last executing test programs: 2m45.778639411s ago: executing program 3 (id=312): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) inotify_init() r1 = userfaultfd(0x80001) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_secret(0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000005001000050000000500"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, 0x0, &(0x7f0000000480)=""/187}, 0x20) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ce7000/0x1000)=nil, 0x1000}, 0x1}) syz_emit_ethernet(0xbe, 0x0, 0x0) 2m44.089383592s ago: executing program 3 (id=315): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x488) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce", 0x12}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 2m41.100807962s ago: executing program 3 (id=321): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x12, 0x4, @fd_index=0xffffffff, 0x4, 0x4e, 0x3, 0x1a, 0x0, {0x2}}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff03", 0x2c}], 0x1) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="a5172f00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x18) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r9, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) 2m38.393033711s ago: executing program 3 (id=328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000001200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x1000000000000009, 0x3a, 'M', 0x3a, '~\b\x011\xcaL\x8f\x88\x9fM\xf7e\xe2\xd6\xbb\xc7\\M\b\x98R\xc3\xf5\xbd\x0fq\xbd\x85\nJ\xa9\xac\xe7@\nfA\'o\xa3ry;\xeb3\xd4\x83\x92jZ{I\x8ei?U\xfbq\x97T!Xk\xaa%F\x01\x9e^\xb6H\xb2k\x94\xb2\xab\xbf\x82\xa7\xe6G6f\rHtA>\x13\x9b\xdb!\x18\xeb\x95\xb8,$4\xa2\xa4\xa8Ob7\xc0i\xbc\n\x97\xf6\xea\xe9\x1d\x86\xb9,\xfd\x0e`@\xcd\xedl#\xf0\x80\xfc\xb8\x86Z\xb3\v\xeb@\xe9%\xd0\x8e]\x03\xfd\xa1\xbc;\x8c\xb17A\x8b z\x81~\xef.\xa4\xa7\x04\x14%\x8a\xbdtP\xa5\x9f\xf1x\xbc\x80\x048w\x1e\x9fzL\xd6(TS0;[1\xb0F\x85\xe3\xf4\r6v0\xf8\'\x1f\x1f4@\xbc0D\xc6\xba.\xf3|\xebn\xc0&\xed[\xb5\x89\xb8<\x8e[x-\x01\'\xd5\xe5\x1f*\x9d!<\x82`\xd3\f\xf67\xa6U\":\xd9\x17;K\xe7;y\xa5.q\xf6\xc8/Dv\xd2s\xdeEq \xabz\xb6\xa7H\x82_\xe1\x8c\xaa\xefV\xafZ\x10!\x93K\x8e\r\xb6\xce\xf4]\xcc\xcf\x1f\x80\x11@\xec\x7f\xf5\xb3\xb1\nRV(\"\x100xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r4, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000180)) close(r0) 2m34.814360972s ago: executing program 3 (id=335): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r3, 0xe) landlock_restrict_self(r3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) read(r6, 0x0, 0x0) socket(0x1e, 0x1, 0x0) 2m19.747430017s ago: executing program 32 (id=335): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r3, 0xe) landlock_restrict_self(r3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) read(r6, 0x0, 0x0) socket(0x1e, 0x1, 0x0) 15.088935355s ago: executing program 5 (id=622): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0xa, 0x4) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000003, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000002a82, 0x0) 13.584968529s ago: executing program 4 (id=625): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) eventfd2(0x9, 0x0) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 12.643528258s ago: executing program 1 (id=626): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x60000000) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffbfffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\v\xdb\x06\x00\x00\x00\x00\x00\x00\x00\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x00\x00\x80\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xcc\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8cI\xdcn\x9b\xa5\xd4\x13\xc0\x82^\x10,\xfa\x88\x93\xc6K2\xf2\xce\x95\x1bG\xb2m\xad\xe7\xd1P.XT\xc1\xc5\xd9\xaf\v\x8d\xcf\x8f`{F\xc7\x95!\xcc\vq0\xd0\x80\x06{\x97\xb0\xdb+Z\xc5\x9d\xf4\x0eS\xd2\xd4\xb5\\\x96\x1dN\xe6\xfd\\\xe32_p\xee\x15JU\x11\x1f\xc6\xeb\xafm\x1e\xb3\xb5\xfe\x02\xe24\x90Uo\xaf\xce/\x9c\xd4\vE \x81\x14\xdf\x9b\x12b\x1a\x173\x8d\t\xab\xec\xf0n\xa5\x95\x9c\xc3\xf2\xb6CS\xf3\xa8p\t!\xb3\x912`\n\xd2\xe2S\x9cU\xcc\"\xf2d(Ec\xb2\x7f\x02'}]}, 0x130) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000880) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 12.518612766s ago: executing program 0 (id=628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@dellink={0x34, 0x11, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x9470, 0x9020}, [@IFLA_ALT_IFNAME={0x14, 0x41, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) r1 = syz_io_uring_setup(0x42e6, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25c}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 10.665990029s ago: executing program 1 (id=629): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r0 = epoll_create(0x8) r1 = socket(0x10, 0x803, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) preadv(r3, &(0x7f0000000180), 0x0, 0x80000000, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r4 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a801400"], 0x58}, 0x1, 0x2}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x9000001c}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 10.665131597s ago: executing program 5 (id=639): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xf88e470f}]}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x101, 0x0, 0x2, 0x0, 0x4002004c4, 0x1008, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x8000000b3, 0x8d], 0xeeee8000, 0x14d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.542580177s ago: executing program 4 (id=631): futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x1) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0x2, 0x1ff, 0x1, 0x1, 0x9, 0x4, 0x0, 0x200, 0x4, 0x8, 0xffffffff, 0xffffffff, 0x4, 0x8, 0x1, 0x9, {0xb, 0x1ff}, 0x1, 0x4}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) 9.650382594s ago: executing program 5 (id=632): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd853041", 0x87, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x353841, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') symlinkat(&(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x141, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r5 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x4004510d, &(0x7f0000000000)) 8.650606804s ago: executing program 0 (id=634): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000001200)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x118}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) cachestat(r5, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x80000}) syz_open_procfs(r1, &(0x7f00000037c0)='comm\x00') 8.353658391s ago: executing program 4 (id=635): syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01020301"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x1b) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 7.092960516s ago: executing program 5 (id=636): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "57649599a740d789", "2050f27d0c51e0ff853764cd218531a107aae1f257099348ec606b0e02875919", "db96aa38", "d77d06158b441fc8"}, 0x38) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[], 0x4a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = getpgrp(0x0) kcmp(r3, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x158, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x21}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x35}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffc01}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xc0}}]}, 0x158}, 0x1, 0x0, 0x0, 0x14}, 0x4009) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0100000800000002", 0x8) 6.997624494s ago: executing program 2 (id=637): socket$nl_generic(0x10, 0x3, 0x10) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ptrace(0x4207, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000380)=[{0x0}], 0x1, 0x5, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x7) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e28, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 6.950251465s ago: executing program 1 (id=638): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee3, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) bind$unix(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) 6.518224348s ago: executing program 0 (id=640): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88182500}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000000406010800000000000000000300000205000100070000000900020073797a31000000000900020073797a32000000000900020073797a31000000000500010007000000ac3edfd541dac23a99712b903c945c0f1a8d5e98adcb0b86d80a358beec76e052ae9f0a69c640435114712164f3e5494aa01e0be4809a7df805e1b88079d8523194f7feef34f9509dbe19f8468089ef73b5f5def4f1411fc30471b2443f4eccabe8787c51bc56689d568c299f0f076e23e88a4bdc2f6b0cb3cf37a17e434f7612793cec92a2643bed9c11cc153d23c19726ffec1ab5972cc0e5015b97511e66054cd0d4779599b04ecc77a3469af428a832afe3cd9f38ba368b25342d01b935bafda45621897bfbfca70fc"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x480c4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) unshare(0x28040600) syz_open_procfs(0x0, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000003fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x32c, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x264, 0x20a, 0x278, 0x264, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xff], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x20}, 0x7a, 0x110, 0x178, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}, @common=@dst={{0x48}, {0x8, 0x8, 0x0, [0x9, 0x3, 0xb1a, 0x8, 0xd, 0x69, 0x3, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x6, 0x1, 0x3, 0x1000], 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x8, 0x40, 0x7, '\x00', 'syz0\x00', {0x3}}}}, {{@ipv6={@loopback, @private1, [0x0, 0xff000000, 0xff000000], [], 'veth1_to_hsr\x00', 'veth0\x00', {}, {}, 0x4}, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x81, {0xff}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.549251909s ago: executing program 2 (id=641): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0x61, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2008c0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="31005ac5e8a9727303f46bf7221ff6a2082d20c3020dfa0180ce28660894c52c45fc5fc6d7721e58ee6aac930f19c41c112807815955366611d5fbaee84e509442293d50f31d448651661024c2a3d55b9426e1a8988283a5a6e158191b74f522e89bfbe79b2f30a4ceee480acfb9"], 0x7c}}, 0x8001) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20400d5}, 0x40840) io_setup(0xffffffff, 0x0) io_submit(0x0, 0x0, &(0x7f0000000140)) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r5 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) listen(r5, 0xffffffff) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) 5.286549162s ago: executing program 0 (id=642): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) eventfd2(0x9, 0x0) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.373588738s ago: executing program 4 (id=643): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x101, 0x0, 0x2, 0x0, 0x4002004c4, 0x1008, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x8000000b3, 0x8d], 0xeeee8000, 0x14d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.368001628s ago: executing program 1 (id=653): syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01020301"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x1b) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.076158045s ago: executing program 2 (id=644): r0 = socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x19, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)=""/186, 0xba}], 0x1}, 0x8002}], 0x1, 0x40002022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/92, 0x5c}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 3.984169924s ago: executing program 5 (id=645): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) mmap$binder(&(0x7f00005fe000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x8496) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) poll(&(0x7f0000000240)=[{r1, 0x2188}], 0x1, 0x8001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7b5f00000000000000bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) creat(&(0x7f0000000e00)='./file0\x00', 0x4c) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0xa9525000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.959132743s ago: executing program 0 (id=646): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x8001af85, &(0x7f0000000080)={0x3, 0x1000}) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x1, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000002c0)={0xffffffff, 0xa82, 0x0, 0x0, 0x30}) memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000001c0)={0x24, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 3.957013485s ago: executing program 4 (id=647): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) r0 = syz_io_uring_setup(0x12c5, &(0x7f0000000200)={0x0, 0x4005eda, 0x10100, 0x7ffffffd, 0x12a}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x18, 0x0, @fd, 0x4, 0x0, 0x9, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0xa, 0x4000, @fd_index, 0x8, 0x0, 0x0, 0x8}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 2.421885463s ago: executing program 5 (id=648): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@my=0x0, 0x11}, {@my=0x0, 0x6}, 0x400, "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"}, 0x418, 0x1008}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x59555956, 0x2, @stepwise={0x9, 0x2, 0x9, 0xc80, 0x9, 0x1}}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000140)={0x9, 0x10000, 0x20000000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x20000000000000bb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x10004, 0x20000}, 0x10, 0x0, r3}, 0x94) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) sendmsg$inet(r5, 0x0, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x3e4, 0xffffffff, 0xe4, 0x0, 0x254, 0xfeffffff, 0xffffffff, 0x31c, 0x31c, 0x31c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'rose0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x130, 0x170, 0x0, {}, [@common=@srh1={{0x8c}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @local, [0xff000000, 0xff000000, 0x0, 0x100], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x440) 2.356028576s ago: executing program 2 (id=649): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd853041", 0x87, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x353841, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') symlinkat(&(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x141, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r5 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x4004510d, &(0x7f0000000000)) 2.04746569s ago: executing program 4 (id=650): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = dup2(r4, r4) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) 1.225657912s ago: executing program 1 (id=651): r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x80, 0x2, 0x28f}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f0000000240)={0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) syz_usb_connect$cdc_ncm(0x2, 0x76, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r2, 0x7277, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.085489649s ago: executing program 2 (id=652): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x488) 270.324559ms ago: executing program 1 (id=654): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x9, 0x3, 0x3, 0x0, 0x7}) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) keyctl$revoke(0x3, r4) r5 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x10000006, 0x30f}, &(0x7f0000000280), &(0x7f0000000300)) io_uring_enter(r5, 0x7277, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r8, 0xc4c03d09, 0x0) 268.283974ms ago: executing program 0 (id=664): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, 0x0}, 0x800) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0xc}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000180)={0x2, 0xfc}, 0x2) 0s ago: executing program 2 (id=655): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1ef", 0x23}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25", 0x9a}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmmsg$unix(r3, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}], 0x2}}], 0x28, 0x41, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000040000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x4, 0x100, 0x7, {0x100, 0xffd, 0x3, 0x10002}}) r7 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x12, 0x4, @tid=r7}, &(0x7f0000000380)=0x0) timer_settime(r8, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(r8, &(0x7f0000000480)) kernel console output (not intermixed with test programs): B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.983521][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.990635][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.995742][ T5823] Bluetooth: hci1: command tx timeout [ 75.001822][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.003212][ T51] Bluetooth: hci2: command tx timeout [ 75.010290][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.010919][ T5827] Bluetooth: hci4: command tx timeout [ 75.017188][ T5826] Bluetooth: hci3: command tx timeout [ 75.097725][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.139577][ T5839] veth0_vlan: entered promiscuous mode [ 75.164331][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.179646][ T5839] veth1_vlan: entered promiscuous mode [ 75.226399][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.254248][ T5840] veth0_vlan: entered promiscuous mode [ 75.277499][ T5839] veth0_macvtap: entered promiscuous mode [ 75.302156][ T5840] veth1_vlan: entered promiscuous mode [ 75.339688][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.349361][ T5836] veth0_vlan: entered promiscuous mode [ 75.367738][ T5839] veth1_macvtap: entered promiscuous mode [ 75.408534][ T5836] veth1_vlan: entered promiscuous mode [ 75.422700][ T5837] veth0_vlan: entered promiscuous mode [ 75.436674][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.452322][ T5840] veth0_macvtap: entered promiscuous mode [ 75.463965][ T5837] veth1_vlan: entered promiscuous mode [ 75.477601][ T5840] veth1_macvtap: entered promiscuous mode [ 75.497865][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.530725][ T5838] veth0_vlan: entered promiscuous mode [ 75.556668][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.564005][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.574935][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.602130][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.610001][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.619605][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.630116][ T5837] veth0_macvtap: entered promiscuous mode [ 75.646947][ T5836] veth0_macvtap: entered promiscuous mode [ 75.659926][ T5836] veth1_macvtap: entered promiscuous mode [ 75.669018][ T5838] veth1_vlan: entered promiscuous mode [ 75.688654][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.699330][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.719994][ T5837] veth1_macvtap: entered promiscuous mode [ 75.727763][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.737131][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.794335][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.811841][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.828512][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.853369][ T5838] veth0_macvtap: entered promiscuous mode [ 75.868581][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.878528][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.885820][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.898751][ T136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.910756][ T136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.937320][ T136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.949411][ T136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.961993][ T5838] veth1_macvtap: entered promiscuous mode [ 75.998381][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.998614][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.014999][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.015315][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.049030][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.058100][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.089294][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.100875][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.126485][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.159184][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.197201][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.215009][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.235949][ T163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.244693][ T163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.266926][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.294323][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.310580][ T163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.322026][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.326738][ T163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.415216][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.454985][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.496519][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.504359][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.600076][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.621416][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.678362][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.704100][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.809819][ T5919] input: syz0 as /devices/virtual/input/input5 [ 76.837267][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.869225][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.987237][ T5826] Bluetooth: hci0: command tx timeout [ 77.106369][ T5826] Bluetooth: hci4: command tx timeout [ 77.111829][ T5826] Bluetooth: hci3: command tx timeout [ 77.116818][ T5827] Bluetooth: hci2: command tx timeout [ 77.118165][ T5826] Bluetooth: hci1: command tx timeout [ 77.165949][ T5926] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.285266][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.498572][ T5920] netlink: 'syz.3.4': attribute type 21 has an invalid length. [ 77.549322][ T5923] netlink: 'syz.3.4': attribute type 21 has an invalid length. [ 77.696102][ T5920] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.842455][ T5923] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.007620][ T5897] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.306718][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.335310][ T5897] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 78.365209][ T5897] usb 1-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 78.508932][ T5897] usb 1-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 78.518794][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.535329][ T5897] usb 1-1: Product: syz [ 78.560127][ T5897] usb 1-1: Manufacturer: syz [ 78.577667][ T5897] usb 1-1: SerialNumber: syz [ 79.057968][ T5897] usb 1-1: USB disconnect, device number 2 [ 79.075234][ T5826] Bluetooth: hci0: command tx timeout [ 79.156826][ T5826] Bluetooth: hci2: command tx timeout [ 79.156841][ T51] Bluetooth: hci3: command tx timeout [ 79.156867][ T51] Bluetooth: hci4: command tx timeout [ 79.162276][ T5826] Bluetooth: hci1: command tx timeout [ 79.971696][ T5956] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 79.978336][ T5956] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 80.053417][ T5960] random: crng reseeded on system resumption [ 80.108870][ T5956] vhci_hcd vhci_hcd.0: Device attached [ 80.623060][ T5966] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 81.136690][ T24] usb 36-1: SetAddress Request (2) to port 0 [ 81.149495][ T24] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 81.535538][ T42] cfg80211: failed to load regulatory.db [ 81.738328][ T5957] vhci_hcd: connection reset by peer [ 82.023374][ T12] vhci_hcd vhci_hcd.1: stop threads [ 82.029661][ T12] vhci_hcd vhci_hcd.1: release socket [ 82.065372][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 82.823943][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 84.043516][ T6005] Zero length message leads to an empty skb [ 85.216064][ T5897] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.473232][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.489376][ T5897] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 85.507541][ T5897] usb 4-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 85.531362][ T5897] usb 4-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 85.541032][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.559095][ T5897] usb 4-1: Product: syz [ 85.566849][ T5897] usb 4-1: Manufacturer: syz [ 85.575367][ T5897] usb 4-1: SerialNumber: syz [ 85.828716][ T5897] usb 4-1: USB disconnect, device number 2 [ 86.489525][ T24] usb 36-1: device descriptor read/8, error -110 [ 86.887068][ T24] usb usb36-port1: attempt power cycle [ 87.627942][ T6025] xt_connbytes: Forcing CT accounting to be enabled [ 88.157545][ T24] usb usb36-port1: unable to enumerate USB device [ 88.745381][ T6052] netlink: 72 bytes leftover after parsing attributes in process `syz.2.28'. [ 89.819300][ T6067] process 'syz.1.31' launched '/dev/fd/8' with NULL argv: empty string added [ 90.980140][ T6070] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 91.180006][ T6083] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt' already exists in 'ieee80211' [ 91.796315][ T6085] netlink: 'syz.2.33': attribute type 21 has an invalid length. [ 91.804128][ T6085] netlink: 156 bytes leftover after parsing attributes in process `syz.2.33'. [ 91.817434][ T6085] netlink: 'syz.2.33': attribute type 21 has an invalid length. [ 91.825612][ T6085] netlink: 156 bytes leftover after parsing attributes in process `syz.2.33'. [ 91.947813][ T1645] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.240367][ T1645] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 92.254945][ T1645] usb 1-1: config 160 has no interface number 0 [ 92.295831][ T1645] usb 1-1: config 160 interface 200 has no altsetting 0 [ 92.487130][ T1645] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 92.496363][ T1645] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.504803][ T1645] usb 1-1: Product: syz [ 92.515580][ T1645] usb 1-1: Manufacturer: syz [ 92.520177][ T1645] usb 1-1: SerialNumber: syz [ 92.787836][ T1645] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.800054][ T1645] usb 1-1: MIDIStreaming interface descriptor not found [ 92.989157][ T1645] usb 1-1: USB disconnect, device number 3 [ 93.099704][ T6101] bridge_slave_0: left allmulticast mode [ 93.113462][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.139387][ T6101] bridge_slave_0: left promiscuous mode [ 93.145728][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 93.157271][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.181566][ T6104] input: syz0 as /devices/virtual/input/input6 [ 93.255482][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.260100][ T6109] netlink: 'syz.3.34': attribute type 10 has an invalid length. [ 93.349174][ T6101] bridge_slave_1: left allmulticast mode [ 93.355015][ T6101] bridge_slave_1: left promiscuous mode [ 93.363038][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.444966][ T5883] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.463986][ T6101] bond0: (slave bond_slave_0): Releasing backup interface [ 93.475700][ T5883] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 93.499729][ T5883] usb 3-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 93.546766][ T6101] bond0: (slave bond_slave_1): Releasing backup interface [ 93.549619][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 93.570159][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.586024][ T5883] usb 3-1: Product: syz [ 93.596730][ T5883] usb 3-1: Manufacturer: syz [ 93.605240][ T5883] usb 3-1: SerialNumber: syz [ 93.647812][ T6101] team0: Port device team_slave_0 removed [ 93.660978][ T6101] team0: Port device team_slave_1 removed [ 93.669408][ T6101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.677309][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.698713][ T6101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.706626][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.726145][ T6101] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.755738][ T6106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.934843][ T6106] team0: Port device bond0 added [ 94.267887][ T5883] usb 3-1: USB disconnect, device number 2 [ 94.328702][ T6109] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 94.353720][ T6110] bridge0: port 1(team0) entered blocking state [ 94.362477][ T6110] bridge0: port 1(team0) entered disabled state [ 94.375404][ T6110] team0: entered allmulticast mode [ 94.380522][ T6110] bond0: entered allmulticast mode [ 94.441159][ T6110] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 94.517002][ T6110] team0: entered promiscuous mode [ 94.549848][ T6110] bond0: entered promiscuous mode [ 94.560514][ T6110] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 94.589434][ T6110] bridge0: port 1(team0) entered blocking state [ 94.596064][ T6110] bridge0: port 1(team0) entered forwarding state [ 94.975312][ T5897] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.069847][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'. [ 95.193037][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 95.215261][ T6131] netlink: 72 bytes leftover after parsing attributes in process `syz.4.42'. [ 95.341439][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.350354][ T5897] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 95.361859][ T5897] usb 2-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 95.394414][ T5897] usb 2-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 95.403828][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.434804][ T5897] usb 2-1: Product: syz [ 95.444339][ T5897] usb 2-1: Manufacturer: syz [ 95.465341][ T5897] usb 2-1: SerialNumber: syz [ 95.738591][ T5883] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.174706][ T5897] usb 2-1: USB disconnect, device number 2 [ 96.386483][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 96.409106][ T5883] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 96.437695][ T5883] usb 3-1: config 6 has no interface number 0 [ 96.490810][ T5883] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 96.527328][ T5883] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.591239][ T5883] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.603479][ T5883] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 96.975789][ T5883] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 97.001668][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.201449][ T5883] usb 3-1: Product: syz [ 97.300855][ T6143] netlink: 'syz.4.47': attribute type 21 has an invalid length. [ 97.308770][ T6143] netlink: 156 bytes leftover after parsing attributes in process `syz.4.47'. [ 97.320779][ T6143] netlink: 'syz.4.47': attribute type 21 has an invalid length. [ 97.328595][ T6143] netlink: 156 bytes leftover after parsing attributes in process `syz.4.47'. [ 97.597759][ T6148] fuse: Bad value for 'fd' [ 97.640366][ T6148] fuse: Bad value for 'fd' [ 98.029479][ T5883] usb 3-1: Manufacturer: syz [ 98.034111][ T5883] usb 3-1: SerialNumber: syz [ 98.076303][ T5883] hso 3-1:6.2: Failed to find BULK IN ep [ 100.067922][ T6166] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 100.190658][ T5897] usb 3-1: USB disconnect, device number 3 [ 100.306201][ T6176] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt' already exists in 'ieee80211' [ 101.375271][ T797] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.605295][ T797] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.692680][ T797] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 101.744273][ T797] usb 4-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 101.797557][ T797] usb 4-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 101.809353][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.848869][ T797] usb 4-1: Product: syz [ 101.853994][ T797] usb 4-1: Manufacturer: syz [ 101.861614][ T797] usb 4-1: SerialNumber: syz [ 102.027865][ T6200] openvswitch: netlink: Message has 76 unknown bytes. [ 102.034984][ T6200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.167114][ T797] usb 4-1: USB disconnect, device number 3 [ 104.046253][ T6222] block device autoloading is deprecated and will be removed. [ 106.372124][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.66'. [ 106.570984][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.66'. [ 106.597146][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 107.489360][ T6249] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.66'. [ 108.645808][ T24] IPVS: starting estimator thread 0... [ 108.654293][ T6275] blktrace: Concurrent blktraces are not allowed on sg0 [ 108.739954][ T6276] IPVS: using max 37 ests per chain, 88800 per kthread [ 108.870412][ T6283] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt' already exists in 'ieee80211' [ 110.577276][ T6295] xt_connbytes: Forcing CT accounting to be enabled [ 111.727540][ T797] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.053209][ T797] usb 5-1: Using ep0 maxpacket: 16 [ 112.072790][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.091347][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.365489][ T797] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.411178][ T797] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 112.421488][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.433242][ T797] usb 5-1: config 0 descriptor?? [ 112.891647][ T797] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 112.925777][ T797] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 112.934140][ T797] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 113.035410][ T6322] netlink: 'syz.0.79': attribute type 21 has an invalid length. [ 113.043239][ T6322] netlink: 156 bytes leftover after parsing attributes in process `syz.0.79'. [ 113.055814][ T6322] netlink: 'syz.0.79': attribute type 21 has an invalid length. [ 113.063584][ T6322] netlink: 156 bytes leftover after parsing attributes in process `syz.0.79'. [ 113.129452][ T797] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 113.147498][ T797] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 113.160674][ T797] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 113.258454][ T797] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 113.265968][ T797] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 113.274200][ T797] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 113.441325][ T797] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 113.501757][ T797] sony 