last executing test programs: 53.266250438s ago: executing program 2 (id=300): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_getparam(0x0, &(0x7f0000000800)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x7fd, 0x3}, 0x0) unshare(0x62040200) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x2, 0xfff, 0x5, &(0x7f00000005c0)=""/219}) io_uring_setup(0x11bfb, &(0x7f00000004c0)={0x0, 0xe64c, 0x400, 0x40001, 0x394}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="7f002fa8d0d54dd0e8883cd00662c8922c76dd3806dd667a2fa98d38dccb6770d0948f64f066c656eaa3ab10c5580b78a7aa96bdb43dd1c77e13b39ef7402edf40fa49f4579ac28dd431d4e71304a665ea0e36ce18ecdc4a46f42f673e611e19263457e95342e6b0696e4e30a3d76adf", 0x70}, {&(0x7f0000000700)="ebe3a0e979e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304831bba708009e2e6e6b08743670f628b440cd582b0f0962e061b0c928d4655bbd872cbf9ab4a3c4e81cc913f40507af643d8245950a626f47e98a3111f0b6601c16592e7f48048020a4fcbf0a5a48b93059f67c6188646b812ae100e6d56946e06cab15918ead93c243f8427214efac964e10257e83434c7cac2f3b84318f80c8e85dc966a8829bbbc38d7a0bc409000000", 0xda}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {0x0, r6, 0x1}}, 0x18) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x8002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r7, 0xc10c5541, &(0x7f0000000240)={0xf3, 0x6, 0x1}) r8 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff) fcntl$setlease(r9, 0x400, 0x0) 52.07423311s ago: executing program 3 (id=303): writev(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000380)}], 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000001000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) 52.072776827s ago: executing program 3 (id=304): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1, &(0x7f00000003c0)=""/121, 0x79}, 0x9}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)=""/216, 0xd8}, {&(0x7f0000000940)=""/185, 0xb9}], 0x2, &(0x7f0000000a80)=""/147, 0x93}, 0x7}, {{&(0x7f0000000b40)=@generic, 0x80, &(0x7f0000001000)=[{&(0x7f0000000bc0)=""/232, 0xe8}, {&(0x7f0000000cc0)=""/193, 0xc1}, {&(0x7f0000000dc0)=""/86, 0x56}, {&(0x7f0000000e40)=""/150, 0x96}, {&(0x7f0000000f00)=""/209, 0xd1}], 0x5, &(0x7f0000001080)=""/108, 0x6c}, 0xfffffffe}], 0x3, 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x4, 0x4f, 0x8, 0xfa11, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r3, 0x9, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) kexec_load(0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) close_range(r4, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ptrace$cont(0x20, 0x0, 0x80000001, 0x4) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) r7 = socket(0x22, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@gettclass={0x24, 0x2a, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x8, 0xd}, {0x10, 0xfff2}, {0xa2a6fe254721fc2, 0xfff1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x3, 0x10100, 0x4}, 0x0, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname(r9, 0x0, &(0x7f0000000180)) 49.075568993s ago: executing program 2 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r1, 0x60046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 47.990624617s ago: executing program 2 (id=320): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef"], 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030006000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r5 = dup(r2) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x220002, 0x0) r7 = fcntl$dupfd(r1, 0x0, r6) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 47.586337237s ago: executing program 3 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) io_setup(0x10001, &(0x7f00000004c0)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) creat(&(0x7f0000000100)='./file1/file0\x00', 0x0) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x6, 0x20, @buffer={0x0, 0x2c, 0x0}, &(0x7f00000001c0)="bf274c199f6e", 0x0, 0x1000000c, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000005608000002000000a502010007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r6, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0) 47.107750823s ago: executing program 1 (id=328): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 46.965166077s ago: executing program 1 (id=329): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec13060000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000000)={0x14, &(0x7f0000000180)={0x20, 0x2, 0xf0, {0xf0, 0x10, "4736b1d2b6efbc025e6d84a0cb43c5f6dd128114fc722da387511dd10c20d863ead4fc68b42e9eb72036f9284f26b075fce1c1ee37e273c1d54d1b7e65516bf8fafa7e9db77e4a50f28376943a1c0a5cc0ba8fd6bbb9ecd750a75e48db067fa3ebbaf8ed47fa91ea4baf9f641f58a1e30d1505e85a7278aa98cc0c7da343d169b48564bfa2eaf1a4c0f35668fb11103f67360a31c0db2160556e67071f822f7e0cfa8ca8a73a433a5cc3ee842464ea76057ced67f1c0cc0a17b78f79ee9c03c25ab702ef25268dbade3df78e14b338e0dd5d5735ed7d7ca1d4b5a454effb79b839f8e38f90b3a42e1e9ad85ee436"}}, 0x0}, 0x0) unshare(0x22020600) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) setns(r1, 0x0) 46.177679781s ago: executing program 3 (id=330): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_getparam(0x0, &(0x7f0000000800)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x7fd, 0x3}, 0x0) unshare(0x62040200) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x2, 0xfff, 0x5, &(0x7f00000005c0)=""/219}) io_uring_setup(0x11bfb, &(0x7f00000004c0)={0x0, 0xe64c, 0x400, 0x40001, 0x394}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="7f002fa8d0d54dd0e8883cd00662c8922c76dd3806dd667a2fa98d38dccb6770d0948f64f066c656eaa3ab10c5580b78a7aa96bdb43dd1c77e13b39ef7402edf40fa49f4579ac28dd431d4e71304a665ea0e36ce18ecdc4a46f42f673e611e19263457e95342e6b0696e4e30a3d76adf", 0x70}, {&(0x7f0000000700)="ebe3a0e979e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304831bba708009e2e6e6b08743670f628b440cd582b0f0962e061b0c928d4655bbd872cbf9ab4a3c4e81cc913f40507af643d8245950a626f47e98a3111f0b6601c16592e7f48048020a4fcbf0a5a48b93059f67c6188646b812ae100e6d56946e06cab15918ead93c243f8427214efac964e10257e83434c7cac2f3b84318f80c8e85dc966a8829bbbc38d7a0bc409000000", 0xda}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {0x0, r6, 0x1}}, 0x18) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x8002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r7, 0xc10c5541, &(0x7f0000000240)={0xf3, 0x6, 0x1}) r8 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff) fcntl$setlease(r9, 0x400, 0x0) 46.125372843s ago: executing program 2 (id=331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc02000000000000000000000000000000000000ffffff8000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 45.988618007s ago: executing program 2 (id=332): ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000000)={0x7, 0x9, 0x5, 0x5, 0xf879, 0x4, 0x8}) (async, rerun: 32) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) (rerun: 32) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) close(r0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x98}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x0, 0x8008, 0x9, 0x374, r1}, 0x10) (async) syz_usb_connect(0x3, 0x5a0, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x8a, 0x84, 0xbf, 0x20, 0x12d1, 0x76eb, 0xa95e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58e, 0x2, 0x1, 0x9, 0x40, 0x80, "", [{{0x9, 0x4, 0xb9, 0x3e, 0x10, 0xff, 0x6, 0x4a, 0xe, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "7d71d7ab"}, {0x5, 0x24, 0x0, 0xf8e3}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x0, 0xf, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @obex={0x5, 0x24, 0x15, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}, @dmm={0x7, 0x24, 0x14, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x1308, 0xc, 0xc6, 0x6, 0x200, 0x8}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "544a97b7"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x444, 