last executing test programs: 23m27.904963738s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@grpjquota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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") socket$netlink(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fdatasync(r0) 23m24.798160053s ago: executing program 4 (id=13): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf82470cb8"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x67) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) syz_open_dev$dri(0x0, 0x33f, 0x801) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 23m8.621860593s ago: executing program 32 (id=13): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf82470cb8"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x67) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) syz_open_dev$dri(0x0, 0x33f, 0x801) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 22m14.650801901s ago: executing program 0 (id=107): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x67) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000001ff0), 0x10) syz_open_dev$dri(0x0, 0x33f, 0x801) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 22m6.696616819s ago: executing program 0 (id=115): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffe, 0xd0, 0x7d, 0x6, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000040)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x1, 0x80000006, 0x400}, 0x0, 0x0) 22m3.491340473s ago: executing program 0 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0xfff) fchdir(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$netlink(r4, &(0x7f0000005d80)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4c091}, 0x4000000) 22m1.302080466s ago: executing program 0 (id=122): openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x4}]}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 21m59.6877987s ago: executing program 0 (id=124): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@getchain={0x3c, 0x66, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x8, 0x9}, {0x4, 0xfff2}}, [{0x8, 0xb, 0x2}, {0x8}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c0}, 0x20004055) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7d) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r5, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) recvmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 21m56.46995339s ago: executing program 0 (id=127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 21m41.223961444s ago: executing program 33 (id=127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 18m42.242831393s ago: executing program 1 (id=370): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) 18m41.218545364s ago: executing program 1 (id=371): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x99ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x10, 0x3, {0x8, 0xffffffff}, 0xfc, 0x9}}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xd637684e08508ddb, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 18m40.053121052s ago: executing program 1 (id=373): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0xd49100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="060000000000000002004e25e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e21ac"], 0x20000) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close(r0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000000c0)={'ip6gretap0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070601030000000000000000010000000500010007000007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4, 0x5, 0x8}, 0x0) socket$igmp(0x2, 0x3, 0x2) 18m37.694798782s ago: executing program 1 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 18m34.017843457s ago: executing program 1 (id=382): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000)) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}}, 0x4008004) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x5, r5, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 18m33.14584857s ago: executing program 1 (id=385): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x2401) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x100000001, 0x5b) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) poll(&(0x7f0000000000), 0x200000000000005b, 0x283) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) 18m18.012780153s ago: executing program 34 (id=385): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x2401) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x100000001, 0x5b) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) poll(&(0x7f0000000000), 0x200000000000005b, 0x283) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) 14m53.50372412s ago: executing program 3 (id=644): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x460100, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x2000, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffffffff, 0x10000, 0xc, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x7, 0xff}, {0x40000, 0x8080000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x3, 0x2, 0xfc}, {0x58000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x1, 0x0, 0x4, 0x10, 0x0, 0x0, 0x3c, 0x7}, {0x100000, 0x0, 0x0, 0x78, 0xa8, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0xc, 0xfc, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x6000, 0xc, 0x8, 0x0, 0x7, 0x8, 0x40, 0x26, 0xfc, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8fffa, 0x0, 0x30000, 0x110, 0x2, 0xfc01, 0xeeee0000, [0x80000000, 0xa1, 0x1, 0x1]}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x7ff, @vifc_lcl_addr=@local, @broadcast}, 0x10) socket$igmp(0x2, 0x3, 0x2) 14m51.559890869s ago: executing program 3 (id=648): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, 0x0, 0x28018040) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 14m51.22082731s ago: executing program 3 (id=650): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 14m50.273875277s ago: executing program 3 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 14m50.267651857s ago: executing program 3 (id=653): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)=@userptr={0xee, 0x8, 0x4, 0x100, 0xfffd, {}, {0x5, 0xa, 0x1, 0x8, 0x2, 0xf7, "731377e0"}, 0x8, 0x2, {0x0}, 0x1}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) r1 = socket$kcm(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x9, 0x8, 0x0, 0x5, 0x9, 0x400000000100, 0x3, 0x1}, 0x0) epoll_create1(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500), 0x106, 0x6}}, 0x20) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000180)={0x0, @src_change}) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000580)="140000001600f963d25a80648456dc921f6b718d12", 0x15}], 0x1}, 0x804) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x10) openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="64f8000010001fff2cbd7000fcdbdf250000000044b25f58657853c8301e20031289074dfda042a88905e97c74374cca95366e221a406c7b45c43e2c55d2ba091b117cb144b05fd12292a471913be61c34f161a9db455c27c1d9f4e2d0e1161c215368530487f023497d92148e6d9d7d5e32326ba03ed4216aa5e7e44382b4ea4e59e23b71447a61eb56e134be84ba0ac29eaebb7a67baf43c76a3dc626801d43b3840e8ec0d56eb", @ANYRES32=0x0], 0x64}}, 0x200040c0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r6, 0xc0485630, &(0x7f0000000040)={0x0, "2a4d0895728e1bf50319ae91fa4abee4f9b28bf70000000400", 0x3, 0x2, 0x1, 0x13049e3}) 14m49.153647826s ago: executing program 3 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a1", @ANYRES32=r2, @ANYBLOB="14000100ff05"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 14m48.874072778s ago: executing program 35 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a1", @ANYRES32=r2, @ANYBLOB="14000100ff05"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 3m24.87591981s ago: executing program 6 (id=2954): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) 3m24.030879383s ago: executing program 6 (id=2956): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000080)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000280)={0x30, 0x30, 0xa, "419cd49991b5b58639c5"}, 0x0, 0x0, 0x0, 0x0}) 3m19.530640283s ago: executing program 6 (id=2960): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m16.649896787s ago: executing program 6 (id=2968): mknod$loop(&(0x7f0000000040)='./file0\x00', 0xc1a0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000240)=""/75, 0x4b}], 0x2, 0x6, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0105702, &(0x7f0000000380)={0x200, "425aeb75378a39b4c98900000f010008000000f3ff0014340900"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 3m13.832469392s ago: executing program 6 (id=2973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x300000b, 0x11, r2, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x3, 0x0, [{0x6, 0x4, 0x8000, 0xc3da, 0x9}, {0x0, 0xa, 0x3ff, 0xbfffffff, 0x5}, {0x80000000, 0x6, 0x3, 0x9, 0x3}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0xe7, 0x3, 0x8c, 0x0, 0x7, 0x8, 0x1, 0x9, 0xc, 0xf9, 0x2, 0x7, 0x0, 0x40, 0x4, 0xb, 0x3, 0x2, 0x9, '\x00', 0x5c, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m11.839215861s ago: executing program 6 (id=2976): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') ioctl$XFS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000140)) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000000180)={0x0, 0x9, 0x3, '\x00', &(0x7f0000000080)=0xf7}) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e21, 0x10000, @private0, 0x18f}, {0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1, {[0x1, 0xfffffff7, 0xfffffff3, 0x400, 0x0, 0x3e, 0x2, 0xfffffffc]}}, 0x5c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6(0xa, 0x1, 0x0) mmap$panthor(&(0x7f000025d000/0x4000)=nil, 0x4000, 0x4, 0x50, 0xffffffffffffffff, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) 2m55.836982322s ago: executing program 36 (id=2976): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') ioctl$XFS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000140)) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000000180)={0x0, 0x9, 0x3, '\x00', &(0x7f0000000080)=0xf7}) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e21, 0x10000, @private0, 0x18f}, {0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1, {[0x1, 0xfffffff7, 0xfffffff3, 0x400, 0x0, 0x3e, 0x2, 0xfffffffc]}}, 0x5c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6(0xa, 0x1, 0x0) mmap$panthor(&(0x7f000025d000/0x4000)=nil, 0x4000, 0x4, 0x50, 0xffffffffffffffff, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) 2m20.775556653s ago: executing program 7 (id=3092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtfilter={0x1090, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x1060, 0x2, [@TCA_BASIC_EMATCHES={0x105c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1058, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x2}, "bcd6d6ce02f16f922586139c24e4bea013e164e42a1555987e84e7f61d2f497b71bfd67cb171ca8d21c8aa9c6d8ecb830ec2cf83d15bd1032094199eacaa6a5ff069dc82943181351fc40f2a429acd8e11ff35c413f95821dcd816349de15357ab063cac1a4e3fe346cba03e3381f1484ebeda8cdbc0dc69cc8e41501c31748e2946b9803344874ebe8fea335301fc3c4a1fe20a472cc45f1a854e6dedc6086e66b6054fd8bfca4db912c8cefb0542e050b6211e75c39d8039735fd771dc185b8ccc89354be88dcc83d26f70e8bf9d8d618bed74ab793bb92fbd6d1fa1f9e86ca6969c8458c5ca555279b530e6198e4a26103a2c901a35eb8f8b6c0d9b56c040fc0f0d7df3a2dd80f3bac993f4523a7efbb63830b394a1e29326d23b05c99d3e85251149a4baf830c0f442f3b7fd0c465f885295c9dabdceaa3e83e5130728df323cb1630934303626840e15cde8be4dc7fd1cc7e85d8c5369be9693110e9147a1d6f0659e60c2ccaf03cc2e6b730231eac4953b27d616ea9ba5e3b9ae95811245495840cfb49e10443c7e4163c88c7f9634124575c9bf3124ceb9c1511579bc26cde4638da268ed9513ee7b7e0d97413c1ddf2fa2ea27d45edcb47552a809c4fc59a6fc48bb8dc214bd208e9a7258552c499b43f54da81d1e4622e4d09685b2380b6f969eb3f03cf288db345e577a9e3b4a6fc92496528e38015b898eb19d3570ae8662788cfb36da8d69376fcc4389713339e8e26cf360d893ff54d1f50df93aa198c1fd7f3b670cfb006607298e4398c87ce43c5f8fa0be78a1e7788e8bbdfccd9a0251dc1f4ae1e1bdbb955dd22fef5b1e5bca4d91251139e3b18b11ca7b239dcb1eb858efb1d97c5bbb77cfaea42906ba1a7bf3f8415097fae95db4ef73f0c04146acf26438b24542514879198fd515cd2a9ba1b7bea45dda2aeccd287de873b7a776f7fedef634f8fb5c1fa38bbc5b92f75de5c344c5ac488b5cd265424778caf97de1cd6d9ffe1ae8f744f15882d7e682bd24245951560e3cbf0f00819be5cace877d9b66ad087a75e6ccd2cfd21b15b6c262120bc241f5c9fa67c5e055409a4788efe30ca101d0568fd092eeeb92cdfb25150d35aa3a65da138828cf56fa6884d1703876334703e8136f836f852715443b38386b24791ba260ef9635d9354dd5aa07b4e21a74a9870006d9b2ce37f92b1d86c7afd64def5811559ece3ffdd811fda8cd85e0dacdd703c690c6315cce7fb25a3b83d7abb86185150d34ca3a4f5fd57324b936938ab2e769fb4ffc42550a216ac00e77352b555871584bcb8778d75eccd7de42b373a713aa1aef7b053a9f04024a679d8dc80a0aed674561acc1305720b1734891dab3ff5f034f07dcb3f2d094cc691383b8c97e785637a2db17b6365b356996cf9771054b8f96b6ae2a409746afc03466cacb8a5f89f99db77fa2582a4fa81eb0bc74d791a902fe34703c31b0c342e8567723ff99948e47928e15b6b2d822f2cac8004c6cdd5419f13d5ed1798d56bd552cd47e9821bc7af4bdb4f72c752bf4ffae7afada8ed18048ff716bfd95ede475fd37399e3c4961549972b718bda23d3f845f2555df0f0278e6ba7df008a618e02e9fcd11c0ca67ca1ecbfeeec1477fd811bf8a1458a6fd471f8cbe6513e232d77b03407327f81c9644a6e741b4a1f034f1c0b22ba048a6eae24224eff2e8182564ffb9de253e8d4623f3f7f4b423e4f8493fd9b892904b1bc73c245062020a427b3868efd3f410482260e435cd7faf55d4004297072c4c6f06b357ee19dac771fa833e2ec9780a6d55a0379524a5f42d6227eb2eea46542fafdd881b6f1455673c19473cd4f07ac82eee1eff1e6340033e6e67f0f117652d144c3adb0c2a780107870f4ced7939e4bfc4dc6de03a5f37ca12a05168f3d890ab80160a38376ceac9a8e2bfbae3121a9088614f0937efb4cb8d07cb8c28db2e50be88c54d67dca21998e74d2536096bfdb72bb6673bed1cc9410e508145f17d0f5904375ae5c09b7a72ae204932dc4a1cc99373472e57dc5f7c091925f52f16c2612daff08befdf8d021551fae0457ffbe0eaf275d2c2e5fd68c549a4579a5cc5d64d33788bce9d59ce55e7ed5dca9b7a9cb0480a999695f463a2633ecf36665244caa54344b5daab2d729be3d3b3c546647f2ecc5c8e3b180e2e591e447d440d5aa382fdc133bd376c1452744bf2156007fd398eb8a62f1a3c784a8cdbcd2ebafe82ea6832e6f8ccbde7be2894f37de44aa87044a2fa0f720dd39ee3a4276325570b8b2d14a12a035571294a05ab573303ab66b357e8295fa03a8bc1b8188257c1392591f28d66d8cb269c5ad4ba6a44067061e74032a4a26604c5a13e2747c9cf31b80d25901af047da300dfb3aaf31078679624fe56f15744c3cf2ca7adcbc88c729602ca35413981a4663864ac989797aea512dca743eb257f560fc582b3979d0f2988eb3f085ca7a86140b22b928c4c50e7af764e05ce4e3ad8eeaa5e9273901c42b3d71119835d6ca5b5b667b0d3a857f473479a69b5e5813e389bd95076b547116e482f33ad2ec5498ab8ba137044f57a6e1ba7cfd1125a7e2bf67b9528457603c99fb2268822c4b3f9c24f08e9f33506a1788bbf90f54efea7403f9303b38c24a0c13f493b13b9c16ed117d045cec2f3022410351ef845c709e355a34bb1f1a7a08be2542a6dd0e7c3c81467076c05788d2f5ccd53fbb18b4c002ceb77fe27c8b5f42392cb2b3f23edb23e70ca63c11f36d5d5b2c91984224e58ce5304711beb1cf39ae17f734072004e40a641dd7d0604fe16fe21b64a76e3fb59a88123fc8522ed0e40d26007c2b6a6856e36530382e86aa7d32941bfbcb058931132cfb20f43b92de520b052ce06b35c1b3bbac49f28219d08da24ffbbf8b7228dd3ae9750a361406a9b0af53f32909b975f25eca44d8ca7f5b001b90ac330851788537c7e3747e144b52f81205ad5ae15602cd62f9d22eef850ae66b1b76027734584477951ff233e86bab37c29d394a5eaf69051ed8472c03c20a59e094321ed7a8dfe9f163df786f6641f8a762b4966132f5add32138d861bbf169ea496a3c45f361298a6fcbc189bcfde3aca73de6195fef271f856fb447ff509796663e483f17316a26949860b09ebbe248cf3dbfe9dbadc51599f8984f5283f6c038873ccc9e4369c3edb6b93a08b8be7b29aaf9a1f973260984d2724a12eba2bb53b23125141d3e5dbea19bc40cc528f706b5ba3899a65d6fd9aaa8539f48f7f65a47f1497ae40c7596d72d69a8e8b2810a55fca258243ba3d5ab53b900a50f4f4c54433346e5f758f7c84f4ad6862f9cceec30153d93b2be4755dbf82e0087fdaa97821a57c7f89f6ae3c6255bd442c681f20fb1b9d88bac0ec68d91417e8fc1803341b6b3207feaa1cb82feef16a2056b356a2326ff85cbace0dc89940e24b70f1c071ab9933147ce43a05a8e0730060f39f8db7943cb41122ac4d1ddabe858b0a16d2152213a33327a0366839b6785a8e343a52b47618c6798e94f35fb2b817e29727b08f528cdd4be3b3e2d61ff33417ff8b28df5cb3bb8ba8bf8f6206d7f7ef861788375fe854bbefe25fe04297ddf3bbed8612611abba19ce2d5d4fe90e83ebe5024a58572da988c2a088a668fbdb65ac0f214b455c5606b948cd5057f237a5dd0ee121766973b9b879b97dd17ab7a237a8637f137d0275fbe465d152352500ff5c105e88ed5126a8e6fe5be0f2336c4a3dc7a0b97bb93b7168745694cd39aacf4a9b2fe2c2c0156f3e419472b8ca3aa934147d6457b42127831a80c3d60ebcadef5beee2fa4ac12c2f82a713d112f07209e81b8c0475bec8ab40f922a609866d511ff1d9eb334613307c156e8691fa001c8a5740127b5f7dc570dd7cfbb7c7bbeb851539c56ce00750912da38e36148aa470b6c84a05ac20f62f974c489d7ec4eb13b6803b06794347f6d9cd15bc6411c068ab9583f50005fe76959b8fbb287ad609cc4ca6431bca6ce84097b94b43d5c0b00f6ef02541d814237f67a18318324b528a0e33120f40c2018ccc819c3046d681072afb3be604cb645b39242ce9c84cc5a2ddd21f9e3a07a98ec958ebe03998036ecd6197fa7a472ff5523b3a24b6c522d3164f52e6a41a5127d89f23354c286ed6d2b76d13cf6fe450e4be0d0d6df0190bd55c20046bfd0a4a1d92c23ed2ea830ead2a4f26ba5a2f0aa5be68940bcad0e0bbf7e73ce3248083c0a49818372729ab9de7b1c0d755af0bd7eeb9d3b0b33d0941e1defd5e6cdc13e2e83021ebe2eb0ae1e5a649699c5eb5e5b2ab3d2e4337a2fd978da607aefe609d5b82965a3d2fdef89266cb4a21f3de327db62a8563e1a2dec8fdf866899add1a4473ffcda51d6a58b33e2d6bff6813c215e3bdbeddb6d8dd42af6180057623b2a9207bcabf411ec5c7ed9e0837e36e0b4a79fda9ca4c7f8d76b93a0c02d08ed8185feac12a73d74d97ebedcb9756939d4c44d1e283f15a9b76ea5a9a02ee97f02ea0e734d71167306c550c2f716aa8190f4400432e4ae53f4671268d89edb5ca9c6145b5d16f2d89d8d11be9d1cf5c804392c19be2490bfbfe50f70db8b50ffdd82bb3d2d26b8a5c753259a4577b1550fa4e6862d2560c6d5efd20fe18e921c4a1286307c531a161f602068178ed9fe9f1a5de1147d0ce042ca6d278ec437287f7a31d47165fc4a67355565248a82006a6e1efe8792f08c92bd879fbc7366164c378b64710bb21b45a277abed76616d9d10b2eea53bb5630c594467dfc2c0ba2f8296d622e947f23e3efd057b09cc26b4f27e466de76c159cb4030e6ff11b083c8af8abd1176e1038376bf3982976b1e9441d9c0caf6bf7e91b3b65ab4d8ee4ce88f19929293604bc0b8c26fbe8155387446d3328662209b437c96ce30fe3729b5408bd7c53574e17b2d75f1f1e526d9f68629927b734c00a8770b23926098b56b23cb5a9e50166d93f9ca3f3cad084a38fce179f5a681daaf5bd674f57e53b4742f9b90d1a928c4da71cd90e269cee0d1af965320d107fe82fb6e048bc30a31ac2f77c894557df85452602da7f6e831f08cafe818f71bbb8eaf387ad2cb68c59ebf19171224ccf07becb0cfabd20d4f1e96296a841afd03935785e79aeb49ff09f3f710d55d9c3cd60efde2dcb212bd4d3558b19ad19216b189f67f5510391deee6812295bd6e53bf978b51d9dd432e3af235ee9fb354aa007cdc49d35fb1b091940f7fde354f73bcbe1eb5c2c89b032fa64ef7496b70a3fb2138c7e5e133ff59ef109273a427e788e185ceb19f0a82a3b2ea562444c3eb9bb63978c180bd3f38e148530553c1e4eb9543a37925fde5fa3d064f4bf8ec8d57ed93cd2dd49e36eb1f30b98b5dd7ee30bc8a48df9e9763f97573c9dbb7e86f3500fe567d97346b41166468c24e5be0cf9ee440d4e8434dc46dca5a11a0507c494c6018e3b7f4c05ca45f8153a25490eee7548ff5e71c62140622ec6d1e922aed9beac9b9cd97af78819def9c267cf3059ad9fed43ad53aa5e7053ee1a362c9e3a987ea254f3a0a616b7c6f115f77056b07db3e277616e0ffdecefb529e879a2c399253883a4207a6f13a45aac168afd17b3ab4afea3883bcc07e623a35661407033c1be1cd6a932d9d097d8cc88f5492cb79e964a84d83273e55ef0934fef328b9c884df6222d2312d70fbcc054846615befbb0f2d9e528012a21349c4d15397a2eff77c6771e67514cf99e3ac43ad45195c514f830d127cbf52b71babf81a6ac78abb4616c84da484"}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x53b0}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x9}, {0x2, 0x6, 0x6}}}]}]}]}}]}, 0x1090}}, 0x0) 2m10.334171217s ago: executing program 7 (id=3138): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xb8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x90, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2m9.657322504s ago: executing program 7 (id=3141): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000100"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) 2m8.91652271s ago: executing program 2 (id=3142): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x84, &(0x7f00000001c0)=ANY=[], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, 0x0, 0x204040, 0x0) r0 = eventfd2(0x2, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffd6b, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 2m7.559637896s ago: executing program 7 (id=3146): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f00000008c0)={0xffffffff, 0x2, 0x8, 0x100, 0xa, 0x7, 0x5}) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) setsockopt(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)="1a00008002000000", 0x8) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r5 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000240)={0xe}) epoll_pwait2(r6, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, 0x0, 0x0) r8 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x4, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000000c0)={{0x73, @multicast1, 0x4e24, 0x3, 'ovf\x00', 0x0, 0x4, 0xe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x5, 0x0, 0x7}}, 0x44) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x0, 0x7ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r9, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) 2m7.093469993s ago: executing program 2 (id=3149): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_gettime(0x7, &(0x7f0000000340)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4087, 0xff7}, {&(0x7f0000004580)=""/4081, 0xff1}, {&(0x7f0000003540)=""/4125, 0x101d}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000a80)=""/172, 0xac}, {0x0}, {&(0x7f0000000500)=""/176, 0xb0}], 0x7}, 0x10100) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x7ff, @empty, 0x7}]}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x7, 0x1, 0x5, 0x0, r5}, 0x10) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e"], 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001bc650085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x4000) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x7, 0x3) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m5.731606989s ago: executing program 5 (id=3153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f72"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 2m4.613142732s ago: executing program 5 (id=3155): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) 2m4.12693992s ago: executing program 5 (id=3157): landlock_create_ruleset(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) 2m4.091523667s ago: executing program 7 (id=3158): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) 2m3.165932115s ago: executing program 2 (id=3162): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x8, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 2m2.89625881s ago: executing program 5 (id=3163): add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 2m2.680212956s ago: executing program 7 (id=3164): syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f0009040100000102200009040101"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000010c0)=[{{&(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20004804}}], 0x1, 0x0) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000100), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r1}, 0xffffffffffffffff, 0xfe, 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, &(0x7f0000000180)=0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090e0000850000002e000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x4, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000000)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d3000000000000020000000000a03001000000000000000070000090900010073797a30000000001400"], 0xc4}, 0x1, 0x1000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000000)) 1m53.128216452s ago: executing program 2 (id=3209): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m52.873799726s ago: executing program 8 (id=3210): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) 1m50.665909705s ago: executing program 5 (id=3211): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f00000009009197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0xfffffffe, 0x8, 0x4000004, 0x80500a}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x7) ptrace(0x10, 0x0) r2 = syz_usb_connect$midi(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000900)={0x14, &(0x7f0000000780)={0x20, 0x3, 0x45, {0x45, 0x21, "528ddc2379e88a3dd79f8edf5db43e4b4dd0d4a6b85baffa230f1c3ecc770e0cfdebf6355eb2b9de1c77b893c0d8cbd2e1c2ac33745d223c823b25293e5e311d84d046"}}, &(0x7f0000000800)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "1e37d54efa8711ed331c974594102ccf1e63ddf254eecc33c6b7c01d31d062f9e67be9fbc1847521fd3ff1224313e5e0a5ef1b25c171bf0ab97cef00f30b8097c2d3207852a8865dd28b226b3b4307456f717d1e2e8cc27315aa89aafccc1a67934c8d7bcb514c681914917ea0023287ba9617b5ad3ecc71d41effb594bcb34ee4b57ee0e21f5e0c723449c0d7d0db0718ec0f00198df7646566f34b3481be37997e9ebc95cc9a847860b1545992efd6bcbf790533a02f5b364700c03be4ddc3ae998887831114ee0a6db14d3386975670863adb52344d00388fb43e7b58ba5e401aaa8d612fa5a011cfd1f0bcc9514fd4d5b5a45727"}}}, &(0x7f0000000b80)={0x34, &(0x7f0000000940)={0x40, 0x30, 0x80, "c6f1592c9be84d2ca253b383192c34747f03caee86d5accbdb4738c5384179e99ce6eba10ceb5624fbcec6d85e0e144adc50466557c4645f5699addad4952d9f00bc5fa5485aa1efca13d5e2c51a34a5e19b53d578a73d5267840c90ec39d83356ade1c49733d8a0f3d2462da62bba482fcd28c83926163e3d7b0afa74aefef4"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000a80)={0x20, 0x0, 0x78, {0x76, "dffd4a7a4f7f335086374a23964f6f6b4cf877d81f7ba0780d21b06c59645273a471cd3490990690cfea053f7a316aa76830f71a91f84a6faf749e39b9d96e027c44995c6449c4403b2de082ee41b1230065c6692ea152809eac26ce0dec1d3e2475ec6c7d409faf2fa4fa159f1fa87c6e0007224d06"}}, &(0x7f0000000b00)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000b40)={0x20, 0x0, 0x1, 0x5c}}) ptrace(0x8, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) 1m49.773153131s ago: executing program 8 (id=3212): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = userfaultfd(0x801) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="0741bc23"], 0x0) 1m41.371470884s ago: executing program 37 (id=3164): syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f0009040100000102200009040101"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000010c0)=[{{&(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20004804}}], 0x1, 0x0) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000100), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r1}, 0xffffffffffffffff, 0xfe, 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, &(0x7f0000000180)=0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090e0000850000002e000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x4, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000000)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d3000000000000020000000000a03001000000000000000070000090900010073797a30000000001400"], 0xc4}, 0x1, 0x1000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000000)) 1m41.371265149s ago: executing program 8 (id=3214): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 1m41.370857666s ago: executing program 5 (id=3215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1m39.326025553s ago: executing program 2 (id=3216): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m36.163312124s ago: executing program 8 (id=3217): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m27.733811334s ago: executing program 2 (id=3218): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="b702000004000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd000071d3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78"], 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 1m27.733452625s ago: executing program 8 (id=3219): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfa", 0x7e}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a", 0x1d}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e", 0x32}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725", 0x1a}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x30}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m23.121434276s ago: executing program 38 (id=3215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1m16.967961167s ago: executing program 8 (id=3221): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x300000b, 0x11, r1, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)={0x4, 0x0, [{0x6, 0x4, 0x8000, 0xc3da, 0x9}, {0x40000000, 0x2835, 0x4772, 0x18, 0x4}, {0x0, 0xa, 0x3ff, 0xbfffffff, 0x5}, {0x80000000, 0x6, 0x3, 0x9, 0x3}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1m4.589748067s ago: executing program 39 (id=3218): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 55.36671798s ago: executing program 40 (id=3221): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x300000b, 0x11, r1, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)={0x4, 0x0, [{0x6, 0x4, 0x8000, 0xc3da, 0x9}, {0x40000000, 0x2835, 0x4772, 0x18, 0x4}, {0x0, 0xa, 0x3ff, 0xbfffffff, 0x5}, {0x80000000, 0x6, 0x3, 0x9, 0x3}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 0s ago: executing program 9 (id=2995): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x1}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtfilter={0x1098, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x1068, 0x2, [@TCA_BASIC_EMATCHES={0x1064, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1058, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x2}, "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"}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x53b0}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x9}, {0x2, 0x6, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3755}}]}]}}]}, 0x1098}}, 0x0) kernel console output (not intermixed with test programs): onfig 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1262.960120][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1262.960263][ T5884] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1262.960289][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.253003][ T5884] usb 9-1: config 0 descriptor?? [ 1263.494436][ T102] usb 3-1: USB disconnect, device number 57 [ 1263.701327][ T5884] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1263.719896][T10403] usb 6-1: Firmware version (0.0) predates our first public release. [ 1263.719924][T10403] usb 6-1: Please update to version 0.2 or newer [ 1263.881012][ T5742] usb 9-1: USB disconnect, device number 45 [ 1263.955655][ T5742] usblp0: removed [ 1264.888728][ T5723] usb 7-1: device descriptor read/64, error -71 [ 1264.897781][T10403] usb 6-1: USB disconnect, device number 96 [ 1265.040889][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2806'. [ 1265.146072][T16112] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2806'. [ 1265.292157][ T5742] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1265.444838][ T5742] usb 9-1: Using ep0 maxpacket: 8 [ 1265.594138][ T5742] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1265.594175][ T5742] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1265.594202][ T5742] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1265.594227][ T5742] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1265.594273][ T5742] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1265.594299][ T5742] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.907828][ T5742] usb 9-1: GET_CAPABILITIES returned 0 [ 1265.907881][ T5742] usbtmc 9-1:16.0: can't read capabilities [ 1266.177498][ T5884] usb 9-1: USB disconnect, device number 46 [ 1266.400401][ T5742] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1266.561876][ T5742] usb 8-1: Using ep0 maxpacket: 16 [ 1266.564622][ T5742] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.564650][ T5742] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1266.568239][ T5742] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1266.568269][ T5742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.568292][ T5742] usb 8-1: Product: syz [ 1266.568316][ T5742] usb 8-1: Manufacturer: syz [ 1266.568333][ T5742] usb 8-1: SerialNumber: syz [ 1266.678935][ T5742] usb 8-1: 0:2 : does not exist [ 1266.691931][T10403] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1266.883704][T10403] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1266.883738][T10403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.883760][T10403] usb 6-1: Product: syz [ 1266.883775][T10403] usb 6-1: Manufacturer: syz [ 1266.883798][T10403] usb 6-1: SerialNumber: syz [ 1266.942061][ T5742] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1267.029343][T10403] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1267.083632][ T5884] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1267.266229][ T5742] usb 8-1: USB disconnect, device number 34 [ 1267.343441][ T102] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 1267.496889][ T102] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.496949][ T102] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1267.497061][ T102] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1267.497090][ T102] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1267.497113][ T102] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1267.590627][ T102] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1267.590845][ T102] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1267.590953][ T102] usb 9-1: Product: syz [ 1267.590969][ T102] usb 9-1: Manufacturer: syz [ 1267.590985][ T102] usb 9-1: SerialNumber: syz [ 1267.760570][ T102] usb 9-1: config 0 descriptor?? [ 1268.875549][ T5884] usb 6-1: Service connection timeout for: 256 [ 1268.875578][ T5884] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1268.875729][ T102] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1268.875752][ T102] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1268.920772][T10403] usb 6-1: USB disconnect, device number 97 [ 1268.994901][ T102] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1268.994929][ T102] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1268.995237][ T102] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1269.366002][ T102] usb 9-1: USB disconnect, device number 47 [ 1269.536051][ T5723] usb usb7-port1: attempt power cycle [ 1269.597132][ T5884] ath9k_htc: Failed to initialize the device [ 1269.597685][T10403] usb 6-1: ath9k_htc: USB layer deinitialized [ 1269.831950][ T5633] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1269.932316][ T5742] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1269.965452][T16136] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2816'. [ 1269.997711][ T5633] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1269.997742][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.005464][ T5633] usb 3-1: config 0 descriptor?? [ 1270.114486][ T5742] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.114530][ T5742] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1270.138968][ T5742] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1270.139000][ T5742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.139022][ T5742] usb 8-1: Product: syz [ 1270.139038][ T5742] usb 8-1: Manufacturer: syz [ 1270.139054][ T5742] usb 8-1: SerialNumber: syz [ 1270.206659][ T5742] usb 8-1: config 0 descriptor?? [ 1270.247911][ T5742] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1270.297705][ T5742] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1270.353035][ T5742] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1270.535355][T16125] batman_adv: batadv0: Adding interface: macvtap1 [ 1270.535375][T16125] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.535723][T16125] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1270.581933][T10403] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1270.746356][T10403] usb 9-1: Using ep0 maxpacket: 16 [ 1270.749245][T10403] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.749272][T10403] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1270.788615][T10403] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1270.788648][T10403] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.788670][T10403] usb 9-1: Product: syz [ 1270.788685][T10403] usb 9-1: Manufacturer: syz [ 1270.788701][T10403] usb 9-1: SerialNumber: syz [ 1270.882884][T10403] usb 9-1: 0:2 : does not exist [ 1271.025638][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2819'. [ 1271.046216][T16144] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2819'. [ 1271.088785][T10403] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1271.102263][ T5633] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1271.104387][ T5633] [drm:udl_init] *ERROR* Selecting channel failed [ 1271.120883][ T5633] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1271.120907][ T5633] [drm] Initialized udl on minor 2 [ 1271.122279][ T5633] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1271.122759][ T5633] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1271.136594][ T5633] usb 3-1: USB disconnect, device number 58 [ 1271.265446][T10403] usb 9-1: USB disconnect, device number 48 [ 1271.599970][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1271.814006][ T5723] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1271.837994][ T5743] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1272.021927][T10403] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1272.156769][ T5723] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.157261][ T5723] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1272.203330][T10403] usb 6-1: Using ep0 maxpacket: 32 [ 1272.205927][T10403] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1272.205958][T10403] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1272.205984][T10403] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1272.242891][ T5742] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1272.357554][T10403] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1272.357588][T10403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.357611][T10403] usb 6-1: Product: syz [ 1272.357627][T10403] usb 6-1: Manufacturer: syz [ 1272.357643][T10403] usb 6-1: SerialNumber: syz [ 1272.402424][ T5742] usb 9-1: Using ep0 maxpacket: 8 [ 1272.406394][T10403] usb 6-1: config 0 descriptor?? [ 1272.433860][ T5742] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1272.433893][ T5742] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1272.433915][ T5742] usb 9-1: Product: syz [ 1272.433931][ T5742] usb 9-1: Manufacturer: syz [ 1272.433946][ T5742] usb 9-1: SerialNumber: syz [ 1272.498674][ T5742] usb 9-1: config 0 descriptor?? [ 1272.530334][ T5742] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1272.877592][T10403] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 1272.877698][T10403] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 1272.957366][ T5742] gspca_zc3xx: reg_r err -71 [ 1272.957465][ T5742] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1273.003342][ T5742] usb 9-1: USB disconnect, device number 49 [ 1273.052264][ T5884] usb 8-1: USB disconnect, device number 35 [ 1273.572142][ T5884] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1273.721884][ T5884] usb 8-1: Using ep0 maxpacket: 32 [ 1273.724849][ T5884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.724882][ T5884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.724924][ T5884] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1273.724949][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.798408][ T5884] usb 8-1: config 0 descriptor?? [ 1273.814874][ T5884] hub 8-1:0.0: USB hub found [ 1273.961921][ T5742] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1274.008308][ T5884] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1274.148274][ T5742] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.148332][ T5742] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1274.148445][ T5742] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1274.148475][ T5742] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1274.148499][ T5742] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1274.210609][ T5742] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1274.214395][ T5742] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1274.214423][ T5742] usb 9-1: Product: syz [ 1274.214440][ T5742] usb 9-1: Manufacturer: syz [ 1274.214456][ T5742] usb 9-1: SerialNumber: syz [ 1274.289924][ T5884] hid-generic 0003:046D:C31C.001B: item fetching failed at offset 0/1 [ 1274.298523][ T5884] hid-generic 0003:046D:C31C.001B: probe with driver hid-generic failed with error -22 [ 1274.317568][ T5742] usb 9-1: config 0 descriptor?? [ 1274.599779][ T5884] usb 8-1: USB disconnect, device number 36 [ 1274.648908][ T5742] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1274.648935][ T5742] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1274.848389][ T5742] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1274.848421][ T5742] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1274.848737][ T5742] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1274.936691][ T5723] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1274.936725][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.967630][ T5723] usb 7-1: config 0 descriptor?? [ 1274.968196][ T5723] usb 7-1: can't set config #0, error -71 [ 1274.990349][ T5742] usb 9-1: USB disconnect, device number 50 [ 1275.108812][ T5884] usb 6-1: USB disconnect, device number 98 [ 1275.284254][T16162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2827'. [ 1275.458195][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2830'. [ 1275.488873][T16169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2830'. [ 1276.003753][ T5723] usb 7-1: USB disconnect, device number 121 [ 1276.174847][T10403] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1276.325770][T10403] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1276.329408][T10403] usb 8-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 1276.329436][T10403] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1276.329504][T10403] usb 8-1: too many endpoints for config 1 interface 1 altsetting 141: 46, using maximum allowed: 30 [ 1276.329553][T10403] usb 8-1: config 1 interface 1 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 46 [ 1276.329582][T10403] usb 8-1: config 1 interface 1 has no altsetting 0 [ 1276.407586][T10403] usb 8-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1276.407620][T10403] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.407642][T10403] usb 8-1: Product: syz [ 1276.407658][T10403] usb 8-1: Manufacturer: syz [ 1276.407674][T10403] usb 8-1: SerialNumber: syz [ 1276.692575][ T5742] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1276.845298][T10403] usb 8-1: unit 5 not found! [ 1276.882298][ T5742] usb 9-1: Using ep0 maxpacket: 16 [ 1276.884757][ T5742] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.884783][ T5742] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1276.925687][ T5742] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1276.925721][ T5742] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.925743][ T5742] usb 9-1: Product: syz [ 1276.925759][ T5742] usb 9-1: Manufacturer: syz [ 1276.925774][ T5742] usb 9-1: SerialNumber: syz [ 1277.046663][ T5742] usb 9-1: 0:2 : does not exist [ 1277.085198][T10403] usb 8-1: USB disconnect, device number 37 [ 1277.172224][ T5884] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1277.209580][ T5742] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1277.272333][ T5633] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1277.333326][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 1277.343069][ T5884] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1277.343099][ T5884] usb 6-1: config 0 has no interface number 0 [ 1277.358425][ T5742] usb 9-1: USB disconnect, device number 51 [ 1277.416056][ T5884] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1277.416090][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.416112][ T5884] usb 6-1: Product: syz [ 1277.416128][ T5884] usb 6-1: Manufacturer: syz [ 1277.416144][ T5884] usb 6-1: SerialNumber: syz [ 1277.469180][ T5884] usb 6-1: config 0 descriptor?? [ 1277.495312][ T5884] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1277.744246][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1277.900727][ T5884] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1278.112014][ T5884] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1278.224626][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1278.278621][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1278.312582][ T5884] usb 6-1: USB disconnect, device number 99 [ 1278.400414][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1278.465086][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1278.467727][ T5884] quatech2 6-1:0.51: device disconnected [ 1278.719741][ T5633] usb 3-1: Using ep0 maxpacket: 32 [ 1278.833054][ T5742] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1278.975274][T16192] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2840'. [ 1278.991960][ T5742] usb 9-1: Using ep0 maxpacket: 8 [ 1278.998185][ T5742] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1278.998281][ T5742] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1278.998309][ T5742] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1278.998353][ T5742] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1278.998396][ T5742] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1278.998421][ T5742] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.327175][ T5742] usb 9-1: GET_CAPABILITIES returned 0 [ 1279.327228][ T5742] usbtmc 9-1:16.0: can't read capabilities [ 1279.548555][ T5742] usb 9-1: USB disconnect, device number 52 [ 1279.827058][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2843'. [ 1279.842135][ T5884] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1279.861417][T16202] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2843'. [ 1279.941992][ T5744] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1280.001905][ T5884] usb 8-1: Using ep0 maxpacket: 32 [ 1280.004661][ T5884] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1280.004691][ T5884] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1280.004717][ T5884] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1280.050604][ T5884] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1280.050638][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.050661][ T5884] usb 8-1: Product: syz [ 1280.050677][ T5884] usb 8-1: Manufacturer: syz [ 1280.050693][ T5884] usb 8-1: SerialNumber: syz [ 1280.100443][ T5884] usb 8-1: config 0 descriptor?? [ 1280.141070][ T5744] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.141197][ T5744] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1280.141231][ T5744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1280.141267][ T5744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1280.141356][ T5744] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1280.231034][ T5744] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1280.231873][ T5744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1280.231898][ T5744] usb 6-1: Product: syz [ 1280.231914][ T5744] usb 6-1: Manufacturer: syz [ 1280.231929][ T5744] usb 6-1: SerialNumber: syz [ 1280.372725][ T5633] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1280.372767][ T5633] usb 3-1: can't read configurations, error -71 [ 1280.404985][ T5744] usb 6-1: config 0 descriptor?? [ 1280.421954][ T5723] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1280.642093][ T5884] gs_usb 8-1:0.0: Couldn't get device config: (err=-121) [ 1280.642143][ T5884] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 1280.710688][ T5744] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1280.710718][ T5744] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1280.711986][ T5633] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1280.891917][ T5633] usb 3-1: Using ep0 maxpacket: 32 [ 1280.904870][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.904907][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.904950][ T5633] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1280.904976][ T5633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.953190][ T5744] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1280.953217][ T5744] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1280.953543][ T5744] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1280.959784][ T5633] usb 3-1: config 0 descriptor?? [ 1280.969443][ T5633] hub 3-1:0.0: USB hub found [ 1281.087668][ T5744] usb 6-1: USB disconnect, device number 100 [ 1281.438341][ T5884] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1281.601971][ T5884] usb 9-1: Using ep0 maxpacket: 16 [ 1281.606516][ T5884] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.606544][ T5884] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1281.617459][ T5884] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1281.617492][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.617514][ T5884] usb 9-1: Product: syz [ 1281.617529][ T5884] usb 9-1: Manufacturer: syz [ 1281.617547][ T5884] usb 9-1: SerialNumber: syz [ 1281.723734][ T5884] usb 9-1: 0:2 : does not exist [ 1281.931200][ T5884] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1282.069224][ T5884] usb 9-1: USB disconnect, device number 53 [ 1282.114855][ T5633] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1282.180591][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1282.272856][ T5744] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1282.280507][ T5633] usbhid 3-1:0.0: can't add hid device: -71 [ 1282.280706][ T5633] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1282.435614][ T5744] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1282.437809][ T5744] usb 6-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 1282.437835][ T5744] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1282.437888][ T5744] usb 6-1: too many endpoints for config 1 interface 1 altsetting 141: 46, using maximum allowed: 30 [ 1282.437937][ T5744] usb 6-1: config 1 interface 1 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 46 [ 1282.437967][ T5744] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1282.517773][ T5744] usb 6-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1282.517806][ T5744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.517829][ T5744] usb 6-1: Product: syz [ 1282.517845][ T5744] usb 6-1: Manufacturer: syz [ 1282.517861][ T5744] usb 6-1: SerialNumber: syz [ 1282.579794][ T5884] usb 8-1: USB disconnect, device number 38 [ 1282.991043][ T5744] usb 6-1: unit 5 not found! [ 1283.240007][ T5744] usb 6-1: USB disconnect, device number 101 [ 1283.268842][T16229] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2851'. [ 1283.360004][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1283.387907][T10403] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1283.541951][T10403] usb 8-1: Using ep0 maxpacket: 8 [ 1283.556925][T10403] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1283.556960][T10403] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1283.557119][T10403] usb 8-1: Product: syz [ 1283.557136][T10403] usb 8-1: Manufacturer: syz [ 1283.557153][T10403] usb 8-1: SerialNumber: syz [ 1283.609241][T10403] usb 8-1: config 0 descriptor?? [ 1283.633113][T10403] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1284.048656][T10403] gspca_zc3xx: reg_r err -71 [ 1284.048764][T10403] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1284.114323][T10403] usb 8-1: USB disconnect, device number 39 [ 1284.351956][ T5723] usb 7-1: device descriptor read/64, error -71 [ 1284.763271][T10403] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1284.839933][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2854'. [ 1284.858178][T16237] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2854'. [ 1284.914706][T10403] usb 9-1: Using ep0 maxpacket: 16 [ 1284.919693][T10403] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.919721][T10403] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1284.969223][T10403] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1284.969257][T10403] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.969279][T10403] usb 9-1: Product: syz [ 1284.969296][T10403] usb 9-1: Manufacturer: syz [ 1284.969311][T10403] usb 9-1: SerialNumber: syz [ 1285.311895][ T5744] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1285.313600][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 1285.475935][ T5744] usb 6-1: device descriptor read/64, error -32 [ 1285.713026][ T5744] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1285.713284][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 1285.802037][ T5884] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 1285.802348][ C0] raw-gadget.4 gadget.7: ignoring, device is not running [ 1285.861923][ T5744] usb 6-1: device descriptor read/64, error -32 [ 1285.941895][ T5884] usb 8-1: device descriptor read/64, error -32 [ 1285.983601][ T5744] usb usb6-port1: attempt power cycle [ 1286.143976][T10403] usb 9-1: 0:2 : does not exist [ 1286.222068][ T5884] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 1286.255825][T10403] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1286.363316][ T5744] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1286.390605][T10403] usb 9-1: USB disconnect, device number 54 [ 1286.404168][ T5744] usb 6-1: Using ep0 maxpacket: 8 [ 1286.413857][ T5744] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1286.413893][ T5744] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1286.413921][ T5744] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1286.413956][ T5744] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1286.414001][ T5744] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1286.414026][ T5744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.415084][ T5884] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.415136][ T5884] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1286.415164][ T5884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1286.415193][ T5884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1286.415216][ T5884] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1286.507828][ T5884] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1286.507860][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1286.507882][ T5884] usb 8-1: Product: syz [ 1286.507898][ T5884] usb 8-1: Manufacturer: syz [ 1286.507960][ T5884] usb 8-1: SerialNumber: syz [ 1286.627725][ T5884] usb 8-1: config 0 descriptor?? [ 1286.840944][ T5744] usb 6-1: GET_CAPABILITIES returned 0 [ 1286.841064][ T5744] usbtmc 6-1:16.0: can't read capabilities [ 1286.905939][ T5884] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1286.905967][ T5884] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1287.067977][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1287.108199][ T5884] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1287.108228][ T5884] radio-si470x 8-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1287.108565][ T5884] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 1287.231451][ T5744] usb 6-1: USB disconnect, device number 104 [ 1287.367709][ T5884] usb 8-1: USB disconnect, device number 41 [ 1287.886555][T16256] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2862'. [ 1287.912163][ T5744] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1288.112084][ T5744] usb 9-1: Using ep0 maxpacket: 16 [ 1288.114762][ T5744] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.114789][ T5744] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1288.164540][ T5744] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1288.164573][ T5744] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.164595][ T5744] usb 9-1: Product: syz [ 1288.164610][ T5744] usb 9-1: Manufacturer: syz [ 1288.164626][ T5744] usb 9-1: SerialNumber: syz [ 1288.232072][ T5744] usb 9-1: 0:2 : does not exist [ 1288.352019][ T5884] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1288.482992][ T5744] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1288.546217][ T5884] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1288.546252][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.586806][ T5884] usb 8-1: config 0 descriptor?? [ 1288.791875][ T5633] usb 3-1: reset high-speed USB device number 60 using dummy_hcd [ 1288.869262][ T5744] usb 9-1: USB disconnect, device number 55 [ 1289.371916][T10403] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1289.531894][T10403] usb 6-1: Using ep0 maxpacket: 32 [ 1289.537755][T10403] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1289.538381][T10403] usb 6-1: config 0 has no interface number 0 [ 1289.627366][T10403] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1289.629258][T10403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.629286][T10403] usb 6-1: Product: syz [ 1289.629303][T10403] usb 6-1: Manufacturer: syz [ 1289.629319][T10403] usb 6-1: SerialNumber: syz [ 1289.791100][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2866'. [ 1289.808970][T16269] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2866'. [ 1289.903169][ T5723] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1289.932599][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1290.093955][ T5884] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1290.094436][ T5884] [drm:udl_init] *ERROR* Selecting channel failed [ 1290.265041][T10403] usb 6-1: config 0 descriptor?? [ 1290.302366][ T5884] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1290.302393][ T5884] [drm] Initialized udl on minor 2 [ 1290.306765][T10403] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1290.581166][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1290.719627][ T5884] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1290.727075][ T5884] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1290.847299][T10403] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1291.167486][ T5744] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1291.268252][ T5744] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1291.284917][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1291.289158][ T5884] usb 8-1: USB disconnect, device number 42 [ 1291.332788][ T5744] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1291.351400][T10403] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1291.509526][T10403] usb 6-1: USB disconnect, device number 105 [ 1291.784468][ T38] audit: type=1326 audit(1782383911.051:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16277 comm="syz.2.2870" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f2a23ce59 code=0x0 [ 1291.966404][T10403] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1292.055031][T10403] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1292.075387][T10403] quatech2 6-1:0.51: device disconnected [ 1292.501993][ T5723] usb 7-1: device descriptor read/64, error -32 [ 1292.612494][ T5723] usb usb7-port1: attempt power cycle [ 1292.820700][T16295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2875'. [ 1292.984636][T10403] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 1293.146186][T10403] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.146242][T10403] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1293.146270][T10403] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1293.146297][T10403] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1293.146333][T10403] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1293.171131][ T5884] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1293.236513][T10403] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1293.236546][T10403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1293.236569][T10403] usb 6-1: Product: syz [ 1293.236585][T10403] usb 6-1: Manufacturer: syz [ 1293.236601][T10403] usb 6-1: SerialNumber: syz [ 1293.335760][T10403] usb 6-1: config 0 descriptor?? [ 1293.361866][ T5884] usb 8-1: device descriptor read/64, error -71 [ 1293.589733][T10403] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1293.589761][T10403] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1293.623063][ T5884] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1293.649048][ T5633] usb 3-1: USB disconnect, device number 60 [ 1293.766838][ T5884] usb 8-1: device descriptor read/64, error -71 [ 1293.798331][T10403] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1293.798358][T10403] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1293.798669][T10403] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1293.872549][ T5884] usb usb8-port1: attempt power cycle [ 1293.934389][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2878'. [ 1293.939897][T16299] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2878'. [ 1294.142995][T10403] usb 6-1: USB disconnect, device number 106 [ 1294.232880][ T5884] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1294.252677][ T5884] usb 8-1: device descriptor read/8, error -71 [ 1294.496995][ T38] audit: type=1326 audit(1782383913.761:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16304 comm="syz.2.2877" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f2a23ce59 code=0x0 [ 1294.512389][ T5884] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1294.522058][ T5744] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1294.534683][ T5884] usb 8-1: device descriptor read/8, error -71 [ 1294.652921][ T5884] usb usb8-port1: unable to enumerate USB device [ 1294.681944][ T5744] usb 9-1: Using ep0 maxpacket: 32 [ 1294.693021][ T5744] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1294.693055][ T5744] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1294.693084][ T5744] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1294.753358][ T5744] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1294.753394][ T5744] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.753419][ T5744] usb 9-1: Product: syz [ 1294.753437][ T5744] usb 9-1: Manufacturer: syz [ 1294.753454][ T5744] usb 9-1: SerialNumber: syz [ 1294.801241][ T5744] usb 9-1: config 0 descriptor?? [ 1295.296009][ T5744] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 1295.507897][ T5744] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1295.539845][ T5744] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -32 [ 1295.607171][ T5744] usb 9-1: USB disconnect, device number 56 [ 1295.831269][ T5723] usb usb7-port1: Cannot enable. Maybe the USB cable is bad? [ 1295.961975][ T5723] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1295.983373][ T5723] usb 7-1: no configurations [ 1295.983393][ T5723] usb 7-1: can't read configurations, error -22 [ 1295.983851][ T5723] usb usb7-port1: unable to enumerate USB device [ 1296.300893][ T38] audit: type=1326 audit(1782383915.561:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.5.2886" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a736ce59 code=0x7ffc0000 [ 1296.322097][ T38] audit: type=1326 audit(1782383915.581:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.5.2886" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a736ce59 code=0x7ffc0000 [ 1296.373697][ T38] audit: type=1326 audit(1782383915.641:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.5.2886" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f30a736ce59 code=0x7ffc0000 [ 1296.373866][ T38] audit: type=1326 audit(1782383915.641:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.5.2886" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a736ce59 code=0x7ffc0000 [ 1296.414302][ T38] audit: type=1326 audit(1782383915.641:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.5.2886" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f30a736ce59 code=0x7ffc0000 [ 1296.414365][ T38] audit: type=1326 audit(1782383915.681:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.5.2886" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a736ce59 code=0x7ffc0000 [ 1296.471778][ T38] audit: type=1326 audit(1782383915.691:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.5.2886" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f30a736ce59 code=0x7ffc0000 [ 1296.520545][ T38] audit: type=1326 audit(1782383915.781:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.5.2886" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a736ce59 code=0x7ffc0000 [ 1296.880613][T16326] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2887'. [ 1297.007139][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2889'. [ 1297.082358][ T5884] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1297.214317][ T5884] usb 3-1: device descriptor read/64, error -71 [ 1297.451840][ T5884] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1297.472170][T10403] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1297.552349][ T5744] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 1297.592056][ T5884] usb 3-1: device descriptor read/64, error -71 [ 1297.622660][T10403] usb 6-1: Using ep0 maxpacket: 16 [ 1297.636786][T10403] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.636814][T10403] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1297.639977][T10403] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1297.640008][T10403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.640030][T10403] usb 6-1: Product: syz [ 1297.640044][T10403] usb 6-1: Manufacturer: syz [ 1297.640060][T10403] usb 6-1: SerialNumber: syz [ 1297.705819][ T5884] usb usb3-port1: attempt power cycle [ 1297.766786][T10403] usb 6-1: 0:2 : does not exist [ 1297.780378][ T5744] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.780438][ T5744] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1297.780466][ T5744] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1297.780494][ T5744] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1297.780519][ T5744] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1297.850491][ T5744] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1297.850584][ T5744] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1297.850607][ T5744] usb 8-1: Product: syz [ 1297.850624][ T5744] usb 8-1: Manufacturer: syz [ 1297.850640][ T5744] usb 8-1: SerialNumber: syz [ 1297.938128][T10403] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1297.952653][ T5744] usb 8-1: config 0 descriptor?? [ 1298.191100][ T5744] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1298.191129][ T5744] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1298.284806][ T5884] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1298.302895][ T5884] usb 3-1: device descriptor read/8, error -71 [ 1298.392067][ T5744] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1298.392095][ T5744] radio-si470x 8-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1298.392403][ T5744] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 1298.476816][ T5744] usb 8-1: USB disconnect, device number 47 [ 1298.495623][ T102] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1298.551926][ T5884] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1298.553040][T10403] usb 6-1: USB disconnect, device number 107 [ 1298.586429][ T5884] usb 3-1: device descriptor read/8, error -71 [ 1298.665916][ T102] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.665962][ T102] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1298.692387][ T5884] usb usb3-port1: unable to enumerate USB device [ 1298.730682][ T102] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1298.730715][ T102] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.730739][ T102] usb 9-1: Product: syz [ 1298.730754][ T102] usb 9-1: Manufacturer: syz [ 1298.730771][ T102] usb 9-1: SerialNumber: syz [ 1298.779233][ T102] usb 9-1: config 0 descriptor?? [ 1298.790983][ T102] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1298.829867][ T102] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1298.935374][ T102] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1298.994345][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1299.853936][ T38] kauditd_printk_skb: 63 callbacks suppressed [ 1299.853957][ T38] audit: type=1326 audit(1782383919.121:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16353 comm="syz.7.2900" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbce888ce59 code=0x0 [ 1299.964308][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2901'. [ 1300.163212][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.163331][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.340070][T16364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2903'. [ 1300.807384][T10403] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1300.972843][T10403] usb 7-1: no configurations [ 1300.972864][T10403] usb 7-1: can't read configurations, error -22 [ 1301.022528][ T5744] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1301.101961][T10403] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1301.151960][ T5744] usb 6-1: device descriptor read/64, error -71 [ 1301.280259][T10403] usb 7-1: no configurations [ 1301.280280][T10403] usb 7-1: can't read configurations, error -22 [ 1301.280714][T10403] usb usb7-port1: attempt power cycle [ 1301.346382][ T102] usb 9-1: USB disconnect, device number 57 [ 1301.431539][ T5744] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1301.571853][ T5744] usb 6-1: device descriptor read/64, error -71 [ 1301.642244][T10403] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1301.663815][T10403] usb 7-1: no configurations [ 1301.663837][T10403] usb 7-1: can't read configurations, error -22 [ 1301.685219][ T5744] usb usb6-port1: attempt power cycle [ 1301.811281][T10403] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1301.853655][T10403] usb 7-1: no configurations [ 1301.853677][T10403] usb 7-1: can't read configurations, error -22 [ 1301.855602][T10403] usb usb7-port1: unable to enumerate USB device [ 1302.024306][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2912'. [ 1302.041380][ T5744] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1302.062814][ T5744] usb 6-1: device descriptor read/8, error -71 [ 1302.271963][ T5633] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1302.301938][ T5744] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1302.324351][ T5744] usb 6-1: device descriptor read/8, error -71 [ 1302.411902][T10403] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1302.432208][ T5744] usb usb6-port1: unable to enumerate USB device [ 1302.435500][ T5633] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.435553][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1302.435583][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1302.435610][ T5633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1302.435633][ T5633] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1302.440539][ T5633] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1302.440615][ T5633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1302.440671][ T5633] usb 3-1: Product: syz [ 1302.440714][ T5633] usb 3-1: Manufacturer: syz [ 1302.440750][ T5633] usb 3-1: SerialNumber: syz [ 1302.452071][ T5633] usb 3-1: config 0 descriptor?? [ 1302.592114][T10403] usb 9-1: device descriptor read/64, error -71 [ 1302.812004][T16389] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1302.857598][T10403] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1302.982374][T10403] usb 9-1: device descriptor read/64, error -71 [ 1303.102454][T10403] usb usb9-port1: attempt power cycle [ 1303.452116][T16400] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2919'. [ 1303.452637][T10403] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1303.476410][T10403] usb 9-1: device descriptor read/8, error -71 [ 1303.722161][T10403] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1303.743050][T10403] usb 9-1: device descriptor read/8, error -71 [ 1303.852490][T10403] usb usb9-port1: unable to enumerate USB device [ 1303.931887][ T5744] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1304.092154][ T5744] usb 7-1: Using ep0 maxpacket: 32 [ 1304.109185][ T5744] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.109221][ T5744] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.109264][ T5744] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1304.109290][ T5744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.179310][ T5744] usb 7-1: config 0 descriptor?? [ 1304.199683][ T5744] hub 7-1:0.0: USB hub found [ 1304.457619][ T5744] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1304.654821][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2923'. [ 1304.879713][ T5744] hid-generic 0003:046D:C31C.001C: item fetching failed at offset 0/1 [ 1304.886135][ T5744] hid-generic 0003:046D:C31C.001C: probe with driver hid-generic failed with error -22 [ 1305.114649][T16403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.133700][T16403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.262262][ T5744] usb 7-1: USB disconnect, device number 4 [ 1305.770315][T16420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1305.912801][ T5633] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1305.913112][ T5633] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1305.919642][ T5633] usb 3-1: USB disconnect, device number 65 [ 1306.392898][T16434] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2932'. [ 1306.405862][ T5744] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1306.482433][T10403] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1306.582827][ T5884] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 1306.588235][ T5744] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.588263][ T5744] usb 6-1: config 0 has no interfaces? [ 1306.642172][T10403] usb 7-1: device descriptor read/64, error -71 [ 1306.803837][ T5744] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1306.803871][ T5744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.803893][ T5744] usb 6-1: Product: syz [ 1306.803908][ T5744] usb 6-1: Manufacturer: syz [ 1306.803989][ T5744] usb 6-1: SerialNumber: syz [ 1306.847127][ T5884] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.847258][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1306.847289][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1306.847317][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1306.847341][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1306.910438][T10403] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1306.929161][ T5884] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1306.929194][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1306.929216][ T5884] usb 9-1: Product: syz [ 1306.929233][ T5884] usb 9-1: Manufacturer: syz [ 1306.929249][ T5884] usb 9-1: SerialNumber: syz [ 1306.977722][ T5744] usb 6-1: config 0 descriptor?? [ 1307.005343][ T5884] usb 9-1: config 0 descriptor?? [ 1307.052076][T10403] usb 7-1: device descriptor read/64, error -71 [ 1307.164919][T10403] usb usb7-port1: attempt power cycle [ 1307.314584][ T5884] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1307.314723][ T5884] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1307.421679][T16440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2935'. [ 1307.516827][ T5884] radio-si470x 9-1:0.0: software version 0, hardware version 0 [ 1307.516855][ T5884] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1307.516878][ T5884] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1307.556649][T10403] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1307.588647][T10403] usb 7-1: device descriptor read/8, error -71 [ 1307.722818][ T5884] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 1307.827954][T10403] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1307.845856][T10403] usb 7-1: device descriptor read/8, error -71 [ 1307.953955][T10403] usb usb7-port1: unable to enumerate USB device [ 1308.542484][ T5884] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1308.542832][ T5884] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 1308.632676][ T5884] usb 9-1: USB disconnect, device number 62 [ 1308.862581][T10403] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1309.011900][T10403] usb 8-1: Using ep0 maxpacket: 16 [ 1309.034108][ T5884] usb 6-1: USB disconnect, device number 112 [ 1309.086011][T10403] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.086041][T10403] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1309.209145][T10403] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1309.209180][T10403] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.209203][T10403] usb 8-1: Product: syz [ 1309.209218][T10403] usb 8-1: Manufacturer: syz [ 1309.209235][T10403] usb 8-1: SerialNumber: syz [ 1309.323337][T10403] usb 8-1: 0:2 : does not exist [ 1309.564171][T10403] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1309.905470][T10403] usb 8-1: USB disconnect, device number 48 [ 1309.924484][ T5884] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1310.061956][ T5884] usb 6-1: device descriptor read/64, error -71 [ 1310.423989][ T5884] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1310.582258][ T5884] usb 6-1: device descriptor read/64, error -71 [ 1310.585549][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1310.695665][ T5884] usb usb6-port1: attempt power cycle [ 1311.037815][T16464] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1311.049899][ T5884] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1311.074151][ T5884] usb 6-1: device descriptor read/8, error -71 [ 1311.080781][T16469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2946'. [ 1311.372539][ T5884] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1311.409882][ T5884] usb 