last executing test programs: 16m27.402426073s ago: executing program 2 (id=559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16m27.209883683s ago: executing program 2 (id=560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) 16m26.575998811s ago: executing program 2 (id=563): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, &(0x7f0000000500)={0x0, 0x3938700}) 16m23.673227538s ago: executing program 2 (id=572): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 16m23.422012094s ago: executing program 2 (id=576): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) listen(0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 16m22.4214276s ago: executing program 2 (id=582): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94) 16m22.048268818s ago: executing program 32 (id=582): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94) 20.510437567s ago: executing program 4 (id=2652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {0xa, 0x14, 0x20, 0x1, 0x8, 0x0, 0x0, 0x6, 0xf799ab692c18ca67}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0xffffffffffffffff) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) epoll_create(0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4044882) mq_open(&(0x7f0000000480)='.\\\x00\xd5\xf6\t\xcf\xc4Q\xdfx\x8e2\xd4\xe9\xb5\xf5w\x9bP\xbf\xe7\x87\xf0\xe5.\xe7\xa0\x8e\xcd\xe1\x8a3\xbbh5SA,\xd3\xec\",p\x81W\xa8\x83\xec\n\xce\x1c@\xa3!\x03\xbe%J\x92\xa7\xe9\xb2\x9c\xee\x9b\xb8+\xd88\xddw\x97\'\xc5\xads`^\xb7I\\\xcf\xe5\x98\xe4gY\xa9\xf1\x9f\xfe\xe2\x9a~\xd9\xa1\xe4P*U\x91\x1f\'\xa9OE\xb4F\xdfd\xac\\S\xb2\xc0\xc1\xc9M\xfc\x8c\x1d,\xdc\x03\x1d\xdb\xa2N\xd8\xd7\xed\x8b\\T\xe2\x87]\xcfp\x8d}\x17\xe4?\x96H\x8c\x0fA\xfc]?\xa0I\x82\x02\xe7\xaeG\xc2_j\fSy\xb41M}\xd9\xd6\xd4\xd8\x84l3#z\xb7<', 0x40, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r7, r6, 0x0, 0x5) openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) 18.673176406s ago: executing program 3 (id=2658): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48}) fcntl$setstatus(r0, 0x4, 0x2800) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x2, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000001c0)='name', 0x0, r3) connect(0xffffffffffffffff, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x46, 0xb, "30baaf652685f9a25cdf20e68a81fb0d8c073a4cf9d07ebc2b5cc2e689b17668bc65fedd36417d7cb483ec614c4645b290e4739fe43eaeb37bfc11d4ca0998", 0x37}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 18.67215154s ago: executing program 1 (id=2668): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) 15.981593655s ago: executing program 5 (id=2659): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) r1 = getpid() fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1, 0x4, 0x1, 0x9, r1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000b0000004a200000"], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) close_range(r3, 0xffffffffffffffff, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25df9bfb, {0x0, 0x0, 0x0, r12, {0xb, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15.461948932s ago: executing program 0 (id=2660): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) sendmsg$alg(r3, 0x0, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 15.456915092s ago: executing program 4 (id=2661): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) fsopen(0x0, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40010) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) symlink(0x0, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) copy_file_range(r5, &(0x7f0000000140)=0x8, r2, 0x0, 0x1000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r7, 0x0, 0x3, 0x1}}, 0x20) 15.404760163s ago: executing program 5 (id=2662): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000004540)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x692, &(0x7f0000000280)={0x0, 0xb2ef, 0x80, 0x3, 0x145}) syz_clone(0xc98b0700, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b534, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40808) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 14.20129083s ago: executing program 1 (id=2663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) close(0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1) socket$kcm(0xa, 0x2, 0x3a) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 13.544624256s ago: executing program 5 (id=2664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000c72000/0x1000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x20008040) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) mbind(&(0x7f000017b000/0x4000)=nil, 0x4000, 0x4000, 0x0, 0x200000000000023, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x200000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x7, 0x1, 0x0, "4f80ff279b1c2ce2d2226bfb771f77ff065e07079c5e6f426ebb207c0caba25f", 0x35315241}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3, 0x2}, 0x18, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da0009"], 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xc3, 0x1, 0x1, {0x22, 0x6c3}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x71, 0xa5, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x40084149, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 13.205937261s ago: executing program 0 (id=2665): syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c2000000080007000000006800000d0690780a010100ac1414bb0044045d030000000000000000000000000000000000000300004e2100004e210085a0010000000100000001000000060000"], 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x149182, 0x10) ioctl$TCSETA(r0, 0x5406, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x10, 0x80003, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 12.748593862s ago: executing program 3 (id=2666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x48090) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) syz_open_dev$video(&(0x7f0000000000), 0x100000000000007, 0x8600) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x0, r3, 0x0, 0x8, 0xfffffffffffffffd) socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 11.861984521s ago: executing program 0 (id=2667): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000007600000024001280090001007866726d00000000140002800800010004000000"], 0x5c}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r5, 0x2004, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmdt(0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000000380)="0059ca7098e4768fa6597820edf104781594336527a04e10af9c7e9525b42f7daaac4379e662445bdb6ab9fcb4504fe3a30e91053df5c6d2e56a978964b821655bd3ceac0fd421511a139e3441448712697b8bb6c3710335575891288588f2851f440d968f825c699c0caabcd86436fffeef5d3a3358b5ad7dec8db11f267a1da5d7dc607f18daf21be877a1938ace01344d39121ecd81b61110f4cd668e908aeaf5ed40da1b16b11b41145b4c61af5d213cb684b94d8c4a2728", 0xba, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 11.111156827s ago: executing program 4 (id=2669): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0), 0x4) getpgrp(0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000280)}], 0x2, 0xe, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x42303159, 0x0, @discrete={0xe, 0xba}}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="a2caeca6ab4cfc6458432d2cd6e066db0b974ab2d51fce3736d3e4a68aff397feba8983b4a8d4c62f67d5becb53869dc8dd9b8a1d738866895205b82b4475f294961a0570d", 0x45}], 0x1) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x0) unshare(0x28040600) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b0800000905"], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x180, 0x2a8, 0x2a8, 0x180, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x6, 0x9, 0x2, 0x5], 0x5}, {0xffffffffffffffff, [0x0, 0x0, 0x6, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0xffff, 0x6, 0x8, 0xf, 0x3, 0xe, 0xe]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000000c0), 0x127, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) 11.009959096s ago: executing program 1 (id=2670): r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x4c40, 0xb30c, 0x20, &(0x7f0000000140)={[0x7]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x2c, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) unshare(0x28040600) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x0, 0x0, &(0x7f0000000000)={0xa4, 0x0, 0xfffffffffffffffe, 0x400, 0x0, 0x0, 0x0, 0x20000080000000}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x40080c0) socket$nl_generic(0x10, 0x3, 0x10) 9.740367481s ago: executing program 3 (id=2671): syz_usb_connect(0x6, 0x11e, &(0x7f0000002040)={{0x12, 0x1, 0x201, 0xcc, 0xf4, 0x59, 0xff, 0x56e, 0x5004, 0x1921, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10c, 0x2, 0xff, 0x3, 0x50, 0x2, [{{0x9, 0x4, 0x16, 0x0, 0x2, 0xb2, 0xe8, 0x73, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x5, 0x5}}], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x7, 0x4, 0x9, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x6, 0x7c, 0x1, [@generic={0x3d, 0xb, "00d236169b5f51b704f8ffa100662cffceaa59c2c6d8589e88e6b098233995644383417ce07142f24416db33d6536d42f0a7c8c48c100e21e22110"}]}}]}}, {{0x9, 0x4, 0x1d, 0x4, 0x1, 0xff, 0xff, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x9}, [@extension_unit={0x8, 0x24, 0x8, 0x5, 0x1, 0x7, "da"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x1, 0x3, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x3, 0xa6, 0x200, 0xb9, 0xf2}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "f5"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x6, 0x19, 0xa4}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xdac8, 0xc3, 0x8, 0xcd6, 0x9a}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x4, 0x0, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0x59, 0xb1}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xab, 0x8, 0x5}]}], [{{0x9, 0x5, 0xc, 0xc, 0x8, 0x4, 0x73, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7}, @generic={0x5, 0xc, "f7b43d"}]}}]}}]}}]}}, &(0x7f0000002400)={0xa, &(0x7f00000021c0)={0xa, 0x6, 0x100, 0x1, 0x2, 0xf, 0xff, 0xc}, 0x5, &(0x7f0000002200)={0x5, 0xf, 0x5}, 0x2, [{0x87, &(0x7f0000002240)=@string={0x87, 0x3, "372518001567a6c5dfd4c7245c71e204d7a9786d59ad52a2dc386afe0756c08944402ea003c55a44d9d680f36dbff8cf186b94e78146afe16bb8fbd9dd3d445f9d8f51698b52b9095293be12095ab6a08e5ebbfaacc9a1c1ccfad943daedec4a4b18047d7cfd99745434b5af26174b59a33aade6a0ff44bffd1e355cec1a8eb0cb809b4649"}}, {0x9b, &(0x7f0000002300)=@string={0x9b, 0x3, "ce52199f544bbed5eb6d0353cbc1a269cdfc7db3aeac10717e3c1d153c2ff974e13b6a7e8a3eacbd1eb47e853ada12019d4af9effea8caff9bf67485798eb2d712ac1d2367ba3828fff128436c62b7ad2b4b3bb9f684ec527f4602ab1b22d2feaf45bf5c90577affe7807c6caf2c1204934a8cc9bb3d40c7a8811b2e29abfcf73a00c38b29e79dffc1cb62e0b8187226addd2380126ff98ebd"}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x40c, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3d0, 0x2, [@TCA_MATCHALL_FLAGS={0x2, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x394, 0x2, [@m_skbedit={0x14c, 0x1f, 0x0, 0x0, {{0xffffff79}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x6, 0x20000000, 0xaf000000, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0xe58d8a5db282c67f, 0x4, 0x3ff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xef, 0x6, "4c0b2d056d27d61bf9caa7638256403e0a873ca84f9e23b21c8b50af1caf8445094c77efc7a906cc51927cae63f5582b9cd772754ad95975f8cd15a7eaf94d6407b559f7e03319122770e276d047f4e861875f58f1f09c50ed6055b988b88edb58dbe1b4964af4b889e66d3e316861be06762ece4361114a00bf7934b73b2fcfcc13476192158ee9e4eb6ac960884827b73b0070d251dfb26c40ee090cf9d8b117e148b8bf73557fc7200d34a97ba8fdfb6822477f55185368e5735891cf0e8306674740bbb34c5274c454ba6a9f17fe9ac26abf476434507f12237fdafb132634a52843c93aa663f4dac1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x130, 0x16, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x9, 0xbde, 0x4}, @broadcast, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x5, 0x0, 0x400, 0xffff7fff}, @multicast1, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x3, 0x1, 0x7}, @broadcast, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x43, 0x0, 0x9, 0x200}, @multicast1, @loopback, 0xffffffff, 0x1}}]}, {0x68, 0x6, "efb1ceb9e1fd5c3140979a820830591412b3a1e51ff01430b993e9513caeae48b445fc37a3632c283671b57dd18d62cc84acc268c7342a5de3348ec761f3af57144f222391ee893e8205a4803bb4aa896c4072f30729be7dd8940468da8e00213347348f"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x114, 0x1a, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "a15a1126ed2dbc77499eb26844a4b31b"}, @TCA_CT_LABELS={0x14, 0x7, "bf91b338555d4b4d82637cd8f81d8678"}]}, {0xc2, 0x6, "c527675bf7f4646ae31c844a33598eff03ceaabbf6272a809016b3f45d79c400b539c7a4d14eaae83644f301ed04c18bf42d5c76a75e8a581d9a3557c255c6295de63eb3da7d415bef4d1f78361360ce6fe6411cab60fa0a5057105013247436fea28171a79df64b155fc529fcfebcabf8e2f34843a55ef8798b5d34a7f442bde0879242568c20977076b5be5c90ddd6de40fd02d6c00f1f52b2454bd700ba583c7a3e90fc14df63eeb534c65c8bfdca7233e81f51f78cc2c2ccc2f16679"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x6}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0xffffffffffffff0f, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xf}}, @TCA_MATCHALL_CLASSID={0x0, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x0, 0x3, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x40c}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x21, &(0x7f0000000180)={0x0, 0x0, 0x1e}) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x3ff, 0x32315559, 0x8, 0x203, 0x2, 0x7, 0x6, 0x1, 0x2, 0x1, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e6400000000140002800500010006000000080003000000000008000a00", @ANYRES32=r6], 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000b44000000090a05000000000000000000030000040900010073797a31000000000888e2a3f6459defa5fb48f40005400000003808000a40000000010900020073797a300000000008000c4000ff00011417585b9d660dc2c0130000001100010000000048f38dbfef320403612b68386c370cacaefbe85dacc8f0a2a1c769101fbada02f5620fdc83bcf7e6d42f2d8c4a1a7f"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x44000800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r9 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r9, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r9, &(0x7f0000004440)={0x2020}, 0x2020) 9.59401466s ago: executing program 5 (id=2672): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {0xa, 0x14, 0x20, 0x1, 0x8, 0x0, 0x0, 0x6, 0xf799ab692c18ca67}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0xffffffffffffffff) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) epoll_create(0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4044882) mq_open(&(0x7f0000000480)='.\\\x00\xd5\xf6\t\xcf\xc4Q\xdfx\x8e2\xd4\xe9\xb5\xf5w\x9bP\xbf\xe7\x87\xf0\xe5.\xe7\xa0\x8e\xcd\xe1\x8a3\xbbh5SA,\xd3\xec\",p\x81W\xa8\x83\xec\n\xce\x1c@\xa3!\x03\xbe%J\x92\xa7\xe9\xb2\x9c\xee\x9b\xb8+\xd88\xddw\x97\'\xc5\xads`^\xb7I\\\xcf\xe5\x98\xe4gY\xa9\xf1\x9f\xfe\xe2\x9a~\xd9\xa1\xe4P*U\x91\x1f\'\xa9OE\xb4F\xdfd\xac\\S\xb2\xc0\xc1\xc9M\xfc\x8c\x1d,\xdc\x03\x1d\xdb\xa2N\xd8\xd7\xed\x8b\\T\xe2\x87]\xcfp\x8d}\x17\xe4?\x96H\x8c\x0fA\xfc]?