last executing test programs: 10.148054431s ago: executing program 4 (id=186): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x23}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r4, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x509301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) fsopen(&(0x7f0000000740)='autofs\x00', 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030026bd7000fbdbdf2505000000140001800d0001007564703a7379995981"], 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) r10 = syz_open_dev$audion(&(0x7f0000000040), 0x3ca, 0x400) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}], 0x1c) 8.563500057s ago: executing program 4 (id=196): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0x5) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000940)={0x60, 0xdc, 0x10000000, 0x30, 0x0, 0xfffffffb, 0x0, 0x0, {}, {}, {0x1}, {0x2}, 0x0, 0x40, 0x5, 0x0, 0x0, 0x4ed22847, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x18, &(0x7f00000002c0)="8a00000000000000", 0x8) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a4, &(0x7f0000000000)={{@any, 0xffff7dff}, @hyper, 0x0, 0x0, 0x4000000f8, 0x8, 0x0, 0x4000000, 0x7}) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x18, 0xfffffffffffffffd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r7 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) close_range(r6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) 8.509506757s ago: executing program 4 (id=197): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) socket$kcm(0x10, 0x2, 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 8.132474325s ago: executing program 2 (id=198): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@any, 0x9}, 0x1, 0x1, 0xe}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x9, 0x400000000005, 0x180, 0x3, 0x10, 0xf1, 0x50, 0x7ffffffeffffe, 0x2, 0x3, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xe], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 6.619702737s ago: executing program 2 (id=202): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0xdf, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3f, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) syz_usb_connect$uac2(0x1, 0xb1, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xccd, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x8, 0x10, 0x8, {0x8, 0xb, 0x2, 0x1, 0x1, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x4, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc0, 0x8, 0x8, 0x2, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff, 0x7f, 0x7, 0x9}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xdd, 0x1, 0x2, 0x8, "", '){'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb5, 0x2, 0x59, {0x8, 0x25, 0x1, 0x83, 0xf, 0x1, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x40, 0x1, 0x8, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x8001, 0x2, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x2, 0x97, {0x8, 0x25, 0x1, 0x2, 0xf, 0x0, 0x4}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0x9, 0x75, 0x8}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xad, &(0x7f0000000200)=@string={0xad, 0x3, "c7a44aecbe7b61804f5418cb161a87c2b0da2fd0f18193b5ed29c29ac89ab47bf84cf729f2ad12c5e515001f2262f747ad3ed888161d1912936cc0e1249d7cdf53e0e7b405cfb4e715cf4b34bfaa5635b712223d14dbaa2d683db29d76d928e114fddd327e3ce023f5876180915138dc96bc63c89e2d6c70c123b8ef20bd3b35299150888ac9261aa43a31f0e998bf9814c1dcbaa3d920c4e82e7ccc7be4851edef199217ee96e06274ef1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x101, &(0x7f0000000680)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x42c}}]}) r1 = syz_create_resource$binfmt(0x0) socket$kcm(0x10, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f8100", 0x12) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000540)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) fcntl$setstatus(r6, 0x4, 0x2400) syz_usb_connect$printer(0x4, 0xfc7f, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xab, 0xc5, 0xf9}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0xf, 0x0, 0xf, 0x20, 0x5}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x2, [{0xff, &(0x7f0000000880)=@string={0xff, 0x3, "ff723f51cb43a4b9228a65a17bf7e875f2ccf1559b787f153a9ccecf08e93bc6fe364aec4332ec8bf3f6c78510b5bdf2a03a2d7279a92735e93e53efed80e4eec9427db54c03a88a346f74582dae476ee14a92d0d9414dfd724a2a8f7c76be5befa5b3f319590ca20c6894ca867ee67a192850d780bf8725779c62ebf98b7ae224322b9faede4a2ccfb691b016283388e18c013e86a8bf15830c0927888f522236c9ae28e424c40b57d386578428a932ff710dba87ea0691ae43cd80187a8068a04d48523adf6e05bae55b97248e5e687322f356c450ecdf1f76ad9e58fd7c4599c5e9d7fc39695c6629ef08f35077f2a2e9ab153f2a9b73c8b1001705"}}, {0x87, &(0x7f0000000980)=@string={0x87, 0x3, "1ea3d90d600992c1a17618c26354f266180856955fdeb6c7e74c0982c47a1ed0067c69a8e84554aa2b831b275fd970a982f9fb0992af9b95d5447f16d4345b888364e3cec237ae6f5a116ee9c182e4989026e280552293f42b480d4179323c6ecc00e00d5fc1bf01c664a2fec06c0c70d56bf20949493b506a7f9c8a95b552c626385e0c41"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="20082b0000002b21c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.100056294s ago: executing program 0 (id=206): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000d40)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="60f4eb3dc602d2e9d8ed46eb99569fdca6a2d6e38640ef8b7c4bb1ff72ea289242daad8c21c4616759e72d20cb9163c6282127c0382b8654a57c112cac69", @ANYBLOB="7696af", @ANYBLOB="ae4f065167b3208d7a5792d29696b014c83253d3441e9f2ae3bb9c7023822915b41044bf5dea178a30878f9447d54699851af8f09f8c0049688c1f122fb1f49bbff9ea283ddac711959ffdf924c83c90a83a2a73e8d27d27b684054b5674b060b8f12834856ca2565c6e9eb02ec3b638b14798089924bb3d21c33b41f1e623eb83806990e03088620bc35c0fea558c38c821614619c0a87c58251b37898cb942db5cae6b529c25e893d8949cf669d158b542ee4f89aae0c7b1f8b85ba52781021e6da35db8023bab", @ANYBLOB="55fb28a2e3bc6f5aa0d158f69e30000b454b0d5c30145fe66aeb16b443d30bbe0400ea11b9e86ff792e61a9027ee1feae07433b0852116802641241c27af0fefcb49e94d7ef1645e39d4f590e563af12c693f0765fc2435c376bbcd1ed256952c230f3b634abda54d6a5a6c3ea758aacebac30625533d104f453219c8d595f22d8c710d1755b5372c6fb9b760602380bbdc17385bb69cde8180c0bc1e4c2cf38fd9aa0085ec4dc78f1490ba0744a98725be4422c89", @ANYRES64=r1, @ANYBLOB="9dec6d01aa124abc64459357c2b02c93db16132496d429109df009b2f910e53a4cd0933bbc58587542be71f5d7aa03cfb091e83e3ce8f17fea59c7164dfb424b25e670aae59f9d8df02770ec47"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) close_range(r2, r2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6ce00256e0cba44474b11d1f3e37f5031465a0bebbd1682734985847e6deca2562ce808c40199ba1aacbd16fb0c8cdaba306958df0149d2533a38d0e155aee13fb8b8413d42231fd"], 0xff2e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x800}, &(0x7f0000000180)=0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x2) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r6 = syz_open_pts(r3, 0x286c02) r7 = dup3(r6, r3, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)) fcntl$setpipe(r8, 0x407, 0x9602) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000540)={0x2, 0x0, @ioapic={0x80a0000, 0x76, 0x8ec, 0x10001, 0x0, [{0x12, 0x52, 0x5, '\x00', 0x8}, {0x5, 0x9, 0x2, '\x00', 0xf}, {0x0, 0x3, 0x0, '\x00', 0x2}, {0x49, 0x33, 0x9, '\x00', 0xfe}, {0x6, 0x0, 0x81, '\x00', 0x2}, {0x0, 0x7a, 0x7, '\x00', 0x2}, {0x7, 0x6, 0x4, '\x00', 0x2}, {0x6, 0xd6, 0x10, '\x00', 0x4}, {0xd1, 0x1, 0x0, '\x00', 0xf8}, {0xd8, 0x80, 0x3e, '\x00', 0x3}, {0x4a, 0x5, 0x2b, '\x00', 0x8a}, {0x2, 0xf, 0x0, '\x00', 0x9}, {0x2, 0x4, 0x6, '\x00', 0x3}, {0x9f, 0x2, 0xa, '\x00', 0xb1}, {0x9, 0x6f, 0x1, '\x00', 0x6}, {0x0, 0x7, 0x3, '\x00', 0x74}, {0x83, 0x0, 0x6, '\x00', 0x9}, {0xa, 0x80, 0x1, '\x00', 0x7d}, {0xfc, 0xf4, 0x2, '\x00', 0x5}, {0x6, 0x6, 0xfc, '\x00', 0x7}, {0x2, 0x0, 0x2, '\x00', 0x4}, {0x7, 0x9, 0x8, '\x00', 0x4}, {0x2, 0x18, 0x2c, '\x00', 0x4}, {0x8, 0x80, 0x2, '\x00', 0x3}]}}) 4.883173842s ago: executing program 3 (id=207): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x38, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x3, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0x20000000) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) mbind(&(0x7f00003d1000/0x4000)=nil, 0x4000, 0x8003, 0x0, 0x7, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r5 = syz_open_dev$video4linux(&(0x7f0000000280), 0x3cd, 0x40000) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000400)={0xf0f001, 0x9, "b9a38e16cd00000000000000012147ca1117e419af26130ff88402ef5e4eb2c0", 0x3, 0x1254, 0x3, 0x5, 0x20000408}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0xb21) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffd2a) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) 4.735517447s ago: executing program 0 (id=208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$packet(r1, &(0x7f0000000080)="0b036800e4082e00640002004709dd0208119c361aace8ff3ff6e39f6063544d795bace756bfcb948ae57a35f325926ee42ca69b015dc3b107e7fe913ffb00d2f2d266d9d4c0f20d3001f5ee5b8d631dddd8373d7522604fe326e272e117091b4bc31dfc7fd54a5f20d750677fe4d192d854d969fc83fd706484", 0x7a, 0x4000000, &(0x7f0000000000)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) 4.730162558s ago: executing program 4 (id=209): sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x20}}], 0x1, 0x800) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x5, 0x200) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) socket$netlink(0x10, 0x3, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb45, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e0915ca8703c0e8f94b157f55799d27afa84640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8", 0x4c}, {&(0x7f0000000840)="3f67466b434f0f1dab64b413f241dddea2dbdf0911184a79c6d06cb884a50159037441904c0acf6a994e41d7790cac9d46215c54cd9cd1c8c424bda885bc6dd022b01fff74a0f6227fd01fa455f675b59ef6c2ec767b7883f3e68d209fe15dd3eecaa7bbc3cfadf815a0ef1471c05f17", 0x70}, {&(0x7f0000000a40)="7f9dd881777fea034ee968a3f4d1b230a014767a2fcd073cbd069735a30f70cb161811abe3cb1a0695e82c10a79ab1ff167fd5fcd27035cba4fd82b59b4c6e95368bdf3f511238bbec681e0b8391960f26320dedd0ec55c747628ad1cf3cb5c3229d2f0d1406ce55bc6850fb5b7d6640d9494c", 0x73}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, 0x0, &(0x7f0000000200)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb4c60000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) pipe2$9p(0x0, 0x81800) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, r4, 0x80d}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r5, r3}}, 0x18) 4.539954226s ago: executing program 2 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r6, &(0x7f0000000900)=ANY=[@ANYBLOB="080008000001060003002d004000ab00c2aaa54b88f849a952b2b2eca9ff0102106797e5c6253d56e3e2d1b3962fde1e084ff87da507262536a2ed5787645f19a314b42b9b305afe73487d2d00"/86], 0x4e) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/sync_on_suspend', 0x2b0142, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000003c0)=0xe8) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000400)={{0x0, 0x0, 0x0, r13, 0xee00, 0x40, 0x7}, 0x0, 0x0, 0x80, 0x9, 0x0, 0x4, 0xffffffffffffffff, 0x7, 0x4}) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000700)={{{@in=@loopback, @in=@multicast1, 0x4e21, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x5c, r5}, {0x4, 0x9, 0x4, 0xd, 0x6e1, 0xd693, 0x5, 0x2}, {0x0, 0x2, 0x6, 0x3}, 0x6029, 0x6e6bbd, 0x0, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4d4, 0x2b}, 0xa, @in=@remote, 0x3502, 0x1, 0x3, 0xa, 0x8, 0x9, 0xe}}, 0xe8) write$tcp_mem(r12, &(0x7f0000000280)={0x800800008000000e, 0x2d, 0x2, 0x3a, 0x2000000008, 0x2c}, 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)=0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000480)=@multiplanar_fd={0x1, 0xd, 0x4, 0x80, 0x3, {r10, r11/1000+60000}, {0x2, 0xa, 0x33, 0x1, 0x4, 0x54, "3fcd97ab"}, 0x7f, 0x4, {&(0x7f00000002c0)=[{0x83, 0x9d7a, {r12}, 0xf}, {0x80, 0x0, {}, 0x1987}]}, 0x2, 0x0, r14}) r15 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r16, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) vmsplice(r12, &(0x7f00000006c0)=[{&(0x7f0000000580)="672ae81966d00fceac497e538174c2122e35657bf249abf4fe46214fed1b7893b0dd0eee11c695b3b92f2fd93deaa3658903da178491424378c9e32f515a467cf6d414fc3aefa2908860afcaa3dd1a0eaaea06ba5ea6305e14a4d592a7d72ba9f5c5ae8f435ec29dea86ca74848edd58b7271783aae71d4b167e667850e22b730a5a8f4f8bc13311c8503df36fc832a20c34e2a0aeffb215012576435dec35772cd1ebcbfbbe9e403021ac6a0228406a4e1876a22878379a2e9dffb7af9934752ef2d02b63e0c3b41e06fae191f38c2284fdd6d5a8", 0xd5}], 0x1, 0x2) 4.443914503s ago: executing program 0 (id=212): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@any, 0x9}, 0x1, 0x1, 0xe}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x9, 0x400000000005, 0x180, 0x3, 0x10, 0xf1, 0x50, 0x7ffffffeffffe, 0x2, 0x3, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xe], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4.432381032s ago: executing program 4 (id=213): r0 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xcb, 0x5a, 0x3a, 0x10, 0x2405, 0x3, 0x6713, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x9, 0x2, 0x0, 0xcc, "", [{{0x9, 0x4, 0x0, 0xd3, 0x0, 0x8e, 0x6c, 0xaf, 0x9, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, '\x00\x00\b\x00\x00\x00'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x0, 0x96}}]}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000015eb8b"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x25, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) 4.307046275s ago: executing program 2 (id=214): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000280)=@other={'unlock', ' ', 'io+mem'}, 0xe) (async) write$vga_arbiter(r2, &(0x7f0000000280)=@other={'unlock', ' ', 'io+mem'}, 0xe) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000400)={0x1, {{0xa, 0x2, 0xfffffe00, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @local, 0xc71}}}, 0x108) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000008c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b40)={0x0, 0x5, 0x6}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, r5, 0x10, @inherit={0x58, &(0x7f0000000ac0)={0x1, 0x2, 0x8, 0x846, {0x10, 0xfffffffffffffff8, 0x4, 0x3, 0x5}, [0xfffffffffffffff8, 0x2]}}, @devid=r6}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000f40)={{r3}, r5, 0x10, @inherit={0x58, &(0x7f0000000ac0)={0x1, 0x2, 0x8, 0x846, {0x10, 0xfffffffffffffff8, 0x4, 0x3, 0x5}, [0xfffffffffffffff8, 0x2]}}, @devid=r6}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"cfd961d635d89980bdf4d4a485acf0ca", r5, r7, {0xd59, 0xfff}, {0x5, 0x4}, 0x5, [0xf3d5, 0x7, 0x8, 0x101, 0x2, 0x0, 0xffffffff, 0x1b49, 0x2, 0x0, 0x2, 0x6, 0x0, 0x9, 0x7, 0x6]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"cfd961d635d89980bdf4d4a485acf0ca", r5, r7, {0xd59, 0xfff}, {0x5, 0x4}, 0x5, [0xf3d5, 0x7, 0x8, 0x101, 0x2, 0x0, 0xffffffff, 0x1b49, 0x2, 0x0, 0x2, 0x6, 0x0, 0x9, 0x7, 0x6]}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000b00000000000000f8ffff14ffffffffff0000000000000000ffffffffffff3f000000000000000002000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000b00000000000000f8ffff14ffffffffff0000000000000000ffffffffffff3f000000000000000002000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x6, 0x200000000000001}, 0x4, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350757, 0x81}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000400)="b9ff03310644268cb89614e886dd6f8ec0a5fa7a80339e916b28fea3fc5c6afe0189acc82c8112eb153b3415124ef9ab1d0dd98b72de", 0x0, 0x8003, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000400)="b9ff03310644268cb89614e886dd6f8ec0a5fa7a80339e916b28fea3fc5c6afe0189acc82c8112eb153b3415124ef9ab1d0dd98b72de", 0x0, 0x8003, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.043497937s ago: executing program 2 (id=215): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x5, 0xdd, 0x2, 0x8, 0xe, 0x3, 0x9, 0x7, 0x3, [0x9, 0x7404d91d, 0x9, 0x5, 0x3, 0x9, 0x5, 0x3]}}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x47c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r5, {0xa}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x450, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RTAB={0x404, 0x2, [0x4a, 0x100, 0x6f5e895f, 0xf, 0x1, 0x7, 0x4a187b7a, 0x5, 0x7, 0x6, 0x10000, 0x8, 0x1, 0xf, 0x100, 0x2, 0x0, 0x3, 0x800, 0x2c1, 0x3, 0x101, 0x7d, 0x7fff, 0x0, 0x0, 0x606, 0x5, 0x0, 0xaf3, 0x8000, 0xd, 0x80000000, 0x9, 0x10, 0x8, 0x8, 0x0, 0x2, 0x5, 0x5, 0x7, 0x6, 0x0, 0x7, 0xfffff53b, 0x8, 0x41fe, 0x4, 0x8, 0x0, 0x9, 0x43c, 0xfffffffd, 0xffff, 0xffffff21, 0xf, 0x8, 0xfffffffc, 0x8, 0x0, 0x8, 0x0, 0xd406, 0x2, 0x7fff, 0x4, 0x4, 0xd59, 0x1, 0x7, 0x4, 0xffff, 0x3, 0x3448575b, 0xca, 0x3, 0x10001, 0x7, 0x9, 0x1, 0x5, 0x200, 0x800, 0x5, 0x4, 0x4, 0x40, 0x1, 0x8, 0xe, 0x1, 0x7fffffff, 0x1, 0x0, 0x10000, 0xff, 0x5, 0xa5, 0xffffff20, 0xc79, 0x1459, 0x4, 0xff, 0x0, 0x3, 0x4, 0xe, 0x200004, 0x9, 0x0, 0xe3d, 0x4, 0x0, 0xf2, 0xc, 0x80000001, 0x4, 0x7, 0x9, 0x3, 0x5, 0xffff, 0x68, 0x7c, 0x8, 0xc, 0x7ff, 0x5, 0x7, 0x4, 0x2, 0x3, 0xffff, 0x8001, 0x8, 0x3, 0x4, 0x7fffffff, 0x3ff, 0x9, 0x7, 0x800, 0x8, 0x0, 0x189, 0x80, 0x3, 0x1, 0xffffffff, 0x4d, 0x0, 0xfff, 0x7, 0x0, 0x1, 0x4, 0x8670, 0xd, 0x40, 0x6, 0x3, 0x3d1f9312, 