last executing test programs: 18m4.640629629s ago: executing program 3 (id=1489): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x00') close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 18m1.268229385s ago: executing program 3 (id=1495): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x00') close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 18m0.047486899s ago: executing program 3 (id=1498): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0xfffffc7a) 17m45.400887458s ago: executing program 3 (id=1519): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f0000000a80), 0x12) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x840) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, 0x0, 0x80, 0x72}, [@NDA_VLAN={0x6, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) 17m43.239188072s ago: executing program 3 (id=1524): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001a400)=""/102384, 0x18ff0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) 17m40.292853566s ago: executing program 3 (id=1527): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0xfffffc7a) 17m23.874404797s ago: executing program 32 (id=1527): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0xfffffc7a) 3m21.164209848s ago: executing program 1 (id=3182): timer_create(0xfffffffd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a0020000000", @ANYRES32=0x0, @ANYRES32], 0xfc}, 0x1, 0x0, 0x0, 0x2000c040}, 0x8000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001) gettid() r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x0, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x9000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1000001, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0x1d, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 3m17.522243639s ago: executing program 1 (id=3187): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x00') close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) unshare(0x62000280) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x4, 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0xe090, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) socket$alg(0x26, 0x5, 0x0) 3m11.119149575s ago: executing program 1 (id=3194): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x71b52c, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x3, 0x3, 0x8001, 0x3, 0x8}, {0x8, 0x0, 0x8, 0x8, 0x5, 0xc}, 0x1000006, 0x8, 0x1457}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3ace9a85e05b5271}, @TCA_TBF_BURST={0x8, 0x6, 0x7}]}}]}, 0x6c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m7.271874987s ago: executing program 1 (id=3199): 3m6.104215258s ago: executing program 1 (id=3200): r0 = openat$full(0xffffff9c, 0x0, 0x8002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) faccessat(r2, &(0x7f0000000700)='./bus\x00', 0x124) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x200, 0x4e20, 0x0, 0x2, 0xa0, 0x1a0, 0x8, 0x0, r3}, {0x62, 0x100000001, 0x6, 0x1, 0x4, 0x7, 0xa}, {0x5, 0x0, 0xfffffffffffffff1, 0xa3c3}, 0x7ff, 0x6e6bb1, 0x2, 0x1}, {{@in=@remote, 0x4d4, 0x6c}, 0x8, @in=@private=0xa010101, 0x3501, 0x4, 0x0, 0x69, 0x401, 0x9, 0xfffffffd}}, 0xe8) syz_io_uring_setup(0x3075, 0x0, 0x0, 0x0, 0x0) unshare(0x6020400) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) accept4(r2, &(0x7f0000000740)=@in={0x2, 0x0, @dev}, &(0x7f00000007c0)=0x80, 0x800) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r5, 0x0) mq_notify(r5, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f00000001c0)='cpu.max\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 3m4.092080494s ago: executing program 1 (id=3204): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000680021050000000200000000120000000000000004000b00080001"], 0x24}}, 0x0) socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06464b8, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r1, 0x0, 0x94, 0x40000002, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_open_dev$swradio(0x0, 0x1, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="3535cd4f87f450172c5fda853ce6e85d22dc626a29ad616459c14fe091400cdfa2c5bc41a3faee34804a5c02389079bea6395d8fa40bff1e76d607f72bd2b053fa42744f8c", 0x45}, {&(0x7f0000000300)="0d0b50e7a33d35e421a816816a1203123b95443080cd413d6c230ac19239132f51ab625c1355ba196e58c61808704818cca19255bd42a19f36b5c126e78c325f25e684211c9571fb1dbdf7563a46d41d0f634a1739b9a833aae859846879f06995ad7136509ff2dbde805a37507c4a", 0x6f}, {&(0x7f00000003c0)="29d64312ebe40435bb9b3031f962f4d8383b1f3781791e06796814774841a447725802fbca22c36bec8b993bb1b80a2ba54532712ea8c39571d7a9611c3bd0d3b90588b0eab097f27dcf3ffbcb4ce377d238f80885768340b6e46bc9f0700557ebc8f7c610f02b7933c83e03f3b24efe978d4f40509e14258d90ff68c88adf1b25c5cf6324ccfd246159fecfddc1723c87", 0x91}], 0x3, 0x0, 0x360}, 0x24040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f0008000340000000000800044000000000080005400000000009000200000000000200"], 0x40}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 2m48.053866004s ago: executing program 33 (id=3204): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000680021050000000200000000120000000000000004000b00080001"], 0x24}}, 0x0) socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06464b8, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r1, 0x0, 0x94, 0x40000002, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_open_dev$swradio(0x0, 0x1, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="3535cd4f87f450172c5fda853ce6e85d22dc626a29ad616459c14fe091400cdfa2c5bc41a3faee34804a5c02389079bea6395d8fa40bff1e76d607f72bd2b053fa42744f8c", 0x45}, {&(0x7f0000000300)="0d0b50e7a33d35e421a816816a1203123b95443080cd413d6c230ac19239132f51ab625c1355ba196e58c61808704818cca19255bd42a19f36b5c126e78c325f25e684211c9571fb1dbdf7563a46d41d0f634a1739b9a833aae859846879f06995ad7136509ff2dbde805a37507c4a", 0x6f}, {&(0x7f00000003c0)="29d64312ebe40435bb9b3031f962f4d8383b1f3781791e06796814774841a447725802fbca22c36bec8b993bb1b80a2ba54532712ea8c39571d7a9611c3bd0d3b90588b0eab097f27dcf3ffbcb4ce377d238f80885768340b6e46bc9f0700557ebc8f7c610f02b7933c83e03f3b24efe978d4f40509e14258d90ff68c88adf1b25c5cf6324ccfd246159fecfddc1723c87", 0x91}], 0x3, 0x0, 0x360}, 0x24040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f0008000340000000000800044000000000080005400000000009000200000000000200"], 0x40}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 2m44.72274314s ago: executing program 0 (id=3224): r0 = openat$full(0xffffff9c, 0x0, 0x8002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) faccessat(r2, &(0x7f0000000700)='./bus\x00', 0x124) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x200, 0x4e20, 0x0, 0x2, 0xa0, 0x1a0, 0x8, 0x0, r3}, {0x62, 0x100000001, 0x6, 0x1, 0x4, 0x7, 0xa}, {0x5, 0x0, 0xfffffffffffffff1, 0xa3c3}, 0x7ff, 0x6e6bb1, 0x2, 0x1}, {{@in=@remote, 0x4d4, 0x6c}, 0x8, @in=@private=0xa010101, 0x3501, 0x4, 0x0, 0x69, 0x401, 0x9, 0xfffffffd}}, 0xe8) syz_io_uring_setup(0x3075, 0x0, 0x0, 0x0, 0x0) unshare(0x6020400) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) accept4(r2, &(0x7f0000000740)=@in={0x2, 0x0, @dev}, &(0x7f00000007c0)=0x80, 0x800) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r5, 0x0) mq_notify(r5, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f00000001c0)='cpu.max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e23, 0xee9, @dev={0xfe, 0x80, '\x00', 0x41}, 0x8}, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}, 0x118) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 2m41.708194947s ago: executing program 0 (id=3228): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYBLOB="00082bbd3491ff"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000054) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af25, &(0x7f0000001b80)={0x2f}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r4], 0x44}}, 0x28000) 2m39.668030214s ago: executing program 0 (id=3233): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r4, &(0x7f0000000180)='./file0\x00', r4, &(0x7f00000001c0)='\x00') close(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) unshare(0x62000280) syz_open_dev$MSR(&(0x7f00000000c0), 0x4, 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0xe090, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) 2m35.818976057s ago: executing program 0 (id=3238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m34.401192811s ago: executing program 0 (id=3240): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYBLOB="00082bbd3491ff"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000054) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af25, &(0x7f0000001b80)={0x2f}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x28000) 2m32.033980255s ago: executing program 0 (id=3245): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r4, &(0x7f0000000180)='./file0\x00', r4, &(0x7f00000001c0)='\x00') close(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) unshare(0x62000280) syz_open_dev$MSR(&(0x7f00000000c0), 0x4, 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0xe090, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) 2m16.50443042s ago: executing program 34 (id=3245): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r4, &(0x7f0000000180)='./file0\x00', r4, &(0x7f00000001c0)='\x00') close(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) unshare(0x62000280) syz_open_dev$MSR(&(0x7f00000000c0), 0x4, 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0xe090, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) 17.066968174s ago: executing program 2 (id=3465): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x80002, 0x7f) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x3075, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800) read(r1, &(0x7f0000000040)=""/14, 0xe) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) 11.374561403s ago: executing program 5 (id=3467): eventfd2(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x9) pread64(r7, &(0x7f0000002140)=""/17, 0x11, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) 11.225417491s ago: executing program 2 (id=3469): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x42040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) semget(0x3, 0x4, 0x205) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x892}, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) socket$packet(0x11, 0x3, 0x300) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 10.428945932s ago: executing program 2 (id=3472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x7a7c, 0x0, 0x0, &(0x7f0000000940), &(0x7f0000000980)) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f00000009c0), 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0xcb490d407acd69fa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006df57108e2042414ebc70102030109023800029600000009"], 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) 10.28026388s ago: executing program 5 (id=3473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000100)=0x808c) close_range(r0, 0xffffffffffffffff, 0x0) 8.746935621s ago: executing program 4 (id=3474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000380)={0x300a, r3}, 0x0) landlock_restrict_self(r4, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00') link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x2, 0x1f2}) writev(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/time\x00') 8.746506461s ago: executing program 5 (id=3475): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x639) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f00000010c0)=""/4114, &(0x7f0000001080)=0xfffffffffffffefc) socket$rds(0x15, 0x5, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x0, [@null, @bcast, @bcast, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 8.648895695s ago: executing program 6 (id=3476): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r2, 0x0) 7.308266216s ago: executing program 4 (id=3477): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) fstat(r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001c00010029bd", @ANYRES32=r4, @ANYBLOB="80effe0a0a000200aaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 7.256304838s ago: executing program 6 (id=3478): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x80002, 0x7f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x3075, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800) read(r1, &(0x7f0000000040)=""/14, 0xe) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) 5.829200594s ago: executing program 2 (id=3479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)) close(r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r7, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x28) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000000000)) 5.801289785s ago: executing program 6 (id=3480): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000400)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = getgid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000004c0)={{0x1, 0x0, 0x0, 0x0, r4, 0x180, 0x1}, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x578}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000008094000100f3ffffff95"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) 5.33219984s ago: executing program 4 (id=3481): eventfd2(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x9) pread64(r7, &(0x7f0000002140)=""/17, 0x11, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) 4.715513062s ago: executing program 2 (id=3482): socket$caif_seqpacket(0x25, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) dup(r1) syz_io_uring_setup(0x3c05, &(0x7f0000000280)={0x0, 0x98bf, 0x0, 0x1, 0xad}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$l2tp6(0xa, 0x2, 0x73) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000240), &(0x7f0000000340)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, r3, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x11, &(0x7f0000000800)=ANY=[], 0x0) 3.674037347s ago: executing program 5 (id=3483): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4008087}, 0x46040) socket$kcm(0x2, 0x3, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) 3.628299009s ago: executing program 6 (id=3484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000100)=0x808c) close_range(r0, 0xffffffffffffffff, 0x0) 2.777534784s ago: executing program 4 (id=3485): socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4685, 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12) 2.47852251s ago: executing program 6 (id=3486): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r2, 0x0) 2.216357053s ago: executing program 2 (id=3487): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x70bd2d, 0x800000, {0x80, 0x20, 0x0, 0x40, 0x0, 0x4, 0x0, 0x5, 0x2400}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) rt_tgsigqueueinfo(0x0, 0x0, 0x2000007, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x26d1, "fa02791d2a69a2610f0200000000000000110001000000010000800000000007"}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) 1.543745049s ago: executing program 4 (id=3488): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x80002, 0x7f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x3075, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800) read(r1, &(0x7f0000000040)=""/14, 0xe) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) 1.459793583s ago: executing program 5 (id=3489): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) fstat(r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001c00010029bd", @ANYRES32=r4, @ANYBLOB="80effe0a0a000200aaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1.332234009s ago: executing program 6 (id=3490): r0 = socket$kcm(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/34, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000000880)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$nl_generic(0x10, 0x3, 0x10) 63.742466ms ago: executing program 4 (id=3491): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x639) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f00000010c0)=""/4114, &(0x7f0000001080)=0xfffffffffffffefc) socket$rds(0x15, 0x5, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x0, [@null, @bcast, @bcast, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 0s ago: executing program 5 (id=3492): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000400)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = getgid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000004c0)={{0x1, 0x0, 0x0, 0x0, r4, 0x180, 0x1}, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x578}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000008094000100f3ffffff95"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) kernel console output (not intermixed with test programs): 603][ T2319] pvrusb2: Invalid write control endpoint [ 1259.938794][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1259.970487][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1259.999170][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1260.137873][ T2319] pvrusb2: Device being rendered inoperable [ 