\xa0I\x82\x02\xe7\xaeG\xc2_j\fSy\xb41M}\xd9\xd6\xd4\xd8\x84l3#z\xb7<', 0x40, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r7, r6, 0x0, 0x5) openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) 9.098525777s ago: executing program 0 (id=2673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0xb4}}, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, 0x0, 0x400) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x10, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, {[], @ndisc_ra}}}}}, 0x0) 7.648665384s ago: executing program 4 (id=2674): unshare(0x6a040000) syz_io_uring_setup(0x837, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x54583, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x80) 7.525900688s ago: executing program 3 (id=2675): r0 = syz_pidfd_open(0x0, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), 0x901000, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x7401) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x5, 0x2, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000080)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 6.977856541s ago: executing program 1 (id=2676): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000007880)) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getgid() ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.538455978s ago: executing program 5 (id=2677): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 5.158319795s ago: executing program 1 (id=2678): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000000540)={0x2, 0x201, 0x591b4a83}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}], 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 4.22991522s ago: executing program 0 (id=2679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) close(0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1) socket$kcm(0xa, 0x2, 0x3a) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.625742652s ago: executing program 3 (id=2680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x1b) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x600000000000000, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x401}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000080)="360f231b66b80500000066b94d2800000f01d9e32f66b80500000066b9050000000f01c1366566f20f2b5b00ea00908a00baf80c66b8baf0488066efbafc0cb80008ef0f015f023e0fc77e170f07", 0x4e}], 0x1, 0x74, 0x0, 0x0) eventfd2(0x9, 0x80001) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r9, 0x11, 0x0, 0x7c000) 3.2832606s ago: executing program 4 (id=2681): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x48090) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) syz_open_dev$video(&(0x7f0000000000), 0x100000000000007, 0x8600) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x0, r3, 0x0, 0x8, 0xfffffffffffffffd) socket$netlink(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 2.714472385s ago: executing program 5 (id=2682): setitimer(0x2, &(0x7f0000000580)={{0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x2400c080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0x1, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5d, 0xff, 0x87}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x6, 0xfb, 0xc, 0x8, 0x8}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x8e, &(0x7f0000000480)=@string={0x8e, 0x3, "7d2c3cebe2ca769dcba40778bb9ac034472dee56cdc7f56998f02b5cfd6164898ac0d0c5067903c3515779705a8ad52317e0186d15c2d2539f6f30ddcecb5636566d5091e60867dc20f9a57bb11dd44ed53c106eb0a8f8ae00b751c9752670cd96e15c392a49736405bc56a5775144a9a65f7c940a1a7730ee74d58bae7c22fc31542b0e50c97ca2b3fa80f7"}}, {0x0, 0x0}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1801}}]}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) listen(0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x1b, {0x9, 0x21, 0x101, 0x2e, 0x1, {0x22, 0x9cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x4, 0x3}}}}}]}}]}}, 0x0) write$rfkill(r0, 0x0, 0x0) 489.669199ms ago: executing program 0 (id=2683): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200), 0x2, 0x208800) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f00000003c0)) r4 = gettid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x3ff, 0x8, 0x8000000000000000, 0xcc, 0x6, 0x9, 0x1}, 0x0) socket(0xa, 0x3, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010003007f0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000", @ANYRES32, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 282.383799ms ago: executing program 3 (id=2684): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r0 = getpgrp(0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x101301) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) rt_tgsigqueueinfo(r0, r0, 0x1a, &(0x7f0000000600)={0x2f, 0x1, 0x2}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = request_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0xffffffffffffffff) add_key$user(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000500)="7f342fcdc6218238811760f4c15ae14110eb10152999bd31ef44bf8e88b16e16678888be00cc89ae46412acfa44709e3387021832b90a718eb044700d5418a4b8bcc5306c08ba5e141efff1dcdea4b923921d9889800964a2b8cc2970440aa217b39ed633d95afc05ad0a801138ca21fedeb10904ea8b538ee31d8dd", 0x7c, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) poll(0x0, 0x0, 0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) 38.507666ms ago: executing program 1 (id=2685): openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4048844) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 0s ago: executing program 4 (id=2686): socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000e3fef9150001c0"]) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000000400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000100)={0x1, 0xe3b, 0xe00}) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r6 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ue, screwing up backlog [ 1014.292598][ T43] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1014.551006][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.778693][T14816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1014.798769][T14816] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1014.820540][T14816] bond0: (slave lo): Error: Device can not be enslaved while up [ 1015.591061][ T5926] net_ratelimit: 1 callbacks suppressed [ 1015.591101][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.080459][T14820] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1016.112416][ T43] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1016.126526][T14820] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1016.225354][ T43] usb 6-1: USB disconnect, device number 52 [ 1016.471755][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.631117][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.772720][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.969863][T14830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.982037][T14830] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1017.571126][ T43] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1017.691240][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.799276][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1017.832198][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.010554][ T43] usb 6-1: config 0 has no interfaces? [ 1018.016327][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1018.060521][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.097440][ T43] usb 6-1: config 0 descriptor?? [ 1018.377420][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.710639][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.918241][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.506180][T14846] syzkaller1: tun_chr_ioctl cmd 35111 [ 1019.542489][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.637475][T13129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.790660][ T5926] net_ratelimit: 1 callbacks suppressed [ 1020.790687][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.941796][T14856] fuse: Invalid rootmode [ 1021.202745][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.439186][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.550694][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.015376][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.134584][ T10] usb 6-1: USB disconnect, device number 53 [ 1023.517721][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.063972][T14887] input: syz1 as /devices/virtual/input/input33 [ 1024.452005][T13129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.550657][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.590703][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.598930][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.630685][ T5926] net_ratelimit: 1 callbacks suppressed [ 1026.630708][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.992418][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.670910][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.400759][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.430669][ T5923] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1028.492896][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.716797][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 1028.790445][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.799463][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.830405][ T5923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.910304][ T5923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1029.234486][T14920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.254025][ T5923] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1029.264321][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.278933][ T5923] usb 5-1: Product: syz [ 1029.285500][T14920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.285511][ T5923] usb 5-1: Manufacturer: syz [ 1029.285550][ T5923] usb 5-1: SerialNumber: syz [ 1029.314535][T14920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.940806][ T5923] usb 5-1: 0:2 : does not exist [ 1030.017988][ T5923] usb 5-1: USB disconnect, device number 54 [ 1030.115848][T14425] udevd[14425]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1030.423712][ T977] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1030.716080][ T977] usb 2-1: config 0 has no interfaces? [ 1030.731859][ T977] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1030.762962][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.810010][ T977] usb 2-1: Product: syz [ 1030.827504][ T977] usb 2-1: Manufacturer: syz [ 1030.842641][ T977] usb 2-1: SerialNumber: syz [ 1030.963599][ T977] usb 2-1: config 0 descriptor?? [ 1031.228207][T14925] pimreg: entered allmulticast mode [ 1031.238837][T14925] pimreg: left allmulticast mode [ 1031.492087][T14931] tipc: Started in network mode [ 1031.497379][T14931] tipc: Node identity 4, cluster identity 4711 [ 1031.504392][T14931] tipc: Node number set to 4 [ 1031.831256][ T977] net_ratelimit: 7 callbacks suppressed [ 1031.831292][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.089590][T14933] kvm: kvm [14932]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xf983 [ 1032.151965][T13129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.153481][T14933] kvm: kvm [14932]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0xaf51 [ 1032.237928][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.443107][T14933] kvm_intel: kvm [14932]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0xb291 [ 1032.459709][T14933] kvm: kvm [14932]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x9ba7 [ 1032.469421][T14933] kvm_intel: kvm [14932]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x722f [ 1032.487968][T14933] kvm: kvm [14932]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0xb761 [ 1032.606336][T14933] kvm_intel: kvm [14932]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x2a69 [ 1032.869659][T14933] kvm: kvm [14932]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0xb9b1 [ 1033.012688][T14933] kvm: kvm [14932]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0xbeb9 [ 1033.081535][T14933] kvm: kvm [14932]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0xf591 [ 1033.270781][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.452393][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.215238][T14951] input: syz1 as /devices/virtual/input/input34 [ 1034.330838][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.862738][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.872975][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.252618][ T977] usb 2-1: USB disconnect, device number 54 [ 1035.351041][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.106311][T14969] netlink: 'syz.5.2320': attribute type 13 has an invalid length. [ 1036.349268][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.743028][ T24] net_ratelimit: 1 callbacks suppressed [ 1037.743048][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.903090][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2324'. [ 1037.913246][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.036057][T14969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.050616][T14969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.160961][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.467059][T14969] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1038.714403][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.794860][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.841793][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.201658][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.547663][T15021] blktrace: Concurrent blktraces are not allowed on sg0 [ 1040.737930][T15023] netlink: 'syz.4.2330': attribute type 20 has an invalid length. [ 1040.870946][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.955504][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.368003][T15043] netlink: 'syz.3.2333': attribute type 1 has an invalid length. [ 1042.580247][T15043] bond5: entered promiscuous mode [ 1042.586243][T15043] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1042.631436][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 1042.744763][T15048] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1042.755068][T15048] bond5: (slave bond6): making interface the new active one [ 1042.762874][ T5923] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1042.770792][T15048] bond6: entered promiscuous mode [ 1042.777124][T15048] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1042.860994][ T7292] net_ratelimit: 2 callbacks suppressed [ 1042.861017][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.950898][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.282253][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 1043.291942][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1043.301549][ T5923] usb 6-1: config 7 has an invalid interface number: 111 but max is 0 [ 1043.309753][ T5923] usb 6-1: config 7 has no interface number 0 [ 1043.501795][ T5923] usb 6-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 1043.511035][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.526869][ T5923] usb 6-1: Product: syz [ 1043.531473][ T5923] usb 6-1: Manufacturer: syz [ 1043.536205][ T5923] usb 6-1: SerialNumber: syz [ 1043.788730][T15047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.864278][T15047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.000658][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.008945][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.593491][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.135421][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.125731][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.150713][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.509498][ T5923] usb 6-1: bad CDC descriptors [ 1046.542016][ T5923] usb 6-1: USB disconnect, device number 54 [ 1047.030642][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.242160][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.350830][ T24] net_ratelimit: 2 callbacks suppressed [ 1048.350853][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.776115][ T43] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1049.086030][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1049.431144][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.481723][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1049.500446][ T43] usb 2-1: config 0 has no interface number 0 [ 1049.514973][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.534071][ T43] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1049.543483][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.560615][ T43] usb 2-1: Product: syz [ 1049.565034][ T43] usb 2-1: Manufacturer: syz [ 1049.569937][ T43] usb 2-1: SerialNumber: syz [ 1050.185566][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.229437][ T43] usb 2-1: config 0 descriptor?? [ 1050.256661][ T43] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1050.273015][ T43] usb 2-1: selecting invalid altsetting 1 [ 1050.285615][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1050.285634][ T30] audit: type=1800 audit(1749326626.533:1458): pid=15106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2348" name="bus" dev="ramfs" ino=67913 res=0 errno=0 [ 1050.333143][ T43] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1050.386495][ T43] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1050.425020][ T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1050.451088][ T43] usb 2-1: media controller created [ 1050.462146][T15102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.471236][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.500159][T15102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.538454][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1050.571694][T15102] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1050.730940][T15102] bond4: entered promiscuous mode [ 