965751][ T8042] usb 3-1: device descriptor read/8, error -71 [ 1666.078901][ T8042] usb usb3-port1: unable to enumerate USB device [ 1666.344658][T21011] Bluetooth: hci0: command 0x0406 tx timeout [ 1668.609724][T21361] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1669.104872][T21356] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3453'. [ 1670.444239][ T8956] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1670.594411][ T8956] usb 3-1: device descriptor read/64, error -71 [ 1670.834211][ T8956] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1670.964634][ T8956] usb 3-1: device descriptor read/64, error -71 [ 1671.078414][ T8956] usb usb3-port1: attempt power cycle [ 1671.424280][ T8956] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1671.444998][ T8956] usb 3-1: device descriptor read/8, error -71 [ 1671.684241][ T8956] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1671.708302][ T8956] usb 3-1: device descriptor read/8, error -71 [ 1671.816530][ T8956] usb usb3-port1: unable to enumerate USB device [ 1673.322048][T21415] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1674.346851][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.346933][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.734203][T14124] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1676.750461][T21456] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1676.895696][T14124] usb 1-1: Using ep0 maxpacket: 8 [ 1676.939140][T14124] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.939179][T14124] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1676.939208][T14124] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1676.939222][T14124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.016104][T14124] usbtmc 1-1:16.0: bulk endpoints not found [ 1677.753737][T14124] usb 1-1: USB disconnect, device number 32 [ 1677.924737][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804c530400: rx timeout, send abort [ 1677.930448][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804c530400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1681.078384][T21486] loop5: detected capacity change from 0 to 7 [ 1681.453432][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1681.453555][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.655400][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1681.655441][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.663775][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1681.663801][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.664002][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1681.664018][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.665867][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1681.665897][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.666184][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1681.666213][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.666398][T21486] ldm_validate_partition_table(): Disk read failed. [ 1681.666484][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1681.666511][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.666770][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1681.666797][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.727911][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1681.728025][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.833333][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1681.833387][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1681.863039][T21486] Dev loop5: unable to read RDB block 0 [ 1681.865381][T21495] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3501'. [ 1681.947436][T21486] loop5: unable to read partition table [ 1681.947728][T21486] loop5: partition table beyond EOD, truncated [ 1681.947771][T21486] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1681.996457][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 1681.996479][ T37] audit: type=1326 audit(1778373195.671:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21491 comm="syz.0.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1681.996517][ T37] audit: type=1326 audit(1778373195.711:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21491 comm="syz.0.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1682.109994][ T37] audit: type=1326 audit(1778373195.821:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21491 comm="syz.0.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1682.110053][ T37] audit: type=1326 audit(1778373195.821:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21491 comm="syz.0.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1682.110096][ T37] audit: type=1326 audit(1778373195.821:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21491 comm="syz.0.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1682.110140][ T37] audit: type=1326 audit(1778373195.821:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21491 comm="syz.0.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1682.110185][ T37] audit: type=1326 audit(1778373195.821:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21491 comm="syz.0.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1682.111059][ T37] audit: type=1326 audit(1778373195.821:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21491 comm="syz.0.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1682.111114][ T37] audit: type=1326 audit(1778373195.821:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21491 comm="syz.0.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1682.111157][ T37] audit: type=1326 audit(1778373195.821:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21491 comm="syz.0.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2e2cdd9 code=0x7ffc0000 [ 1682.124833][T21496] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1682.396646][T21493] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3501'. [ 1684.404986][ T5706] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1684.698253][ T5706] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1684.698285][ T5706] usb 1-1: config 8 has no interface number 0 [ 1684.698343][ T5706] usb 1-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1684.698369][ T5706] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 1684.698407][ T5706] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1684.698429][ T5706] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1684.698460][ T5706] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1684.698491][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.704236][ T5734] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1684.945996][T21532] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1684.979783][ T5734] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1684.979813][ T5734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1684.980681][ T5734] usb 5-1: config 0 has no interface number 0 [ 1685.189961][ T5734] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1685.190034][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.190047][ T5734] usb 5-1: Product: syz [ 1685.190056][ T5734] usb 5-1: Manufacturer: syz [ 1685.190065][ T5734] usb 5-1: SerialNumber: syz [ 1685.235911][ T5706] usb 1-1: string descriptor 0 read error: -71 [ 1685.343143][ T5734] usb 5-1: config 0 descriptor?? [ 1685.365176][ T5706] ir_toy 1-1:8.177: required endpoints not found [ 1685.460082][ T5734] uvcvideo 5-1:0.64: probe with driver uvcvideo