0x16, 0x7fffffff, 0x101, 0x5, 0x1, 0x9, 0x400, 0x4, 0x1ff, 0x1, 0x7, 0xa, 0x21e, 0xb8, 0xc, 0x240000, 0x1, 0x9, 0x0, 0x8d7e, 0x200, 0xfffffff7, 0x4, 0x7, 0x7, 0xfffffff9, 0x7, 0x3, 0x1000, 0x8, 0xffff, 0x8, 0xffffffff, 0x800000, 0x2, 0xc, 0x9, 0xd, 0x0, 0x101, 0x1000, 0x40, 0x6c, 0x5, 0x9, 0x9, 0x28478204, 0x6, 0x1284c4f0, 0x5, 0x2, 0x3f, 0x1, 0x0, 0x3, 0x2000, 0x8, 0xfffffffb, 0x8de4, 0x116d80, 0x1, 0x5, 0x8, 0x8, 0x6, 0x1, 0xa, 0x9, 0x1, 0x5, 0x10001, 0x7033, 0xe, 0xec, 0x0, 0x3, 0xf0, 0x2, 0x82a, 0x2, 0x5, 0x7fff, 0x8, 0xe, 0x1000, 0x2, 0xfffffc00, 0x4, 0x0, 0xcfd, 0x0, 0x4, 0x1a]}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r7], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042dbd7000fedbdf250600000008003a00050000000a000900ffffffffffff0000050038000100000008003200090000000841f5db56288af5a8f8c6f3c6b8000b000300000008003400e7ba000024002d000100000008002b0080000000050030"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008081) r9 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r9, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) syz_ublk_add_dev(r6, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c", 0xf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12e", 0x63}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r10 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r10, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) 3.985426049s ago: executing program 3 (id=216): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) (async, rerun: 64) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 64) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async, rerun: 64) listen(r4, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 64) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) (async, rerun: 64) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) (async, rerun: 64) listen(r3, 0x204) (rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) (async) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) (async, rerun: 64) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) (rerun: 64) 3.715330579s ago: executing program 3 (id=218): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x109400, 0x80) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) open(&(0x7f0000000100)='./file0\x00', 0x80240, 0x140) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="001a338568da36", 0x7, 0x4, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 3.602002578s ago: executing program 4 (id=219): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) socket$kcm(0x10, 0x2, 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 3.054103296s ago: executing program 2 (id=220): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0040d07, &(0x7f0000000040)=0x121) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000740)) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x81, @mcast2, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "bc86299ab62e97b6", "2125e44cdf02000000000000003297f0", "8fc203e0", "c40330604dc13bd4"}, 0x28) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x3}, 0x20) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 2.642002437s ago: executing program 0 (id=221): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0xdf, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3f, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) syz_usb_connect$uac2(0x1, 0xb1, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xccd, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x8, 0x10, 0x8, {0x8, 0xb, 0x2, 0x1, 0x1, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x4, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc0, 0x8, 0x8, 0x2, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff, 0x7f, 0x7, 0x9}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xdd, 0x1, 0x2, 0x8, "", '){'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb5, 0x2, 0x59, {0x8, 0x25, 0x1, 0x83, 0xf, 0x1, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x40, 0x1, 0x8, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x8001, 0x2, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x2, 0x97, {0x8, 0x25, 0x1, 0x2, 0xf, 0x0, 0x4}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0x9, 0x75, 0x8}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xad, &(0x7f0000000200)=@string={0xad, 0x3, "c7a44aecbe7b61804f5418cb161a87c2b0da2fd0f18193b5ed29c29ac89ab47bf84cf729f2ad12c5e515001f2262f747ad3ed888161d1912936cc0e1249d7cdf53e0e7b405cfb4e715cf4b34bfaa5635b712223d14dbaa2d683db29d76d928e114fddd327e3ce023f5876180915138dc96bc63c89e2d6c70c123b8ef20bd3b35299150888ac9261aa43a31f0e998bf9814c1dcbaa3d920c4e82e7ccc7be4851edef199217ee96e06274ef1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x101, &(0x7f0000000680)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x42c}}]}) r1 = syz_create_resource$binfmt(0x0) socket$kcm(0x10, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000", 0x1b) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000540)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) fcntl$setstatus(r6, 0x4, 0x2400) syz_usb_connect$printer(0x4, 0xfc7f, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xab, 0xc5, 0xf9}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0xf, 0x0, 0xf, 0x20, 0x5}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x2, [{0xff, &(0x7f0000000880)=@string={0xff, 0x3, "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"}}, {0x87, &(0x7f0000000980)=@string={0x87, 0x3, "1ea3d90d600992c1a17618c26354f266180856955fdeb6c7e74c0982c47a1ed0067c69a8e84554aa2b831b275fd970a982f9fb0992af9b95d5447f16d4345b888364e3cec237ae6f5a116ee9c182e4989026e280552293f42b480d4179323c6ecc00e00d5fc1bf01c664a2fec06c0c70d56bf20949493b506a7f9c8a95b552c626385e0c41"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="20082b0000002b21c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.055206188s ago: executing program 3 (id=222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) connect$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) syz_open_pts(r2, 0xea283) (async) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', 0x0) (async) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r3) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') (async) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000080)={0xc, 0x5, 0xf497}) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) (async) read$FUSE(0xffffffffffffffff, 0x0, 0xfffffffffffffd73) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4, 0x1000}, 'syz0\x00', 0x4b}) (async) ioctl$UI_DEV_CREATE(r7, 0x5501) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0xfffffffffffffffb, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000009, 0x5}, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000004140)={0x18, 0x0, 0x0, {0x6}}, 0x18) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2040413, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) syz_fuse_handle_req(r8, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba4572d170b345ccb3b1b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c14f5ed1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172489d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.716278939s ago: executing program 1 (id=223): sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x804) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="e78bf3", 0x3}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x800040069], 0x8080000, 0x40110}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.05387949s ago: executing program 1 (id=224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r6, &(0x7f0000000900)=ANY=[@ANYBLOB="080008000001060003002d004000ab00c2aaa54b88f849a952b2b2eca9ff0102106797e5c6253d56e3e2d1b3962fde1e084ff87da507262536a2ed5787645f19a314b42b9b305afe73487d2d00"/86], 0x4e) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/sync_on_suspend', 0x2b0142, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000003c0)=0xe8) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000400)={{0x0, 0x0, 0x0, r13, 0xee00, 0x40, 0x7}, 0x0, 0x0, 0x80, 0x9, 0x0, 0x4, 0xffffffffffffffff, 0x7, 0x4}) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000700)={{{@in=@loopback, @in=@multicast1, 0x4e21, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x5c, r5}, {0x4, 0x9, 0x4, 0xd, 0x6e1, 0xd693, 0x5, 0x2}, {0x0, 0x2, 0x6, 0x3}, 0x6029, 0x6e6bbd, 0x0, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4d4, 0x2b}, 0xa, @in=@remote, 0x3502, 0x1, 0x3, 0xa, 0x8, 0x9, 0xe}}, 0xe8) write$tcp_mem(r12, &(0x7f0000000280)={0x800800008000000e, 0x2d, 0x2, 0x3a, 0x2000000008, 0x2c}, 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)=0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000480)=@multiplanar_fd={0x1, 0xd, 0x4, 0x80, 0x3, {r10, r11/1000+60000}, {0x2, 0xa, 0x33, 0x1, 0x4, 0x54, "3fcd97ab"}, 0x7f, 0x4, {&(0x7f00000002c0)=[{0x83, 0x9d7a, {r12}, 0xf}, {0x80, 0x0, {}, 0x1987}]}, 0x2, 0x0, r14}) r15 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r16, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) vmsplice(r12, &(0x7f00000006c0)=[{&(0x7f0000000580)="672ae81966d00fceac497e538174c2122e35657bf249abf4fe46214fed1b7893b0dd0eee11c695b3b92f2fd93deaa3658903da178491424378c9e32f515a467cf6d414fc3aefa2908860afcaa3dd1a0eaaea06ba5ea6305e14a4d592a7d72ba9f5c5ae8f435ec29dea86ca74848edd58b7271783aae71d4b167e667850e22b730a5a8f4f8bc13311c8503df36fc832a20c34e2a0aeffb215012576435dec35772cd1ebcbfbbe9e403021ac6a0228406a4e1876a22878379a2e9dffb7af9934752ef2d02b63e0c3b41e06fae191f38c2284fdd6d5a8", 0xd5}, {0x0}], 0x2, 0x2) 758.704615ms ago: executing program 1 (id=225): sendto$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)="cb2a69d2b902811ffe408292eb14cbd78c68716e690c21095b9f8df3a8ed932a22fb1d45cca493877ccac2d6e3cda12b691e015e9c02fb05a896d9beb843e6ef0a977ecf2fd8547e03f39cc2ce5b8f161b8ba241e47c69174b2e2ea8217797d7e1539ebeab538f7fc64533dff154db", 0x6f, 0x8001, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xca00, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x7, {0x2a00, 0x80010000, 0x0, 0x2, 0x400, 0x0, 0x12, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000400)=""/4096, &(0x7f0000001400)=0x1000) 674.350338ms ago: executing program 3 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r0}, 0x38) 585.624859ms ago: executing program 3 (id=227): r0 = io_uring_setup(0x9, &(0x7f00000002c0)={0x0, 0x164e, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x1f7ef4b9b79ecbfe, 0x1, 0x8}}, 0x1) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80004011}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40010) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x40}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x37, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$TCSETS(r1, 0x40045431, 0x0) r5 = syz_open_pts(r1, 0x80) dup3(r5, r1, 0x80000) read(r1, 0x0, 0x0) r6 = syz_usb_connect_ath9k(0x3, 0x97, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x16b2f3ab525d7a8, [{{0x9, 0x2, 0xfffffffffffffdf8}}]}}, 0x0) set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000700)={0x48, 0x16, 0x0, 0x0, 0xe160, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x10, &(0x7f0000000600)=ANY=[]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x8000, &(0x7f00000006c0)=0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x35, 0x8, 0x0, 0x0}}, 0x10) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 567.434319ms ago: executing program 1 (id=228): syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaab3e3bcdf56a08a2bf789aaaaaa0180c200003c08004500003c000000000006907864010102ac1414aa40010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac10000090780004131202722e3486ebd900"/28], 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) timer_create(0x6, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000040)="0118269db93bda7b297893dbebf7e87c", 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000100)=0xd5a2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x105040, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r6}) listen(r4, 0xfff) accept(r4, 0xfffffffffffffffd, &(0x7f0000000540)=0x11) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@echo=0x1ff) 522.133944ms ago: executing program 0 (id=229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) sendto$packet(r1, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x8800) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) 251.087071ms ago: executing program 1 (id=230): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe20, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x5) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x8002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000240)={0xf3, 0x6, 0x1}) r2 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) socket$netlink(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x414000) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000037000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000950000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 181.290065ms ago: executing program 0 (id=231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/schedstat\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b}) ioctl$UI_DEV_CREATE(r1, 0x5501) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9", 0x14}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0xb, 0x95, 0xd}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(0xffffffffffffffff) r8 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x800) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000e06010300000000000000000a00000a0900020073797a300000000005000100070000a4d41cd0c59b6aceece333d7000500010007000000"], 0x30}}, 0x20000004) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000400)=0x4, 0x4) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r9 = io_uring_setup(0x8000a, &(0x7f0000000040)={0x0, 0xe173, 0x1f400, 0x8, 0xc2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=232): timer_create(0x1, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1, 0x45, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'macsec0\x00', @ifru_mtu=0xfffffffc}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000002000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 73.120000][ T5609] cgroup: Unknown subsys name 'net' [ 73.268901][ T5609] cgroup: Unknown subsys name 'cpuset' [ 73.278693][ T5609] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.651820][ T5609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.933571][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.954190][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.962689][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.974001][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.980145][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.981852][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.994396][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.998228][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.004834][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.012015][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.026734][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.035668][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.037749][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.044699][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.059224][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.059912][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.067211][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.076064][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.082613][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.089342][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.096707][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.105035][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.111199][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.126426][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.134907][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.182282][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.190332][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.198147][ T5643] bridge_slave_0: entered allmulticast mode [ 78.205323][ T5643] bridge_slave_0: entered promiscuous mode [ 78.247729][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.255070][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.262481][ T5643] bridge_slave_1: entered allmulticast mode [ 78.270105][ T5643] bridge_slave_1: entered promiscuous mode [ 78.297698][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.304870][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.313352][ T5645] bridge_slave_0: entered allmulticast mode [ 78.320445][ T5645] bridge_slave_0: entered promiscuous mode [ 78.327840][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.334969][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.342605][ T5640] bridge_slave_0: entered allmulticast mode [ 78.349940][ T5640] bridge_slave_0: entered promiscuous mode [ 78.358388][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.365629][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.372812][ T5640] bridge_slave_1: entered allmulticast mode [ 78.381022][ T5640] bridge_slave_1: entered promiscuous