1050.736530][T15102] bond4: entered allmulticast mode [ 1050.760686][ T5926] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1050.761162][T15102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1051.038411][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1051.165916][ T5926] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1051.183367][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.263068][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.272273][ T5926] usb 5-1: config 0 has no interface number 0 [ 1051.320652][ T5926] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1051.383483][ T5926] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1051.398054][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.418624][ T5926] usb 5-1: Product: syz [ 1051.429181][ T5926] usb 5-1: Manufacturer: syz [ 1051.439840][ T5926] usb 5-1: SerialNumber: syz [ 1051.463966][ T5926] usb 5-1: config 0 descriptor?? [ 1051.476384][ T5926] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 1051.594029][ T5926] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 1051.610481][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.725809][ T5926] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1051.754232][ T5926] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 1051.914866][T15115] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1052.002378][ T43] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1052.054640][ T43] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1052.109368][ T43] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1052.491012][ T43] usb 2-1: USB disconnect, device number 55 [ 1052.594662][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.615821][T15129] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1052.640738][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.320509][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1053.670628][ T43] net_ratelimit: 1 callbacks suppressed [ 1053.670649][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.697436][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1053.723411][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.748248][ T977] usb 5-1: USB disconnect, device number 55 [ 1053.788248][ T10] usb 4-1: Product: syz [ 1053.792018][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.801228][ T10] usb 4-1: Manufacturer: syz [ 1053.805891][ T10] usb 4-1: SerialNumber: syz [ 1053.890812][T15140] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1053.904019][T15140] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1053.951118][ T10] usb 4-1: config 0 descriptor?? [ 1054.255582][T15135] program syz.3.2353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1054.711110][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.121363][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.227950][T15152] netlink: 'syz.5.2358': attribute type 21 has an invalid length. [ 1055.236644][T15152] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2358'. [ 1055.255486][T15152] netlink: 'syz.5.2358': attribute type 4 has an invalid length. [ 1055.264002][T15152] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2358'. [ 1055.958739][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.243557][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.461048][ T5923] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1056.650725][ T5923] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.662800][ T5923] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1056.686215][ T5923] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1056.698340][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1056.707443][ T5923] usb 1-1: SerialNumber: syz [ 1056.731286][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.830581][ T977] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1056.994124][ T977] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1057.022615][ T977] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1057.031119][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.180278][ T977] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1057.239781][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.270941][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.284519][T15159] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1057.310281][ T977] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1057.349886][ T10] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1057.368715][ T10] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1057.430209][ T10] usb 4-1: USB disconnect, device number 66 [ 1057.648146][ T977] usb 6-1: USB disconnect, device number 55 [ 1057.672825][T15166] netlink: 'syz.1.2361': attribute type 12 has an invalid length. [ 1057.768556][T15167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.121179][ T24] net_ratelimit: 1025 callbacks suppressed [ 1059.121202][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.271222][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.701669][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.738578][T15177] netlink: 'syz.4.2364': attribute type 27 has an invalid length. [ 1059.838447][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.844867][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.171462][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.254365][T15177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.266747][T15177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.597970][ T5923] usb 1-1: USB disconnect, device number 52 [ 1060.631487][T15185] ptrace attach of "./syz-executor exec"[7894] was attempted by "./syz-executor exec"[15185] [ 1060.884817][T15177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1061.323303][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.589839][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.324818][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.638562][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.815307][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.306476][ T12] net_ratelimit: 1 callbacks suppressed [ 1064.306494][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.342978][T15213] binder: 15211:15213 ioctl c018620c 200000000380 returned -22 [ 1064.415997][T15214] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.520721][T15214] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.529924][T15214] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.589312][T15214] geneve2: entered promiscuous mode [ 1064.710862][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.366600][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.544233][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.782260][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.805447][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.856869][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.874366][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.844430][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.342622][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.440717][ T30] audit: type=1326 audit(1749326644.683:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.5.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1068.620290][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2378'. [ 1068.651013][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2378'. [ 1068.796814][ T30] audit: type=1326 audit(1749326644.683:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.5.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1068.819359][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.130618][ T30] audit: type=1326 audit(1749326644.683:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.5.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1069.153364][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.263400][ T30] audit: type=1326 audit(1749326644.683:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.5.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1069.285861][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.314932][ T30] audit: type=1326 audit(1749326644.683:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.5.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1069.337384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.630457][ T30] audit: type=1326 audit(1749326644.683:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.5.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1069.652836][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.706702][ T30] audit: type=1326 audit(1749326644.683:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.5.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1069.733159][ T49] net_ratelimit: 2 callbacks suppressed [ 1069.733177][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.803245][ T30] audit: type=1326 audit(1749326644.683:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.5.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1069.942179][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.035547][ T30] audit: type=1326 audit(1749326644.683:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.5.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1070.136677][T15277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1070.257160][ T30] audit: type=1326 audit(1749326644.683:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.5.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1070.420577][ T5926] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1070.672093][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 1070.739428][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1070.843899][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1070.916885][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1070.953048][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.035706][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1071.056320][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.212611][ T5926] usb 4-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 1071.230399][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.269032][ T5926] usb 4-1: Product: syz [ 1071.320435][ T5926] usb 4-1: Manufacturer: syz [ 1071.342789][ T5926] usb 4-1: SerialNumber: syz [ 1071.411616][ T5926] usb 4-1: config 0 descriptor?? [ 1071.431826][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.433664][ T5926] cypress_m8 4-1:0.0: HID->COM RS232 Adapter converter detected [ 1071.501977][T15279] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=778909908 (6231279264 ns) > initial count (2900669840 ns). Using initial count to start timer. [ 1071.522406][ T5926] cyphidcom ttyUSB0: required endpoint is missing [ 1071.609691][T15283] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2393'. [ 1072.037557][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.334269][ T5923] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1072.359005][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.781114][ T5923] usb 2-1: config 0 has no interfaces? [ 1072.842028][ T5923] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1072.866508][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.889598][ T5923] usb 2-1: Product: syz [ 1072.901474][ T5923] usb 2-1: Manufacturer: syz [ 1072.961844][ T5923] usb 2-1: SerialNumber: syz [ 1072.980138][ T5923] usb 2-1: config 0 descriptor?? [ 1073.030561][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1073.110791][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.150952][ T43] usb 4-1: USB disconnect, device number 67 [ 1073.172386][ T43] cypress_m8 4-1:0.0: device disconnected [ 1073.851559][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.092217][ T10] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.102877][ T10] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1074.127872][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1074.151509][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.174651][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.425902][T15301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.191680][ T43] net_ratelimit: 1 callbacks suppressed [ 1075.191697][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.371499][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.769249][T15321] vivid-000: disconnect [ 1076.213786][T15311] vivid-000: reconnect [ 1076.250654][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.474498][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.502541][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.752618][ T5926] usb 2-1: USB disconnect, device number 56 [ 1076.840121][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.901421][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.440900][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.510763][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.716777][ T10] usb 1-1: USB disconnect, device number 53 [ 1077.830744][ T5926] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1078.106532][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 1078.188922][ T5926] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1078.240454][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.244444][T15342] ipt_ECN: cannot use operation on non-tcp rule [ 1078.269393][ T5926] usb 2-1: Product: syz [ 1078.292645][ T5926] usb 2-1: Manufacturer: syz [ 1078.297321][ T5926] usb 2-1: SerialNumber: syz [ 1078.339606][ T5926] usb 2-1: config 0 descriptor?? [ 1078.629060][ T5926] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1078.639554][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.598502][ T10] net_ratelimit: 2 callbacks suppressed [ 1080.598523][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.641133][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.710650][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.721431][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.738635][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.766728][ T5926] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1080.801153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.864746][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.873620][ T5926] usb 2-1: USB disconnect, device number 57 [ 1081.390710][T15360] syz_tun: left allmulticast mode [ 1081.398645][T15360] bridge0: port 4(syz_tun) entered disabled state [ 1081.504089][T15360] bridge0: port 1(dummy0) entered disabled state [ 1081.596649][T15360] bridge_slave_1: left allmulticast mode [ 1081.614216][T15373] ptrace attach of "./syz-executor exec"[7894] was attempted by "./syz-executor exec"[15373] [ 1081.653129][T15360] bridge_slave_1: left promiscuous mode [ 1081.662275][T15360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.820818][ T43] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1081.854270][T15120] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1081.871410][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.930634][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.331362][T15120] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1082.332161][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.356226][T15120] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1082.368170][T15360] bond0: (slave bond_slave_0): Releasing backup interface [ 1082.496425][T15120] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1082.506025][T15120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.520824][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.531708][T15360] bond_slave_0: left promiscuous mode [ 1082.537251][T15360] bond_slave_0: left allmulticast mode [ 1082.563312][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1082.582276][T15372] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1082.594642][T15360] bond0: (slave bond_slave_1): Releasing backup interface [ 1082.602562][ T43] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1082.613679][T15360] bond_slave_1: left promiscuous mode [ 1082.623791][T15360] bond_slave_1: left allmulticast mode [ 1082.651739][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1082.674739][T15120] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1082.700726][T15360] team0: Failed to send options change via netlink (err -105) [ 1082.701485][ T43] usb 4-1: SerialNumber: syz [ 1082.719269][T15360] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1082.936254][T15360] team0: Port device team_slave_0 removed [ 1083.125504][T15360] team0: Failed to send options change via netlink (err -105) [ 