1260.357933][T11706] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1260.506837][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1260.528664][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1260.533772][ T5812] usb 3-1: USB disconnect, device number 63 [ 1260.558729][T11706] usb 1-1: Using ep0 maxpacket: 8 [ 1260.564908][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1260.567990][ T5813] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1260.600567][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1260.618348][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1260.628391][T11706] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1260.648068][ T5813] usb 2-1: device descriptor read/8, error -71 [ 1260.651974][T11706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.707171][T11706] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1260.725207][T11706] pvrusb2: ********** [ 1260.735272][T11706] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1260.753557][T11706] pvrusb2: Important functionality might not be entirely working. [ 1260.763585][T11706] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1260.777107][T11706] pvrusb2: ********** [ 1260.920427][ T2319] pvrusb2: Invalid write control endpoint [ 1260.938044][ T5813] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1260.979210][ T5813] usb 2-1: device descriptor read/8, error -71 [ 1261.071093][ T2319] pvrusb2: Invalid write control endpoint [ 1261.084161][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1261.097014][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1261.117363][ T5813] usb usb2-port1: unable to enumerate USB device [ 1261.125687][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1261.167887][ T2319] pvrusb2: Device being rendered inoperable [ 1261.189610][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1261.286640][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1261.598596][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1261.604381][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1261.617528][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1261.904557][ T5831] usb 1-1: USB disconnect, device number 67 [ 1262.858688][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2660'. [ 1262.870676][T16642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2658'. [ 1262.901882][T16642] input: syz0 as /devices/virtual/input/input22 [ 1263.747886][T13269] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1263.857967][ T5811] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1263.907804][T13269] usb 5-1: device descriptor read/64, error -71 [ 1264.068212][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 1264.085117][ T5811] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1264.096567][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.122536][ T5811] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1264.158189][ T5811] pvrusb2: ********** [ 1264.163766][ T5811] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1264.198680][T13269] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1264.202267][ T5811] pvrusb2: Important functionality might not be entirely working. [ 1264.377842][T13269] usb 5-1: device descriptor read/64, error -71 [ 1264.498949][T13269] usb usb5-port1: attempt power cycle [ 1264.697697][ T5811] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1264.717759][ T5811] pvrusb2: ********** [ 1264.728732][ T2319] pvrusb2: Invalid write control endpoint [ 1264.859316][ T2319] pvrusb2: Invalid write control endpoint [ 1264.865828][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1264.899593][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1264.907916][T13269] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1264.918987][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1264.932192][ T2319] pvrusb2: Device being rendered inoperable [ 1264.940628][T13269] usb 5-1: device descriptor read/8, error -71 [ 1264.941920][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1264.967718][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1265.003370][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1265.011599][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1265.023732][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1266.262648][T13269] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1266.330969][T13269] usb 5-1: device descriptor read/8, error -71 [ 1266.470481][T13269] usb usb5-port1: unable to enumerate USB device [ 1266.724818][ T5812] usb 1-1: USB disconnect, device number 68 [ 1266.944430][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2672'. [ 1267.877823][ T5831] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1268.088988][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 1268.113350][ T5831] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1268.135039][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.190549][ T5831] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1268.199352][ T5831] pvrusb2: ********** [ 1268.204033][ T5831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1268.216157][ T5831] pvrusb2: Important functionality might not be entirely working. [ 1268.225806][ T5831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1268.247720][ T5831] pvrusb2: ********** [ 1268.395477][ T2319] pvrusb2: Invalid write control endpoint [ 1268.491628][ T2319] pvrusb2: Invalid write control endpoint [ 1268.503948][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1268.516713][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1268.527278][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1268.538309][T13269] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1268.551888][ T2319] pvrusb2: Device being rendered inoperable [ 1268.559230][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1268.566680][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1268.580295][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1268.601104][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1268.647079][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1268.747686][T13269] usb 5-1: Using ep0 maxpacket: 8 [ 1268.763915][T13269] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1268.786894][T13269] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1268.797804][T13269] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1268.808563][T13269] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1268.818970][T13269] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1268.832942][T13269] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1268.861460][T13269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.187231][ T5812] usb 3-1: USB disconnect, device number 64 [ 1269.258682][T13269] usb 5-1: GET_CAPABILITIES returned 0 [ 1269.264514][T13269] usbtmc 5-1:16.0: can't read capabilities [ 1269.528810][T11706] usb 5-1: USB disconnect, device number 46 [ 1269.696312][T10182] Bluetooth: hci0: unexpected event for opcode 0x2ef5 [ 1270.254116][T16720] kernel profiling enabled (shift: 9) [ 1271.067110][ T5811] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1271.227931][ T5811] usb 2-1: device descriptor read/64, error -71 [ 1271.617856][T11706] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1271.807939][ T5811] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1271.847746][T11706] usb 3-1: Using ep0 maxpacket: 8 [ 1271.860457][T11706] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1271.875536][T11706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.919175][T11706] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1271.934164][T11706] pvrusb2: ********** [ 1271.942550][T11706] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1271.958920][T11706] pvrusb2: Important functionality might not be entirely working. [ 1271.967988][ T5811] usb 2-1: device descriptor read/64, error -71 [ 1271.980829][T11706] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1271.995056][T11706] pvrusb2: ********** [ 1272.088970][ T5811] usb usb2-port1: attempt power cycle [ 1272.142290][ T2319] pvrusb2: Invalid write control endpoint [ 1272.673418][ T5811] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1272.720426][ T2319] pvrusb2: Invalid write control endpoint [ 1272.727253][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1272.780195][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1272.868476][ T5811] usb 2-1: device descriptor read/8, error -71 [ 1272.902863][ T5812] usb 3-1: USB disconnect, device number 65 [ 1272.912594][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1272.962065][ T2319] pvrusb2: Device being rendered inoperable [ 1272.989146][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1272.996947][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1273.077950][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1273.083732][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1273.180156][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1273.567843][T13269] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1273.849840][T13269] usb 1-1: device descriptor read/64, error -71 [ 1274.268045][T13269] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1274.438662][T13269] usb 1-1: device descriptor read/64, error -71 [ 1274.558241][T13269] usb usb1-port1: attempt power cycle [ 1275.041570][T13269] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1275.178199][T13269] usb 1-1: device descriptor read/8, error -71 [ 1275.907784][T13269] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1275.978312][T13269] usb 1-1: device descriptor read/8, error -71 [ 1276.017468][ T5781] Bluetooth: hci2: sending frame failed (-49) [ 1276.030193][T10182] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 1276.104889][T13269] usb usb1-port1: unable to enumerate USB device [ 1276.113689][T16767] binder: 16765:16767 ioctl c0306201 200000000680 returned -14 [ 1276.507837][T13269] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1276.801028][ T5831] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1276.846051][T13269] usb 3-1: device descriptor read/64, error -71 [ 1277.038204][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 1277.067202][ T5831] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1277.087162][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.117688][T13269] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1277.122448][ T5831] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1277.145095][ T5831] pvrusb2: ********** [ 1277.152662][ T5831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1277.173341][ T5831] pvrusb2: Important functionality might not be entirely working. [ 1277.184779][ T5831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1277.206805][ T5831] pvrusb2: ********** [ 1277.297853][T13269] usb 3-1: device descriptor read/64, error -71 [ 1277.335538][ T2319] pvrusb2: Invalid write control endpoint [ 1277.429177][T13269] usb usb3-port1: attempt power cycle [ 1277.512712][ T2319] pvrusb2: Invalid write control endpoint [ 1277.540922][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1277.587286][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1277.597526][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1277.868183][T13269] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1277.940378][T13269] usb 3-1: device descriptor read/8, error -71 [ 1278.069901][ T2319] pvrusb2: Device being rendered inoperable [ 1278.070011][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1278.070063][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1278.070848][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1278.070889][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1278.070898][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1278.616762][ T5812] usb 2-1: USB disconnect, device number 100 [ 1278.631284][T13269] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1278.690198][T13269] usb 3-1: device descriptor read/8, error -71 [ 1278.818750][T13269] usb usb3-port1: unable to enumerate USB device [ 1279.817729][T11706] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1279.998028][T11706] usb 1-1: device descriptor read/64, error -71 [ 1280.277957][T11706] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1280.458271][T11706] usb 1-1: device descriptor read/64, error -71 [ 1280.579540][T13269] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1280.599196][T11706] usb usb1-port1: attempt power cycle [ 1280.787818][T13269] usb 2-1: Using ep0 maxpacket: 8 [ 1280.805648][T13269] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1280.825956][T13269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.944636][T13269] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1280.995165][T13269] pvrusb2: ********** [ 1281.018783][T13269] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1281.047899][T11706] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1281.064947][T13269] pvrusb2: Important functionality might not be entirely working. [ 1281.085217][T13269] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1281.103981][T11706] usb 1-1: device descriptor read/8, error -71 [ 1281.111492][T13269] pvrusb2: ********** [ 1281.200689][ T2319] pvrusb2: Invalid write control endpoint [ 1281.489639][ T2319] pvrusb2: Invalid write control endpoint [ 1281.506780][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1281.522699][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1281.548066][T11706] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1281.591483][T11706] usb 1-1: device descriptor read/8, error -71 [ 1281.616091][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1281.718363][T11706] usb usb1-port1: unable to enumerate USB device [ 1281.949161][ T5781] Bluetooth: hci2: command 0x1003 tx timeout [ 1281.949618][T10182] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1282.054020][ T2319] pvrusb2: Device being rendered inoperable [ 1282.085973][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1282.095967][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1282.113494][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1282.131917][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1282.164356][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1282.164774][T13269] usb 2-1: USB disconnect, device number 101 [ 1282.188542][T10182] Bluetooth: hci3: command 0x0406 tx timeout [ 1283.907710][ T27] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1284.149109][ T27] usb 3-1: device descriptor read/64, error -71 [ 1284.153894][T16847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2714'. [ 1284.427972][ T27] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1284.588918][ T27] usb 3-1: device descriptor read/64, error -71 [ 1284.709094][ T27] usb usb3-port1: attempt power cycle [ 1284.792850][T16849] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2712'. [ 1285.190077][ T27] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1285.282471][ T27] usb 3-1: device descriptor read/8, error -71 [ 1285.608064][ T27] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1285.866371][ T27] usb 3-1: device not accepting address 73, error -71 [ 1285.890878][ T27] usb usb3-port1: unable to enumerate USB device [ 1286.994999][ T5813] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1287.158017][ T5813] usb 2-1: device descriptor read/64, error -71 [ 1289.164157][T10182] Bluetooth: hci2: command 0x1003 tx timeout [ 1289.228159][T16876] Process accounting resumed [ 1289.309440][T15048] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1289.398306][ T5813] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1289.567849][ T5813] usb 2-1: device descriptor read/64, error -71 [ 1289.698332][ T5813] usb usb2-port1: attempt power cycle [ 1289.735299][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2723'. [ 1289.757937][ T5831] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1290.245027][T16886] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2724'. [ 1290.428240][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 1290.446352][ T5831] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1290.458182][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.503506][ T5831] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1290.521007][ T5831] pvrusb2: ********** [ 1290.546958][ T5831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1290.571859][ T5831] pvrusb2: Important functionality might not be entirely working. [ 1290.581153][ T5831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1290.595087][ T5831] pvrusb2: ********** [ 1290.694440][ T2319] pvrusb2: Invalid write control endpoint [ 1290.851110][ T2319] pvrusb2: Invalid write control endpoint [ 1290.884813][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1290.915609][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1291.909257][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1292.258478][ T2319] pvrusb2: Device being rendered inoperable [ 1292.463029][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1292.494832][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1292.566040][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1292.572400][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1292.585121][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1292.614438][ T8882] usb 3-1: USB disconnect, device number 74 [ 1294.878182][T13269] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1295.077443][T13269] usb 1-1: device descriptor read/64, error -71 [ 1295.647758][T13269] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1295.822378][T13269] usb 1-1: device descriptor read/64, error -71 [ 1295.966878][T13269] usb usb1-port1: attempt power cycle [ 1297.215884][T13269] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1297.231937][T16937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2736'. [ 1297.249170][T16942] hfsplus: unable to find HFS+ superblock [ 1297.259190][T13269] usb 1-1: device descriptor read/8, error -71 [ 1297.947818][T10182] Bluetooth: hci2: command 0x1003 tx timeout [ 1297.956853][T15048] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1300.593174][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.600638][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.165740][T16966] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2744'. [ 1301.585554][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1301.595294][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1301.615894][T16970] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1301.625564][T16970] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1301.635210][T16970] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1301.644300][T16970] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1301.656518][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1301.666889][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1301.683846][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1301.707535][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1301.724538][T16968] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 1301.732488][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1301.755232][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1301.757722][T16968] kvm: pic: single mode not supported [ 1301.765013][T16968] kvm: pic: single mode not supported [ 1301.847759][T11706] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1302.028289][T11706] usb 5-1: device descriptor read/64, error -71 [ 1302.328554][T11706] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1302.507986][T11706] usb 5-1: device descriptor read/64, error -71 [ 1302.545524][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2750'. [ 1302.627989][T11706] usb usb5-port1: attempt power cycle [ 1303.137679][T11706] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1303.178413][T11706] usb 5-1: device descriptor read/8, error -71 [ 1303.477766][T11706] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1303.572693][T11706] usb 5-1: device descriptor read/8, error -71 [ 1303.688282][T11706] usb usb5-port1: unable to enumerate USB device [ 1304.997322][T15048] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1306.046326][T17014] bridge_slave_0: left allmulticast mode [ 1306.053277][T17014] bridge_slave_0: left promiscuous mode [ 1306.060736][T17014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.732733][T17008] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2756'. [ 1308.822682][T17014] bridge_slave_1: left allmulticast mode [ 1308.829959][T17014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.875083][T17014] bond0: (slave bond_slave_0): Releasing backup interface [ 1308.909418][T17014] bond0: (slave bond_slave_1): Releasing backup interface [ 1309.011746][T17014] team0: Port device team_slave_0 removed [ 1309.029348][T13269] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1309.096556][T17014] team0: Port device team_slave_1 removed [ 1309.104979][T17014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1309.113265][T17014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.158460][T17014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.167807][T17014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1309.651338][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2761'. [ 1309.857726][ T5812] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1310.037733][ T5812] usb 3-1: device descriptor read/64, error -71 [ 1310.527678][ T5812] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1310.777718][ T5812] usb 3-1: device descriptor read/64, error -71 [ 1310.907121][ T5812] usb usb3-port1: attempt power cycle [ 1310.938139][ T5831] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1311.324232][ T5831] usb 5-1: config 0 has an invalid interface number: 127 but max is 0 [ 1311.334841][ T5831] usb 5-1: config 0 has no interface number 0 [ 1311.351109][ T5831] usb 5-1: config 0 interface 127 has no altsetting 0 [ 1311.370101][ T5831] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=fe.2d [ 1311.385671][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.397988][ T5831] usb 5-1: Product: syz [ 1311.407429][ T5831] usb 5-1: Manufacturer: syz [ 1311.414999][ T5831] usb 5-1: SerialNumber: syz [ 1311.444501][ T5831] usb 5-1: config 0 descriptor?? [ 1311.688151][ T5812] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1311.729980][ T5831] redrat3 5-1:0.127: Couldn't find all endpoints [ 1311.758995][ T5831] usb 5-1: USB disconnect, device number 52 [ 1311.763169][ T5812] usb 3-1: device descriptor read/8, error -71 [ 1312.199522][ T5812] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1312.274304][ T5812] usb 3-1: device descriptor read/8, error -71 [ 1312.448762][ T5812] usb usb3-port1: unable to enumerate USB device [ 1313.286806][T17059] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2768'. [ 1314.119269][ T5812] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1317.327663][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 1317.427893][ T5812] usb 2-1: device descriptor read/all, error -71 [ 1318.167675][ T5812] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1318.482310][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 1318.493467][ T5812] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1318.503017][ T5812] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.550496][ T5812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1318.566174][ T5812] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1318.590190][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.602722][ T5812] usb 2-1: Product: syz [ 1318.619651][ T5812] usb 2-1: Manufacturer: syz [ 1318.624754][ T5812] usb 2-1: SerialNumber: syz [ 1319.707837][ T8877] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1319.767457][T17091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.803644][T17091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.228134][ T8877] usb 3-1: Using ep0 maxpacket: 16 [ 1320.299378][ T5812] usb 2-1: 0:2 : does not exist [ 1320.312013][ T8877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.347960][ T5812] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1320.360757][ T8877] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1320.419614][ T8877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.462164][ T5812] usb 2-1: USB disconnect, device number 106 [ 1320.496644][ T8877] usb 3-1: config 0 descriptor?? [ 1320.647966][ T5811] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1320.817803][ T5811] usb 5-1: device descriptor read/64, error -71 [ 1321.108031][ T5811] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1322.477624][ T5811] usb 5-1: device descriptor read/64, error -71 [ 1322.603583][T17102] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2779'. [ 1322.629268][ T5811] usb usb5-port1: attempt power cycle [ 1323.195040][ T8877] usbhid 3-1:0.0: can't add hid device: -71 [ 1323.207720][ T8877] usbhid: probe of 3-1:0.0 failed with error -71 [ 1323.243592][ T8877] usb 3-1: USB disconnect, device number 79 [ 1323.388033][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1323.397600][ T5811] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1323.513149][ T5811] usb 5-1: device descriptor read/8, error -71 [ 1323.671621][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1323.691729][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1323.703353][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.730113][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1323.755467][ T9] pvrusb2: ********** [ 1323.792465][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1323.831928][ T9] pvrusb2: Important functionality might not be entirely working. [ 1323.846347][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1323.867832][ T9] pvrusb2: ********** [ 1323.940643][ T2319] pvrusb2: Invalid write control endpoint [ 1324.028054][ T5811] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1324.080278][ T5811] usb 5-1: Using ep0 maxpacket: 8 [ 1324.111866][ T2319] pvrusb2: Invalid write control endpoint [ 1324.137076][ T5811] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1324.158208][ T5811] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1324.160381][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1324.197658][ T5811] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1324.704855][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1324.723438][ T5811] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1324.748380][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1324.758234][ T5811] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1324.788095][ T9] usb 1-1: USB disconnect, device number 81 [ 1324.801589][ T2319] pvrusb2: Device being rendered inoperable [ 1324.817748][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1324.829738][ T5811] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1324.844060][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1324.849857][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.875372][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1324.881134][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1324.939897][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1325.097393][ T5811] usb 5-1: GET_CAPABILITIES returned 0 [ 1325.121523][ T5811] usbtmc 5-1:16.0: can't read capabilities [ 1325.341535][ T8877] usb 5-1: USB disconnect, device number 56 [ 1325.502262][ T5811] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1325.777781][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 1330.838452][ T5811] usb 3-1: device descriptor read/all, error -110 [ 1330.861627][ T5831] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1331.272647][ T5811] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1331.429464][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 1331.519491][ T5831] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1331.530210][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.559798][ T5831] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1331.576332][T17142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2790'. [ 1331.606365][ T5831] pvrusb2: ********** [ 1331.614911][ T5831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1331.649819][ T5811] usb 3-1: device descriptor read/64, error -32 [ 1331.741378][ T5831] pvrusb2: Important functionality might not be entirely working. [ 1331.828310][ T5811] usb usb3-port1: attempt power cycle [ 1331.835187][ T5831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1331.857928][ T5831] pvrusb2: ********** [ 1331.927922][ T2319] pvrusb2: Invalid write control endpoint [ 1333.105012][ T8877] usb 1-1: USB disconnect, device number 82 [ 1333.180953][ T2319] pvrusb2: Invalid write control endpoint [ 1333.191596][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1333.215687][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1333.226621][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1333.241213][ T2319] pvrusb2: Device being rendered inoperable [ 1333.247501][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1333.256984][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1333.288655][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1333.307248][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1333.412215][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1333.447883][ T5811] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1335.588024][ T5811] usb 3-1: device not accepting address 82, error -71 [ 1338.714912][T15048] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1339.594369][T17182] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2799'. [ 1341.605253][T17192] syz_tun: entered allmulticast mode [ 1343.820799][T17185] syz_tun: left allmulticast mode [ 1345.507701][ T8877] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1345.936523][ T8877] usb 5-1: Using ep0 maxpacket: 8 [ 1345.970111][ T8877] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1345.997672][ T8877] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1346.580424][ T8877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1346.733959][ T8877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1346.808023][ T5812] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1346.922550][ T8877] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1347.118494][ T5812] usb 2-1: device descriptor read/64, error -71 [ 1347.197447][ T8877] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1347.341933][ T8877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.498142][ T5812] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1347.542737][T17238] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2809'. [ 1347.660230][ T8877] usb 5-1: can't set config #16, error -71 [ 1347.671914][ T5812] usb 2-1: device descriptor read/64, error -71 [ 1347.868109][ T8877] usb 5-1: USB disconnect, device number 57 [ 1347.957505][ T5812] usb usb2-port1: attempt power cycle [ 1348.201492][T17240] fuse: Bad value for 'fd' [ 1348.460192][ T5812] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1348.548504][ T5812] usb 2-1: device descriptor read/8, error -71 [ 1348.949412][T17245] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1351.456044][ T5812] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1351.625918][ T5812] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.645441][ T5812] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1351.656065][ T5812] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1351.669497][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.115230][T17254] netlink: 'syz.0.2814': attribute type 3 has an invalid length. [ 1353.470499][ T5812] usb 2-1: USB disconnect, device number 110 [ 1353.730837][T17269] usb usb9: usbfs: process 17269 (syz.0.2818) did not claim interface 0 before use [ 1354.968417][ T8877] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1354.997846][ T5812] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1355.212009][ T8877] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1355.228281][ T8877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.237491][ T8877] usb 2-1: Product: syz [ 1355.357462][ T8877] usb 2-1: Manufacturer: syz [ 1355.379261][ T8877] usb 2-1: SerialNumber: syz [ 1355.413784][ T8877] usb 2-1: config 0 descriptor?? [ 1355.437317][ T8877] hub 2-1:0.0: bad descriptor, ignoring hub [ 1355.444813][ T8877] hub: probe of 2-1:0.0 failed with error -5 [ 1355.676621][ T8877] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1355.691831][ T8877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1355.758556][ T8877] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1355.767333][ T8877] usb 2-1: media controller created [ 1356.182192][ T8877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1356.573850][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 1356.595932][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'. [ 1356.622617][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 1356.649918][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'. [ 1356.689675][ T8877] DVB: Unable to find symbol dib7000p_attach() [ 1356.690235][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 1356.716509][ T8877] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1356.719656][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'. [ 1357.012331][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 1357.021800][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'. [ 1357.168433][ T8877] rc_core: IR keymap rc-dib0700-rc5 not found [ 1357.190721][ T8877] Registered IR keymap rc-empty [ 1357.207486][ T8877] dvb-usb: could not initialize remote control. [ 1357.231341][ T8877] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1357.283968][ T8877] usb 2-1: USB disconnect, device number 111 [ 1357.430392][ T8877] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1358.215799][T17304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.359669][T17304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.119821][T15048] Bluetooth: hci0: unexpected event for opcode 0x2ef5 [ 1360.267925][ T5812] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1360.297935][ T5812] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 1360.326180][ T5812] usb 3-1: chopping to 0 config(s) [ 1360.355796][ T5812] usb 3-1: can't read configurations, error -32 [ 1360.697720][ T5812] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1360.847697][ T5812] usb 3-1: device descriptor read/64, error -32 [ 1361.009253][ T5812] usb usb3-port1: attempt power cycle [ 1361.487807][ T5812] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1361.608125][ T5812] usb 3-1: device descriptor read/8, error -32 [ 1361.788033][ T8877] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1361.897942][ T5812] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1362.136894][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.143671][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.158083][ T8877] usb 2-1: Using ep0 maxpacket: 8 [ 1362.170898][ T8877] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1362.187372][ T8877] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1362.213590][ T5812] usb 3-1: device descriptor read/8, error -32 [ 1362.292107][T17333] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1362.301753][T17333] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1362.386871][ T8877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1362.478531][ T5812] usb usb3-port1: unable to enumerate USB device [ 1362.519749][ T8877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1362.626768][ T8877] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1362.979361][ T8877] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1362.990873][ T8877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.540358][ T8877] usb 2-1: GET_CAPABILITIES returned 0 [ 1363.546694][ T8877] usbtmc 2-1:16.0: can't read capabilities [ 1363.818318][ T8877] usb 2-1: USB disconnect, device number 112 [ 1364.043584][T17335] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2833'. [ 1364.467852][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1366.067998][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1366.267898][T10182] Bluetooth: hci2: command 0x1003 tx timeout [ 1366.302860][T15048] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1366.590478][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1366.846960][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.320600][ T9] usb 1-1: can't set config #252, error -71 [ 1367.339367][ T9] usb 1-1: USB disconnect, device number 83 [ 1370.227653][ T8877] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1371.717770][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1371.926435][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1371.961243][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1372.058820][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1372.067853][T17391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.070731][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1372.090734][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1372.102837][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1372.765095][T17391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.419824][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1373.430991][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.459873][ T9] usb 3-1: can't set config #16, error -71 [ 1373.490309][ T9] usb 3-1: USB disconnect, device number 88 [ 1373.897822][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1374.128116][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1374.165834][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1374.181860][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.264965][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1374.292289][ T9] pvrusb2: ********** [ 1374.307636][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1374.350792][ T9] pvrusb2: Important functionality might not be entirely working. [ 1374.407827][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1374.447658][ T9] pvrusb2: ********** [ 1374.497826][ T2319] pvrusb2: Invalid write control endpoint [ 1374.869751][ T2319] pvrusb2: Invalid write control endpoint [ 1374.971235][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1375.235804][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1375.352736][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1375.468074][ T8877] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1375.537839][ T2319] pvrusb2: Device being rendered inoperable [ 1375.549887][ T8877] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 1375.564539][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1375.592987][ T8877] usb 1-1: chopping to 0 config(s) [ 1375.599813][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1375.637803][ T8877] usb 1-1: can't read configurations, error -32 [ 1375.652427][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1375.693299][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1375.745805][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1375.836955][ T8877] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 1376.008233][ T8877] usb 1-1: device descriptor read/64, error -32 [ 1376.168458][ T8877] usb usb1-port1: attempt power cycle [ 1376.509903][T17411] tipc: Started in network mode [ 1376.514922][T17411] tipc: Node identity b6cda5f28376, cluster identity 4711 [ 1376.549595][T17411] tipc: Enabled bearer , priority 0 [ 1376.627147][T17414] syzkaller0: entered promiscuous mode [ 1376.634236][T17414] syzkaller0: entered allmulticast mode [ 1376.802392][T17411] tipc: Resetting bearer [ 1376.875989][T17410] tipc: Resetting bearer [ 1377.068571][T17410] tipc: Disabling bearer [ 1377.141168][T11706] usb 3-1: USB disconnect, device number 89 [ 1377.739316][T17426] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2858'. [ 1378.267664][ T9] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1378.647848][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1378.655615][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1378.672259][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1379.206555][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2859'. [ 1379.265385][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1379.282430][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1379.294804][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1379.332233][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1379.362308][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.601455][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 1379.608861][ T9] usbtmc 2-1:16.0: can't read capabilities [ 1379.852499][ T8877] usb 2-1: USB disconnect, device number 113 [ 1380.629423][ T5813] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 1380.638285][ T5811] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 1380.855399][ T5813] usb 3-1: config 1 interface 0 altsetting 250 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1380.868555][ T5813] usb 3-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1380.884197][ T5813] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1380.998892][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1381.030270][T17448] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 1381.085559][T17448] kvm: pic: single mode not supported [ 1381.085610][T17448] kvm: pic: single mode not supported [ 1381.207924][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1381.250424][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1381.261702][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.299722][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1381.325072][ T9] pvrusb2: ********** [ 1381.341945][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1381.363710][ T9] pvrusb2: Important functionality might not be entirely working. [ 1381.379501][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1381.416576][ T9] pvrusb2: ********** [ 1381.503391][ T2319] pvrusb2: Invalid write control endpoint [ 1381.623237][ T2319] pvrusb2: Invalid write control endpoint [ 1381.657725][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1381.678228][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1381.711963][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1381.762211][ T2319] pvrusb2: Device being rendered inoperable [ 1381.834012][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1381.895547][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 1381.993296][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1382.037014][T17455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.091159][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1382.185978][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1382.254667][T11706] usb 5-1: USB disconnect, device number 58 [ 1382.272234][T17455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.448173][ T5813] usb 3-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.40 [ 1382.477696][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.512887][ T5813] usb 3-1: can't set config #1, error -71 [ 1382.558722][ T5813] usb 3-1: USB disconnect, device number 90 [ 1383.081066][T17464] tipc: Enabled bearer , priority 0 [ 1383.099094][T17464] syzkaller0: entered promiscuous mode [ 1383.106457][T17464] syzkaller0: entered allmulticast mode [ 1383.206508][T17464] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1383.241092][T17463] tipc: Resetting bearer [ 1383.306698][T17463] tipc: Disabling bearer [ 1384.273937][T17470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2869'. [ 1385.375614][ T5811] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1385.417990][ T5811] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1385.469758][ T5811] usb 1-1: can't read configurations, error -71 [ 1386.337918][T17486] netlink: 'syz.4.2874': attribute type 3 has an invalid length. [ 1387.484016][ T5811] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1387.666533][T17497] tipc: Started in network mode [ 1387.667781][ T5811] usb 1-1: device descriptor read/64, error -71 [ 1387.673473][T17497] tipc: Node identity ea208c945c13, cluster identity 4711 [ 1387.677677][T17497] tipc: Enabled bearer , priority 0 [ 1387.712666][T17497] syzkaller0: entered promiscuous mode [ 1387.723116][T17497] syzkaller0: entered allmulticast mode [ 1387.785678][T17497] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1387.816000][T17496] tipc: Resetting bearer [ 1387.894167][T17496] tipc: Disabling bearer [ 1387.977764][ T5811] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1388.167884][ T5811] usb 1-1: device descriptor read/64, error -71 [ 1388.341144][ T5811] usb usb1-port1: attempt power cycle [ 1388.462855][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2877'. [ 1388.677808][ T5831] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1388.814469][ T5811] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1388.862794][ T5811] usb 1-1: device descriptor read/8, error -71 [ 1389.234185][ T5811] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1389.608650][ T5811] usb 1-1: device descriptor read/8, error -71 [ 1389.656844][T17515] syz_tun: entered allmulticast mode [ 1389.686506][T17514] syz_tun: left allmulticast mode [ 1389.804532][ T5811] usb usb1-port1: unable to enumerate USB device [ 1391.448437][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1391.473338][ T5831] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1391.482305][ T5831] usb 3-1: can't read configurations, error -71 [ 1391.513472][T17527] netlink: 'syz.1.2886': attribute type 3 has an invalid length. [ 1391.678226][ T27] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1391.906682][ T27] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1391.934738][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.988374][ T27] usb 1-1: config 0 has no interface number 0 [ 1392.010511][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1392.040876][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.063521][ T27] usb 1-1: Product: syz [ 1392.068451][ T27] usb 1-1: Manufacturer: syz [ 1392.073652][ T27] usb 1-1: SerialNumber: syz [ 1392.101776][ T27] usb 1-1: config 0 descriptor?? [ 1392.158108][ T5831] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1392.367895][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 1392.430806][ T5831] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1392.434204][T17539] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2885'. [ 1392.464954][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.465131][T17540] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 1392.503277][T17540] kvm: pic: single mode not supported [ 1392.503328][T17540] kvm: pic: single mode not supported [ 1392.525755][T17539] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2885'. [ 1392.582461][ T5831] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1392.633171][ T5831] pvrusb2: ********** [ 1392.664559][ T5831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1392.707978][ T5831] pvrusb2: Important functionality might not be entirely working. [ 1392.737791][ T5831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1392.771054][ T5831] pvrusb2: ********** [ 1392.788348][ T2319] pvrusb2: Invalid write control endpoint [ 1392.976322][ T2319] pvrusb2: Invalid write control endpoint [ 1393.013455][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1393.038041][ T27] usb 3-1: USB disconnect, device number 92 [ 1393.056039][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1393.075909][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1393.106699][ T2319] pvrusb2: Device being rendered inoperable [ 1393.116872][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1393.140690][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 1393.162870][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1393.184489][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1393.213169][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1393.968402][ T5831] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1394.137785][ T5831] usb 5-1: device descriptor read/64, error -71 [ 1394.429756][ T5831] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1394.466383][ T5811] usb 1-1: USB disconnect, device number 93 [ 1394.477681][ T5812] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1394.627683][ T5831] usb 5-1: device descriptor read/64, error -71 [ 1394.655453][T15048] Bluetooth: hci0: unexpected event for opcode 0x2ef5 [ 1394.749638][ T5831] usb usb5-port1: attempt power cycle [ 1395.107732][ T27] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1395.207954][ T5831] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1395.289652][ T5831] usb 5-1: device descriptor read/8, error -71 [ 1395.367340][ T27] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 1395.377731][ T27] usb 1-1: config 0 has no interface number 0 [ 1395.384444][ T27] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1395.405007][ T27] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1395.417206][ T27] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1395.429328][ T27] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1395.449907][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 1395.556158][T17564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.565545][T17564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.589205][ T27] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 1395.617374][ T27] usb 1-1: Product: syz [ 1395.633656][ T27] usb 1-1: Manufacturer: syz [ 1395.669449][ T27] usb 1-1: SerialNumber: syz [ 1395.747327][ T27] usb 1-1: config 0 descriptor?? [ 1395.790876][ T27] xpad: probe of 1-1:0.237 failed with error -5 [ 1396.036053][ T27] usb 1-1: USB disconnect, device number 94 [ 1396.576586][ T5831] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1396.819955][ T5831] usb 5-1: device not accepting address 62, error -71 [ 1396.858757][ T5831] usb usb5-port1: unable to enumerate USB device [ 1397.151669][ T27] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1397.358260][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 1397.385290][ T27] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1397.446807][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1397.507954][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1397.529437][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1397.596582][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1397.629154][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1397.701603][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.197666][ T27] usb 1-1: GET_CAPABILITIES returned 0 [ 1398.203296][ T27] usbtmc 1-1:16.0: can't read capabilities [ 1398.240268][ T5812] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1398.273696][ T5812] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1398.307813][ T5812] usb 3-1: can't read configurations, error -71 [ 1398.442347][ T27] usb 1-1: USB disconnect, device number 95 [ 1398.889244][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2904'. [ 1398.903040][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2904'. [ 1398.919029][T17570] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 1398.954144][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2904'. [ 1398.965883][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2904'. [ 1398.985055][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2904'. [ 