last executing test programs: 9.527184152s ago: executing program 4 (id=3327): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e3e1c0ca99c60ddfc846a89dcd0be26e"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x50}}, 0x0) 9.431788665s ago: executing program 4 (id=3328): mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xffffff84, &(0x7f0000000300)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) inotify_init1(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/52, 0x34) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wg2\x00'}) 8.301983527s ago: executing program 4 (id=3332): timer_create(0x0, &(0x7f0000000140)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x0, 0x0) 6.390817655s ago: executing program 1 (id=3340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c01330080000000ffffffffffff080211000000f7ab87594b3f00000000000000000100ddab8b7668a21729e4ad77e366ae9e66d671f8bb54784e373e2223fde04977364b86c8cdcafe8390438142ae7889f37bbd41e50a26612ce77fcf71400d7c1e0a34b043fbb4ca6b6e5ecb7c8169982fe3f1261537a3b4467e0db0ca915ec1964c56db466602eed1b321bfab5c5b2ab6d6e1ffff58b596e2cfca04801aae25adb2b4b53aa135a66ae836452cff03af5ed4b78b2f98cb570d7c4f266d0396d7725da4b37cefc58749a97b5c215b6add6995e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b27336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe76ab"], 0x158}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x600) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r4, @ANYBLOB="010040bd7000fedbdf25640000000c009900ffff000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400007ff472f09f65e68cc63e6a050000000000000050d9d881b2eca97a406a081080460209b7c4000000", @ANYRES16=r7, @ANYBLOB="200028bd700002000000080000000800030000000000080003000100000008000200040000000500050004000000"], 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x4000) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) listen(r6, 0x20200007) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_int(r8, 0x10d, 0xfb, &(0x7f0000000080), &(0x7f0000000000)=0x4) r9 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f000000b680)=[{0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000003540)="9e1f07bf470476882cf1e253d98aabaa9c7b5e1c3d633c5670b730c7b9dbe63a4a0e6d6e119922a20754e91c2294a151bf47bd64f2cc3ea877", 0x39}, {&(0x7f000000a340)="30099b2a35fc5362f91a9bd6300b91b2235d5c6b99fd68f548389ef13fc304509fe94fedf78da984863ef5d8e4092ce479fce9ebf46ac805279f2d521648232929d9fb22f1487b87e61af6b8bde91ce9b57fd9f03e02c02c46e9a6daacb4f91a1b528647711c07ef5d0ff84280f3dabcbbeff1d4d38b5cf9accfa5b3c61e2bd596fb3aebc67eac069714df495a0f2dfe814fcfb6b12f05b73295d7d87378a7e419e04c73f9c11550551ed69d11e36e417649691294b3bacbad70d868eeb43e919f6dda38c936c6d862c0c0f7e9ab42818d6a95fcfd049ddc286fd98c195c09bcca7495f75b9a0df02b0fca55ec047b1de8a907", 0xf3}], 0x2}], 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r11, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) read(r10, &(0x7f0000004100)=""/232, 0xe8) recvmmsg(r9, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/198, 0xc6}, {&(0x7f0000001e80)=""/101, 0x65}], 0x2}}], 0x1, 0x0, 0x0) recvmsg(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000018c0)=""/128, 0x80}], 0x1}, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) 6.175479958s ago: executing program 1 (id=3341): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x28, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x8d, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@multicast1, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {@remote}, {@broadcast, 0x52b1}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000e40)="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", 0x216, 0x0, 0x0, 0x0) 5.87634961s ago: executing program 0 (id=3342): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "830ed9"}}, 0x0}, 0x0) 5.517159093s ago: executing program 1 (id=3343): mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xffffff84, &(0x7f0000000300)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) inotify_init1(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/52, 0x34) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wg2\x00'}) 4.629851569s ago: executing program 4 (id=3344): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffff00c}, {0x20}, {0x6}]}, 0x10) write$binfmt_aout(r0, 0x0, 0x0) 4.546379421s ago: executing program 1 (id=3345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) r3 = dup(r0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}]}, 0x54}}, 0x0) 4.537310756s ago: executing program 4 (id=3346): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) pipe2(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8, 0x2}, [@l2cap_conf_req={{0x4, 0x0, 0x4}}]}}, 0x11) dup(0xffffffffffffffff) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xfffff000}], 0x2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = fcntl$dupfd(r0, 0x0, r3) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x74, 0x93, 0x1d, 0x40, 0xc45, 0x614a, 0xe6af, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x80, 0xf4}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000d, 0x80010, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000300)={0x14, &(0x7f0000000380)={0x0, 0xb, 0x58, {0x58, 0x30, "da2c26b034eb01477ff43ec5c9c331eba9a4224d0b884dfb278595c0e4b117f7e2f0c854cdb0fefdaffbaf3e4acc60dcc88aa2c84006a042e71dbc985f479a5d9e375c40f2a016e8adf28539be1e9482a4445d6a4e75"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000500)={0x20, 0xe, 0xed, "77104f62a1c9ab3fc6ac42c576cd3a28437ed4b94ec5973939b5b1abc7f3c1e08123bd74401486ccbbe32628e4d0eb803355a95aa492759ed76ddc46a0e6709f464a27ca5981d4b65e89414f405a6a0fc5e11fee1214a33c8b94e4c82954490d963931bf4bc9d81299fdc93494f2c84266c54c4a0e070394b0240b223edbec6a7a488feb81f41689a19a852a15fff1993a40bb3981513a4ea1cbb70298cdf832aa0e0fb9bb47cd51516bb6424de84e4fae59423582a188bc4dc679addfa04f4b5bc5fa383b025700c00f53e66717fc13117cc5dd22c1730eef5e7da0c58793dbd6a2fea6d8ef584318df6d8a9a"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}}) r7 = eventfd2(0x8001, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f0000000140)={0x281}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) waitid$P_PIDFD(0x3, r5, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) syz_usb_connect(0x0, 0x2d, &(0x7f0000004ec0)={{0x12, 0x1, 0x0, 0xae, 0xe5, 0x91, 0x20, 0xccd, 0x39, 0xa613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6, 0x4a, 0xd9, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4c081) 2.736685319s ago: executing program 3 (id=3348): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000002540)={'filter\x00'}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) read$msr(r0, &(0x7f0000000240)=""/45, 0x2d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b0b00000000000000001fffffff200001801c0002006261746164765f736c6176655f31"], 0x34}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) chdir(&(0x7f00000002c0)='\x00') setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x0) 2.693541641s ago: executing program 2 (id=3349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e3e1c0ca99c60ddfc846a89dcd0be26e"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x50}}, 0x0) 2.546020997s ago: executing program 0 (id=3350): mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',default_permissions,blksize=0x0000000000000400']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_vhci(0x0, 0x6) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="03c8001e794e4cee84d39856f4752833767be125637ee49dc79a52f2f9465718460cd05feda51bbf4206b5e7325945e5f819bbace34f7d33b43908e14fa05a0f06d9dccb7f0580fe9d42d7bf6530f1a2d22cfd5396c3c67afcdc34613911e96affd46ebd4aa6c60ca02f7648783a10deccc27340c4f24ed37dd6563758d14f732e63a853a4c71c356a6309a485ed"], 0x22) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x0) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = io_uring_setup(0x15ae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 2.537816049s ago: executing program 2 (id=3351): writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ff", 0x2d}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x8}, 0x20) 2.397933769s ago: executing program 2 (id=3352): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000300)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000002900000000000000000085000000360000009500000000000000102835b81b6f25fff0fa5cb867735b57aed7207ce24bdeb093a4f9e81588cc4bdbd7f8a8c331b1fa0a0d466ed8536ce6a3f83dc69edfc35fce7045c8ba4428b002cb1d5961842cddbd2fe51c9b9469195b5bab047716fc5d98ca0a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 2.306954919s ago: executing program 2 (id=3353): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, {0x12, 0x32, 0x2, 0x3, 0x0, 0x0, 0x0, @in, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) 2.225602199s ago: executing program 2 (id=3354): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x34}}, 0x0) 2.080302551s ago: executing program 2 (id=3355): timer_create(0x0, &(0x7f0000000140)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x0, 0x0) 1.793143222s ago: executing program 3 (id=3356): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffff00c}, {0x20}, {0x6}]}, 0x10) write$binfmt_aout(r0, 0x0, 0x0) 1.787226689s ago: executing program 1 (id=3357): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="7700000000000004140012"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff0000000014000100fc"], 0x40}}, 0x0) 1.679294103s ago: executing program 3 (id=3358): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000e21800000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.664060811s ago: executing program 0 (id=3359): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000e40)="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", 0x10b, 0x0, 0x0, 0x0) 1.603154603s ago: executing program 1 (id=3360): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "830ed9"}}, 0x0}, 0x0) 710.817458ms ago: executing program 0 (id=3361): sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket(0x0, 0x80000, 0x81) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0xfffffffc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}]}, &(0x7f0000000180)=0x10) socket(0x0, 0x803, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000007180), 0x3) syz_emit_vhci(&(0x7f0000003040)=ANY=[], 0xb) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x3, 0x2) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000010}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40043d14, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90324fc601000020071570200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="1400000023000b02d22b836f8c6394f91f24fc60", 0x14}], 0x1}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x27) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04021f4e58db0041483c"], 0xa) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 604.373163ms ago: executing program 3 (id=3362): writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ff", 0x2d}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x8}, 0x20) 585.515285ms ago: executing program 4 (id=3363): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_emit_vhci(&(0x7f0000000b40)=ANY=[@ANYBLOB="042ffb03"], 0x2fe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b1cf", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140d00000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4047}], 0x1, 0x0, 0x0, 0x0) close(r1) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f0000000280)) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@empty, @empty, 0x0, "606b177019716ea6ac38f5bd6e0630e369c7b35d21ff1f4d7ed79c31e2b0f1da"}, 0x3c) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) socket$igmp(0x2, 0x3, 0x2) close_range(r2, r1, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e0010300052406"], 0x0) 518.26004ms ago: executing program 3 (id=3364): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, {0x12, 0x32, 0x2, 0x3, 0x0, 0x0, 0x0, @in, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) 359.54416ms ago: executing program 3 (id=3365): syz_mount_image$nilfs2(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0x1010800, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRES8=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64], 0x1, 0xda6, &(0x7f0000004a40)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000ffffffffffffffff77a259d7b349f4e9173bf18bfafb000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x96}, "ebc2c66584601f003d5eceea86c5b4e4c22e7d73f8c4023570f400684f05afa738be36eec766c4520117c4509c8aa8113e9030f33d953fabfa1f8be7a4dcf4eacafd3b2610329733906bb2051dfe326329d8fa7e4921add887812104e226bf9cf3fab770fbf828fc7a98b8ef6fc9997c8fad36af4a47805227c0b05145b51fadabcd55be1fd272b82f6dd32f35208d7aac762d4e6de9"}, 0x9a) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) timer_create(0x0, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x401) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40012002) socket$kcm(0x10, 0x2, 0x4) 168.563151ms ago: executing program 0 (id=3366): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="b2000800000000000040e83472864dfe693e02231e32e2b268d9552a57305f7458b1966aef84f6911d039424aadb0cdf5e9db8b40c6110fae303d4181fe3ff9f04f2d3d938d880e5498ae2852a23af0cc395ae70fc1a7f873983039a81d759100fd9d7b8dbb65abfb03344402f525524b6fbc6d29c8affdf335f86f60a732f6a113622f4ed24a49b68c3", 0x8a}, {&(0x7f0000000480)="5995d023125d439f0811a15d9f56e6ee6a0976f98e57e90c8659d811aa", 0x1d}], 0x2}, 0x0) 0s ago: executing program 0 (id=3367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000002540)={'filter\x00'}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) read$msr(r0, &(0x7f0000000240)=""/45, 0x2d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b0b00000000000000001fffffff200001801c0002006261746164765f736c6176655f31"], 0x34}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) chdir(&(0x7f00000002c0)='\x00') setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): ed -16 [ 744.042210][ T9966] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 744.060526][ T9966] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 744.169046][ T9] pegasus 2-1:0.0: can't locate MII phy, using default [ 744.237014][ T9] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 4c:e2:85:6b:60:1d [ 744.270193][ T9] usb 2-1: USB disconnect, device number 90 [ 746.320783][T16008] syz.4.2823[16008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 746.320923][T16008] syz.4.2823[16008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.428677][ T9] usb 1-1: USB disconnect, device number 87 [ 747.496713][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.503162][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.536756][ T9966] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 748.670920][ T9966] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.759052][ T9966] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.796220][ T9966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.312793][ T1709] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 749.670606][ T9966] usb 4-1: Product: syz [ 749.696022][ T9966] usb 4-1: Manufacturer: syz [ 749.700652][ T9966] usb 4-1: SerialNumber: syz [ 749.757737][ T1709] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 749.798143][ T1709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.836974][ T1709] usb 3-1: config 0 descriptor?? [ 749.889197][T16036] netlink: 'syz.4.2832': attribute type 10 has an invalid length. [ 749.935753][T16036] bridge0: port 3(team0) entered disabled state [ 750.017387][T16036] team0: left allmulticast mode [ 750.022332][T16036] team_slave_0: left allmulticast mode [ 750.052327][T16036] team_slave_1: left allmulticast mode [ 750.074397][T16036] team0: left promiscuous mode [ 750.102086][T16036] team_slave_0: left promiscuous mode [ 750.128900][T16036] team_slave_1: left promiscuous mode [ 750.154879][T16036] bridge0: port 3(team0) entered disabled state [ 750.226728][T16036] batman_adv: batadv0: Adding interface: team0 [ 750.261239][T16036] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.317793][T16036] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 750.342936][T16040] netlink: 'syz.4.2832': attribute type 10 has an invalid length. [ 750.351815][T16040] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2832'. [ 750.369458][T16040] team0: entered promiscuous mode [ 750.374546][T16040] team_slave_0: entered promiscuous mode [ 750.385037][T16040] team_slave_1: entered promiscuous mode [ 