failed with error -22 [ 1685.632175][ T5706] usb 1-1: USB disconnect, device number 33 [ 1686.360272][T21554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3512'. [ 1686.507633][T21554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1687.589631][T21559] input: syz0 as /devices/virtual/input/input27 [ 1687.920912][T21554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.767235][ T8042] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1688.767515][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1688.896400][ T8042] usb 2-1: device descriptor read/64, error -32 [ 1689.165250][ T8042] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1689.433782][ T8042] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.435693][ T8042] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1689.435725][ T8042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1689.435752][ T8042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1689.435781][ T8042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1689.435808][ T8042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1689.435832][ T8042] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1689.562923][ T8042] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1689.562945][ T8042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.562960][ T8042] usb 2-1: Product: syz [ 1689.562974][ T8042] usb 2-1: Manufacturer: syz [ 1689.562989][ T8042] usb 2-1: SerialNumber: syz [ 1689.695496][ T8042] usb 2-1: config 0 descriptor?? [ 1689.696667][T21569] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1689.996559][ T8042] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 1689.996913][ T8042] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 1690.044320][ T8042] usb 2-1: USB disconnect, device number 10 [ 1691.422440][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880610ffc00: rx timeout, send abort [ 1691.422659][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880610ffc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1691.689962][ T5734] usb 5-1: USB disconnect, device number 16 [ 1691.794546][ T5909] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1691.949242][ T5909] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1691.949274][ T5909] usb 1-1: config 0 has no interface number 0 [ 1691.949324][ T5909] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1691.949351][ T5909] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1691.949379][ T5909] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1691.953314][ T5909] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1691.953346][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1691.953366][ T5909] usb 1-1: Product: syz [ 1691.953380][ T5909] usb 1-1: SerialNumber: syz [ 1691.991349][ T5909] usb 1-1: config 0 descriptor?? [ 1692.015529][ T5909] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1692.268226][ T5909] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input29 [ 1692.309166][T21597] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1692.398983][T21599] binder: 21587:21599 ioctl c0306201 0 returned -14 [ 1694.786304][ T8956] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1694.791574][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1694.792183][T14124] usb 1-1: USB disconnect, device number 34 [ 1694.796756][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1694.796786][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1694.958594][ T8956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.958651][ T8956] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1694.958667][ T8956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1694.958683][ T8956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1694.958699][ T8956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1694.958714][ T8956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1694.958726][ T8956] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1694.960854][ T8956] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1694.960873][ T8956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.960885][ T8956] usb 2-1: Product: syz [ 1694.960893][ T8956] usb 2-1: Manufacturer: syz [ 1694.960905][ T8956] usb 2-1: SerialNumber: syz [ 1695.099666][T14124] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1695.116040][ T8956] usb 2-1: config 0 descriptor?? [ 1695.117577][T21615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1695.157937][ T8956] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 1695.163025][ T8956] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 1695.346530][ T8956] usb 2-1: USB disconnect, device number 11 [ 1695.715238][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803b1ec400: rx timeout, send abort [ 1695.715584][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803b1ec400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1696.774366][T14124] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1696.939805][T14124] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1696.939842][T14124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1696.939869][T14124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1696.939893][T14124] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1696.939938][T14124] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1696.939962][T14124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.025684][T14124] usb 1-1: config 0 descriptor?? [ 1697.475848][T14124] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1697.475889][T14124] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1697.475917][T14124] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1697.475943][T14124] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1697.475971][T14124] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1697.662970][T14124] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1697.750347][T14124] usb 1-1: USB disconnect, device number 35 [ 1698.076471][T21666] fido_id[21666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1698.244263][ T5706] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1698.397544][ T5706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.397703][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1698.397735][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1698.397764][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1698.397793][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1698.397818][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1698.397839][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1698.400843][ T5706] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1698.400875][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.400897][ T5706] usb 3-1: Product: syz [ 1698.400911][ T5706] usb 3-1: Manufacturer: syz [ 1698.400925][ T5706] usb 3-1: SerialNumber: syz [ 1698.531840][ T5706] usb 3-1: config 0 descriptor?? [ 1698.539717][T21664] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1698.557985][ T5706] ati_remote 3-1:0.0: Initializing ati_remote hardware failed. [ 1698.558350][ T5706] ati_remote 3-1:0.0: probe with driver ati_remote failed with error -5 [ 1698.752937][ T5909] usb 3-1: USB disconnect, device number 26 [ 