1083.133569][T15360] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1083.190801][T15372] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2402'. [ 1083.207678][T15360] team0: Port device team_slave_1 removed [ 1083.253943][T15120] usb 5-1: USB disconnect, device number 56 [ 1083.300548][T15360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.782926][T14054] udevd[14054]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1083.880166][T15360] bond1: (slave ip6gretap1): Removing an active aggregator [ 1083.889067][T15360] bond1: (slave ip6gretap1): Releasing backup interface [ 1084.171605][T15360] ip6gretap1: left promiscuous mode [ 1084.210964][T15360] ip6gretap1: left allmulticast mode [ 1084.265945][T15360] bond2: (slave geneve2): Releasing active interface [ 1084.276659][T15360] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1084.314217][T15360] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1084.343811][T15360] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1084.382677][T15360] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1084.475525][T15360] bond3: (slave veth7): Releasing backup interface [ 1084.564728][T15360] bond0: left allmulticast mode [ 1084.659728][T15360] team0: Failed to send options change via netlink (err -105) [ 1084.699759][T15360] team0: Failed to send port change of device macvlan3 via netlink (err -105) [ 1084.751442][T15360] team0: Port device macvlan3 removed [ 1084.781114][T15360] vlan2: left allmulticast mode [ 1084.806266][T15360] dummy0: left allmulticast mode [ 1084.833085][T15360] vlan2: left promiscuous mode [ 1084.860942][T15360] bridge0: port 3(vlan2) entered disabled state [ 1084.971105][T15360] bond4: (slave gretap1): Releasing active interface [ 1085.182938][T15360] bond5: (slave bond6): Releasing backup interface [ 1085.189532][T15360] bond6: left promiscuous mode [ 1085.378361][ T43] usb 4-1: 0:2 : does not exist [ 1085.485542][ T43] usb 4-1: USB disconnect, device number 68 [ 1085.893845][T14425] udevd[14425]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1086.070981][ T7289] net_ratelimit: 6 callbacks suppressed [ 1086.071003][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.085711][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.095379][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.230825][T15389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.273675][T15400] netlink: 'syz.3.2408': attribute type 3 has an invalid length. [ 1086.333516][T15400] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2408'. [ 1086.422719][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.790910][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.113933][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.751638][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1088.016193][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.030689][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1088.038004][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.150851][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.161581][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1088.177080][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.188240][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1088.256381][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1088.266028][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.279286][ T10] usb 4-1: Product: syz [ 1088.292787][ T10] usb 4-1: Manufacturer: syz [ 1088.399528][ T10] usb 4-1: SerialNumber: syz [ 1088.710442][ T5923] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1088.900526][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 1088.912653][ T5923] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1088.922515][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.933024][ T5923] usb 1-1: Product: syz [ 1088.937496][ T5923] usb 1-1: Manufacturer: syz [ 1088.946631][ T5923] usb 1-1: SerialNumber: syz [ 1088.976900][ T5923] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1088.983591][ T5923] r8152-cfgselector 1-1: config 0 descriptor?? [ 1089.201156][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.406520][ T5841] r8152-cfgselector 1-1: USB disconnect, device number 54 [ 1089.490760][ T5923] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1089.612757][T15421] kvm: kvm [15420]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x77a9 [ 1089.643333][T15421] kvm: kvm [15420]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0xb551 [ 1089.668158][T15421] kvm: kvm [15420]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0xd93d [ 1089.684462][ T5923] usb 5-1: config 0 has no interfaces? [ 1089.687972][T15421] kvm: kvm [15420]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x8721 [ 1089.706835][T15421] kvm_intel: kvm [15420]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x2b69 [ 1089.728564][ T5923] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1089.778061][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.890713][ T5923] usb 5-1: Product: syz [ 1090.060981][ T5923] usb 5-1: Manufacturer: syz [ 1090.078603][ T5923] usb 5-1: SerialNumber: syz [ 1090.112737][ T5923] usb 5-1: config 0 descriptor?? [ 1090.590588][ T5923] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1090.772234][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 1090.855952][ T5923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1090.946399][ T5923] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 1091.023486][ T10] usb 4-1: USB disconnect, device number 69 [ 1091.054065][ T5923] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.270658][T15379] net_ratelimit: 4 callbacks suppressed [ 1091.270675][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.576545][ T5923] usb 1-1: config 7 has no interface number 0 [ 1091.595998][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.605833][ T5923] usb 1-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.634879][ T5923] usb 1-1: config 7 interface 187 has no altsetting 0 [ 1091.660078][ T5923] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1091.669984][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.678565][ T5923] usb 1-1: Product: syz [ 1091.682994][ T5923] usb 1-1: Manufacturer: syz [ 1091.687651][ T5923] usb 1-1: SerialNumber: syz [ 1091.913666][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.922743][T15423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.936389][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.070977][ T5923] usb 1-1: Cannot retrieve CPort count: -32 [ 1092.079433][ T5923] usb 1-1: Cannot retrieve CPort count: -32 [ 1092.201189][ T5923] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -32 [ 1092.501250][T15447] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 15447 comm: syz.1.2418) [ 1092.578389][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1092.578407][ T30] audit: type=1800 audit(1749326668.773:1472): pid=15447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2418" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=68834 res=0 errno=0 [ 1092.876002][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.165538][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.175936][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.831606][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.920232][ T5923] usb 5-1: USB disconnect, device number 57 [ 1094.066310][ T5926] usb 1-1: USB disconnect, device number 55 [ 1094.179851][T15466] macsec0: entered promiscuous mode [ 1094.190426][T15466] macsec0: left promiscuous mode [ 1094.231334][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.300490][T15379] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1094.555795][T15379] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1094.586334][T15379] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1094.784789][T15379] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1094.858811][ T5923] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1094.879386][T15379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.922061][T15462] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1094.930576][T15423] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1094.953704][T15379] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1095.031662][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 1095.042770][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.054795][ T5923] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 1095.071450][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.133445][ T5923] usb 5-1: config 0 descriptor?? [ 1095.140559][T15423] usb 1-1: Using ep0 maxpacket: 32 [ 1095.164380][T15423] usb 1-1: config 0 has no interfaces? [ 1095.171983][T15423] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1095.195059][T15423] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1095.220453][T15423] usb 1-1: Product: syz [ 1095.227423][T15423] usb 1-1: Manufacturer: syz [ 1095.293263][T15423] usb 1-1: config 0 descriptor?? [ 1095.320862][T15462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.396676][T15462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.568717][ T5923] usbhid 5-1:0.0: can't add hid device: -71 [ 1095.592002][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1095.622756][ T5923] usb 5-1: USB disconnect, device number 58 [ 1095.643987][T15423] usb 2-1: USB disconnect, device number 58 [ 1095.721306][ T10] usb 1-1: USB disconnect, device number 56 [ 1096.315427][T15379] net_ratelimit: 5 callbacks suppressed [ 1096.315448][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.800658][T15491] netlink: 'syz.5.2428': attribute type 12 has an invalid length. [ 1097.403805][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.575902][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.607884][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.616926][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.702147][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.710639][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.873701][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.950621][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.040449][ T10] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1099.131045][T15505] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1099.317318][ T10] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 1099.370842][ T10] usb 4-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 1099.409303][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1099.425741][ T10] usb 4-1: config 1 has no interface number 0 [ 1099.433767][ T10] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1099.472037][ T10] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.517470][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1099.526859][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.535841][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.538746][ T10] usb 4-1: Product: syz [ 1099.556910][ T10] usb 4-1: Manufacturer: syz [ 1099.584983][ T10] usb 4-1: SerialNumber: syz [ 1099.804190][ T10] cdc_wdm 4-1:1.128: skipping garbage [ 1099.830870][ T10] cdc_wdm 4-1:1.128: cdc-wdm0: USB WDM device [ 1099.849329][T15514] xt_hashlimit: max too large, truncated to 1048576 [ 1099.862313][ T10] cdc_wdm 4-1:1.128: Unknown control protocol [ 1099.863640][T15514] xt_bpf: check failed: parse error [ 1099.903510][T15516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.075986][T15519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.089986][T15519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.175543][T15379] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1100.734264][ T10] usb 4-1: USB disconnect, device number 70 [ 1100.850624][T15379] usb 1-1: Using ep0 maxpacket: 32 [ 1100.943989][T15379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1100.959594][T15379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1100.982369][T15379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1101.043125][T15379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1101.083059][T15379] usb 1-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 1101.092526][T15379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.158783][T15379] usb 1-1: Product: syz [ 1101.190657][T15379] usb 1-1: Manufacturer: syz [ 1101.222702][T15379] usb 1-1: SerialNumber: syz [ 1101.236722][T15379] usb 1-1: config 0 descriptor?? [ 1101.382749][T15379] cypress_m8 1-1:0.0: HID->COM RS232 Adapter converter detected [ 1101.394834][T15379] cyphidcom ttyUSB0: required endpoint is missing [ 1101.490278][T15530] overlayfs: missing 'lowerdir' [ 1101.661329][ T36] net_ratelimit: 3 callbacks suppressed [ 1101.661348][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.830731][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.071087][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.410419][T15379] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1102.608410][T15379] usb 6-1: config 0 has no interfaces? [ 1102.625315][T15379] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1102.634891][T15379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.644178][T15379] usb 6-1: Product: syz [ 1102.668618][T15379] usb 6-1: Manufacturer: syz [ 1102.686874][T15379] usb 6-1: SerialNumber: syz [ 1102.732626][T15379] usb 6-1: config 0 descriptor?? [ 1102.870782][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.602962][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.643226][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.653254][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.730748][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.097431][T15379] usb 1-1: USB disconnect, device number 57 [ 1104.108148][T15379] cypress_m8 1-1:0.0: device disconnected [ 1104.717828][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.863674][ T5923] usb 6-1: USB disconnect, device number 56 [ 1104.870431][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1104.980646][T15379] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1105.115856][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.120593][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1105.183954][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.197649][T15379] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 1105.225405][T15379] usb 4-1: config 0 has no interface number 0 [ 1105.405964][ T24] usb 5-1: config 0 has no interfaces? [ 1105.560713][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1105.569903][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.592417][ T43] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1105.670649][T15379] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 1105.679826][ T24] usb 5-1: config 0 descriptor?? [ 1105.775414][T15379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.794098][T15379] usb 4-1: Product: syz [ 1106.037561][T15379] usb 4-1: Manufacturer: syz [ 1106.095050][T15379] usb 4-1: SerialNumber: syz [ 1106.134330][ T43] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.252004][T15379] usb 4-1: config 0 descriptor?? [ 1106.265364][ T43] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1106.302358][T15379] ftdi_sio 4-1:0.23: FTDI USB Serial Device converter detected [ 1106.415135][ T43] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1106.509251][T15379] usb 4-1: Detected SIO [ 1106.536471][T15379] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1106.547849][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1106.560028][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.755764][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1106.790869][T15379] net_ratelimit: 4 callbacks suppressed [ 1106.790889][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.235810][ T43] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1107.768252][ T43] usb 2-1: USB disconnect, device number 59 [ 1107.852004][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.984074][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.155413][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.444718][ T5923] usb 5-1: USB disconnect, device number 59 [ 1108.773859][ T43] usb 4-1: USB disconnect, device number 71 [ 1108.782574][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1108.816540][ T43] ftdi_sio 4-1:0.23: device disconnected [ 1108.870574][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.271377][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.359856][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2450'. [ 1109.369267][T15595] dummy0: left allmulticast mode [ 1109.412626][T15595] dummy0: left promiscuous mode [ 1109.693929][T15595] bridge0: port 3(dummy0) entered disabled state [ 1109.729763][T15595] bridge_slave_1: left allmulticast mode [ 1109.737851][T15595] bridge_slave_1: left promiscuous mode [ 1109.745271][T15595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.863723][T15595] bridge_slave_0: left allmulticast mode [ 1109.940586][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.833956][T15595] bridge_slave_0: left promiscuous mode [ 1110.847813][T15595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.951342][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.078319][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.427731][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.610550][T15607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1111.926817][ T43] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1112.003582][T15379] net_ratelimit: 1 callbacks suppressed [ 1112.003604][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.098853][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 1112.125735][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1112.252984][ T43] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 1112.414910][ T43] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.520815][ T43] usb 4-1: config 7 has no interface number 0 [ 1112.560671][ T43] usb 4-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1112.620481][ T43] usb 4-1: config 7 interface 187 has no altsetting 0 [ 1112.661154][ T43] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1112.810559][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.832171][ T43] usb 4-1: Product: syz [ 1112.844604][ T43] usb 4-1: Manufacturer: syz [ 1112.918729][ T43] usb 4-1: SerialNumber: syz [ 1113.030955][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.047931][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.168899][ T43] usb 4-1: Cannot retrieve CPort count: -32 [ 1113.178406][ T43] usb 4-1: Cannot retrieve CPort count: -32 [ 1113.185238][ T43] es2_ap_driver 4-1:7.187: probe with driver es2_ap_driver failed with error -32 [ 1114.003314][T15617] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2455'. [ 1114.013103][T15617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2455'. [ 1114.071628][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.081115][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.125501][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.380563][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.472204][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.484402][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.513180][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.670357][T15627] loop2: detected capacity change from 0 to 7 [ 1114.684332][T15627] Dev loop2: unable to read RDB block 7 [ 1114.690657][T15627] loop2: unable to read partition table [ 1114.698239][T15627] loop2: partition table beyond EOD, truncated [ 1114.725754][T15627] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1114.894802][ T5923] usb 4-1: USB disconnect, device number 72 [ 1115.374600][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1115.414435][T15635] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2460'. [ 1115.651217][ T10] usb 1-1: config 0 has no interfaces? [ 1115.708595][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1115.723358][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.057293][ T10] usb 1-1: Product: syz [ 1116.062137][ T10] usb 1-1: Manufacturer: syz [ 1116.067009][ T10] usb 1-1: SerialNumber: syz [ 1116.084681][ T10] usb 1-1: config 0 descriptor?? [ 1116.334532][T15633] fuse: Unknown parameter 'use0000000000000000000000000000000000000000' [ 1117.001309][T15657] input: syz1 as /devices/virtual/input/input36 [ 1117.031305][T15657] program syz.3.2465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1117.152724][ T7292] net_ratelimit: 5 callbacks suppressed [ 1117.152741][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.271008][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.590536][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.317259][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.327195][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.531297][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1118.770906][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1118.842947][ T5923] usb 1-1: USB disconnect, device number 58 [ 1118.880511][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1118.887749][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1118.903217][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1118.923867][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1118.948043][ T24] usb 5-1: config 0 has no interfaces? [ 1118.970405][ T10] usb 6-1: Product: syz [ 1118.974649][ T10] usb 6-1: Manufacturer: syz [ 1118.994905][ T10] usb 6-1: SerialNumber: syz [ 1119.020474][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1119.041574][ T10] usb 6-1: config 0 descriptor?? [ 1119.043507][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.086655][ T24] usb 5-1: Product: syz [ 1119.127008][T15665] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1119.184757][ T24] usb 5-1: Manufacturer: syz [ 1119.199149][ T24] usb 5-1: SerialNumber: syz [ 1119.221181][ T24] usb 5-1: config 0 descriptor?? [ 1119.350648][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.715791][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.958630][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.991790][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.000630][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.197263][ T30] audit: type=1326 audit(1749326696.443:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.3.2470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa96298e929 code=0x0 [ 1121.300849][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.307674][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.881220][ T43] usb 6-1: USB disconnect, device number 57 [ 1122.274584][ T3453] net_ratelimit: 8 callbacks suppressed [ 1122.274605][ T3453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.640912][ T43] usb 5-1: USB disconnect, device number 60 [ 1123.110787][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.131354][ T24] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1123.154431][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.186630][T15423] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1123.198742][ T5923] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1123.446536][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1123.533303][ T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1123.601996][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.610813][ T24] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1123.618922][ T24] usb 6-1: Product: syz [ 1123.626404][ T5923] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.761258][ T5923] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1123.774960][T15423] usb 2-1: Using ep0 maxpacket: 32 [ 1123.780691][ T24] usb 6-1: Manufacturer: syz [ 1123.800875][ T24] usb 6-1: SerialNumber: syz [ 1123.833716][T15423] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1123.842603][T15423] usb 2-1: config 0 has no interface number 0 [ 1123.858298][ T5923] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1123.867576][T15423] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1123.881281][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.920964][T15423] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1123.921060][ T24] usb 6-1: config 0 descriptor?? [ 1123.948061][T15423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.071077][T15423] usb 2-1: Product: syz [ 1124.075326][T15423] usb 2-1: Manufacturer: syz [ 1124.189778][ T5923] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1124.298349][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.331118][T15708] delete_channel: no stack [ 1124.388524][T15423] usb 2-1: SerialNumber: syz [ 1124.488471][T15423] usb 2-1: config 0 descriptor?? [ 1124.711793][T15423] smsc75xx v1.0.0 [ 1124.722579][ T5923] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1124.740271][T15423] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1124.767212][T14425] udevd[14425]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1124.788483][ T5923] usb 4-1: USB disconnect, device number 73 [ 1124.805599][T15423] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1124.924791][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.114393][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.350635][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.620710][ T43] usb 6-1: USB disconnect, device number 58 [ 1125.750825][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.759632][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.290419][ T43] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1126.442618][ T43] usb 1-1: config 0 has no interfaces? [ 1126.452390][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1126.461749][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.469895][ T43] usb 1-1: Product: syz [ 1126.474257][ T43] usb 1-1: Manufacturer: syz [ 1126.479395][ T43] usb 1-1: SerialNumber: syz [ 1126.487222][ T43] usb 1-1: config 0 descriptor?? [ 1127.433954][ T43] net_ratelimit: 3 callbacks suppressed [ 1127.433973][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.609927][T15754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1127.637768][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2484'. [ 1127.670810][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.713785][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.041677][ T43] usb 2-1: USB disconnect, device number 60 [ 1128.471017][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.716448][ T43] usb 1-1: USB disconnect, device number 59 [ 1128.801375][T15423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.041309][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.900256][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.880997][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.900833][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.963400][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.536502][T15804] trusted_key: encrypted_key: insufficient parameters specified [ 1132.335646][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 1132.385591][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1132.612612][T15802] vlan1: entered allmulticast mode [ 1132.617820][T15802] bridge_slave_0: entered allmulticast mode [ 1133.033549][ T43] net_ratelimit: 5 callbacks suppressed [ 1133.033571][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.436459][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.532345][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.070796][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.633843][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.910809][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.411111][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.450503][ T24] usb 4-1: device descriptor read/64, error -71 [ 1135.680405][ T43] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1135.720584][ T24] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1135.974760][ T24] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1136.003548][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1136.050553][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1136.082849][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1136.115383][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1136.145013][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1136.180498][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1136.204369][ T43] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1136.216892][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1136.233913][ T43] usb 1-1: config 0 has no interface number 0 [ 1136.302885][ T43] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1136.312433][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1136.465478][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1136.482874][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.501891][ T43] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1136.512321][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1136.522263][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.570413][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.600583][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1136.627403][ T43] usb 1-1: Product: syz [ 1136.631381][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.672052][ T43] usb 1-1: Manufacturer: syz [ 1136.676724][ T43] usb 1-1: SerialNumber: syz [ 1136.686629][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1136.831242][ T43] usb 1-1: config 0 descriptor?? [ 1136.890587][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1136.963028][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1137.007914][ T43] smsc75xx v1.0.0 [ 1137.027126][ T43] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1137.053518][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1137.135791][ T43] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 1137.167490][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1137.246454][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1137.277600][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1137.400424][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1137.443739][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1137.523303][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1137.570936][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1137.591614][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1137.632501][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1137.666923][ T30] audit: type=1326 audit(1749326713.913:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1137.713350][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1137.817937][ T30] audit: type=1326 audit(1749326713.943:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1138.416116][ T24] usb 4-1: string descriptor 0 read error: -71 [ 1138.430699][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1138.449146][ T24] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1138.550793][T15379] net_ratelimit: 3 callbacks suppressed [ 1138.550808][T15379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.583750][T15885] binder: 15882:15885 ioctl c00c620f 200000000500 returned -22 [ 1138.652114][ T24] usb 4-1: config 0 descriptor?? [ 1138.699785][ T24] usb 4-1: can't set config #0, error -71 [ 1138.701888][T15423] usb 1-1: USB disconnect, device number 60 [ 1138.728123][ T30] audit: type=1326 audit(1749326713.943:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1138.792718][ T24] usb 4-1: USB disconnect, device number 75 [ 1138.910099][ T30] audit: type=1326 audit(1749326713.953:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1139.072534][ T30] audit: type=1326 audit(1749326713.953:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1139.194608][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.260688][ T30] audit: type=1326 audit(1749326713.953:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbe0f98e929 code=0x7ffc0000 [ 1139.472835][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.590695][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.633046][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.752704][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.871425][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.010726][T15423] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1141.323258][T15423] usb 5-1: Using ep0 maxpacket: 8 [ 1141.630384][T15423] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1141.649063][T15423] usb 5-1: config 179 has no interface number 0 [ 1141.690453][T15423] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1141.723901][T15423] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1141.735639][T15423] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1142.035507][T15423] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1142.089336][T15423] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1142.240347][T15423] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1142.270502][T15379] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1142.277934][T15423] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1142.316542][T15423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.558804][T15423] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input38 [ 1142.562995][T15379] usb 2-1: config 0 has no interfaces? [ 1142.646361][T15379] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1142.683391][T15379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.722258][ T5190] input input38: unable to receive magic message: -110 [ 1142.735687][T15379] usb 2-1: Product: syz [ 1142.766788][T15379] usb 2-1: Manufacturer: syz [ 1142.786518][T15379] usb 2-1: SerialNumber: syz [ 1142.873316][T15918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2507'. [ 1142.997248][ T5190] input input38: unable to receive magic message: -32 [ 1143.089028][T15379] usb 2-1: config 0 descriptor?? [ 1143.203647][ T5190] input input38: unable to receive magic message: -32 [ 1143.292160][T15943] loop2: detected capacity change from 0 to 7 [ 1143.323448][T15943] Dev loop2: unable to read RDB block 7 [ 1143.329141][T15943] loop2: unable to read partition table [ 1143.336683][T15943] loop2: partition table beyond EOD, truncated [ 1143.343892][T15943] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1143.631933][ T5190] input input38: unable to receive magic message: -32 [ 1143.766259][ T5190] input input38: unable to receive magic message: -32 [ 1143.803158][T15379] usb 5-1: USB disconnect, device number 61 [ 1143.803157][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1143.803208][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1143.811952][T15379] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1143.946374][T15958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1145.778250][ T24] usb 2-1: USB disconnect, device number 61 [ 1149.400477][ T24] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1149.598312][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1150.765158][T16025] kvm: kvm [16022]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1150.814333][T16025] kvm: kvm [16022]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1150.825419][T16025] kvm: kvm [16022]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1150.883113][T16025] kvm_intel: kvm [16022]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 1153.500416][T15423] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1153.831494][T15423] usb 5-1: config 0 has no interfaces? [ 1154.017480][T15423] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1154.047901][T15423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.217994][T16051] openvswitch: netlink: Message has 24 unknown bytes. [ 1154.239417][T16051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1154.270466][T15423] usb 5-1: Product: syz [ 1154.274725][T15423] usb 5-1: Manufacturer: syz [ 1154.308659][T15423] usb 5-1: SerialNumber: syz [ 1154.331490][T15423] usb 5-1: config 0 descriptor?? [ 1154.385699][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1154.489725][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1154.532467][ T24] usb 2-1: can't read configurations, error -71 [ 1154.810430][T15379] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1154.960790][T15379] usb 6-1: Using ep0 maxpacket: 16 [ 1155.007615][T15379] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1155.047160][T15379] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1155.111979][T15379] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 1155.155934][T15379] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 1155.236302][T15379] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1155.246239][T15379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1155.259455][T15379] usb 6-1: SerialNumber: syz [ 1155.314280][T16051] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1155.331900][T15379] cdc_acm 6-1:1.0: skipping garbage [ 1155.337617][T15379] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1155.354867][T15379] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 1155.364663][T15379] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 1155.545158][ T10] usb 6-1: USB disconnect, device number 59 [ 1156.898673][T15379] usb 5-1: USB disconnect, device number 62 [ 1156.981562][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2535'. [ 1157.306169][T16073] syz.0.2534 (16073): drop_caches: 2 [ 1159.394526][ T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1159.853836][T15379] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1159.880481][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1159.904592][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.987945][ T10] usb 1-1: config 0 has no interfaces? [ 1160.028622][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1160.137390][T15379] usb 5-1: Using ep0 maxpacket: 32 [ 1160.168256][T15379] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1160.211904][T15379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1160.253937][T15379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1160.295654][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.311970][T15379] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1160.362912][T15379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1160.391822][ T10] usb 1-1: config 0 descriptor?? [ 1160.489167][T15379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1160.656745][T15379] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1160.696960][T15379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.730372][T15379] usb 5-1: Product: syz [ 1160.755917][T16102] team0: Device gtp0 is of different type [ 1160.804051][T15379] usb 5-1: Manufacturer: syz [ 1160.808791][T15379] usb 5-1: SerialNumber: syz [ 1160.817783][T15379] usb 5-1: config 0 descriptor?? [ 1160.947927][T16116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.007921][T16116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.069203][T16116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.280415][T16116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.151803][T16127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.160944][T16127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.169996][T16127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.179643][T16127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.189303][T16127] geneve3: entered promiscuous mode [ 1162.196364][T16127] geneve3: entered allmulticast mode [ 1162.237349][T16127] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.247546][T16127] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.257888][T16127] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.268610][T16127] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.488873][ T10] usb 5-1: USB disconnect, device number 63 [ 1162.750573][ T5923] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1163.989798][T15120] usb 1-1: USB disconnect, device number 61 [ 1164.303454][ T5923] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.378190][ T5923] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1164.433367][ T5923] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1164.481908][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.380571][ T5923] usb 6-1: can't set config #27, error -71 [ 1165.403072][T16128] delete_channel: no stack [ 1165.429905][ T5923] usb 6-1: USB disconnect, device number 60 [ 1165.870957][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1166.168852][ T10] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1166.182821][ T10] usb 4-1: config 0 has no interface number 0 [ 1166.194079][T16160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2552'. [ 1166.225513][ T10] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1166.269172][ T10] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1166.287136][ T10] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1166.297428][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.307537][ T10] usb 4-1: Product: syz [ 1166.312523][ T10] usb 4-1: Manufacturer: syz [ 1166.317223][ T10] usb 4-1: SerialNumber: syz [ 1166.347263][ T10] usb 4-1: config 0 descriptor?? [ 1166.356511][T16150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1166.370771][ T10] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1166.388157][ T10] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1166.585281][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1166.793884][ T10] usb 4-1: USB disconnect, device number 76 [ 1166.871232][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1166.913497][ T10] cyberjack 4-1:0.69: device disconnected [ 1167.104707][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2554'. [ 1167.887856][ T10] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1168.200537][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1168.207944][ T10] usb 4-1: config 0 has no interfaces? [ 1168.331671][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1168.347708][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.371096][ T10] usb 4-1: Product: syz [ 1168.380730][ T10] usb 4-1: Manufacturer: syz [ 1168.385433][ T10] usb 4-1: SerialNumber: syz [ 1168.641823][ T10] usb 4-1: config 0 descriptor?? [ 1168.896711][T15379] usb 4-1: USB disconnect, device number 77 [ 1170.611185][T16199] netlink: 'syz.5.2561': attribute type 12 has an invalid length. [ 1171.356091][T16195] hsr0: entered promiscuous mode [ 1171.362174][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2560'. [ 1171.385871][T16195] hsr_slave_0: left promiscuous mode [ 1171.410544][T16195] hsr_slave_1: left promiscuous mode [ 1171.456712][T16195] hsr0 (unregistering): left promiscuous mode [ 1171.510404][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1172.017533][ T10] usb 5-1: config 0 has no interfaces? [ 1172.047976][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1172.069614][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.117059][ T10] usb 5-1: Product: syz [ 1172.158199][ T10] usb 5-1: Manufacturer: syz [ 1172.201657][ T10] usb 5-1: SerialNumber: syz [ 1172.239826][ T10] usb 5-1: config 0 descriptor?? [ 1172.250649][ T5923] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1172.434923][ T5923] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.451710][ T5923] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1172.529180][ T5923] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1172.538588][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.564543][ T5923] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1172.631343][ T5923] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1172.653950][T15379] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1172.666446][T14425] udevd[14425]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1172.814783][T16211] delete_channel: no stack [ 1172.833732][T15379] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.847850][T15379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1172.857878][T15379] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1172.869088][T15379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.880753][T15379] usb 2-1: config 0 descriptor?? [ 1172.905415][T15379] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1172.914770][ T5923] usb 1-1: USB disconnect, device number 62 [ 1172.918148][T15379] dvb-usb: bulk message failed: -22 (3/0) [ 1172.961505][T15379] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1173.033727][T15379] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1173.046073][T15379] usb 2-1: media controller created [ 1173.085474][T15379] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1173.256134][T15379] dvb-usb: bulk message failed: -22 (6/0) [ 1173.312988][T15379] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1173.329933][T15379] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 1173.381574][T16225] dvb-usb: bulk message failed: -22 (2/0) [ 1173.395471][T15379] dvb-usb: schedule remote query interval to 150 msecs. [ 1173.490477][T15379] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1173.630391][T15379] dvb-usb: bulk message failed: -22 (1/0) [ 1173.636237][T15379] dvb-usb: error while querying for an remote control event. [ 1173.800382][T15379] dvb-usb: bulk message failed: -22 (1/0) [ 1173.806201][T15379] dvb-usb: error while querying for an remote control event. [ 1173.980480][T15379] dvb-usb: bulk message failed: -22 (1/0) [ 1174.020541][T15379] dvb-usb: error while querying for an remote control event. [ 1174.045450][ T10] usb 5-1: USB disconnect, device number 64 [ 1174.200903][T15379] dvb-usb: bulk message failed: -22 (1/0) [ 1174.225084][T15379] dvb-usb: error while querying for an remote control event. [ 1174.309880][T16231] program syz.3.2565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1174.390946][T15379] dvb-usb: bulk message failed: -22 (1/0) [ 1174.402201][T15379] dvb-usb: error while querying for an remote control event. [ 1174.580578][T15379] dvb-usb: bulk message failed: -22 (1/0) [ 1174.589648][T15379] dvb-usb: error while querying for an remote control event. [ 1174.790420][T15379] dvb-usb: bulk message failed: -22 (1/0) [ 1174.796228][T15379] dvb-usb: error while querying for an remote control event. [ 1174.978328][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1175.022401][ T24] dvb-usb: error while querying for an remote control event. [ 1175.226320][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1175.254048][ T24] dvb-usb: error while querying for an remote control event. [ 1175.441185][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1175.460610][ T24] dvb-usb: error while querying for an remote control event. [ 1175.489325][ T24] usb 2-1: USB disconnect, device number 64 [ 1175.581877][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1176.800747][ T5923] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1177.049275][ T5923] usb 6-1: config 0 has no interfaces? [ 1177.065331][ T5923] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1177.075012][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.138068][ T30] audit: type=1326 audit(1749326753.383:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1177.160650][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.191002][ T5923] usb 6-1: Product: syz [ 1177.195277][ T5923] usb 6-1: Manufacturer: syz [ 1177.221309][ T5923] usb 6-1: SerialNumber: syz [ 1177.345367][ T5923] usb 6-1: config 0 descriptor?? [ 1177.398491][ T30] audit: type=1326 audit(1749326753.423:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1177.679784][ T30] audit: type=1326 audit(1749326753.423:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1177.780176][ T30] audit: type=1326 audit(1749326753.443:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1177.905662][ T30] audit: type=1326 audit(1749326753.443:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1177.928745][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.937139][ T30] audit: type=1326 audit(1749326753.473:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1177.959640][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.023561][ T30] audit: type=1326 audit(1749326753.473:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.0.