750.415763][T16040] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.447187][T16040] batman_adv: batadv0: Interface activated: team0 [ 750.453823][T16040] batman_adv: batadv0: Interface deactivated: team0 [ 750.474496][T16040] batman_adv: batadv0: Removing interface: team0 [ 750.496826][T16040] bridge0: port 3(team0) entered blocking state [ 750.516270][T16040] bridge0: port 3(team0) entered disabled state [ 750.546321][T16040] team0: entered allmulticast mode [ 750.552795][T16040] team_slave_0: entered allmulticast mode [ 750.566108][T16040] team_slave_1: entered allmulticast mode [ 750.607477][T16040] bridge0: port 3(team0) entered blocking state [ 750.613931][T16040] bridge0: port 3(team0) entered forwarding state [ 750.891546][ T9966] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 750.898159][ T9966] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 750.905560][ T9966] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 751.110729][ T9966] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 751.157364][ T9966] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 751.362353][ T9964] usb 4-1: USB disconnect, device number 68 [ 751.388994][ T9964] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 751.577688][T10428] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 751.614607][ T9966] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 751.680544][ T29] audit: type=1326 audit(1719554065.142:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16069 comm="syz.0.2838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45bcb75b29 code=0x0 [ 752.022770][ T9966] usb 2-1: Using ep0 maxpacket: 32 [ 752.029827][ T9966] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 752.242688][ T9966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.468145][ T9966] usb 2-1: config 0 descriptor?? [ 752.618391][ T1709] pegasus 3-1:0.0: setup Pegasus II specific registers [ 752.662336][ T9966] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 752.720882][T16067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.764314][ T9966] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 752.786356][ T9966] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 752.793008][ T9966] usb 2-1: media controller created [ 752.811536][T16067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.841090][ T9966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.889181][ T9966] usb 2-1: selecting invalid altsetting 1 [ 752.920302][ T9966] set interface failed [ 752.920336][ T9966] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 752.946922][ T9966] error writing reg: 0xff, val: 0x00 [ 752.979624][ T1709] pegasus 3-1:0.0: can't locate MII phy, using default [ 753.042582][ T9966] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 753.052937][ T1709] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 4c:e2:85:6b:60:1d [ 753.070453][ T9966] usb 2-1: USB disconnect, device number 91 [ 753.077145][ T5143] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 753.096476][ T1709] usb 3-1: USB disconnect, device number 72 [ 753.276036][ T5143] usb 4-1: Using ep0 maxpacket: 8 [ 753.287996][ T5143] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 753.307606][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.327939][ T5143] usb 4-1: config 0 descriptor?? [ 753.446636][ T5143] viperboard 4-1:0.0: version 0.00 found at bus 004 address 069 [ 753.513426][ T5143] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 753.583148][ T5143] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 753.710833][T16092] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 753.892869][T16123] netlink: 'syz.2.2846': attribute type 10 has an invalid length. [ 753.902999][T16126] 9pnet_fd: Insufficient options for proto=fd [ 753.932549][T16123] bridge0: port 3(team0) entered disabled state [ 753.960280][T16123] team0: left allmulticast mode [ 753.965212][T16123] team_slave_0: left allmulticast mode [ 753.998704][T16123] team_slave_1: left allmulticast mode [ 754.006152][T16123] team0: left promiscuous mode [ 754.011636][T16123] team_slave_0: left promiscuous mode [ 754.020769][T16123] team_slave_1: left promiscuous mode [ 754.036501][T16123] bridge0: port 3(team0) entered disabled state [ 754.078834][T16123] batman_adv: batadv0: Adding interface: team0 [ 754.085126][T10428] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 754.115707][T16123] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.243488][T16123] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 754.295203][T10428] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 754.296162][ T9966] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 754.328955][T16130] netlink: 'syz.2.2846': attribute type 10 has an invalid length. [ 754.352758][ T1709] usb 4-1: USB disconnect, device number 69 [ 754.360699][T16130] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2846'. [ 754.405580][T16130] team0: entered promiscuous mode [ 754.414229][T16130] team_slave_0: entered promiscuous mode [ 754.422587][T16130] team_slave_1: entered promiscuous mode [ 754.521479][ T9966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.557661][T16130] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.566823][ T9966] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 754.594418][ T9966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.611298][ T9966] usb 5-1: Product: syz [ 754.615771][ T9966] usb 5-1: Manufacturer: syz [ 754.618589][T16130] batman_adv: batadv0: Interface activated: team0 [ 754.628509][ T9966] usb 5-1: SerialNumber: syz [ 754.651001][T16130] batman_adv: batadv0: Interface deactivated: team0 [ 754.658133][T16130] batman_adv: batadv0: Removing interface: team0 [ 754.665691][T16130] bridge0: port 3(team0) entered blocking state [ 754.673881][T16130] bridge0: port 3(team0) entered disabled state [ 754.681394][T16130] team0: entered allmulticast mode [ 754.687268][T16130] team_slave_0: entered allmulticast mode [ 754.693370][T16130] team_slave_1: entered allmulticast mode [ 754.767810][T16130] bridge0: port 3(team0) entered blocking state [ 754.774217][T16130] bridge0: port 3(team0) entered forwarding state [ 755.406069][ T5143] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 755.607940][ T5143] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 755.636004][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.657333][ T5143] usb 3-1: config 0 descriptor?? [ 755.675494][ T9966] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 755.682402][ T9966] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 755.690448][ T9966] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 755.756342][T15167] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 755.846232][ T9964] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 755.881705][ T9966] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 755.914764][ T9966] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 755.966247][T15167] usb 1-1: Using ep0 maxpacket: 32 [ 755.996538][T15167] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 756.036351][ T9964] usb 4-1: Using ep0 maxpacket: 32 [ 756.045579][ T9964] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 756.048354][T15167] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 756.069870][T15167] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 756.075147][ T9964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.078300][T15167] usb 1-1: Product: syz [ 756.119541][ T9948] usb 5-1: USB disconnect, device number 78 [ 756.138925][T15167] usb 1-1: Manufacturer: syz [ 756.146286][ T9948] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 756.155460][T15167] usb 1-1: SerialNumber: syz [ 756.173644][T15167] usb 1-1: config 0 descriptor?? [ 756.185795][ T9964] usb 4-1: config 0 descriptor?? [ 756.199185][ T9964] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 756.212235][ T9964] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 756.233907][T16154] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 756.256547][ T9964] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 756.263219][ T9964] usb 4-1: media controller created [ 756.364014][ T9964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 756.441149][ T9964] usb 4-1: selecting invalid altsetting 1 [ 756.463297][ T9964] set interface failed [ 756.463328][ T9964] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 756.476342][ T9964] error writing reg: 0xff, val: 0x00 [ 756.553434][ T9964] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 756.560056][T15167] usb 1-1: USB disconnect, device number 88 [ 756.598738][ T9964] usb 4-1: USB disconnect, device number 70 [ 757.206062][ T9964] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 757.281038][T10428] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 757.439395][T16185] 9pnet_fd: Insufficient options for proto=fd [ 757.506039][ T9964] usb 1-1: Using ep0 maxpacket: 32 [ 757.519457][ T9964] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 757.555302][ T9964] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 757.597723][ T9964] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 757.623808][ T9964] usb 1-1: Product: syz [ 757.628603][ T9964] usb 1-1: Manufacturer: syz [ 757.633640][ T9964] usb 1-1: SerialNumber: syz [ 757.708678][ T9964] usb 1-1: config 0 descriptor?? [ 757.727693][T16154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 757.929615][T16176] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 757.936741][ T5143] pegasus 3-1:0.0: setup Pegasus II specific registers [ 758.026722][ T9964] usb 1-1: USB disconnect, device number 89 [ 758.145253][T16148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.163608][T16202] netlink: 'syz.3.2861': attribute type 10 has an invalid length. [ 758.171768][T16148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.215715][T16202] bridge0: port 3(team0) entered disabled state [ 758.252160][T16202] team0: left allmulticast mode [ 758.257210][T16202] team_slave_0: left allmulticast mode [ 758.275878][T16202] team_slave_1: left allmulticast mode [ 758.292333][T16202] team0: left promiscuous mode [ 758.305536][T16202] team_slave_0: left promiscuous mode [ 758.313106][T16202] team_slave_1: left promiscuous mode [ 758.321555][ T5143] pegasus 3-1:0.0: can't locate MII phy, using default [ 758.326848][T16202] bridge0: port 3(team0) entered disabled state [ 758.341226][T16202] batman_adv: batadv0: Adding interface: team0 [ 758.347742][T16202] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.379363][T16202] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 758.414792][T16206] netlink: 'syz.3.2861': attribute type 10 has an invalid length. [ 758.432330][T16206] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2861'. [ 758.446531][T16206] team0: entered promiscuous mode [ 758.454287][T16206] team_slave_0: entered promiscuous mode [ 758.461262][T16206] team_slave_1: entered promiscuous mode [ 758.482241][T16206] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.518369][T16206] batman_adv: batadv0: Interface activated: team0 [ 758.544892][T16206] batman_adv: batadv0: Interface deactivated: team0 [ 758.593729][T16206] batman_adv: batadv0: Removing interface: team0 [ 758.638112][T16206] bridge0: port 3(team0) entered blocking state [ 758.644975][T16206] bridge0: port 3(team0) entered disabled state [ 758.651982][T16206] team0: entered allmulticast mode [ 758.657324][T16206] team_slave_0: entered allmulticast mode [ 758.663295][T16206] team_slave_1: entered allmulticast mode [ 758.687644][T16206] bridge0: port 3(team0) entered blocking state [ 758.694206][T16206] bridge0: port 3(team0) entered forwarding state [ 758.773142][ T5143] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 4c:e2:85:6b:60:1d [ 758.803724][ T5143] usb 3-1: USB disconnect, device number 73 [ 758.924227][ T29] audit: type=1326 audit(1719554072.382:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16226 comm="syz.2.2869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4f9b75b29 code=0x0 [ 758.966039][T15167] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 759.346406][T15167] usb 1-1: Using ep0 maxpacket: 8 [ 759.588306][T15167] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 759.837944][T15167] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 759.880308][T15167] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 759.941171][T15167] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 760.052320][T15167] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 760.062098][T15167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.308856][T15167] usb 1-1: GET_CAPABILITIES returned 0 [ 760.314405][T15167] usbtmc 1-1:16.0: can't read capabilities [ 760.539649][T15167] usb 1-1: USB disconnect, device number 90 [ 760.569272][T16247] loop4: detected capacity change from 0 to 2048 [ 760.659029][T16250] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 760.946145][ T5143] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 761.116021][ T5143] usb 3-1: device descriptor read/64, error -71 [ 761.426397][ T5143] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 761.615778][T16265] fuse: Bad value for 'fd' [ 761.616047][ T5143] usb 3-1: device descriptor read/64, error -71 [ 761.631578][ T29] audit: type=1804 audit(1719554075.092:146): pid=16265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2880" name="/root/syzkaller.fn0Bkm/41/file0" dev="sda1" ino=2014 res=1 errno=0 [ 761.806461][ T5143] usb usb3-port1: attempt power cycle [ 761.830707][T16267] loop4: detected capacity change from 0 to 4096 [ 761.883531][T16267] NILFS (loop4): invalid segment: Checksum error in segment payload [ 761.916285][T16267] NILFS (loop4): trying rollback from an earlier position [ 761.951955][T16267] NILFS (loop4): recovery complete [ 762.043334][T16271] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 762.092192][T10428] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 762.156101][ T9948] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 762.226119][ T5143] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 762.291771][ T5143] usb 3-1: device descriptor read/8, error -71 [ 762.375988][ T9948] usb 4-1: Using ep0 maxpacket: 16 [ 762.412700][ T9948] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 762.453989][ T9948] usb 4-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 762.469930][ T9948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.494706][ T9948] usb 4-1: Product: syz [ 762.510720][ T9948] usb 4-1: Manufacturer: syz [ 762.524486][ T9948] usb 4-1: SerialNumber: syz [ 762.559242][ T9948] usb 4-1: config 0 descriptor?? [ 762.577869][ T9948] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 762.590300][ T5143] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 762.598651][ T9948] dw2102: su3000_power_ctrl: 1, initialized 0 [ 762.622949][ T9948] dvb-usb: bulk message failed: -22 (2/0) [ 762.657345][ T5143] usb 3-1: device descriptor read/8, error -71 [ 762.671201][ T9948] dvb-usb: X3M TV SPC1400HD PCI error while loading driver (-22) [ 762.790849][ T9966] usb 4-1: USB disconnect, device number 71 [ 762.816146][ T5143] usb usb3-port1: unable to enumerate USB device [ 763.708386][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2886'. [ 763.747010][T16286] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 763.748978][T16288] loop2: detected capacity change from 0 to 164 [ 763.784863][T16286] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 763.801766][T16286] batman_adv: batadv1: Removing interface: netdevsim0 [ 763.812794][T16286] batman_adv: batadv2: Adding interface: netdevsim0 [ 763.835631][T16286] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.879366][T16282] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 763.904642][T16286] batman_adv: batadv2: Interface activated: netdevsim0 [ 764.228821][ T29] audit: type=1804 audit(1719554077.692:147): pid=16300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2892" name="/root/syzkaller.8SLQSH/71/file0" dev="sda1" ino=2014 res=1 errno=0 [ 765.205101][T16313] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2896'. [ 765.206439][T16316] fuse: Unknown parameter 'fd0x0000000000000009' [ 765.836147][ T9969] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 766.010115][T16335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2905'. [ 766.036645][T16339] fuse: Bad value for 'fd' [ 766.041304][T16336] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 766.046003][ T9969] usb 4-1: Using ep0 maxpacket: 32 [ 