1699.642041][T14124] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1699.799784][T14124] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1699.799824][T14124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1699.799852][T14124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1699.799875][T14124] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1699.799923][T14124] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1699.799948][T14124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.831983][T14124] usb 3-1: config 0 descriptor?? [ 1700.708882][T14124] usbhid 3-1:0.0: can't add hid device: -71 [ 1700.712987][T14124] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1700.803000][T14124] usb 3-1: USB disconnect, device number 27 [ 1701.526248][T21715] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3565'. [ 1701.739378][T21718] bond3: (slave syz_tun): Releasing backup interface [ 1701.934265][ T8956] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1702.085888][ T8956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.085967][ T8956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1702.085986][ T8956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1702.086002][ T8956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1702.086018][ T8956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1702.086032][ T8956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1702.086044][ T8956] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1702.089903][ T8956] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1702.089935][ T8956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.091141][ T8956] usb 3-1: Product: syz [ 1702.091154][ T8956] usb 3-1: Manufacturer: syz [ 1702.091162][ T8956] usb 3-1: SerialNumber: syz [ 1702.153749][ T8956] usb 3-1: config 0 descriptor?? [ 1702.187880][T21714] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1702.242741][ T8956] ati_remote 3-1:0.0: Initializing ati_remote hardware failed. [ 1702.243018][ T8956] ati_remote 3-1:0.0: probe with driver ati_remote failed with error -5 [ 1702.369336][T21728] syzkaller0: entered promiscuous mode [ 1702.369365][T21728] syzkaller0: entered allmulticast mode [ 1702.417473][ T5909] usb 3-1: USB disconnect, device number 28 [ 1703.429186][ T5909] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1703.584303][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 1703.586969][ T5909] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1703.586999][ T5909] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1703.587022][ T5909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1703.587044][ T5909] usb 3-1: config 1 has no interface number 0 [ 1703.587094][ T5909] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1703.587121][ T5909] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1703.587164][ T5909] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1703.587187][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.752163][ T5909] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1703.940339][T21757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1703.957899][ T5909] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1704.167272][T21759] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 1704.390832][ T36] usb 3-1: USB disconnect, device number 29 [ 1704.438364][ T36] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1704.500645][T21766] fuse: Unknown parameter '0x0000000000000003' [ 1705.804198][ T5909] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1705.971502][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.971542][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1705.971558][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1705.971574][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1705.971589][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1705.971604][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1705.971616][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1705.984950][ T5909] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1705.984984][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.985005][ T5909] usb 3-1: Product: syz [ 1705.985020][ T5909] usb 3-1: Manufacturer: syz [ 1705.985035][ T5909] usb 3-1: SerialNumber: syz [ 1706.143752][ T5909] usb 3-1: config 0 descriptor?? [ 1706.175828][T21783] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1706.223195][ T5909] ati_remote 3-1:0.0: Initializing ati_remote hardware failed. [ 1706.223507][ T5909] ati_remote 3-1:0.0: probe with driver ati_remote failed with error -5 [ 1706.395317][ T5909] usb 3-1: USB disconnect, device number 30 [ 1706.464289][T11984] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1706.783504][T11984] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1706.785124][T11984] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1706.785161][T11984] usb 2-1: can't read configurations, error -71 [ 1707.079171][T21798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 1707.236798][T21799] netlink: 'syz.2.3590': attribute type 12 has an invalid length. [ 1707.543219][T14124] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1707.725208][T14124] usb 3-1: Using ep0 maxpacket: 16 [ 1707.764103][T14124] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 1707.764134][T14124] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.764172][T14124] usb 3-1: config 0 has no interface number 0 [ 1707.764215][T14124] usb 3-1: config 0 interface 216 altsetting 0 endpoint 0xA has invalid maxpacket 4098, setting to 1024 [ 1707.764231][T14124] usb 3-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 1707.764244][T14124] usb 3-1: config 0 interface 216 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1707.772347][T14124] usb 3-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 1707.772369][T14124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.772381][T14124] usb 3-1: Product: syz [ 1707.772389][T14124] usb 3-1: Manufacturer: syz [ 1707.772398][T14124] usb 3-1: SerialNumber: syz [ 1707.882952][T14124] usb 3-1: config 0 descriptor?? [ 1707.944584][T21801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1707.989450][T14124] usb-storage 3-1:0.216: USB Mass Storage device detected [ 1709.077722][ T8042] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1709.229435][ T8042] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1709.229473][ T8042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1709.229502][ T8042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1709.229525][ T8042] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1709.229570][ T8042] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1709.229595][ T8042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.245457][ T8042] usb 5-1: config 0 descriptor?? [ 1709.805033][ T8042] usbhid 5-1:0.0: can't add hid device: -71 [ 1709.805178][ T8042] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1709.811918][ T8042] usb 5-1: USB disconnect, device number 17 [ 1710.218533][ T36] usb 3-1: USB disconnect, device number 31 [ 1710.644266][ T8042] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1710.754705][ T5909] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1710.798445][ T8042] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.798509][ T8042] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1710.798538][ T8042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1710.798566][ T8042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1710.798595][ T8042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1710.798622][ T8042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1710.798646][ T8042] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1710.881476][ T8042] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1710.881498][ T8042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.881523][ T8042] usb 2-1: Product: syz [ 1710.881532][ T8042] usb 2-1: Manufacturer: syz [ 1710.881540][ T8042] usb 2-1: SerialNumber: syz [ 1710.936751][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1710.936790][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1710.936818][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1710.936842][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1710.936888][ T5909] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1710.936911][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.000468][ T5909] usb 5-1: config 0 descriptor?? [ 1711.063210][ T8042] usb 2-1: config 0 descriptor?? [ 1711.064344][T21832] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1711.094582][ T8042] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 1711.094913][ T8042] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 1711.356598][ T8042] usb 2-1: USB disconnect, device number 14 [ 1711.765112][ T5909] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1711.778176][ T5909] usb 5-1: USB disconnect, device number 18 [ 1712.009479][T21852] fido_id[21852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1712.312693][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3610'. [ 1712.854201][ T5909] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1713.006929][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1713.006968][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1713.006996][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1713.007018][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1713.007061][ T5909] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1713.007084][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.023055][ T5909] usb 5-1: config 0 descriptor?? [ 1713.490226][ T5909] usbhid 5-1:0.0: can't add hid device: -71 [ 1713.490357][ T5909] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1713.507519][ T5909] usb 5-1: USB disconnect, device number 19 [ 1713.564250][ T8042] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1713.624258][ T36] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1713.722969][ T8042] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1713.723001][ T8042] usb 1-1: config 0 has no interface number 0 [ 1713.723049][ T8042] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1713.723078][ T8042] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1713.723106][ T8042] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1713.777776][ T8042] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1713.777811][ T8042] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1713.777833][ T8042] usb 1-1: Product: syz [ 1713.777850][ T8042] usb 1-1: SerialNumber: syz [ 1713.809182][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.809237][ T36] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1713.809261][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1713.809285][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1713.809310][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1713.809334][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1713.809353][ T36] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1713.823681][ T36] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1713.823711][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.823730][ T36] usb 2-1: Product: syz [ 1713.823744][ T36] usb 2-1: Manufacturer: syz [ 1713.823757][ T36] usb 2-1: SerialNumber: syz [ 1713.897151][ T36] usb 2-1: config 0 descriptor?? [ 1713.902257][T21886] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1713.954513][ T8042] usb 1-1: config 0 descriptor?? [ 1713.956760][ T36] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 1713.957028][ T36] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 1713.961365][ T8042] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1713.963414][ T8042] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input37 [ 1714.205706][ T8956] usb 2-1: USB disconnect, device number 15 [ 1714.737256][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1714.737520][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1714.737784][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1714.738034][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1714.738287][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1714.738529][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1714.738771][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1714.739052][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1714.739307][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1714.739532][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1715.145892][ T8042] usb 1-1: USB disconnect, device number 36 [ 1715.145998][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1715.252987][ T8042] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1715.902586][T21914] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1716.974173][ T8956] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1717.052120][T21925] lo: Caught tx_queue_len zero misconfig [ 1717.126812][ T8956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.126873][ T8956] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1717.126903][ T8956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1717.126930][ T8956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1717.126958][ T8956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1717.126985][ T8956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1717.127007][ T8956] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1717.130142][ T8956] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1717.130174][ T8956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.130195][ T8956] usb 2-1: Product: syz [ 1717.130211][ T8956] usb 2-1: Manufacturer: syz [ 1717.130226][ T8956] usb 2-1: SerialNumber: syz [ 1717.260014][ T8956] usb 2-1: config 0 descriptor?? [ 1717.274374][T21923] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1717.281300][ T8956] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 1717.281641][ T8956] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 1717.578372][ T8956] usb 2-1: USB disconnect, device number 16 [ 1720.474489][ T36] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1720.639403][ T36] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1720.639443][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1720.639470][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1720.639493][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1720.639541][ T36] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1720.639564][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.657535][ T36] usb 1-1: config 0 descriptor?? [ 1721.179529][ T36] usbhid 1-1:0.0: can't add hid device: -71 [ 1721.179655][ T36] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1721.208938][ T36] usb 1-1: USB disconnect, device number 37 [ 1721.409620][T21998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3664'. [ 1722.896516][T22043] fuse: Unknown parameter 'fd0x0000000000000004' [ 1723.844232][ T8956] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1723.922469][T22075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3694'. [ 1723.996986][ T8956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.997052][ T8956] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1723.997080][ T8956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1723.997107][ T8956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1723.997137][ T8956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1723.997163][ T8956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1723.997186][ T8956] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1724.000574][ T8956] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1724.000606][ T8956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.000628][ T8956] usb 5-1: Product: syz [ 1724.000644][ T8956] usb 5-1: Manufacturer: syz [ 1724.000659][ T8956] usb 5-1: SerialNumber: syz [ 1724.135911][ T8956] usb 5-1: config 0 descriptor?? [ 1724.141830][T22070] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1724.172000][ T8956] ati_remote 5-1:0.0: Initializing ati_remote hardware failed. [ 1724.172444][ T8956] ati_remote 5-1:0.0: probe with driver ati_remote failed with error -5 [ 1724.455034][ T8042] usb 5-1: USB disconnect, device number 20 [ 1724.723252][T22097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3703'. [ 1724.827256][T22097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1724.940253][T22097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1726.694372][ T8042] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1726.824624][ T8042] usb 5-1: device descriptor read/64, error -71 [ 1726.837352][ T8956] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1726.964351][ T8956] usb 3-1: device descriptor read/64, error -71 [ 1727.077029][ T8042] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1727.204595][ T8042] usb 5-1: device descriptor read/64, error -71 [ 1727.244209][ T8956] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1727.314893][ T8042] usb usb5-port1: attempt power cycle [ 1727.385886][ T8956] usb 3-1: device descriptor read/64, error -71 [ 1727.495617][ T8956] usb usb3-port1: attempt power cycle [ 1727.664245][ T8042] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1727.691580][ T8042] usb 5-1: device descriptor read/8, error -71 [ 1727.834231][ T8956] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1727.855118][ T8956] usb 3-1: device descriptor read/8, error -71 [ 1727.924697][ T8042] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1727.945529][ T8042] usb 5-1: device descriptor read/8, error -71 [ 1728.054690][ T8042] usb usb5-port1: unable to enumerate USB device [ 1728.094292][ T8956] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1728.117473][ T8956] usb 3-1: device descriptor read/8, error -71 [ 1728.225770][ T8956] usb usb3-port1: unable to enumerate USB device [ 1729.728315][T22180] syzkaller0: entered promiscuous mode [ 1729.728345][T22180] syzkaller0: entered allmulticast mode [ 1730.854484][ T36] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1730.994317][T13861] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1731.045694][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 1731.048408][ T36] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1731.048438][ T36] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1731.048479][ T36] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1731.048503][ T36] usb 3-1: config 1 has no interface number 0 [ 1731.048554][ T36] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1731.048584][ T36] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1731.048629][ T36] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1731.048654][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.176411][ T36] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1731.188319][T13861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1731.188451][T13861] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1731.188477][T13861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.204837][ T5909] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1731.301071][T13861] usb 2-1: config 0 descriptor?? [ 1731.420453][ T36] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1731.445444][ T5909] usb 1-1: device descriptor read/64, error -71 [ 1731.520631][T13861] usbhid 2-1:0.0: can't add hid device: -71 [ 1731.520819][T13861] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1731.581454][T13861] usb 2-1: USB disconnect, device number 17 [ 1731.694160][ T5909] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 1731.824334][ T5909] usb 1-1: device descriptor read/64, error -71 [ 1731.849622][ T8042] usb 3-1: USB disconnect, device number 36 [ 1731.887581][ T8042] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1731.934758][ T5909] usb usb1-port1: attempt power cycle [ 1732.154424][T13861] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1732.274256][ T5909] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1732.297460][ T5909] usb 1-1: device descriptor read/8, error -71 [ 1732.315342][T13861] usb 2-1: Using ep0 maxpacket: 32 [ 1732.320617][T13861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.320667][T13861] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1732.320691][T13861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.387435][T13861] usb 2-1: config 0 descriptor?? [ 1732.399836][T13861] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1732.422549][T13861] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1732.554199][ T5909] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1732.576195][ T5909] usb 1-1: device descriptor read/8, error -71 [ 1732.684568][ T5909] usb usb1-port1: unable to enumerate USB device [ 1732.799182][ T5909] usb 2-1: USB disconnect, device number 18 [ 1732.840209][ T5909] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1733.302003][T22263] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1733.314458][ T8042] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1733.444957][ T8042] usb 5-1: device descriptor read/64, error -71 [ 1733.551937][T22271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3766'. [ 1733.684413][ T8042] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1733.714708][T22274] netlink: 'syz.7.3766': attribute type 12 has an invalid length. [ 1733.826957][ T8042] usb 5-1: device descriptor read/64, error -71 [ 1733.937648][ T8042] usb usb5-port1: attempt power cycle [ 1734.286859][ T8042] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1734.306036][ T8042] usb 5-1: device descriptor read/8, error -71 [ 1734.555759][ T8042] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1734.591735][ T8042] usb 5-1: device descriptor read/8, error -71 [ 1734.694609][ T8042] usb usb5-port1: unable to enumerate USB device [ 1734.720819][T22297] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3774'. [ 1734.794473][ T8956] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1734.861455][T22301] fuse: Bad value for 'fd' [ 1734.952214][ T8956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.952280][ T8956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1734.952308][ T8956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1734.952336][ T8956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1734.952364][ T8956] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1734.962751][ T8956] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1734.962781][ T8956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.962800][ T8956] usb 3-1: Product: syz [ 1734.962814][ T8956] usb 3-1: Manufacturer: syz [ 1734.962827][ T8956] usb 3-1: SerialNumber: syz [ 