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1178.046249][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.161323][T16264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2576'. [ 1178.170864][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2576'. [ 1178.618799][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'. [ 1179.716748][ T24] usb 6-1: USB disconnect, device number 61 [ 1180.281812][T16284] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2574'. [ 1180.404176][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1180.603317][ T24] usb 6-1: config 0 has no interfaces? [ 1180.613750][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1180.623036][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.632987][ T24] usb 6-1: Product: syz [ 1180.637256][ T24] usb 6-1: Manufacturer: syz [ 1180.642247][ T24] usb 6-1: SerialNumber: syz [ 1180.676078][ T24] usb 6-1: config 0 descriptor?? [ 1180.701972][T16289] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[16289] [ 1182.350439][ T10] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1182.746528][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.755200][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.022226][ T10] usb 4-1: config 0 has no interfaces? [ 1183.074223][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1183.083525][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.100566][ T10] usb 4-1: Product: syz [ 1183.106909][ T10] usb 4-1: Manufacturer: syz [ 1183.115486][ T10] usb 4-1: SerialNumber: syz [ 1183.202871][ T10] usb 4-1: config 0 descriptor?? [ 1184.222786][ T24] usb 6-1: USB disconnect, device number 62 [ 1184.696840][T16324] tipc: Started in network mode [ 1184.702077][T16324] tipc: Node identity 7f000001, cluster identity 4711 [ 1184.710967][T16324] tipc: New replicast peer: 0.0.0.0 [ 1184.717155][T16324] tipc: Enabled bearer , priority 10 [ 1185.363644][T16312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1185.844092][ T24] tipc: Node number set to 2130706433 [ 1186.200809][ T10] usb 4-1: USB disconnect, device number 78 [ 1186.420153][T16328] vivid-004: disconnect [ 1186.730576][T16330] block device autoloading is deprecated and will be removed. [ 1187.310461][ T5923] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1187.666105][ T5923] usb 2-1: config 0 has no interfaces? [ 1187.783779][ T5923] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1187.827611][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.041606][ T5923] usb 2-1: Product: syz [ 1188.045936][ T5923] usb 2-1: Manufacturer: syz [ 1188.050963][ T5923] usb 2-1: SerialNumber: syz [ 1188.059855][ T5923] usb 2-1: config 0 descriptor?? [ 1188.500431][ T10] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1188.704474][ T10] usb 6-1: config 0 has no interfaces? [ 1188.812837][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1188.832357][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.859912][ T10] usb 6-1: Product: syz [ 1188.898229][ T10] usb 6-1: Manufacturer: syz [ 1188.920202][ T10] usb 6-1: SerialNumber: syz [ 1188.975809][ T10] usb 6-1: config 0 descriptor?? [ 1189.707732][T16355] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[16355] [ 1189.721901][T16327] vivid-004: reconnect [ 1191.197142][ T24] usb 2-1: USB disconnect, device number 65 [ 1191.611199][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1191.670450][T15120] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1191.803512][ T5923] usb 6-1: USB disconnect, device number 63 [ 1191.917971][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.939974][T15120] usb 5-1: config 0 has no interfaces? [ 1191.966818][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.978094][T15120] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1191.999390][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1192.009363][T15120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.042491][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.050877][T15120] usb 5-1: Product: syz [ 1192.055114][T15120] usb 5-1: Manufacturer: syz [ 1192.059760][T15120] usb 5-1: SerialNumber: syz [ 1192.140406][T15379] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1192.156684][ T30] audit: type=1326 audit(1749326768.403:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.0.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1192.191785][ T24] usb 2-1: config 0 descriptor?? [ 1192.243792][T15120] usb 5-1: config 0 descriptor?? [ 1192.275084][ T30] audit: type=1326 audit(1749326768.403:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.0.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1192.369912][ T10] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1192.428299][T15379] usb 4-1: Using ep0 maxpacket: 32 [ 1192.447697][T15379] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 1192.460324][T15379] usb 4-1: config 0 has no interface number 0 [ 1192.466547][T15379] usb 4-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1192.525093][T15379] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1192.542884][T15379] usb 4-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1192.563805][T15379] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1192.595804][T15379] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1192.627888][ T24] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 1192.752356][ T30] audit: type=1326 audit(1749326768.433:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.0.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1192.752908][T15379] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1192.787199][ T24] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1192.845029][ T30] audit: type=1326 audit(1749326768.433:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.0.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1192.880394][T15379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.926725][ T24] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 1192.978989][ T10] usb 6-1: config 0 has no interfaces? [ 1192.989274][T15379] usb 4-1: config 0 descriptor?? [ 1193.097283][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1193.119981][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.149673][ T10] usb 6-1: Product: syz [ 1193.154125][ T30] audit: type=1326 audit(1749326768.433:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.0.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1193.188927][T15379] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1193.213386][ T10] usb 6-1: Manufacturer: syz [ 1193.236903][ T10] usb 6-1: SerialNumber: syz [ 1193.322934][ T30] audit: type=1326 audit(1749326768.433:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.0.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1193.395125][ T10] usb 6-1: config 0 descriptor?? [ 1193.655910][ T30] audit: type=1326 audit(1749326768.433:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.0.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1193.729988][ T30] audit: type=1326 audit(1749326768.433:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.0.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1193.756500][ T30] audit: type=1326 audit(1749326768.433:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.0.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1193.863845][ T24] cp2112 0003:10C4:EA90.0015: error setting SMBus config [ 1193.878511][ T24] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -71 [ 1193.898594][T16379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2597'. [ 1193.925440][T16368] pimreg: entered allmulticast mode [ 1193.931765][ T24] usb 2-1: USB disconnect, device number 66 [ 1194.033792][T16368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1194.873457][ T10] usb 5-1: USB disconnect, device number 65 [ 1195.012471][ T24] usb 4-1: USB disconnect, device number 79 [ 1196.085858][ T24] usb 6-1: USB disconnect, device number 64 [ 1196.752845][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1196.989178][ T10] usb 2-1: config 0 has no interfaces? [ 1197.514532][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1197.543537][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.620342][ T10] usb 2-1: Product: syz [ 1197.624592][ T10] usb 2-1: Manufacturer: syz [ 1197.629248][ T10] usb 2-1: SerialNumber: syz [ 1197.936024][ T10] usb 2-1: config 0 descriptor?? [ 1198.198564][T16402] netlink: 'syz.1.2603': attribute type 4 has an invalid length. [ 1198.278892][T15120] usb 2-1: USB disconnect, device number 67 [ 1198.310496][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1198.462105][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1198.472407][ T24] usb 5-1: config 2 has an invalid interface number: 117 but max is 0 [ 1198.482297][ T24] usb 5-1: config 2 has no interface number 0 [ 1198.498693][ T24] usb 5-1: config 2 interface 117 has no altsetting 0 [ 1198.536521][ T24] usb 5-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 1198.547483][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.564894][ T24] usb 5-1: Product: syz [ 1198.584994][ T24] usb 5-1: Manufacturer: syz [ 1198.702070][ T24] usb 5-1: SerialNumber: syz [ 1198.761922][ T24] usb-storage 5-1:2.117: USB Mass Storage device detected [ 1198.799604][ T24] usb-storage 5-1:2.117: Quirks match for vid 0781 pid 0100: 1 [ 1201.338956][ T24] usb 5-1: USB disconnect, device number 66 [ 1201.430190][T16532] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1201.884028][T16539] No such timeout policy "syz1" [ 1202.520914][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1202.740529][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1202.752366][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1202.762852][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.843828][ T10] usb 2-1: Product: syz [ 1202.868399][ T10] usb 2-1: Manufacturer: syz [ 1202.882613][ T10] usb 2-1: SerialNumber: syz [ 1203.031034][ T10] usb 2-1: config 0 descriptor?? [ 1203.244847][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1204.877170][T16558] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1204.895658][T16558] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1205.523772][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1205.562114][ T10] usb 2-1: USB disconnect, device number 68 [ 1206.422455][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 1206.910460][ T5923] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1207.080596][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 1207.359526][ T30] audit: type=1800 audit(1749326783.493:1496): pid=16582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2623" name="bus" dev="ramfs" ino=73513 res=0 errno=0 [ 1207.369221][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.475204][ T5923] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1207.625695][ T5923] usb 4-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 1207.653371][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.671959][ T5923] usb 4-1: config 0 descriptor?? [ 1207.937761][T16576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.977296][T16576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.024489][T16576] macsec1: entered promiscuous mode [ 1208.033794][T16576] batadv0: entered promiscuous mode [ 1208.063931][T16576] batadv0: left promiscuous mode [ 1208.195306][T16594] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2625'. [ 1208.259981][ T24] usb 4-1: USB disconnect, device number 80 [ 1209.480540][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1210.310466][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1210.352634][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1210.369986][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.394390][ T10] usb 2-1: Product: syz [ 1210.407475][ T10] usb 2-1: Manufacturer: syz [ 1210.415359][ T10] usb 2-1: SerialNumber: syz [ 1210.432896][ T10] usb 2-1: config 0 descriptor?? [ 1210.642461][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1211.343462][T15423] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1211.550390][T15423] usb 5-1: Using ep0 maxpacket: 8 [ 1212.948714][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1212.988345][ T10] usb 2-1: USB disconnect, device number 69 [ 1213.343399][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2632'. [ 1213.605590][T16627] team0 (unregistering): Port device team_slave_0 removed [ 1213.982753][T16627] team0 (unregistering): Port device team_slave_1 removed [ 1214.114256][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'. [ 1214.191288][T16643] xt_connbytes: Forcing CT accounting to be enabled [ 1214.240866][T16643] --map-set only usable from mangle table [ 1214.496107][T16627] team0 (unregistering): Port device wlan1 removed [ 1215.020568][T15423] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1215.028470][T15423] usb 5-1: no configurations [ 1215.159765][T15423] usb 5-1: can't read configurations, error -22 [ 1215.408220][ T30] audit: type=1800 audit(1749326791.653:1497): pid=16650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2638" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1216.304896][T16661] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2642'. [ 1217.709631][T15379] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1217.810377][T15423] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1217.818052][T13033] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1217.897365][T15379] usb 2-1: config 0 has no interfaces? [ 1217.929260][T15379] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1218.016546][T13033] usb 5-1: config 0 has no interfaces? [ 1218.023215][T15423] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1218.031408][T15423] usb 6-1: config 0 has no interface number 0 [ 1218.039403][T15423] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1218.052962][T13033] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1218.062286][T13033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.082812][T15423] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.091663][T13033] usb 5-1: Product: syz [ 1218.100833][T13033] usb 5-1: Manufacturer: syz [ 1218.105573][T13033] usb 5-1: SerialNumber: syz [ 1218.120737][T15379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.124346][T15423] usb 6-1: config 0 descriptor?? [ 1218.128858][T15379] usb 2-1: Product: syz [ 1218.144185][T13033] usb 5-1: config 0 descriptor?? [ 1218.158952][T15423] usb 6-1: selecting invalid altsetting 1 [ 1218.175208][T15423] dvb_ttusb_budget: ttusb_init_controller: error [ 1218.189589][T15423] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1218.316810][T15423] DVB: Unable to find symbol cx22700_attach() [ 1218.478129][T15423] DVB: Unable to find symbol tda10046_attach() [ 1218.510902][T15379] usb 2-1: Manufacturer: syz [ 1218.515665][T15379] usb 2-1: SerialNumber: syz [ 1218.526316][T15423] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1218.564978][T15379] usb 2-1: config 0 descriptor?? [ 1219.508475][T16686] syz.3.2646 (16686): drop_caches: 2 [ 1219.820447][T15423] usb 5-1: USB disconnect, device number 69 [ 1220.610232][T15423] usb 6-1: USB disconnect, device number 65 [ 1220.948784][T15120] usb 2-1: USB disconnect, device number 70 [ 1221.058525][ T30] audit: type=1326 audit(1749326797.303:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1221.102566][ T30] audit: type=1326 audit(1749326797.343:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1221.150203][T15423] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1221.153883][ T30] audit: type=1326 audit(1749326797.343:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1221.183329][ T30] audit: type=1326 audit(1749326797.343:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1221.219933][ T30] audit: type=1326 audit(1749326797.343:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1221.250520][ T30] audit: type=1326 audit(1749326797.343:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1221.273888][T16700] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[16700] [ 1221.274706][T16689] dns_resolver: Unsupported server list version (0) [ 1221.545693][T16703] netlink: 'syz.0.2649': attribute type 10 has an invalid length. [ 1221.573603][T16703] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 1221.679008][T16702] kvm: kvm [16696]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1221.690425][ T30] audit: type=1326 audit(1749326797.343:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1221.694668][T16702] kvm: kvm [16696]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1221.726194][T15423] usb 6-1: Using ep0 maxpacket: 8 [ 1221.753781][T15423] usb 6-1: config 10 has an invalid interface number: 193 but max is 0 [ 1221.803366][T15423] usb 6-1: config 10 has no interface number 0 [ 1221.818875][T16702] kvm: kvm [16696]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1222.203101][T15423] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=be.93 [ 1222.205672][ T30] audit: type=1326 audit(1749326797.343:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1222.220352][T15423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.362665][ T30] audit: type=1326 audit(1749326797.343:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1222.373380][T15423] usb 6-1: Product: syz [ 1222.432439][ T30] audit: type=1326 audit(1749326797.343:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.0.