mode [ 78.396336][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.403457][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.410837][ T5642] bridge_slave_0: entered allmulticast mode [ 78.417923][ T5642] bridge_slave_0: entered promiscuous mode [ 78.433386][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.441483][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.448796][ T5645] bridge_slave_1: entered allmulticast mode [ 78.455910][ T5645] bridge_slave_1: entered promiscuous mode [ 78.491352][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.498587][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.505990][ T5642] bridge_slave_1: entered allmulticast mode [ 78.513010][ T5642] bridge_slave_1: entered promiscuous mode [ 78.520311][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.527847][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.535131][ T5644] bridge_slave_0: entered allmulticast mode [ 78.542326][ T5644] bridge_slave_0: entered promiscuous mode [ 78.550169][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.557356][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.564571][ T5644] bridge_slave_1: entered allmulticast mode [ 78.571721][ T5644] bridge_slave_1: entered promiscuous mode [ 78.599454][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.611036][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.641769][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.653538][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.665372][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.715981][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.736688][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.749341][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.781884][ T5643] team0: Port device team_slave_0 added [ 78.789789][ T5643] team0: Port device team_slave_1 added [ 78.797827][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.808878][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.821438][ T5645] team0: Port device team_slave_0 added [ 78.837943][ T5640] team0: Port device team_slave_0 added [ 78.874700][ T5645] team0: Port device team_slave_1 added [ 78.891554][ T5640] team0: Port device team_slave_1 added [ 78.953437][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.960614][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.987180][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.001285][ T5642] team0: Port device team_slave_0 added [ 79.010238][ T5642] team0: Port device team_slave_1 added [ 79.017520][ T5644] team0: Port device team_slave_0 added [ 79.024246][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.035707][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.062368][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.076235][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.083417][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.110163][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.122705][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.130016][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.157686][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.180548][ T5644] team0: Port device team_slave_1 added [ 79.186729][ T5638] Bluetooth: hci1: command tx timeout [ 79.195994][ T5638] Bluetooth: hci2: command tx timeout [ 79.199892][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.202087][ T5624] Bluetooth: hci3: command tx timeout [ 79.208832][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.208857][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.218962][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.241343][ T5626] Bluetooth: hci4: command tx timeout [ 79.254980][ T5638] Bluetooth: hci0: command tx timeout [ 79.265550][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.302505][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.349632][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.357047][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.383616][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.396155][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.403128][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.429254][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.449760][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.456788][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.482827][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.496374][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.503643][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.529662][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.626243][ T5645] hsr_slave_0: entered promiscuous mode [ 79.633071][ T5645] hsr_slave_1: entered promiscuous mode [ 79.654852][ T5640] hsr_slave_0: entered promiscuous mode [ 79.661915][ T5640] hsr_slave_1: entered promiscuous mode [ 79.668347][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 79.674200][ T5640] Cannot create hsr debugfs directory [ 79.685911][ T5644] hsr_slave_0: entered promiscuous mode [ 79.692935][ T5644] hsr_slave_1: entered promiscuous mode [ 79.699182][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 79.704912][ T5644] Cannot create hsr debugfs directory [ 79.716509][ T5643] hsr_slave_0: entered promiscuous mode [ 79.722798][ T5643] hsr_slave_1: entered promiscuous mode [ 79.729079][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 79.734835][ T5643] Cannot create hsr debugfs directory [ 79.777831][ T5642] hsr_slave_0: entered promiscuous mode [ 79.784245][ T5642] hsr_slave_1: entered promiscuous mode [ 79.790680][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 79.796598][ T5642] Cannot create hsr debugfs directory [ 80.308861][ T5645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.325919][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.338313][ T5645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.351063][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.360295][ T5645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.370877][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.388223][ T5645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.399356][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.453179][ T5640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.464319][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.482353][ T5640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.492728][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.500633][ T5640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.511487][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.519688][ T5640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.528925][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.610785][ T5644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.623572][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.641178][ T5644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.651771][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.666318][ T5644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.678260][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.700365][ T5644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.710935][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.816811][ T5643] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.826589][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.841532][ T5643] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.851406][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.869394][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.878593][ T5643] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.889225][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.897747][ T5643] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.908475][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.999683][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.019905][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.027837][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.039955][ T5642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.051001][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.059583][ T5642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.070366][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.092720][ T5642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.103222][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.118245][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.126058][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.138720][ T5642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.148681][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.168958][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.253049][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.267411][ T5638] Bluetooth: hci3: command tx timeout [ 81.267428][ T5627] Bluetooth: hci4: command tx timeout [ 81.267452][ T5627] Bluetooth: hci2: command tx timeout [ 81.272868][ T5638] Bluetooth: hci1: command tx timeout [ 81.294588][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.301798][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.329734][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.336911][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.346485][ T5638] Bluetooth: hci0: command tx timeout [ 81.363407][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.441919][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.478603][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.485883][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.513543][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.531656][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.547771][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.554931][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.611844][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.624721][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.660848][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.668143][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.701768][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.717302][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.724486][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.735144][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.753309][ T5645] veth0_vlan: entered promiscuous mode [ 81.781475][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.788610][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.814031][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.821215][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.837056][ T5645] veth1_vlan: entered promiscuous mode [ 81.898892][ T5640] veth0_vlan: entered promiscuous mode [ 81.951785][ T5640] veth1_vlan: entered promiscuous mode [ 81.973065][ T5642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.992663][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.029851][ T5645] veth0_macvtap: entered promiscuous mode [ 82.047676][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.060018][ T5645] veth1_macvtap: entered promiscuous mode [ 82.111532][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.131750][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.141138][ T5640] veth0_macvtap: entered promiscuous mode [ 82.169586][ T5640] veth1_macvtap: entered promiscuous mode [ 82.183315][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.196977][ T5644] veth0_vlan: entered promiscuous mode [ 82.244104][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.266192][ T5644] veth1_vlan: entered promiscuous mode [ 82.298522][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.317043][ T76] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.363066][ T5643] veth0_vlan: entered promiscuous mode [ 82.423655][ T5644] veth0_macvtap: entered promiscuous mode [ 82.432958][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.441505][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.449297][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.460919][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.489298][ T5644] veth1_macvtap: entered promiscuous mode [ 82.506220][ T5643] veth1_vlan: entered promiscuous mode [ 82.518664][ T5642] veth0_vlan: entered promiscuous mode [ 82.536303][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.615762][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.629017][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.641490][ T5642] veth1_vlan: entered promiscuous mode [ 82.647499][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.656948][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.680124][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.728962][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.742280][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.755988][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.780108][ T5645] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.810015][ T5643] veth0_macvtap: entered promiscuous mode [ 82.839523][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.844658][ T5643] veth1_macvtap: entered promiscuous mode [ 82.851355][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.916002][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.013600][ T5642] veth0_macvtap: entered promiscuous mode [ 83.035999][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.052969][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.057196][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.079692][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.087107][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.117614][ T5642] veth1_macvtap: entered promiscuous mode [ 83.138500][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.160989][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.206202][ T5724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.224381][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.233303][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.236895][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.242940][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.251067][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.286535][ T76] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.309413][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.346613][ T5638] Bluetooth: hci2: command tx timeout [ 83.346666][ T5627] Bluetooth: hci4: command tx timeout [ 83.352613][ T5638] Bluetooth: hci1: command tx timeout [ 83.359735][ T5624] Bluetooth: hci3: command tx timeout [ 83.426007][ T5624] Bluetooth: hci0: command tx timeout [ 83.446978][ T771] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.448792][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.456606][ T771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.467287][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.480358][ T771] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.507156][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.525170][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.533807][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.547098][ T5728] mmap: syz.4.5 (5728) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.560188][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.568434][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.570854][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 83.605351][ T10] usb 3-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 83.618950][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.632154][ T10] usb 3-1: Product: syz [ 83.646053][ T10] usb 3-1: Manufacturer: syz [ 83.651321][ T10] usb 3-1: SerialNumber: syz [ 83.685134][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.685159][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.726160][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.726905][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 83.742650][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.757647][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 83.768827][ T771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.794100][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.805397][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.830851][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 83.856249][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.872472][ T9] usb 4-1: Product: syz [ 83.895527][ T9] usb 4-1: Manufacturer: syz [ 83.895549][ T9] usb 4-1: SerialNumber: syz [ 83.915158][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.915180][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.978155][ T5730] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.987996][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 84.134579][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 84.248619][ T5730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.249214][ T5730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.495810][ T9] usb 4-1: USB disconnect, device number 2 [ 84.587237][ T5681] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.713288][ T5744] bridge_slave_0: left allmulticast mode [ 84.720986][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.739019][ T5744] bridge_slave_0: left promiscuous mode [ 84.755118][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 84.755565][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.775643][ T5681] usb 5-1: unable to get BOS descriptor or descriptor too short [ 84.809962][ T5681] usb 5-1: config 1 has an invalid interface number: 8 but max is 2 [ 84.819469][ T5744] bridge_slave_1: left allmulticast mode [ 84.827978][ T5681] usb 5-1: config 1 has an invalid descriptor of length 124, skipping remainder of the config [ 84.852912][ T5681] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 84.875318][ T5681] usb 5-1: config 1 has no interface number 0 [ 84.886245][ T5744] bridge_slave_1: left promiscuous mode [ 84.909873][ T5681] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 1.36 [ 84.915229][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.928763][ T5681] usb 5-1: New USB device strings: Mfr=116, Product=3, SerialNumber=3 [ 84.967733][ T10] usb 3-1: USB disconnect, device number 2 [ 84.973957][ T5681] usb 5-1: Product: syz [ 84.989618][ T5681] usb 5-1: Manufacturer: syz [ 85.009851][ T5681] usb 5-1: SerialNumber: syz [ 85.050210][ T5754] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.109648][ T5744] bond0: (slave bond_slave_0): Releasing backup interface [ 85.167732][ T5744] bond0: (slave bond_slave_1): Releasing backup interface [ 85.215909][ T5744] team0: Port device team_slave_0 removed [ 85.273697][ T5744] team0: Port device team_slave_1 removed [ 85.321950][ T5681] usb 5-1: USB disconnect, device number 2 [ 85.337144][ T5744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.428331][ T5624] Bluetooth: hci1: command tx timeout [ 85.428375][ T5638] Bluetooth: hci3: command tx timeout [ 85.434494][ T5626] Bluetooth: hci2: command tx timeout [ 85.445429][ T5627] Bluetooth: hci4: command tx timeout [ 85.465964][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 85.495317][ T5744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.507777][ T5624] Bluetooth: hci0: command tx timeout [ 85.531801][ T5744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.575825][ T5744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.600412][ T5744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.665593][ T24] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 85.705302][ T24] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 85.732353][ T24] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 85.752629][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.786966][ T24] usb 4-1: Product: syz [ 85.800360][ T24] usb 4-1: Manufacturer: syz [ 85.817017][ T24] usb 4-1: SerialNumber: syz [ 86.138616][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.298909][ T809] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 86.307151][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 86.321895][ T24] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 86.354152][ T24] usb 1-1: config 0 has no interface number 0 [ 86.376542][ T24] usb 1-1: config 0 interface 12 has no altsetting 0 [ 86.393046][ T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 86.403738][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.413141][ T24] usb 1-1: Product: syz [ 86.418398][ T24] usb 1-1: Manufacturer: syz [ 86.423596][ T24] usb 1-1: SerialNumber: syz [ 86.434229][ T24] usb 1-1: config 0 descriptor?? [ 86.442847][ T5783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.466032][ T809] usb 5-1: device descriptor read/64, error -71 [ 86.482939][ T5783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17'. [ 86.492634][ T5783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17'. [ 86.546240][ T187] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.705869][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 86.727423][ T809] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 86.727757][ T187] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 86.758133][ T187] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 86.771796][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.781336][ T187] usb 2-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 86.791733][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.804324][ T187] usb 2-1: config 0 descriptor?? [ 86.897562][ T809] usb 5-1: device descriptor read/64, error -71 [ 87.017029][ T809] usb usb5-port1: attempt power cycle [ 87.023680][ T5779] xt_ipcomp: unknown flags 1D [ 87.077742][ T5779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.097499][ T5779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.305600][ T5703] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.323983][ T5779] openvswitch: netlink: Missing valid actions attribute. [ 87.347712][ T5779] openvswitch: netlink: Actions may not be safe on all matching packets [ 87.376339][ T809] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 87.414542][ T187] wacom 0003:056A:00C5.0001: ignoring exceeding usage max [ 87.422951][ T809] usb 5-1: device descriptor read/8, error -71 [ 87.437592][ T187] wacom 0003:056A:00C5.0001: unknown main item tag 0x3 [ 87.453962][ T187] wacom 0003:056A:00C5.0001: unknown main item tag 0x0 [ 87.465616][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 87.484657][ T5703] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.514367][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.518116][ T187] wacom 0003:056A:00C5.0001: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.1-1/input0 [ 87.561909][ T5703] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 87.574292][ T5703] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 87.584260][ T5703] usb 3-1: Product: syz [ 87.599863][ T5703] usb 3-1: Manufacturer: syz [ 87.608717][ T187] usb 2-1: USB disconnect, device number 2 [ 87.614965][ T5703] usb 3-1: SerialNumber: syz [ 87.654386][ T5703] usb 3-1: config 0 descriptor?? [ 87.696092][ T809] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 87.711241][ T5703] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 87.736840][ T809] usb 5-1: device descriptor read/8, error -71 [ 87.809192][ T5807] fido_id[5807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 87.845994][ T809] usb usb5-port1: unable to enumerate USB device [ 87.888267][ T5800] loop6: detected capacity change from 0 to 2640 [ 87.900105][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.913953][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.922430][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.930874][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.940688][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.957217][ T5814] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 87.967435][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.975388][ T5814] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 87.991460][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.999886][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.035281][ T5814] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 88.060799][ T809] usb 4-1: USB disconnect, device number 3 [ 88.089464][ T5800] ldm_validate_partition_table(): Disk read failed. [ 88.116826][ T5814] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 88.127295][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.135331][ T5800] Buffer I/O error on dev loop6, logical block 0, async page read [ 88.145990][ T5814] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 88.194405][ T5800] Dev loop6: unable to read RDB block 0 [ 88.215051][ T5814] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 88.255941][ T5800] loop6: unable to read partition table [ 88.272742][ T5800] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 88.289022][ T5814] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 88.337248][ T24] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: e8 failed: -71 [ 88.350970][ T24] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 88.371808][ T5814] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 88.383938][ T24] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 88.396652][ T24] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 88.452414][ T1032] usb 3-1: Failed to submit usb control message: -71 [ 88.463129][ T24] usb 1-1: USB disconnect, device number 2 [ 88.463909][ T5681] usb 3-1: USB disconnect, device number 3 [ 88.484121][ T1032] usb 3-1: unable to send the bmi data to the device: -71 [ 88.511418][ T1032] usb 3-1: unable to get target info from device [ 88.549331][ T1032] usb 3-1: could not get target info (-71) [ 88.573935][ T1032] usb 3-1: could not probe fw (-71) [ 88.949518][ T5681] IPVS: starting estimator thread 0... [ 88.965653][ T809] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.066463][ T5840] IPVS: using max 37 ests per chain, 88800 per kthread [ 89.147825][ T5845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25'. [ 89.171608][ T809] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 89.214038][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.232263][ T5846] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 89.284771][ T809] usb 2-1: Product: syz [ 89.304994][ T5846] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 89.315063][ T5849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.330730][ T809] usb 2-1: Manufacturer: syz [ 89.352253][ T809] usb 2-1: SerialNumber: syz [ 90.240936][ T809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 90.289628][ T809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 90.343052][ T809] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 90.392126][ T809] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 90.461091][ T809] usb 2-1: USB disconnect, device number 3 [ 90.915905][ T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 91.059979][ T24] usb 1-1: device descriptor read/64, error -71 [ 91.296727][ T5886] Zero length message leads to an empty skb [ 91.305564][ T5681] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 91.336177][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 91.467631][ T5681] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.480454][ T5681] usb 3-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 91.496051][ T24] usb 1-1: device descriptor read/64, error -71 [ 91.498608][ T5681] usb 3-1: config 1 interface 0 has no altsetting 0 [ 91.524736][ T5681] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.545249][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 91.555566][ T5717] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.573431][ T5681] usb 3-1: SerialNumber: syz [ 91.590390][ T5681] hub 3-1:1.0: bad descriptor, ignoring hub [ 91.606439][ T5681] hub 3-1:1.0: probe with driver hub failed with error -5 [ 91.617537][ T24] usb usb1-port1: attempt power cycle [ 91.624159][ T5681] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 91.728606][ T5717] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 91.741935][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.764234][ T5717] usb 5-1: config 0 descriptor?? [ 91.782455][ T5717] cp210x 5-1:0.0: cp210x converter detected [ 91.955621][ T24] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 91.987661][ T24] usb 1-1: device descriptor read/8, error -71 [ 92.082980][ T44] cfg80211: failed to load regulatory.db [ 92.247637][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 92.286661][ T24] usb 1-1: device descriptor read/8, error -71 [ 92.405818][ T24] usb usb1-port1: unable to enumerate USB device [ 92.421078][ T5717] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 92.448174][ T5717] usb 5-1: cp210x converter now attached to ttyUSB0 [ 92.799319][ T24] usb 5-1: USB disconnect, device number 7 [ 92.802375][ T5912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.44'. [ 92.852964][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 92.887651][ T24] cp210x 5-1:0.0: device disconnected [ 93.011431][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 93.124776][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 93.316049][ T5681] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 93.354323][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 93.398569][ T5681] usb 3-1: USB disconnect, device number 4 [ 93.918711][ T5936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.941040][ T5681] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.126973][ T5681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 94.154091][ T5681] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 94.167920][ T5681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 94.183101][ T5681] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 94.204226][ T5681] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 94.213797][ T187] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 94.226162][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.245882][ T5681] usb 3-1: config 0 descriptor?? [ 94.390488][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.408706][ T187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.422925][ T187] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.441719][ T187] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.451856][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.481338][ T5681] hdpvr 3-1:0.0: firmware version 0x1e dated Š [ 94.495236][ T187] usb 5-1: config 0 descriptor?? [ 94.528024][ T10] bridge0: entered promiscuous mode [ 94.539810][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.566250][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.646590][ T5726] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 94.830813][ T5726] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.854950][ T5726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.870312][ T5726] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.883745][ T5726] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.895077][ T5726] usb 1-1: config 1 interface 0 has no altsetting 0 [ 94.921821][ T5726] usb 1-1: string descriptor 0 read error: -22 [ 94.929746][ T5726] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 94.940607][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.951686][ T5937] netlink: 392 bytes leftover after parsing attributes in process `syz.4.50'. [ 95.085086][ T187] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 95.235609][ T809] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 95.297339][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 95.410697][ T809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.417626][ T5726] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 95.432563][ T809] usb 2-1: not running at top speed; connect to a high speed hub [ 95.433881][ T5726] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 95.459666][ T809] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 95.460963][ T5726] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 95.474651][ T809] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 95.476854][ T5726] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 95.495628][ T5726] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 95.502673][ T5726] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 95.512066][ T5726] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 95.519507][ T5726] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 95.527146][ T5726] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 95.528152][ T809] usb 2-1: config 5 has no interface number 0 [ 95.534186][ T5726] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 95.556566][ T809] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.575594][ T809] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.622789][ T809] usb 2-1: config 5 interface 246 has no altsetting 0 [ 95.643988][ T5726] kone 0003:1E7D:2CED.0003: hidraw1: USB HID v0.05 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 95.651231][ T809] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 95.671476][ T5726] kone 0003:1E7D:2CED.0003: couldn't init struct kone_device [ 95.679658][ T5726] kone 0003:1E7D:2CED.0003: couldn't install mouse [ 95.698581][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.712769][ T5726] kone 0003:1E7D:2CED.0003: probe with driver kone failed with error -5 [ 95.715512][ T809] usb 2-1: Product: syz [ 95.736465][ T809] usb 2-1: Manufacturer: syz [ 95.744753][ T809] usb 2-1: SerialNumber: syz [ 95.756575][ T5726] usb 1-1: USB disconnect, device number 7 [ 95.801263][ T5969] fido_id[5969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 96.023145][ T809] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 96.024445][ T13] usb 2-1: Failed to submit usb control message: -71 [ 96.041739][ T809] usb 2-1: USB disconnect, device number 4 [ 96.069281][ T13] usb 2-1: unable to send the bmi data to the device: -71 [ 96.093698][ T13] usb 2-1: unable to get target info from device [ 96.105559][ T13] usb 2-1: could not get target info (-71) [ 96.111988][ T13] usb 2-1: could not probe fw (-71) [ 96.596713][ T5717] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 96.691259][ T5681] hdpvr 3-1:0.0: Could not setup controls [ 96.717164][ T5681] hdpvr 3-1:0.0: registering videodev failed [ 96.761425][ T5681] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 