0xb1, 0x9}, {0x6, 0x24, 0x1a, 0x5, 0x14}, [@mdlm={0x15, 0x24, 0x12, 0x731}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x5, 0xbb11, 0x99, 0xbc, 0x4b, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x3d, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x2, 0x5, 0xa4}]}], [{{0x9, 0x5, 0xd, 0x0, 0x0, 0x5, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xbb}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x8, 0x5, 0x5, [@generic={0x25, 0x8, "88a517d268a657615e86ba6e6a7240ea4966954f6907cc5376c702df0c349e831f2648"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x5, 0x9, 0x0, [@generic={0xe, 0x23, "db315dce72d677dfcbbe0d57"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x2, 0xf, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x4}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x1, 0x3, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x3, 0xd, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x7, 0x0, 0x6, [@generic={0xc, 0x23, "86517b48f7f98596dd0f"}, @generic={0xaf, 0x1, "1686e00b10948a429514dfd8b0e1f5aa2289f00affc4be3491f929a9b60a3905cda5c1b0e26a61ae1fe21c4661e460d938747f897dcd704b47313de04600e3c2d34fcb198e184c46bcfc913951652b11bdd5f5d589f3332dce47c815482f527f1e1594135e745f6e2452613afed3d6d8e99dbee267970ce5896eaabc1884fae87bac2c7bcb70085b7ed49f4eae5408d62f51cd43045a31a4390d3486508c52aeee28345ee73b61298c8276b031"}]}}, {{0x9, 0x5, 0xd, 0x11, 0x200, 0x9, 0x7, 0x4}}, {{0x9, 0x5, 0x8, 0x2, 0x5ff, 0x5, 0xfa, 0xbf}}, {{0x9, 0x5, 0xc, 0xc, 0x0, 0xd, 0x2, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0x7, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x3, 0x3, 0x5, [@generic={0x7f, 0x4, "b3b6d4a85e7ce15492b489b5328888199ce5b464fd1b2ac7d53627316e6f9c56f5ff31be02215aa820557d889e1909cdc65cb470d4df5a9b9456d2cdd824bd6ddd100b822b127630a98404cc41de18571cab4bd91e6c6f857cabaf8658bd6da39720699a7e79cfd7f38bc6a0bc51374220c1e9326a8b594d1e6b09ad2a"}, @generic={0x99, 0xa, "8edc43077aa5e877ee8d5001569e6390e00c14708f98aad8e20e9e75847528852c1cd283e7dcf11d958fcb37f543dcd22fe68b16bc10fe4bd2d217cc7afb77b71a5981c9a36bd986c93d45c79b10dfd3a1d067c5304932eb8b52f8f79205b503091eb1a8efb9a42ba1385655b2ef8fc2f87d85d814c58aebc4c885e15d108115b4cc54b67008265bad9171ef3ca7dfa8223a15e68bde32"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x5, 0x4}}, {{0x9, 0x5, 0xc, 0x9, 0x20, 0x7, 0x8, 0xf, [@generic={0x64, 0xd, "309776323f5f3792cbdeaace0de9852b94468c34de4b021585b561613683b8404b1fbecdee64fedb94b5ccf30b575c7f21ddbb68cf405259c0817d15af2b3903403b3e298bfd4bcb4136a0f20548dc5b6c7da9c80ede20bcf61ad7336924edc4272b"}, @generic={0x6f, 0xb, "6c56fab32c7c7e080fa46a294b2a6cd2b3f4c3c7d01cd4560f4647a5b8093b522f40a1b9fa3e8b7b1f965977c212baf90712fa92e98377a734c5fe8ed51ae5e125ede81cabda6625d6731c344ba532eee1ca85db78422058b50bdb713864daa4c10daea80c048a4fb8b8db2827"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x6, 0x4, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xe3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x100}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x4d, 0x2, 0x6, [@generic={0x21, 0xb, "c3445876290c9fc0e37c19edfeeec6ebfa52c98a690581e1f00a515b5de789"}]}}]}}, {{0x9, 0x4, 0xba, 0x7, 0x4, 0xff, 0x1, 0x79, 0xf2, [], [{{0x9, 0x5, 0x3, 0x1, 0x10, 0xff, 0x5, 0xfd, [@generic={0xbf, 0x46, "3ab55d6cd5adaeaad885c41dace1c7eb799b08dc000095bedfa4dee43ee1e4031727784faf9d78a2d1bdbba5fc9e36ec33ee7df233a0d2ead44fa427fc914da40ba5b587e8f3c6eaae1309cba0d40b3f9a345efd81e1bd6dde324518e58488337dfe59ee82ed5cb56ad9d838fa2743f13c536a094b300c9830fddd65c5f8d0cd98613a58fa402ee003879703596437ba11bc652a710e248fdda5f73b4058673f91cd299711f4c4792eb1ff02adf99e3cba73998eae27a4403cb06ff9cf"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xb7, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x1e, 0x60, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x576f3ac55bd72637, 0x4, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xd}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x4, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1d, 0x1}, @generic={0xe, 0x31, "18b06d8602d70bfb36febb77"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0xe, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x301, 0x6, 0x58, 0x66, 0x10, 0x2}, 0x169, &(0x7f0000000800)={0x5, 0xf, 0x169, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "d4128014492dde3ddd6c89c542ed504c"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x5, 0xfb, 0x4c, 0x1}, @generic={0xb3, 0x10, 0x4, "0b24d4492b5ecbc16083b0d436b1be4e74d4c037539ec51d152add7e54a9497991ecff89ead39f0e4de1ae6c6aed8e699953803402e214b0f585dc0d18451610d20c24972c9bcacf30849e5b44707f15e397919e0ab8c67fa9dec68755beb74cb803900fca74b35e6c2fc434cf8fcad1944fba45d913f167d6fa3cc2ccee6042b5c1dbb2d719d90fd62b1f04fa97429651269e9beabda8462abb5894d4434d1a0aed30b2a9218f88fd2c5c95338952fb"}, @generic={0x8f, 0x10, 0x1, "330310d0a7ad152614c896a096c880fc5bc612930328c2b9187c5161ed077fad18ce3ac40586814846289d955e73ea2eb283f09244910a8e1e270f9efa12e19ce8e7d5fecd118ea5bd5d168a8b03095bd8d62d140e1d37bbb81d1999c35a10cac40e7d4f11f02558dc22fc64788f4e3516e4e5d12a34ca1562aa9ff430e2ed387dd63b0108604fc9526ae3a6"}, @ptm_cap={0x3}]}, 0x1, [{0x102, &(0x7f0000000980)=@string={0x102, 0x3, "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"}}]}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000b00)={{r0}, "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"}) (async) syz_io_uring_setup(0x45bc, &(0x7f0000001b00)={0x0, 0x97c8, 0x5, 0x0, 0x17b}, &(0x7f0000001b80)=0x0, &(0x7f0000001bc0), &(0x7f0000001c00)) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff5000/0x8000)=nil, 0x8000, 0x200000c, 0x11, 0xffffffffffffffff, 0x8000000) (async) syz_io_uring_setup(0x6955, &(0x7f0000001c40)={0x0, 0xc944, 0x200, 0x0, 0xde}, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001d80)=@IORING_OP_ASYNC_CANCEL={0xe, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) r6 = syz_open_dev$dvb_demux(&(0x7f0000001dc0), 0x26, 0x101c80) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) (async) r7 = syz_clone(0x40000, &(0x7f0000001e00)="c7233f09db5f31f7942c71c87100979d680908dd0f76df04576bcf8bd5ac99b5abeada6bda503a332ec7e9638098b68a70744363e176b193a455cbe110fb9bf8aa48448737dc12dadbad5214a320", 0x4e, &(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00)="9e57a332972f0e64184a3820d4a393fc233ced7241bc1aad8a99e00be8e88f9c8f6a481c1c215dfa8c0c4a70567cd83a5ad1e75ca33c01aa71c5e78ce57ad6cca9f40c394d21d7e3b430896ac9704d2c53c4ab5da771435c3cabb506eb20cc2954d504efff0e694f4f3f6880c3a0c44dc489bd4cdd263e80c5bb1b2eac4b6095e8e4c7ba385c4c") r8 = socket$inet6_sctp(0xa, 0xb, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000001fc0)=0x7, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r8, 