1734.979501][ T8956] usb 3-1: config 0 descriptor?? [ 1734.981682][T22295] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1735.007823][ T8956] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1735.213309][ T8956] usb 3-1: USB disconnect, device number 37 [ 1735.786973][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.787059][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.866096][T22327] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3787'. [ 1735.965358][T13861] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1735.995673][T13861] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1736.319251][T22336] fuse: Bad value for 'fd' [ 1736.543207][T22343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3792'. [ 1736.684212][T13861] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1736.840033][T13861] usb 2-1: Using ep0 maxpacket: 32 [ 1736.852322][T13861] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1736.852355][T13861] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1736.852378][T13861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1736.852419][T13861] usb 2-1: config 1 has no interface number 0 [ 1736.852471][T13861] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1736.852500][T13861] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1736.852545][T13861] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1736.852570][T13861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.925140][T22349] netlink: 'syz.4.3792': attribute type 12 has an invalid length. [ 1737.011923][T13861] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1737.316225][T13861] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1737.614253][ T8042] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1737.742602][T13861] usb 2-1: USB disconnect, device number 19 [ 1737.770526][ T8042] usb 5-1: Using ep0 maxpacket: 16 [ 1737.813323][ T8042] usb 5-1: config 0 has an invalid interface number: 216 but max is 0 [ 1737.813344][ T8042] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.813355][ T8042] usb 5-1: config 0 has no interface number 0 [ 1737.813403][ T8042] usb 5-1: config 0 interface 216 altsetting 0 endpoint 0xA has invalid maxpacket 4098, setting to 1024 [ 1737.813419][ T8042] usb 5-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 1737.813433][ T8042] usb 5-1: config 0 interface 216 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1737.913581][T13861] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1737.928830][ T8042] usb 5-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 1737.928861][ T8042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.928882][ T8042] usb 5-1: Product: syz [ 1737.928897][ T8042] usb 5-1: Manufacturer: syz [ 1737.928912][ T8042] usb 5-1: SerialNumber: syz [ 1738.047520][ T8042] usb 5-1: config 0 descriptor?? [ 1738.053202][T22345] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1738.070704][ T8042] usb-storage 5-1:0.216: USB Mass Storage device detected [ 1738.367452][T22362] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3799'. [ 1738.814847][T14124] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1738.944248][T14124] usb 3-1: device descriptor read/64, error -71 [ 1739.194283][T14124] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1739.324389][T14124] usb 3-1: device descriptor read/64, error -71 [ 1739.434876][T14124] usb usb3-port1: attempt power cycle [ 1739.598128][ T8042] usb 5-1: USB disconnect, device number 29 [ 1739.774361][T14124] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1739.796650][T14124] usb 3-1: device descriptor read/8, error -71 [ 1740.045056][T14124] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1740.081051][T14124] usb 3-1: device descriptor read/8, error -71 [ 1740.185872][T14124] usb usb3-port1: unable to enumerate USB device [ 1740.274266][T13861] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1740.330175][T22392] netlink: 'syz.4.3812': attribute type 12 has an invalid length. [ 1740.424159][T13861] usb 1-1: Using ep0 maxpacket: 32 [ 1740.428094][T13861] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1740.428125][T13861] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1740.428147][T13861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1740.428168][T13861] usb 1-1: config 1 has no interface number 0 [ 1740.428216][T13861] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1740.428244][T13861] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1740.428290][T13861] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1740.428312][T13861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.537481][T13861] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1740.743397][T13861] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1741.236014][T14124] usb 1-1: USB disconnect, device number 42 [ 1741.289574][T14124] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1741.491190][T22398] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3815'. [ 1741.720388][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3818'. [ 1741.895726][T22405] netlink: 'syz.2.3818': attribute type 12 has an invalid length. [ 1742.224194][ T5734] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1742.384135][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 1742.432690][ T5734] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 1742.432721][ T5734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.432742][ T5734] usb 3-1: config 0 has no interface number 0 [ 1742.433188][ T5734] usb 3-1: config 0 interface 216 altsetting 0 endpoint 0xA has invalid maxpacket 4098, setting to 1024 [ 1742.433218][ T5734] usb 3-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 1742.433242][ T5734] usb 3-1: config 0 interface 216 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1742.511761][ T5734] usb 3-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 1742.511795][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.511815][ T5734] usb 3-1: Product: syz [ 1742.511830][ T5734] usb 3-1: Manufacturer: syz [ 1742.511845][ T5734] usb 3-1: SerialNumber: syz [ 1742.553757][ T5734] usb 3-1: config 0 descriptor?? [ 1742.566056][T22410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1742.590686][ T5734] usb-storage 3-1:0.216: USB Mass Storage device detected [ 1742.864321][T14124] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1743.017991][T14124] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.018052][T14124] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1743.018153][T14124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1743.018183][T14124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1743.018210][T14124] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1743.021742][T14124] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1743.021776][T14124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.021797][T14124] usb 5-1: Product: syz [ 1743.021812][T14124] usb 5-1: Manufacturer: syz [ 1743.021827][T14124] usb 5-1: SerialNumber: syz [ 1743.034403][T14124] usb 5-1: config 0 descriptor?? [ 1743.068119][T22422] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1743.068863][T22432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3827'. [ 1743.088957][T14124] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1743.276022][T14124] usb 5-1: USB disconnect, device number 30 [ 1743.860143][T22446] vlan2: entered promiscuous mode [ 1743.860169][T22446] bridge0: entered promiscuous