6-1: device descriptor read/8, error -71 [ 1311.512538][ T5884] usb usb6-port1: unable to enumerate USB device [ 1311.971975][ T5884] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 1312.052382][ T5744] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 1312.128455][ T5884] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1312.128489][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.218648][ T5884] usb 8-1: config 0 descriptor?? [ 1312.252386][ T5744] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.252445][ T5744] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1312.252473][ T5744] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1312.252500][ T5744] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1312.252524][ T5744] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1312.375278][ T5744] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1312.375372][ T5744] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1312.375395][ T5744] usb 9-1: Product: syz [ 1312.375411][ T5744] usb 9-1: Manufacturer: syz [ 1312.375427][ T5744] usb 9-1: SerialNumber: syz [ 1312.438357][ T5744] usb 9-1: config 0 descriptor?? [ 1313.777310][ T5744] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1313.777340][ T5744] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1313.946512][ T5884] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1313.946993][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 1313.968485][ T5884] [drm:udl_init] *ERROR* Selecting channel failed [ 1313.986927][ T5744] radio-si470x 9-1:0.0: software version 0, hardware version 0 [ 1313.986955][ T5744] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1313.986978][ T5744] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1314.220495][ T5744] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 1315.127370][ T5744] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1315.127721][ T5744] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 1315.200626][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1315.210513][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1315.227814][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1315.245273][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1315.250253][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1315.591633][ T5744] usb 9-1: USB disconnect, device number 63 [ 1315.715140][ T5884] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1315.715168][ T5884] [drm] Initialized udl on minor 2 [ 1315.934882][ T5884] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1315.935378][ T5884] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1316.043679][ T5884] usb 8-1: USB disconnect, device number 49 [ 1316.678357][T16482] netlink: zone id is out of range [ 1316.678375][T16482] netlink: zone id is out of range [ 1316.678388][T16482] netlink: zone id is out of range [ 1316.678397][T16482] netlink: zone id is out of range [ 1316.678407][T16482] netlink: zone id is out of range [ 1316.679209][T16482] netlink: zone id is out of range [ 1316.679223][T16482] netlink: zone id is out of range [ 1316.679233][T16482] netlink: zone id is out of range [ 1316.679242][T16482] netlink: zone id is out of range [ 1316.679252][T16482] netlink: zone id is out of range [ 1317.046551][T10403] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1317.382421][ T102] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1317.442271][ T5744] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1317.534620][ T102] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.534672][ T102] usb 6-1: config 0 has no interfaces? [ 1317.560335][ T102] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1317.560368][ T102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.560390][ T102] usb 6-1: Product: syz [ 1317.560406][ T102] usb 6-1: Manufacturer: syz [ 1317.560423][ T102] usb 6-1: SerialNumber: syz [ 1317.611860][ T5744] usb 9-1: Using ep0 maxpacket: 16 [ 1317.614818][ T5744] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.614845][ T5744] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1317.652012][ T5884] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1317.676239][ T5744] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1317.676273][ T5744] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.676296][ T5744] usb 9-1: Product: syz [ 1317.676312][ T5744] usb 9-1: Manufacturer: syz [ 1317.676328][ T5744] usb 9-1: SerialNumber: syz [ 1317.752933][ T102] usb 6-1: config 0 descriptor?? [ 1317.831224][ T5884] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1317.831258][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.831280][ T5884] usb 8-1: Product: syz [ 1317.831296][ T5884] usb 8-1: Manufacturer: syz [ 1317.831326][ T5884] usb 8-1: SerialNumber: syz [ 1317.944804][ T5884] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1317.986632][ T5744] usb 9-1: 0:2 : does not exist [ 1318.027982][ T5744] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1318.098481][ T5742] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1318.113181][T10287] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1318.303691][T10287] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1318.303727][T10287] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.303750][T10287] usb 7-1: Product: syz [ 1318.304464][T10287] usb 7-1: Manufacturer: syz [ 1318.304483][T10287] usb 7-1: SerialNumber: syz [ 1318.417265][T10287] usb 7-1: config 0 descriptor?? [ 1318.706397][ T5744] usb 9-1: USB disconnect, device number 64 [ 1318.918219][T10287] usb 7-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1318.918335][T10287] usb 7-1: Firmware version (0.0) predates our first public release. [ 1318.918367][T10287] usb 7-1: Please update to version 0.2 or newer [ 1319.944772][T10287] usb 7-1: Firmware: build AœÔ™‘µµ†9Å [ 1319.946630][ T5742] usb 8-1: Service connection timeout for: 256 [ 1319.946653][ T5742] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1320.577531][ T5633] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1320.960216][ T5884] usb 8-1: USB disconnect, device number 50 [ 1321.246363][ T102] usb 6-1: USB disconnect, device number 117 [ 1321.515010][ T9693] udevd[9693]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1321.628849][T16501] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2959'. [ 1321.697028][ T5742] ath9k_htc: Failed to initialize the device [ 1321.766626][T10287] usb 7-1: USB disconnect, device number 9 [ 1321.818381][ T5744] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1321.834928][ T5884] usb 8-1: ath9k_htc: USB layer deinitialized [ 1322.001799][ T5744] usb 9-1: Using ep0 maxpacket: 8 [ 1322.020596][ T5744] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1322.020633][ T5744] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1322.020661][ T5744] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1322.020686][ T5744] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1322.020731][ T5744] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1322.020755][ T5744] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.447645][ T5744] usb 9-1: usb_control_msg returned -32 [ 1322.447697][ T5744] usbtmc 9-1:16.0: can't read capabilities [ 1322.612269][ T5744] usb 9-1: USB disconnect, device number 65 [ 1322.836607][ T38] audit: type=1326 audit(1782383942.081:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.7.2962" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbce888ce59 code=0x0 [ 1323.065967][ T5884] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 1323.304021][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.304080][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1323.304109][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1323.304138][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1323.304161][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1323.309142][ T5884] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1323.309173][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1323.309195][ T5884] usb 6-1: Product: syz [ 1323.309210][ T5884] usb 6-1: Manufacturer: syz [ 1323.309226][ T5884] usb 6-1: SerialNumber: syz [ 1323.342860][ T5884] usb 6-1: config 0 descriptor?? [ 1323.421882][T10287] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1323.574106][ T5884] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1323.574135][ T5884] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1323.599407][T10287] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1323.599440][T10287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.654703][T10287] usb 7-1: config 0 descriptor?? [ 1323.775832][ T5884] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 1323.775920][ T5884] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1323.775952][ T5884] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1323.946306][T10287] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1323.966349][T10287] [drm:udl_init] *ERROR* Selecting channel failed [ 1323.980527][ T5884] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 1324.394447][T10287] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1324.394535][T10287] [drm] Initialized udl on minor 2 [ 1324.429245][T10287] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1324.443896][T10287] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1324.507007][ T5744] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1324.599423][T10287] usb 7-1: USB disconnect, device number 10 [ 1324.675747][ T5744] usb 8-1: Using ep0 maxpacket: 32 [ 1324.699861][ T5744] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.699898][ T5744] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.700000][ T5744] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1324.700028][ T5744] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.756731][ T102] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1324.789998][ T5884] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1324.790346][ T5884] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 1324.850348][ T5744] usb 8-1: config 0 descriptor?? [ 1324.965682][ T5744] hub 8-1:0.0: USB hub found [ 1325.097180][ T5884] usb 6-1: USB disconnect, device number 118 [ 1325.164472][ T5744] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1325.170907][ T102] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1325.344438][ T102] usb 9-1: Using ep0 maxpacket: 16 [ 1325.360157][ T102] usb 9-1: config 222 has an invalid interface number: 31 but max is 0 [ 1325.360195][ T102] usb 9-1: config 222 has no interface number 0 [ 1325.360321][ T102] usb 9-1: config 222 interface 31 altsetting 11 has an endpoint descriptor with address 0x2E, changing to 0xE [ 1325.360351][ T102] usb 9-1: config 222 interface 31 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 1325.360377][ T102] usb 9-1: config 222 interface 31 has no altsetting 0 [ 1325.471630][ T102] usb 9-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 1325.471664][ T102] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.471687][ T102] usb 9-1: Product: syz [ 1325.493487][ T102] usb 9-1: Manufacturer: syz [ 1325.493509][ T102] usb 9-1: SerialNumber: syz [ 1325.601542][ T5744] hid-generic 0003:046D:C31C.001D: item fetching failed at offset 0/1 [ 1325.617792][ T5744] hid-generic 0003:046D:C31C.001D: probe with driver hid-generic failed with error -22 [ 1325.727388][T16518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.764985][T16518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.911857][ T5884] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1325.932212][T10287] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1326.006557][ T102] ldusb 9-1:222.31: Interrupt out endpoint not found (using control endpoint instead) [ 1326.069419][ T5744] usb 8-1: USB disconnect, device number 51 [ 1326.111879][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 1326.112137][T10287] usb 7-1: Using ep0 maxpacket: 8 [ 1326.116940][ T5884] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1326.116970][ T5884] usb 6-1: config 0 has no interface number 0 [ 1326.117020][ T5884] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1326.180269][ T5884] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1326.180303][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.180383][ T5884] usb 6-1: Product: syz [ 1326.180400][ T5884] usb 6-1: Manufacturer: syz [ 1326.180417][ T5884] usb 6-1: SerialNumber: syz [ 1326.222844][T10287] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1326.222877][T10287] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1326.222900][T10287] usb 7-1: Product: syz [ 1326.222916][T10287] usb 7-1: Manufacturer: syz [ 1326.222932][T10287] usb 7-1: SerialNumber: syz [ 1326.269086][ T102] ldusb 9-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 1326.332125][ T102] usb 9-1: USB disconnect, device number 66 [ 1326.365526][T10287] usb 7-1: config 0 descriptor?? [ 1326.389945][ T5884] usb 6-1: config 0 descriptor?? [ 1326.431535][ T102] ldusb 9-1:222.31: LD USB Device #0 now disconnected [ 1326.460498][T10287] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1326.906401][T10287] gspca_zc3xx: reg_r err -71 [ 1326.906505][T10287] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1327.201401][ T5884] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1327.201437][ T5884] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1327.314414][ T5633] usb 3-1: device descriptor read/64, error -71 [ 1327.331226][T10287] usb 7-1: USB disconnect, device number 11 [ 1327.435001][ T5884] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1327.435050][ T5884] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1327.435073][ T5884] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1327.435093][ T5884] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1327.435418][ T5884] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1327.509977][ T5884] usb 6-1: USB disconnect, device number 119 [ 1327.671883][ T102] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1327.787863][T16532] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1327.838111][ T102] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.838141][ T102] usb 9-1: config 0 has no interfaces? [ 1327.845099][ T102] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1327.845131][ T102] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.845154][ T102] usb 9-1: Product: syz [ 1327.845170][ T102] usb 9-1: Manufacturer: syz [ 1327.845186][ T102] usb 9-1: SerialNumber: syz [ 1327.970487][ T102] usb 9-1: config 0 descriptor?? [ 1328.140676][T16537] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2972'. [ 1329.915216][ T5884] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1329.915373][ T102] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 1330.081537][ T5884] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1330.081567][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.081586][ T5884] usb 8-1: Product: syz [ 1330.081600][ T5884] usb 8-1: Manufacturer: syz [ 1330.081614][ T5884] usb 8-1: SerialNumber: syz [ 1330.123241][ T102] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1330.123273][ T102] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.176463][ T102] usb 6-1: config 0 descriptor?? [ 1330.202494][ T5884] usb 8-1: config 0 descriptor?? [ 1330.543975][ T102] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1330.546340][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 1330.546579][ T102] [drm:udl_init] *ERROR* Selecting channel failed [ 1330.719485][ T5884] usb 8-1: Firmware version (0.0) predates our first public release. [ 1330.719516][ T5884] usb 8-1: Please update to version 0.2 or newer [ 1330.834750][T10403] usb 9-1: USB disconnect, device number 67 [ 1331.074322][ T5633] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1331.451446][ T5884] usb 8-1: USB disconnect, device number 52 [ 1331.595928][ T102] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1331.595957][ T102] [drm] Initialized udl on minor 2 [ 1331.622243][ T102] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1331.622746][ T102] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1331.626305][T10403] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1331.670534][T10403] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1331.670805][T10403] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1331.748676][ T102] usb 6-1: USB disconnect, device number 120 [ 1332.331851][T10403] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1332.484424][T10403] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.484462][T10403] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.484502][T10403] usb 9-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 1332.484528][T10403] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.569422][T10403] usb 9-1: config 0 descriptor?? [ 1332.641972][ T102] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1332.841935][ T102] usb 6-1: device descriptor read/64, error -71 [ 1333.032052][ T5884] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1333.067307][T10403] stadia 0003:18D1:9400.001E: unknown main item tag 0x7 [ 1333.067344][T10403] stadia 0003:18D1:9400.001E: item fetching failed at offset 1/5 [ 1333.070804][T10403] stadia 0003:18D1:9400.001E: parse failed [ 1333.070966][T10403] stadia 0003:18D1:9400.001E: probe with driver stadia failed with error -22 [ 1333.081903][ T102] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1333.188630][ T5884] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1333.188663][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.188681][ T5884] usb 8-1: Product: syz [ 1333.188698][ T5884] usb 8-1: Manufacturer: syz [ 1333.188711][ T5884] usb 8-1: SerialNumber: syz [ 1333.222088][ T102] usb 6-1: device descriptor read/64, error -71 [ 1333.242333][ T5884] usb 8-1: config 0 descriptor?? [ 1333.278896][T10403] usb 9-1: USB disconnect, device number 68 [ 1333.334154][ T102] usb usb6-port1: attempt power cycle [ 1333.681849][ T102] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1333.704442][ T102] usb 6-1: device descriptor read/8, error -71 [ 1333.769867][ T5884] usb 8-1: Firmware version (0.0) predates our first public release. [ 1333.769896][ T5884] usb 8-1: Please update to version 0.2 or newer [ 1333.944167][ T102] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1333.963185][ T102] usb 6-1: device descriptor read/8, error -71 [ 1334.075710][ T102] usb usb6-port1: unable to enumerate USB device [ 1334.347302][T16571] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2984'. [ 1335.531515][ T5884] usb 8-1: USB disconnect, device number 53 [ 1336.055791][T10403] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1336.516463][T10403] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1336.516498][T10403] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.516520][T10403] usb 9-1: Product: syz [ 1336.516536][T10403] usb 9-1: Manufacturer: syz [ 1336.516552][T10403] usb 9-1: SerialNumber: syz [ 1336.962583][T10403] usb 9-1: config 0 descriptor?? [ 1338.878094][T10403] usb 9-1: Firmware version (0.0) predates our first public release. [ 1338.878124][T10403] usb 9-1: Please update to version 0.2 or newer [ 1339.591611][T10403] usb 9-1: USB disconnect, device number 69 [ 1340.251953][ T5742] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1340.404134][ T5742] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1340.404168][ T5742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.442016][ T5742] usb 6-1: config 0 descriptor?? [ 1341.682180][ T5884] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1341.825827][T16581] batman_adv: batadv0: Adding interface: macvtap4 [ 1341.825845][T16581] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.825878][T16581] batman_adv: batadv0: Not using interface macvtap4 (retrying later): interface not active [ 1341.838318][ T5884] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1341.838409][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.974408][ T5884] usb 8-1: config 0 descriptor?? [ 1342.381464][ T5742] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1342.382407][ T5742] [drm:udl_init] *ERROR* Selecting channel failed [ 1342.782267][T10403] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1343.219725][ T5742] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1343.219755][ T5742] [drm] Initialized udl on minor 2 [ 1343.630781][ T5742] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1343.648408][ T5742] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1343.709535][T10287] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1343.779306][ T5742] usb 6-1: USB disconnect, device number 125 [ 1343.828248][T10287] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1344.573236][T10403] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1344.764679][T10403] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.764710][T10403] usb 9-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 1344.835742][T10403] usb 9-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1344.835833][T10403] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.835857][T10403] usb 9-1: Product: syz [ 1344.835872][T10403] usb 9-1: Manufacturer: syz [ 1344.835888][T10403] usb 9-1: SerialNumber: syz [ 1345.004847][ T5884] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1345.005344][ T5884] [drm:udl_init] *ERROR* Selecting channel failed [ 1345.235388][ T5884] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 3 [ 1345.235417][ T5884] [drm] Initialized udl on minor 3 [ 1345.261398][ T5884] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1345.271064][ T5884] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1345.313439][T10403] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1345.316559][T16600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.320918][T16600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.349235][T10403] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1345.349495][T10403] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1345.387687][ T5884] usb 8-1: USB disconnect, device number 54 [ 1345.624540][ T5742] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1345.783275][ T5742] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1345.783316][ T5742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.841113][ T5742] usb 6-1: config 0 descriptor?? [ 1346.629742][T16605] batman_adv: batadv0: Adding interface: macvtap5 [ 1346.629762][T16605] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.629794][T16605] batman_adv: batadv0: Not using interface macvtap5 (retrying later): interface not active [ 1346.922959][ T5742] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1346.923466][ T5742] [drm:udl_init] *ERROR* Selecting channel failed [ 1347.075397][ T5742] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1347.075425][ T5742] [drm] Initialized udl on minor 2 [ 1347.094646][ T5633] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1347.117502][ T5742] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1347.118008][ T5742] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1347.119301][T10403] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1347.150087][T10403] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1347.150344][T10403] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1347.177445][ T5742] usb 6-1: USB disconnect, device number 126 [ 1347.626463][T16041] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1347.710069][T10403] usb 9-1: USB disconnect, device number 71 [ 1347.768006][T16041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1347.784193][T16041] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1347.808420][T16041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1347.838195][T16041] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1348.343575][T10403] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1348.735478][T10403] usb 9-1: Using ep0 maxpacket: 32 [ 1348.751027][T10403] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.751063][T10403] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.751105][T10403] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1348.751130][T10403] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.880366][T10403] usb 9-1: config 0 descriptor?? [ 1348.933348][T10403] hub 9-1:0.0: USB hub found [ 1348.951987][ T5884] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1349.094243][ T5884] usb 8-1: device descriptor read/64, error -71 [ 1349.143692][T16626] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3000'. [ 1349.226068][T10403] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 1349.342588][ T5884] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1349.471921][ T5884] usb 8-1: device descriptor read/64, error -71 [ 1349.515912][T10403] hid-generic 0003:046D:C31C.001F: item fetching failed at offset 0/1 [ 1349.537008][T10403] hid-generic 0003:046D:C31C.001F: probe with driver hid-generic failed with error -22 [ 1349.583857][ T5884] usb usb8-port1: attempt power cycle [ 1349.745962][T16628] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1349.854318][T16617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.855039][T16617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.951954][ T5884] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1349.985459][T10403] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1349.996032][ T5884] usb 8-1: device descriptor read/8, error -71 [ 1350.014657][T10287] usb 9-1: USB disconnect, device number 72 [ 1350.203530][T10403] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1350.203563][T10403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.203585][T10403] usb 6-1: Product: syz [ 1350.203601][T10403] usb 6-1: Manufacturer: syz [ 1350.203616][T10403] usb 6-1: SerialNumber: syz [ 1350.212357][T16041] Bluetooth: hci3: command tx timeout [ 1350.241918][ T5884] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1350.292616][ T5884] usb 8-1: device descriptor read/8, error -71 [ 1350.399765][T10403] usb 6-1: config 0 descriptor?? [ 1350.402319][ T5884] usb usb8-port1: unable to enumerate USB device [ 1350.876630][T10403] usb 6-1: Firmware version (0.0) predates our first public release. [ 1350.876659][T10403] usb 6-1: Please update to version 0.2 or newer [ 1351.670221][T10403] usb 6-1: USB disconnect, device number 127 [ 1352.133918][T10287] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1352.489962][T16041] Bluetooth: hci3: command tx timeout [ 1355.059674][T16041] Bluetooth: hci3: command tx timeout [ 1355.462080][T10287] usb 9-1: device descriptor read/all, error -71 [ 1356.871889][T10287] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1357.052204][T10287] usb 9-1: Using ep0 maxpacket: 8 [ 1357.054967][T10287] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1357.055002][T10287] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1357.055028][T10287] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1357.055053][T10287] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1357.055097][T10287] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1357.055121][T10287] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.102269][T16041] Bluetooth: hci3: command tx timeout [ 1358.061735][T10287] usb 9-1: GET_CAPABILITIES returned 0 [ 1358.061789][T10287] usbtmc 9-1:16.0: can't read capabilities [ 1358.264704][ C0] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1358.264812][ C0] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1358.329908][T10287] usb 9-1: USB disconnect, device number 74 [ 1359.527030][T16674] net_ratelimit: 185 callbacks suppressed [ 1359.527195][T16674] netlink: zone id is out of range [ 1359.527206][T16674] netlink: zone id is out of range [ 1359.527218][T16674] netlink: zone id is out of range [ 1359.527228][T16674] netlink: zone id is out of range [ 1359.564519][T16674] netlink: zone id is out of range [ 1359.564600][T16674] netlink: zone id is out of range [ 1359.564611][T16674] netlink: zone id is out of range [ 1359.564621][T16674] netlink: zone id is out of range [ 1359.564630][T16674] netlink: zone id is out of range [ 1359.564640][T16674] netlink: zone id is out of range [ 1359.602679][ T5884] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1359.704923][T10287] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1359.788568][ T5884] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1359.788603][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.788625][ T5884] usb 6-1: Product: syz [ 1359.788641][ T5884] usb 6-1: Manufacturer: syz [ 1359.788656][ T5884] usb 6-1: SerialNumber: syz [ 1359.838411][ T5884] usb 6-1: config 0 descriptor?? [ 1359.861792][T10287] usb 8-1: Using ep0 maxpacket: 32 [ 1359.864079][T10287] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.864111][T10287] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.864152][T10287] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1359.864177][T10287] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.980054][T10287] usb 8-1: config 0 descriptor?? [ 1360.146614][T10287] hub 8-1:0.0: USB hub found [ 1360.281463][T10287] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1360.376368][ T5884] usb 6-1: Firmware: major: 0, minor: 101, hardware type: UNKNOWN (114) [ 1360.583716][ T5884] usb 6-1: failed to fetch extended address, random address set [ 1360.583748][ T5884] usb 6-1: atusb_probe: initialization failed, error = -524 [ 1360.612474][ T5884] atusb 6-1:0.0: probe with driver atusb failed with error -524 [ 1360.639944][T10287] usbhid 8-1:0.0: can't add hid device: -71 [ 1360.640077][T10287] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1360.722097][ T5633] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1360.743591][T10287] usb 8-1: USB disconnect, device number 59 [ 1360.842397][ T5884] usb 6-1: USB disconnect, device number 2 [ 1361.606488][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.606612][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.173612][T16544] syz_tun (unregistering): left allmulticast mode [ 1362.231974][ T5742] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1362.390489][ T5742] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1362.390527][ T5742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.390552][ T5742] usb 6-1: Product: syz [ 1362.390569][ T5742] usb 6-1: Manufacturer: syz [ 1362.390586][ T5742] usb 6-1: SerialNumber: syz [ 1362.460541][ T5742] usb 6-1: config 0 descriptor?? [ 1362.731809][T10287] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1362.896555][T10287] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1362.896589][T10287] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.930522][ T5742] usb 6-1: Firmware version (0.0) predates our first public release. [ 1362.930561][ T5742] usb 6-1: Please update to version 0.2 or newer [ 1362.979588][T10287] usb 8-1: config 0 descriptor?? [ 1363.542506][ T38] audit: type=1326 audit(1782383982.801:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16702 comm="syz.2.3025" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a23ce59 code=0x7ffc0000 [ 1363.576445][ T38] audit: type=1326 audit(1782383982.841:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16702 comm="syz.2.3025" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a23ce59 code=0x7ffc0000 [ 1363.727823][ T38] audit: type=1326 audit(1782383982.991:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16702 comm="syz.2.3025" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6f2a23ce59 code=0x7ffc0000 [ 1363.768613][ T38] audit: type=1326 audit(1782383983.031:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16702 comm="syz.2.3025" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a23ce59 code=0x7ffc0000 [ 1363.769987][ T38] audit: type=1326 audit(1782383983.031:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16702 comm="syz.2.3025" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a23ce59 code=0x7ffc0000 [ 1363.863043][ T38] audit: type=1326 audit(1782383983.121:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16702 comm="syz.2.3025" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6f2a23ce59 code=0x7ffc0000 [ 1363.864759][ T38] audit: type=1326 audit(1782383983.131:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16702 comm="syz.2.3025" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a23ce59 code=0x7ffc0000 [ 1363.865801][ T38] audit: type=1326 audit(1782383983.131:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16702 comm="syz.2.3025" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a23ce59 code=0x7ffc0000 [ 1363.908916][ T38] audit: type=1326 audit(1782383983.181:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16702 comm="syz.2.3025" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6f2a23ce59 code=0x7ffc0000 [ 1363.909026][ T38] audit: type=1326 audit(1782383983.181:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16702 comm="syz.2.3025" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a23ce59 code=0x7ffc0000 [ 1365.340623][T10287] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1365.341103][T10287] [drm:udl_init] *ERROR* Selecting channel failed [ 1365.474827][T10287] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1365.474855][T10287] [drm] Initialized udl on minor 2 [ 1365.502435][T10287] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1365.502940][T10287] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1365.504188][T10403] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1365.504945][T10403] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1365.505165][T10403] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1365.566860][ T5742] usb 6-1: USB disconnect, device number 3 [ 1365.590014][T10287] usb 8-1: USB disconnect, device number 60 [ 1366.454067][T16723] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3031'. [ 1367.693064][ T5884] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1367.850324][ T5884] usb 8-1: Using ep0 maxpacket: 32 [ 1367.865945][ T5884] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1367.866005][ T5884] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.866031][ T5884] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1367.866059][ T5884] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1367.866095][ T5884] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1367.866120][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.948981][ T5884] usb 8-1: config 0 descriptor?? [ 1368.620082][ T5884] usbhid 8-1:0.0: can't add hid device: -71 [ 1368.620222][ T5884] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1368.681369][ T5884] usb 8-1: USB disconnect, device number 61 [ 1369.211928][ T102] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1369.354653][ T38] kauditd_printk_skb: 26 callbacks suppressed [ 1369.354673][ T38] audit: type=1326 audit(1782383988.621:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16762 comm="syz.7.3051" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce888ce59 code=0x7ffc0000 [ 1369.358205][ T38] audit: type=1326 audit(1782383988.621:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16762 comm="syz.7.3051" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce888ce59 code=0x7ffc0000 [ 1369.438386][ T38] audit: type=1326 audit(1782383988.701:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16762 comm="syz.7.3051" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbce888ce59 code=0x7ffc0000 [ 1369.469920][ T102] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1369.469952][ T102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.469974][ T102] usb 3-1: Product: syz [ 1369.469990][ T102] usb 3-1: Manufacturer: syz [ 1369.470006][ T102] usb 3-1: SerialNumber: syz [ 1369.505137][ T38] audit: type=1326 audit(1782383988.701:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16762 comm="syz.7.3051" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce888ce59 code=0x7ffc0000 [ 1369.507221][ T38] audit: type=1326 audit(1782383988.771:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16762 comm="syz.7.3051" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbce888ce59 code=0x7ffc0000 [ 1369.570869][ T38] audit: type=1326 audit(1782383988.831:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16762 comm="syz.7.3051" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce888ce59 code=0x7ffc0000 [ 1369.571377][ T38] audit: type=1326 audit(1782383988.831:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16762 comm="syz.7.3051" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce888ce59 code=0x7ffc0000 [ 1369.631034][ T38] audit: type=1326 audit(1782383988.891:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16762 comm="syz.7.3051" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbce888ce59 code=0x7ffc0000 [ 1369.631444][ T38] audit: type=1326 audit(1782383988.891:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16762 comm="syz.7.3051" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce888ce59 code=0x7ffc0000 [ 1369.681865][ T38] audit: type=1326 audit(1782383988.911:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16762 comm="syz.7.3051" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce888ce59 code=0x7ffc0000 [ 1369.744653][ T102] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1369.787749][ T5884] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1371.250237][ T5884] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1371.285626][ T102] usb 3-1: USB disconnect, device number 70 [ 1371.337993][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1371.909282][ T5884] ath9k_htc: Failed to initialize the device [ 1371.910285][ T102] usb 3-1: ath9k_htc: USB layer deinitialized [ 1372.898103][ T8115] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.762030][ T102] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1373.914230][ T102] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.914260][ T102] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 1373.948168][ T102] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1373.948203][ T102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.948225][ T102] usb 3-1: Product: syz [ 1373.948241][ T102] usb 3-1: Manufacturer: syz [ 1373.948258][ T102] usb 3-1: SerialNumber: syz [ 1374.237200][T16801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.237842][T16801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.913975][ T5742] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1375.942270][ T5884] usb 3-1: USB disconnect, device number 71 [ 1376.091576][ T5742] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1376.107125][ T5742] usb 