0x50009401, &(0x7f0000002000)={{r0}, "23890aa8087bb46b517d5d7275f1793b8328e05e37d4798d7334b57a7762ea587610364532e49bbc2ebdab352d5cc085e91c21ccbaff5a2381dddab35de1cff07acb6d4e18caae6a7249eafb1a2db69fa3c5fc2baeffe5e76d9ee290ccf82e6831e5c49381959ba6c22427b77b6b1ade5f02dc1c2e80aa479c79989b8c4d979274ea9f9ff2bb18c9ec8bb381f958dd6f6ea60e77033646dd9f53972b18d491f012389bea9108ff6cc65babda6be7d25e50c52d20dd9e8700688ad5f92bc8b6cdaa50e023c47a575d8b95a834015a281a6d14bfc8c01772562fd64cb61a4f0ab6dcd0a5e22e75765a6e38650e6f6bf82a26d1f6aee27786b7bdc4e5f224b72feb69120b22dcc41bfae2d45fd17ec3f3e2a92ea74000a71aef43f9d735f333dd6faa259a4c7a504058c7016bb8986c220a7b050f376280e226131f295c05f9483cd3cb4f131a82239a2d5d3d0caaf10d40b8ebcb04eb81d4b74782bfcaff7199852b787296e05aeac05248ef1dc4fbc017ccb17d7b1df20ade0aa49bd84a1fc0e6bf70fe7715d8c9eecfd356aa7667faeaa6170a26bbf78ba067442ee61928674187b8df2e4ca7ca4300db410a6cd5ee3f7bac19a7d379989bfc31a3c7f68d45cceb5c0f9d765a76c25b3972329d67c9613e6f386c083e51240780a2e18222310bcf9d9e299230659faaf482a95e8c9267f38886acce4e41a0ae433c550d7ed5487965397672833cd47b478131d04af6afb0242d39ce2825b0e2c79b190ada0f0d0440f01ebac367d3710a53b3284faa1af84696816928615fb388961bb99cf1f4382f94851cadf06e7dcf229a41919df169cb7619277ecd72e69e8ec1353a2831cac294d47fa0ec2534a4f435bb79ac1dae0bd7aa6b59e75df407c3667fae53362702f7b05fb9ae389cb5d9c8350ba5aa03e03cb87770fc4accaa87b38c455775b5146623f06a61fde952404814cfc80a0784e48d2d318e37e1e36b0e029b3e20243f3f9b3d6e205ac023e81f33116ba4cfc8783e1e21a2123cf3d5fe7f35f93d4bde0e2a2821083eafbb029b3a5f92a0b2dd15a15fd80e04f3421f9b7df07da5a08f7317b4cdba08fc591ea83de0dc250da7861614fa84a45f5141adf98618a1009048f2b42686b0468bfb9c7332f47d22c308b1352d1996aabdc16d02330687eb9e29c5f6e082cf9718970687b2c617c62fde76fca265ae3262c24751717d060374ee53dd4278af46456f0c84281cd25f7203947b9990301e0bd9e76998e85743485851faabb2ae5e5fc05bd3a1b9ce3c363a593042e0c157c511dfc27e47797552f4573a9a0a29a809b632a59a861060811852a4c521a97fa91c3fbaae54f382791bc4e817f1e180d1002f09c3b20ad2a2ba5d8d474d2aff5bfc333ff4f72b14ce408e16e71071e6929e4b667a1fa0555604ca21b3c17082dea21bc4a1a11958910b6148291b0fe0344c8c706b2ff852b93746914c69b739a021143582adc8821d44fc708bbcdfded183de14c3e7571138fd5030054a8d31e86d7dbfa53ec31bc0ed9ae29bcdc38a2c661ffa959afa10714af71338803013d36da5855dfa407cffa550fa3977e1f6b493929248212d2b31aebd7c02f35b76e25f7ae7943620125090be57e26d013b72be013714b2e09dd9cac2795b0b6537f57b79f7c496f1fed0bc560721b05d917a5f53715f6fb145ec6c1cd5080cf0c836caec6ccecb50d3f55598f291ea564d73dfd7b866cb03fe5923861ed075e6e843387fde5cfada0dc95319163b7fe9dfd924313ee49efb0c5186b7fe1332dc1b6d462b90beefd5b4bb7af53583b1abc2c226b6ea8caba89d3d1f3993d761fdf24c424f27af8c5437925474b4b2a72ada21bf5525a1277c90fb5b631e129ef8d3b3d003140e0133351f6225723943fa493384a7dd5145f0a130624d72f0a0c006aac7e30f773b3a898389ffc5ce407c8a317baa85618208e80316ba4a7fddd63338628d19aaea21be732362e302b339e6727fd2acdb1259e41b01c5ec717917befce0c1343d9c9d7fc69ec0a2fb2aa37ecefc022cbedc5c20dc47b9f96dd0e3c053c2b1c4ee657325333f495e4eb7533538434f1589a02bc2d78ad13182c10962265b486fa0be0e4b57ab1e32d17fd345a99f0b20972b36104722845cf7fdd7aff1b8e7b0855d144d01a8c152083ddae5d29febc617ce5056cd0d1eba572c3154de02e0643f7f2e22b901075184b8e2cef27b4b12dab95ef7f2f0e2bb01dca785d654fe491dcd3c4ad189724a2e84848b72fe367d33af568a3aea84d933aac6d8eb4e48497f6b9e82ad92ab768e0080f45236384f3f6f8ef4c0c91b4c2f85791cac45b12d322a05262dff8746075fbca8b71776510102fb59bcc454672e90e42153f03e78eb9f2d1ad1b5e461b9350344251cda57cf38ac0fcabeb2f8222c3e76eb73815f27ff595cc62c42f2704ec69854e554fae51c90a4d3f0bb4c51a92e3595b22ae44baab37c5295e2b39e84fc7b2128935d22815be7151924793d36b6c9c02397d0b7892907cd9d2aa50c548e510f4529462036a200ba1d7dc95ff90510b0bf0bba9168a146ac6500afa5ae7aa533b6bb472f427e88463f20d7c66ba12606725aa80cb4c7274a0c071e3aebbc80aa0893e2e818d98dd18887857c0aa0f1d19d8ff46d086312042f20088bde6c89ffa239d5f52809dba1e62582d88bf2cc37a15ee7db93a72149347dcdf459609bdc016b5355afbb0081901e9ae400327078ba2b855234371bbce2368eab28da18a6fbce90bddb405e7c1e28d4017a3bad0b082b51920ac12f98c98381399fb76ff296f9e3e22fe75c728177c1d04781fefae2feffe407da04c836d4beff8a90a1b4685e06f6a58ece7e1882542db642f95be25dd1f9c0002286d6bb20a4e0b485c5c34f56ad13aa064f86979775f015e213c00a18ac935cd63f037bcb81b32f3d5400d4955abd2a79d07d968370ae10a0017c265c053e8ed6336471f1569ab04ac51293f1d443c50e49ce68fe1b119aae3991b81840fc65db3592db90c256f07390bd63a7c3bd5f301f22ea7734bd324b8be0067955234ac2dda938aa3abb5ae54883b438a1398a9a112bf07faa9bde36f0da4a882091fa8c89f3da4c1e698ba56eaf385e34a8bf710541bb69387101c566ee444dfc5c5eeef02795b7d5826e8ee444586bc120fe82f8b316b206b3bc63b5a4c42b0de755145cfac77e208df038167133ff01df6097c81d9e034ee4ace492f3e049a624bf6084627a3c8930fa671536392c09a5d0cae038cfde4de257a0f94723775506707133917907e53c8969c768bbf0343d3830c6fb50cd75afe8c4ef7ee5203f0d3a7d0eb33035076d2a31c994da48dd6125a4ef58deaf280d64716d5ce34a7afe4b92ac74747553aa63a9f363d7d94fe3fc20f8b35b3b8ac767a1329c77f50f65030b9620d28f25ae626601472836bcd3ab9102fd81ff15dce16057a22cc0ec6861d5a618492a6a671c883f83bc32a0fa1fcb1511795757bf5b5d43fea4a56798bbc3a125494747a5fa0167a0c439750637ffd516aa6e42c84ea62f432b34ff684247b776810a0b664e986420f719dac8e8d7a47a94ac7e53fd69f341f6853439fa1d79feab492c28fc52df60849e25e7833b7fac377bb6c5de06704187cb36cad5689463ba097e04524a37f22a05a63d63e2f2aa534a4e673b834bc668a0f70f4100669bba4f5805519d2c4e84dcc5cedbb89691075eec4a6686132665d309de83ac7bab798390dc922934bdb3905e25049a19430bea65688c776afd7b846cabb93c23747eddeeb904bba20631d2b33aded4882da3433e364f63e327a32e744aaadff574efd79ac526a673ea940004b177aba30f17653c04155519f89bfd2f06d5545ef0a23cae4832ec1ba7a66762c7c9dae68b9d7e047af086e16e19195dc0c814a90dc0e5299cad9629e47bcd6e8a025373a7f62ba6ea9d3e72afa917aad45471cb7fc7b3150af86c182ba02b2ef3ab005e3468e3ba2dee634124ad81fa83d5746315640cfd2553c34ac9ac48ec344dce1caa16c1bc3a6808eefb1d37edfc52bfddba2973d73fa051f47ec66a7f57a6091d049e083405e9e3910c972b00842f5f1b10cd908fe7b27bbc4d526e79d9a963e54a8ac766e87d8c7058340897ce96372c934bf126eed254df25edb0c1a4dc80387342f38cd67ef43a872671dfedb7ed87b963abb0696718f8bd70818f9aef9938d42317e5fe37940357350eff4f44241f17846a109fae09b8f1d1ebe02b26ce07b92b2c0315ea6488939cb5cd65d25ffbb81ac32d66e1f1cd09a4d5ec0951cb122a0dd5c10bfd053955a56736cf5fa96cbcd26093c273dcc12fe24911c9a06a8344d71f7271673b6abdd007c3e9b74c26a77caf89b52e5604055e23873183aa8a0d83a6d54ccb830676fdacb12f7c04459eb522270ad3cc29e614f800d5d3f73a7166a7c7d4a89392eb04faa47a751f08c94dca313157c94316aabd1284c0ae0c528c83566eed22bd441989394f423ec79f5309cbb832b47e9b5ddb46fab188e27fdd9a5961721d1a48c5e5bf02a5421bf2c39af9de74aa42bf63eb3fbba64e7e8e174ff517ef7b3f5e91796012466a45b157b4f478286c52b6e7933304ea5d672a01ead39c16180633753d9799684a43869619e608d18c6bba6550efab395a8c9efb59f97ccac5187037192097e8473f0202a79be7b271f0cd56a919ad7a02b883220e65a8188dd45d2c1150e71efe5a25808567a55d82e2112432ce8cc49dd8c425802a793b10c41d1ebbe350462cb84af2ad4383e3f56782436c36b482efab3bca5c0dc549457cd2febfcc55479f7601257cb1bf40c0be321733ee4f7bd35470ad08f8209599edf197a541e7f823c4705f89a8a93138ec698c06be861d5ee9dd60104434c021af9cd34bd898b98e420bf3b4d9f9b3679ce1b2453d660cc347bafbf89fe2c105b7daea64706e1bc15e4c1fa636a892acc892cd0b5209762cb5d078bd9c710499c486bf7f61ca3c16f1b21c28d9a5f1f63df4e336e1731aa0be857a23f064fd0b13922c453ea798c114ef4aacc26195c38288f2c7b41030201b6319e7a6d27cb5c825dc55f95dd1991a3cee32ae13b1d07fa5480d3d76b526b88652849b510ae6157fc6f198a1ecbf56f38752e70b6a091a69f30bc4341b5956c520b3b841881c4a0ce9793b955deeac7d9c5d1f80a20a755e1b10896cbfcae34d2098ed19fbab7d8f3adb1da59ca17ad02036bd2776999f4b151ed6c4918331471734d6742d38aeea153e353b8a62fc9f00881a1700e907c494d421ac8ff300a9b3ba88818d4553a0dc56c0b285148c95852d29f7ab051c6297fce8301d2814eacf751424ca4ff0e11b065a94483dcb09d94475cf2582342262067913521e96ce4d758a4bc20c3e03d9a33987b63693811f7302650f3fcb777d6b00e4f5174f2c3f40c3b1dcd521140252d9fb7a76d272170d5fce3ece6cafb81059e3bb39c41b27c1cfc42bb804f4e3dfa7a5c0f8ac4f9f388d6cde75a07bd0b59dd2fc785e514c81cfb2d0837a518314a2ad7b5a5b586dbb9b6ab278eaa1b60327b6981672ce8c0105370e7668a2706bf7a76a1af064d3883d4a9bddbca2c10968e1437465a0504aaff9373bb7be06f86e1df149cd24f55bb8b96994baf2564cf2b72a369ec7fb0d4d645d7dbc06846029694b06f52526647ac9424b786ad4caa63b85da85399e7d4dbf9199f7b307d9e3e153e1997374781f465db7b97ce7d98d77f3311b2c191d7836f0"}) (async) r9 = syz_open_dev$vcsn(&(0x7f0000003000), 0x200, 0x608202) mmap$dsp(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000004, 0x110, r9, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000003040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) write$cgroup_int(r10, &(0x7f0000003080)=0x80, 0x12) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f00000030c0)={0x7, {{0xa, 0x4e21, 0x1, @mcast1, 0x4}}}, 0x90) (rerun: 64) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000003180), 0x600000, 0x0) setpriority(0x2, r7, 0xd08d) r12 = openat$panthor(0xffffffffffffff9c, &(0x7f00000031c0), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f0000003200)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r11, 