96.794326][ T5681] usb 3-1: USB disconnect, device number 5 [ 96.834585][ T5717] usb 4-1: unable to get BOS descriptor or descriptor too short [ 96.865423][ T5717] usb 4-1: no configurations [ 96.895853][ T5717] usb 4-1: can't read configurations, error -22 [ 96.971925][ T5986] sctp: [Deprecated]: syz.3.61 (pid 5986) Use of int in max_burst socket option. [ 96.971925][ T5986] Use struct sctp_assoc_value instead [ 97.003880][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.083413][ T809] usb 5-1: USB disconnect, device number 8 [ 97.145555][ T5681] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 97.175514][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 97.201588][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.225541][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.252570][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 97.273258][ T10] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 97.297624][ T10] usb 2-1: Product: syz [ 97.308094][ T10] usb 2-1: Manufacturer: syz [ 97.317166][ T5681] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.327890][ T10] usb 2-1: SerialNumber: syz [ 97.332760][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.350609][ T10] usb 2-1: config 0 descriptor?? [ 97.361774][ T5681] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.375689][ T5681] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.399216][ T5681] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.414522][ T10] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 97.438645][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.470185][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'. [ 97.487343][ T5681] usb 3-1: Product: syz [ 97.496462][ T5681] usb 3-1: Manufacturer: syz [ 97.536691][ T5681] cdc_wdm 3-1:1.0: skipping garbage [ 97.553974][ T5681] cdc_wdm 3-1:1.0: skipping garbage [ 97.588362][ T5983] loop6: detected capacity change from 0 to 2640 [ 97.610557][ T5681] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 97.623486][ T5993] bond0: (slave bond_slave_1): Releasing backup interface [ 97.638691][ T5983] buffer_io_error: 6 callbacks suppressed [ 97.638709][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.655135][ T5681] cdc_wdm 3-1:1.0: Unknown control protocol [ 97.697352][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.700235][ T5998] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 97.738165][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.773492][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.797717][ T5998] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 97.838949][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.874867][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.890742][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.905821][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 97.950397][ T5998] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 98.000836][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.018208][ T5998] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 98.080146][ T5983] ldm_validate_partition_table(): Disk read failed. [ 98.119003][ T10] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 98.128728][ T5998] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 98.157137][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.181738][ T5998] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 98.203792][ T10] usb 5-1: config 0 descriptor?? [ 98.218445][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.289769][ T5998] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 98.300796][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 98.340680][ T5998] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 98.374587][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.472057][ T5983] Dev loop6: unable to read RDB block 0 [ 98.487123][ T1032] usb 2-1: Failed to submit usb control message: -110 [ 98.512276][ T1032] usb 2-1: unable to send the bmi data to the device: -110 [ 98.515884][ T5983] loop6: unable to read partition table [ 98.533484][ T1032] usb 2-1: unable to get target info from device [ 98.550670][ T1032] usb 2-1: could not get target info (-110) [ 98.578689][ T5983] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 98.580127][ T1032] usb 2-1: could not probe fw (-110) [ 98.599068][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 98.600065][ T24] usb 3-1: USB disconnect, device number 6 [ 98.605965][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 98.617761][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 98.737315][ T5726] usb 2-1: USB disconnect, device number 5 [ 99.455473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 99.664287][ T6009] syz.0.69 uses obsolete (PF_INET,SOCK_PACKET) [ 99.898336][ T5681] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.077399][ T5681] usb 2-1: device descriptor read/64, error -71 [ 100.246210][ T6007] netlink: 'syz.2.68': attribute type 10 has an invalid length. [ 100.284507][ T6007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.68'. [ 100.297169][ T6007] dummy0: entered promiscuous mode [ 100.305341][ T6007] bridge0: port 3(dummy0) entered blocking state [ 100.313087][ T6007] bridge0: port 3(dummy0) entered disabled state [ 100.321350][ T6007] dummy0: entered allmulticast mode [ 100.350679][ T6007] bridge0: port 3(dummy0) entered blocking state [ 100.357214][ T6007] bridge0: port 3(dummy0) entered forwarding state [ 100.364176][ T5681] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 100.372383][ T5726] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.386531][ T10] gp8psk: usb in 128 operation failed. [ 100.396602][ T10] gp8psk: usb in 137 operation failed. [ 100.413479][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 100.426632][ T6018] dummy0: left allmulticast mode [ 100.435156][ T6018] bridge0: port 3(dummy0) entered disabled state [ 100.444854][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 100.504126][ T6018] bridge_slave_0: left allmulticast mode [ 100.516521][ T5681] usb 2-1: device descriptor read/64, error -71 [ 100.536627][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 100.549426][ T6018] bridge_slave_0: left promiscuous mode [ 100.550965][ T5726] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 100.577107][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.584139][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.592808][ T5726] usb 4-1: Product: syz [ 100.611572][ T5726] usb 4-1: Manufacturer: syz [ 100.638041][ T5681] usb usb2-port1: attempt power cycle [ 100.644903][ T5726] usb 4-1: SerialNumber: syz [ 100.687445][ T24] usb 5-1: USB disconnect, device number 9 [ 100.711256][ T6018] bridge_slave_1: left allmulticast mode [ 100.724633][ T6018] bridge_slave_1: left promiscuous mode [ 100.738047][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.753348][ T6018] bond0: (slave bond_slave_0): Releasing backup interface [ 100.769295][ T6018] bond0: (slave bond_slave_1): Releasing backup interface [ 100.784698][ T6018] team0: Port device team_slave_0 removed [ 100.799201][ T6018] team0: Port device team_slave_1 removed [ 100.808376][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.819192][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.828943][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.837053][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.848642][ T6018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.881553][ T6023] team0: Port device xfrm0 added [ 100.888669][ T6007] tipc: Started in network mode [ 100.896295][ T6007] tipc: Node identity 8aeab81e25e, cluster identity 4711 [ 100.901067][ T5726] mxuport 4-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 100.905107][ T6007] tipc: Enabled bearer , priority 0 [ 100.942540][ T5726] mxuport 4-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 100.964697][ T5726] mxuport 4-1:254.0: probe with driver mxuport failed with error -71 [ 100.986173][ T5681] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 101.006470][ T5726] usb 4-1: USB disconnect, device number 6 [ 101.021495][ T5681] usb 2-1: device descriptor read/8, error -71 [ 101.287021][ T5681] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 101.306586][ T5681] usb 2-1: device descriptor read/8, error -71 [ 101.335564][ T5726] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.415667][ T187] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 101.424656][ T5681] usb usb2-port1: unable to enumerate USB device [ 101.435870][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.507126][ T5717] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 101.507792][ T5726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.526489][ T5726] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.539058][ T5726] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.548463][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.557446][ T5726] usb 4-1: SerialNumber: syz [ 101.577874][ T187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 101.587603][ T187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.598028][ T187] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.599636][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.607560][ T187] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 101.607603][ T187] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 101.607662][ T187] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 101.619826][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.630950][ T187] usb 5-1: config 1 interface 1 has no altsetting 0 [ 101.646131][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.659200][ T187] usb 5-1: string descriptor 0 read error: -22 [ 101.666215][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.675039][ T187] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 101.685175][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.717174][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.725697][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.738906][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.749417][ T5717] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.762950][ T5717] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.772254][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.787511][ T24] usb 3-1: config 0 descriptor?? [ 101.802776][ T5717] usb 1-1: config 0 descriptor?? [ 101.840864][ T809] IPVS: starting estimator thread 0... [ 101.935544][ T6044] IPVS: using max 30 ests per chain, 72000 per kthread [ 102.027096][ T809] tipc: Node number set to 2936715294 [ 102.207679][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 102.214634][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 102.246243][ T24] usb 3-1: USB disconnect, device number 7 [ 102.594769][ T187] usb 5-1: 2:0: failed to get current value for ch 1 (-32) [ 102.603792][ T6049] binder: 6045:6049 ioctl c018620c 200000000000 returned -22 [ 102.788133][ T6052] use of bytesused == 0 is deprecated and will be removed in the future, [ 102.827185][ T6052] use the actual size instead. [ 102.914482][ T5726] usb 4-1: 0:2 : does not exist [ 102.923951][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 102.968261][ T187] usb 5-1: USB disconnect, device number 10 [ 103.061713][ T5726] usb 4-1: USB disconnect, device number 7 [ 103.118615][ T6061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.260379][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 103.535579][ T5726] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 103.565827][ T187] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 103.712403][ T5726] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 103.735518][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.753460][ T187] usb 5-1: Using ep0 maxpacket: 8 [ 103.770969][ T187] usb 5-1: config 252 interface 0 has no altsetting 0 [ 103.800679][ T187] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 103.833808][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.851230][ T5726] usb 4-1: selecting invalid altsetting 3 [ 103.865552][ T5726] comedi comedi5: could not set alternate setting 3 in high speed [ 103.886943][ T187] pvrusb2: Hardware description: Terratec Grabster AV400 [ 103.899228][ T5726] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 103.913059][ T187] pvrusb2: ********** [ 103.923666][ T187] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 103.943432][ T5726] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 103.959795][ T187] pvrusb2: Important functionality might not be entirely working. [ 103.992988][ T187] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 104.043436][ T187] pvrusb2: ********** [ 104.058204][ T187] usb 5-1: selecting invalid altsetting 0 [ 104.106329][ T2368] pvrusb2: Invalid write control endpoint [ 104.133177][ T44] usb 4-1: USB disconnect, device number 8 [ 104.369360][ T2368] pvrusb2: Invalid write control endpoint [ 104.401506][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 104.440034][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 104.463389][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 104.503657][ T2368] pvrusb2: Device being rendered inoperable [ 104.530998][ T6063] pvrusb2: Attempted to execute control transfer when device not ok [ 104.564676][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 104.565625][ T5717] usbhid 1-1:0.0: can't add hid device: -71 [ 104.590200][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 104.631292][ T5717] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 104.660960][ T2368] pvrusb2: Attached sub-driver cx25840 [ 104.675407][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 104.695500][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 104.733837][ T5717] usb 1-1: USB disconnect, device number 8 [ 105.245776][ T5717] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 105.417585][ T5717] usb 1-1: Using ep0 maxpacket: 8 [ 105.441498][ T5717] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 105.464187][ T5717] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.485687][ T5717] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.503026][ T5717] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.513777][ T44] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.541753][ T5717] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.586931][ T5717] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.604759][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.700017][ T44] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 105.718888][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.742646][ T44] usb 4-1: Product: syz [ 105.752177][ T44] usb 4-1: Manufacturer: syz [ 105.759909][ T44] usb 4-1: SerialNumber: syz [ 105.794238][ T44] usb 4-1: config 0 descriptor?? [ 105.837567][ T5717] usb 1-1: usb_control_msg returned -32 [ 105.853795][ T5717] usbtmc 1-1:16.0: can't read capabilities [ 105.882892][ T5624] Bluetooth: hci5: urb ffff88803180b000 submission failed (2) [ 106.006636][ T5717] usb 5-1: USB disconnect, device number 11 [ 106.047328][ T44] usb 4-1: USB disconnect, device number 9 [ 106.273990][ T6093] usbtmc 1-1:16.0: control status returned 0 [ 106.330406][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 106.592108][ T6100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.93'. [ 106.631427][ T6100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.93'. [ 106.789703][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 106.865579][ T6104] netlink: 60 bytes leftover after parsing attributes in process `syz.4.95'. [ 106.935005][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.001424][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.196218][ T44] usb 1-1: USB disconnect, device number 9 [ 107.747076][ T809] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 107.927046][ T809] usb 4-1: not running at top speed; connect to a high speed hub [ 107.960349][ T809] usb 4-1: config 1 interface 0 altsetting 49 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.021076][ T809] usb 4-1: config 1 interface 0 has no altsetting 0 [ 108.083531][ T809] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 108.128322][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.171097][ T809] usb 4-1: Product: syz [ 108.198419][ T809] usb 4-1: Manufacturer: syz [ 108.214141][ T809] usb 4-1: SerialNumber: syz [ 108.406424][ T6130] xt_hashlimit: size too large, truncated to 1048576 [ 108.441979][ T6130] xt_hashlimit: max too large, truncated to 1048576 [ 108.564156][ T809] usbhid 4-1:1.0: can't add hid device: -71 [ 108.586475][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 108.587046][ T809] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 108.665640][ T809] usb 4-1: USB disconnect, device number 10 [ 108.832411][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.841323][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.942989][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 109.073009][ T6133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.119872][ T6133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.201218][ T6142] netlink: 'syz.0.104': attribute type 4 has an invalid length. [ 109.277814][ T6146] netlink: 