mode [ 1744.386820][T22458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3839'. [ 1744.505105][T22458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1744.549965][T22458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1744.724430][T22463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3840'. [ 1744.892543][ T8042] usb 3-1: USB disconnect, device number 42 [ 1745.930549][ T37] kauditd_printk_skb: 27 callbacks suppressed [ 1745.930565][ T37] audit: type=1326 audit(1778373259.641:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22482 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d445cdd9 code=0x7ffc0000 [ 1745.931657][ T37] audit: type=1326 audit(1778373259.641:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22482 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff3d445cdd9 code=0x7ffc0000 [ 1745.932194][ T37] audit: type=1326 audit(1778373259.641:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22482 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d445cdd9 code=0x7ffc0000 [ 1745.936161][ T37] audit: type=1326 audit(1778373259.651:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22482 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d445cdd9 code=0x7ffc0000 [ 1745.936215][ T37] audit: type=1326 audit(1778373259.651:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22482 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3d441d60e code=0x7ffc0000 [ 1745.937225][ T37] audit: type=1326 audit(1778373259.651:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22482 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d445cdd9 code=0x7ffc0000 [ 1746.111818][ T37] audit: type=1326 audit(1778373259.681:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22482 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d445cdd9 code=0x7ffc0000 [ 1746.122055][ T37] audit: type=1326 audit(1778373259.821:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22482 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff3d445cdd9 code=0x7ffc0000 [ 1746.207084][ T37] audit: type=1326 audit(1778373259.911:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22482 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d445cdd9 code=0x7ffc0000 [ 1746.212948][ T37] audit: type=1326 audit(1778373259.921:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22482 comm="syz.1.3849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff3d445cdd9 code=0x7ffc0000 [ 1747.560070][T22507] capability: warning: `syz.4.3854' uses deprecated v2 capabilities in a way that may be insecure [ 1750.016006][T22539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3866'. [ 1750.934223][ T8042] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1751.064350][ T8042] usb 1-1: device descriptor read/64, error -71 [ 1751.305303][ T8042] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1751.434172][ T8042] usb 1-1: device descriptor read/64, error -71 [ 1751.545187][ T8042] usb usb1-port1: attempt power cycle [ 1751.906622][ T8042] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1751.924925][ T8042] usb 1-1: device descriptor read/8, error -71 [ 1752.166740][ T8042] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1752.185481][ T8042] usb 1-1: device descriptor read/8, error -71 [ 1752.295229][ T8042] usb usb1-port1: unable to enumerate USB device [ 1753.934140][ T5734] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1754.089068][ T5734] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1754.089113][ T5734] usb 2-1: can't read configurations, error -61 [ 1754.214257][ T5734] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1754.374476][ T5734] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1754.374504][ T5734] usb 2-1: can't read configurations, error -61 [ 1754.374880][ T5734] usb usb2-port1: attempt power cycle [ 1754.654356][T13861] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1754.714144][ T5734] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1754.741882][ T5734] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1754.741925][ T5734] usb 2-1: can't read configurations, error -61 [ 1754.804302][T13861] usb 5-1: Using ep0 maxpacket: 32 [ 1754.810802][T13861] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1754.810832][T13861] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1754.810851][T13861] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1754.810871][T13861] usb 5-1: config 1 has no interface number 0 [ 1754.810900][T13861] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1754.810914][T13861] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1754.810944][T13861] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1754.810958][T13861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.891802][ T5734] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1754.956463][ T5734] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1754.956506][ T5734] usb 2-1: can't read configurations, error -61 [ 1754.957988][ T5734] usb usb2-port1: unable to enumerate USB device [ 1755.046531][T13861] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1755.079367][T22605] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3886'. [ 1755.163407][T13861] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1755.609677][ T8956] usb 5-1: USB disconnect, device number 31 [ 1755.625218][ T8956] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1757.186544][T13861] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1757.334173][T13861] usb 2-1: Using ep0 maxpacket: 8 [ 1757.342620][T13861] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1757.342658][T13861] usb 2-1: can't read configurations, error -61 [ 1757.534138][T13861] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1757.684113][T13861] usb 2-1: Using ep0 maxpacket: 8 [ 1757.687708][T13861] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1757.687752][T13861] usb 2-1: can't read configurations, error -61 [ 1757.688422][T13861] usb usb2-port1: attempt power cycle [ 1758.084588][T13861] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1758.107930][T13861] usb 2-1: Using ep0 maxpacket: 8 [ 1758.111751][T13861] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1758.111808][T13861] usb 2-1: can't read configurations, error -61 [ 1758.294159][T13861] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1758.314798][T13861] usb 2-1: Using ep0 maxpacket: 8 [ 1758.317287][T13861] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1758.317326][T13861] usb 2-1: can't read configurations, error -61 [ 1758.350252][T13861] usb usb2-port1: unable to enumerate USB device [ 1758.506436][T22660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3905'. [ 1759.972206][T22686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3916'. [ 1760.258667][ T5734] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1760.380889][ T5734] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1760.985377][T14124] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1761.145576][T14124] usb 3-1: Using ep0 maxpacket: 8 [ 1761.151767][T14124] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1761.151871][T14124] usb 3-1: can't read configurations, error -61 [ 1761.274238][T14124] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1761.424388][T14124] usb 3-1: Using ep0 maxpacket: 8 [ 1761.429482][T14124] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1761.429527][T14124] usb 3-1: can't read configurations, error -61 [ 1761.433071][T14124] usb