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897b18e929 code=0x7ffc0000 [ 1222.530507][T15423] usb 6-1: Manufacturer: syz [ 1222.552798][T15423] usb 6-1: SerialNumber: syz [ 1224.400505][T13033] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1224.538829][T15423] rtsx_usb 6-1:10.193: probe with driver rtsx_usb failed with error -22 [ 1224.589485][T15423] usb 6-1: USB disconnect, device number 66 [ 1224.913350][T16730] program syz.1.2654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1224.988318][T13033] usb 5-1: config 0 has no interfaces? [ 1225.000138][T13033] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1225.021269][T13033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.036382][T13033] usb 5-1: Product: syz [ 1225.052170][T13033] usb 5-1: Manufacturer: syz [ 1225.093833][T13033] usb 5-1: SerialNumber: syz [ 1225.169511][T13033] usb 5-1: config 0 descriptor?? [ 1226.550379][T15120] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1226.674606][T16748] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2657'. [ 1227.020449][T13033] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1227.060737][T15120] usb 2-1: config 0 has no interfaces? [ 1227.461491][T15120] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1227.471970][T15120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.480022][T15120] usb 2-1: Product: syz [ 1227.492251][T15120] usb 2-1: Manufacturer: syz [ 1227.496922][T15120] usb 2-1: SerialNumber: syz [ 1227.567418][T15120] usb 2-1: config 0 descriptor?? [ 1227.762951][T13033] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.841064][T13033] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1227.853182][T13033] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1227.869273][T13033] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1227.886184][T13033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.956051][T13033] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1228.024839][T13033] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1228.215175][T13033] usb 4-1: USB disconnect, device number 81 [ 1228.533119][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2659'. [ 1228.625549][T15120] usb 5-1: USB disconnect, device number 70 [ 1228.777325][T16726] delete_channel: no stack [ 1229.360471][T15120] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1229.893792][T15120] usb 5-1: config 0 has no interfaces? [ 1229.930524][T15120] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1230.149620][T15120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.159712][ T24] usb 2-1: USB disconnect, device number 71 [ 1230.262160][T15120] usb 5-1: Product: syz [ 1230.266381][T15120] usb 5-1: Manufacturer: syz [ 1230.294858][T15120] usb 5-1: SerialNumber: syz [ 1230.369004][T15120] usb 5-1: config 0 descriptor?? [ 1231.651254][T16778] ptrace attach of "./syz-executor exec"[8047] was attempted by "./syz-executor exec"[16778] [ 1231.827099][T16778] dns_resolver: Unsupported server list version (0) [ 1232.496419][T16785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1232.600439][T15120] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1232.840915][T16790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2667'. [ 1232.850092][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'. [ 1232.872776][T15120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1232.910534][T15120] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1233.096945][T15120] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1233.133245][T13033] usb 5-1: USB disconnect, device number 71 [ 1233.140460][T15120] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1233.169982][T15120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.264918][T15120] usb 6-1: config 0 descriptor?? [ 1233.352961][T15120] hdpvr 6-1:0.0: Could not find bulk-in endpoint [ 1233.372327][T15120] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1233.668183][T16773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.875021][T16773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.923003][T15120] usb 6-1: USB disconnect, device number 67 [ 1234.002983][T13033] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1234.280429][T13033] usb 5-1: Using ep0 maxpacket: 8 [ 1234.302588][T13033] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.318642][T13033] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1234.459975][T13033] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1234.483320][T16800] : entered promiscuous mode [ 1234.492385][T13033] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1234.504385][T13033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.523121][T13033] usb 5-1: config 0 descriptor?? [ 1234.746729][T16798] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1234.986898][T16804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2671'. [ 1235.009339][T16804] netlink: 972 bytes leftover after parsing attributes in process `syz.3.2671'. [ 1235.458984][T13033] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1235.515783][T16798] could not allocate digest TFM handle poly1305-simd [ 1235.678286][T16804] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1235.745359][T13033] usb 6-1: config 0 has no interfaces? [ 1235.841807][T16804] bond7: entered promiscuous mode [ 1235.879467][T16804] bond0: (slave bond7): Enslaving as an active interface with an up link [ 1235.959558][T13033] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1236.008465][T13033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.044739][T13033] usb 6-1: Product: syz [ 1236.062224][T13033] usb 6-1: Manufacturer: syz [ 1236.067018][T13033] usb 6-1: SerialNumber: syz [ 1236.076464][T13033] usb 6-1: config 0 descriptor?? [ 1236.585321][T13033] usb 5-1: USB disconnect, device number 72 [ 1236.626088][T16817] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[16817] [ 1237.410422][ T10] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1237.588457][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1237.615127][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1237.669770][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1238.187777][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1238.228886][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1238.245521][ T10] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1238.254715][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.268990][ T10] usb 4-1: Product: syz [ 1238.273342][ T10] usb 4-1: Manufacturer: syz [ 1238.277966][ T10] usb 4-1: SerialNumber: syz [ 1238.329468][ T10] usb 4-1: config 0 descriptor?? [ 1238.468545][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 1238.774566][ T24] usb 6-1: USB disconnect, device number 68 [ 1239.115748][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2677'. [ 1239.221617][T16842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2677'. [ 1239.641844][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1239.911423][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1239.954291][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.965534][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.025105][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1240.066495][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.135302][ T10] usb 2-1: config 0 descriptor?? [ 1240.620870][ T24] usb 4-1: USB disconnect, device number 82 [ 1240.628026][ T10] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1241.927034][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2681'. [ 1242.120799][ T10] usb 2-1: reset high-speed USB device number 72 using dummy_hcd [ 1242.225893][T16855] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[16855] [ 1242.442665][T16855] dns_resolver: Unsupported server list version (0) [ 1242.452218][T15423] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1242.632152][T15423] usb 6-1: Using ep0 maxpacket: 32 [ 1242.648149][T15423] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.677472][T15423] usb 6-1: config 0 has no interfaces? [ 1242.812718][T15423] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1243.006441][T15423] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.053096][T15423] usb 6-1: config 0 descriptor?? [ 1243.346402][T16874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.357518][T16874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.399804][T16874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.416011][T16874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.257776][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.264981][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.539538][T16888] ================================================================== [ 1244.547655][T16888] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1244.556363][T16888] Write of size 1280 at addr ffffc9000c593b40 by task vivid-000-vid-c/16888 [ 1244.565082][T16888] [ 1244.567551][T16888] CPU: 1 UID: 0 PID: 16888 Comm: vivid-000-vid-c Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 1244.567579][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1244.567601][T16888] Call Trace: [ 1244.567611][T16888] [ 1244.567621][T16888] dump_stack_lvl+0x189/0x250 [ 1244.567661][T16888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1244.567693][T16888] ? __pfx__printk+0x10/0x10 [ 1244.567715][T16888] ? __pfx__printk+0x10/0x10 [ 1244.567735][T16888] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1244.567767][T16888] ? __virt_addr_valid+0xdc/0x5c0 [ 1244.567790][T16888] print_report+0xd2/0x2b0 [ 1244.567817][T16888] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1244.567837][T16888] kasan_report+0x118/0x150 [ 1244.567861][T16888] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1244.567886][T16888] kasan_check_range+0x2b0/0x2c0 [ 1244.567908][T16888] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1244.567929][T16888] __asan_memcpy+0x40/0x70 [ 1244.567958][T16888] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1244.568017][T16888] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1244.568073][T16888] ? __lock_acquire+0xab9/0xd20 [ 1244.568105][T16888] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1244.568146][T16888] ? cgroup_freezing+0x2ad/0x360 [ 1244.568176][T16888] vivid_thread_vid_cap+0x8da/0x10d0 [ 1244.568221][T16888] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1244.568252][T16888] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1244.568281][T16888] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1244.568315][T16888] ? __kthread_parkme+0x7b/0x200 [ 1244.568336][T16888] ? __kthread_parkme+0x1a1/0x200 [ 1244.568359][T16888] kthread+0x70e/0x8a0 [ 1244.568384][T16888] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1244.568420][T16888] ? __pfx_kthread+0x10/0x10 [ 1244.568443][T16888] ? _raw_spin_unlock_irq+0x23/0x50 [ 1244.568472][T16888] ? lockdep_hardirqs_on+0x9c/0x150 [ 1244.568502][T16888] ? __pfx_kthread+0x10/0x10 [ 1244.568531][T16888] ret_from_fork+0x3f9/0x770 [ 1244.568561][T16888] ? __pfx_ret_from_fork+0x10/0x10 [ 1244.568593][T16888] ? __switch_to_asm+0x39/0x70 [ 1244.568613][T16888] ? __switch_to_asm+0x33/0x70 [ 1244.568634][T16888] ? __pfx_kthread+0x10/0x10 [ 1244.568657][T16888] ret_from_fork_asm+0x1a/0x30 [ 1244.568687][T16888] [ 1244.568695][T16888] [ 1244.792887][T16888] The buggy address belongs to the virtual mapping at [ 1244.792887][T16888] [ffffc9000c591000, ffffc9000c595000) created by: [ 1244.792887][T16888] vb2_vmalloc_alloc+0xef/0x340 [ 1244.810834][T16888] [ 1244.813175][T16888] The buggy address belongs to the physical page: [ 1244.819587][T16888] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888050b55dc0 pfn:0x50b55 [ 1244.829726][T16888] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1244.837191][T16888] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1244.846151][T16888] raw: ffff888050b55dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 1244.854933][T16888] page dumped because: kasan: bad access detected [ 1244.861706][T16888] page_owner tracks the page as allocated [ 1244.867694][T16888] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN), pid 16886, tgid 16883 (syz.1.2685), ts 1244520959159, free_ts 1244381713508 [ 1244.886381][T16888] post_alloc_hook+0x240/0x2a0 [ 1244.891179][T16888] get_page_from_freelist+0x21e4/0x22c0 [ 1244.897865][T16888] __alloc_frozen_pages_noprof+0x181/0x370 [ 1244.903787][T16888] alloc_pages_mpol+0x232/0x4a0 [ 1244.908779][T16888] alloc_pages_noprof+0xa9/0x190 [ 1244.913754][T16888] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 1244.919661][T16888] vmalloc_user_noprof+0xad/0xf0 [ 1244.924624][T16888] vb2_vmalloc_alloc+0xef/0x340 [ 1244.929576][T16888] __vb2_queue_alloc+0x9bf/0x15a0 [ 1244.934618][T16888] vb2_core_reqbufs+0xc31/0x1420 [ 1244.939562][T16888] __vb2_init_fileio+0x318/0xff0 [ 1244.944538][T16888] vb2_core_poll+0x4c1/0x840 [ 1244.949164][T16888] vb2_fop_poll+0x168/0x380 [ 1244.953701][T16888] v4l2_poll+0x144/0x2c0 [ 1244.958183][T16888] do_sys_poll+0x8c6/0x1070 [ 1244.962971][T16888] __se_sys_ppoll+0x1ff/0x260 [ 1244.967787][T16888] page last free pid 16877 tgid 16876 stack trace: [ 1244.974296][T16888] __free_frozen_pages+0xc71/0xe70 [ 1244.979506][T16888] __tlb_remove_table+0x2d2/0x3b0 [ 1244.984544][T16888] tlb_remove_table_rcu+0x85/0x100 [ 1244.989680][T16888] rcu_core+0xca5/0x1710 [ 1244.994026][T16888] handle_softirqs+0x286/0x870 [ 1244.998804][T16888] __irq_exit_rcu+0xca/0x1f0 [ 1245.003407][T16888] irq_exit_rcu+0x9/0x30 [ 1245.007668][T16888] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1245.013491][T16888] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1245.019481][T16888] [ 1245.021825][T16888] Memory state around the buggy address: [ 1245.027491][T16888] ffffc9000c593f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1245.033983][T13033] usb 2-1: USB disconnect, device number 72 [ 1245.035572][T16888] ffffc9000c593f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1245.035589][T16888] >ffffc9000c594000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1245.035600][T16888] ^ [ 1245.035611][T16888] ffffc9000c594080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1245.035626][T16888] ffffc9000c594100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1245.079023][T16888] ================================================================== [ 1245.710036][T16888] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1245.717322][T16888] CPU: 1 UID: 0 PID: 16888 Comm: vivid-000-vid-c Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 1245.729491][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1245.739588][T16888] Call Trace: [ 1245.742895][T16888] [ 1245.745851][T16888] dump_stack_lvl+0x99/0x250 [ 1245.750502][T16888] ? __asan_memcpy+0x40/0x70 [ 1245.755134][T16888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1245.760362][T16888] ? __pfx__printk+0x10/0x10 [ 1245.765087][T16888] panic+0x2db/0x790 [ 1245.769038][T16888] ? __pfx_panic+0x10/0x10 [ 1245.773589][T16888] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1245.779598][T16888] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1245.785947][T16888] ? print_memory_metadata+0x314/0x400 [ 1245.791438][T16888] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1245.797135][T16888] check_panic_on_warn+0x89/0xb0 [ 1245.802133][T16888] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1245.807791][T16888] end_report+0x78/0x160 [ 1245.812061][T16888] kasan_report+0x129/0x150 [ 1245.816584][T16888] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1245.822427][T16888] kasan_check_range+0x2b0/0x2c0 [ 1245.827411][T16888] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1245.833070][T16888] __asan_memcpy+0x40/0x70 [ 1245.837682][T16888] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1245.843374][T16888] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1245.849257][T16888] ? __lock_acquire+0xab9/0xd20 [ 1245.854139][T16888] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1245.860341][T16888] ? cgroup_freezing+0x2ad/0x360 [ 1245.865296][T16888] vivid_thread_vid_cap+0x8da/0x10d0 [ 1245.870712][T16888] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1245.876493][T16888] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1245.882523][T16888] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1245.888899][T16888] ? __kthread_parkme+0x7b/0x200 [ 1245.893947][T16888] ? __kthread_parkme+0x1a1/0x200 [ 1245.898996][T16888] kthread+0x70e/0x8a0 [ 1245.903117][T16888] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1245.908898][T16888] ? __pfx_kthread+0x10/0x10 [ 1245.913702][T16888] ? _raw_spin_unlock_irq+0x23/0x50 [ 1245.918951][T16888] ? lockdep_hardirqs_on+0x9c/0x150 [ 1245.924265][T16888] ? __pfx_kthread+0x10/0x10 [ 1245.928953][T16888] ret_from_fork+0x3f9/0x770 [ 1245.933578][T16888] ? __pfx_ret_from_fork+0x10/0x10 [ 1245.938718][T16888] ? __switch_to_asm+0x39/0x70 [ 1245.943499][T16888] ? __switch_to_asm+0x33/0x70 [ 1245.948272][T16888] ? __pfx_kthread+0x10/0x10 [ 1245.952906][T16888] ret_from_fork_asm+0x1a/0x30 [ 1245.957696][T16888] [ 1245.961117][T16888] Kernel Offset: disabled [ 1245.965500][T16888] Rebooting in 86400 seconds..