'syz.0.104': attribute type 4 has an invalid length. [ 109.851094][ T6144] ip6tnl1: entered promiscuous mode [ 109.965831][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.993733][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.020751][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.046154][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.136839][ T809] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.322244][ T809] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.337412][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.349358][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 110.370932][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.413267][ T809] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.450304][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.496160][ T809] usb 3-1: config 0 descriptor?? [ 110.756516][ T5717] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 110.937338][ T809] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 110.956900][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 110.964049][ T5717] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 110.979193][ T5717] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.988358][ T5717] usb 4-1: config 0 has no interface number 0 [ 110.994779][ T5717] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid maxpacket 65280, setting to 1024 [ 111.009343][ T5717] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 111.021317][ T5717] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 111.037307][ T5717] usb 4-1: config 0 has no interface number 0 [ 111.045637][ T44] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 111.068585][ T5717] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid maxpacket 65280, setting to 1024 [ 111.100082][ T5717] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 111.138122][ T5717] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 111.146558][ T5717] usb 4-1: config 0 has no interface number 0 [ 111.159537][ T5717] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid maxpacket 65280, setting to 1024 [ 111.177737][ T5717] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 111.199221][ T5717] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 111.208327][ T44] usb 1-1: device descriptor read/64, error -71 [ 111.214950][ T5717] usb 4-1: config 0 has no interface number 0 [ 111.225670][ T5717] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid maxpacket 65280, setting to 1024 [ 111.256273][ T5717] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 111.283605][ T5717] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 111.292998][ T5717] usb 4-1: config 0 has no interface number 0 [ 111.300810][ T5717] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid maxpacket 65280, setting to 1024 [ 111.312814][ T5717] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 111.327688][ T5717] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 111.336523][ T5717] usb 4-1: config 0 has no interface number 0 [ 111.345272][ T5717] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid maxpacket 65280, setting to 1024 [ 111.363602][ T5717] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 111.385310][ T5717] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 111.396244][ T5717] usb 4-1: config 0 has no interface number 0 [ 111.404918][ T5717] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid maxpacket 65280, setting to 1024 [ 111.418279][ T5717] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 111.430232][ T5717] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 111.439534][ T5717] usb 4-1: config 0 has no interface number 0 [ 111.447120][ T5717] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid maxpacket 65280, setting to 1024 [ 111.459337][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 111.474254][ T5717] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 111.489238][ T5717] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 111.502190][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.516479][ T5717] usb 4-1: Product: syz [ 111.522050][ T5717] usb 4-1: Manufacturer: syz [ 111.528055][ T5717] usb 4-1: SerialNumber: syz [ 111.536734][ T6170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.107'. [ 111.554181][ T5717] usb 4-1: config 0 descriptor?? [ 111.565981][ T6170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.580971][ T6160] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 111.584197][ T6170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.606936][ T44] usb 1-1: device descriptor read/64, error -71 [ 111.614478][ T5717] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 111.725919][ T44] usb usb1-port1: attempt power cycle [ 111.848070][ T5717] etas_es58x 4-1:0.2: could not retrieve the product info string [ 111.936606][ T5717] usb 4-1: USB disconnect, device number 11 [ 111.944840][ T5717] etas_es58x 4-1:0.2: Disconnecting syz syz [ 112.075635][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 112.106588][ T44] usb 1-1: device descriptor read/8, error -71 [ 112.376749][ T44] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 112.437109][ T44] usb 1-1: device descriptor read/8, error -71 [ 112.555973][ T44] usb usb1-port1: unable to enumerate USB device [ 112.735835][ T187] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 112.739166][ T5717] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 112.905579][ T187] usb 3-1: device descriptor read/64, error -32 [ 112.930356][ T5717] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 112.945957][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.969417][ T5717] usb 4-1: Product: syz [ 112.981092][ T5717] usb 4-1: Manufacturer: syz [ 112.995690][ T5717] usb 4-1: SerialNumber: syz [ 113.012848][ T5717] usb 4-1: config 0 descriptor?? [ 113.155747][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 113.203263][ T187] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 113.356093][ T187] usb 3-1: device descriptor read/64, error -32 [ 113.450029][ T6217] kvm: pic: non byte write [ 113.495377][ T5717] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 113.512708][ T6217] process 'syz.3.116' launched './file0' with NULL argv: empty string added [ 113.535872][ T5717] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 113.580414][ T6217] Invalid argument reading file caps for ./file0 [ 113.593658][ T5717] usb 4-1: USB disconnect, device number 12 [ 113.635976][ T187] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 113.720256][ T187] usb 3-1: device descriptor read/8, error -71 [ 113.995826][ T6234] fuse: Unknown parameter '0177777777777777777777700000000000000000008' [ 114.513803][ T6243] input: syz1 as /devices/virtual/input/input9 [ 114.650151][ T9] usb 3-1: USB disconnect, device number 8 [ 115.111507][ T6239] syz.0.122 (6239): drop_caches: 2 [ 115.385539][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 115.579002][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 115.617799][ T6271] fuse: Unknown parameter '00000000000568246965(' [ 115.630841][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.679948][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.718223][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 115.745129][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.127'. [ 115.768730][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.127'. [ 115.779546][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 115.820557][ T6259] netlink: 22 bytes leftover after parsing attributes in process `syz.4.127'. [ 115.889122][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 115.925017][ T9] usb 4-1: Manufacturer: syz [ 115.958515][ T29] audit: type=1326 audit(1785497850.077:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.1.133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab39e019 code=0x7ffc0000 [ 116.023587][ T29] audit: type=1326 audit(1785497850.077:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.1.133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab39e019 code=0x7ffc0000 [ 116.030064][ T9] usb 4-1: config 0 descriptor?? [ 116.132026][ T29] audit: type=1326 audit(1785497850.077:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.1.133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab39e019 code=0x7ffc0000 [ 116.160344][ T29] audit: type=1326 audit(1785497850.077:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.1.133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab39e019 code=0x7ffc0000 [ 116.198774][ T29] audit: type=1326 audit(1785497850.107:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.1.133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44ab39e019 code=0x7ffc0000 [ 116.257186][ T29] audit: type=1326 audit(1785497850.107:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.1.133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab39e019 code=0x7ffc0000 [ 116.307235][ T29] audit: type=1326 audit(1785497850.107:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.1.133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab39e019 code=0x7ffc0000 [ 116.345886][ T29] audit: type=1326 audit(1785497850.117:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.1.133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab39e019 code=0x7ffc0000 [ 116.370131][ T809] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 116.379488][ T5726] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 116.383731][ T29] audit: type=1326 audit(1785497850.117:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.1.133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab39e019 code=0x7ffc0000 [ 116.443527][ T29] audit: type=1326 audit(1785497850.117:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6279 comm="syz.1.133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f44ab39dd82 code=0x7ffc0000 [ 116.550204][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.572203][ T809] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.585638][ T5726] usb 2-1: Using ep0 maxpacket: 8 [ 116.621264][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.624897][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 116.653713][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.668301][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.695290][ T809] usb 5-1: config 0 descriptor?? [ 116.709592][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.727204][ T9] appleir 0003:05AC:8243.0005: item fetching failed at offset 0/1 [ 116.741757][ T9] appleir 0003:05AC:8243.0005: parse failed [ 116.752594][ T5726] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.775821][ T9] appleir 0003:05AC:8243.0005: probe with driver appleir failed with error -22 [ 116.795712][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 116.818469][ T5726] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 116.845925][ T5726] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 116.868259][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.908976][ T5726] usb 2-1: config 0 descriptor?? [ 116.918337][ T6281] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.926951][ T809] usbhid 5-1:0.0: can't add hid device: -71 [ 116.944316][ T809] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 116.974774][ T24] usb 4-1: USB disconnect, device number 13 [ 117.038413][ T809] usb 5-1: USB disconnect, device number 12 [ 117.125648][ T5717] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 117.137510][ T5627] Bluetooth: hci5: unexpected event 0x06 length: 0 < 3 [ 117.144800][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.151965][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.159069][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.166086][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.173269][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.180279][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.187403][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.194708][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.203985][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.211045][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.219442][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.226555][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.233615][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.240607][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.247684][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.254753][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.261881][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.268863][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.275873][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.283191][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.290314][ T5627] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 117.457139][ T5717] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 117.476734][ T5717] usb 3-1: config 0 has no interface number 0 [ 117.483191][ T5717] usb 3-1: config 0 interface 41 has no altsetting 0 [ 117.517221][ T5717] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 117.542876][ T5726] usb 2-1: USB disconnect, device number 10 [ 117.544836][ T5624] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 117.564002][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.575659][ T5717] usb 3-1: Product: syz [ 117.579895][ T5717] usb 3-1: Manufacturer: syz [ 117.584615][ T5717] usb 3-1: SerialNumber: syz [ 117.589843][ T809] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 117.608510][ T5717] usb 3-1: config 0 descriptor?? [ 117.749629][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 117.767795][ T809] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 117.785961][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.814831][ T809] usb 5-1: config 0 descriptor?? [ 117.926612][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 117.935105][ T5717] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 117.977259][ T5717] usb 3-1: USB disconnect, device number 9 [ 118.046524][ T6284] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 118.083857][ T6284] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 118.101361][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 118.119736][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.147688][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.189066][ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 118.198896][ T24] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 118.213513][ T24] usb 4-1: Product: syz [ 118.221769][ T24] usb 4-1: Manufacturer: syz [ 118.251993][ T24] usb 4-1: SerialNumber: syz [ 118.288889][ T809] hid (null): invalid report_size 12130 [ 118.299382][ T24] usb 4-1: config 0 descriptor?? [ 118.339749][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 118.352516][ T809] hid_parser_main: 4005 callbacks suppressed [ 118.352531][ T809] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 118.414628][ T809] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 118.445253][ T6317] usb usb7: usbfs: process 6317 (syz.2.142) did not claim interface 0 before use [ 118.467444][ T809] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 118.486556][ T809] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 118.505758][ T809] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 118.527973][ T6302] loop6: detected capacity change from 0 to 2640 [ 118.538292][ T809] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 118.567319][ T6302] buffer_io_error: 6 callbacks suppressed [ 118.567330][ T6302] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.585995][ T809] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 118.616141][ T6302] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.643198][ T6323] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 118.645016][ T809] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 118.681646][ T6302] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.700102][ T809] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 118.715617][ T6323] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 118.730759][ T809] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 118.753057][ T809] logitech-djreceiver 0003:046D:C71F.0006: invalid report_size 12130 [ 118.762202][ T6302] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.775576][ T6323] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 118.791045][ T809] logitech-djreceiver 0003:046D:C71F.0006: item 0 2 1 7 parsing failed [ 118.806088][ T809] logitech-djreceiver 0003:046D:C71F.0006: logi_dj_probe: parse failed [ 118.819600][ T6323] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 118.835707][ T809] logitech-djreceiver 0003:046D:C71F.0006: probe with driver logitech-djreceiver failed with error -22 [ 118.886146][ T6302] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.902493][ T6323] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 118.945825][ T5726] usb 5-1: USB disconnect, device number 13 [ 118.964792][ T6302] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.027115][ T6302] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.037277][ T6323] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 