0xc01864c2, &(0x7f0000003240)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r12, 0xc01864cd, &(0x7f0000003300)={&(0x7f0000003280)=[r13, r14], &(0x7f00000032c0)=[0x1, 0x8000000000000001, 0x5, 0x9], 0x2}) 45.90281277s ago: executing program 0 (id=333): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) 45.759518992s ago: executing program 0 (id=334): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000840)={0x4dc, 0x40, 0x8, 0x70bd26, 0x25dfdbff, {0x11}, [@nested={0x150, 0x87, 0x0, 0x1, [@generic="9cc82d17116b076f64638350b9f6bd7356acfba553075fbc794ee2fe72befefd8796ff491765d3c2732786574ce637f9e6e6f80dd78f3c751817392765b6070a93782a7e09e4dee0c883c9f9ef97710888871faeb24f670b254307dcf0a1b95ca95f919d5d88d4f4307141c8598a7b71af27a2354c1ade9b5f4ab051e45b51171183e42c3215ff2b3ae6120cb60fd40cadc8ccf76099695c497a58483b71762234c37fa1ec1a14c0340e38ea2eab6fce4e45b870655e1b4107d05c6a3698b0cc36df0f3817405d4a7bbc8eb3b3d817067f0179e8cf58bff5b933f4cbe19e", @nested={0x4, 0x3f}, @generic="7cebbc084ff5f062027f58271882d89298393445f4a4918e05528a893a95755d13fa9299e53a500252ea391fb3a6b3e76607ed06ba9acb0bf52f66f25ebb33361bfeedd129e6ccafaa64c1f2e0de5a7b4c1cf5028b431eb2505f151eb6741ab5f2eefb656b21", @nested={0x4, 0x9b}]}, @nested={0x10a, 0x40, 0x0, 0x1, [@nested={0x4, 0xfd}, @typed={0x10, 0x7a, 0x0, 0x0, @str=':@},^\x9c-,#\\.\x00'}, @generic, @generic="7841f6cfc427d0c842bb66addbf0f2440f9e257ee44bc913d6178e095641d1d2411f44e3c6347b95656691dfd151f10e1522d7456620885b577955736922caf746cacfb4d102e6715e99c42590c45d571b6a043d086979deaae4246a19f0bcc4cbb1df0704096d8114a8c956c20ae1de9d4908d6331f8ef0d62c090bdcc8181244cac41651a1b38b7b06bcdf31faef7b853d60d81ab5e4cd711b4b65b3cccdf55685b61d5aaad3c01d14531143b6db4c4443b132cfd901344f82335d184cdf5f544230a50eee4f26bbe620d79b8948128d02235d57735239502d", @typed={0xc, 0x76, 0x0, 0x0, @u64=0xda1}, @nested={0x4, 0xf}, @typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@remote}]}, @nested={0x1d3, 0xdf, 0x0, 0x1, [@generic="8921d12f59e018ee82d0206386d8f7aff956faf1b60b63a8e8f1a11b829304a035dd46fe799298a7defc8cd82022d9e61973cd51274ed9eeddc56b454f8e05402bf337aaf10086de3a51f96c900599afadd6b8be971a4a82855af88d2036e778b8d1404c914cc009b30c869e6c50fde0ed3a9f8f69bffb62cbd2814b070fac63850d24cc7217f3e43f83b078e102281de06aaad530739ba3", @nested={0x4, 0x10a}, @typed={0x8, 0xb8, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x90}, @generic="1b32b01587cafa457c49a900112f815a1ee9fb91c164f284044ecd95977b01e3fb5a1ae60ee42e8d51e960005a0ffb889b7c2ffe70d82529ed1d6107f00591c459248b5a7674b14f5a3281aea8632b73b418661ffb252dca40b919179da6bb287213ec4708c604258b15751c603d17f1b489f2dd10d900e54a5d96c8d576e90e3b487ed3721f1a9f", @typed={0x8, 0x19, 0x0, 0x0, @u32=0xb63}, @typed={0x8, 0x40, 0x0, 0x0, @pid}, @generic="5a4954b954ddb49449901a5666f6c4f4cfd1630d187a29e87c5ce99ab22d71635aa4ea7e40ac493594de375e0bd19bbf5f530421ef904781b975cbb9a9811bc6144ecb3a3460458e31e7da8a04ebef414fc20110ad2b29c5c07bd2959b93cf34112fd71daf8c17bdb7847e2f4d0716de55b7803f4463f500bdc4dc5d55de051bb565c3e219d831", @typed={0x8, 0x103, 0x0, 0x0, @pid}]}, @generic="02d2a3ded98e3fc959f224c017769a8138b8dfe7ec382a15597e462f32ef901ce102657ed4f568a0993ace0c926572aecdb1054f8bf232e1384bca0a8ee77d3cbe992ab0d6cfc8bc44e2ad102af0da19561b16ef719d177183ec1578d5a2096bd17c95ed073f18e06f03d7630f8cd6b1503ddeaf95351c62b0ce212d366e1ac93a98931bab02ea0eaa79a2781bb6e0e5460a6e57a9e42c"]}, 0x4dc}, 0x1, 0x0, 0x0, 0x14000001}, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp\x00') getdents(r5, &(0x7f0000000300)=""/211, 0xd3) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x10000001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)) getdents64(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x4, 0x4f, 0x8, 0xfa11, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) 45.675066664s ago: executing program 4 (id=335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000002000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000000000000000000ffffff80000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800000000000000000000000000000000440005"], 0xfc}}, 0x0) 45.583746628s ago: executing program 4 (id=336): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, r1}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x7}, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x79, &(0x7f00000002c0)="1a00000002000000", 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20942, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24048045) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) 45.360550868s ago: executing program 4 (id=337): writev(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000380)}], 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000005000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) 45.215027922s ago: executing program 4 (id=338): syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000108004680002c0000000000069078ac141400ac1e000107"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0xf, 0x10, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "04"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x7, 0x80}, {0x6, 0x24, 0x1a, 0x5, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xf, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x5, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x0, 0xb}}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x7ffd, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) listen(0xffffffffffffffff, 0x5) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) shmget(0x1, 0x4000, 0xc, &(0x7f0000004000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000000080)=""/54, 0x36) getdents(r1, 0xffffffffffffffff, 0x5a) 45.086793396s ago: executing program 1 (id=339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x28882, 0x0) syz_io_uring_setup(0x7bb9, &(0x7f0000000300)={0x0, 0xec22, 0x400, 0x3, 0x40000333}, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000fff000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 44.828920185s ago: executing program 1 (id=340): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') write$vhost_msg(0xffffffffffffffff, &(0x7f0000000440)={0x1, {&(0x7f0000000380)=""/83, 0x53, &(0x7f0000000400)=""/61, 0x1, 0x1}}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x32c}, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000000)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x40, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x80000000, 0x2}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f00000001c0)=0xffffffff, 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 43.934669205s ago: executing program 0 (id=341): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000090ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000be080000000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 43.766566994s ago: executing program 0 (id=342): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x9, 0x4}) socket$inet6(0xa, 0x6, 0x11d6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc8c4049c, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @mcast2, 0x6}, 0x1c) connect$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x40004) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000000)='Q') socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000801) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x1288, 0x10c8, 0x8, 0xfa04, 0x10c8, 0x6c02, 0x11f0, 0x194, 0x194, 0x11f0, 0x194, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'wlan1\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x2}, 0x0, 0x10a0, 0x10c8, 0x0, {0x0, 0x74020000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup/syz1\x00', 0xcc}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x0, 0x23}, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@addrtype={{0x30}, {0x218, 0x11}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x0, 0x3, 0x4, 0x2], 