0003:1345:3008.0001: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.4-1/input0 [ 113.896249][ T797] sony 0003:1345:3008.0001: failed to claim input [ 113.927825][ T797] usb 5-1: USB disconnect, device number 2 [ 113.948538][ T6336] fido_id[6336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 115.465197][ T797] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.501454][ T6354] netlink: 'syz.0.94': attribute type 21 has an invalid length. [ 115.509871][ T6354] netlink: 156 bytes leftover after parsing attributes in process `syz.0.94'. [ 115.521761][ T6354] netlink: 'syz.0.94': attribute type 21 has an invalid length. [ 115.530102][ T6354] netlink: 156 bytes leftover after parsing attributes in process `syz.0.94'. [ 115.775199][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 115.810768][ T797] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 115.975293][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.065132][ T797] usb 4-1: Product: syz [ 116.086626][ T797] usb 4-1: Manufacturer: syz [ 116.117466][ T797] usb 4-1: SerialNumber: syz [ 116.145922][ T797] usb 4-1: config 0 descriptor?? [ 116.208727][ T797] gspca_main: se401-2.14.0 probing 047d:5003 [ 116.558014][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.88'. [ 116.635827][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 116.782900][ T797] gspca_se401: Wrong descriptor type [ 117.163290][ T797] usb 4-1: USB disconnect, device number 4 [ 118.026580][ T6379] xt_connbytes: Forcing CT accounting to be enabled [ 118.212195][ T6380] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 118.548382][ T6390] vivid-004: disconnect [ 119.340338][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 119.365981][ T6392] netlink: 72 bytes leftover after parsing attributes in process `syz.0.96'. [ 119.444614][ T6390] vivid-004: reconnect [ 119.995201][ T5912] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 120.037953][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 120.160720][ T5912] usb 2-1: config 0 has no interfaces? [ 120.171398][ T5912] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 120.180951][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.201558][ T5912] usb 2-1: Product: syz [ 120.213918][ T5912] usb 2-1: Manufacturer: syz [ 120.233099][ T5912] usb 2-1: SerialNumber: syz [ 120.252379][ T5912] usb 2-1: config 0 descriptor?? [ 120.475574][ T6397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.485938][ T6397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.504735][ T6397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.518439][ T6397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.558797][ T6397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.569269][ T6397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.582857][ T6397] 8021q: VLANs not supported on vxcan0 [ 120.597082][ T5883] usb 2-1: USB disconnect, device number 3 [ 121.864073][ T6422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.114875][ T29] audit: type=1326 audit(1774542990.512:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 123.165871][ T5883] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.197215][ T29] audit: type=1326 audit(1774542990.512:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 123.242513][ T29] audit: type=1326 audit(1774542990.512:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 123.509320][ T29] audit: type=1326 audit(1774542990.512:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 123.825909][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 123.843905][ T29] audit: type=1326 audit(1774542990.512:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 123.880517][ T5883] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 124.008309][ T29] audit: type=1326 audit(1774542990.512:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 124.055539][ T5883] usb 5-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 124.127314][ T5883] usb 5-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 124.136870][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.163951][ T5883] usb 5-1: Product: syz [ 124.169140][ T29] audit: type=1326 audit(1774542990.612:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 124.194120][ T5883] usb 5-1: Manufacturer: syz [ 124.204151][ T5883] usb 5-1: SerialNumber: syz [ 124.277513][ T29] audit: type=1326 audit(1774542990.622:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 124.314131][ T29] audit: type=1326 audit(1774542990.922:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7135cab code=0x7ffc0000 [ 124.448126][ T5883] usb 5-1: USB disconnect, device number 3 [ 124.528547][ T29] audit: type=1326 audit(1774542990.922:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 125.182168][ T6458] syzkaller0: entered promiscuous mode [ 125.202651][ T6458] syzkaller0: entered allmulticast mode [ 125.547771][ T6468] input: syz0 as /devices/virtual/input/input7 [ 127.846528][ T6495] libceph: resolve '. [ 127.846528][ T6495] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 127.846528][ T6495] ' (ret=-3): failed [ 129.555711][ T5897] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.719780][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.729525][ T5897] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 129.744302][ T5897] usb 2-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 129.792312][ T6524] mmap: syz.4.124 (6524) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.807011][ T6522] syzkaller0: entered promiscuous mode [ 129.896783][ T6522] syzkaller0: entered allmulticast mode [ 129.980346][ T5897] usb 2-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 129.989843][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.032573][ T5897] usb 2-1: Product: syz [ 130.042615][ T5897] usb 2-1: Manufacturer: syz [ 130.059733][ T5897] usb 2-1: SerialNumber: syz [ 130.197054][ T6532] openvswitch: netlink: Message has 76 unknown bytes. [ 130.204080][ T6532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.324249][ T5897] usb 2-1: USB disconnect, device number 4 [ 130.951609][ T6538] program syz.0.128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.565211][ T797] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.857974][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 132.055626][ T797] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 132.064823][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.121877][ T797] usb 2-1: Product: syz [ 132.135161][ T797] usb 2-1: Manufacturer: syz [ 132.146115][ T797] usb 2-1: SerialNumber: syz [ 132.166871][ T797] usb 2-1: config 0 descriptor?? [ 132.183056][ T797] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 132.338400][ T5912] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.340983][ T6551] netlink: set zone limit has 8 unknown bytes [ 132.597422][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 132.604706][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.614739][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.629176][ T5912] usb 5-1: config 0 has an invalid interface number: 202 but max is 1 [ 132.637477][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.676726][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.684060][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.692394][ T5912] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 132.710567][ T5912] usb 5-1: config 0 has no interface number 0 [ 132.720315][ T5912] usb 5-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 132.739721][ T5912] usb 5-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 132.760007][ T5912] usb 5-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 132.791206][ T5912] usb 5-1: config 0 interface 202 has no altsetting 0 [ 132.812440][ T5912] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 132.822018][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.849422][ T5912] usb 5-1: Product: syz [ 132.876983][ T5912] usb 5-1: Manufacturer: syz [ 132.885178][ T5912] usb 5-1: SerialNumber: syz [ 132.919460][ T5912] usb 5-1: config 0 descriptor?? [ 132.967551][ T5912] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 133.057525][ T797] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 133.069634][ T797] usb 2-1: USB disconnect, device number 5 [ 133.079563][ T6556] tipc: Started in network mode [ 133.176891][ T6546] loop2: detected capacity change from 0 to 7 [ 133.183979][ T6556] tipc: Node identity a26ffdb9ddfd, cluster identity 4711 [ 133.206156][ T6556] tipc: Enabled bearer , priority 0 [ 133.212866][ T6546] loop2: [POWERTEC] p1 p2 [ 133.226235][ T6560] syzkaller0: entered promiscuous mode [ 133.237608][ T6546] loop2: p1 size 131072 extends beyond EOD, truncated [ 133.260107][ T6560] syzkaller0: entered allmulticast mode [ 133.326908][ T6546] loop2: p2 start 16974337 is beyond EOD, truncated [ 133.343664][ T5897] usb 5-1: USB disconnect, device number 4 [ 133.376035][ T13] usb 5-1: Failed to submit usb control message: -71 [ 133.384777][ T13] usb 5-1: unable to send the bmi data to the device: -71 [ 133.392897][ T13] usb 5-1: unable to get target info from device [ 133.421840][ T13] usb 5-1: could not get target info (-71) [ 133.429819][ T13] usb 5-1: could not probe fw (-71) [ 133.518824][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 133.534730][ T6555] tipc: Resetting bearer [ 133.586432][ T6555] tipc: Disabling bearer [ 134.507266][ T6575] syzkaller0: entered promiscuous mode [ 134.512932][ T6575] syzkaller0: entered allmulticast mode [ 134.625728][ T5904] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 134.766282][ T6576] netlink: 'syz.3.137': attribute type 6 has an invalid length. [ 134.820556][ T5904] usb 5-1: config 0 has no interfaces? [ 134.876612][ T5904] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 134.886320][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.903181][ T5904] usb 5-1: Product: syz [ 134.913091][ T5904] usb 5-1: Manufacturer: syz [ 134.926156][ T5904] usb 5-1: SerialNumber: syz [ 134.941875][ T5904] usb 5-1: config 0 descriptor?? [ 135.106285][ T6585] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 135.153935][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.164407][ T6585] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 135.176750][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.205996][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.246855][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.266813][ T6585] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 135.274711][ T6585] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 135.344434][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.363192][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.485817][ T6585] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 135.502470][ T6585] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 135.513165][ T6585] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 135.523164][ T6585] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 135.556860][ T6585] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 135.575207][ T5912] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.688790][ T6578] 8021q: VLANs not supported on vxcan0 [ 135.698943][ T5897] usb 5-1: USB disconnect, device number 5 [ 135.995402][ T5912] usb 2-1: unable to get BOS descriptor or descriptor too short [ 136.009635][ T5912] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 136.022299][ T5912] usb 2-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 136.166905][ T5912] usb 2-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 136.176762][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.184745][ T5912] usb 2-1: Product: syz [ 136.196372][ T5912] usb 2-1: Manufacturer: syz [ 136.255279][ T5912] usb 2-1: SerialNumber: syz [ 136.562950][ T5912] usb 2-1: USB disconnect, device number 6 [ 136.613647][ T6597] openvswitch: netlink: Message has 76 unknown bytes. [ 136.638723][ T6597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.744441][ T6604] tipc: Started in network mode [ 136.749471][ T6604] tipc: Node identity a21453ffefb4, cluster identity 4711 [ 136.758733][ T6604] tipc: Enabled bearer , priority 0 [ 136.770111][ T6604] syzkaller0: entered promiscuous mode [ 136.855780][ T5883] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.922648][ T6604] syzkaller0: entered allmulticast mode [ 137.023653][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.023885][ T6603] tipc: Resetting bearer [ 137.035009][ T5883] usb 5-1: config 0 has no interfaces? [ 137.047839][ T5883] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 137.058389][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.261612][ T5883] usb 5-1: config 0 descriptor?? [ 137.324299][ T6603] tipc: Disabling bearer [ 137.934610][ T6617] openvswitch: netlink: Message has 76 unknown bytes. [ 137.943377][ T6617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.048049][ T5883] usb 5-1: USB disconnect, device number 6 [ 139.017068][ T6625] syzkaller0: entered promiscuous mode [ 139.022606][ T6625] syzkaller0: entered allmulticast mode [ 139.489186][ T6627] syzkaller0: entered promiscuous mode [ 139.494692][ T6627] syzkaller0: entered allmulticast mode [ 140.127375][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 140.139363][ T6641] netlink: 48 bytes leftover after parsing attributes in process `syz.1.154'. [ 140.164812][ T6641] vlan2: entered allmulticast mode [ 140.172789][ T6641] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 141.958920][ T797] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.137353][ T797] usb 3-1: unable to get BOS descriptor or descriptor too short [ 142.146492][ T797] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 142.157293][ T797] usb 3-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 142.173258][ T797] usb 3-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 142.183817][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.216125][ T797] usb 3-1: Product: syz [ 142.227125][ T797] usb 3-1: Manufacturer: syz [ 142.240515][ T797] usb 3-1: SerialNumber: syz [ 142.398765][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 142.398782][ T29] audit: type=1326 audit(1774543009.982:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 142.437711][ T29] audit: type=1326 audit(1774543010.012:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 142.461292][ T29] audit: type=1326 audit(1774543010.012:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 142.484920][ T29] audit: type=1326 audit(1774543010.012:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 142.553891][ T29] audit: type=1326 audit(1774543010.012:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 142.583912][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.594725][ T797] usb 3-1: USB disconnect, device number 4 [ 142.639438][ T29] audit: type=1326 audit(1774543010.012:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 142.668749][ T29] audit: type=1326 audit(1774543010.012:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 142.710780][ T29] audit: type=1326 audit(1774543010.012:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 142.734176][ T29] audit: type=1326 audit(1774543010.012:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 142.773641][ T29] audit: type=1326 audit(1774543010.042:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34f6c code=0x7ffc0000 [ 142.835294][ T5912] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.855327][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 142.862567][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.871713][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.883053][ T24] usb 5-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 142.896562][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 142.909514][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.923638][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.932266][ T24] usb 5-1: Product: syz [ 142.936823][ T24] usb 5-1: Manufacturer: syz [ 142.941406][ T24] usb 5-1: SerialNumber: syz [ 143.005160][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 143.016166][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.031369][ T5912] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 143.041266][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.058665][ T5912] usb 4-1: config 0 descriptor?? [ 143.080209][ T5912] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 143.159035][ T24] usb 5-1: bad CDC descriptors [ 143.174976][ T24] usb 5-1: USB disconnect, device number 7 [ 145.249855][ T6665] delete_channel: no stack [ 145.258635][ T5897] usb 4-1: USB disconnect, device number 5 [ 145.370154][ T6674] syzkaller0: entered promiscuous mode [ 145.378745][ T6674] syzkaller0: entered allmulticast mode [ 146.854160][ T6695] blktrace: Concurrent blktraces are not allowed on sg0 [ 149.437469][ T6717] input: syz0 as /devices/virtual/input/input9 [ 152.809159][ T6743] syzkaller0: entered promiscuous mode [ 152.814899][ T6743] syzkaller0: entered allmulticast mode [ 153.687178][ T6751] syz.4.181 uses obsolete (PF_INET,SOCK_PACKET) [ 153.696999][ T6751] syzkaller1: entered promiscuous mode [ 153.702560][ T6751] syzkaller1: entered allmulticast mode [ 154.209123][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 154.815029][ T6767] blktrace: Concurrent blktraces are not allowed on sg0 [ 155.878639][ T6779] hub 9-0:1.0: USB hub found [ 155.885249][ T6779] hub 9-0:1.0: 1 port detected [ 156.034217][ T6781] fuse: Bad value for 'fd' [ 156.375182][ T797] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.125923][ T797] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 