766.047810][T16336] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 766.068150][ T29] audit: type=1804 audit(1719554079.502:148): pid=16339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2906" name="/root/syzkaller.n3xDei/66/file0" dev="sda1" ino=2017 res=1 errno=0 [ 766.110483][T16336] vhci_hcd vhci_hcd.0: Device attached [ 766.242890][T16324] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 766.456028][ T5143] usb 9-1: new low-speed USB device number 6 using vhci_hcd [ 766.788032][T16337] vhci_hcd: connection reset by peer [ 766.809913][ T12] vhci_hcd: stop threads [ 766.827541][ T12] vhci_hcd: release socket [ 766.849133][ T12] vhci_hcd: disconnect device [ 767.066178][T16357] netlink: 'syz.4.2912': attribute type 10 has an invalid length. [ 767.158712][T16357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.213942][T16357] batadv0: entered promiscuous mode [ 767.228983][T16357] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 767.384381][T16362] loop4: detected capacity change from 0 to 512 [ 767.460967][T16362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 767.546122][T16362] ext4 filesystem being mounted at /root/syzkaller.8SLQSH/78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.601208][T15167] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 767.688775][T16362] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 767.761429][T16370] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 767.857597][T15167] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 767.888286][T16371] fuse: Unknown parameter 'fd0x0000000000000009' [ 767.907993][T15167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.935654][T15167] usb 3-1: config 0 descriptor?? [ 767.953007][T15167] usb-storage 3-1:0.0: USB Mass Storage device detected [ 767.970317][T16374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2917'. [ 768.011902][T15167] usb-storage 3-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 768.178396][T16360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.194199][T16360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.285670][ T9969] usb 4-1: unable to get BOS descriptor or descriptor too short [ 768.301874][T14857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 768.304451][ T9969] usb 4-1: no configurations [ 768.346015][ T9969] usb 4-1: can't read configurations, error -22 [ 768.517314][ T29] audit: type=1804 audit(1719554081.972:149): pid=16386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2918" name="/root/syzkaller.8SLQSH/79/file0" dev="sda1" ino=2023 res=1 errno=0 [ 768.610281][T10428] Bluetooth: hci5: command 0x0406 tx timeout [ 770.867086][ T9969] usb 3-1: USB disconnect, device number 78 [ 771.264238][T16398] loop4: detected capacity change from 0 to 32768 [ 771.566516][ T5143] vhci_hcd: vhci_device speed not set [ 772.067136][T16431] fuse: Unknown parameter 'fd0x0000000000000009' [ 772.075288][ T29] audit: type=1804 audit(1719554085.532:150): pid=16436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2936" name="/root/syzkaller.n3xDei/75/file0" dev="sda1" ino=2023 res=1 errno=0 [ 772.107091][T16398] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 772.164384][T16398] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [ 772.193238][T16398] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 772.193238][T16398] running recovery passes: check_allocations [ 772.280573][T16398] bcachefs (loop4): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 772.301389][T16398] bcachefs (loop4): bch2_fs_recovery(): error EINTR [ 772.311508][T16398] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 772.330040][T16398] bcachefs (loop4): shutting down [ 772.381016][T16398] bcachefs (loop4): shutdown complete [ 772.556540][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2940'. [ 772.614607][T16446] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 772.673672][T16449] batman_adv: batadv1: Adding interface: netdevsim0 [ 772.699371][T16448] loop3: detected capacity change from 0 to 8 [ 772.716100][T16449] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.755532][T16448] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 772.776235][T16416] loop2: detected capacity change from 0 to 32768 [ 772.800960][T16449] batman_adv: batadv1: Interface activated: netdevsim0 [ 772.808107][T16416] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2932 (16416) [ 772.808167][T16448] cramfs: unsupported filesystem features [ 772.872721][T16416] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 772.906284][T16416] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 772.915747][T16416] BTRFS info (device loop2): using free-space-tree [ 773.381195][T16463] loop3: detected capacity change from 0 to 64 [ 773.422732][T16463] hfs: invalid catalog max_key_len 7 [ 773.430619][T16463] hfs: unable to open catalog tree [ 773.966950][T15101] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 773.997914][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2944'. [ 774.290048][T16487] netlink: 'syz.3.2947': attribute type 21 has an invalid length. [ 774.482605][T16487] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2947'. [ 774.626617][ T9966] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 774.816075][ T9966] usb 5-1: Using ep0 maxpacket: 32 [ 774.849066][ T9966] usb 5-1: unable to get BOS descriptor or descriptor too short [ 774.877724][ T9966] usb 5-1: no configurations [ 774.893275][ T9966] usb 5-1: can't read configurations, error -22 [ 775.427143][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2957'. [ 775.856162][ T5140] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 775.966105][T15167] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 776.021429][T16517] loop2: detected capacity change from 0 to 32768 [ 776.026087][ T9966] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 776.029577][T16517] xfs: Unknown parameter 'smackfsroot' [ 776.068305][ T5140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 776.082783][ T6300] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 776.096198][ T5140] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 776.149908][ T5140] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 776.177982][T15167] usb 1-1: Using ep0 maxpacket: 16 [ 776.192364][T15167] usb 1-1: descriptor type invalid, skip [ 776.202328][ T5140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 776.221414][T15167] usb 1-1: descriptor type invalid, skip [ 776.229554][ T5140] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 776.239984][T15167] usb 1-1: descriptor type invalid, skip [ 776.245730][T15167] usb 1-1: descriptor type invalid, skip [ 776.253786][ T5140] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 776.256087][ T9966] usb 5-1: Using ep0 maxpacket: 16 [ 776.271973][T15167] usb 1-1: descriptor type invalid, skip [ 776.285225][T15167] usb 1-1: descriptor type invalid, skip [ 776.288495][ T9966] usb 5-1: no configurations [ 776.306489][ T5140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 776.314729][ T9966] usb 5-1: can't read configurations, error -22 [ 776.334305][T15167] usb 1-1: descriptor type invalid, skip [ 776.342471][ T9966] usb usb5-port1: attempt power cycle [ 776.345868][T15167] usb 1-1: descriptor type invalid, skip [ 776.354079][ T5140] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 776.371414][T15167] usb 1-1: descriptor type invalid, skip [ 776.382744][ T5140] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 776.413980][T15167] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 776.435285][ T5140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 776.456256][T15167] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 776.484766][ T5140] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 776.501759][T15167] usb 1-1: string descriptor 0 read error: -22 [ 776.508145][ T5140] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 776.523401][T15167] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 776.533590][T15167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.542678][ T5140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 776.556106][ T5140] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 776.577644][T15167] usb 1-1: 0:2 : does not exist [ 776.583680][ T5140] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 776.677040][ T5140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 776.695973][ T5140] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 776.723452][ T5140] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 776.742445][ T5140] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 776.753120][ T5140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.843118][ T5140] usb 4-1: Product: syz [ 776.864918][ T5140] usb 4-1: Manufacturer: syz [ 776.879441][ T5140] usb 4-1: SerialNumber: syz [ 777.595836][ T9966] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 777.642329][ T9966] usb 5-1: Using ep0 maxpacket: 16 [ 777.651816][ T9966] usb 5-1: no configurations [ 777.659365][ T5140] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 777.665256][ T9966] usb 5-1: can't read configurations, error -22 [ 777.747433][ T926] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 777.860448][ T9966] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 777.908274][ T9966] usb 5-1: Using ep0 maxpacket: 16 [ 777.929746][ T9966] usb 5-1: no configurations [ 777.945746][ T9966] usb 5-1: can't read configurations, error -22 [ 777.960407][ T926] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 777.984219][ T9966] usb usb5-port1: unable to enumerate USB device [ 777.986989][ T5140] usb 4-1: USB disconnect, device number 74 [ 778.010220][ T926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.053027][ T926] usb 2-1: config 0 descriptor?? [ 778.064745][T16525] usblp0: removed [ 778.083201][ T926] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input57 [ 778.278840][ T5140] usb 2-1: USB disconnect, device number 92 [ 778.568391][ T926] usb 1-1: USB disconnect, device number 91 [ 778.890173][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 780.057776][T15167] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 780.246041][ T9966] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 780.272751][T15167] usb 3-1: Using ep0 maxpacket: 32 [ 780.317636][T15167] usb 3-1: unable to get BOS descriptor or descriptor too short [ 780.339294][T15167] usb 3-1: no configurations [ 780.345994][T15167] usb 3-1: can't read configurations, error -22 [ 780.366064][ T926] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 780.456121][ T9966] usb 4-1: Using ep0 maxpacket: 16 [ 780.503799][ T9966] usb 4-1: descriptor type invalid, skip [ 780.539767][ T9966] usb 4-1: descriptor type invalid, skip [ 780.558627][ T9966] usb 4-1: descriptor type invalid, skip [ 780.575011][ T9966] usb 4-1: descriptor type invalid, skip [ 780.616007][ T926] usb 1-1: Using ep0 maxpacket: 16 [ 780.621360][ T9966] usb 4-1: descriptor type invalid, skip [ 780.634193][ T926] usb 1-1: no configurations [ 780.658715][ T9966] usb 4-1: descriptor type invalid, skip [ 780.664805][ T926] usb 1-1: can't read configurations, error -22 [ 780.682964][ T9966] usb 4-1: descriptor type invalid, skip [ 780.703285][ T9966] usb 4-1: descriptor type invalid, skip [ 780.742448][ T9966] usb 4-1: descriptor type invalid, skip [ 780.773250][ T9966] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.801876][ T9966] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 780.836166][ T926] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 780.856336][ T9966] usb 4-1: string descriptor 0 read error: -22 [ 780.890582][ T9966] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 780.941559][ T9966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.998072][ T9966] usb 4-1: 0:2 : does not exist [ 781.070654][ T926] usb 1-1: Using ep0 maxpacket: 16 [ 781.098289][ T926] usb 1-1: no configurations [ 781.130408][ T926] usb 1-1: can't read configurations, error -22 [ 781.146217][ T926] usb usb1-port1: attempt power cycle [ 781.148323][T16593] netlink: 'syz.1.2986': attribute type 21 has an invalid length. [ 781.246555][T16593] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2986'. [ 781.566581][ T926] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 781.582558][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2989'. [ 781.627287][ T926] usb 1-1: Using ep0 maxpacket: 16 [ 781.645673][ T926] usb 1-1: no configurations [ 781.651166][ T926] usb 1-1: can't read configurations, error -22 [ 781.826474][T15167] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 782.316271][ T9948] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 782.367262][T15167] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 782.411989][T15167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.556883][ T926] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 782.576340][ T9964] usb 4-1: USB disconnect, device number 75 [ 782.576663][ T9948] usb 5-1: Using ep0 maxpacket: 16 [ 782.617148][ T926] usb 1-1: Using ep0 maxpacket: 16 [ 782.617934][T15167] usb 3-1: config 0 descriptor?? [ 782.652849][ T9948] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 782.656076][ T926] usb 1-1: no configurations [ 782.677112][T15167] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input58 [ 782.693112][ T926] usb 1-1: can't read configurations, error -22 [ 782.716637][ T9948] usb 5-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 782.719088][ T926] usb usb1-port1: unable to enumerate USB device [ 782.745818][T16612] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2991'. [ 782.935986][ T9948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.944016][ T9948] usb 5-1: Product: syz [ 782.951966][T15167] usb 3-1: USB disconnect, device number 81 [ 782.958509][ T9948] usb 5-1: Manufacturer: syz [ 782.963126][ T9948] usb 5-1: SerialNumber: syz [ 782.979175][ T9948] usb 5-1: config 0 descriptor?? [ 783.033679][ T9948] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 783.304931][ T9948] dw2102: su3000_power_ctrl: 1, initialized 0 [ 783.467575][ T9948] dvb-usb: bulk message failed: -22 (2/0) [ 783.603247][ T9948] dvb-usb: X3M TV SPC1400HD PCI error while loading driver (-22) [ 783.976783][ T9964] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 784.001741][T16632] loop3: detected capacity change from 0 to 1024 [ 784.009948][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3000'. [ 784.146672][ T6300] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 784.986669][ T9964] usb 2-1: Using ep0 maxpacket: 32 [ 785.047946][ T9964] usb 2-1: unable to get BOS descriptor or descriptor too short [ 785.055665][ T9964] usb 2-1: no configurations [ 785.068361][ T9948] usb 5-1: USB disconnect, device number 83 [ 785.242241][ T9964] usb 2-1: can't read configurations, error -22 [ 786.436075][ T5140] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 786.625544][ T29] audit: type=1804 audit(1719554100.082:151): pid=16665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3011" name="/root/syzkaller.n3xDei/98/file0" dev="sda1" ino=2022 res=1 errno=0 [ 786.666006][ T5140] usb 5-1: Using ep0 maxpacket: 16 [ 786.689668][ T5140] usb 5-1: no configurations [ 786.694294][ T5140] usb 5-1: can't read configurations, error -22 [ 786.869296][ T5140] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 786.951291][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'. [ 787.101899][ T5140] usb 5-1: Using ep0 maxpacket: 16 [ 787.115835][ T5140] usb 5-1: no configurations [ 787.126291][ T5140] usb 5-1: can't read configurations, error -22 [ 787.142741][ T5140] usb usb5-port1: attempt power cycle [ 787.656117][ T5140] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 787.989520][ T5140] usb 5-1: Using ep0 maxpacket: 16 [ 788.002438][ T5140] usb 5-1: no configurations [ 788.007184][ T5140] usb 5-1: can't read configurations, error -22 [ 788.166098][ T5140] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 788.217051][ T5140] usb 5-1: Using ep0 maxpacket: 16 [ 788.233757][ T5140] usb 5-1: no configurations [ 788.253294][ T5140] usb 5-1: can't read configurations, error -22 [ 788.276729][ T5140] usb usb5-port1: unable to enumerate USB device [ 788.574357][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'. [ 788.656052][ T5140] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 788.783639][T16707] loop2: detected capacity change from 0 to 1024 [ 788.790361][ T9966] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 788.838438][ T6300] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 788.876107][ T5140] usb 1-1: Using ep0 maxpacket: 8 [ 788.883064][ T5140] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 788.903571][ T5140] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 788.915070][ T5140] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 788.932591][ T5140] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 788.955235][ T5140] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 788.968519][ T5140] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 788.977712][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.991787][ T9966] usb 4-1: Using ep0 maxpacket: 16 [ 788.995805][ T5140] usbtmc 1-1:16.0: bulk endpoints not found [ 789.008302][ T9966] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 789.042938][ T9966] usb 4-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 789.127022][ T9966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.208834][ T9966] usb 4-1: Product: syz [ 789.226063][ T9966] usb 4-1: Manufacturer: syz [ 789.230682][ T9966] usb 4-1: SerialNumber: syz [ 789.248836][ T9966] usb 4-1: config 0 descriptor?? [ 789.267793][ T9966] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 789.282326][ T9966] dw2102: su3000_power_ctrl: 1, initialized 0 [ 789.465734][ T9966] dvb-usb: bulk message failed: -22 (2/0) [ 790.221585][ T9966] dvb-usb: X3M TV SPC1400HD PCI error while loading driver (-22) [ 790.276301][ T9966] usb 4-1: USB disconnect, device number 76 [ 791.133016][T16729] loop3: detected capacity change from 0 to 512 [ 791.183216][T16729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 791.276973][T16729] ext4 filesystem being mounted at /root/syzkaller.URRtSn/80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.414446][T16729] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 791.479321][T16733] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 791.604276][ T9966] usb 1-1: USB disconnect, device number 96 [ 791.711300][T16709] loop2: detected capacity change from 0 to 32768 [ 791.765094][T16709] read_mapping_page failed! [ 791.776576][T16709] diRead: diIAGRead returned -5 [ 791.881173][T14908] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 792.266563][ T1709] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 792.496280][ T1709] usb 1-1: Using ep0 maxpacket: 16 [ 792.540004][ T1709] usb 1-1: no configurations [ 792.614086][ T1709] usb 1-1: can't read configurations, error -22 [ 793.178194][ T29] audit: type=1804 audit(1719554106.642:152): pid=16766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3037" name="/root/syzkaller.3BPQRY/94/file0" dev="sda1" ino=2023 res=1 errno=0 [ 793.257599][ T1709] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 793.468712][ T1709] usb 1-1: Using ep0 maxpacket: 16 [ 793.485633][ T1709] usb 1-1: no configurations [ 793.502456][ T1709] usb 1-1: can't read configurations, error -22 [ 793.535306][ T1709] usb usb1-port1: attempt power cycle [ 793.586161][ T9966] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 793.776002][ T9966] usb 4-1: Using ep0 maxpacket: 16 [ 793.802493][ T9966] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 793.827705][ T5143] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 793.844499][ T9966] usb 4-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 793.856447][ T9966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.865982][ T9966] usb 4-1: Product: syz [ 793.870394][ T9966] usb 4-1: Manufacturer: syz [ 793.875546][ T9966] usb 4-1: SerialNumber: syz [ 793.887701][ T9966] usb 4-1: config 0 descriptor?? [ 793.909516][ T9966] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 793.917002][ T9966] dw2102: su3000_power_ctrl: 1, initialized 0 [ 793.927699][ T9966] dvb-usb: bulk message failed: -22 (2/0) [ 793.973867][ T9966] dvb-usb: X3M TV SPC1400HD PCI error while loading driver (-22) [ 793.988041][ T1709] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 794.036024][ T5143] usb 3-1: Using ep0 maxpacket: 8 [ 794.057204][ T1709] usb 1-1: Using ep0 maxpacket: 16 [ 794.063626][ T1709] usb 1-1: no configurations [ 794.068686][ T1709] usb 1-1: can't read configurations, error -22 [ 794.069300][ T5143] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.104043][ T9966] usb 4-1: USB disconnect, device number 77 [ 794.111787][ T5143] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 794.148595][ T5143] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 794.162072][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.189161][ T5143] usb 3-1: config 0 descriptor?? [ 794.227552][ T1709] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 794.292098][ T1709] usb 1-1: Using ep0 maxpacket: 16 [ 794.307926][ T1709] usb 1-1: no configurations [ 794.316377][ T1709] usb 1-1: can't read configurations, error -22 [ 794.327273][ T1709] usb usb1-port1: unable to enumerate USB device [ 794.816104][ T5143] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 795.027890][ T5143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 795.038313][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3051'. [ 795.048271][ T5143] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 795.076089][ T5143] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.236650][ T5143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 795.303226][ T5143] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 795.996015][T15354] Bluetooth: hci5: command 0x0406 tx timeout [ 796.056380][ T5143] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.157465][ T5143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 796.183052][T16808] fuse: Bad value for 'group_id' [ 796.198220][ T29] audit: type=1804 audit(1719554109.652:153): pid=16808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3054" name="/root/syzkaller.fn0Bkm/75/file0" dev="sda1" ino=2013 res=1 errno=0 [ 796.227550][ T5143] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 796.275854][ T5143] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.350602][ T5143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 796.385152][ T5143] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 796.419839][ T5143] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.474243][ T5143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 796.497107][ T5143] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 796.534557][ T5143] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.582751][ T5143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 796.604209][ T5143] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 796.615096][ T5097] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 796.632744][ T5143] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.645348][ T9948] usb 3-1: USB disconnect, device number 82 [ 796.658928][ T5143] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 796.674778][ T5143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.729020][ T5143] usb 5-1: Product: syz [ 796.741770][ T5143] usb 5-1: Manufacturer: syz [ 796.794612][ T5143] usb 5-1: SerialNumber: syz [ 797.052951][ T5143] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 797.066112][T16823] loop3: detected capacity change from 0 to 8 [ 797.286151][ T9948] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 797.393179][ T5143] usb 5-1: USB disconnect, device number 88 [ 797.432040][T16783] usblp0: removed [ 797.489736][ T9948] usb 3-1: Using ep0 maxpacket: 8 [ 797.511162][ T9948] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 797.542210][ T9948] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 797.589273][ T9948] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 797.606163][ T9948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.854136][T16822] netlink: 'syz.2.3059': attribute type 4 has an invalid length. [ 797.915858][ T9948] usb 3-1: string descriptor 0 read error: -71 [ 797.937001][ T9948] hub 3-1:32.0: USB hub found [ 797.944877][ T9948] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 797.956837][T16829] netlink: 'syz.0.3061': attribute type 29 has an invalid length. [ 797.989516][T16829] netlink: 'syz.0.3061': attribute type 29 has an invalid length. [ 798.044186][ T9948] usb 3-1: USB disconnect, device number 83 [ 798.058169][T16832] netlink: 'syz.0.3061': attribute type 29 has an invalid length. [ 798.307632][ T5097] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 798.656652][ T926] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 798.695127][T16848] loop2: detected capacity change from 0 to 4096 [ 798.723778][T16848] NILFS (loop2): invalid segment: Checksum error in segment payload [ 798.771287][T16848] NILFS (loop2): trying rollback from an earlier position [ 798.862555][ T926] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 798.885411][ T926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.909816][T16848] NILFS (loop2): recovery complete [ 798.911973][ T926] usb 5-1: config 0 descriptor?? [ 798.938440][ T926] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 798.960743][T16854] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 799.132245][ T5097] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 799.427219][ T9948] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 799.610741][T16867] netlink: 'syz.3.3075': attribute type 29 has an invalid length. [ 799.624672][T16867] netlink: 'syz.3.3075': attribute type 29 has an invalid length. [ 799.636221][ T9948] usb 2-1: Using ep0 maxpacket: 8 [ 799.637132][T16867] netlink: 'syz.3.3075': attribute type 29 has an invalid length. [ 799.663159][ T9948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.724617][ T9948] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.737859][ T9948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.753224][ T9948] usb 2-1: Product: syz [ 799.789048][ T9948] usb 2-1: Manufacturer: syz [ 799.809829][ T9948] usb 2-1: SerialNumber: syz [ 799.841658][ T9948] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 800.051825][ T926] usb 2-1: USB disconnect, device number 95 [ 800.072914][ T9966] usb 5-1: USB disconnect, device number 89 [ 800.076099][T15167] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 800.116134][ T1709] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 800.298051][T15167] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 800.310659][T15167] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 800.320957][T15167] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.334197][ T1709] usb 4-1: Using ep0 maxpacket: 8 [ 800.345939][ T1709] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 800.361993][ T1709] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 800.362552][T15167] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 800.384192][ T1709] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 800.396110][ T1709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.414097][T15167] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 800.427636][T15167] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.444900][T15167] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 800.458036][T15167] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 800.467791][T15167] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.484680][T15167] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 800.494527][T15167] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 800.504206][T15167] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.519196][T15167] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 800.531223][T15167] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 800.544043][T15167] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.578545][T15167] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 800.606917][T15167] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 800.634599][T15167] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.666906][T16873] netlink: 'syz.3.3077': attribute type 4 has an invalid length. [ 800.699573][T15167] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 800.731514][T15167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.753930][ T1709] usb 4-1: string descriptor 0 read error: -71 [ 800.775724][ T1709] hub 4-1:32.0: USB hub found [ 800.782379][T15167] usb 1-1: Product: syz [ 800.814252][T15167] usb 1-1: Manufacturer: syz [ 800.820267][ T1709] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 800.831573][T15167] usb 1-1: SerialNumber: syz [ 800.928126][ T1709] usb 4-1: USB disconnect, device number 78 [ 801.052855][T15167] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 801.076094][ T9948] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 801.286335][ T9948] usb 3-1: Using ep0 maxpacket: 16 [ 801.301262][ T9948] usb 3-1: descriptor type invalid, skip [ 801.336282][ T9948] usb 3-1: descriptor type invalid, skip [ 801.364512][ T9948] usb 3-1: descriptor type invalid, skip [ 801.381912][ T9966] usb 1-1: USB disconnect, device number 101 [ 801.392326][ T9948] usb 3-1: descriptor type invalid, skip [ 801.434758][ T9966] usblp0: removed [ 801.446070][ T9948] usb 3-1: descriptor type invalid, skip [ 801.477814][ T9948] usb 3-1: descriptor type invalid, skip [ 801.516141][ T9948] usb 3-1: descriptor type invalid, skip [ 801.544572][ T9948] usb 3-1: descriptor type invalid, skip [ 801.575252][ T9948] usb 3-1: descriptor type invalid, skip [ 801.599997][ T9948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.635815][ T9948] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 801.686637][ T9948] usb 3-1: string descriptor 0 read error: -22 [ 801.692935][ T9948] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 801.746282][ T9948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.820142][ T9948] usb 3-1: 0:2 : does not exist [ 802.101903][ T5097] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 802.113728][ T5097] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 802.113758][ T5097] Bluetooth: unknown link type 5 [ 802.129515][ T5097] Bluetooth: hci5: connection err: -111 [ 802.356101][ T9966] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 802.546126][ T9966] usb 1-1: Using ep0 maxpacket: 8 [ 802.567836][ T9966] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.604760][ T9966] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.614119][ T9966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.665352][ T9966] usb 1-1: Product: syz [ 802.675362][ T9966] usb 1-1: Manufacturer: syz [ 802.689242][ T9966] usb 1-1: SerialNumber: syz [ 802.711182][ T9966] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 803.252959][ T926] usb 1-1: USB disconnect, device number 102 [ 803.466083][ T9966] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 803.578205][T15167] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 803.643836][ T1709] usb 3-1: USB disconnect, device number 84 [ 803.664722][ T9966] usb 2-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 803.677624][ T9948] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 803.696434][ T9966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.717488][ T9966] usb 2-1: config 0 descriptor?? [ 803.740588][ T9966] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input59 [ 803.811975][T15167] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 803.827989][T15167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.863795][T15167] usb 4-1: config 0 descriptor?? [ 803.926176][ T9948] usb 5-1: Using ep0 maxpacket: 8 [ 803.955760][ T9948] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 803.996100][ T9948] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 804.007450][ T9948] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 804.016705][ T9948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.043429][ T4533] bcm5974 2-1:0.0: could not read from device [ 804.073366][ T4533] bcm5974 2-1:0.0: could not read from device [ 804.091189][ T9966] usb 2-1: USB disconnect, device number 96 [ 804.100876][ T4533] bcm5974 2-1:0.0: could not read from device [ 804.236385][ T1709] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 804.253868][T16912] netlink: 'syz.4.3093': attribute type 4 has an invalid length. [ 804.292188][T15167] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 804.319513][ T9948] usb 5-1: string descriptor 0 read error: -71 [ 804.329440][ T9948] hub 5-1:32.0: USB hub found [ 804.335465][ T9948] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 804.447110][ T9948] usb 5-1: USB disconnect, device number 90 [ 804.467455][ T1709] usb 3-1: Using ep0 maxpacket: 