0x1, 0x6}, {0x0, [0x3, 0x5, 0x6, 0x2, 0x0, 0x6], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12e8) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00'}) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 43.592543265s ago: executing program 4 (id=343): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='mnt/encrypted_dir\x00', 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_create(0x3, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, 0x2, 0x4, 0x2, 0x80, 0x7, 0x9, 0x0, 0xffffffff, 0x7, 0xc, 0x8, 0x9, 0x2, '\x00', 0x1, 0x7}) rseq(0x0, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x20, 0x12, 0xa, "72a47cc58230b42e7fed"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = timerfd_create(0x3, 0x80800) timerfd_gettime(r2, &(0x7f00000001c0)) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000300)={0x20, 0xd, 0x4, "349ea0e0"}, &(0x7f0000000380)={0xa1, 0x1, 0x400, "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"}, 0x0}) 43.402287175s ago: executing program 2 (id=344): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x50000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0x27, 0x1, 0x4, "3a8e00000000c20500ca55e21e0000000400b2b679d200", 0x41414770}) 42.325766017s ago: executing program 3 (id=345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sendto$unix(r2, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000cc0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x9, 0x8001, 0x0, 0x28cb, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r5, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000010c0)={0x0, 0x0, 0x10000}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000063c0), 0x40, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a01"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4358, &(0x7f0000000640)={0x0, 0x79a6, 0x2000, 0x1, 0x25f}, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) sendfile(r7, r5, &(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x3) 40.886415906s ago: executing program 1 (id=346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000002000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000000000000000000fffffff0000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800000000000000000000000000000000440005"], 0xfc}}, 0x0) 40.698497434s ago: executing program 1 (id=347): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x8, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x5d}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) sendto$inet6(r0, &(0x7f0000000340)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) pipe2$watch_queue(0x0, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040), 0x0) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x3, {}, 0x2}, 0x18) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r10, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x3c}}, 0x20) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) sendto$inet(r4, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x100) 40.246736978s ago: executing program 0 (id=348): writev(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000380)}], 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000ffffffffffffff80000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) 39.764783053s ago: executing program 0 (id=349): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) (async, rerun: 64) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) (async, rerun: 64) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) close(0x3) (async) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async, rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r8 = openat$cgroup_pressure(r7, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) close(r8) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r6, 0x400, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x80) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, 0x0) dup2(r2, r5) 39.414455147s ago: executing program 3 (id=350): r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100100000040435522050000000000010902240001000010090904001001030003000921faff0501222900091a810300000009fc073b7204e8ee52f9aadf359e793312cf87ee0ab462"], 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f638d408f01002204db10100000109022d00010b06800809045f40030a00004009050d02000202040c09050808400001c60d090582"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x0, @empty, 0x5}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x103301) ptrace$getenv(0x4201, 0x0, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0x4004550c, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00116d"], 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) fchdir(r2) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8880, 0x85) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lseek(r7, 0x101, 0x1) getdents(r7, &(0x7f00000002c0)=""/201, 0x20) 38.49068744s ago: executing program 4 (id=351): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@fd={0x23e65978, 0x3, 0x4, 0x10000, 0x1, {}, {0x4, 0x10, 0x20, 0x10, 0x3, 0x4, "a4e2221c"}, 0xa}) pread64(r0, &(0x7f0000000540)=""/169, 0xa9, 0xb0) r1 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff70790008340201210126ff0905850308"], 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x8085}, 0x24000840) 0s ago: executing program 32 (id=344): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x50000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0x27, 0x1, 0x4, "3a8e00000000c20500ca55e21e0000000400b2b679d200", 0x41414770}) kernel console output (not intermixed with test programs): sport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.945651][ T5851] Bluetooth: hci4: command tx timeout [ 75.963243][ T5164] Bluetooth: hci3: command tx timeout [ 75.969585][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.012605][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.019835][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.047309][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.062665][ T5857] team0: Port device team_slave_0 added [ 76.102189][ T5857] team0: Port device team_slave_1 added [ 76.175835][ T5847] hsr_slave_0: entered promiscuous mode [ 76.182062][ T5847] hsr_slave_1: entered promiscuous mode [ 76.188866][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 76.194648][ T5847] Cannot create hsr debugfs directory [ 76.204643][ T5855] hsr_slave_0: entered promiscuous mode [ 76.211216][ T5855] hsr_slave_1: entered promiscuous mode [ 76.217423][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 76.223700][ T5855] Cannot create hsr debugfs directory [ 76.272900][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.280185][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.306466][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.321668][ T5858] hsr_slave_0: entered promiscuous mode [ 76.328266][ T5858] hsr_slave_1: entered promiscuous mode [ 76.334256][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 76.340044][ T5858] Cannot create hsr debugfs directory [ 76.374190][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.381244][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.407421][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.536505][ T5857] hsr_slave_0: entered promiscuous mode [ 76.542687][ T5857] hsr_slave_1: entered promiscuous mode [ 76.549151][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 76.554889][ T5857] Cannot create hsr debugfs directory [ 