157.137567][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 157.182226][ T797] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 157.237448][ T797] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.257965][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.269466][ T797] usb 5-1: Product: syz [ 157.279284][ T797] usb 5-1: Manufacturer: syz [ 157.295230][ T797] usb 5-1: SerialNumber: syz [ 157.307916][ T797] usb 5-1: config 0 descriptor?? [ 157.325019][ T6782] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 157.574749][ T6780] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.006428][ T6802] input: syz0 as /devices/virtual/input/input10 [ 159.177909][ T6800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.201'. [ 159.620866][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 159.620886][ T29] audit: type=1326 audit(1774543026.922:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 159.662646][ T5912] usb 5-1: USB disconnect, device number 8 [ 159.965151][ T29] audit: type=1326 audit(1774543026.922:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 160.006303][ T29] audit: type=1326 audit(1774543026.922:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 160.030705][ T29] audit: type=1326 audit(1774543026.922:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 160.423064][ T29] audit: type=1326 audit(1774543026.922:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 160.538318][ T29] audit: type=1326 audit(1774543026.922:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 160.591540][ T29] audit: type=1326 audit(1774543027.032:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 160.643287][ T29] audit: type=1326 audit(1774543027.032:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 160.715400][ T29] audit: type=1326 audit(1774543027.102:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b5cab code=0x7ffc0000 [ 160.788683][ T29] audit: type=1326 audit(1774543027.102:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x7ffc0000 [ 161.736660][ T6833] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 162.275338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 163.136115][ T6843] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 163.149208][ T6843] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 165.588446][ T6879] overlayfs: missing 'lowerdir' [ 168.131986][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 168.141797][ T6896] netlink: 48 bytes leftover after parsing attributes in process `syz.4.213'. [ 168.170043][ T6896] vlan2: entered allmulticast mode [ 168.176803][ T6896] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 168.527580][ T5897] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 168.796879][ T5904] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 168.822760][ T5897] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 168.832212][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.864324][ T5897] usb 4-1: config 0 has no interface number 0 [ 168.894832][ T5897] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 168.996929][ T5897] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 169.094704][ T5897] usb 4-1: config 0 interface 106 has no altsetting 0 [ 169.103906][ T5904] usb 2-1: unable to get BOS descriptor or descriptor too short [ 169.123605][ T5897] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 169.138136][ T5904] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 169.150307][ T5904] usb 2-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 169.161445][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.208601][ T5904] usb 2-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 169.220265][ T5897] usb 4-1: config 0 descriptor?? [ 169.231782][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.246484][ T5904] usb 2-1: Product: syz [ 169.252318][ T5904] usb 2-1: Manufacturer: syz [ 169.266721][ T5897] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 169.277637][ T5904] usb 2-1: SerialNumber: syz [ 169.495121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 169.551986][ T6916] validate_nla: 45 callbacks suppressed [ 169.552009][ T6916] netlink: 'syz.4.218': attribute type 6 has an invalid length. [ 169.673714][ T5904] usb 2-1: USB disconnect, device number 7 [ 169.698508][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.710285][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.741921][ T6918] gtp0: entered promiscuous mode [ 169.748917][ T6918] gtp0: entered allmulticast mode [ 169.754872][ T6918] team0: Device gtp0 is of different type [ 169.874073][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.887031][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.382188][ T49] usb 4-1: Failed to submit usb control message: -110 [ 170.416700][ T49] usb 4-1: unable to send the bmi data to the device: -110 [ 170.444310][ T49] usb 4-1: unable to get target info from device [ 170.498436][ T49] usb 4-1: could not get target info (-110) [ 170.504375][ T49] usb 4-1: could not probe fw (-110) [ 170.861216][ T5904] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 171.298300][ T5904] usb 5-1: config 0 has no interfaces? [ 171.309320][ T5904] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 171.319863][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.341770][ T5904] usb 5-1: Product: syz [ 171.368765][ T5904] usb 5-1: Manufacturer: syz [ 171.384945][ T5904] usb 5-1: SerialNumber: syz [ 171.490863][ T5904] usb 5-1: config 0 descriptor?? [ 171.930347][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.975702][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.007840][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.016694][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.047802][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.058413][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.099117][ T6925] 8021q: VLANs not supported on vxcan1 [ 172.112375][ T24] usb 5-1: USB disconnect, device number 9 [ 172.382612][ T5897] usb 4-1: USB disconnect, device number 6 [ 172.582269][ T6951] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 172.658403][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 173.171836][ T6952] bridge_slave_1: left allmulticast mode [ 173.184942][ T6952] bridge_slave_1: left promiscuous mode [ 173.201872][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.774233][ T6952] bridge_slave_0: left allmulticast mode [ 173.811110][ T6952] bridge_slave_0: left promiscuous mode [ 173.820119][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.388321][ T6954] tipc: Enabling of bearer rejected, failed to enable media [ 175.505179][ T5912] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 175.928982][ T5912] usb 5-1: unable to get BOS descriptor or descriptor too short [ 175.947781][ T5912] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 175.964731][ T5912] usb 5-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 175.978200][ T5912] usb 5-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 175.993210][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.003385][ T5912] usb 5-1: Product: syz [ 176.011207][ T5912] usb 5-1: Manufacturer: syz [ 176.029648][ T5912] usb 5-1: SerialNumber: syz [ 176.055197][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 176.264393][ T24] usb 3-1: config 0 has no interfaces? [ 176.272725][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 176.282589][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.549768][ T24] usb 3-1: Product: syz [ 176.554023][ T24] usb 3-1: Manufacturer: syz [ 176.566587][ T24] usb 3-1: SerialNumber: syz [ 176.584371][ T5912] usb 5-1: USB disconnect, device number 10 [ 176.608085][ T24] usb 3-1: config 0 descriptor?? [ 176.958318][ T6993] openvswitch: netlink: Message has 76 unknown bytes. [ 176.966278][ T6993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.086800][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.111305][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.142335][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.151854][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.170792][ T6979] 8021q: VLANs not supported on vxcan1 [ 177.179639][ T24] usb 3-1: USB disconnect, device number 5 [ 178.508096][ T7005] hub 9-0:1.0: USB hub found [ 178.514497][ T7005] hub 9-0:1.0: 1 port detected [ 178.622320][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 179.293132][ T7017] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 179.303024][ T7017] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 179.317686][ T7017] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 179.329446][ T7017] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 179.342706][ T7017] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 179.428156][ T7017] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 179.462102][ T7017] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 179.527931][ T7017] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 179.543305][ T7017] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 179.554424][ T7017] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 181.681377][ T7042] vivid-006: disconnect [ 182.790828][ T7042] vivid-006: reconnect [ 183.025198][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 183.403168][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.414075][ T24] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 183.426476][ T24] usb 2-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 183.460891][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 183.473460][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.503861][ T24] usb 2-1: Product: syz [ 183.520977][ T24] usb 2-1: Manufacturer: syz [ 183.538430][ T24] usb 2-1: SerialNumber: syz [ 183.778720][ T7065] program syz.3.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.387651][ T24] usb 2-1: USB disconnect, device number 8 [ 184.900667][ T7072] libceph: resolve '. [ 184.900667][ T7072] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 184.900667][ T7072] ' (ret=-3): failed [ 185.055019][ T7076] validate_nla: 44 callbacks suppressed [ 185.055040][ T7076] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 185.114873][ T7078] hub 9-0:1.0: USB hub found [ 185.125355][ T7078] hub 9-0:1.0: 1 port detected [ 187.277549][ T7107] netlink: 272 bytes leftover after parsing attributes in process `syz.3.265'. [ 189.747308][ T5904] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 191.079849][ T5904] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.122781][ T5904] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 191.143587][ T5904] usb 2-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 191.198867][ T5904] usb 2-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 191.209963][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.231348][ T5904] usb 2-1: Product: syz [ 191.377274][ T5904] usb 2-1: Manufacturer: syz [ 191.692073][ T5904] usb 2-1: SerialNumber: syz [ 191.898317][ T7151] libceph: resolve '. [ 191.898317][ T7151] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 191.898317][ T7151] ' (ret=-3): failed [ 191.994216][ T5904] usb 2-1: USB disconnect, device number 9 [ 193.784896][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 193.803500][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 193.827207][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 193.997266][ T7185] netlink: 96 bytes leftover after parsing attributes in process `syz.1.282'. [ 194.224028][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.240892][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.234379][ T7193] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 195.743167][ T7201] netlink: 'syz.1.285': attribute type 3 has an invalid length. [ 195.751216][ T7201] netlink: 'syz.1.285': attribute type 3 has an invalid length. [ 195.760012][ T7201] netlink: 'syz.1.285': attribute type 3 has an invalid length. [ 195.768569][ T7201] netlink: 'syz.1.285': attribute type 3 has an invalid length. [ 195.776364][ T7201] netlink: 'syz.1.285': attribute type 3 has an invalid length. [ 195.784138][ T7201] netlink: 'syz.1.285': attribute type 3 has an invalid length. [ 195.792438][ T7201] netlink: 'syz.1.285': attribute type 3 has an invalid length. [ 195.880675][ T7201] netlink: 'syz.1.285': attribute type 3 has an invalid length. [ 195.892244][ T7201] netlink: 'syz.1.285': attribute type 3 has an invalid length. [ 195.923428][ T7201] netlink: 'syz.1.285': attribute type 3 has an invalid length. [ 196.272551][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 196.304364][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 196.357213][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 196.363330][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 196.371553][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 196.585630][ T7209] openvswitch: netlink: Message has 76 unknown bytes. [ 196.604063][ T7209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.560596][ T7227] libceph: resolve '. [ 198.560596][ T7227] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 198.560596][ T7227] ' (ret=-3): failed [ 199.126537][ T7236] hub 9-0:1.0: USB hub found [ 199.154109][ T7236] hub 9-0:1.0: 1 port detected [ 202.607288][ T7261] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 203.106319][ T797] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 203.535177][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 203.543548][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.607764][ T797] usb 4-1: config 0 has no interfaces? [ 203.618905][ T797] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 203.638341][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.670581][ T797] usb 4-1: config 0 descriptor?? [ 203.907830][ T5904] usb 4-1: USB disconnect, device number 7 [ 206.156026][ T1645] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 206.334380][ T1645] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.366557][ T1645] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 206.387367][ T1645] usb 3-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 206.777238][ T1645] usb 3-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 206.787765][ T1645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.816365][ T1645] usb 3-1: Product: syz [ 206.821539][ T1645] usb 3-1: Manufacturer: syz [ 206.841785][ T1645] usb 3-1: SerialNumber: syz [ 207.237136][ T1645] usb 3-1: USB disconnect, device number 6 [ 208.281552][ T7332] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 209.528800][ T7351] kAFS: unable to lookup cell 'ÿ' [ 209.591947][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.314'. [ 211.248125][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 211.319849][ T7372] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 213.839841][ T7399] input: syz0 as /devices/virtual/input/input12 [ 213.927433][ T5912] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 214.432252][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.513561][ T5912] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 214.534984][ T5912] usb 3-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 214.777291][ T5912] usb 3-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 214.793379][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.819951][ T5912] usb 3-1: Product: syz [ 214.830105][ T5912] usb 3-1: Manufacturer: syz [ 214.848972][ T5912] usb 3-1: SerialNumber: syz [ 215.266660][ T5912] usb 3-1: USB disconnect, device number 7 [ 216.497506][ T5904] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 216.659107][ T5904] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 216.672082][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.698810][ T5904] usb 3-1: config 0 has no interface number 0 [ 216.712686][ T5904] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 216.742721][ T5904] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 216.779127][ T5904] usb 3-1: config 0 interface 106 has no altsetting 0 [ 216.801337][ T5904] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 216.821571][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.852459][ T5904] usb 3-1: config 0 descriptor?? [ 216.899838][ T5904] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 217.363609][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.379630][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.463708][ T7426] team0: Device gtp0 is of different type [ 217.546907][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.557009][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.115118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 218.145111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 218.185228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 218.215118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 218.490090][ T136] usb 3-1: Failed to submit usb control message: -110 [ 218.526865][ T136] usb 3-1: unable to send the bmi data to the device: -110 [ 218.552037][ T136] usb 3-1: unable to get target info from device [ 218.566002][ T136] usb 3-1: could not get target info (-110) [ 218.782652][ T136] usb 3-1: could not probe fw (-110) [ 219.364807][ T5897] usb 3-1: USB disconnect, device number 8 [ 219.898849][ T7459] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 221.586703][ T1645] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 221.749334][ T1645] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.759987][ T1645] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 221.772667][ T1645] usb 5-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 