32 [ 804.499656][ T1709] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 804.509143][T15167] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 804.521026][ T1709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.537997][T15167] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 804.561050][ T1709] usb 3-1: config 0 descriptor?? [ 804.570461][ T1709] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 804.583182][ T1709] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 804.596709][ T1709] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 804.603386][ T1709] usb 3-1: media controller created [ 804.632818][ T1709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 804.663317][ T1709] usb 3-1: selecting invalid altsetting 1 [ 804.672772][ T1709] set interface failed [ 804.672801][ T1709] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 804.695114][ T1709] error writing reg: 0xff, val: 0x00 [ 804.716573][ T9966] usb 4-1: USB disconnect, device number 79 [ 804.808716][ T1709] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 804.833027][ T1709] usb 3-1: USB disconnect, device number 85 [ 805.106415][ T9948] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 805.306253][ T9948] usb 2-1: Using ep0 maxpacket: 8 [ 805.320483][ T9948] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 805.332673][ T9948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.364510][ T9948] usb 2-1: config 0 descriptor?? [ 805.498576][ T9948] viperboard 2-1:0.0: version 0.00 found at bus 002 address 097 [ 805.533554][ T9948] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 805.558045][ T9948] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 805.886140][ T9948] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 805.915386][T16954] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3108'. [ 806.136068][ T9948] usb 4-1: Using ep0 maxpacket: 16 [ 806.186676][ T9948] usb 4-1: descriptor type invalid, skip [ 806.192412][ T9948] usb 4-1: descriptor type invalid, skip [ 806.204417][ T9948] usb 4-1: descriptor type invalid, skip [ 806.221545][ T9948] usb 4-1: descriptor type invalid, skip [ 806.232621][ T9948] usb 4-1: descriptor type invalid, skip [ 806.245266][ T9948] usb 4-1: descriptor type invalid, skip [ 806.256104][ T9948] usb 4-1: descriptor type invalid, skip [ 806.261783][ T9948] usb 4-1: descriptor type invalid, skip [ 806.269262][ T9948] usb 4-1: descriptor type invalid, skip [ 806.281323][ T9948] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.607555][ T9948] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.620667][ T9948] usb 4-1: string descriptor 0 read error: -22 [ 806.628450][ T9948] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 806.697766][ T9948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.766228][ T9966] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 806.826471][ T9948] usb 4-1: 0:2 : does not exist [ 806.897635][ T5143] usb 2-1: USB disconnect, device number 97 [ 806.936074][ T5140] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 806.988709][ T9966] usb 5-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 807.030953][ T9966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.054017][ T9966] usb 5-1: config 0 descriptor?? [ 807.074069][ T9966] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input60 [ 807.149646][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64 [ 807.180744][ T5140] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 807.211523][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.230506][ T5140] usb 3-1: config 0 descriptor?? [ 807.242435][ T5140] hub 3-1:0.0: USB hub found [ 807.397758][ T4533] bcm5974 5-1:0.0: could not read from device [ 807.425344][ T4533] bcm5974 5-1:0.0: could not read from device [ 807.437773][ T9966] usb 5-1: USB disconnect, device number 91 [ 807.447948][ T5140] hub 3-1:0.0: 1 port detected [ 807.463914][ T4533] bcm5974 5-1:0.0: could not read from device [ 807.664676][ T29] audit: type=1800 audit(1719554121.122:154): pid=16954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3108" name="bus" dev="sda1" ino=2024 res=0 errno=0 [ 807.671793][ T5140] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 807.704985][ T5140] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 807.718612][ T5140] usbhid 3-1:0.0: can't add hid device: -71 [ 807.732813][ T5140] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 807.786869][ T5140] usb 3-1: USB disconnect, device number 86 [ 808.505437][ T5143] usb 4-1: USB disconnect, device number 80 [ 808.756303][ T9948] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 808.906020][ T5140] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 808.946453][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.950432][ T9948] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 808.952760][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.996056][ T9948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.026976][ T9948] usb 3-1: config 0 descriptor?? [ 809.116021][ T5140] usb 1-1: Using ep0 maxpacket: 32 [ 809.123892][ T5140] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 809.136255][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.149282][ T5140] usb 1-1: config 0 descriptor?? [ 809.159354][ T5140] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 809.166983][ T1709] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 809.179048][ T5140] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 809.198720][ T5140] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 809.207161][ T5140] usb 1-1: media controller created [ 809.234898][ T5140] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.263481][ T5140] usb 1-1: selecting invalid altsetting 1 [ 809.270340][ T5140] set interface failed [ 809.270368][ T5140] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 809.281737][ T5140] error writing reg: 0xff, val: 0x00 [ 809.327403][ T5140] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 809.366105][ T1709] usb 4-1: Using ep0 maxpacket: 16 [ 809.375357][ T1709] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 809.410693][ T1709] usb 4-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 809.427831][ T1709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.436931][ T1709] usb 4-1: Product: syz [ 809.441256][ T1709] usb 4-1: Manufacturer: syz [ 809.447009][ T1709] usb 4-1: SerialNumber: syz [ 809.488797][ T5140] usb 1-1: USB disconnect, device number 103 [ 809.502844][ T1709] usb 4-1: config 0 descriptor?? [ 809.524079][ T1709] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 809.536672][ T1709] dw2102: su3000_power_ctrl: 1, initialized 0 [ 809.543118][ T1709] dvb-usb: bulk message failed: -22 (2/0) [ 809.560984][ T1709] dvb-usb: X3M TV SPC1400HD PCI error while loading driver (-22) [ 809.749612][ T5140] usb 4-1: USB disconnect, device number 81 [ 810.851653][ T5097] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 811.116243][ T5143] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 811.337390][ T5097] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 811.346255][ T5143] usb 2-1: Using ep0 maxpacket: 8 [ 811.364654][ T5143] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 811.402586][ T5143] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 811.427388][ T5143] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 811.446513][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.666136][ T5140] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 811.706153][ T5143] usb 2-1: string descriptor 0 read error: -71 [ 811.730699][ T5143] hub 2-1:32.0: USB hub found [ 811.752820][ T5143] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 811.839999][ T5143] usb 2-1: USB disconnect, device number 98 [ 811.866211][ T5140] usb 1-1: Using ep0 maxpacket: 16 [ 811.898120][ T5140] usb 1-1: descriptor type invalid, skip [ 811.912235][ T5140] usb 1-1: descriptor type invalid, skip [ 811.927952][ T5140] usb 1-1: descriptor type invalid, skip [ 811.933696][ T5140] usb 1-1: descriptor type invalid, skip [ 811.942835][ T5140] usb 1-1: descriptor type invalid, skip [ 811.959024][ T5140] usb 1-1: descriptor type invalid, skip [ 811.965316][ T5140] usb 1-1: descriptor type invalid, skip [ 811.971300][ T9948] pegasus 3-1:0.0: setup Pegasus II specific registers [ 811.978303][ T5140] usb 1-1: descriptor type invalid, skip [ 811.984620][ T5140] usb 1-1: descriptor type invalid, skip [ 811.997497][ T5140] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.023308][ T5140] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 812.056774][ T5140] usb 1-1: string descriptor 0 read error: -22 [ 812.068992][ T5140] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 812.082250][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.108371][ T5140] usb 1-1: 0:2 : does not exist [ 812.158756][ T6720] udevd[6720]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.182088][T16982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.232132][T16982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.388631][ T9948] pegasus 3-1:0.0: can't locate MII phy, using default [ 812.514543][ T9948] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 4c:e2:85:6b:60:1d [ 813.265625][ T9948] usb 3-1: USB disconnect, device number 87 [ 813.926205][ T926] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 814.126189][ T9948] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 814.135984][ T926] usb 4-1: Using ep0 maxpacket: 32 [ 814.150134][ T1709] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 814.150798][ T926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.174951][ T926] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 814.184876][ T926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.212772][ T926] usb 4-1: config 0 descriptor?? [ 814.225047][ T926] usb 4-1: bad CDC descriptors [ 814.309175][ T926] usb 1-1: USB disconnect, device number 104 [ 814.326905][ T9948] usb 2-1: Using ep0 maxpacket: 16 [ 814.338180][ T9948] usb 2-1: no configurations [ 814.342801][ T9948] usb 2-1: can't read configurations, error -22 [ 814.350487][ T1709] usb 5-1: Using ep0 maxpacket: 8 [ 814.369271][ T1709] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 814.378764][ T1709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.409769][ T1709] usb 5-1: config 0 descriptor?? [ 814.516294][ T9948] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 814.540534][ T1709] viperboard 5-1:0.0: version 0.00 found at bus 005 address 092 [ 814.586525][ T1709] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 814.602907][ T1709] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 815.047687][ T926] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 815.377012][ T926] usb 3-1: Using ep0 maxpacket: 32 [ 815.396456][ T926] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 815.438541][ T926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.446815][ T9948] usb 2-1: Using ep0 maxpacket: 16 [ 815.457250][ T9948] usb 2-1: no configurations [ 815.465884][ T926] usb 3-1: config 0 descriptor?? [ 815.466364][ T9948] usb 2-1: can't read configurations, error -22 [ 815.479209][ T926] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 815.508205][ T9948] usb usb2-port1: attempt power cycle [ 815.509526][ T9966] usb 5-1: USB disconnect, device number 92 [ 815.547832][ T5140] usb 4-1: USB disconnect, device number 82 [ 815.693839][T17057] netlink: 'syz.3.3139': attribute type 10 has an invalid length. [ 815.710094][T17057] bridge0: port 3(team0) entered disabled state [ 815.718219][T17057] team0: left allmulticast mode [ 815.723288][T17057] team_slave_0: left allmulticast mode [ 815.729525][T17057] team_slave_1: left allmulticast mode [ 815.735258][T17057] team0: left promiscuous mode [ 815.742379][T17057] team_slave_0: left promiscuous mode [ 815.748382][T17057] team_slave_1: left promiscuous mode [ 815.754240][T17057] bridge0: port 3(team0) entered disabled state [ 815.764476][T17057] batman_adv: batadv0: Adding interface: team0 [ 815.770722][T17057] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.796248][T17057] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 815.796404][ T5143] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 815.823359][T17058] netlink: 'syz.3.3139': attribute type 10 has an invalid length. [ 815.831884][T17058] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3139'. [ 815.842918][T17058] team0: entered promiscuous mode [ 815.852212][T17058] team_slave_0: entered promiscuous mode [ 815.858790][T17058] team_slave_1: entered promiscuous mode [ 815.867412][T17058] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.874356][T17058] batman_adv: batadv0: Interface activated: team0 [ 815.881380][T17058] batman_adv: batadv0: Interface deactivated: team0 [ 815.889325][T17058] batman_adv: batadv0: Removing interface: team0 [ 815.896729][T17058] bridge0: port 3(team0) entered blocking state [ 815.903159][T17058] bridge0: port 3(team0) entered disabled state [ 815.910257][T17058] team0: entered allmulticast mode [ 815.915393][T17058] team_slave_0: entered allmulticast mode [ 815.921195][T17058] team_slave_1: entered allmulticast mode [ 815.928625][T17058] bridge0: port 3(team0) entered blocking state [ 815.934951][T17058] bridge0: port 3(team0) entered forwarding state [ 815.946179][ T9948] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 815.966537][ T5143] usb 1-1: device descriptor read/64, error -71 [ 815.986800][ T9948] usb 2-1: Using ep0 maxpacket: 16 [ 815.996237][ T9948] usb 2-1: no configurations [ 816.000852][ T9948] usb 2-1: can't read configurations, error -22 [ 816.137045][ T5097] Bluetooth: hci3: command 0x0406 tx timeout [ 816.266067][ T5143] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 816.298908][ T9948] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 816.336976][ T9948] usb 2-1: Using ep0 maxpacket: 16 [ 816.342654][ T9948] usb 2-1: no configurations [ 816.347381][ T9948] usb 2-1: can't read configurations, error -22 [ 816.356153][ T9948] usb usb2-port1: unable to enumerate USB device [ 816.578100][ T5143] usb 1-1: device descriptor read/64, error -71 [ 816.669377][ T9964] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 816.703577][ T5143] usb usb1-port1: attempt power cycle [ 816.796490][ T926] gspca_nw80x: reg_w err -71 [ 816.828890][ T926] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 816.979950][ T9964] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 817.016330][ T926] usb 3-1: USB disconnect, device number 88 [ 817.033351][ T9964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.062955][ T9964] usb 5-1: config 0 descriptor?? [ 817.335259][ T5143] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 817.366718][ T5143] usb 1-1: device descriptor read/8, error -71 [ 817.776620][ T5143] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 817.923568][ T5143] usb 1-1: device descriptor read/8, error -71 [ 818.147535][ T5143] usb usb1-port1: unable to enumerate USB device [ 818.434104][T17093] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3149'. [ 818.726166][ T5140] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 818.916373][ T5140] usb 4-1: Using ep0 maxpacket: 32 [ 818.923751][ T5140] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 818.933093][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.941477][T15354] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 818.944937][ T5140] usb 4-1: config 0 descriptor?? [ 818.990291][ T5140] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 819.007714][ T9948] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 819.021616][ T5140] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 819.025963][ T5143] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 819.032834][ T5140] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 819.082269][ T5140] usb 4-1: media controller created [ 819.143472][ T5140] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 819.164639][ T5140] usb 4-1: selecting invalid altsetting 1 [ 819.211624][ T5140] set interface failed [ 819.211655][ T5140] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 819.236587][ T5140] error writing reg: 0xff, val: 0x00 [ 819.238705][ T5143] usb 1-1: Using ep0 maxpacket: 8 [ 819.246068][ T9948] usb 3-1: Using ep0 maxpacket: 16 [ 819.255644][ T9948] usb 3-1: no configurations [ 819.260825][ T9948] usb 3-1: can't read configurations, error -22 [ 819.267463][ T5143] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 