1398.996996][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2904'. [ 1399.009394][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2904'. [ 1399.022625][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2904'. [ 1399.326544][T17597] tipc: Enabled bearer , priority 0 [ 1399.349921][T17597] syzkaller0: entered promiscuous mode [ 1399.382931][T17597] syzkaller0: entered allmulticast mode [ 1399.598003][ T27] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1399.837638][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 1399.845363][ T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1399.857977][T17597] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1399.904102][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1399.999501][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1400.020538][T17593] tipc: Resetting bearer [ 1400.042876][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1400.064003][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1400.104656][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1400.114100][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.117471][T17593] tipc: Disabling bearer [ 1400.176116][T17600] syz_tun: entered allmulticast mode [ 1400.213893][T17598] syz_tun: left allmulticast mode [ 1400.369464][T17604] binder: BINDER_SET_CONTEXT_MGR already set [ 1400.376063][T17604] binder: 17603:17604 ioctl 4018620d 200000001000 returned -16 [ 1400.394762][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 1400.405197][ T27] usbtmc 2-1:16.0: can't read capabilities [ 1402.656642][ T9] usb 2-1: USB disconnect, device number 114 [ 1403.721795][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2916'. [ 1403.772145][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2916'. [ 1405.211300][T17631] __nla_validate_parse: 4 callbacks suppressed [ 1405.211316][T17631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2918'. [ 1405.412537][T17636] tipc: Enabled bearer , priority 0 [ 1405.432983][T17636] syzkaller0: entered promiscuous mode [ 1405.457740][T17636] syzkaller0: entered allmulticast mode [ 1405.549132][T17631] input: syz0 as /devices/virtual/input/input24 [ 1405.661795][T17636] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1405.683116][T17634] tipc: Resetting bearer [ 1405.765049][T17634] tipc: Disabling bearer [ 1408.641506][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'. [ 1408.652246][T17660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2926'. [ 1408.664132][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'. [ 1408.675752][T17660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2926'. [ 1408.758391][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'. [ 1408.790236][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'. [ 1408.828311][ T8877] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1408.877007][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'. [ 1408.891756][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'. [ 1409.036623][T17664] syz.1.2927 (17664): drop_caches: 2 [ 1409.403083][ T8877] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1409.799966][ T8877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.861675][ T8877] usb 3-1: config 0 has no interface number 0 [ 1409.885231][ T8877] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1409.932316][ T8877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.324711][ T8877] usb 3-1: Product: syz [ 1410.329972][ T8877] usb 3-1: Manufacturer: syz [ 1410.334697][ T8877] usb 3-1: SerialNumber: syz [ 1410.358261][ T8877] usb 3-1: config 0 descriptor?? [ 1411.779391][ T5812] usb 3-1: USB disconnect, device number 95 [ 1412.330497][T17694] syz.2.2936 (17694): drop_caches: 2 [ 1412.920746][T17707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2938'. [ 1413.026670][T17707] input: syz0 as /devices/virtual/input/input25 [ 1414.246341][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2942'. [ 1414.538078][ T5831] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1414.626580][ T27] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1414.669053][T17726] syz.0.2946 (17726): drop_caches: 2 [ 1414.727973][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 1414.749008][ T5831] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1414.771203][ T5831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1414.802654][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1414.835282][ T5831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1414.847545][ T5831] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1414.867762][ T5831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1414.878053][ T27] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1414.883327][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.894195][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.128196][ T27] usb 3-1: config 0 has no interface number 0 [ 1415.151449][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1415.169522][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.188446][ T27] usb 3-1: Product: syz [ 1415.195979][ T27] usb 3-1: Manufacturer: syz [ 1415.200831][ T27] usb 3-1: SerialNumber: syz [ 1415.285205][ T27] usb 3-1: config 0 descriptor?? [ 1415.474920][ T5831] usb 5-1: GET_CAPABILITIES returned 0 [ 1415.486385][ T5831] usbtmc 5-1:16.0: can't read capabilities [ 1415.691711][ T27] usb 5-1: USB disconnect, device number 63 [ 1416.494949][T10182] Bluetooth: hci2: command 0x1003 tx timeout [ 1416.509731][T15048] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1416.991368][T17740] syz.1.2949 (17740): drop_caches: 2 [ 1418.130161][ T8877] usb 3-1: USB disconnect, device number 96 [ 1418.548420][T17746] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2951'. [ 1418.750891][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2954'. [ 1419.071314][T17746] input: syz0 as /devices/virtual/input/input26 [ 1419.295224][T17765] netlink: 'syz.0.2956': attribute type 3 has an invalid length. [ 1420.792245][T17781] syz.1.2960 (17781): drop_caches: 2 [ 1422.012459][T17791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2964'. [ 1422.527786][ T5813] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1422.535818][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1422.535840][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1422.536289][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1422.536304][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1422.539446][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1422.596710][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1422.609338][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1422.627864][ T5811] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1423.002207][ T5813] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1423.016040][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.028688][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 1423.034918][ T5813] usb 2-1: config 0 has no interface number 0 [ 1423.056829][ T5813] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1423.488599][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.495745][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.887407][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1423.899329][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.909481][ T5813] usb 2-1: Product: syz [ 1423.914465][ T5813] usb 2-1: Manufacturer: syz [ 1423.920762][ T5813] usb 2-1: SerialNumber: syz [ 1423.932625][ T5811] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1423.944215][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.957849][ T5813] usb 2-1: config 0 descriptor?? [ 1423.964895][ T5811] usb 1-1: Product: syz [ 1423.969887][ T5811] usb 1-1: Manufacturer: syz [ 1423.975382][ T5811] usb 1-1: SerialNumber: syz [ 1423.989839][ T5811] usb 1-1: config 0 descriptor?? [ 1424.008323][ T5811] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1424.020439][ T5811] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1424.239076][T17811] syz.2.2970 (17811): drop_caches: 2 [ 1424.730974][T17816] tipc: Enabled bearer , priority 0 [ 1424.748648][T10182] Bluetooth: hci2: command 0x1003 tx timeout [ 1424.749420][T15048] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1424.765588][T17816] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1424.787236][ T5811] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1424.839213][T17817] tipc: Resetting bearer [ 1424.903829][T17815] tipc: Disabling bearer [ 1425.257372][ T5811] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1425.267013][ T5811] em28xx 1-1:0.0: board has no eeprom [ 1425.401228][T17824] syz.2.2974 (17824): drop_caches: 2 [ 1425.926135][ T8877] usb 2-1: USB disconnect, device number 115 [ 1426.539334][T17828] __nla_validate_parse: 1 callbacks suppressed [ 1426.539350][T17828] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2976'. [ 1426.591332][T17828] input: syz0 as /devices/virtual/input/input27 [ 1426.612792][T17796] em28xx 1-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 1426.688131][ T5811] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1426.733455][ T5811] em28xx 1-1:0.0: dvb set to bulk mode. [ 1426.759739][ T5831] em28xx 1-1:0.0: Binding DVB extension [ 1426.802625][ T5811] usb 1-1: USB disconnect, device number 96 [ 1426.839826][ T5811] em28xx 1-1:0.0: Disconnecting em28xx [ 1426.974041][ T5831] em28xx 1-1:0.0: Registering input extension [ 1427.032045][ T5811] em28xx 1-1:0.0: Closing input extension [ 1427.286694][T17845] syz.4.2980 (17845): drop_caches: 2 [ 1427.450600][ T5811] em28xx 1-1:0.0: Freeing device [ 1427.586412][T17849] fuse: Unknown parameter 'user_id00000000000000000000' [ 1428.274092][T17863] syz.1.2986 (17863): drop_caches: 2 [ 1428.313383][ T5813] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1428.981993][ T5813] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1428.994466][T17865] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2988'. [ 1429.027155][T17865] input: syz0 as /devices/virtual/input/input29 [ 1429.098252][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.125461][ T5813] usb 3-1: config 0 has no interface number 0 [ 1429.160945][ T5813] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1429.180807][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.278062][ T5813] usb 3-1: Product: syz [ 1429.747671][ T5813] usb 3-1: Manufacturer: syz [ 1429.777006][ T5813] usb 3-1: SerialNumber: syz [ 1429.801278][ T5813] usb 3-1: config 0 descriptor?? [ 1429.860973][T17868] can0: slcan on ptm0. [ 1430.161288][T17866] can0 (unregistered): slcan off ptm0. [ 1430.659244][T17881] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1430.682701][T17881] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1430.882074][T17882] fuse: Unknown parameter 'user_id00000000000000000000' [ 1431.328420][ T8877] usb 3-1: USB disconnect, device number 97 [ 1431.746894][T17891] syz.1.2994 (17891): drop_caches: 2 [ 1433.431825][T17906] syz.1.2998 (17906): drop_caches: 2 [ 1434.858781][T17917] fuse: Unknown parameter 'user_id00000000000000000000' [ 1439.380968][T15048] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1439.962651][T17956] syz.2.3010 (17956): drop_caches: 2 [ 1442.291758][T17962] fuse: Bad value for 'fd' [ 1442.518474][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3015'. [ 1447.653965][ T27] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1448.800984][T18000] syz.0.3021 (18000): drop_caches: 2 [ 1449.547623][ T5781] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1449.792553][T18007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.802523][T18007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.822051][T15048] Bluetooth: hci2: command 0x1003 tx timeout [ 1451.027116][T18012] dlm: no local IP address has been set [ 1451.135453][T18012] dlm: cannot start dlm midcomms -107 [ 1451.175794][T18014] fuse: Bad value for 'fd' [ 1451.590775][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 1451.988325][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1452.002711][ T27] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1452.032128][ T27] usb 3-1: can't read configurations, error -71 [ 1455.242884][T18048] fuse: Bad value for 'fd' [ 1457.111753][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3038'. [ 1457.187742][ T5811] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1459.678804][T18073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.689493][T18073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.489540][T18083] vxfs: WRONG superblock magic 00000000 at 1 [ 1463.497943][T18083] vxfs: WRONG superblock magic 00000000 at 8 [ 1463.505532][T18083] vxfs: can't find superblock. [ 1463.603964][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1464.167790][ T5811] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1464.187712][ T5811] usb 3-1: can't read configurations, error -71 [ 1464.317551][T18090] fuse: Unknown parameter '0x0000000000000004' [ 1468.054172][T18098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3047'. [ 1472.050338][ T5811] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1472.761459][T18138] fuse: Unknown parameter '0x0000000000000004' [ 1472.998514][ T9] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1473.274948][T18142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.285537][T18142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.967986][ T5811] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1474.982248][ T5811] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1475.007638][ T5811] usb 1-1: can't read configurations, error -71 [ 1475.098316][ T9] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1475.126490][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.139854][ T9] usb 2-1: config 0 has no interface number 0 [ 1475.154224][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1475.165543][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.187374][ T9] usb 2-1: Product: syz [ 1475.211709][ T9] usb 2-1: Manufacturer: syz [ 1475.217465][ T9] usb 2-1: SerialNumber: syz [ 1477.114886][ T9] usb 2-1: config 0 descriptor?? [ 1477.594671][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3058'. [ 1480.113900][ T9] usb 2-1: can't set config #0, error -71 [ 1480.150962][ T9] usb 2-1: USB disconnect, device number 116 [ 1482.618039][ T9] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1482.907664][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3070'. [ 1483.244787][T18191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.254046][T18191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.299795][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1483.388340][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1483.397379][ T9] usb 2-1: can't read configurations, error -71 [ 1483.578748][T18195] binder: BINDER_SET_CONTEXT_MGR already set [ 1483.585148][T18195] binder: 18194:18195 ioctl 4018620d 200000001000 returned -16 [ 1484.939807][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.946259][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.075871][T18206] binder: 18202:18206 ioctl c0306201 200000000080 returned -14 [ 1485.750936][T18206] binder: 18202:18206 ioctl c0306201 2000000003c0 returned -14 [ 1489.157666][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3079'. [ 1489.467909][ T5811] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1489.649585][T18237] binder: 18236:18237 ioctl c0306201 0 returned -14 [ 1490.534294][T18233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.543467][T18233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.831165][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1490.877983][ T5811] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1490.918290][ T5811] usb 3-1: can't read configurations, error -71 [ 1493.318406][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1493.807952][T18258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1493.873176][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1493.948447][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1493.981892][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1493.992317][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1494.016201][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1494.044351][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1495.704548][T18270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3091'. [ 1495.956481][T18277] binder: 18275:18277 ioctl c0306201 0 returned -14 [ 1496.923235][T18277] binder: BINDER_SET_CONTEXT_MGR already set [ 1496.975714][T18278] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1496.982771][T18278] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1497.003646][T18277] binder: 18275:18277 ioctl 4018620d 200000001000 returned -16 [ 1497.018377][T18278] vhci_hcd vhci_hcd.0: Device attached [ 1497.267131][T18284] vhci_hcd: connection closed [ 1497.280187][ T5811] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1497.318010][ T3557] vhci_hcd: stop threads [ 1497.329185][ T3557] vhci_hcd: release socket [ 1497.355269][ T3557] vhci_hcd: disconnect device [ 1497.367996][ T5831] usb 38-1: SetAddress Request (2) to port 0 [ 1497.385818][ T5831] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1497.618358][ T5831] usb 38-1: enqueue for inactive port 0 [ 1498.730357][ T5831] usb usb38-port1: attempt power cycle [ 1498.868119][ T9] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 1498.915051][T18299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.926657][T18299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.961924][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 1498.979502][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3100'. [ 1499.044645][ T5811] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1499.069650][ T5811] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1499.104776][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 1499.327822][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3100'. [ 1499.329016][ T5811] usb 5-1: can't read configurations, error -71 [ 1500.729989][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 1500.748223][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3100'. [ 1500.872662][T18312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.881680][T18312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.212036][ T5831] usb usb38-port1: unable to enumerate USB device [ 1501.281489][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1501.304583][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1501.316351][ T9] usb 2-1: can't read configurations, error -71 [ 1501.710461][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3103'. [ 1504.946566][T18341] netlink: 468 bytes leftover after parsing attributes in process `syz.2.3109'. [ 1506.534495][T18345] fuse: Unknown parameter 'fd0x0000000000000004' [ 1510.828397][ T5812] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1511.191420][T18363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3115'. [ 1511.679480][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.690894][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.750945][ T5812] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1511.797817][ T5812] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1511.840309][ T5812] usb 1-1: can't read configurations, error -71 [ 1512.894115][T18008] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 1515.275718][T18402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3125'. [ 1516.267781][ T5812] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1516.478843][ T5812] usb 1-1: Using ep0 maxpacket: 8 [ 1516.493360][ T5812] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1516.513104][ T5812] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1516.526468][ T5812] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1516.549216][ T5812] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1516.569169][ T5812] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1516.578980][ T27] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1516.593139][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.135908][ T5812] usb 1-1: GET_CAPABILITIES returned 0 [ 1517.161345][ T5812] usbtmc 1-1:16.0: can't read capabilities [ 1517.243380][T18422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1517.252674][T18422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1517.511545][ T5813] usb 1-1: USB disconnect, device number 101 [ 1517.849095][T18008] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 1518.463907][T18008] Bluetooth: hci0: unexpected event for opcode 0x2035 [ 1518.678998][T18439] overlayfs: failed to resolve './file1/file0': -2 [ 1519.597210][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1519.672475][ T27] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1519.722397][ T27] usb 2-1: can't read configurations, error -71 [ 1520.691656][T18008] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 1522.258041][T18484] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3147'. [ 1522.278077][ T5813] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1522.843381][T18491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.853535][T18491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.733525][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1524.745354][ T5813] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1524.755789][ T5813] usb 2-1: can't read configurations, error -71 [ 1525.387669][T18512] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3154'. [ 1525.628628][T18008] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 1526.636538][T18519] Bluetooth: MGMT ver 1.22 [ 1526.659118][T18510] input: syz0 as /devices/virtual/input/input30 [ 1527.129534][T18530] tipc: Enabling of bearer rejected, failed to enable media [ 1527.327615][ T27] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1528.325776][T18548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.335464][T18548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.958515][T18568] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3164'. [ 1530.232833][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1530.363321][ T27] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1530.387789][ T27] usb 3-1: can't read configurations, error -71 [ 1532.328379][T18008] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 1532.640200][T18587] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1532.989839][T18589] tipc: Enabling of bearer rejected, failed to enable media [ 1534.238191][T18586] input: syz0 as /devices/virtual/input/input31 [ 1540.246811][T18008] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 1542.305601][T18653] tipc: Enabling of bearer rejected, failed to enable media [ 1542.649421][T18660] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3182'. [ 1543.714257][T18657] input: syz0 as /devices/virtual/input/input32 [ 1545.487683][ T27] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1546.442648][T18704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.453731][T18704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.283050][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1548.308159][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.167610][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1552.212344][ T27] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1552.220754][ T27] usb 2-1: can't read configurations, error -71 [ 1552.428777][T18715] tipc: Enabling of bearer rejected, failed to enable media [ 1552.587884][T13269] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1553.999795][T13269] usb 5-1: Using ep0 maxpacket: 32 [ 1554.043137][T13269] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1554.096017][T13269] usb 5-1: config 8 has an invalid interface number: 178 but max is 0 [ 1554.197412][T13269] usb 5-1: config 8 has no interface number 0 [ 1554.204021][T13269] usb 5-1: config 8 interface 178 has no altsetting 0 [ 1554.316778][T13269] usb 5-1: New USB device found, idVendor=0af0, idProduct=6811, bcdDevice=1d.96 [ 1555.199977][T13269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.209230][T13269] usb 5-1: Product: syz [ 1555.213555][T13269] usb 5-1: Manufacturer: syz [ 1555.218443][T13269] usb 5-1: SerialNumber: syz [ 1555.349211][T13269] usb 5-1: USB disconnect, device number 66 [ 1566.339126][T18768] netlink: 'syz.4.3207': attribute type 6 has an invalid length. [ 1574.293782][T18813] blktrace: Concurrent blktraces are not allowed on sg0 [ 1575.738940][T10182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1575.755919][T10182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1575.768801][T10182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1575.789680][T10182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1575.799223][T10182] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1575.808944][T10182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1575.956922][T15808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1575.969885][T15808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.238671][T18829] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1577.947401][T10182] Bluetooth: hci2: command tx timeout [ 1578.499827][T15808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.796218][T15808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.909239][T15808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1579.954351][T15808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.024668][T18846] netlink: 'syz.0.3228': attribute type 3 has an invalid length. [ 1580.037600][T10182] Bluetooth: hci2: command tx timeout [ 1580.074382][T18846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3228'. [ 1580.179722][T15808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.202405][T15808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.107676][T10182] Bluetooth: hci2: command tx timeout [ 1582.460489][T18857] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1582.563972][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 1582.879664][ T5813] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1583.244883][T18815] chnl_net:caif_netlink_parms(): no params data found [ 1584.187604][T10182] Bluetooth: hci2: command tx timeout [ 1584.368986][T13269] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1584.621609][T13269] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1584.672795][T13269] usb 3-1: config 0 has no interface number 0 [ 1585.099936][T13269] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1585.111977][T13269] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1585.130045][T13269] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1585.385530][T13269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.402669][T13269] usb 3-1: Product: syz [ 1585.412772][T13269] usb 3-1: Manufacturer: syz [ 1585.422394][T13269] usb 3-1: SerialNumber: syz [ 1585.439114][T13269] usb 3-1: config 0 descriptor?? [ 1585.455179][T18887] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1585.678797][ T5813] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1585.710778][ T5813] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1585.746661][ T5813] usb 1-1: can't read configurations, error -71 [ 1585.969600][T13269] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1586.289351][T13269] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1586.667312][T13269] usb 3-1: USB disconnect, device number 106 [ 1587.093890][T13269] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1587.244558][T13269] cyberjack 3-1:0.69: device disconnected [ 1587.564224][T18915] netlink: 'syz.0.3240': attribute type 3 has an invalid length. [ 1587.586630][T18915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3240'. [ 1587.699131][T18918] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3242'. [ 1587.975799][T18919] input: syz0 as /devices/virtual/input/input33 [ 1588.469432][T18815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.141240][T18815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.167910][T18815] bridge_slave_0: entered allmulticast mode [ 1589.175601][T18815] bridge_slave_0: entered promiscuous mode [ 1589.379824][T18815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.388481][T18815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.397396][T18815] bridge_slave_1: entered allmulticast mode [ 1589.410053][T18815] bridge_slave_1: entered promiscuous mode [ 1589.518176][ T5813] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1589.555868][T18815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1589.582639][T18815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.655026][T18815] team0: Port device team_slave_0 added [ 1589.700767][T15808] bond0: (slave wlan1): Releasing backup interface [ 1589.725344][T18815] team0: Port device team_slave_1 added [ 1589.732064][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 1589.743203][ T5813] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1589.758009][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.794781][ T5813] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1589.813396][ T5813] pvrusb2: ********** [ 1589.819229][T18815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1589.828113][ T5813] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1589.840218][T18815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.871497][ T5813] pvrusb2: Important functionality might not be entirely working. [ 1589.880637][ T5813] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1589.893866][ T5831] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1589.902748][ T5813] pvrusb2: ********** [ 1589.909958][T18815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.957374][T18815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1589.965383][T18815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1590.050631][T18815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.549546][T18815] hsr_slave_0: entered promiscuous mode [ 1594.580019][T18815] hsr_slave_1: entered promiscuous mode [ 1594.619675][T15808] hsr_slave_0: left promiscuous mode [ 1594.628863][T15808] hsr_slave_1: left promiscuous mode [ 1594.635220][T15808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1594.644120][T15808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1594.656710][T15808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1594.665323][T15808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1594.685785][T15808] bridge_slave_1: left allmulticast mode [ 1594.691708][T15808] bridge_slave_1: left promiscuous mode [ 1594.721495][T15808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.734369][ T5813] usb 3-1: USB disconnect, device number 107 [ 1594.738430][ T2319] pvrusb2: Invalid write control endpoint [ 1594.869909][T15808] bridge_slave_0: left allmulticast mode [ 1594.875868][T15808] bridge_slave_0: left promiscuous mode [ 1594.921654][T15808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.952892][ T2319] pvrusb2: Invalid write control endpoint [ 1594.981128][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1595.048207][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1595.425320][T15808] veth1_macvtap: left promiscuous mode [ 1595.426089][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1595.487680][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1595.498625][T15808] veth0_macvtap: left promiscuous mode [ 1595.500571][ T5831] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 1595.504637][T15808] veth1_vlan: left promiscuous mode [ 1595.504845][T15808] veth0_vlan: left promiscuous mode [ 1595.557592][ T2319] pvrusb2: Device being rendered inoperable [ 1595.568539][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1595.576733][ T5831] usb 1-1: chopping to 0 config(s) [ 1595.594565][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 1595.631201][ T5831] usb 1-1: can't read configurations, error -32 [ 1595.647233][ T2319] pvrusb2: Attached sub-driver cx25840 [ 1595.665977][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1595.700209][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1595.820832][ T5831] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1596.018195][ T5831] usb 1-1: device descriptor read/64, error -32 [ 1596.150321][ T5831] usb usb1-port1: attempt power cycle [ 1596.177842][ T5813] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1596.412765][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1596.440487][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1596.457207][ T5813] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1596.468725][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.491669][ T5813] usb 3-1: config 0 descriptor?? [ 1596.505311][T18948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1596.543724][ T5813] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1596.576018][ T5831] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1596.625937][ T5831] usb 1-1: device descriptor read/8, error -32 [ 1596.903036][ T5831] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1596.945753][ T5831] usb 1-1: device descriptor read/8, error -32 [ 1597.068541][ T5831] usb usb1-port1: unable to enumerate USB device [ 1597.182114][T15808] team0 (unregistering): Port device team_slave_1 removed [ 1597.302314][T15808] team0 (unregistering): Port device team_slave_0 removed [ 1597.416452][T15808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1597.509004][T15808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1598.386115][T15808] bond0 (unregistering): Released all slaves [ 1598.534607][T18952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3248'. [ 1598.691412][T18962] netlink: 'syz.2.3247': attribute type 1 has an invalid length. [ 1601.787336][ T9] usb 3-1: USB disconnect, device number 108 [ 1602.390514][T18987] netlink: 'syz.2.3252': attribute type 3 has an invalid length. [ 1602.451480][T18987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3252'. [ 1603.876894][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1603.910384][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1603.913313][T15808] IPVS: stop unused estimator thread 0... [ 