6-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 1376.107154][ T5742] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1376.107205][ T5742] usb 6-1: too many endpoints for config 1 interface 1 altsetting 141: 46, using maximum allowed: 30 [ 1376.107245][ T5742] usb 6-1: config 1 interface 1 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 46 [ 1376.107273][ T5742] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1376.187755][ T5742] usb 6-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1376.187788][ T5742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.187810][ T5742] usb 6-1: Product: syz [ 1376.187833][ T5742] usb 6-1: Manufacturer: syz [ 1376.187849][ T5742] usb 6-1: SerialNumber: syz [ 1376.301902][ T102] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1376.452398][ T102] usb 8-1: Using ep0 maxpacket: 16 [ 1376.466899][ T102] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.466926][ T102] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1376.506039][ T102] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1376.506459][ T102] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.506483][ T102] usb 8-1: Product: syz [ 1376.506500][ T102] usb 8-1: Manufacturer: syz [ 1376.506517][ T102] usb 8-1: SerialNumber: syz [ 1376.752338][T16614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.752702][T16614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.753102][T16614] bridge_slave_0: entered allmulticast mode [ 1376.830945][T16614] bridge_slave_0: entered promiscuous mode [ 1376.861663][ T5742] usb 6-1: unit 5 not found! [ 1376.871069][T16614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.871414][T16614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.907776][T16614] bridge_slave_1: entered allmulticast mode [ 1376.948353][T16614] bridge_slave_1: entered promiscuous mode [ 1377.502020][ T5884] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1377.530944][ T102] usb 8-1: 0:2 : does not exist [ 1377.576747][ T102] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1377.651991][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 1377.655027][ T5884] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1377.655060][ T5884] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1377.655089][ T5884] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1377.720160][ T5884] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1377.720206][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.720231][ T5884] usb 3-1: Product: syz [ 1377.720249][ T5884] usb 3-1: Manufacturer: syz [ 1377.720267][ T5884] usb 3-1: SerialNumber: syz [ 1377.825418][ T5742] usb 6-1: USB disconnect, device number 4 [ 1377.993660][ T5884] usb 3-1: config 0 descriptor?? [ 1378.553465][ T5884] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1378.758985][ T5884] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1378.759067][ T5884] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 1379.075741][T16843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1379.075761][T16843] IPv6: NLM_F_CREATE should be set when creating new route [ 1379.153486][ T5884] usb 3-1: USB disconnect, device number 72 [ 1379.160065][ T102] usb 8-1: USB disconnect, device number 62 [ 1379.564004][ T9864] udevd[9864]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1379.674472][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1380.305655][ T8115] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.518962][ T5884] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1380.662005][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 1380.666840][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.666875][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.666917][ T5884] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1380.666942][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.783183][ T5884] usb 3-1: config 0 descriptor?? [ 1380.835871][ T5884] hub 3-1:0.0: USB hub found [ 1381.062034][ T5884] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1381.100254][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3092'. [ 1381.323806][ T5884] hid-generic 0003:046D:C31C.0020: item fetching failed at offset 0/1 [ 1381.340698][ T5884] hid-generic 0003:046D:C31C.0020: probe with driver hid-generic failed with error -22 [ 1381.574538][T16849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.575199][T16849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.745452][ T5884] usb 3-1: USB disconnect, device number 73 [ 1382.002715][T16843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.003940][T16843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.652133][ T102] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1382.867448][ T102] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1382.867482][ T102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.867504][ T102] usb 3-1: Product: syz [ 1382.867520][ T102] usb 3-1: Manufacturer: syz [ 1382.867535][ T102] usb 3-1: SerialNumber: syz [ 1386.060111][T16843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1386.176123][T16843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.034739][ T102] net_ratelimit: 213 callbacks suppressed [ 1389.034769][ T102] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -ETIMEDOUT [ 1389.034826][ T102] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1389.035824][ T102] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1389.206317][ T102] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -110 [ 1390.859002][T16614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.893821][ T8112] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.956263][T16614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.956348][ T3422] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.217381][ T5884] usb 3-1: USB disconnect, device number 74 [ 1391.522383][ T102] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1391.622999][ T8115] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.705498][ T102] usb 6-1: Using ep0 maxpacket: 32 [ 1391.708142][ T102] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.708199][ T102] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1391.708245][ T102] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1391.708271][ T102] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.331932][ T102] usb 6-1: config 0 descriptor?? [ 1392.336378][ T102] hub 6-1:0.0: bad descriptor, ignoring hub [ 1392.336428][ T102] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1392.374454][ T102] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1392.549672][T16952] syz.2.3139 (16952) used greatest stack depth: 17200 bytes left [ 1392.592354][ T3422] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.659397][ T3422] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.047041][T16614] team0: Port device team_slave_0 added [ 1393.103238][T16614] team0: Port device team_slave_1 added [ 1393.141953][ T102] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1393.294252][ T102] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.294281][ T102] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 1393.326372][ T102] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1393.326405][ T102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.326427][ T102] usb 3-1: Product: syz [ 1393.326442][ T102] usb 3-1: Manufacturer: syz [ 1393.326458][ T102] usb 3-1: SerialNumber: syz [ 1393.471330][T16614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.471351][T16614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.471380][T16614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.710524][T16958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.711216][T16958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.805448][ T5742] usb 3-1: USB disconnect, device number 75 [ 1394.136985][T16971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.137631][T16971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.531865][ T5742] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1394.729709][ T5742] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1394.729744][ T5742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.729766][ T5742] usb 8-1: Product: syz [ 1394.729781][ T5742] usb 8-1: Manufacturer: syz [ 1394.729797][ T5742] usb 8-1: SerialNumber: syz [ 1394.827155][ T5742] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1394.996512][ T102] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1395.818264][ T5742] usb 6-1: USB disconnect, device number 5 [ 1396.356396][ T8115] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.611944][ T102] usb 8-1: Service connection timeout for: 256 [ 1396.612062][ T102] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1397.362474][ T5884] usb 8-1: USB disconnect, device number 63 [ 1397.588422][ T102] ath9k_htc: Failed to initialize the device [ 1397.598022][ T5884] usb 8-1: ath9k_htc: USB layer deinitialized [ 1397.664104][T16614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.664124][T16614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.664155][T16614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.418312][T16614] hsr_slave_0: entered promiscuous mode [ 1398.450258][T16614] hsr_slave_1: entered promiscuous mode [ 1398.488938][T16614] debugfs: 'hsr0' already exists in 'hsr' [ 1398.488970][T16614] Cannot create hsr debugfs directory [ 1399.143339][ T5884] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1399.232389][ T102] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1399.314136][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 1399.316837][ T5884] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.316895][ T5884] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1399.316925][ T5884] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1399.316951][ T5884] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1399.316996][ T5884] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1399.317020][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.388471][ T102] usb 8-1: Using ep0 maxpacket: 8 [ 1399.396605][ T102] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.396634][ T102] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1399.396658][ T102] usb 8-1: config 1 has no interface number 0 [ 1399.442474][ T102] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1399.442508][ T102] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.442530][ T102] usb 8-1: Product: syz [ 1399.442545][ T102] usb 8-1: Manufacturer: syz [ 1399.442561][ T102] usb 8-1: SerialNumber: syz [ 1399.540005][ T5884] usbtmc 6-1:16.0: bulk endpoints not found [ 1399.858990][T17013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.970114][T17013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.607398][T17013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.685336][T17013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.947754][ T102] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1405.037956][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1406.411441][ T4928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1406.467563][ T4928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1406.485202][ T4928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1406.486633][ T4928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1406.487555][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1408.615045][ T4928] Bluetooth: hci2: command tx timeout [ 1411.685936][ T4928] Bluetooth: hci2: command tx timeout [ 1411.686193][ T32] usb 6-1: USB disconnect, device number 6 [ 1413.800068][ T4928] Bluetooth: hci2: command tx timeout [ 1415.131937][ T32] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1415.984434][ T4928] Bluetooth: hci2: command tx timeout [ 1418.062989][ T8109] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.114130][ T3289] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.114188][ T3289] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.114231][ T3289] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.173777][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.174035][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.787110][ T5743] usb 8-1: USB disconnect, device number 64 [ 1441.762802][T17151] netlink: zone id is out of range [ 1441.762840][T17151] netlink: zone id is out of range [ 1441.762852][T17151] netlink: zone id is out of range [ 1441.762863][T17151] netlink: zone id is out of range [ 1441.762872][T17151] netlink: zone id is out of range [ 1441.762957][T17151] netlink: zone id is out of range [ 1441.762967][T17151] netlink: zone id is out of range [ 1441.762977][T17151] netlink: zone id is out of range [ 1441.763001][T17151] netlink: zone id is out of range [ 1441.763011][T17151] netlink: zone id is out of range [ 1442.452463][ T4928] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1442.761564][T16041] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1443.500961][ T4928] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1443.511993][ T4928] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1444.537795][ T4928] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1448.683421][ T4928] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1448.688961][ T4928] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1452.790361][T16041] Bluetooth: hci6: command tx timeout [ 1455.861590][ T4928] Bluetooth: hci6: command tx timeout [ 1458.023676][T16041] Bluetooth: hci6: command tx timeout [ 1460.985581][T16041] Bluetooth: hci6: command tx timeout [ 1462.017322][ T4928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1464.087534][ T4928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1464.094618][ T4928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1464.096999][ T4928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1464.097866][ T4928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1468.208162][ T8115] bridge_slave_1: left allmulticast mode [ 1468.208203][ T8115] bridge_slave_1: left promiscuous mode [ 1468.208519][ T8115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.326809][T17170] Bluetooth: hci3: command tx timeout [ 1473.399202][T17170] Bluetooth: hci3: command tx timeout [ 1476.409478][ T4928] Bluetooth: hci3: command tx timeout [ 1477.443365][ T8115] bridge_slave_0: left allmulticast mode [ 1477.443406][ T8115] bridge_slave_0: left promiscuous mode [ 1477.457364][ T8115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.535121][T17170] Bluetooth: hci3: command tx timeout [ 1484.640799][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.640928][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1499.064553][ T4928] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1499.845221][T17170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1501.186387][T17170] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1503.962023][T17170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1505.951677][T11800] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1505.993508][T11800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1507.002590][T17170] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1507.006228][T11800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1510.052101][T17183] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1510.088614][T17170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1511.202023][T17170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1512.204593][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1512.211227][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1512.222773][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1515.354762][ T4928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1516.354861][ T4928] Bluetooth: hci0: command tx timeout [ 1516.369565][ T4928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1519.412335][T11800] Bluetooth: hci0: command tx timeout [ 1522.331842][T11800] Bluetooth: hci1: command tx timeout [ 1522.332351][T11800] Bluetooth: hci0: command tx timeout [ 1523.342192][ T4928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1523.354597][ T4928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1523.361267][ T4928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1523.380884][ T4928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1525.371745][T11800] Bluetooth: hci0: command tx timeout [ 1525.371782][T11800] Bluetooth: hci1: command tx timeout [ 1525.394290][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1529.475621][ T4928] Bluetooth: hci1: command tx timeout [ 1532.532484][T17170] Bluetooth: hci2: command tx timeout [ 1532.589038][ T4928] Bluetooth: hci1: command tx timeout [ 1534.647145][ T4928] Bluetooth: hci2: command tx timeout [ 1537.661922][ T4928] Bluetooth: hci2: command tx timeout [ 1540.721303][T17170] Bluetooth: hci2: command tx timeout [ 1547.911065][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.911186][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.949876][ T4928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1550.042386][ T4928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1552.042065][T17189] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1552.049101][T17189] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1552.049970][T17189] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1557.192714][T17189] Bluetooth: hci4: command tx timeout [ 1559.712180][ T4928] Bluetooth: hci4: command tx timeout [ 1560.339319][T17189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1561.333647][T17189] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1562.784424][T17189] Bluetooth: hci4: command tx timeout [ 1562.784782][T17189] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1564.874302][T17189] Bluetooth: hci4: command tx timeout [ 1566.486285][T17189] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1566.490083][T17189] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1569.505698][T11800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1571.578029][T11800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1572.611267][T11800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1574.351802][T11800] Bluetooth: hci5: command tx timeout [ 1576.503205][ T4928] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1577.493983][T17189] Bluetooth: hci5: command tx timeout [ 1578.788396][ T4928] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1580.576333][T17170] Bluetooth: hci5: command tx timeout [ 1582.638884][T17170] Bluetooth: hci5: command tx timeout [ 1584.711695][T17170] Bluetooth: hci6: command tx timeout [ 1587.268968][T17170] Bluetooth: hci6: command tx timeout [ 1589.394638][T17170] Bluetooth: hci6: command tx timeout [ 1591.459175][T11800] Bluetooth: hci6: command tx timeout [ 1592.476379][T17170] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1593.243052][T17243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1593.534844][T17243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1593.564466][T17243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1594.555018][T17243] Bluetooth: hci3: command 0x0406 tx timeout [ 1594.556608][T17243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1594.561909][T17243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1596.402960][ T4928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1596.419320][ T4928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1597.590668][T16041] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1597.592167][T16041] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1597.596040][T16041] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1597.611393][T16041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1598.498280][T17189] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1600.530156][T17189] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1601.546678][T11800] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1601.547552][T11800] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1607.646517][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.646642][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1615.004058][T11800] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1616.064669][T11800] Bluetooth: hci1: command tx timeout [ 1617.195162][ T4928] Bluetooth: hci7: command tx timeout [ 1617.195606][ T4928] Bluetooth: hci0: command tx timeout [ 1617.782283][T17189] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1618.814650][T17243] Bluetooth: hci1: command tx timeout [ 1619.256320][ T39] INFO: task kworker/u8:7:8108 blocked for more than 146 seconds. [ 1619.256347][ T39] Not tainted syzkaller #0 [ 1619.256358][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1619.256369][ T39] task:kworker/u8:7 state:D stack:21920 pid:8108 tgid:8108 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1619.256428][ T39] Workqueue: events_unbound linkwatch_event [ 1619.256482][ T39] Call Trace: [ 1619.256565][ T39] [ 1619.256636][ T39] __schedule+0x1709/0x5530 [ 1619.256727][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1619.256787][ T39] ? rcu_is_watching+0x15/0xb0 [ 1619.256824][ T39] ? __pfx___schedule+0x10/0x10 [ 1619.256855][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1619.256902][ T39] rt_mutex_schedule+0x76/0xf0 [ 1619.256938][ [ 1619.256938][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1619.256977][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1619.259397][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1619.259438][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1619.259471][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1619.259514][ T39] ? linkwatch_event+0xe/0x60 [ 1619.259548][ T39] ? process_one_work+0x8cd/0x12b0 [ 1619.259594][ T39] ? linkwatch_event+0xe/0x60 [ 1619.259621][ T39] mutex_lock_nested+0x168/0x1d0 [ 1619.259655][ T39] ? rcu_is_watching+0x15/0xb0 [ 1619.259688][ T39] ? process_one_work+0x8cd/0x12b0 [ 1619.259723][ T39] linkwatch_event+0xe/0x60 [ 1619.259750][ T39] process_one_work+0x93a/0x12b0 [ 1619.259809][ T39] ? __pfx_process_one_work+0x10/0x10 [ 1619.259844][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1619.259880][ T39] ? assign_work+0x3cf/0x5d0 [ 1619.259923][ T39] worker_thread+0xb05/0x10d0 [ 1619.259973][ T39] kthread+0x388/0x470 [ 1619.260005][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1619.260027][ T39] ? __pfx_kthread+0x10/0x10 [ 1619.260057][ T39] ret_from_fork+0x514/0xb70 [ 1619.260092][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1619.260133][ T39] ? __switch_to+0xc89/0x1420 [ 1619.260162][ T39] ? __pfx_kthread+0x10/0x10 [ 1619.260194][ T39] ret_from_fork_asm+0x1a/0x30 [ 1619.862160][ T39] [ 1619.867918][T17243] Bluetooth: hci0: command tx timeout [ 1619.867958][T17243] Bluetooth: hci7: command tx timeout [ 1619.878467][T17243] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1620.251610][ T39] INFO: task kworker/0:9:10403 blocked for more than 147 seconds. [ 1620.251636][ T39] Not tainted syzkaller #0 [ 1620.251649][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1620.251658][ T39] task:kworker/0:9 state:D stack:20592 pid:10403 tgid:10403 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1620.251724][ T39] Workqueue: events switchdev_deferred_process_work [ 1620.251758][ T39] Call Trace: [ 1620.251767][ T39] [ 1620.251782][ T39] __schedule+0x1709/0x5530 [ 1620.251852][ T39] ? __pfx___schedule+0x10/0x10 [ 1620.251903][ T39] rt_mutex_schedule+0x76/0xf0 [ 1620.251941][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 1620.251989][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1620.252024][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1620.252056][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1620.252107][ T39] ? switchdev_deferred_process_work+0xe/0x20 [ 1620.252139][ T39] ? process_one_work+0x8cd/0x12b0 [ 1620.252183][ T39] ? switchdev_deferred_process_work+0xe/0x20 [ 1620.252208][ T39] mutex_lock_nested+0x168/0x1d0 [ 1620.252236][ T39] ? rcu_is_watching+0x15/0xb0 [ 1620.252264][ T39] ? process_one_work+0x8cd/0x12b0 [ 1620.252300][ T39] switchdev_deferred_process_work+0xe/0x20 [ 1620.252325][ T39] process_one_work+0x93a/0x12b0 [ 1620.252383][ T39] ? __pfx_process_one_work+0x10/0x10 [ 1620.252417][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1620.252455][ T39] ? assign_work+0x3cf/0x5d0 [ 1620.252498][ T39] worker_thread+0xb05/0x10d0 [ 1620.252534][ T39] ? __kthread_parkme+0x71/0x1f0 [ 1620.252571][ T39] kthread+0x388/0x470 [ 1620.252601][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1620.252623][ T39] ? __pfx_kthread+0x10/0x10 [ 1620.252655][ T39] ret_from_fork+0x514/0xb70 [ 1620.252690][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1620.252721][ T39] ? __switch_to+0xc89/0x1420 [ 1620.252750][ T39] ? __pfx_kthread+0x10/0x10 [ 1620.252781][ T39] ret_from_fork_asm+0x1a/0x30 [ 1620.252834][ T39] [ 1620.252892][ T39] [ 1620.252892][ T39] Showing all locks held in the system: [ 1620.252981][ T39] 5 locks held by ktimers/0/16: [ 1620.253028][ T39] #0: ffffffff8de591e0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1620.253121][ T39] #1: ffffffff8dfc3080 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1620.253180][ T39] #2: ffff8880b86284f8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7f/0x260 [ 1620.253240][ T39] #3: ffffffff8dfc3080 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1620.253300][ T39] #4: ffffffff8dfc3080 (rcu_read_lock){....}-{1:3}, at: advance_sched+0x9f1/0xc90 [ 1620.253364][ T39] 4 locks held by pr/legacy/17: [ 1620.253378][ T39] #0: ffffffff8dfb5240 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 1620.253440][ T39] #1: ffffffff8de9cb38 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb50 [ 1620.253503][ T39] #2: ffffffff99bbed18 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x17c/0x1b40 [ 1620.253566][ T39] #3: ffffffff8dfc3080 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1620.253629][ T39] 4 locks held by ktimers/1/30: [ 1620.253642][ T39] #0: ffffffff8de591e0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1620.253695][ T39] #1: ffffffff8dfc3080 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1620.253747][ T39] #2: ffffffff8dfc3080 (rcu_read_lock){....}-{1:3}, at: hrtimer_run_softirq+0x7f/0x260 [ 1620.253805][ T39] #3: ffffffff8dfc3080 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1620.253866][ T39] 1 lock held by khungtaskd/39: [ 1620.253879][ T39] #0: ffffffff8dfc3080 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1620.253958][ T39] 3 locks held by kworker/0:2/102: [ 1620.253971][ T39] #0: ffff88813fe4b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.254038][ T39] #1: ffffc9000157fc60 (rx_mode_work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.254110][ T39] #2: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x450 [ 1620.254181][ T39] 2 locks held by kworker/u8:10/1234: [ 1620.254195][ T39] #0: ffff88803a0d2938 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.254277][ T39] #1: ffffc9000630fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.254361][ T39] 5 locks held by kworker/u8:20/3422: [ 1620.254375][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.254441][ T39] #1: ffffc9000f6dfc60 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.254509][ T39] #2: ffffffff8de51b30 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 1620.254575][ T39] #3: ffffffff8e0984d8 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 1620.254642][ T39] #4: ffffffff8de682d8 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1620.254702][ T39] 2 locks held by kworker/u9:1/4928: [ 1620.254716][ T39] #0: ffff888061c5a138 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.254787][ T39] #1: ffffc9000ff4fc60 ((work_completion)(&hdev->cmd_work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.254856][ T39] 1 lock held by dhcpcd/5275: [ 1620.254869][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1620.254926][ T39] 2 locks held by getty/5371: [ 1620.254939][ T39] #0: ffff8880362cd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1620.254996][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1620.255067][ T39] 2 locks held by kworker/u8:4/8104: [ 1620.255080][ T39] #0: ffff888031b0d938 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.255158][ T39] #1: ffffc9000159fc60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.255227][ T39] 3 locks held by kworker/u8:7/8108: [ 1620.255240][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.255306][ T39] #1: ffffc90003d77c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.255372][ T39] #2: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1620.255430][ T39] 3 locks held by kworker/u8:21/8109: [ 1620.255444][ T39] #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.255510][ T39] #1: ffffc90004a07c60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.255580][ T39] #2: ffff88802a87a310 (&devlink->lock_key#22){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1620.255648][ T39] 3 locks held by kworker/u8:23/8112: [ 1620.255661][ T39] #0: ffff888032ce0938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.255727][ T39] #1: ffffc900041e7c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.255795][ T39] #2: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1620.255850][ T39] 4 locks held by kworker/u8:24/8115: [ 1620.255863][ T39] #0: ffff88801b696138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.255928][ T39] #1: ffffc900041d7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.255993][ T39] #2: ffffffff8f37a900 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1620.256066][ T39] #3: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1620.256169][ T39] 3 locks held by kworker/0:9/10403: [ 1620.256182][ T39] #0: ffff88813fe4b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.256248][ T39] #1: ffffc90004837c60 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.256316][ T39] #2: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1620.256371][ T39] 3 locks held by kworker/u9:0/11800: [ 1620.256384][ T39] #0: ffff888061c5f138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.256449][ T39] #1: ffffc9000f6cfc60 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.256527][ T39] #2: ffff88806f2d8f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1a2/0x750 [ 1620.256581][ T39] 1 lock held by syz.5.2025/13979: [ 1620.256594][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1620.256656][ T39] 1 lock held by syz.7.2275/14595: [ 1620.256670][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1620.951067][ T39] 3 locks held by kworker/u8:0/14848: [ 1620.951090][ T39] #0: ffff888032edb938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.951167][ T39] #1: ffffc900057c7c60 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.951233][ T39] #2: ffff8880613091d0 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xe8/0xfa0 [ 1620.951300][ T39] 1 lock held by syz-executor/15139: [ 1620.951314][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1620.951377][ T39] 1 lock held by syz.8.2508/15205: [ 1620.951390][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1620.951453][ T39] 3 locks held by kworker/u9:2/16041: [ 1620.951466][ T39] #0: ffff8880392e5938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.951537][ T39] #1: ffffc90004ee7c60 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8cd/0x12b0 [ 1620.951650][ T39] #2: ffff88806f2ccf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1a2/0x750 [ 1620.951703][ T39] 1 lock held by syz-executor/17165: [ 1620.951717][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1620.951777][ T39] 1 lock held by syz-executor/17201: [ 1620.951791][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1620.951850][ T39] 1 lock held by syz-executor/17212: [ 1620.951863][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1620.951922][ T39] 1 lock held by syz-executor/17223: [ 1620.951934][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1620.951994][ T39] 1 lock held by syz-executor/17226: [ 1620.952006][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1620.952065][ T39] 1 lock held by syz-executor/17238: [ 1620.952079][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1620.952139][ T39] 1 lock held by syz-executor/17239: [ 1620.952151][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1620.952212][ T39] 1 lock held by syz-executor/17240: [ 1620.952231][ T39] #0: ffffffff8f389ef8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1620.952324][ T39] 1 lock held by syz-executor/17258: [ 1620.952346][ T39] #0: ffff88803df8c7b0 (&mm->mmap_lock){++++}-{4:4}, at: map_vdso+0x69/0x6a0 [ 1621.241161][T17243] Bluetooth: hci1: command tx timeout [ 1621.250408][ T39] [ 1621.250422][ T39] ============================================= [ 1621.250422][ T39] [ 1621.250435][ T39] NMI backtrace for cpu 0 [ 1621.250478][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1621.250510][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1621.250526][ T39] Call Trace: [ 1621.250535][ T39] [ 1621.250546][ T39] dump_stack_lvl+0xe8/0x150 [ 1621.250584][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1621.250618][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1621.250661][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1621.250697][ T39] sys_info+0x135/0x170 [ 1621.250725][ T39] watchdog+0xfd7/0x1030 [ 1621.250764][ T39] ? watchdog+0x1c7/0x1030 [ 1621.250802][ T39] kthread+0x388/0x470 [ 1621.250832][ T39] ? __pfx_watchdog+0x10/0x10 [ 1621.250860][ T39] ? __pfx_kthread+0x10/0x10 [ 1621.250890][ T39] ret_from_fork+0x514/0xb70 [ 1621.250924][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.250954][ T39] ? __switch_to+0xc89/0x1420 [ 1621.250983][ T39] ? __pfx_kthread+0x10/0x10 [ 1621.251012][ T39] ret_from_fork_asm+0x1a/0x30 [ 1621.251073][ T39] [ 1621.251098][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1621.251139][ C1] NMI backtrace for cpu 1 [ 1621.251160][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1621.251182][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1621.251193][ C1] RIP: 0010:__asan_memset+0x2f/0x50 [ 1621.251215][ C1] Code: 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 1e e5 ff ff 84 c0 74 11 4c 89 f7 89 ee 48 89 da 5b <41> 5e 5d e9 29 57 00 09 31 c0 5b 41 5e 5d e9 8e f8 03 09 cc 66 66 [ 1621.251233][ C1] RSP: 0018:ffffc900001676e8 EFLAGS: 00000202 [ 1621.251322][ C1] RAX: f3f3f8f8f2f2f201 RBX: ffff88801d6bdd00 RCX: ffffffff8b31cc2a [ 1621.251338][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000167880 [ 1621.251350][ C1] RBP: 0000000000000000 R08: ffffc9000016788f R09: 1ffff9200002cf11 [ 1621.251364][ C1] R10: dffffc0000000000 R11: fffff5200002cf12 R12: 0000000000000001 [ 1621.251377][ C1] R13: dffffc0000000000 R14: ffffc90000167880 R15: 0000000000000000 [ 1621.251391][ C1] FS: 0000000000000000(0000) GS:ffff888125fcd000(0000) knlGS:0000000000000000 [ 1621.251407][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1621.251420][ C1] CR2: 00005580c5494a30 CR3: 000000000ddb0000 CR4: 00000000003526f0 [ 1621.251437][ C1] Call Trace: [ 1621.251444][ C1] [ 1621.251453][ C1] __schedule+0xaa/0x5530 [ 1621.251482][ C1] ? sprintf+0xe7/0x140 [ 1621.251521][ C1] ? __pfx___schedule+0x10/0x10 [ 1621.251547][ C1] ? _prb_read_valid+0xa40/0xa50 [ 1621.251576][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1621.251606][ C1] irqentry_exit+0x14f/0x8f0 [ 1621.251625][ C1] ? trace_irq_disable+0x3b/0x140 [ 1621.251654][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1621.251675][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1621.251702][ C1] Code: e8 ae 5a 80 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3f 25 ec fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 20 f0 05 cc 44 89 f9 80 e1 07 [ 1621.251718][ C1] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 1621.251734][ C1] RAX: 1ffffffff3377d00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1621.251746][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1621.251758][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1621.251770][ C1] R10: dffffc0000000000 R11: ffffffff85449cd0 R12: dffffc0000000000 [ 1621.251785][ C1] R13: 0000000000000000 R14: ffffffff99bbed40 R15: 0000000000000000 [ 1621.251800][ C1] ? __pfx_io_serial_in+0x10/0x10 [ 1621.251831][ C1] ? io_serial_in+0x52/0xc0 [ 1621.251856][ C1] wait_for_lsr+0x190/0x300 [ 1621.251883][ C1] serial8250_console_write+0x113a/0x1b40 [ 1621.251917][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1621.251943][ C1] ? console_flush_one_record+0xfa/0xb50 [ 1621.251972][ C1] ? console_flush_one_record+0x472/0xb50 [ 1621.252000][ C1] console_flush_one_record+0x642/0xb50 [ 1621.252027][ C1] ? console_flush_one_record+0xfa/0xb50 [ 1621.252054][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1621.252081][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1621.252114][ C1] legacy_kthread_func+0x1b6/0x250 [ 1621.252148][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1621.252172][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1621.252196][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1621.252216][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1621.252238][ C1] kthread+0x388/0x470 [ 1621.252261][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1621.252283][ C1] ? __pfx_kthread+0x10/0x10 [ 1621.252306][ C1] ret_from_fork+0x514/0xb70 [ 1621.252331][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.252354][ C1] ? __switch_to+0xc89/0x1420 [ 1621.252375][ C1] ? __pfx_kthread+0x10/0x10 [ 1621.252398][ C1] ret_from_fork_asm+0x1a/0x30 [ 1621.252433][ C1] [ 1621.253137][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1621.253161][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1621.253187][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1621.253202][ T39] Call Trace: [ 1621.253212][ T39] [ 1621.253222][ T39] vpanic+0x56c/0xa60 [ 1621.253263][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 1621.253302][ T39] ? __pfx_vpanic+0x10/0x10 [ 1621.253345][ T39] panic+0xc5/0xd0 [ 1621.253376][ T39] ? __pfx_panic+0x10/0x10 [ 1621.253413][ T39] ? wq_watchdog_touch+0xf9/0x160 [ 1621.253449][ T39] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 1621.253486][ T39] watchdog+0x1030/0x1030 [ 1621.253526][ T39] ? watchdog+0x1c7/0x1030 [ 1621.253564][ T39] kthread+0x388/0x470 [ 1621.253593][ T39] ? __pfx_watchdog+0x10/0x10 [ 1621.253621][ T39] ? __pfx_kthread+0x10/0x10 [ 1621.253660][ T39] ret_from_fork+0x514/0xb70 [ 1621.253693][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.253724][ T39] ? __switch_to+0xc89/0x1420 [ 1621.253752][ T39] ? __pfx_kthread+0x10/0x10 [ 1621.253782][ T39] ret_from_fork_asm+0x1a/0x30 [ 1621.253833][ T39] [ 1621.254439][ T39] Kernel Offset: disabled