819.293567][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.304416][ T5140] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 819.363218][ T5143] usb 1-1: config 0 descriptor?? [ 819.363472][ T5140] usb 4-1: USB disconnect, device number 83 [ 819.426198][ T9948] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 819.497102][ T5143] viperboard 1-1:0.0: version 0.00 found at bus 001 address 109 [ 819.528567][ T5143] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 819.539544][ T5143] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 819.590878][ T9964] pegasus 5-1:0.0: setup Pegasus II specific registers [ 819.616041][ T9948] usb 3-1: Using ep0 maxpacket: 16 [ 819.631740][ T9948] usb 3-1: no configurations [ 819.641814][ T9948] usb 3-1: can't read configurations, error -22 [ 819.670415][ T9948] usb usb3-port1: attempt power cycle [ 819.794493][T17064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.805184][T17064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.001175][ T9964] pegasus 5-1:0.0: can't locate MII phy, using default [ 820.032266][ T9964] pegasus 5-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 4c:e2:85:6b:60:1d [ 820.062416][ T9964] usb 5-1: USB disconnect, device number 93 [ 820.089477][ T5140] usb 1-1: USB disconnect, device number 109 [ 820.097226][ T9948] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 820.168503][ T9948] usb 3-1: Using ep0 maxpacket: 16 [ 820.177075][ T9948] usb 3-1: no configurations [ 820.182658][ T9948] usb 3-1: can't read configurations, error -22 [ 820.346722][ T9948] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 820.376865][ T9948] usb 3-1: Using ep0 maxpacket: 16 [ 820.386719][ T9948] usb 3-1: no configurations [ 820.396642][ T9948] usb 3-1: can't read configurations, error -22 [ 820.419698][ T9948] usb usb3-port1: unable to enumerate USB device [ 820.618089][T17113] loop4: detected capacity change from 0 to 8 [ 822.059803][T17132] netlink: 'syz.2.3158': attribute type 21 has an invalid length. [ 822.089433][T17132] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3158'. [ 822.213566][ T9] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 822.405970][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 822.452563][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 822.513028][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.574081][ T9] usb 1-1: config 0 descriptor?? [ 822.607750][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 822.686026][ T9964] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 822.974723][ T9964] usb 2-1: config 0 has an invalid interface number: 81 but max is 0 [ 822.987683][ T9964] usb 2-1: config 0 has no interface number 0 [ 823.004335][ T9964] usb 2-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 823.035757][ T9964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.075367][ T9964] usb 2-1: config 0 descriptor?? [ 823.122025][T17145] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3163'. [ 823.302461][ T9964] usb 2-1: USB disconnect, device number 103 [ 823.436031][ T5140] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 823.626454][ T5140] usb 5-1: Using ep0 maxpacket: 32 [ 823.652052][ T5140] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 823.661625][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.683146][ T5140] usb 5-1: config 0 descriptor?? [ 823.702319][ T5140] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 823.715319][ T5140] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 823.728652][ T5140] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 823.735303][ T5140] usb 5-1: media controller created [ 823.758694][ T5140] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.778849][ T5140] usb 5-1: selecting invalid altsetting 1 [ 823.784634][ T5140] set interface failed [ 823.784661][ T5140] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 823.795215][ T5140] error writing reg: 0xff, val: 0x00 [ 823.830958][ T5140] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 823.838072][ T9] gspca_nw80x: reg_w err -71 [ 823.851800][ T5143] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 823.874327][ T9] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 823.911511][ T9] usb 1-1: USB disconnect, device number 110 [ 823.985249][ T5140] usb 5-1: USB disconnect, device number 94 [ 824.105990][ T5143] usb 3-1: Using ep0 maxpacket: 8 [ 824.119890][ T5143] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 824.144756][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.171019][ T5143] usb 3-1: config 0 descriptor?? [ 824.307725][ T5143] viperboard 3-1:0.0: version 0.00 found at bus 003 address 093 [ 824.341547][ T5143] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 824.366054][ T5143] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 824.719172][T17170] loop4: detected capacity change from 0 to 512 [ 824.796335][T17170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 824.837067][T17170] ext4 filesystem being mounted at /root/syzkaller.8SLQSH/116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.893670][ T5140] usb 3-1: USB disconnect, device number 93 [ 824.970688][T17170] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 825.093890][T17170] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 825.112478][T17179] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 825.119652][T17179] batman_adv: batadv1: Removing interface: netdevsim0 [ 825.177861][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 825.191105][T14857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 825.216282][ T5143] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 825.380927][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 825.390763][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 825.406072][ T5143] usb 1-1: Using ep0 maxpacket: 32 [ 825.414731][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.424953][ T5143] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 825.445499][ T9] usb 4-1: config 0 descriptor?? [ 825.451183][ T9964] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 825.459027][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.495127][ T5143] usb 1-1: config 0 descriptor?? [ 825.505626][ T5143] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 825.537321][ T5143] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 825.574160][ T5143] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 825.586081][ T5143] usb 1-1: media controller created [ 825.599709][T17191] loop4: detected capacity change from 0 to 4096 [ 825.619951][ T5143] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 825.641476][T17191] NILFS (loop4): invalid segment: Checksum error in segment payload [ 825.654058][ T5143] usb 1-1: selecting invalid altsetting 1 [ 825.657106][T17191] NILFS (loop4): trying rollback from an earlier position [ 825.661080][ T9964] usb 2-1: Using ep0 maxpacket: 8 [ 825.683883][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 825.694030][ T5143] set interface failed [ 825.694057][ T5143] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 825.695149][T17191] NILFS (loop4): recovery complete [ 825.699121][ T5143] error writing reg: 0xff, val: 0x00 [ 825.711438][ T9] asix 4-1:0.0: probe with driver asix failed with error -32 [ 825.729344][ T9964] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 825.743199][ T9964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.744842][T17194] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 825.803157][ T9964] usb 2-1: config 0 descriptor?? [ 825.832296][ T5143] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 825.856976][ T5143] usb 1-1: USB disconnect, device number 111 [ 825.865447][T15354] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 825.866042][ T926] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 826.098536][ T926] usb 3-1: config 0 has an invalid interface number: 81 but max is 0 [ 826.113130][ T926] usb 3-1: config 0 has no interface number 0 [ 826.123270][ T926] usb 3-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 826.132842][ T926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.150346][ T926] usb 3-1: config 0 descriptor?? [ 826.369884][ T5143] usb 3-1: USB disconnect, device number 94 [ 826.420809][T17183] netlink: 'syz.1.3176': attribute type 10 has an invalid length. [ 826.484149][T17183] team0: Device veth1_macvtap failed to register rx_handler [ 826.666017][ T9948] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 826.846208][ T9948] usb 1-1: Using ep0 maxpacket: 8 [ 826.853687][ T9948] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 826.862890][ T9948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.874125][ T9948] usb 1-1: config 0 descriptor?? [ 827.401290][ T9964] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 827.436953][ T9964] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 827.468161][ T9964] asix 2-1:0.0: probe with driver asix failed with error -71 [ 827.515701][ T9964] usb 2-1: USB disconnect, device number 104 [ 827.623642][T17202] netlink: 'syz.0.3180': attribute type 10 has an invalid length. [ 827.699914][T17202] team0: Device veth1_macvtap failed to register rx_handler [ 827.925433][ T926] usb 4-1: USB disconnect, device number 84 [ 828.323142][T17224] loop4: detected capacity change from 0 to 512 [ 828.393544][T17224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 828.436606][T17224] ext4 filesystem being mounted at /root/syzkaller.8SLQSH/121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.483323][T17224] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 828.551450][T17224] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 828.797835][T14857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 829.931053][ T9948] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 829.967162][ T9948] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 830.006311][ T9948] asix 1-1:0.0: probe with driver asix failed with error -71 [ 830.035847][ T9948] usb 1-1: USB disconnect, device number 112 [ 830.051266][T17241] netlink: 'syz.4.3188': attribute type 21 has an invalid length. [ 830.086100][T17241] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3188'. [ 830.276245][T17253] netlink: 'syz.1.3192': attribute type 2 has an invalid length. [ 830.316060][T17253] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3192'. [ 830.786024][T17079] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 830.969072][T17268] loop4: detected capacity change from 0 to 512 [ 830.995460][T17079] usb 2-1: Using ep0 maxpacket: 8 [ 831.019498][T17079] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 831.036132][T17079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.087022][T17079] usb 2-1: config 0 descriptor?? [ 831.118848][T17268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 831.188513][T17268] ext4 filesystem being mounted at /root/syzkaller.8SLQSH/125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 831.266882][T17268] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 831.337625][T17268] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 831.501145][T14857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 831.707032][T17256] netlink: 'syz.1.3194': attribute type 10 has an invalid length. [ 831.930151][T17256] team0: Device veth1_macvtap failed to register rx_handler [ 833.212002][T17079] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 833.235237][T17079] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 833.257244][T17303] overlayfs: failed to resolve './file0': -2 [ 833.263491][T17079] asix 2-1:0.0: probe with driver asix failed with error -71 [ 833.275139][T17303] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 833.290900][T17079] usb 2-1: USB disconnect, device number 105 [ 833.294066][T17305] syz.2.3209: attempt to access beyond end of device [ 833.294066][T17305] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 833.319925][T17305] gfs2: error -5 reading superblock [ 834.928077][T17332] xt_CT: No such helper "netbios-ns" [ 835.794732][T17079] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 836.566006][T17079] usb 1-1: Using ep0 maxpacket: 32 [ 836.590806][T17079] usb 1-1: unable to get BOS descriptor or descriptor too short [ 836.609916][T17079] usb 1-1: no configurations [ 836.614677][T17079] usb 1-1: can't read configurations, error -22 [ 836.726086][ T5143] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 836.739387][ T926] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 836.936545][ T926] usb 2-1: Using ep0 maxpacket: 8 [ 836.946623][ T5143] usb 3-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 836.973571][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.986277][ T926] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 837.006095][ T926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.028287][ T5143] usb 3-1: config 0 descriptor?? [ 837.055403][ T926] usb 2-1: config 0 descriptor?? [ 837.061835][ T5143] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input62 [ 837.299987][ T4533] bcm5974 3-1:0.0: could not read from device [ 837.313873][T17348] netlink: 'syz.1.3224': attribute type 10 has an invalid length. [ 837.318654][ T926] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 837.325687][T17348] team0: Device veth1_macvtap failed to register rx_handler [ 837.366039][ T4533] bcm5974 3-1:0.0: could not read from device [ 837.379202][ T5143] usb 3-1: USB disconnect, device number 95 [ 837.385495][ T926] asix 2-1:0.0: probe with driver asix failed with error -32 [ 837.398397][ T4533] bcm5974 3-1:0.0: could not read from device [ 838.746781][T17369] netlink: 'syz.4.3229': attribute type 1 has an invalid length. [ 838.754894][T17369] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3229'. [ 839.521295][ T9948] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 839.716203][ T9948] usb 5-1: Using ep0 maxpacket: 32 [ 839.738960][ T9948] usb 5-1: unable to get BOS descriptor or descriptor too short [ 839.753446][ T9948] usb 5-1: no configurations [ 839.760852][ T9948] usb 5-1: can't read configurations, error -22 [ 840.766343][T15099] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 840.906421][ T9948] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 840.956104][T15099] usb 3-1: Using ep0 maxpacket: 8 [ 840.969931][T15099] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 840.979822][T15099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.004426][T15099] usb 3-1: config 0 descriptor?? [ 841.106561][T17079] usb 2-1: USB disconnect, device number 106 [ 841.119895][ T29] audit: type=1326 audit(1719554383.563:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17413 comm="syz.3.3243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea2b975b29 code=0x0 [ 841.177451][ T9948] usb 5-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 841.209585][ T9948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.228637][ T9948] usb 5-1: config 0 descriptor?? [ 841.246055][T15099] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 841.381791][ T9948] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input63 [ 841.411608][T15099] asix 3-1:0.0: probe with driver asix failed with error -32 [ 843.215283][ T4533] bcm5974 5-1:0.0: could not read from device [ 843.215710][ T926] usb 5-1: USB disconnect, device number 96 [ 843.251585][ T4533] bcm5974 5-1:0.0: could not read from device [ 843.301984][ T6720] bcm5974 5-1:0.0: could not read from device [ 843.360557][ T4533] bcm5974 5-1:0.0: could not read from device [ 843.485690][ T5143] usb 3-1: USB disconnect, device number 96 [ 843.596277][T17436] ip6gretap0 speed is unknown, defaulting to 1000 [ 843.616181][T17436] ip6gretap0 speed is unknown, defaulting to 1000 [ 843.632196][T17436] ip6gretap0 speed is unknown, defaulting to 1000 [ 843.662434][ T6720] udevd[6720]: Error opening device "/dev/input/event4": No such file or directory [ 843.669842][T17436] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 843.700438][ T6720] udevd[6720]: Unable to EVIOCGABS device "/dev/input/event4" [ 843.716822][T17439] overlayfs: missing 'workdir' [ 843.726118][ T6720] udevd[6720]: Unable to EVIOCGABS device "/dev/input/event4" [ 843.755819][ T6720] udevd[6720]: Unable to EVIOCGABS device "/dev/input/event4" [ 843.781145][ T6720] udevd[6720]: Unable to EVIOCGABS device "/dev/input/event4" [ 843.788988][T17436] ip6gretap0 speed is unknown, defaulting to 1000 [ 843.807823][T17436] ip6gretap0 speed is unknown, defaulting to 1000 [ 843.823766][ T6720] udevd[6720]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 843.837669][T17436] ip6gretap0 speed is unknown, defaulting to 1000 [ 843.855778][T17436] ip6gretap0 speed is unknown, defaulting to 1000 [ 843.877823][ T4548] udevd[4548]: worker [6720] terminated by signal 6 (Aborted) [ 843.892699][T17436] ip6gretap0 speed is unknown, defaulting to 1000 [ 843.892842][ T4548] udevd[4548]: worker [6720] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input63/event4' [ 844.021072][T17433] loop3: detected capacity change from 0 to 32768 [ 844.051045][T17433] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3247 (17433) [ 844.135126][T17449] netlink: 'syz.4.3252': attribute type 2 has an invalid length. [ 844.156001][T17433] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 844.170329][T17452] netlink: 'syz.2.3253': attribute type 10 has an invalid length. [ 844.172840][T17433] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 844.187427][T17449] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3252'. [ 844.208506][T17433] BTRFS info (device loop3): using free-space-tree [ 844.221543][T17452] bridge0: port 3(team0) entered disabled state [ 844.252602][T15354] Bluetooth: hci5: Malformed Event: 0x02 [ 844.258720][T17452] team0: left allmulticast mode [ 844.263881][T17452] team_slave_0: left allmulticast mode [ 844.282925][T17452] team_slave_1: left allmulticast mode [ 844.289858][T17452] team0: left promiscuous mode [ 844.295768][T17452] team_slave_0: left promiscuous mode [ 844.309555][T17452] team_slave_1: left promiscuous mode [ 844.315433][T17452] bridge0: port 3(team0) entered disabled state [ 844.323877][T15354] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 844.344115][T17452] batman_adv: batadv0: Adding interface: team0 [ 844.353011][T17452] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.390626][T17452] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 844.400684][T15354] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 844.403172][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3255'. [ 844.446113][ T5143] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 844.463321][T17457] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 844.488099][T17462] netlink: 'syz.2.3253': attribute type 10 has an invalid length. [ 844.563431][T17462] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3253'. [ 844.593196][T17462] team0: entered promiscuous mode [ 844.696256][T17462] team_slave_0: entered promiscuous mode [ 844.731525][ T5143] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 844.741129][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.753913][ T5143] usb 2-1: config 0 descriptor?? [ 844.771442][T17462] team_slave_1: entered promiscuous mode [ 844.788140][T17462] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.262780][T17462] batman_adv: batadv0: Interface activated: team0 [ 845.576177][T17462] batman_adv: batadv0: Interface deactivated: team0 [ 845.600293][T17462] batman_adv: batadv0: Removing interface: team0 [ 845.645565][T17462] bridge0: port 3(team0) entered blocking state [ 845.667003][T17462] bridge0: port 3(team0) entered disabled state [ 845.684178][T17462] team0: entered allmulticast mode [ 845.709447][T17462] team_slave_0: entered allmulticast mode [ 845.726458][T17462] team_slave_1: entered allmulticast mode [ 845.747373][T17462] bridge0: port 3(team0) entered blocking state [ 845.753821][T17462] bridge0: port 3(team0) entered forwarding state [ 846.336408][T17079] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 846.781137][T14908] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 846.915417][T17079] usb 5-1: Using ep0 maxpacket: 32 [ 846.950251][T17079] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 846.966018][T17079] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 846.985222][T17079] usb 5-1: Product: syz [ 846.998212][T17079] usb 5-1: config 0 descriptor?? [ 847.017890][T17079] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 847.034423][T17079] gspca_stv06xx: st6422 sensor detected [ 847.096071][ T926] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 847.220745][T17491] fuse: Invalid rootmode [ 847.279372][ T926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 847.296114][ T926] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 847.336741][ T926] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 847.369239][ T926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 847.382268][ T926] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 847.392234][ T926] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 847.417561][ T926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 847.428052][ T926] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 847.440430][ T926] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 847.457535][ T926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 847.467487][ T926] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 847.484166][ T926] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 847.499810][ T926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 847.510342][ T926] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 847.560704][ T926] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 847.580462][ T5143] pegasus 2-1:0.0: setup Pegasus II specific registers [ 847.606216][ T926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 847.630403][ T926] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 847.653726][ T926] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 847.684691][ T926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 847.698237][ T926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.717378][ T926] usb 3-1: Product: syz [ 847.726614][ T926] usb 3-1: Manufacturer: syz [ 847.735620][ T926] usb 3-1: SerialNumber: syz [ 847.795408][T17453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.836455][T17453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.969074][ T5143] pegasus 2-1:0.0: can't locate MII phy, using default [ 847.988951][ T926] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 97 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 848.020616][ T5143] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 4c:e2:85:6b:60:1d [ 848.055842][ T5143] usb 2-1: USB disconnect, device number 107 [ 848.224535][ T926] usb 3-1: USB disconnect, device number 97 [ 848.232269][ T926] usblp0: removed [ 848.557219][ T29] audit: type=1326 audit(1719554620.017:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.0.3265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45bcb75b29 code=0x0 [ 848.732721][T17079] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 848.779194][T17079] usb 5-1: Found UVC 0.00 device syz (046d:08f6) [ 848.785579][T17079] usb 5-1: No valid video chain found. [ 848.808972][T17079] usb 5-1: USB disconnect, device number 97 [ 848.992118][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3270'. [ 849.065225][T17523] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 849.108647][T17526] netlink: 'syz.3.3271': attribute type 10 has an invalid length. [ 849.148526][T17526] bridge0: port 3(team0) entered disabled state [ 849.201965][T17526] team0: left allmulticast mode [ 849.230128][T17526] team_slave_0: left allmulticast mode [ 849.249595][T17526] team_slave_1: left allmulticast mode [ 849.266104][T17526] team0: left promiscuous mode [ 849.288454][T17526] team_slave_0: left promiscuous mode [ 849.310076][T17526] team_slave_1: left promiscuous mode [ 849.316599][T17526] bridge0: port 3(team0) entered disabled state [ 849.371276][T17526] batman_adv: batadv0: Adding interface: team0 [ 849.407122][T17526] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.466312][T17526] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 849.527558][T17530] netlink: 'syz.3.3271': attribute type 10 has an invalid length. [ 849.561107][T17530] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3271'. [ 849.604340][T17530] team0: entered promiscuous mode [ 849.640267][T17530] team_slave_0: entered promiscuous mode [ 849.704077][T17530] team_slave_1: entered promiscuous mode [ 849.755491][T17530] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.781359][T17530] batman_adv: batadv0: Interface activated: team0 [ 849.808691][T17530] batman_adv: batadv0: Interface deactivated: team0 [ 849.818029][T15354] Bluetooth: hci5: unexpected event 0x2f length: 763 > 260 [ 849.833993][T17530] batman_adv: batadv0: Removing interface: team0 [ 849.879561][T17530] bridge0: port 3(team0) entered blocking state [ 849.902704][T17530] bridge0: port 3(team0) entered disabled state [ 849.941971][T17530] team0: entered allmulticast mode [ 849.963960][T17530] team_slave_0: entered allmulticast mode [ 849.985982][T17530] team_slave_1: entered allmulticast mode [ 849.999625][T17530] bridge0: port 3(team0) entered blocking state [ 850.006087][T17530] bridge0: port 3(team0) entered forwarding state [ 850.032017][T17536] pimreg: entered allmulticast mode [ 850.217246][T15354] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 850.376131][ T5143] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 850.866087][T17079] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 850.876053][ T5143] usb 5-1: Using ep0 maxpacket: 32 [ 850.891384][ T5143] usb 5-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config [ 851.270534][ T5143] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 851.285959][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.308909][ T5143] usb 5-1: config 0 descriptor?? [ 851.317340][ T5143] usb 5-1: bad CDC descriptors [ 851.435989][T17079] usb 1-1: Using ep0 maxpacket: 32 [ 851.454676][T17079] usb 1-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 851.485710][T17079] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 851.515532][T17079] usb 1-1: Product: syz [ 851.527603][T17079] usb 1-1: config 0 descriptor?? [ 851.550823][T17079] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 851.586304][T17079] gspca_stv06xx: st6422 sensor detected [ 851.597458][ T5143] usb 5-1: USB disconnect, device number 98 [ 851.753207][T17550] fuse: Invalid rootmode [ 852.804567][T15354] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 852.804604][T15354] Bluetooth: unknown link type 5 [ 852.818849][T15354] Bluetooth: hci5: connection err: -111 [ 853.307242][T17079] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 853.381219][T17079] usb 1-1: Found UVC 0.00 device syz (046d:08f6) [ 853.439997][T17079] usb 1-1: No valid video chain found. [ 853.483060][T17079] usb 1-1: USB disconnect, device number 115 [ 853.788423][T17573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3284'. [ 854.146010][T17079] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 854.346034][T17079] usb 5-1: Using ep0 maxpacket: 8 [ 854.377903][T17079] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 854.396040][T17079] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 854.405795][T17079] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 854.465974][T17079] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 854.495827][T17079] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.509098][T17079] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 854.516000][ T9969] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 854.526064][T17079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.586234][ T9966] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 854.745998][ T9969] usb 1-1: Using ep0 maxpacket: 8 [ 854.759983][T17079] usb 5-1: usb_control_msg returned -32 [ 854.761678][ T9969] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 854.765600][T17079] usbtmc 5-1:16.0: can't read capabilities [ 854.775486][ T9969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.796096][ T9966] usb 4-1: Using ep0 maxpacket: 8 [ 854.816667][ T9969] usb 1-1: config 0 descriptor?? [ 854.818231][ T9966] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 854.842948][ T9966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.869458][ T9966] usb 4-1: config 0 descriptor?? [ 854.927522][ T9969] viperboard 1-1:0.0: version 0.00 found at bus 001 address 116 [ 854.957010][ T9969] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 854.975929][ T9969] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 855.076061][ T5140] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 855.475968][ T5140] usb 2-1: Using ep0 maxpacket: 32 [ 855.492437][ T5140] usb 2-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config [ 855.492761][T17589] netlink: 'syz.3.3289': attribute type 10 has an invalid length. [ 855.513332][ T5140] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 855.550261][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.773524][T17589] team0: Device veth1_macvtap failed to register rx_handler [ 855.822539][ T5140] usb 2-1: config 0 descriptor?? [ 855.967910][ T5140] usb 2-1: bad CDC descriptors [ 856.200568][ T9948] usb 1-1: USB disconnect, device number 116 [ 856.234788][ T5140] usb 2-1: USB disconnect, device number 108 [ 856.676208][ T9948] usb 5-1: USB disconnect, device number 99 [ 856.684151][T17594] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 858.411600][ T9966] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 858.611769][ T9966] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 858.785679][ T9966] asix 4-1:0.0: probe with driver asix failed with error -71 [ 858.837438][ T9966] usb 4-1: USB disconnect, device number 85 [ 859.245835][T17630] netlink: 'syz.2.3299': attribute type 1 has an invalid length. [ 859.257786][T17630] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3299'. [ 859.346208][ T9966] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 859.553379][ T9966] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 859.590263][ T9966] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 859.622298][ T9966] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 859.650063][ T9966] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 859.660961][ T9966] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 859.674286][ T9966] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 859.691015][ T9966] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 859.700901][ T9966] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 859.711265][ T9966] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 859.726439][ T9966] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 859.755975][ T9966] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 859.770714][ T9966] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 859.806739][ T9966] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 859.835993][ T9966] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 859.866316][ T9966] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 859.891634][ T9966] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 859.916082][ T5140] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 859.934241][ T9966] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 859.969413][ T9966] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 860.015720][ T9966] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 860.034095][ T9966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.046134][ T9966] usb 4-1: Product: syz [ 860.050322][ T9966] usb 4-1: Manufacturer: syz [ 860.065560][ T9966] usb 4-1: SerialNumber: syz [ 860.276178][ T5140] usb 2-1: Using ep0 maxpacket: 16 [ 860.438807][ T5140] usb 2-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 862.283950][T17650] xt_CT: No such helper "netbios-ns" [ 862.426770][ T9966] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 862.525975][ T5140] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 862.527615][ T9966] usb 4-1: USB disconnect, device number 86 [ 862.538602][ T5140] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 862.570608][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.593220][ T9966] usblp0: removed [ 862.603203][ T5140] usb 2-1: config 0 descriptor?? [ 862.666969][ T5140] usb 2-1: can't set config #0, error -71 [ 862.690288][ T5140] usb 2-1: USB disconnect, device number 109 [ 862.786482][ T9948] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 862.809338][T17672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3312'. [ 862.998619][ T9948] usb 5-1: Using ep0 maxpacket: 32 [ 863.036052][ T9948] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 863.065816][ T9948] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 863.074078][ T9948] usb 5-1: Product: syz [ 863.097997][ T9948] usb 5-1: config 0 descriptor?? [ 863.116448][ T9948] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 863.122701][ T9948] gspca_stv06xx: st6422 sensor detected [ 863.314186][T17649] fuse: Invalid rootmode [ 863.517934][ T9966] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 863.840567][ T9966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 863.991508][T17687] xt_CT: No such helper "netbios-ns" [ 864.185842][T17694] netlink: 'syz.3.3319': attribute type 2 has an invalid length. [ 864.220423][T17694] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3319'. [ 864.224848][ T9966] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 864.239559][ T9966] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.259632][ T9966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 864.270867][ T9966] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 864.283064][ T9966] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.310833][ T9966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 864.321131][ T9966] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 864.336130][ T9966] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.362314][ T9948] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 864.366855][ T9966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 864.466270][ T9948] usb 5-1: Found UVC 0.00 device syz (046d:08f6) [ 864.473559][ T9948] usb 5-1: No valid video chain found. [ 864.516410][ T9948] usb 5-1: USB disconnect, device number 100 [ 864.595643][ T9966] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 864.605429][ T9966] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.620208][ T9966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 864.645244][ T9966] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 864.657189][T17707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3324'. [ 864.676173][ T9966] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 865.411434][ T9966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 865.421690][ T9966] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 865.432682][ T9966] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 865.448738][ T9966] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 865.460586][ T9966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.469796][ T9966] usb 2-1: Product: syz [ 865.503761][ T9966] usb 2-1: Manufacturer: syz [ 865.517871][ T9966] usb 2-1: SerialNumber: syz [ 866.201808][T15354] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 866.503034][ T9966] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 866.528613][ T9966] usb 2-1: USB disconnect, device number 110 [ 866.542388][ T9966] usblp0: removed [ 867.076288][ T9948] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 867.420694][T17738] xt_CT: No such helper "netbios-ns" [ 867.486369][ T9948] usb 4-1: Using ep0 maxpacket: 8 [ 867.526174][ T9948] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 867.583655][ T9948] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 867.627779][T17748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3336'. [ 867.637125][ T9948] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 867.670139][ T9948] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 867.701681][ T9948] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.758984][ T9948] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 867.774519][ T9948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.975169][T15099] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 868.025618][ T9948] usb 4-1: usb_control_msg returned -32 [ 868.054561][ T9948] usbtmc 4-1:16.0: can't read capabilities [ 868.207463][T15099] usb 3-1: Using ep0 maxpacket: 8 [ 868.219803][T15099] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 868.246027][T15099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.283161][T15099] usb 3-1: config 0 descriptor?? [ 868.947832][T17750] netlink: 'syz.2.3337': attribute type 10 has an invalid length. [ 868.971241][T17750] team0: Device veth1_macvtap failed to register rx_handler [ 869.356183][ T9948] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 869.428856][T17758] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 869.433123][ T9969] usb 4-1: USB disconnect, device number 87 [ 869.574371][ T9948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.756815][ T9948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.956205][ T9948] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 870.127073][ T9948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.202968][ T9948] usb 1-1: config 0 descriptor?? [ 870.321292][T15354] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 870.376151][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.385595][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.691811][ T9948] belkin 0003:1020:0006.000E: item fetching failed at offset 2/5 [ 870.706890][ T9948] belkin 0003:1020:0006.000E: parse failed [ 870.712942][ T9948] belkin 0003:1020:0006.000E: probe with driver belkin failed with error -22 [ 870.736373][ T5143] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 870.919906][ T9969] usb 1-1: USB disconnect, device number 117 [ 870.953858][ T5143] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 870.973698][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.017209][ T5143] usb 5-1: config 0 descriptor?? [ 871.036894][ T5143] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 871.108115][T15099] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 871.136048][T15099] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 871.170602][T15099] asix 3-1:0.0: probe with driver asix failed with error -71 [ 871.201088][T15099] usb 3-1: USB disconnect, device number 98 [ 871.917700][T17792] xt_CT: No such helper "netbios-ns" [ 872.335052][T15354] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 872.708862][T17781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.747752][T17781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.895528][ T5143] usb 5-1: USB disconnect, device number 101 [ 873.123703][T17819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3357'. [ 874.036626][T17831] xt_CT: No such helper "netbios-ns" [ 874.366142][ T5143] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 874.440384][T17843] netlink: 'syz.0.3361': attribute type 2 has an invalid length. [ 874.479880][T17843] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3361'. [ 874.557414][T15354] Bluetooth: hci0: Malformed Event: 0x02 [ 874.567989][ T5143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.627635][ T5143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.676203][ T5143] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 874.685279][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.796957][ T5143] usb 2-1: config 0 descriptor?? [ 931.818075][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.824454][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 979.875871][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 979.875892][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17840/1:b..l [ 979.875928][ C0] rcu: (detected by 0, t=10502 jiffies, g=114793, q=351 ncpus=2) [ 979.875949][ C0] task:syz.4.3363 state:R running task stack:23888 pid:17840 tgid:17837 ppid:14857 flags:0x00004002 [ 979.875993][ C0] Call Trace: [ 979.876002][ C0] [ 979.876015][ C0] __schedule+0x17e8/0x4a20 [ 979.876069][ C0] ? __pfx___schedule+0x10/0x10 [ 979.876101][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 979.876138][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 979.876164][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 979.876189][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 979.876227][ C0] irqentry_exit+0x5e/0x90 [ 979.876253][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 979.876282][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 979.876307][ C0] Code: 2b 00 74 08 4c 89 f7 e8 7a e4 8a 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 979.876323][ C0] RSP: 0018:ffffc900001f73c0 EFLAGS: 00000206 [ 979.876338][ C0] RAX: 0000000000000001 RBX: 1ffff9200003ee84 RCX: 7b4d116148288c00 [ 979.876353][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcada80 RDI: ffffffff8c206fe0 [ 979.876368][ C0] RBP: ffffc900001f7508 R08: ffffffff93007787 R09: 1ffffffff2600ef0 [ 979.876382][ C0] R10: dffffc0000000000 R11: fffffbfff2600ef1 R12: 1ffff9200003ee80 [ 979.876396][ C0] R13: dffffc0000000000 R14: ffffc900001f7420 R15: 0000000000000246 [ 979.876433][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 979.876458][ C0] ? handle_pte_fault+0x32e/0x6eb0 [ 979.876478][ C0] ? __pfx_lock_release+0x10/0x10 [ 979.876499][ C0] ? pte_offset_map_nolock+0x137/0x1f0 [ 979.876537][ C0] ? handle_pte_fault+0x21d9/0x6eb0 [ 979.876557][ C0] handle_pte_fault+0x21f6/0x6eb0 [ 979.876575][ C0] ? handle_pte_fault+0x21d9/0x6eb0 [ 979.876602][ C0] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 979.876627][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 979.876653][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 979.876670][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 979.876708][ C0] ? follow_page_pte+0x292/0x1d90 [ 979.876736][ C0] ? follow_page_pte+0x859/0x1d90 [ 979.876762][ C0] ? __pfx_lock_release+0x10/0x10 [ 979.876790][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 979.876821][ C0] handle_mm_fault+0x10d7/0x1b40 [ 979.876872][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 979.876916][ C0] ? __get_user_pages+0x695/0x1590 [ 979.876947][ C0] __get_user_pages+0x6ef/0x1590 [ 979.876981][ C0] ? mt_find+0x62d/0x850 [ 979.877008][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 979.877049][ C0] populate_vma_page_range+0x264/0x330 [ 979.877077][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 979.877107][ C0] ? userfaultfd_unmap_complete+0x30c/0x360 [ 979.877130][ C0] ? do_mmap+0x915/0xfa0 [ 979.877160][ C0] __mm_populate+0x27a/0x460 [ 979.877191][ C0] ? __pfx___mm_populate+0x10/0x10 [ 979.877226][ C0] vm_mmap_pgoff+0x2c3/0x3d0 [ 979.877258][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 979.877285][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 979.877310][ C0] ? do_syscall_64+0x100/0x230 [ 979.877328][ C0] ? ksys_mmap_pgoff+0xdf/0x720 [ 979.877353][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 979.877383][ C0] do_syscall_64+0xf3/0x230 [ 979.877402][ C0] ? clear_bhb_loop+0x35/0x90 [ 979.877427][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.877448][ C0] RIP: 0033:0x7fb9c8d75b29 [ 979.877469][ C0] RSP: 002b:00007fb9c9a5f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 979.877487][ C0] RAX: ffffffffffffffda RBX: 00007fb9c8f03fa0 RCX: 00007fb9c8d75b29 [ 979.877502][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 979.877515][ C0] RBP: 00007fb9c8df6756 R08: ffffffffffffffff R09: 0000000000000000 [ 979.877528][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 979.877540][ C0] R13: 000000000000000b R14: 00007fb9c8f03fa0 R15: 00007fff702c04d8 [ 979.877568][ C0] [ 980.271837][ C0] rcu: rcu_preempt kthread starved for 10535 jiffies! g114793 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 980.271866][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 980.271877][ C0] rcu: RCU grace-period kthread stack dump: [ 980.271884][ C0] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 980.271927][ C0] Call Trace: [ 980.271935][ C0] [ 980.271949][ C0] __schedule+0x17e8/0x4a20 [ 980.272000][ C0] ? __pfx___schedule+0x10/0x10 [ 980.272027][ C0] ? __pfx_lock_release+0x10/0x10 [ 980.272050][ C0] ? __asan_memset+0x23/0x50 [ 980.272073][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 980.272097][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 980.272123][ C0] ? schedule+0x90/0x320 [ 980.272144][ C0] schedule+0x14b/0x320 [ 980.272168][ C0] schedule_timeout+0x1be/0x310 [ 980.272189][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 980.272210][ C0] ? __pfx_process_timeout+0x10/0x10 [ 980.272242][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 980.272270][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 980.272294][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 980.272324][ C0] ? rcu_gp_init+0x1256/0x1630 [ 980.272352][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 980.272374][ C0] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 980.272399][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 980.272421][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 980.272449][ C0] ? finish_swait+0xd4/0x1e0 [ 980.272474][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 980.272499][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 980.272521][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 980.272547][ C0] ? __kthread_parkme+0x169/0x1d0 [ 980.272573][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 980.272596][ C0] kthread+0x2f0/0x390 [ 980.272621][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 980.272643][ C0] ? __pfx_kthread+0x10/0x10 [ 980.272668][ C0] ret_from_fork+0x4b/0x80 [ 980.272692][ C0] ? __pfx_kthread+0x10/0x10 [ 980.272716][ C0] ret_from_fork_asm+0x1a/0x30 [ 980.272754][ C0] [ 980.272762][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 980.272782][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc5-next-20240627-syzkaller #0 [ 980.272804][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 980.272831][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 980.272854][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 05 0a 9a 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 980.272869][ C0] RSP: 0018:ffffffff8e007ca8 EFLAGS: 00000246 [ 980.272886][ C0] RAX: ffffffff8e094680 RBX: ffff88801bea9064 RCX: 00000000019de521 [ 980.272901][ C0] RDX: 0000000000000001 RSI: ffff88801bea9000 RDI: ffff88801bea9064 [ 980.272914][ C0] RBP: 000000000003a5f8 R08: ffff8880b9437c9b R09: 1ffff11017286f93 [ 980.272927][ C0] R10: dffffc0000000000 R11: ffffffff8b900010 R12: ffff88801bf08000 [ 980.272942][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8ead6180 [ 980.272954][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 980.272970][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 980.272983][ C0] CR2: 00007f4002025287 CR3: 000000007a7d6000 CR4: 00000000003506f0 [ 980.272999][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 980.273010][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 980.273022][ C0] Call Trace: [ 980.273030][ C0] [ 980.273037][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 980.273066][ C0] ? print_other_cpu_stall+0x147a/0x15b0 [ 980.273104][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 980.273127][ C0] ? __pfx_lock_release+0x10/0x10 [ 980.273159][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 980.273184][ C0] ? rcu_sched_clock_irq+0xa1c/0x10c0 [ 980.273219][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 980.273246][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 980.273271][ C0] ? update_process_times+0x1ce/0x230 [ 980.273298][ C0] ? tick_nohz_handler+0x37c/0x500 [ 980.273323][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 980.273346][ C0] ? __hrtimer_run_queues+0x551/0xd50 [ 980.273365][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 980.273404][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 980.273426][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 980.273457][ C0] ? hrtimer_interrupt+0x396/0x990 [ 980.273497][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 980.273527][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 980.273551][ C0] [ 980.273558][ C0] [ 980.273565][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 980.273592][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 980.273617][ C0] ? acpi_safe_halt+0x21/0x30 [ 980.273638][ C0] acpi_idle_enter+0xe4/0x140 [ 980.273661][ C0] cpuidle_enter_state+0x112/0x480 [ 980.273681][ C0] ? __pfx_menu_select+0x10/0x10 [ 980.273709][ C0] cpuidle_enter+0x5d/0xa0 [ 980.273732][ C0] do_idle+0x375/0x5d0 [ 980.273759][ C0] ? __pfx_do_idle+0x10/0x10 [ 980.273779][ C0] ? poll_idle+0x60/0xb0 [ 980.273808][ C0] ? rest_init+0x31/0x300 [ 980.273833][ C0] cpu_startup_entry+0x42/0x60 [ 980.273852][ C0] rest_init+0x2dc/0x300 [ 980.273871][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 980.273893][ C0] start_kernel+0x47a/0x500 [ 980.273921][ C0] x86_64_start_reservations+0x2a/0x30 [ 980.273940][ C0] x86_64_start_kernel+0x9f/0xa0 [ 980.273957][ C0] common_startup_64+0x13e/0x147 [ 980.273990][ C0]