usb3-port1: attempt power cycle [ 1761.794280][T14124] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1761.826774][T14124] usb 3-1: Using ep0 maxpacket: 8 [ 1761.840994][T14124] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1761.841040][T14124] usb 3-1: can't read configurations, error -61 [ 1762.016481][T14124] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1762.039081][T14124] usb 3-1: Using ep0 maxpacket: 8 [ 1762.053934][T14124] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1762.053979][T14124] usb 3-1: can't read configurations, error -61 [ 1762.068887][T14124] usb usb3-port1: unable to enumerate USB device [ 1763.148445][T22761] netlink: 'syz.7.3946': attribute type 1 has an invalid length. [ 1764.034444][T22791] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3949'. [ 1764.193560][T20073] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1764.366542][T20073] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1764.366573][T20073] usb 5-1: config 0 has no interface number 0 [ 1764.366621][T20073] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1764.366650][T20073] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1764.366678][T20073] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1764.372600][T20073] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1764.372633][T20073] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1764.372654][T20073] usb 5-1: Product: syz [ 1764.372669][T20073] usb 5-1: SerialNumber: syz [ 1764.390868][T20073] usb 5-1: config 0 descriptor?? [ 1764.412588][T20073] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1764.434382][T20073] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input40 [ 1764.685978][T22787] list_add double add: new=ffff8880397ed518, prev=ffff8880397ed518, next=ffff888065038078. [ 1764.686596][T22787] ------------[ cut here ]------------ [ 1764.686609][T22787] kernel BUG at lib/list_debug.c:37! [ 1764.686634][T22787] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1764.686659][T22787] CPU: 1 UID: 0 PID: 22787 Comm: syz.4.3954 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1764.686688][T22787] Tainted: [L]=SOFTLOCKUP [ 1764.686695][T22787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1764.686708][T22787] RIP: 0010:__list_add_valid_or_report+0xa5/0x130 [ 1764.686837][T22787] Code: 74 12 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 02 a2 74 06 cc 48 c7 c7 c0 52 a7 8b 4c 89 fe 4c 89 f2 48 89 d9 e8 fc 6a 7b fc 90 <0f> 0b 48 c7 c7 a0 50 a7 8b e8 ed 6a 7b fc 90 0f 0b 48 c7 c7 60 51 [ 1764.686856][T22787] RSP: 0018:ffffc9000db27310 EFLAGS: 00010246 [ 1764.686875][T22787] RAX: 0000000000000058 RBX: ffff888065038078 RCX: 91c070d078166600 [ 1764.686891][T22787] RDX: ffffc9000ec91000 RSI: 0000000000001673 RDI: 0000000000001674 [ 1764.686905][T22787] RBP: 1ffff1100ca07010 R08: 0000000000000000 R09: 0000000000000000 [ 1764.686918][T22787] R10: dffffc0000000000 R11: fffff52001b64e11 R12: 1ffff110072fdaa3 [ 1764.686933][T22787] R13: dffffc0000000000 R14: ffff8880397ed518 R15: ffff8880397ed518 [ 1764.686947][T22787] FS: 00007fbc78f8e6c0(0000) GS:ffff888126276000(0000) knlGS:0000000000000000 [ 1764.686961][T22787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1764.686975][T22787] CR2: 00002000000eb030 CR3: 0000000087900000 CR4: 00000000003526f0 [ 1764.686988][T22787] Call Trace: [ 1764.686993][T22787] [ 1764.686999][T22787] usb_hcd_link_urb_to_ep+0x1d2/0x330 [ 1764.687064][T22787] dummy_urb_enqueue+0x290/0x760 [ 1764.687130][T22787] ? usb_hcd_map_urb_for_dma+0x3cb/0xd40 [ 1764.687147][T22787] usb_hcd_submit_urb+0x323/0x1b50 [ 1764.687165][T22787] cm109_input_ev+0x1df/0x3d0 [ 1764.687225][T22787] ? __pfx_cm109_input_ev+0x10/0x10 [ 1764.687241][T22787] input_event_dispose+0x80/0x6b0 [ 1764.687287][T22787] ? add_input_randomness+0x32/0x70 [ 1764.687357][T22787] input_inject_event+0x1d7/0x320 [ 1764.687370][T22787] ? input_inject_event+0xb0/0x320 [ 1764.687383][T22787] kd_sound_helper+0x101/0x210 [ 1764.687433][T22787] ? input_handler_for_each_handle+0x28/0x1c0 [ 1764.687463][T22787] ? __pfx_kd_sound_helper+0x10/0x10 [ 1764.687476][T22787] input_handler_for_each_handle+0x101/0x1c0 [ 1764.687493][T22787] kd_mksound+0x96/0x130 [ 1764.687505][T22787] ? __pfx_kd_mksound+0x10/0x10 [ 1764.687517][T22787] ? atomic_notifier_call_chain+0x26/0x180 [ 1764.687545][T22787] do_con_write+0x3357/0x5930 [ 1764.687572][T22787] ? __pfx_do_con_write+0x10/0x10 [ 1764.687588][T22787] ? do_raw_spin_lock+0x12b/0x2f0 [ 1764.687640][T22787] ? lockdep_hardirqs_on+0x7a/0x110 [ 1764.687676][T22787] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1764.687727][T22787] con_write+0x31/0x2e0 [ 1764.687752][T22787] n_tty_write+0xd55/0x1220 [ 1764.687817][T22787] ? __pfx_n_tty_write+0x10/0x10 [ 1764.687846][T22787] ? __pfx_woken_wake_function+0x10/0x10 [ 1764.687896][T22787] ? rcu_is_watching+0x15/0xb0 [ 1764.687931][T22787] ? __pfx_n_tty_write+0x10/0x10 [ 1764.687961][T22787] file_tty_write+0x561/0xa10 [ 1764.687988][T22787] vfs_write+0x629/0xba0 [ 1764.688048][T22787] ? __pfx_vfs_write+0x10/0x10 [ 1764.688072][T22787] ? __fget_files+0x2a/0x420 [ 1764.688180][T22787] ksys_write+0x156/0x270 [ 1764.688205][T22787] ? __pfx_ksys_write+0x10/0x10 [ 1764.688231][T22787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.688255][T22787] do_syscall_64+0x15f/0xf80 [ 1764.688280][T22787] ? trace_irq_disable+0x3b/0x140 [ 1764.688304][T22787] ? clear_bhb_loop+0x40/0x90 [ 1764.688328][T22787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.688346][T22787] RIP: 0033:0x7fbc7ad3cdd9 [ 1764.688358][T22787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1764.688368][T22787] RSP: 002b:00007fbc78f8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1764.688381][T22787] RAX: ffffffffffffffda RBX: 00007fbc7afb5fa0 RCX: 00007fbc7ad3cdd9 [ 1764.688390][T22787] RDX: 0000000000001006 RSI: 0000200000002140 RDI: 0000000000000007 [ 1764.688397][T22787] RBP: 00007fbc7add2d69 R08: 0000000000000000 R09: 0000000000000000 [ 1764.688404][T22787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1764.688412][T22787] R13: 00007fbc7afb6038 R14: 00007fbc7afb5fa0 R15: 00007fff48fd73c8 [ 1764.688424][T22787] [ 1764.688428][T22787] Modules linked in: [ 1764.688453][T22787] ---[ end trace 0000000000000000 ]--- [ 1764.688460][T22787] RIP: 0010:__list_add_valid_or_report+0xa5/0x130 [ 1764.688479][T22787] Code: 74 12 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 02 a2 74 06 cc 48 c7 c7 c0 52 a7 8b 4c 89 fe 4c 89 f2 48 89 d9 e8 fc 6a 7b fc 90 <0f> 0b 48 c7 c7 a0 50 a7 8b e8 ed 6a 7b fc 90 0f 0b 48 c7 c7 60 51 [ 1764.688489][T22787] RSP: 0018:ffffc9000db27310 EFLAGS: 00010246 [ 1764.688500][T22787] RAX: 0000000000000058 RBX: ffff888065038078 RCX: 91c070d078166600 [ 1764.688509][T22787] RDX: ffffc9000ec91000 RSI: 0000000000001673 RDI: 0000000000001674 [ 1764.688517][T22787] RBP: 1ffff1100ca07010 R08: 0000000000000000 R09: 0000000000000000 [ 1764.688524][T22787] R10: dffffc0000000000 R11: fffff52001b64e11 R12: 1ffff110072fdaa3 [ 1764.688533][T22787] R13: dffffc0000000000 R14: ffff8880397ed518 R15: ffff8880397ed518 [ 1764.688542][T22787] FS: 00007fbc78f8e6c0(0000) GS:ffff888126276000(0000) knlGS:0000000000000000 [ 1764.688552][T22787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1764.688561][T22787] CR2: 00002000000eb030 CR3: 0000000087900000 CR4: 00000000003526f0 [ 1764.688575][T22787] Kernel panic - not syncing: Fatal exception [ 1764.689177][T22787] Kernel Offset: disabled