76.743201][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.753609][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.789178][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.800626][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.824017][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.834143][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.869115][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.878824][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.983620][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.997463][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.008749][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.020640][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.029473][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.039471][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.047287][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.056578][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.150620][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.160356][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.168912][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.178316][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.190382][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.200657][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.220204][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.229511][ T5858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.315656][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.324956][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.337010][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.351684][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.360601][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.368685][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.377873][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.411388][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.422508][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.474431][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.481863][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.491120][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.499159][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.509347][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.517616][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.528485][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.549785][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.559064][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.576108][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.583853][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.629052][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.636253][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.653732][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.705846][ T5164] Bluetooth: hci0: command tx timeout [ 77.712836][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.749019][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.756150][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.785400][ T5164] Bluetooth: hci1: command tx timeout [ 77.792125][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.799307][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.818322][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.866434][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.901515][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.915056][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.922209][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.945522][ T5164] Bluetooth: hci2: command tx timeout [ 77.947918][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.958319][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.983949][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.999880][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.025402][ T5164] Bluetooth: hci3: command tx timeout [ 78.026677][ T5851] Bluetooth: hci4: command tx timeout [ 78.048072][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.055234][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.064283][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.071410][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.091937][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.103493][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.121601][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.128745][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.166308][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.173492][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.274055][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.292629][ T5848] veth0_vlan: entered promiscuous mode [ 78.327115][ T5848] veth1_vlan: entered promiscuous mode [ 78.354351][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.394318][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.447211][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.454268][ T5847] veth0_vlan: entered promiscuous mode [ 78.461077][ T5848] veth0_macvtap: entered promiscuous mode [ 78.481069][ T5848] veth1_macvtap: entered promiscuous mode [ 78.504479][ T5847] veth1_vlan: entered promiscuous mode [ 78.542221][ T5855] veth0_vlan: entered promiscuous mode [ 78.550171][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.573102][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.598135][ T1175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.608013][ T1175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.631601][ T5858] veth0_vlan: entered promiscuous mode [ 78.639670][ T1175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.649928][ T1175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.662869][ T5855] veth1_vlan: entered promiscuous mode [ 78.704132][ T5858] veth1_vlan: entered promiscuous mode [ 78.720451][ T5857] veth0_vlan: entered promiscuous mode [ 78.751099][ T5847] veth0_macvtap: entered promiscuous mode [ 78.778168][ T5857] veth1_vlan: entered promiscuous mode [ 78.790486][ T5855] veth0_macvtap: entered promiscuous mode [ 78.813574][ T5847] veth1_macvtap: entered promiscuous mode [ 78.831891][ T5855] veth1_macvtap: entered promiscuous mode [ 78.866601][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.875392][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.885013][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.892342][ T5858] veth0_macvtap: entered promiscuous mode [ 78.923085][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.944552][ T5858] veth1_macvtap: entered promiscuous mode [ 78.955189][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.963240][ T5857] veth0_macvtap: entered promiscuous mode [ 78.991668][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.002107][ T94] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.011357][ T94] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.026475][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.028092][ T5857] veth1_macvtap: entered promiscuous mode [ 79.034306][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.045525][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.056760][ T1104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.073105][ T1104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.082742][ T1104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.101806][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.114962][ T1104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.124660][ T1104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.164309][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.216211][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.218754][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.251453][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.263659][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.281675][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.299396][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.393312][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.458623][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.488933][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.523168][ T1175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.548777][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.564832][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.578361][ T1175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.588209][ T1175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.606280][ T1175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.650846][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.660267][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.690607][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.698583][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.724973][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.737870][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.765654][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.788622][ T5851] Bluetooth: hci0: command tx timeout [ 79.817445][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.841426][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.865651][ T5851] Bluetooth: hci1: command tx timeout [ 79.872007][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.911930][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.985529][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 80.016108][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.027362][ T5851] Bluetooth: hci2: command tx timeout [ 80.067306][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 80.079922][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.094382][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 80.106761][ T5851] Bluetooth: hci4: command tx timeout [ 80.107428][ T5164] Bluetooth: hci3: command tx timeout [ 80.119796][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.128905][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.148152][ T10] usb 2-1: config 0 descriptor?? [ 80.212272][ T5936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.510441][ T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.657197][ T10] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 80.736965][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 80.779325][ T5954] batadv0: entered promiscuous mode [ 80.807161][ T5954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.852360][ T5954] batadv0: left promiscuous mode [ 81.074832][ T5962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 81.120411][ T5966] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11'. [ 81.167149][ T5894] usb 2-1: USB disconnect, device number 2 [ 81.226919][ T5901] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.390424][ T5901] usb 5-1: device descriptor read/64, error -71 [ 81.638490][ T5901] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.786176][ T5901] usb 5-1: device descriptor read/64, error -71 [ 81.865971][ T5164] Bluetooth: hci0: command tx timeout [ 81.916704][ T5901] usb usb5-port1: attempt power cycle [ 81.946243][ T5164] Bluetooth: hci1: command tx timeout [ 81.960545][ T5987] fuse: Unknown parameter './file0' [ 82.018833][ T5923] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 82.107248][ T5164] Bluetooth: hci2: command tx timeout [ 82.165425][ T5923] usb 3-1: device descriptor read/64, error -71 [ 82.185925][ T5851] Bluetooth: hci4: command tx timeout [ 82.192583][ T5164] Bluetooth: hci3: command tx timeout [ 82.285494][ T5901] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.330485][ T5901] usb 5-1: device descriptor read/8, error -71 [ 82.426747][ T5923] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 82.565504][ T5923] usb 3-1: device descriptor read/64, error -71 [ 82.582409][ T5994] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 82.595014][ T5994] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.602766][ T5901] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.648514][ T5901] usb 5-1: device descriptor read/8, error -71 [ 82.675713][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.688901][ T5923] usb usb3-port1: attempt power cycle [ 82.788980][ T5901] usb usb5-port1: unable to enumerate USB device [ 82.882356][ T9] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 82.897098][ T9] usb 2-1: config 0 has no interface number 0 [ 82.903231][ T9] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 82.918512][ T9] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 82.931706][ T9] usb 2-1: config 0 interface 48 has no altsetting 0 [ 82.937633][ T5902] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 82.945868][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 82.945906][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.949716][ T9] usb 2-1: config 0 descriptor?? [ 83.076028][ T5923] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 83.105993][ T5923] usb 3-1: device descriptor read/8, error -71 [ 83.127471][ T5902] usb 4-1: not running at top speed; connect to a high speed hub [ 83.136240][ T5902] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 83.144353][ T5902] usb 4-1: config 95 has no interface number 0 [ 83.151322][ T5902] usb 4-1: config 95 interface 1 has no altsetting 0 [ 83.160139][ T5902] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 83.169384][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.177489][ T5902] usb 4-1: Product: syz [ 83.181673][ T5902] usb 4-1: Manufacturer: syz [ 83.187642][ T5902] usb 4-1: SerialNumber: syz [ 83.194440][ T5992] syzkaller0: entered promiscuous mode [ 83.200486][ T5992] syzkaller0: entered allmulticast mode [ 83.313252][ T9] usb 2-1: string descriptor 0 read error: -71 [ 83.328614][ T9] usb 2-1: Cannot read MAC address [ 83.335245][ T9] MOSCHIP usb-ethernet driver 2-1:0.48: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 83.347850][ T5923] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 83.363761][ T9] usb 2-1: USB disconnect, device number 3 [ 83.376085][ T5923] usb 3-1: device descriptor read/8, error -71 [ 83.472715][ T5999] Zero length message leads to an empty skb [ 83.492075][ T5923] usb usb3-port1: unable to enumerate USB device [ 83.500102][ T5999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.513183][ T5999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.667405][ T5923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.816656][ T5923] usb 2-1: device descriptor read/64, error -71 [ 85.076833][ T5923] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.077925][ T5921] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.228281][ T5923] usb 2-1: device descriptor read/64, error -71 [ 85.258055][ T5921] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 85.275168][ T5921] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 85.292538][ T5921] usb 5-1: config 0 has no interface number 0 [ 85.312032][ T5921] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 85.321359][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.334886][ T5921] usb 5-1: Product: syz [ 85.342341][ T5921] usb 5-1: Manufacturer: syz [ 85.349153][ T5923] usb usb2-port1: attempt power cycle [ 85.359088][ T5921] usb 5-1: SerialNumber: syz [ 85.380752][ T5921] usb 5-1: config 0 descriptor?? [ 85.696597][ T5923] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.736638][ T5923] usb 2-1: device descriptor read/8, error -71 [ 85.818783][ T5921] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 85.843416][ T5921] uvcvideo 5-1:0.64: No valid video chain found. [ 85.879349][ T5921] usb 5-1: USB disconnect, device number 6 [ 85.985377][ T5923] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 86.015861][ T5923] usb 2-1: device descriptor read/8, error -71 [ 86.029931][ T5902] usb 4-1: USB disconnect, device number 2 [ 86.125638][ T5923] usb usb2-port1: unable to enumerate USB device [ 86.163152][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.259983][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.34'. [ 86.309510][ T6042] ip6tnl1: entered allmulticast