1603.958620][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1604.359093][T18815] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1604.494680][T18815] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1604.734385][T18815] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1605.055519][T18815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1606.037848][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3256'. [ 1606.836765][T18815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1606.856951][T18815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1607.791836][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1610.036788][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.044622][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.070768][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.295128][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.302514][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1611.643270][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1611.656928][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1611.677708][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1611.687046][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1611.699432][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1611.708669][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1611.884358][T18815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1611.996381][T19058] netlink: 'syz.4.3261': attribute type 3 has an invalid length. [ 1612.041866][T19058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3261'. [ 1612.117312][ T2908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.131805][ T2908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.198369][ T5813] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1612.340457][ T2908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1612.395872][ T2908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.907567][ T2908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1613.042707][ T2908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.070727][T19077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.080435][T19077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.736923][ T2908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1613.789776][T10182] Bluetooth: hci0: command tx timeout [ 1613.803037][ T2908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.322896][T18815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1615.023161][T19047] chnl_net:caif_netlink_parms(): no params data found [ 1615.218624][ T5813] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1615.250351][ T5813] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1615.277655][ T5813] usb 3-1: can't read configurations, error -71 [ 1615.553449][ T2908] tipc: Left network mode [ 1615.868793][T10182] Bluetooth: hci0: command tx timeout [ 1616.336620][T19047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.355126][T19047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.363734][T19047] bridge_slave_0: entered allmulticast mode [ 1616.376998][T19047] bridge_slave_0: entered promiscuous mode [ 1616.385831][T19047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.401553][T19047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.411757][T19047] bridge_slave_1: entered allmulticast mode [ 1616.424768][T19047] bridge_slave_1: entered promiscuous mode [ 1616.587067][T19102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 1617.276583][T19047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.293068][T19047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.028832][T10182] Bluetooth: hci0: command tx timeout [ 1619.051157][T19047] team0: Port device team_slave_0 added [ 1619.639147][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 1619.646598][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 1619.717211][T19121] ceph: No mds server is up or the cluster is laggy [ 1619.728418][T19047] team0: Port device team_slave_1 added [ 1620.110903][ T5781] Bluetooth: hci0: command tx timeout [ 1620.345964][T19047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1620.365910][T19047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1620.446733][T19047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1620.569391][T19047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1620.589236][T19047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1620.620605][T19047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.694476][T18815] veth0_vlan: entered promiscuous mode [ 1620.814618][T19047] hsr_slave_0: entered promiscuous mode [ 1620.824159][T19047] hsr_slave_1: entered promiscuous mode [ 1620.840047][T19047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1620.867601][T19047] Cannot create hsr debugfs directory [ 1621.098963][T18815] veth1_vlan: entered promiscuous mode [ 1621.318266][ T27] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1622.183511][ T2908] hsr_slave_0: left promiscuous mode [ 1622.200759][ T2908] hsr_slave_1: left promiscuous mode [ 1622.217090][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1622.237838][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.247665][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1622.257144][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.267041][T19159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.277639][T19159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.339061][ T2908] bridge_slave_1: left allmulticast mode [ 1622.357348][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.374878][ T2908] bridge_slave_0: left allmulticast mode [ 1622.385164][ T2908] bridge_slave_0: left promiscuous mode [ 1622.394018][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.440004][ T2908] veth1_macvtap: left promiscuous mode [ 1622.446042][ T2908] veth0_macvtap: left promiscuous mode [ 1622.452841][ T2908] veth1_vlan: left promiscuous mode [ 1622.459998][ T2908] veth0_vlan: left promiscuous mode [ 1623.875165][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 1623.981802][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 1624.075265][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1624.179760][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1624.939670][ T2908] bond0 (unregistering): Released all slaves [ 1625.458382][T18815] veth0_macvtap: entered promiscuous mode [ 1625.476331][T18815] veth1_macvtap: entered promiscuous mode [ 1625.906126][T18815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1626.016271][T18815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.140136][T18815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1626.180834][T18815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.217683][T18815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.255631][T18815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1626.405406][T18815] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.443382][T18815] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.471610][T18815] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.506357][T18815] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.588678][ T27] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1626.630380][ T27] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 1626.657793][ T27] usb 5-1: chopping to 0 config(s) [ 1626.663527][ T27] usb 5-1: can't read configurations, error -32 [ 1626.912029][T19047] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1626.919151][ T27] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1626.973515][T19047] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1627.097703][ T27] usb 5-1: device descriptor read/64, error -32 [ 1627.109145][T19047] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1627.135329][T19047] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1627.195864][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.257784][ T27] usb usb5-port1: attempt power cycle [ 1627.265304][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.344343][ T2908] IPVS: stop unused estimator thread 0... [ 1627.369704][T17229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.431507][T17229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1628.074716][ T27] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1628.326161][ T27] usb 5-1: device not accepting address 69, error -71 [ 1628.612930][T19047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1628.791175][T19047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1628.796495][T19196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 1628.825047][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.832442][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.910770][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.917976][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.197763][ T5813] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1630.822875][T19230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.832340][T19230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.312950][T19047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1631.343198][ T8877] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1631.537727][ T8877] usb 6-1: Using ep0 maxpacket: 32 [ 1631.558240][ T8877] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1631.573661][ T8877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.600158][ T8877] usb 6-1: config 0 descriptor?? [ 1631.615657][ T8877] as10x_usb: device has been detected [ 1631.623671][ T8877] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1631.737181][ T8877] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1631.873914][ T8877] as10x_usb: error during firmware upload part1 [ 1631.898144][ T8877] Registered device nBox DVB-T Dongle [ 1632.567236][T13269] usb 6-1: USB disconnect, device number 2 [ 1632.652428][T13269] Unregistered device nBox DVB-T Dongle [ 1632.655016][T13269] as10x_usb: device has been disconnected [ 1632.668007][T19047] veth0_vlan: entered promiscuous mode [ 1632.715096][T19047] veth1_vlan: entered promiscuous mode [ 1632.848031][T19047] veth0_macvtap: entered promiscuous mode [ 1632.943043][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1633.018458][T19047] veth1_macvtap: entered promiscuous mode [ 1633.061238][ T5813] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1633.093383][ T5813] usb 5-1: can't read configurations, error -71 [ 1633.111596][T19047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1633.172751][T19047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.221654][T19047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1633.376583][T19047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.427743][T19047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.513754][T19047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.574546][T19047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.608422][T19047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.637812][T19047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.674386][T19047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.994172][ T5781] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 1635.905365][T19047] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.942471][T19047] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.968907][T19047] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.979167][T19047] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.399917][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.448058][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.598232][T17229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.606215][T17229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.907837][ T9] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1638.184906][T19313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.194114][T19313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.459414][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3305'. [ 1638.600895][T19323] bridge0: port 1(geneve1) entered blocking state [ 1638.607606][T19323] bridge0: port 1(geneve1) entered disabled state [ 1638.616324][T19323] geneve1: entered allmulticast mode [ 1638.629448][T19323] geneve1: entered promiscuous mode [ 1638.641605][T19323] bridge0: port 1(geneve1) entered blocking state [ 1638.649763][T19323] bridge0: port 1(geneve1) entered forwarding state [ 1641.450044][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1641.464968][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1641.511077][ T9] usb 5-1: can't read configurations, error -71 [ 1645.524022][T19372] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3317'. [ 1645.551100][T19372] input: syz0 as /devices/virtual/input/input34 [ 1645.597961][T13269] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1645.793598][T13269] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1645.834170][T13269] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.864219][T13269] usb 7-1: config 0 descriptor?? [ 1645.876380][T13269] cp210x 7-1:0.0: cp210x converter detected [ 1645.883154][ T27] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 1646.092948][ T27] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.135154][ T27] usb 3-1: config 150 has 0 interfaces, different from the descriptor's value: 2 [ 1646.168506][ T27] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1646.197803][T19234] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1646.215817][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.237562][ T27] usb 3-1: Product: syz [ 1646.243037][ T27] usb 3-1: Manufacturer: syz [ 1646.282677][ T27] usb 3-1: SerialNumber: syz [ 1646.329227][T13269] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1647.787955][T19404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.798231][T19404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.951427][T13269] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1648.269256][T13269] usb 7-1: USB disconnect, device number 2 [ 1648.608355][T13269] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1648.627983][ T5781] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 1648.696877][ T27] usb 3-1: USB disconnect, device number 111 [ 1648.840942][T13269] cp210x 7-1:0.0: device disconnected [ 1649.699179][T19234] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1649.856030][T19234] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1649.886808][T19234] usb 6-1: can't read configurations, error -71 [ 1650.147713][ T8882] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1650.179077][T19428] netlink: 'syz.6.3327': attribute type 3 has an invalid length. [ 1650.227595][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3327'. [ 1650.691614][T19438] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3331'. [ 1651.082405][T19439] input: syz0 as /devices/virtual/input/input35 [ 1651.577855][ T8882] usb 5-1: device descriptor read/64, error -71 [ 1653.635840][T19455] syz.6.3333 (19455) used greatest stack depth: 16904 bytes left [ 1656.938137][ T8882] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1657.149859][ T5811] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1657.203752][ T5811] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1657.338698][ T5811] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1658.235604][T19495] netlink: 'syz.5.3343': attribute type 39 has an invalid length. [ 1658.671392][T19501] loop5: detected capacity change from 0 to 7 [ 1658.780080][T19496] fido_id[19496]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1658.854115][T19501] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1658.864332][T19501] loop5: partition table partially beyond EOD, truncated [ 1658.877834][T19501] loop5: p1 size 487441168 extends beyond EOD, truncated [ 1658.911620][T19502] binder: 19494:19502 ioctl c0285840 200000000000 returned -22 [ 1661.232966][T19185] udevd[19185]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1661.796565][T19523] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1661.823954][T19521] syzkaller0: entered promiscuous mode [ 1661.831259][T19521] syzkaller0: entered allmulticast mode [ 1662.143463][T19527] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1662.447820][ T5811] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1664.031480][T19545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.041057][T19545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.787918][ T5811] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1665.817548][ T5811] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1665.827297][ T5811] usb 6-1: can't read configurations, error -71 [ 1668.442261][T13269] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1668.490116][T13269] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1668.562472][T13269] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1669.234068][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.240799][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.319929][T19576] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1671.543531][T19577] fido_id[19577]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1672.179064][T19590] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1675.200157][T19628] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1676.482037][T19646] syzkaller0: entered promiscuous mode [ 1676.512369][T19646] syzkaller0: entered allmulticast mode [ 1676.801451][T19652] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1680.965619][T19675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1681.769324][T19677] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1682.702446][T19688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3383'. [ 1684.728422][T19712] syzkaller0: entered promiscuous mode [ 1684.734465][T19712] syzkaller0: entered allmulticast mode [ 1685.374068][T19715] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1685.951934][ T5781] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1685.962123][ T5781] Bluetooth: hci2: Injecting HCI hardware error event [ 1685.974775][T10182] Bluetooth: hci2: hardware error 0x00 [ 1688.357549][T10182] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1689.788985][T19736] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1690.357979][T19739] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3394'. [ 1693.676238][T19782] syzkaller0: entered promiscuous mode [ 1693.683379][T19782] syzkaller0: entered allmulticast mode [ 1694.214649][T19789] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1694.230559][T19793] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1695.637618][ T5831] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1697.300772][ T5831] usb 7-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.313821][ T5831] usb 7-1: config 150 has 0 interfaces, different from the descriptor's value: 2 [ 1697.332002][ T5831] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1697.347904][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.361200][ T5831] usb 7-1: Product: syz [ 1697.366553][ T5831] usb 7-1: Manufacturer: syz [ 1697.372578][ T5831] usb 7-1: SerialNumber: syz [ 1697.952303][ T27] usb 7-1: USB disconnect, device number 3 [ 1698.137971][T19839] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1698.296255][T19849] syzkaller0: entered promiscuous mode [ 1698.307695][T19849] syzkaller0: entered allmulticast mode [ 1698.421110][T19854] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1705.913940][T19909] syzkaller0: entered promiscuous mode [ 1705.939261][T19909] syzkaller0: entered allmulticast mode [ 1706.009440][T19909] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1710.688385][T19948] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1710.961812][T19958] syzkaller0: entered promiscuous mode [ 1710.968863][T19958] syzkaller0: entered allmulticast mode [ 1711.123933][T19958] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1718.977335][T20014] syzkaller0: entered promiscuous mode [ 1718.983884][T20014] syzkaller0: entered allmulticast mode [ 1719.038870][T20014] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1719.187849][T19234] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1719.525761][T19234] usb 7-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.547700][T19234] usb 7-1: config 150 has 0 interfaces, different from the descriptor's value: 2 [ 1719.572002][T19234] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1719.581871][T19234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.592078][T19234] usb 7-1: Product: syz [ 1719.596415][T19234] usb 7-1: Manufacturer: syz [ 1719.604327][T19234] usb 7-1: SerialNumber: syz [ 1722.571126][T13269] usb 7-1: USB disconnect, device number 4 [ 1730.699191][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.707345][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.057847][ T8877] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1733.268129][ T8877] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.378098][ T8877] usb 3-1: config 150 has 0 interfaces, different from the descriptor's value: 2 [ 1733.408328][ T8877] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1733.418637][ T8877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.506873][ T8877] usb 3-1: Product: syz [ 1733.511812][ T8877] usb 3-1: Manufacturer: syz [ 1733.516699][ T8877] usb 3-1: SerialNumber: syz [ 1733.816478][T10182] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 1733.830143][ T8877] usb 3-1: USB disconnect, device number 112 [ 1733.960955][T20096] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1733.985743][T20096] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1734.040002][T20096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1734.046411][T20096] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1734.062131][T20096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1734.076367][T20096] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1734.094808][T20096] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1735.711025][T10182] Bluetooth: hci4: command 0x0406 tx timeout [ 1735.713865][T20120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3477'. [ 1736.667298][T10182] Bluetooth: hci0: command 0x0c1a tx timeout [ 1736.673700][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 1737.787560][T10182] Bluetooth: hci4: command 0x0406 tx timeout [ 1738.747676][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 1738.754410][T10182] Bluetooth: hci0: command 0x0c1a tx timeout [ 1740.655656][T20174] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3489'. [ 1740.827572][T10182] Bluetooth: hci0: command 0x0c1a tx timeout [ 1846.527334][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1846.534637][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11758/1:b..l P20177/1:b..l P3557/1:b..l [ 1846.545813][ C0] rcu: (detected by 0, t=10502 jiffies, g=133449, q=397 ncpus=2) [ 1846.554007][ C0] task:kworker/u4:12 state:R running task stack:19976 pid:3557 ppid:2 flags:0x00004000 [ 1846.566584][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1846.574676][ C0] Call Trace: [ 1846.578076][ C0] [ 1846.581024][ C0] __schedule+0x1553/0x45a0 [ 1846.585534][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 1846.591427][ C0] ? __kmem_cache_free+0xba/0x1e0 [ 1846.596650][ C0] ? asan.module_dtor+0x20/0x20 [ 1846.601892][ C0] ? mark_lock+0x94/0x320 [ 1846.606238][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1846.612394][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 1846.617679][ C0] preempt_schedule_irq+0xbf/0x150 [ 1846.622876][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 1846.628816][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1846.635559][ C0] irqentry_exit+0x67/0x70 [ 1846.640845][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1846.648037][ C0] RIP: 0010:batadv_iv_ogm_schedule+0x9a9/0xf10 [ 1846.654593][ C0] Code: 03 00 00 48 8b 44 24 40 48 c1 e8 03 48 89 44 24 58 49 8d 5f 78 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 48 89 df e8 cd 17 96 f7 48 8b 1b 48 b8 00 00 00 00 00 fc ff [ 1846.674786][ C0] RSP: 0000:ffffc9000d1579c0 EFLAGS: 00000246 [ 1846.681127][ C0] RAX: 1ffff1100f9d920f RBX: ffff88807cec9078 RCX: dffffc0000000000 [ 1846.689361][ C0] RDX: 0000000000000000 RSI: ffffffff8b1c8e40 RDI: ffffffff8b1c8e00 [ 1846.697512][ C0] RBP: ffffc9000d157b00 R08: dffffc0000000000 R09: 1ffffffff2238aa0 [ 1846.705963][ C0] R10: dffffc0000000000 R11: fffffbfff2238aa1 R12: 000000010002329e [ 1846.714288][ C0] R13: ffff88802ce24000 R14: ffff88802ce24078 R15: ffff88807cec9000 [ 1846.722923][ C0] ? batadv_iv_ogm_schedule+0x888/0xf10 [ 1846.728716][ C0] ? batadv_iv_ogm_schedule+0x3e7/0xf10 [ 1846.734668][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x850/0x850 [ 1846.742038][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x733/0x850 [ 1846.749164][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 1846.755245][ C0] process_scheduled_works+0xa5d/0x15d0 [ 1846.760814][ C0] ? worker_attach_to_pool+0x380/0x380 [ 1846.766602][ C0] ? assign_work+0x3d2/0x5d0 [ 1846.771788][ C0] worker_thread+0xa55/0xfc0 [ 1846.776755][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1846.783011][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1846.788134][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1846.794341][ C0] kthread+0x2fa/0x390 [ 1846.798621][ C0] ? pr_cont_work+0x560/0x560 [ 1846.803766][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1846.808741][ C0] ret_from_fork+0x48/0x80 [ 1846.813349][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1846.818288][ C0] ret_from_fork_asm+0x11/0x20 [ 1846.823322][ C0] [ 1846.826494][ C0] task:modprobe state:R running task stack:24232 pid:20177 ppid:9988 flags:0x00004002 [ 1846.837541][ C0] Call Trace: [ 1846.840817][ C0] [ 1846.843921][ C0] __schedule+0x1553/0x45a0 [ 1846.848433][ C0] ? asan.module_dtor+0x20/0x20 [ 1846.853308][ C0] ? preempt_schedule+0xc0/0xd0 [ 1846.858366][ C0] preempt_schedule_common+0x82/0xc0 [ 1846.864202][ C0] preempt_schedule+0xc0/0xd0 [ 1846.869053][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1846.874950][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1846.880073][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1846.885292][ C0] ? page_ext_get+0x1e2/0x2b0 [ 1846.890165][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1846.895472][ C0] _raw_spin_unlock+0x3a/0x40 [ 1846.900264][ C0] change_protection+0x278a/0x3200 [ 1846.905710][ C0] ? can_change_pte_writable+0x800/0x800 [ 1846.911680][ C0] ? mmap_write_unlock+0x160/0x160 [ 1846.917135][ C0] ? vma_set_page_prot+0x12e/0x3e0 [ 1846.922442][ C0] mprotect_fixup+0x929/0xca0 [ 1846.927130][ C0] ? change_protection+0x3200/0x3200 [ 1846.932775][ C0] ? common_file_perm+0x198/0x1f0 [ 1846.937899][ C0] ? bpf_lsm_file_mprotect+0x9/0x10 [ 1846.943677][ C0] do_mprotect_pkey+0x7c2/0xcb0 [ 1846.948827][ C0] ? prot_none_test+0x10/0x10 [ 1846.953618][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1846.958954][ C0] __x64_sys_mprotect+0x80/0x90 [ 1846.964255][ C0] do_syscall_64+0x55/0xa0 [ 1846.968693][ C0] ? clear_bhb_loop+0x40/0x90 [ 1846.973562][ C0] ? clear_bhb_loop+0x40/0x90 [ 1846.978534][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1846.984703][ C0] RIP: 0033:0x7f6ddbe512c7 [ 1846.989322][ C0] RSP: 002b:00007fff3740b118 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1846.997819][ C0] RAX: ffffffffffffffda RBX: 00007f6ddbb306b0 RCX: 00007f6ddbe512c7 [ 1847.006057][ C0] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f6ddbb24000 [ 1847.014292][ C0] RBP: 00007fff3740b3e0 R08: 0000000000000000 R09: 00007f6ddbbc32e0 [ 1847.022686][ C0] R10: 00007f6ddbb306b0 R11: 0000000000000206 R12: 0000000000000038 [ 1847.030943][ C0] R13: 0000037e56d471c8 R14: 0000000000000000 R15: 00007f6ddbe65310 [ 1847.039153][ C0] [ 1847.042354][ C0] task:syz-executor state:R running task stack:21320 pid:11758 ppid:11737 flags:0x00004000 [ 1847.053415][ C0] Call Trace: [ 1847.056803][ C0] [ 1847.059828][ C0] __schedule+0x1553/0x45a0 [ 1847.064731][ C0] ? mark_lock+0x94/0x320 [ 1847.069161][ C0] ? asan.module_dtor+0x20/0x20 [ 1847.074243][ C0] ? preempt_schedule+0xc0/0xd0 [ 1847.079788][ C0] preempt_schedule_common+0x82/0xc0 [ 1847.085451][ C0] preempt_schedule+0xc0/0xd0 [ 1847.090407][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1847.096408][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1847.101702][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1847.107267][ C0] _raw_spin_unlock+0x3a/0x40 [ 1847.112214][ C0] ? copy_page_range+0x2b6f/0x3670 [ 1847.117427][ C0] copy_page_range+0x2ba0/0x3670 [ 1847.122386][ C0] ? pfn_valid+0x450/0x450 [ 1847.126818][ C0] ? copy_mm+0x1232/0x1d80 [ 1847.131458][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1847.137145][ C0] ? mas_empty_area_rev+0x1960/0x1960 [ 1847.142993][ C0] ? down_write+0x16e/0x200 [ 1847.147637][ C0] ? up_write+0x1c3/0x410 [ 1847.153079][ C0] ? anon_vma_interval_tree_verify+0x150/0x150 [ 1847.159776][ C0] copy_mm+0x1281/0x1d80 [ 1847.164320][ C0] ? copy_signal+0x680/0x680 [ 1847.169452][ C0] ? lockdep_init_map_type+0x9c/0x8e0 [ 1847.175126][ C0] ? __init_rwsem+0x122/0x160 [ 1847.179995][ C0] ? copy_signal+0x556/0x680 [ 1847.184877][ C0] copy_process+0x16f7/0x3d80 [ 1847.189759][ C0] ? copy_process+0x96e/0x3d80 [ 1847.194676][ C0] ? __pidfd_prepare+0x140/0x140 [ 1847.199764][ C0] kernel_clone+0x24b/0x8a0 [ 1847.204463][ C0] ? create_io_thread+0x190/0x190 [ 1847.209529][ C0] ? __might_fault+0xaa/0x120 [ 1847.214597][ C0] __x64_sys_clone+0x1b7/0x230 [ 1847.219393][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 1847.224713][ C0] ? lock_chain_count+0x20/0x20 [ 1847.229586][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1847.235058][ C0] do_syscall_64+0x55/0xa0 [ 1847.239935][ C0] ? clear_bhb_loop+0x40/0x90 [ 1847.244879][ C0] ? clear_bhb_loop+0x40/0x90 [ 1847.249984][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1847.255883][ C0] RIP: 0033:0x7f49c6fc5852 [ 1847.260293][ C0] RSP: 002b:00007ffe2e9f93d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1847.268984][ C0] RAX: ffffffffffffffda RBX: 00007ffe2e9f93d0 RCX: 00007f49c6fc5852 [ 1847.277308][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1847.285421][ C0] RBP: 00007ffe2e9f955c R08: 0000000000000000 R09: 0000000000000001 [ 1847.293511][ C0] R10: 000055556b7f07d0 R11: 0000000000000246 R12: 0000000000000001 [ 1847.301575][ C0] R13: 00000000000927c0 R14: 00000000001a9099 R15: 00007ffe2e9f95b0 [ 1847.309916][ C0] [ 1847.313018][ C0] rcu: rcu_preempt kthread starved for 6272 jiffies! g133449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1847.324569][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1847.335019][ C0] rcu: RCU grace-period kthread stack dump: [ 1847.341257][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 ppid:2 flags:0x00004000 [ 1847.352348][ C0] Call Trace: [ 1847.355724][ C0] [ 1847.358742][ C0] __schedule+0x1553/0x45a0 [ 1847.363264][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x120 [ 1847.369255][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1847.375336][ C0] ? asan.module_dtor+0x20/0x20 [ 1847.380282][ C0] ? enqueue_timer+0x23d/0x550 [ 1847.385303][ C0] ? __mod_timer+0x984/0xdb0 [ 1847.390327][ C0] schedule+0xbd/0x170 [ 1847.394487][ C0] schedule_timeout+0x188/0x2d0 [ 1847.399432][ C0] ? console_conditional_schedule+0x40/0x40 [ 1847.405440][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1847.411540][ C0] ? update_process_times+0x1b0/0x1b0 [ 1847.417309][ C0] ? prepare_to_swait_event+0x339/0x360 [ 1847.423142][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 1847.428196][ C0] ? rcu_gp_init+0x1162/0x1560 [ 1847.433223][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1847.438422][ C0] ? dump_blkd_tasks+0x810/0x810 [ 1847.443444][ C0] ? rcu_gp_init+0x1560/0x1560 [ 1847.448285][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 1847.453345][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1847.458730][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1847.464403][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 1847.469091][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1847.474229][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 1847.479360][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1847.484555][ C0] kthread+0x2fa/0x390 [ 1847.488727][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1847.494043][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1847.498850][ C0] ret_from_fork+0x48/0x80 [ 1847.503353][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1847.508128][ C0] ret_from_fork_asm+0x11/0x20 [ 1847.513001][ C0] [ 1847.516105][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1847.522626][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1847.528202][ C1] NMI backtrace for cpu 1 [ 1847.528212][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1847.528227][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1847.528236][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1847.528259][ C1] Code: 39 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 f3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1847.528272][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1847.528285][ C1] RAX: b7742255d2abc000 RBX: ffffffff8162a8f1 RCX: b7742255d2abc000 [ 1847.528297][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 1847.528308][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 1847.528318][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 1847.528330][ C1] R13: dffffc0000000000 R14: 1ffff110036cd780 R15: 0000000000000000 [ 1847.528340][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1847.528353][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1847.528364][ C1] CR2: 000020000004b000 CR3: 00000000192b5000 CR4: 00000000003506e0 [ 1847.528378][ C1] Call Trace: [ 1847.528386][ C1] [ 1847.528391][ C1] default_idle+0x13/0x20 [ 1847.528410][ C1] default_idle_call+0x6c/0xa0 [ 1847.528429][ C1] do_idle+0x221/0x590 [ 1847.528450][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1847.528467][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1847.528484][ C1] ? asm_sysvec_error_interrupt+0x11/0x20 [ 1847.528509][ C1] cpu_startup_entry+0x43/0x60 [ 1847.528526][ C1] start_secondary+0xee/0xf0 [ 1847.528543][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1847.528569][ C1]