119.091026][ T6323] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 119.140158][ T6302] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.152812][ T6323] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 119.165933][ T6302] ldm_validate_partition_table(): Disk read failed. [ 119.180720][ T6302] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.193745][ T6302] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.217883][ T6302] Dev loop6: unable to read RDB block 0 [ 119.225306][ T6302] loop6: unable to read partition table [ 119.242389][ T6302] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 119.253712][ T6330] netlink: 'syz.1.144': attribute type 13 has an invalid length. [ 119.276373][ T6330] netlink: 'syz.1.144': attribute type 27 has an invalid length. [ 119.287789][ T187] usb 4-1: USB disconnect, device number 14 [ 119.314411][ T76] usb 4-1: Failed to submit usb control message: -71 [ 119.356507][ T76] usb 4-1: unable to send the bmi data to the device: -71 [ 119.382899][ T76] usb 4-1: unable to get target info from device [ 119.405375][ T76] usb 4-1: could not get target info (-71) [ 119.426032][ T76] usb 4-1: could not probe fw (-71) [ 119.829482][ T809] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 119.991842][ T809] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.002103][ T809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.018357][ T809] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.030098][ T809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.052067][ T809] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.064602][ T809] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.073182][ T809] usb 5-1: Product: syz [ 120.098511][ T809] usb 5-1: Manufacturer: syz [ 120.127574][ T809] cdc_wdm 5-1:1.0: skipping garbage [ 120.161834][ T809] cdc_wdm 5-1:1.0: skipping garbage [ 120.205181][ T809] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 120.231816][ T809] cdc_wdm 5-1:1.0: Unknown control protocol [ 120.345284][ T5726] usb 5-1: USB disconnect, device number 14 [ 120.467720][ T6342] binder_alloc: binder_alloc_mmap_handler: 6341 200000ffd000-200001000000 already mapped failed -16 [ 120.508144][ T6351] binder: BINDER_SET_CONTEXT_MGR already set [ 120.563165][ T6342] binder_alloc: binder_alloc_mmap_handler: 6341 200000ffd000-200001000000 already mapped failed -16 [ 120.596312][ T6351] binder: 6341:6351 ioctl 4018620d 200000000040 returned -16 [ 120.638349][ T6351] binder: BINDER_SET_CONTEXT_MGR already set [ 120.668196][ T6351] binder: 6341:6351 ioctl 4018620d 200000000040 returned -16 [ 120.706942][ T6342] binder_alloc: binder_alloc_mmap_handler: 6341 200000ffd000-200001000000 already mapped failed -16 [ 120.727870][ T6351] binder: BINDER_SET_CONTEXT_MGR already set [ 120.740922][ T6351] binder: 6341:6351 ioctl 4018620d 200000000040 returned -16 [ 120.765138][ T6351] binder: BINDER_SET_CONTEXT_MGR already set [ 120.824964][ T6351] binder: 6341:6351 ioctl 4018620d 200000000040 returned -16 [ 120.875766][ T5726] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 121.071894][ T5726] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.105401][ T5726] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.155233][ T5726] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.174059][ T5726] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.208546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.259786][ T5726] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.280122][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.318982][ T5726] usb 5-1: Product: syz [ 121.349997][ T5726] usb 5-1: Manufacturer: syz [ 121.381886][ T5726] cdc_wdm 5-1:1.0: skipping garbage [ 121.418348][ T5726] cdc_wdm 5-1:1.0: skipping garbage [ 121.456516][ T5726] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 121.527282][ T5726] cdc_wdm 5-1:1.0: Unknown control protocol [ 122.139481][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.171141][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.202458][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.234185][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.264305][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'. [ 123.520796][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 123.825829][ T809] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 124.015763][ T809] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 124.038390][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.048074][ T809] usb 2-1: Product: syz [ 124.054737][ T809] usb 2-1: Manufacturer: syz [ 124.071346][ T809] usb 2-1: SerialNumber: syz [ 124.101240][ T809] ums-karma 2-1:1.0: USB Mass Storage device detected [ 124.138115][ T809] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 124.138115][ T809] Please send a copy of this message to and [ 124.179382][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.186216][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.192691][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.199319][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.205625][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.212235][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.219261][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.226002][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.232796][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.239408][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.245866][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.252523][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.259752][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.266389][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.272698][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.279332][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.285629][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.292409][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.298664][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 124.305275][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 124.312521][ T24] usb 5-1: USB disconnect, device number 15 [ 124.318587][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 124.609844][ T809] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 124.643436][ T809] usb 2-1: USB disconnect, device number 11 [ 124.816111][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 124.955593][ T44] usb 4-1: device descriptor read/64, error -71 [ 125.205663][ T44] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 125.365905][ T44] usb 4-1: device descriptor read/64, error -71 [ 125.487138][ T44] usb usb4-port1: attempt power cycle [ 125.647221][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 125.817329][ T9] usb 2-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 125.839595][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.855933][ T44] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 125.869561][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.879094][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.917384][ T44] usb 4-1: device descriptor read/8, error -71 [ 125.935515][ T9] usb 2-1: SerialNumber: syz [ 126.165551][ T44] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 126.185161][ T9] usb 2-1: 0:2 : does not exist [ 126.226556][ T44] usb 4-1: device descriptor read/8, error -71 [ 126.311717][ T9] usb 2-1: USB disconnect, device number 12 [ 126.359549][ T44] usb usb4-port1: unable to enumerate USB device [ 126.974166][ T6457] sch_tbf: peakrate 216 is lower than or equals to rate 25783 ! [ 127.245618][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 127.387773][ T9] usb 2-1: device descriptor read/64, error -71 [ 127.451080][ T6467] dlm: Unknown command passed to DLM device : 3 [ 127.451080][ T6467] [ 127.649166][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 127.656947][ T187] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 127.805543][ T9] usb 2-1: device descriptor read/64, error -71 [ 127.827165][ T187] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.850882][ T187] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 127.850924][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.863254][ T187] usb 1-1: config 0 descriptor?? [ 127.865639][ T809] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 127.868364][ T187] pwc: Askey VC010 type 2 USB webcam detected. [ 127.919262][ T9] usb usb2-port1: attempt power cycle [ 128.035556][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 128.052318][ T809] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 128.073152][ T809] usb 3-1: config 0 has no interface number 0 [ 128.093068][ T809] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 128.115675][ T809] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 128.139692][ T809] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 128.139723][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.167309][ T809] usb 3-1: Product: syz [ 128.167334][ T809] usb 3-1: Manufacturer: syz [ 128.167349][ T809] usb 3-1: SerialNumber: syz [ 128.181723][ T809] usb 3-1: config 0 descriptor?? [ 128.198051][ T6474] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.198219][ T6474] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.255921][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 128.274868][ T187] pwc: recv_control_msg error -32 req 02 val 2b00 [ 128.298199][ T187] pwc: recv_control_msg error -32 req 02 val 2700 [ 128.312865][ T9] usb 2-1: device descriptor read/8, error -71 [ 128.402204][ T6474] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.415815][ T6474] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.555703][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 128.596327][ T9] usb 2-1: device descriptor read/8, error -71 [ 128.638702][ T187] pwc: recv_control_msg error -32 req 04 val 1000 [ 128.639019][ T809] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 128.674570][ T187] pwc: recv_control_msg error -32 req 04 val 1300 [ 128.716262][ T9] usb usb2-port1: unable to enumerate USB device [ 128.893949][ T187] pwc: recv_control_msg error -71 req 02 val 2000 [ 128.915267][ T187] pwc: recv_control_msg error -71 req 02 val 2100 [ 128.924106][ T187] pwc: recv_control_msg error -71 req 04 val 1500 [ 128.932216][ T187] pwc: recv_control_msg error -71 req 02 val 2500 [ 128.939893][ T187] pwc: recv_control_msg error -71 req 02 val 2400 [ 128.948152][ T187] pwc: recv_control_msg error -71 req 02 val 2600 [ 128.955424][ T187] pwc: recv_control_msg error -71 req 02 val 2900 [ 128.969713][ T187] pwc: recv_control_msg error -71 req 02 val 2800 [ 128.981359][ T187] pwc: recv_control_msg error -71 req 04 val 1100 [ 128.989896][ T187] pwc: recv_control_msg error -71 req 04 val 1200 [ 129.027671][ T187] pwc: Registered as video103. [ 129.043028][ T187] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 129.132535][ T187] usb 1-1: USB disconnect, device number 14 [ 129.399806][ T44] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 129.525583][ T809] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 129.542512][ T809] asix 3-1:0.34: probe with driver asix failed with error -71 [ 129.573123][ T809] usb 3-1: USB disconnect, device number 10 [ 129.585569][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.594758][ T44] usb 4-1: not running at top speed; connect to a high speed hub [ 129.612915][ T44] usb 4-1: config 7 has an invalid interface number: 107 but max is 0 [ 129.625579][ T44] usb 4-1: config 7 has no interface number 0 [ 129.636187][ T44] usb 4-1: config 7 interface 107 altsetting 248 has an invalid endpoint descriptor of length 5, skipping [ 129.650699][ T44] usb 4-1: config 7 interface 107 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.667009][ T44] usb 4-1: config 7 interface 107 has no altsetting 0 [ 129.688413][ T44] usb 4-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice=59.e7 [ 129.705585][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.724079][ T44] usb 4-1: Product: syz [ 129.731825][ T44] usb 4-1: Manufacturer: syz [ 129.737334][ T44] usb 4-1: SerialNumber: syz [ 129.929780][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.185'. [ 129.978210][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.007785][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.051213][ T44] appletouch 4-1:7.107: Could not find int-in endpoint [ 130.073304][ T44] appletouch 4-1:7.107: probe with driver appletouch failed with error -5 [ 130.089476][ T44] usbhid 4-1:7.107: couldn't find an input interrupt endpoint [ 130.117865][ T44] usb 4-1: USB disconnect, device number 19 [ 130.916873][ T44] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 131.115520][ T44] usb 4-1: Invalid ep0 maxpacket: 64 [ 131.175924][ T6522] netlink: 5 bytes leftover after parsing attributes in process `syz.1.190'. [ 131.207070][ T6522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.247064][ T44] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 131.405561][ T44] usb 4-1: Invalid ep0 maxpacket: 64 [ 131.426286][ T44] usb usb4-port1: attempt power cycle [ 131.495649][ T187] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 131.565795][ T5682] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 131.665538][ T187] usb 1-1: Invalid ep0 maxpacket: 64 [ 131.715634][ T5682] usb 2-1: Using ep0 maxpacket: 16 [ 131.724506][ T5682] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.737602][ T5682] usb 2-1: config 4 has an invalid interface number: 86 but max is 0 [ 131.748299][ T5682] usb 2-1: config 4 has no interface number 0 [ 131.754480][ T5682] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 131.766624][ T5682] usb 2-1: config 4 interface 86 has no altsetting 0 [ 131.783504][ T5682] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 131.802941][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.811112][ T187] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 131.815604][ T44] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 131.841664][ T5682] usb 2-1: Product: syz [ 131.853114][ T5682] usb 2-1: Manufacturer: syz [ 131.859386][ T5682] usb 2-1: SerialNumber: syz [ 131.867230][ T44] usb 4-1: Invalid ep0 maxpacket: 64 [ 131.985726][ T187] usb 1-1: Invalid ep0 maxpacket: 64 [ 132.007752][ T44] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 132.023861][ T187] usb usb1-port1: attempt power cycle [ 132.037487][ T44] usb 4-1: Invalid ep0 maxpacket: 64 [ 132.049779][ T44] usb usb4-port1: unable to enumerate USB device [ 132.088974][ T5682] cypress_m8 2-1:4.86: DeLorme Earthmate USB converter detected [ 132.121782][ T5682] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 132.147410][ T5682] usb 2-1: USB disconnect, device number 17 [ 132.186431][ T5682] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 132.219996][ T5682] cypress_m8 2-1:4.86: device disconnected [ 132.375609][ T187] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 132.408343][ T187] usb 1-1: Invalid ep0 maxpacket: 64 [ 132.545830][ T187] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 132.576928][ T187] usb 1-1: Invalid ep0 maxpacket: 64 [ 132.584116][ T187] usb usb1-port1: unable to enumerate USB device [ 133.030867][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042948][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.625579][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 133.795813][ T809] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 133.811461][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 133.823712][ T9] usb 2-1: config 0 interface 0 altsetting 88 endpoint 0x2 has an invalid bInterval 135, changing to 11 [ 133.896212][ T9] usb 2-1: config 0 interface 0 altsetting 88 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 133.951063][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.971323][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 133.986730][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 133.994013][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.007602][ T809] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 134.033734][ T9] usb 2-1: config 0 descriptor?? [ 134.042072][ T809] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 134.097586][ T809] usb 3-1: config 0 interface 0 has no altsetting 0 [ 134.132690][ T809] usb 3-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 134.164487][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.212327][ T809] usb 3-1: config 0 descriptor?? [ 134.444597][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.484895][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.596960][ T9] hid_parser_main: 56 callbacks suppressed [ 134.596983][ T9] isku 0003:1E7D:319C.0007: unknown main item tag 0x4 [ 134.629414][ T9] isku 0003:1E7D:319C.0007: unknown main item tag 0x5 [ 134.643542][ T9] isku 0003:1E7D:319C.0007: unknown main item tag 0x2 [ 134.660955][ T9] isku 0003:1E7D:319C.0007: item fetching failed at offset 27/44 [ 134.679908][ T9] isku 0003:1E7D:319C.0007: parse failed [ 134.698060][ T9] isku 0003:1E7D:319C.0007: probe with driver isku failed with error -22 [ 134.793731][ T809] wacom 0003:056A:00C5.0008: ignoring exceeding usage max [ 134.832535][ T809] wacom 0003:056A:00C5.0008: unknown main item tag 0x0 [ 134.847570][ T809] wacom 0003:056A:00C5.0008: unknown main item tag 0x0 [ 134.869454][ T809] wacom 0003:056A:00C5.0008: unknown main item tag 0x0 [ 134.887973][ T809] wacom 0003:056A:00C5.0008: unknown main item tag 0x0 [ 134.903976][ T809] wacom 0003:056A:00C5.0008: unknown main item tag 0x0 [ 134.936082][ T809] wacom 0003:056A:00C5.0008: unknown main item tag 0x0 [ 134.964174][ T809] wacom 0003:056A:00C5.0008: unknown main item tag 0x0 [ 135.034297][ T809] wacom 0003:056A:00C5.0008: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.2-1/input0 [ 135.116567][ T809] usb 3-1: USB disconnect, device number 11 [ 135.200106][ T6579] fido_id[6579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 135.470857][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.492582][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.537359][ T6589] program syz.1.210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.975605][ T5682] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 136.092710][ T6606] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 136.137011][ T5682] usb 5-1: Using ep0 maxpacket: 16 [ 136.151403][ T5682] usb 5-1: unable to get BOS descriptor or descriptor too short [ 136.180574][ T5682] usb 5-1: config 9 interface 0 has no altsetting 0 [ 136.202289][ T5682] usb 5-1: New USB device found, idVendor=2405, idProduct=0003, bcdDevice=67.13 [ 136.226186][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.226215][ T5682] usb 5-1: Product: syz [ 136.226231][ T5682] usb 5-1: Manufacturer: syz [ 136.226246][ T5682] usb 5-1: SerialNumber: syz [ 136.511007][ T5682] cp210x 5-1:9.0: cp210x converter detected [ 136.527654][ T5682] cp210x 5-1:9.0: failed to get vendor val 0x370b size 1: -71 [ 136.590763][ T5682] cp210x 5-1:9.0: querying part number failed [ 136.698797][ T5682] usb 5-1: cp210x converter now attached to ttyUSB0 [ 136.761345][ T5682] usb 5-1: USB disconnect, device number 16 [ 136.794008][ T5682] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 136.854717][ T5682] cp210x 5-1:9.0: device disconnected [ 137.366797][ T5682] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 137.573926][ T5682] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 137.596937][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.865707][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 138.030745][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 138.057280][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 138.105374][ T9] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 138.143610][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.175331][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 138.216219][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.271805][ T9] usb 1-1: config 0 descriptor?? [ 138.498746][ T6633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.538141][ T6633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.836811][ T9] wacom 0003:056A:00C5.0009: ignoring exceeding usage max [ 138.888803][ T9] wacom 0003:056A:00C5.0009: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.0-1/input0 [ 139.030748][ T9] usb 1-1: USB disconnect, device number 19 [ 139.090769][ T6644] fido_id[6644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 139.473341][ T6648] support for cryptoloop has been removed. Use dm-crypt instead. [ 139.819540][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 139.905655][ T809] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 140.021317][ T6662] input: syz0 as /devices/virtual/input/input17 [ 140.087576][ T809] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.135502][ T809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.154555][ T5682] cxacru_cm: 164 callbacks suppressed [ 140.154579][ T5682] cxacru 3-1:1.0: send of cm 0x84 failed (-104) [ 140.170423][ T5682] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -104 [ 140.181081][ T5682] ------------[ cut here ]------------ [ 140.187325][ T5682] URB ffff88802bbf8a00 submitted while active [ 140.193489][ T5682] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:4/5682 [ 140.203878][ T5682] Modules linked in: [ 140.208053][ T5682] CPU: 0 UID: 0 PID: 5682 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.219136][ T5682] Tainted: [L]=SOFTLOCKUP [ 140.223595][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.234560][ T5682] Workqueue: usb_hub_wq hub_event [ 140.240237][ T5682] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 140.245863][ T5682] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 69 c9 d2 fa 49 83 3e 00 74 40 e8 fe 31 65 fa 48 8d 3d 17 a7 03 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 e3 31 65 fa eb 05 e8 dc 31 [ 140.265559][ T5682] RSP: 0018:ffffc900049c6858 EFLAGS: 00010283 [ 140.271656][ T5682] RAX: ffffffff8761e272 RBX: ffff88802bbf8a00 RCX: 0000000000100000 [ 140.279900][ T5682] RDX: ffffc9001ada0000 RSI: ffff88802bbf8a00 RDI: ffffffff90658990 [ 140.288040][ T5682] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000 [ 140.296191][ T5682] R10: dffffc0000000000 R11: fffffbfff20af327 R12: 0000000000000040 [ 140.304283][ T5682] R13: 0000000000000000 R14: ffff88802bbf8a08 R15: 0000000000000cc0 [ 140.312419][ T5682] FS: 0000000000000000(0000) GS:ffff888124f4d000(0000) knlGS:0000000000000000 [ 140.321426][ T5682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.328100][ T5682] CR2: 00007f44ab5ed158 CR3: 00000000258ec000 CR4: 00000000003526f0 [ 140.336726][ T5682] Call Trace: [ 140.340013][ T5682] [ 140.342940][ T5682] ? __raw_spin_lock_init+0x45/0x100 [ 140.348573][ T5682] ? __init_swait_queue_head+0xa8/0x150 [ 140.354142][ T5682] cxacru_cm+0x21a/0xf10 [ 140.358424][ T5682] ? usb_new_device+0x99d/0x1620 [ 140.363413][ T5682] ? hub_event+0x28e8/0x4d30 [ 140.368045][ T5682] ? process_scheduled_works+0xa8e/0x14e0 [ 140.373778][ T5682] ? kthread+0x388/0x470 [ 140.378114][ T5682] ? __pfx_cxacru_cm+0x10/0x10 [ 140.382915][ T5682] ? __kasan_kmalloc+0x93/0xb0 [ 140.387912][ T5682] ? __kmalloc_cache_noprof+0x32d/0x660 [ 140.393506][ T5682] ? __kmalloc_cache_noprof+0x150/0x660 [ 140.399153][ T5682] ? cxacru_poll_status+0x14b/0x1110 [ 140.404795][ T5682] ? cxacru_poll_status+0x14b/0x1110 [ 140.410185][ T5682] cxacru_poll_status+0x178/0x1110 [ 140.415379][ T5682] ? cxacru_atm_start+0x176/0x360 [ 140.421511][ T5682] ? __pfx_cxacru_poll_status+0x10/0x10 [ 140.427128][ T5682] ? __mutex_unlock_slowpath+0x731/0x900 [ 140.432851][ T5682] ? atm_register_sysfs+0x18e/0x360 [ 140.438800][ T5682] cxacru_atm_start+0x185/0x360 [ 140.443676][ T5682] usbatm_atm_init+0x144/0x3a0 [ 140.448856][ T5682] usbatm_usb_probe+0x15cb/0x1db0 [ 140.453931][ T5682] cxacru_usb_probe+0x17f/0x220 [ 140.458844][ T5682] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 140.464686][ T5682] ? __pfx_cxacru_usb_probe+0x10/0x10 [ 140.470161][ T5682] usb_probe_interface+0x653/0xc60 [ 140.475605][ T5682] ? __pfx_usb_probe_interface+0x10/0x10 [ 140.481392][ T5682] really_probe+0x254/0xae0 [ 140.485964][ T5682] __driver_probe_device+0x1e8/0x360 [ 140.491272][ T5682] driver_probe_device+0x4f/0x240 [ 140.496359][ T5682] __device_attach_driver+0x270/0x410 [ 140.501745][ T5682] bus_for_each_drv+0x258/0x2f0 [ 140.506635][ T5682] ? __pfx___device_attach_driver+0x10/0x10 [ 140.512547][ T5682] ? __pfx_bus_for_each_drv+0x10/0x10 [ 140.517974][ T5682] ? lockdep_hardirqs_on+0x7a/0x110 [ 140.523182][ T5682] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 140.529036][ T5682] __device_attach+0x2c4/0x450 [ 140.533819][ T5682] ? __pfx___device_attach+0x10/0x10 [ 140.539632][ T5682] ? do_raw_spin_unlock+0xf5/0x210 [ 140.544857][ T5682] ? _raw_spin_unlock+0x28/0x50 [ 140.550200][ T5682] device_initial_probe+0xa1/0xd0 [ 140.555237][ T5682] bus_probe_device+0x12a/0x220 [ 140.560289][ T5682] device_add+0x7d7/0xb80 [ 140.564668][ T5682] usb_set_configuration+0x1ad8/0x2180 [ 140.570203][ T5682] usb_generic_driver_probe+0x8d/0x150 [ 140.575731][ T5682] usb_probe_device+0x1c3/0x3b0 [ 140.580614][ T5682] ? __pfx_usb_probe_device+0x10/0x10 [ 140.586042][ T5682] really_probe+0x254/0xae0 [ 140.590575][ T5682] __driver_probe_device+0x1e8/0x360 [ 140.595941][ T5682] driver_probe_device+0x4f/0x240 [ 140.600986][ T5682] __device_attach_driver+0x270/0x410 [ 140.606451][ T5682] bus_for_each_drv+0x258/0x2f0 [ 140.611346][ T5682] ? __pfx___device_attach_driver+0x10/0x10 [ 140.617652][ T5682] ? __pfx_bus_for_each_drv+0x10/0x10 [ 140.623084][ T5682] ? lockdep_hardirqs_on+0x7a/0x110 [ 140.628667][ T5682] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 140.634597][ T5682] __device_attach+0x2c4/0x450 [ 140.639489][ T5682] ? __pfx___device_attach+0x10/0x10 [ 140.645293][ T5682] ? do_raw_spin_unlock+0xf5/0x210 [ 140.650784][ T5682] ? _raw_spin_unlock+0x28/0x50 [ 140.655687][ T5682] device_initial_probe+0xa1/0xd0 [ 140.660739][ T5682] bus_probe_device+0x12a/0x220 [ 140.665657][ T5682] device_add+0x7d7/0xb80 [ 140.670015][ T5682] usb_new_device+0x99d/0x1620 [ 140.674794][ T5682] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.680831][ T5682] ? __pfx_usb_new_device+0x10/0x10 [ 140.686110][ T5682] ? _raw_spin_unlock_irq+0x23/0x50 [ 140.691349][ T5682] hub_event+0x28e8/0x4d30 [ 140.695894][ T5682] ? do_raw_spin_unlock+0xf5/0x210 [ 140.701075][ T5682] ? __pfx_hub_event+0x10/0x10 [ 140.707197][ T5682] ? process_scheduled_works+0xa20/0x14e0 [ 140.713291][ T5682] ? rcu_is_watching+0x15/0xb0 [ 140.718238][ T5682] ? process_scheduled_works+0xa20/0x14e0 [ 140.723995][ T5682] process_scheduled_works+0xa8e/0x14e0 [ 140.729647][ T5682] ? __pfx_process_scheduled_works+0x10/0x10 [ 140.735667][ T5682] ? assign_work+0x3cf/0x5d0 [ 140.740898][ T5682] worker_thread+0xa47/0xfb0 [ 140.746047][ T5682] kthread+0x388/0x470 [ 140.750131][ T5682] ? __pfx_worker_thread+0x10/0x10 [ 140.755241][ T5682] ? __pfx_kthread+0x10/0x10 [ 140.760228][ T5682] ret_from_fork+0x514/0xb70 [ 140.765058][ T5682] ? __pfx_ret_from_fork+0x10/0x10 [ 140.770219][ T5682] ? __switch_to+0xc89/0x1420 [ 140.774911][ T5682] ? __pfx_kthread+0x10/0x10 [ 140.779668][ T5682] ret_from_fork_asm+0x1a/0x30 [ 140.784467][ T5682] [ 140.787687][ T5682] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.794965][ T5682] CPU: 0 UID: 0 PID: 5682 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.805890][ T5682] Tainted: [L]=SOFTLOCKUP [ 140.810221][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.820272][ T5682] Workqueue: usb_hub_wq hub_event [ 140.825292][ T5682] Call Trace: [ 140.828556][ T5682] [ 140.831472][ T5682] vpanic+0x56c/0xa60 [ 140.835467][ T5682] ? __pfx__printk+0x10/0x10 [ 140.840075][ T5682] ? __pfx_vpanic+0x10/0x10 [ 140.844668][ T5682] ? is_bpf_text_address+0x292/0x2b0 [ 140.849989][ T5682] ? is_bpf_text_address+0x26/0x2b0 [ 140.855193][ T5682] panic+0xc5/0xd0 [ 140.858906][ T5682] ? __pfx_panic+0x10/0x10 [ 140.863318][ T5682] ? ret_from_fork_asm+0x1a/0x30 [ 140.868240][ T5682] __warn+0x315/0x4c0 [ 140.872222][ T5682] ? usb_submit_urb+0x79/0x18b0 [ 140.877067][ T5682] ? usb_submit_urb+0x79/0x18b0 [ 140.881906][ T5682] __report_bug+0x276/0x570 [ 140.886396][ T5682] ? unwind_next_frame+0x8f/0x2550 [ 140.891515][ T5682] ? usb_submit_urb+0x79/0x18b0 [ 140.896360][ T5682] ? __pfx___report_bug+0x10/0x10 [ 140.901376][ T5682] ? __pfx___mutex_trylock_common+0x10/0x10 [ 140.907258][ T5682] ? rcu_is_watching+0x15/0xb0 [ 140.912013][ T5682] report_bug_entry+0x19a/0x290 [ 140.916856][ T5682] ? usb_submit_urb+0x7c/0x18b0 [ 140.921714][ T5682] ? usb_submit_urb+0x81/0x18b0 [ 140.926553][ T5682] handle_bug+0xce/0x200 [ 140.930785][ T5682] exc_invalid_op+0x1a/0x50 [ 140.935274][ T5682] asm_exc_invalid_op+0x1a/0x20 [ 140.940198][ T5682] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 140.945682][ T5682] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 69 c9 d2 fa 49 83 3e 00 74 40 e8 fe 31 65 fa 48 8d 3d 17 a7 03 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 e3 31 65 fa eb 05 e8 dc 31 [ 140.965297][ T5682] RSP: 0018:ffffc900049c6858 EFLAGS: 00010283 [ 140.971373][ T5682] RAX: ffffffff8761e272 RBX: ffff88802bbf8a00 RCX: 0000000000100000 [ 140.979339][ T5682] RDX: ffffc9001ada0000 RSI: ffff88802bbf8a00 RDI: ffffffff90658990 [ 140.987332][ T5682] RBP: dffffc0000000000 R08: 0000000000000002 R09: 0000000000000000 [ 140.995417][ T5682] R10: dffffc0000000000 R11: fffffbfff20af327 R12: 0000000000000040 [ 141.003416][ T5682] R13: 0000000000000000 R14: ffff88802bbf8a08 R15: 0000000000000cc0 [ 141.011412][ T5682] ? usb_submit_urb+0x72/0x18b0 [ 141.016469][ T5682] ? usb_submit_urb+0x72/0x18b0 [ 141.021313][ T5682] ? __raw_spin_lock_init+0x45/0x100 [ 141.026615][ T5682] ? __init_swait_queue_head+0xa8/0x150 [ 141.032156][ T5682] cxacru_cm+0x21a/0xf10 [ 141.036394][ T5682] ? usb_new_device+0x99d/0x1620 [ 141.041322][ T5682] ? hub_event+0x28e8/0x4d30 [ 141.046104][ T5682] ? process_scheduled_works+0xa8e/0x14e0 [ 141.051820][ T5682] ? kthread+0x388/0x470 [ 141.056061][ T5682] ? __pfx_cxacru_cm+0x10/0x10 [ 141.060857][ T5682] ? __kasan_kmalloc+0x93/0xb0 [ 141.065615][ T5682] ? __kmalloc_cache_noprof+0x32d/0x660 [ 141.071158][ T5682] ? __kmalloc_cache_noprof+0x150/0x660 [ 141.076735][ T5682] ? cxacru_poll_status+0x14b/0x1110 [ 141.082029][ T5682] ? cxacru_poll_status+0x14b/0x1110 [ 141.087309][ T5682] cxacru_poll_status+0x178/0x1110 [ 141.092416][ T5682] ? cxacru_atm_start+0x176/0x360 [ 141.097435][ T5682] ? __pfx_cxacru_poll_status+0x10/0x10 [ 141.102975][ T5682] ? __mutex_unlock_slowpath+0x731/0x900 [ 141.108603][ T5682] ? atm_register_sysfs+0x18e/0x360 [ 141.113934][ T5682] cxacru_atm_start+0x185/0x360 [ 141.118824][ T5682] usbatm_atm_init+0x144/0x3a0 [ 141.123604][ T5682] usbatm_usb_probe+0x15cb/0x1db0 [ 141.128635][ T5682] cxacru_usb_probe+0x17f/0x220 [ 141.133477][ T5682] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 141.139277][ T5682] ? __pfx_cxacru_usb_probe+0x10/0x10 [ 141.144645][ T5682] usb_probe_interface+0x653/0xc60 [ 141.149754][ T5682] ? __pfx_usb_probe_interface+0x10/0x10 [ 141.155388][ T5682] really_probe+0x254/0xae0 [ 141.159892][ T5682] __driver_probe_device+0x1e8/0x360 [ 141.165189][ T5682] driver_probe_device+0x4f/0x240 [ 141.170206][ T5682] __device_attach_driver+0x270/0x410 [ 141.175586][ T5682] bus_for_each_drv+0x258/0x2f0 [ 141.180529][ T5682] ? __pfx___device_attach_driver+0x10/0x10 [ 141.186449][ T5682] ? __pfx_bus_for_each_drv+0x10/0x10 [ 141.191870][ T5682] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.197489][ T5682] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.203323][ T5682] __device_attach+0x2c4/0x450 [ 141.208109][ T5682] ? __pfx___device_attach+0x10/0x10 [ 141.213398][ T5682] ? do_raw_spin_unlock+0xf5/0x210 [ 141.218510][ T5682] ? _raw_spin_unlock+0x28/0x50 [ 141.223446][ T5682] device_initial_probe+0xa1/0xd0 [ 141.228483][ T5682] bus_probe_device+0x12a/0x220 [ 141.233325][ T5682] device_add+0x7d7/0xb80 [ 141.237641][ T5682] usb_set_configuration+0x1ad8/0x2180 [ 141.243104][ T5682] usb_generic_driver_probe+0x8d/0x150 [ 141.248574][ T5682] usb_probe_device+0x1c3/0x3b0 [ 141.253432][ T5682] ? __pfx_usb_probe_device+0x10/0x10 [ 141.258830][ T5682] really_probe+0x254/0xae0 [ 141.263353][ T5682] __driver_probe_device+0x1e8/0x360 [ 141.268656][ T5682] driver_probe_device+0x4f/0x240 [ 141.273756][ T5682] __device_attach_driver+0x270/0x410 [ 141.279142][ T5682] bus_for_each_drv+0x258/0x2f0 [ 141.284087][ T5682] ? __pfx___device_attach_driver+0x10/0x10 [ 141.289974][ T5682] ? __pfx_bus_for_each_drv+0x10/0x10 [ 141.295341][ T5682] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.300537][ T5682] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.306359][ T5682] __device_attach+0x2c4/0x450 [ 141.311398][ T5682] ? __pfx___device_attach+0x10/0x10 [ 141.316697][ T5682] ? do_raw_spin_unlock+0xf5/0x210 [ 141.321801][ T5682] ? _raw_spin_unlock+0x28/0x50 [ 141.326652][ T5682] device_initial_probe+0xa1/0xd0 [ 141.331704][ T5682] bus_probe_device+0x12a/0x220 [ 141.336567][ T5682] device_add+0x7d7/0xb80 [ 141.340892][ T5682] usb_new_device+0x99d/0x1620 [ 141.345759][ T5682] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.351762][ T5682] ? __pfx_usb_new_device+0x10/0x10 [ 141.356988][ T5682] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.362210][ T5682] hub_event+0x28e8/0x4d30 [ 141.366647][ T5682] ? do_raw_spin_unlock+0xf5/0x210 [ 141.371849][ T5682] ? __pfx_hub_event+0x10/0x10 [ 141.376631][ T5682] ? process_scheduled_works+0xa20/0x14e0 [ 141.383077][ T5682] ? rcu_is_watching+0x15/0xb0 [ 141.387864][ T5682] ? process_scheduled_works+0xa20/0x14e0 [ 141.393588][ T5682] process_scheduled_works+0xa8e/0x14e0 [ 141.399139][ T5682] ? __pfx_process_scheduled_works+0x10/0x10 [ 141.405217][ T5682] ? assign_work+0x3cf/0x5d0 [ 141.409816][ T5682] worker_thread+0xa47/0xfb0 [ 141.414413][ T5682] kthread+0x388/0x470 [ 141.418483][ T5682] ? __pfx_worker_thread+0x10/0x10 [ 141.423596][ T5682] ? __pfx_kthread+0x10/0x10 [ 141.428214][ T5682] ret_from_fork+0x514/0xb70 [ 141.432803][ T5682] ? __pfx_ret_from_fork+0x10/0x10 [ 141.437928][ T5682] ? __switch_to+0xc89/0x1420 [ 141.442601][ T5682] ? __pfx_kthread+0x10/0x10 [ 141.447188][ T5682] ret_from_fork_asm+0x1a/0x30 [ 141.452072][ T5682] [ 141.455430][ T5682] Kernel Offset: disabled [ 141.459766][ T5682] Rebooting in 86400 seconds..