221.820596][ T1645] usb 5-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 221.890427][ T1645] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.952916][ T1645] usb 5-1: Product: syz [ 221.977462][ T1645] usb 5-1: Manufacturer: syz [ 222.168408][ T1645] usb 5-1: SerialNumber: syz [ 222.818052][ T1645] usb 5-1: USB disconnect, device number 11 [ 223.240928][ T7485] fuse: Bad value for 'fd' [ 224.678970][ T7498] hub 9-0:1.0: USB hub found [ 224.685236][ T7498] hub 9-0:1.0: 1 port detected [ 226.993539][ T7525] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 231.295284][ T7560] openvswitch: netlink: IP tunnel dst address not specified [ 232.056156][ T797] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 232.235276][ T797] usb 2-1: Using ep0 maxpacket: 32 [ 232.247765][ T797] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 232.281452][ T797] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 232.295284][ T797] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 232.514962][ T797] usb 2-1: Product: syz [ 232.524988][ T797] usb 2-1: Manufacturer: syz [ 232.545449][ T797] usb 2-1: SerialNumber: syz [ 232.563936][ T797] usb 2-1: config 0 descriptor?? [ 232.574472][ T7566] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.998027][ T7566] netlink: 220 bytes leftover after parsing attributes in process `syz.1.363'. [ 233.033480][ T7566] netlink: 220 bytes leftover after parsing attributes in process `syz.1.363'. [ 233.067239][ T7566] netlink: 56 bytes leftover after parsing attributes in process `syz.1.363'. [ 233.119950][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.130390][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.139937][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.171498][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.179994][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.654080][ T7587] chnl_net:caif_netlink_parms(): no params data found [ 234.980152][ T7587] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.995399][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.003411][ T7587] bridge_slave_0: entered allmulticast mode [ 235.012702][ T7587] bridge_slave_0: entered promiscuous mode [ 235.206476][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 235.206496][ T29] audit: type=1326 audit(1774543102.642:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 235.248586][ T797] usb 2-1: USB disconnect, device number 10 [ 235.292359][ T29] audit: type=1326 audit(1774543102.642:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 235.316355][ T51] Bluetooth: hci5: command tx timeout [ 235.338100][ T7587] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.346411][ T29] audit: type=1326 audit(1774543102.642:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 235.368439][ T29] audit: type=1326 audit(1774543102.642:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 235.372265][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.392045][ T29] audit: type=1326 audit(1774543102.762:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 235.392085][ T29] audit: type=1326 audit(1774543102.762:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 235.564524][ T7587] bridge_slave_1: entered allmulticast mode [ 235.578443][ T7587] bridge_slave_1: entered promiscuous mode [ 235.912575][ T7615] netlink: 76 bytes leftover after parsing attributes in process `syz.1.372'. [ 235.928767][ T7587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.961598][ T7587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.057745][ T7587] team0: Port device team_slave_0 added [ 236.163024][ T7620] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 236.417729][ T7587] team0: Port device team_slave_1 added [ 236.520511][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.534184][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.894692][ T7587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.998246][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.012444][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.140357][ T7587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.183778][ T7626] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 237.301153][ T7587] hsr_slave_0: entered promiscuous mode [ 237.433229][ T5822] Bluetooth: hci5: command tx timeout [ 237.441910][ T7587] hsr_slave_1: entered promiscuous mode [ 237.485890][ T7587] debugfs: 'hsr0' already exists in 'hsr' [ 237.506659][ T7587] Cannot create hsr debugfs directory [ 237.960738][ T7587] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 238.216626][ T7587] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 238.338185][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 238.376902][ T7587] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 238.497048][ T7587] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.185388][ T7587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.234784][ T7587] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.299662][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.306815][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.516674][ T5822] Bluetooth: hci5: command tx timeout [ 239.577699][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.584812][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.340457][ T7587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.949789][ T7587] veth0_vlan: entered promiscuous mode [ 240.983768][ T7587] veth1_vlan: entered promiscuous mode [ 241.093189][ T7587] veth0_macvtap: entered promiscuous mode [ 241.548440][ T7587] veth1_macvtap: entered promiscuous mode [ 241.558648][ T5822] Bluetooth: hci5: command tx timeout [ 242.007866][ T7670] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 242.061782][ T7587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.093849][ T7587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.150589][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.169219][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.192518][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.207334][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.422952][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.600173][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.728296][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.778320][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.968462][ T7712] ipip0: entered promiscuous mode [ 245.973574][ T7712] ipip0: entered allmulticast mode [ 246.053383][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.389'. [ 246.083297][ T7718] netlink: 48 bytes leftover after parsing attributes in process `syz.5.389'. [ 246.207555][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.390'. [ 246.657269][ T29] audit: type=1326 audit(1774543114.202:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 247.075343][ T29] audit: type=1326 audit(1774543114.202:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 247.498504][ T29] audit: type=1326 audit(1774543114.202:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 247.797751][ T29] audit: type=1326 audit(1774543114.202:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 247.845499][ T29] audit: type=1326 audit(1774543114.202:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 247.876889][ T29] audit: type=1326 audit(1774543114.202:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 247.918351][ T29] audit: type=1326 audit(1774543114.212:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 247.942387][ T29] audit: type=1326 audit(1774543114.212:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 247.974126][ T29] audit: type=1326 audit(1774543114.212:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 248.191518][ T29] audit: type=1326 audit(1774543114.212:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 248.262375][ T7718] vlan2: entered allmulticast mode [ 248.268804][ T7718] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 248.888920][ T7735] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 251.631313][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.398'. [ 253.324744][ T7786] ipip0: entered promiscuous mode [ 253.332038][ T7786] ipip0: entered allmulticast mode [ 253.429200][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 253.482345][ T7785] bridge_slave_1: left allmulticast mode [ 253.609431][ T7785] bridge_slave_1: left promiscuous mode [ 253.639450][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.813830][ T7785] bridge_slave_0: left allmulticast mode [ 253.821472][ T7785] bridge_slave_0: left promiscuous mode [ 253.864419][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.631623][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 255.265004][ T7807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.614453][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.621329][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.708261][ T7814] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 256.198618][ T7816] openvswitch: netlink: IP tunnel dst address not specified [ 260.352888][ T7855] blktrace: Concurrent blktraces are not allowed on nullb0 [ 261.872635][ T1645] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 262.039389][ T1645] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.049953][ T1645] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 262.166288][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.421'. [ 262.203265][ T1645] usb 2-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 262.254897][ T1645] usb 2-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 262.289263][ T1645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.318308][ T1645] usb 2-1: Product: syz [ 262.330018][ T1645] usb 2-1: Manufacturer: syz [ 262.338560][ T1645] usb 2-1: SerialNumber: syz [ 262.741888][ T1645] usb 2-1: USB disconnect, device number 11 [ 263.604452][ T7883] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 263.925395][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 264.143887][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 264.195590][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 264.307239][ T24] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 264.327176][ T24] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 264.343827][ T24] usb 6-1: Product: syz [ 264.353764][ T24] usb 6-1: Manufacturer: syz [ 264.358660][ T24] usb 6-1: SerialNumber: syz [ 264.391342][ T24] usb 6-1: config 0 descriptor?? [ 264.621177][ T7879] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 264.812894][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 265.368865][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 267.566334][ T7956] netlink: 52 bytes leftover after parsing attributes in process `syz.4.433'. [ 267.583990][ T7956] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 267.590703][ T7956] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 267.603465][ T7956] validate_nla: 43 callbacks suppressed [ 267.603480][ T7956] netlink: 'syz.4.433': attribute type 21 has an invalid length. [ 267.619462][ T7956] netlink: 128 bytes leftover after parsing attributes in process `syz.4.433'. [ 267.716491][ T7958] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 267.780473][ T1645] usb 6-1: USB disconnect, device number 2 [ 267.798616][ T7956] netlink: 'syz.4.433': attribute type 5 has an invalid length. [ 268.073685][ T7963] IPVS: length: 153 != 24 [ 268.087560][ T7956] netlink: 'syz.4.433': attribute type 6 has an invalid length. [ 268.140427][ T7956] netlink: 3 bytes leftover after parsing attributes in process `syz.4.433'. [ 268.488591][ T7965] ipip0: entered promiscuous mode [ 268.493767][ T7965] ipip0: entered allmulticast mode [ 268.666736][ T7976] netlink: 'syz.0.435': attribute type 21 has an invalid length. [ 268.740870][ T7976] netlink: 128 bytes leftover after parsing attributes in process `syz.0.435'. [ 268.794964][ T7976] netlink: 'syz.0.435': attribute type 4 has an invalid length. [ 268.861247][ T7976] netlink: 'syz.0.435': attribute type 5 has an invalid length. [ 268.988643][ T7976] netlink: 3 bytes leftover after parsing attributes in process `syz.0.435'. [ 270.386493][ T5883] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 271.127091][ T5883] usb 3-1: unable to get BOS descriptor or descriptor too short [ 271.136727][ T5883] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 271.147988][ T5883] usb 3-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 271.456370][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 271.472490][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.494827][ T5883] usb 3-1: Product: syz [ 271.526772][ T5897] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 271.539336][ T5883] usb 3-1: Manufacturer: syz [ 271.544627][ T5883] usb 3-1: SerialNumber: syz [ 271.665796][ T5897] usb 2-1: device descriptor read/64, error -71 [ 271.789277][ T5883] usb 3-1: USB disconnect, device number 9 [ 271.826717][ T5904] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 271.930954][ T5897] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 271.985715][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 272.004061][ T5904] usb 5-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 272.017743][ T5904] usb 5-1: config 162 has 0 interfaces, different from the descriptor's value: 1 [ 272.066231][ T8002] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 272.087943][ T5897] usb 2-1: device descriptor read/64, error -71 [ 272.112727][ T5904] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 272.124768][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.140202][ T5904] usb 5-1: Product: syz [ 272.144488][ T5904] usb 5-1: Manufacturer: syz [ 272.152026][ T5904] usb 5-1: SerialNumber: syz [ 272.154043][ T8004] syzkaller0: entered promiscuous mode [ 272.170111][ T8004] syzkaller0: entered allmulticast mode [ 272.206339][ T5897] usb usb2-port1: attempt power cycle [ 272.396612][ T797] usb 5-1: USB disconnect, device number 12 [ 272.545938][ T5897] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 272.577539][ T5897] usb 2-1: device descriptor read/8, error -71 [ 272.816625][ T5897] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 272.849286][ T5897] usb 2-1: device descriptor read/8, error -71 [ 272.967110][ T5897] usb usb2-port1: unable to enumerate USB device [ 273.524321][ T8020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.456'. [ 273.605336][ T8020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.456'. [ 275.694540][ T8042] syzkaller1: entered promiscuous mode [ 275.700434][ T8042] syzkaller1: entered allmulticast mode [ 277.002617][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 277.325227][ T8059] bridge_slave_1: left allmulticast mode [ 277.331165][ T8059] bridge_slave_1: left promiscuous mode [ 277.337718][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.379830][ T8059] bridge_slave_0: left allmulticast mode [ 277.399020][ T8059] bridge_slave_0: left promiscuous mode [ 277.405256][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.476150][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 277.733278][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 277.751443][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.914089][ T10] usb 3-1: config 0 has no interface number 0 [ 277.935071][ T10] usb 3-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.997499][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 278.009281][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.081718][ T10] usb 3-1: Product: syz [ 278.091893][ T10] usb 3-1: Manufacturer: syz [ 278.098999][ T10] usb 3-1: SerialNumber: syz [ 278.133426][ T10] usb 3-1: config 0 descriptor?? [ 278.261136][ T10] yurex 3-1:0.50: Could not find endpoints [ 278.792712][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 280.077771][ T42] usb 3-1: USB disconnect, device number 10 [ 280.491718][ T8091] usb usb7: usbfs: process 8091 (syz.1.461) did not claim interface 0 before use [ 282.510972][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 282.613519][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 282.766734][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 282.831504][ T8108] syzkaller0: entered promiscuous mode [ 282.885956][ T8108] syzkaller0: entered allmulticast mode [ 283.774857][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 283.774875][ T29] audit: type=1326 audit(1774543151.352:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.5.469" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x0 [ 283.953665][ T8128] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 283.964707][ T8121] snd_virmidi snd_virmidi.0: control 1:9:195:ÿÿ :53367 is already present [ 285.959437][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 286.077005][ T8146] bridge_slave_1: left allmulticast mode [ 286.083557][ T8146] bridge_slave_1: left promiscuous mode [ 286.091020][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.597996][ T8146] bridge_slave_0: left allmulticast mode [ 286.603816][ T8146] bridge_slave_0: left promiscuous mode [ 286.612032][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.444989][ T8160] pim6reg: entered allmulticast mode [ 289.618316][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.478'. [ 292.674096][ T8196] ipip0: entered promiscuous mode [ 292.681931][ T8196] ipip0: entered allmulticast mode [ 293.055251][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 293.067042][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 294.546398][ T8225] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 296.887749][ T8241] netlink: 'syz.4.493': attribute type 21 has an invalid length. [ 296.899199][ T8241] netlink: 'syz.4.493': attribute type 6 has an invalid length. [ 296.924082][ T8241] netlink: 132 bytes leftover after parsing attributes in process `syz.4.493'. [ 297.165201][ T5912] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 297.315230][ T5912] usb 2-1: device descriptor read/64, error -71 [ 297.359115][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 297.565957][ T5912] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 297.628282][ T8257] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 297.751297][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.495'. [ 297.766318][ T5912] usb 2-1: device descriptor read/64, error -71 [ 297.778468][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.495'. [ 297.806361][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.495'. [ 297.875503][ T5912] usb usb2-port1: attempt power cycle [ 297.948757][ T8258] syzkaller0: entered promiscuous mode [ 297.955069][ T8258] syzkaller0: entered allmulticast mode [ 298.266794][ T5912] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 298.299241][ T5912] usb 2-1: device descriptor read/8, error -71 [ 298.611705][ T5912] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 298.648721][ T5912] usb 2-1: device descriptor read/8, error -71 [ 298.769006][ T5912] usb usb2-port1: unable to enumerate USB device [ 299.012007][ T8275] vivid-004: disconnect [ 299.028967][ T8275] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.009319][ T8268] vivid-004: reconnect [ 300.827768][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 300.989963][ T10] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 300.999197][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.011517][ T10] usb 2-1: config 0 has no interface number 0 [ 301.023680][ T10] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 301.064474][ T10] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 301.102393][ T10] usb 2-1: config 0 interface 106 has no altsetting 0 [ 301.121101][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 301.158048][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.189102][ T10] usb 2-1: config 0 descriptor?? [ 301.293822][ T10] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 301.572798][ T8306] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 302.065119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 302.110538][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.122600][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.161478][ T8313] team0: Device gtp0 is of different type [ 302.434876][ T7942] usb 2-1: Failed to submit usb control message: -110 [ 302.549505][ T7942] usb 2-1: unable to send the bmi data to the device: -110 [ 302.575909][ T7942] usb 2-1: unable to get target info from device [ 302.628769][ T7942] usb 2-1: could not get target info (-110) [ 302.638238][ T7942] usb 2-1: could not probe fw (-110) [ 303.430693][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 303.506090][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 303.532408][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 303.543002][ T8321] syzkaller0: entered promiscuous mode [ 303.549632][ T8321] syzkaller0: entered allmulticast mode [ 303.576088][ T5904] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 303.743299][ T5904] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 303.753915][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.783821][ T5904] usb 5-1: config 0 has no interface number 0 [ 303.811813][ T5904] usb 5-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.983575][ T5904] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 303.994612][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.031995][ T5904] usb 5-1: Product: syz [ 304.041787][ T5904] usb 5-1: Manufacturer: syz [ 304.064611][ T5904] usb 5-1: SerialNumber: syz [ 304.271401][ T5904] usb 5-1: config 0 descriptor?? [ 304.353458][ T5904] yurex 5-1:0.50: Could not find endpoints [ 304.825218][ T5912] usb 2-1: USB disconnect, device number 20 [ 305.480105][ T5912] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 306.232810][ T5912] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 306.264447][ T5912] usb 2-1: config 1 has no interface number 0 [ 306.318250][ T5912] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 306.363846][ T5912] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 306.396459][ T5912] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 306.421325][ T5912] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.448133][ T797] usb 5-1: USB disconnect, device number 13 [ 306.509258][ T5912] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 306.562477][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.662177][ T5912] usb 2-1: Product: syz [ 306.685229][ T5912] usb 2-1: Manufacturer: syz [ 306.689872][ T5912] usb 2-1: SerialNumber: syz [ 306.731777][ T8335] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.743846][ T8335] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.779938][ T5912] usb 2-1: Error in usbnet_get_endpoints (-22) [ 307.271608][ T5912] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 307.455270][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 307.462305][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.473231][ T5912] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.898925][ T5912] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 307.910440][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.940923][ T5912] usb 3-1: Product: syz [ 308.011042][ T5912] usb 3-1: Manufacturer: syz [ 308.019969][ T5912] usb 3-1: SerialNumber: syz [ 308.031762][ T5912] usb 3-1: config 0 descriptor?? [ 308.371065][ T5912] usb 2-1: USB disconnect, device number 21 [ 309.534587][ T8372] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 309.800278][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 309.809182][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 309.819087][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 309.843805][ T8374] syzkaller0: entered promiscuous mode [ 309.878219][ T8374] syzkaller0: entered allmulticast mode [ 310.885598][ T797] usb 3-1: USB disconnect, device number 11 [ 311.080130][ T8396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.526'. [ 312.987966][ T5912] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 313.250984][ T5912] usb 3-1: no configurations [ 313.257791][ T5912] usb 3-1: can't read configurations, error -22 [ 313.481012][ T5912] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 313.657550][ T5912] usb 3-1: no configurations [ 313.662172][ T5912] usb 3-1: can't read configurations, error -22 [ 313.701093][ T5912] usb usb3-port1: attempt power cycle [ 313.871020][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 313.886912][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 313.990887][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.532'. [ 314.030372][ T8421] syzkaller0: entered promiscuous mode [ 314.053569][ T8421] syzkaller0: entered allmulticast mode [ 314.066511][ T5912] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 314.108066][ T5912] usb 3-1: no configurations [ 314.113976][ T5912] usb 3-1: can't read configurations, error -22 [ 314.255248][ T5912] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 314.288148][ T5912] usb 3-1: no configurations [ 314.292858][ T5912] usb 3-1: can't read configurations, error -22 [ 314.325472][ T5912] usb usb3-port1: unable to enumerate USB device [ 315.969847][ T8443] netlink: 64 bytes leftover after parsing attributes in process `syz.5.534'. [ 316.165183][ T5912] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 316.178793][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.534'. [ 316.356228][ T8446] bridge_slave_1: left allmulticast mode [ 316.363611][ T8446] bridge_slave_1: left promiscuous mode [ 316.434914][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.505226][ T5912] usb 5-1: device descriptor read/64, error -71 [ 316.848217][ T5912] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 316.919570][ T8449] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 316.977660][ T8446] bridge_slave_0: left allmulticast mode [ 316.983472][ T8446] bridge_slave_0: left promiscuous mode [ 317.012222][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.022076][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.030581][ T5912] usb 5-1: device descriptor read/64, error -71 [ 317.078014][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.166051][ T5912] usb usb5-port1: attempt power cycle [ 317.576445][ T5912] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 317.606653][ T5912] usb 5-1: device descriptor read/8, error -71 [ 317.845214][ T5912] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 317.877615][ T5912] usb 5-1: device descriptor read/8, error -71 [ 317.996089][ T5912] usb usb5-port1: unable to enumerate USB device [ 319.113503][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 319.239884][ T8472] No such timeout policy "syz0" [ 320.324837][ T29] audit: type=1326 audit(1774543187.902:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.0.541" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x0 [ 320.945986][ T8496] usb usb7: usbfs: process 8496 (syz.4.547) did not claim interface 0 before use [ 322.063707][ T5912] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 322.459249][ T5912] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 322.646924][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.705158][ T5912] usb 2-1: config 0 has no interface number 0 [ 323.215230][ T5912] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.732135][ T8518] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 324.801347][ T5912] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 324.815144][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.851191][ T5912] usb 2-1: Product: syz [ 324.872368][ T5912] usb 2-1: Manufacturer: syz [ 324.903657][ T5912] usb 2-1: config 0 descriptor?? [ 324.943410][ T5912] usb 2-1: can't set config #0, error -71 [ 324.988874][ T5912] usb 2-1: USB disconnect, device number 22 [ 325.613951][ T5883] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 325.810230][ T5883] usb 5-1: no configurations [ 325.814865][ T5883] usb 5-1: can't read configurations, error -22 [ 326.226791][ T5883] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 326.609369][ T5883] usb 5-1: no configurations [ 326.613984][ T5883] usb 5-1: can't read configurations, error -22 [ 326.644449][ T5883] usb usb5-port1: attempt power cycle [ 327.016203][ T5883] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 327.115061][ T5883] usb 5-1: no configurations [ 327.126742][ T5883] usb 5-1: can't read configurations, error -22 [ 327.306933][ T5883] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 327.446251][ T5883] usb 5-1: no configurations [ 327.474155][ T5883] usb 5-1: can't read configurations, error -22 [ 327.483104][ T5883] usb usb5-port1: unable to enumerate USB device [ 327.537436][ T8542] warning: `syz.0.556' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 328.358178][ T29] audit: type=1326 audit(1774543195.912:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.1.557" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2f6c code=0x0 [ 328.447619][ T5912] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 328.606022][ T5912] usb 5-1: no configurations [ 328.610732][ T5912] usb 5-1: can't read configurations, error -22 [ 328.852921][ T5912] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 329.223644][ T5912] usb 5-1: no configurations [ 329.386336][ T5912] usb 5-1: can't read configurations, error -22 [ 329.404768][ T5912] usb usb5-port1: attempt power cycle [ 329.542981][ T8564] syzkaller0: entered promiscuous mode [ 329.549150][ T8564] syzkaller0: entered allmulticast mode [ 329.753031][ T8569] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 329.806200][ T5912] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 329.863341][ T8572] usb usb7: usbfs: process 8572 (syz.5.560) did not claim interface 0 before use [ 329.959175][ T5912] usb 5-1: no configurations [ 329.963796][ T5912] usb 5-1: can't read configurations, error -22 [ 330.286839][ T5912] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 330.330501][ T5912] usb 5-1: no configurations [ 330.371626][ T5912] usb 5-1: can't read configurations, error -22 [ 330.625331][ T5912] usb usb5-port1: unable to enumerate USB device [ 331.433507][ T8585] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 331.440156][ T8585] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 331.521483][ T8585] vhci_hcd vhci_hcd.0: Device attached [ 331.532790][ T8589] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 331.539436][ T8589] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 331.550551][ T8589] vhci_hcd vhci_hcd.0: Device attached [ 331.564549][ T8585] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 331.571166][ T8585] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 331.580703][ T8585] vhci_hcd vhci_hcd.0: Device attached [ 331.617393][ T8585] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 332.350996][ T5912] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 332.382894][ T8585] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(22) [ 332.389506][ T8585] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 332.407487][ T8589] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 332.414091][ T8589] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 332.499262][ T8585] vhci_hcd vhci_hcd.0: Device attached [ 332.519404][ T8589] vhci_hcd vhci_hcd.0: Device attached [ 332.633793][ T8605] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 332.640407][ T8605] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 332.766754][ T8605] vhci_hcd vhci_hcd.0: Device attached [ 332.777476][ T8589] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 332.823486][ T8585] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(26) [ 332.830127][ T8585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 333.078001][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.567'. [ 333.385289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 333.481333][ T8585] vhci_hcd vhci_hcd.0: Device attached [ 333.631547][ T8606] vhci_hcd: connection closed [ 333.632219][ T8590] vhci_hcd: connection closed [ 333.637787][ T8586] vhci_hcd: connection reset by peer [ 333.648586][ T8595] vhci_hcd: connection closed [ 333.650488][ T58] vhci_hcd vhci_hcd.1: stop threads [ 333.650552][ T8601] vhci_hcd: connection closed [ 333.696568][ T8602] vhci_hcd: connection closed [ 333.702674][ T8609] vhci_hcd: connection closed [ 333.707488][ T58] vhci_hcd vhci_hcd.1: release socket [ 333.707554][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 333.726642][ T58] vhci_hcd vhci_hcd.1: stop threads [ 333.734751][ T58] vhci_hcd vhci_hcd.1: release socket [ 333.743957][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 333.754305][ T58] vhci_hcd vhci_hcd.1: stop threads [ 333.768834][ T5883] IPVS: starting estimator thread 0... [ 333.774629][ T58] vhci_hcd vhci_hcd.1: release socket [ 333.799976][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 333.812608][ T58] vhci_hcd vhci_hcd.1: stop threads [ 333.826590][ T58] vhci_hcd vhci_hcd.1: release socket [ 333.839529][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 333.856192][ T58] vhci_hcd vhci_hcd.1: stop threads [ 333.866235][ T8619] IPVS: using max 31 ests per chain, 74400 per kthread [ 333.866799][ T58] vhci_hcd vhci_hcd.1: release socket [ 333.903747][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 333.931235][ T58] vhci_hcd vhci_hcd.1: stop threads [ 333.944263][ T58] vhci_hcd vhci_hcd.1: release socket [ 333.962841][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 333.974757][ T58] vhci_hcd vhci_hcd.1: stop threads [ 334.014846][ T58] vhci_hcd vhci_hcd.1: release socket [ 334.043797][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 337.485287][ T5912] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 338.191515][ T8660] binder: BINDER_SET_CONTEXT_MGR already set [ 338.207458][ T8660] binder: 8658:8660 ioctl 4018620d 80000040 returned -16 [ 338.405448][ T8665] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 339.149385][ T797] usb usb36-port1: attempt power cycle [ 339.456808][ T10] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 339.702717][ T8681] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 339.847609][ T10] usb 5-1: no configurations [ 339.852249][ T10] usb 5-1: can't read configurations, error -22 [ 340.090432][ T10] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 340.178100][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 340.187864][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 340.350251][ T797] usb usb36-port1: unable to enumerate USB device [ 340.426959][ T10] usb 5-1: no configurations [ 340.431599][ T10] usb 5-1: can't read configurations, error -22 [ 340.448709][ T10] usb usb5-port1: attempt power cycle [ 341.116200][ T10] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 341.128270][ T797] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 341.140855][ T10] usb 5-1: no configurations [ 341.146236][ T10] usb 5-1: can't read configurations, error -22 [ 341.287409][ T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 341.332508][ T10] usb 5-1: no configurations [ 341.350595][ T10] usb 5-1: can't read configurations, error -22 [ 341.357429][ T797] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 341.357457][ T797] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.357476][ T797] usb 6-1: config 0 has no interface number 0 [ 341.357514][ T797] usb 6-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.562995][ T10] usb usb5-port1: unable to enumerate USB device [ 342.058588][ T797] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 342.075281][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.108454][ T797] usb 6-1: Product: syz [ 342.112663][ T797] usb 6-1: Manufacturer: syz [ 342.127708][ T797] usb 6-1: SerialNumber: syz [ 342.355724][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 342.406249][ T8705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.521438][ T797] usb 6-1: config 0 descriptor?? [ 342.523856][ T797] yurex 6-1:0.50: Could not find endpoints [ 343.514320][ T29] audit: type=1326 audit(1774543211.072:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8703 comm="syz.4.590" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x0 [ 343.746044][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 343.906861][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 343.985793][ T797] usb 6-1: USB disconnect, device number 3 [ 344.000199][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.023689][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.073420][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 344.097948][ T10] usb 2-1: SerialNumber: syz [ 344.117798][ T10] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 344.128653][ T10] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 344.136137][ T10] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 344.312025][ T8721] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 344.443288][ T8712] IPv6: NLM_F_REPLACE set, but no existing node found! [ 344.557892][ T8725] binder: BINDER_SET_CONTEXT_MGR already set [ 344.564356][ T8725] binder: 8724:8725 ioctl 4018620d 80000040 returned -16 [ 344.867518][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 345.206856][ T10] usb 6-1: too many configurations: 53, using maximum allowed: 8 [ 345.259392][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 345.298748][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.308986][ T10] usb 6-1: Product: syz [ 345.349083][ T10] usb 6-1: Manufacturer: syz [ 345.353717][ T10] usb 6-1: SerialNumber: syz [ 345.379630][ T5883] usb 2-1: USB disconnect, device number 23 [ 346.552261][ T8743] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 347.220735][ T5897] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 347.435380][ T8753] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 347.559389][ T5897] usb 2-1: no configurations [ 347.567560][ T5897] usb 2-1: can't read configurations, error -22 [ 347.907654][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 347.922210][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 347.937449][ T5897] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 348.024974][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 348.138033][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 348.147101][ T5897] usb 2-1: no configurations [ 348.157617][ T5897] usb 2-1: can't read configurations, error -22 [ 348.198895][ T5897] usb usb2-port1: attempt power cycle [ 348.206531][ T10] usb 6-1: USB disconnect, device number 4 [ 348.620800][ T5897] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 348.976968][ T5897] usb 2-1: no configurations [ 348.981585][ T5897] usb 2-1: can't read configurations, error -22 [ 349.164580][ T5897] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 349.241016][ T5897] usb 2-1: no configurations [ 349.509488][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 349.526568][ T5897] usb 2-1: can't read configurations, error -22 [ 349.526724][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 349.533199][ T5897] usb usb2-port1: unable to enumerate USB device [ 349.554954][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 349.578825][ T8767] syzkaller0: entered promiscuous mode [ 349.591414][ T8767] syzkaller0: entered allmulticast mode [ 349.708522][ T8772] No such timeout policy "syz0" [ 351.188444][ T8789] syz.4.612 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 351.253220][ T8792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.610'. [ 351.263000][ T8792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.610'. [ 351.806654][ T5897] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 352.203683][ T5897] usb 2-1: config 0 has no interfaces? [ 352.216249][ T5897] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 352.320132][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.432199][ T5897] usb 2-1: config 0 descriptor?? [ 353.439127][ T8814] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 354.213779][ T24] usb 2-1: USB disconnect, device number 28 [ 355.869281][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 356.274005][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 356.283405][ T10] usb 3-1: can't read configurations, error -61 [ 356.427567][ T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 356.990451][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 357.005223][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.619'. [ 357.042360][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 357.053463][ T10] usb 3-1: can't read configurations, error -61 [ 357.092674][ T10] usb usb3-port1: attempt power cycle [ 357.486211][ T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 357.508995][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 357.517989][ T10] usb 3-1: can't read configurations, error -61 [ 357.706791][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 357.850901][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 357.871387][ T10] usb 3-1: can't read configurations, error -61 [ 357.947941][ T10] usb usb3-port1: unable to enumerate USB device [ 359.310685][ T5928] IPVS: starting estimator thread 0... [ 359.476426][ T8856] IPVS: using max 38 ests per chain, 91200 per kthread [ 360.007963][ T8864] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 360.014579][ T8864] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 360.033976][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 360.045394][ T8864] vhci_hcd vhci_hcd.0: Device attached [ 360.052449][ T8870] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 360.059049][ T8870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 360.168243][ T8870] vhci_hcd vhci_hcd.0: Device attached [ 360.479644][ T8864] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 360.486269][ T8864] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 361.101653][ T5912] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 361.119611][ T8864] vhci_hcd vhci_hcd.0: Device attached [ 361.151382][ T8880] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 361.157989][ T8880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.206840][ T8870] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 361.213484][ T8870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.272926][ T8870] vhci_hcd vhci_hcd.0: Device attached [ 361.310460][ T8864] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 361.317091][ T8864] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 361.399260][ T8880] vhci_hcd vhci_hcd.0: Device attached [ 361.439718][ T8864] vhci_hcd vhci_hcd.0: Device attached [ 361.444158][ T8870] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 362.016893][ T8870] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 362.080546][ T8864] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(24) [ 362.087182][ T8864] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 362.164637][ T8870] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 362.431205][ T8864] vhci_hcd vhci_hcd.0: Device attached [ 362.601045][ T8881] vhci_hcd: connection closed [ 362.601195][ T8879] vhci_hcd: connection closed [ 362.606189][ T8874] vhci_hcd: connection closed [ 362.610902][ T8872] vhci_hcd: connection reset by peer [ 362.621267][ T8886] vhci_hcd: connection closed [ 362.625134][ T8889] vhci_hcd: connection closed [ 362.629972][ T8905] vhci_hcd: connection closed [ 362.666717][ T58] vhci_hcd vhci_hcd.0: stop threads [ 362.711384][ T58] vhci_hcd vhci_hcd.0: release socket [ 362.724665][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 362.744260][ T58] vhci_hcd vhci_hcd.0: stop threads [ 362.758558][ T58] vhci_hcd vhci_hcd.0: release socket [ 362.772508][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 362.871988][ T58] vhci_hcd vhci_hcd.0: stop threads [ 362.910053][ T58] vhci_hcd vhci_hcd.0: release socket [ 362.931724][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 363.122624][ T58] vhci_hcd vhci_hcd.0: stop threads [ 363.128177][ T58] vhci_hcd vhci_hcd.0: release socket [ 363.155521][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 363.272163][ T58] vhci_hcd vhci_hcd.0: stop threads [ 363.278780][ T58] vhci_hcd vhci_hcd.0: release socket [ 363.366343][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 363.373976][ T58] vhci_hcd vhci_hcd.0: stop threads [ 363.380122][ T58] vhci_hcd vhci_hcd.0: release socket [ 363.438131][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 363.483036][ T58] vhci_hcd vhci_hcd.0: stop threads [ 363.515692][ T58] vhci_hcd vhci_hcd.0: release socket [ 363.539399][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 364.452664][ T5897] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 364.708428][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 364.717420][ T5897] usb 5-1: can't read configurations, error -61 [ 364.885859][ T5897] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 365.048856][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 365.066830][ T5897] usb 5-1: can't read configurations, error -61 [ 365.087102][ T5897] usb usb5-port1: attempt power cycle [ 365.147416][ T8935] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 365.197953][ T8935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.241957][ T8935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.300406][ T8935] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 365.326844][ T8935] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 365.412882][ T8939] gretap1: entered promiscuous mode [ 365.446758][ T5897] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 365.476104][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 365.483800][ T5897] usb 5-1: can't read configurations, error -61 [ 365.492077][ T8939] bond1: (slave gretap1): making interface the new active one [ 365.544096][ T8939] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 365.735979][ T5897] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 365.777953][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 365.802156][ T5897] usb 5-1: can't read configurations, error -61 [ 365.816653][ T5897] usb usb5-port1: unable to enumerate USB device [ 365.877936][ T8946] No such timeout policy "syz0" [ 365.907146][ T8935] macvlan2: entered promiscuous mode [ 365.913050][ T8935] macvlan2: entered allmulticast mode [ 365.920573][ T8935] bond1: entered promiscuous mode [ 365.967455][ T8935] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 365.977273][ T8935] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 365.992814][ T8935] bond1: left promiscuous mode [ 366.346672][ T5912] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 366.866860][ T8952] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 366.878651][ T8952] block device autoloading is deprecated and will be removed. [ 368.016715][ T5904] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 368.048580][ T10] usb usb34-port1: attempt power cycle [ 368.179452][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 368.182803][ T8966] binder_alloc: 8964: binder_alloc_buf, no vma [ 368.189786][ T5904] usb 2-1: can't read configurations, error -61 [ 368.206585][ T8967] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 368.213203][ T8967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.237128][ T8967] vhci_hcd vhci_hcd.0: Device attached [ 368.243862][ T8966] binder_alloc: binder_alloc_mmap_handler: 8964 80ffe000-81000000 already mapped failed -16 [ 368.267994][ T8974] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 368.274629][ T8974] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.296183][ T8974] vhci_hcd vhci_hcd.0: Device attached [ 368.309625][ T8967] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 368.316249][ T8967] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 368.338338][ T5904] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 368.424851][ T8974] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 368.424966][ T8967] vhci_hcd vhci_hcd.0: Device attached [ 368.546784][ T5883] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 368.558654][ T8967] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 368.565277][ T8967] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.696858][ T10] usb usb34-port1: unable to enumerate USB device [ 368.703224][ T8974] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(22) [ 368.709898][ T8974] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 368.729370][ T8974] vhci_hcd vhci_hcd.0: Device attached [ 368.741865][ T8974] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(24) [ 368.748472][ T8974] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.929203][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 368.946585][ T5904] usb 2-1: can't read configurations, error -61 [ 369.034342][ T5904] usb usb2-port1: attempt power cycle [ 369.041642][ T8974] vhci_hcd vhci_hcd.0: Device attached [ 369.055191][ T8967] vhci_hcd vhci_hcd.0: Device attached [ 369.081808][ T8988] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(21) [ 369.088450][ T8988] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 369.165236][ T8988] vhci_hcd vhci_hcd.0: Device attached [ 369.257031][ T8967] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 369.388243][ T8989] vhci_hcd: connection closed [ 369.388851][ T8982] vhci_hcd: connection closed [ 369.394170][ T8975] vhci_hcd: connection closed [ 369.397361][ T8986] vhci_hcd: connection closed [ 369.400949][ T8977] vhci_hcd: connection closed [ 369.411649][ T8984] vhci_hcd: connection closed [ 369.416017][ T49] vhci_hcd vhci_hcd.4: stop threads [ 369.418475][ T8969] vhci_hcd: connection reset by peer [ 369.421091][ T49] vhci_hcd vhci_hcd.4: release socket [ 369.464646][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 369.475386][ T49] vhci_hcd vhci_hcd.4: stop threads [ 369.480637][ T49] vhci_hcd vhci_hcd.4: release socket [ 369.496779][ T5904] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 369.507458][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 369.519552][ T49] vhci_hcd vhci_hcd.4: stop threads [ 369.520573][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 369.524779][ T49] vhci_hcd vhci_hcd.4: release socket [ 369.533515][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 369.533772][ T49] vhci_hcd vhci_hcd.4: stop threads [ 369.533786][ T49] vhci_hcd vhci_hcd.4: release socket [ 369.534734][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 369.544987][ T5904] usb 2-1: can't read configurations, error -61 [ 369.555378][ T49] vhci_hcd vhci_hcd.4: stop threads [ 369.586899][ T49] vhci_hcd vhci_hcd.4: release socket [ 369.599559][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 369.614016][ T49] vhci_hcd vhci_hcd.4: stop threads [ 369.656184][ T49] vhci_hcd vhci_hcd.4: release socket [ 369.679562][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 369.689509][ T49] vhci_hcd vhci_hcd.4: stop threads [ 369.695379][ T49] vhci_hcd vhci_hcd.4: release socket [ 369.700875][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 369.701122][ T5904] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 369.748384][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 369.756896][ T5904] usb 2-1: can't read configurations, error -61 [ 369.763435][ T5904] usb usb2-port1: unable to enumerate USB device [ 369.906213][ T5904] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 370.089438][ T5904] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 370.099506][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.117953][ T5904] usb 6-1: config 0 descriptor?? [ 370.133286][ T5904] pegasus 6-1:0.0: Missing or invalid endpoints [ 370.206199][ T9001] kAFS: unable to lookup cell 'ÿ' [ 370.214108][ T9001] kAFS: unable to lookup cell '(,c¾Ì' [ 372.051948][ T9018] misc userio: The device must be registered before sending interrupts [ 372.436051][ T10] IPVS: starting estimator thread 0... [ 372.540088][ T9024] IPVS: using max 35 ests per chain, 84000 per kthread [ 372.677991][ T30] INFO: task syz.3.335:7433 blocked for more than 143 seconds. [ 372.748293][ T1645] usb 6-1: USB disconnect, device number 5 [ 372.770981][ T30] Tainted: G L syzkaller #0 [ 373.006693][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.266574][ T30] task:syz.3.335 state:D stack:25832 pid:7433 tgid:7431 ppid:5839 task_flags:0x400140 flags:0x08080006 [ 373.376408][ T30] Call Trace: [ 373.379849][ T30] [ 373.388950][ T30] __schedule+0x15dd/0x52d0 [ 373.404500][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 373.413004][ T30] ? register_lock_class+0x31/0x2e0 [ 373.426171][ T30] ? __pfx___schedule+0x10/0x10 [ 373.438627][ T30] ? schedule+0x90/0x360 [ 373.451476][ T30] schedule+0x164/0x360 [ 373.506202][ T30] schedule_timeout+0xc3/0x2c0 [ 373.636655][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 373.644478][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 373.659265][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 373.672057][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.685957][ T30] ? wait_for_completion+0x274/0x5e0 [ 373.693415][ T30] wait_for_completion+0x2cc/0x5e0 [ 373.699419][ T5883] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 373.716675][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 373.726021][ T30] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 373.743053][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 373.763150][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 373.801905][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 373.814208][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 373.821974][ T30] do_int80_emulation+0x173/0x4d0 [ 373.829207][ T30] ? asm_int80_emulation+0x1a/0x20 [ 373.837007][ T30] ? clear_bhb_loop+0x40/0x90 [ 373.843628][ T30] ? clear_bhb_loop+0x40/0x90 [ 373.905775][ T30] asm_int80_emulation+0x1a/0x20 [ 373.916069][ T30] RIP: 0023:0xf7f34f6c [ 373.926058][ T30] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 00000000000001be [ 373.942984][ T30] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000000e [ 373.952119][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 373.960862][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 373.969638][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 373.978990][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 373.988971][ T30] [ 373.992637][ T30] INFO: task syz.3.335:7437 blocked for more than 144 seconds. [ 374.012442][ T30] Tainted: G L syzkaller #0 [ 374.039023][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.049850][ T30] task:syz.3.335 state:D stack:25120 pid:7437 tgid:7431 ppid:5839 task_flags:0x400040 flags:0x08080006 [ 374.062829][ T30] Call Trace: [ 374.067157][ T30] [ 374.070099][ T30] __schedule+0x15dd/0x52d0 [ 374.074673][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 374.080601][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 374.088637][ T30] ? rcu_is_watching+0x15/0xb0 [ 374.093601][ T30] ? __schedule+0x15f3/0x52d0 [ 374.101295][ T30] ? __pfx___schedule+0x10/0x10 [ 374.107143][ T30] ? schedule+0x90/0x360 [ 374.111488][ T30] schedule+0x164/0x360 [ 374.116799][ T30] schedule_timeout+0xc3/0x2c0 [ 374.121664][ T30] ? futex_unqueue+0x22/0x240 [ 374.127341][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 374.132803][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 374.139045][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.146180][ T30] ? wait_for_completion+0x274/0x5e0 [ 374.152212][ T30] wait_for_completion+0x2cc/0x5e0 [ 374.159451][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 374.166434][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 374.171517][ T30] restrict_one_thread_callback+0x320/0x570 [ 374.178733][ T30] task_work_run+0x1d9/0x270 [ 374.183434][ T30] ? __pfx_task_work_run+0x10/0x10 [ 374.190036][ T30] ? __pfx_futex_wait+0x10/0x10 [ 374.198831][ T30] get_signal+0x11eb/0x1330 [ 374.203382][ T30] ? do_futex+0x333/0x420 [ 374.210028][ T30] ? __pfx_compat_restore_altstack+0x10/0x10 [ 374.216684][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 374.222329][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 374.229550][ T30] exit_to_user_mode_loop+0x86/0x480 [ 374.234918][ T30] ? rcu_is_watching+0x15/0xb0 [ 374.244766][ T30] ? asm_int80_emulation+0x1a/0x20 [ 374.250937][ T30] ? asm_int80_emulation+0x1a/0x20 [ 374.256934][ T30] do_int80_emulation+0x2ef/0x4d0 [ 374.262029][ T30] ? asm_int80_emulation+0x1a/0x20 [ 374.267957][ T30] ? clear_bhb_loop+0x40/0x90 [ 374.272724][ T30] ? clear_bhb_loop+0x40/0x90 [ 374.278219][ T30] asm_int80_emulation+0x1a/0x20 [ 374.283234][ T30] RIP: 0023:0xf7f34f6c [ 374.288395][ T30] RSP: 002b:00000000f53d55bc EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 374.297863][ T30] RAX: fffffffffffffe00 RBX: 00000000f73f5020 RCX: 0000000000000080 [ 374.308950][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f5024 [ 374.320017][ T30] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 374.330332][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 374.339251][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.351532][ T30] [ 374.357224][ T30] INFO: task syz.3.335:7440 blocked for more than 145 seconds. [ 374.364869][ T30] Tainted: G L syzkaller #0 [ 374.372971][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.382604][ T30] task:syz.3.335 state:D stack:28424 pid:7440 tgid:7431 ppid:5839 task_flags:0x400140 flags:0x08080006 [ 374.402144][ T30] Call Trace: [ 374.408044][ T30] [ 374.412275][ T30] __schedule+0x15dd/0x52d0 [ 374.419409][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 374.424470][ T30] ? trace_sched_exit_tp+0x3a/0x150 [ 374.441339][ T30] ? register_lock_class+0x31/0x2e0 [ 374.448821][ T30] ? __pfx___schedule+0x10/0x10 [ 374.453719][ T30] ? schedule+0x90/0x360 [ 374.459538][ T30] schedule+0x164/0x360 [ 374.463732][ T30] schedule_timeout+0xc3/0x2c0 [ 374.469620][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 374.474667][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 374.481118][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 374.487822][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.493024][ T30] ? wait_for_completion+0x274/0x5e0 [ 374.499324][ T30] wait_for_completion+0x2cc/0x5e0 [ 374.504485][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 374.511168][ T30] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 374.518293][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 374.524895][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 374.533013][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 374.539214][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 374.546943][ T30] do_int80_emulation+0x173/0x4d0 [ 374.552856][ T30] ? asm_int80_emulation+0x1a/0x20 [ 374.559100][ T30] ? clear_bhb_loop+0x40/0x90 [ 374.563779][ T30] ? clear_bhb_loop+0x40/0x90 [ 374.569814][ T30] asm_int80_emulation+0x1a/0x20 [ 374.574751][ T30] RIP: 0023:0xf7f34f6c [ 374.579543][ T30] RSP: 002b:00000000f53b450c EFLAGS: 00000206 ORIG_RAX: 00000000000001be [ 374.588683][ T30] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000009 [ 374.597571][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.607360][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.616367][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 374.624338][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.633299][ T30] [ 374.637338][ T30] INFO: task syz.3.335:7441 blocked for more than 145 seconds. [ 374.644891][ T30] Tainted: G L syzkaller #0 [ 374.653826][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.663325][ T30] task:syz.3.335 state:D stack:25256 pid:7441 tgid:7431 ppid:5839 task_flags:0x400040 flags:0x08080002 [ 374.676291][ T30] Call Trace: [ 374.679583][ T30] [ 374.682503][ T30] __schedule+0x15dd/0x52d0 [ 374.688200][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 374.693142][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 374.699324][ T30] ? rcu_is_watching+0x15/0xb0 [ 374.704094][ T30] ? __schedule+0x15f3/0x52d0 [ 374.709751][ T30] ? __pfx___schedule+0x10/0x10 [ 374.714603][ T30] ? schedule+0x90/0x360 [ 374.719868][ T30] schedule+0x164/0x360 [ 374.724024][ T30] schedule_timeout+0xc3/0x2c0 [ 374.730857][ T30] ? futex_unqueue+0x22/0x240 [ 374.736555][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 374.741945][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 374.748593][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.753809][ T30] ? wait_for_completion+0x274/0x5e0 [ 374.760955][ T30] wait_for_completion+0x2cc/0x5e0 [ 374.767178][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 374.772820][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 374.778877][ T30] restrict_one_thread_callback+0x320/0x570 [ 374.784780][ T30] task_work_run+0x1d9/0x270 [ 374.790370][ T30] ? __pfx_task_work_run+0x10/0x10 [ 374.796460][ T30] ? __pfx_futex_wait+0x10/0x10 [ 374.801326][ T30] get_signal+0x11eb/0x1330 [ 374.806965][ T30] ? do_futex+0x333/0x420 [ 374.811306][ T30] ? __pfx_compat_restore_altstack+0x10/0x10 [ 374.818298][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 374.823847][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 374.830964][ T30] ? __ia32_compat_sys_rt_sigreturn+0x237/0x270 [ 374.838229][ T30] exit_to_user_mode_loop+0x86/0x480 [ 374.843544][ T30] ? rcu_is_watching+0x15/0xb0 [ 374.849356][ T30] ? asm_int80_emulation+0x1a/0x20 [ 374.854477][ T30] ? asm_int80_emulation+0x1a/0x20 [ 374.861305][ T30] do_int80_emulation+0x2ef/0x4d0 [ 374.867597][ T30] ? asm_int80_emulation+0x1a/0x20 [ 374.872716][ T30] ? clear_bhb_loop+0x40/0x90 [ 374.878483][ T30] ? clear_bhb_loop+0x40/0x90 [ 374.883162][ T30] asm_int80_emulation+0x1a/0x20 [ 374.889458][ T30] RIP: 0023:0xf7f34f6c [ 374.893541][ T30] RSP: 002b:00000000f4f915bc EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 374.902683][ T30] RAX: fffffffffffffe00 RBX: 00000000f73f5150 RCX: 0000000000000080 [ 374.911502][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f5154 [ 374.920403][ T30] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 374.929497][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 374.938436][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.947456][ T30] [ 374.950485][ T30] INFO: task syz.3.335:7443 blocked for more than 145 seconds. [ 374.960278][ T30] Tainted: G L syzkaller #0 [ 374.969098][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.977084][ T5928] usb usb42-port1: attempt power cycle [ 374.979390][ T30] task:syz.3.335 state:D stack:28832 pid:7443 tgid:7431 ppid:5839 task_flags:0x400140 flags:0x08080002 [ 374.995943][ T30] Call Trace: [ 374.999232][ T30] [ 375.002171][ T30] __schedule+0x15dd/0x52d0 [ 375.008467][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 375.013441][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 375.018716][ T30] ? rcu_is_watching+0x15/0xb0 [ 375.023594][ T30] ? __schedule+0x15f3/0x52d0 [ 375.028478][ T30] ? __pfx___schedule+0x10/0x10 [ 375.033334][ T30] ? schedule+0x90/0x360 [ 375.037660][ T30] schedule+0x164/0x360 [ 375.041920][ T30] schedule_timeout+0xc3/0x2c0 [ 375.047224][ T30] ? futex_unqueue+0x22/0x240 [ 375.051922][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 375.057339][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 375.063628][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.069410][ T30] ? wait_for_completion+0x274/0x5e0 [ 375.074722][ T30] wait_for_completion+0x2cc/0x5e0 [ 375.080099][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 375.085881][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 375.090938][ T30] restrict_one_thread_callback+0x320/0x570 [ 375.096924][ T30] task_work_run+0x1d9/0x270 [ 375.101705][ T30] ? __pfx_task_work_run+0x10/0x10 [ 375.107038][ T30] ? __pfx_futex_wait+0x10/0x10 [ 375.111913][ T30] get_signal+0x11eb/0x1330 [ 375.116596][ T30] ? do_futex+0x333/0x420 [ 375.121044][ T30] ? __pfx_compat_restore_altstack+0x10/0x10 [ 375.127110][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 375.132665][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 375.139033][ T30] exit_to_user_mode_loop+0x86/0x480 [ 375.144327][ T30] ? rcu_is_watching+0x15/0xb0 [ 375.149657][ T30] ? asm_int80_emulation+0x1a/0x20 [ 375.154793][ T30] ? asm_int80_emulation+0x1a/0x20 [ 375.159991][ T30] do_int80_emulation+0x2ef/0x4d0 [ 375.166799][ T30] ? asm_int80_emulation+0x1a/0x20 [ 375.171932][ T30] ? clear_bhb_loop+0x40/0x90 [ 375.176820][ T30] ? clear_bhb_loop+0x40/0x90 [ 375.181670][ T30] asm_int80_emulation+0x1a/0x20 [ 375.186934][ T30] RIP: 0023:0xf7f34f6c [ 375.191094][ T30] RSP: 002b:00000000f474b5bc EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 375.199656][ T30] RAX: fffffffffffffe00 RBX: 00000000f73f5280 RCX: 0000000000000080 [ 375.207815][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f5284 [ 375.215901][ T30] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 375.224004][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 375.232247][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.240421][ T30] [ 375.243487][ T30] [ 375.243487][ T30] Showing all locks held in the system: [ 375.251951][ T30] 1 lock held by khungtaskd/30: [ 375.257824][ T30] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 375.269633][ T30] 2 locks held by getty/5581: [ 375.274381][ T30] #0: ffff88803422b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 375.284332][ T30] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 375.295142][ T30] 3 locks held by kworker/0:3/5883: [ 375.300848][ T30] #0: ffff888021ab2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 375.312897][ T30] #1: ffffc90004657c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 375.324818][ T30] #2: ffff88802b53f1e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 375.334724][ T30] 5 locks held by kworker/1:6/5928: [ 375.340002][ T30] #0: ffff888021ab2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 375.351559][ T30] #1: ffffc90004a1fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 375.363480][ T30] #2: ffff88802b5a91e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 375.374065][ T30] #3: ffff88802b5ae560 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 375.384051][ T30] #4: ffff88802b4c7e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 375.398729][ T30] [ 375.401073][ T30] ============================================= [ 375.401073][ T30] [ 375.410986][ T30] NMI backtrace for cpu 1 [ 375.411019][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 375.411044][ T30] Tainted: [L]=SOFTLOCKUP [ 375.411051][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.411061][ T30] Call Trace: [ 375.411068][ T30] [ 375.411076][ T30] dump_stack_lvl+0xe8/0x150 [ 375.411155][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 375.411271][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 375.411295][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 375.411321][ T30] sys_info+0x135/0x170 [ 375.411339][ T30] watchdog+0xfd9/0x1030 [ 375.411358][ T30] ? watchdog+0x21a/0x1030 [ 375.411379][ T30] kthread+0x388/0x470 [ 375.411397][ T30] ? __pfx_watchdog+0x10/0x10 [ 375.411411][ T30] ? __pfx_kthread+0x10/0x10 [ 375.411433][ T30] ret_from_fork+0x51e/0xb90 [ 375.411459][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 375.411478][ T30] ? __switch_to+0xc7d/0x1450 [ 375.411500][ T30] ? __pfx_kthread+0x10/0x10 [ 375.411518][ T30] ret_from_fork_asm+0x1a/0x30 [ 375.411556][ T30] [ 375.411567][ T30] Sending NMI from CPU 1 to CPUs 0: [ 375.528048][ C0] NMI backtrace for cpu 0 [ 375.528066][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.528089][ C0] Tainted: [L]=SOFTLOCKUP [ 375.528095][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.528104][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 375.528128][ C0] Code: 5e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 a2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 375.528143][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 375.528158][ C0] RAX: 00000000005b32bf RBX: ffffffff819a913a RCX: 0000000080000001 [ 375.528170][ C0] RDX: 0000000000000001 RSI: ffffffff8def8cd0 RDI: ffffffff8c27c980 [ 375.528184][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863399b R09: 1ffff110170c6733 [ 375.528196][ C0] R10: dffffc0000000000 R11: ffffed10170c6734 R12: 0000000000000000 [ 375.528207][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 375.528218][ C0] FS: 0000000000000000(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000 [ 375.528231][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.528243][ C0] CR2: 00000000f7475a54 CR3: 0000000028f9e000 CR4: 00000000003526f0 [ 375.528256][ C0] Call Trace: [ 375.528262][ C0] [ 375.528268][ C0] default_idle+0x9/0x20 [ 375.528294][ C0] default_idle_call+0x72/0xb0 [ 375.528314][ C0] do_idle+0x36a/0x5f0 [ 375.528339][ C0] ? __pfx_do_idle+0x10/0x10 [ 375.528364][ C0] cpu_startup_entry+0x43/0x60 [ 375.528386][ C0] rest_init+0x2de/0x300 [ 375.528408][ C0] start_kernel+0x385/0x3d0 [ 375.528485][ C0] x86_64_start_reservations+0x24/0x30 [ 375.528565][ C0] x86_64_start_kernel+0x143/0x1c0 [ 375.528588][ C0] common_startup_64+0x13e/0x147 [ 375.528610][ C0] [ 375.712825][ T5928] usb usb42-port1: unable to enumerate USB device [ 375.719555][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 375.726433][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 375.737126][ T30] Tainted: [L]=SOFTLOCKUP [ 375.741468][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.751534][ T30] Call Trace: [ 375.754810][ T30] [ 375.757732][ T30] vpanic+0x56c/0xa60 [ 375.761710][ T30] ? __pfx___schedule+0x10/0x10 [ 375.766554][ T30] ? __pfx_vpanic+0x10/0x10 [ 375.771083][ T30] ? __pfx_console_unlock+0x10/0x10 [ 375.776284][ T30] panic+0xc5/0xd0 [ 375.780015][ T30] ? __pfx_panic+0x10/0x10 [ 375.784421][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 375.789781][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 375.795938][ T30] watchdog+0x1023/0x1030 [ 375.800282][ T30] ? watchdog+0x21a/0x1030 [ 375.804697][ T30] kthread+0x388/0x470 [ 375.808758][ T30] ? __pfx_watchdog+0x10/0x10 [ 375.813424][ T30] ? __pfx_kthread+0x10/0x10 [ 375.818011][ T30] ret_from_fork+0x51e/0xb90 [ 375.822616][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 375.827718][ T30] ? __switch_to+0xc7d/0x1450 [ 375.832396][ T30] ? __pfx_kthread+0x10/0x10 [ 375.836981][ T30] ret_from_fork_asm+0x1a/0x30 [ 375.841750][ T30] [ 375.845031][ T30] Kernel Offset: disabled [ 375.849342][ T30] Rebooting in 86400 seconds..