mode [ 86.476962][ T5902] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.511852][ T6046] fuse: Unknown parameter './file0' [ 86.635398][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 86.645916][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.662118][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.680832][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 86.702306][ T5902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 86.725483][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.759611][ T5902] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 86.760570][ T991] cfg80211: failed to load regulatory.db [ 86.777682][ T5902] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 86.793833][ T5902] usb 4-1: Manufacturer: syz [ 86.808696][ T5902] usb 4-1: config 0 descriptor?? [ 87.040507][ T6052] netlink: 36 bytes leftover after parsing attributes in process `syz.4.38'. [ 87.145715][ T5902] rc_core: IR keymap rc-hauppauge not found [ 87.170814][ T5902] Registered IR keymap rc-empty [ 87.182985][ T5902] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 87.225844][ T5902] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 87.285241][ T5902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 87.335956][ T806] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 87.347786][ T5902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 87.391133][ T5902] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 87.425567][ T5902] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 87.455407][ T5902] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 87.485602][ T5902] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 87.515530][ T5902] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 87.517738][ T806] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 87.545573][ T5902] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 87.562786][ T806] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 87.585745][ T5902] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 87.607656][ T806] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 87.630671][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.640709][ T5902] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 87.660439][ T806] usb 3-1: Product: syz [ 87.682025][ T806] usb 3-1: Manufacturer: syz [ 87.688949][ T5902] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 87.711058][ T806] usb 3-1: SerialNumber: syz [ 87.755923][ T5902] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 87.768044][ T806] usb 3-1: config 0 descriptor?? [ 87.809856][ T806] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 87.817656][ T5902] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 87.841846][ T5902] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 87.893353][ T5902] usb 4-1: USB disconnect, device number 3 [ 88.072896][ T6071] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 88.393424][ T6080] PKCS7: Unknown OID: [4] 0.0.127.58.108.27.13(bad) [ 88.432679][ T6080] PKCS7: Only support pkcs7_signedData type [ 88.465550][ T5902] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.630926][ T5902] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 88.671454][ T5902] usb 4-1: config 1 interface 0 has no altsetting 0 [ 88.699253][ T5902] usb 4-1: string descriptor 0 read error: -22 [ 88.710321][ T5902] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.729874][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.006043][ T991] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 89.077072][ T5923] usb 3-1: USB disconnect, device number 6 [ 89.165651][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.172561][ T5902] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 89.173282][ T991] usb 5-1: Using ep0 maxpacket: 16 [ 89.206656][ T5902] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0926:3333.0002/input/input6 [ 89.208679][ T991] usb 5-1: config 251 has an invalid interface number: 16 but max is 0 [ 89.245343][ T991] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 89.255822][ T991] usb 5-1: config 251 has no interface number 0 [ 89.262144][ T991] usb 5-1: config 251 interface 16 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.275153][ T991] usb 5-1: config 251 interface 16 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.285251][ T991] usb 5-1: config 251 interface 16 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 89.299520][ T991] usb 5-1: config 251 interface 16 has no altsetting 0 [ 89.309409][ T991] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 89.318933][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.327224][ T991] usb 5-1: Product: syz [ 89.331665][ T991] usb 5-1: Manufacturer: syz [ 89.336926][ T991] usb 5-1: SerialNumber: syz [ 89.345372][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 89.356895][ T5901] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 89.369614][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.379860][ T5901] usb 1-1: Product: syz [ 89.384372][ T5901] usb 1-1: Manufacturer: syz [ 89.390572][ T5901] usb 1-1: SerialNumber: syz [ 89.404314][ T5901] usb 1-1: config 0 descriptor?? [ 89.422168][ T5902] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 89.479671][ T5902] usb 4-1: USB disconnect, device number 4 [ 89.586290][ T6102] fido_id[6102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 89.629924][ T5901] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 89.668874][ T6107] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.154911][ T5894] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 90.299373][ T5894] usb 3-1: device descriptor read/64, error -71 [ 90.546170][ T5894] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 90.565438][ T5923] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.696446][ T5894] usb 3-1: device descriptor read/64, error -71 [ 90.718039][ T5923] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 90.734974][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.750993][ T5923] usb 4-1: config 0 descriptor?? [ 90.805734][ T5894] usb usb3-port1: attempt power cycle [ 91.020476][ T6139] fuse: Bad value for 'fd' [ 91.024078][ T6137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 91.034362][ T6137] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 91.034649][ T5923] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 91.072548][ T6137] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 91.081855][ T6137] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.090797][ T6137] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.103193][ T6137] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.114779][ T6137] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 91.121838][ T6137] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.131328][ T6137] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.140921][ T6137] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.147390][ T6137] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.155445][ T5894] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 91.170254][ T6137] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.177591][ T5894] usb 3-1: device descriptor read/8, error -71 [ 91.187011][ T6137] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 91.193388][ T6137] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 91.206749][ T6137] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 91.249263][ T5923] [drm:udl_init] *ERROR* Selecting channel failed [ 91.295111][ T5923] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 91.317775][ T5923] [drm] Initialized udl on minor 2 [ 91.331744][ T5923] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 91.362989][ T5923] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 91.375442][ T5932] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 91.386548][ T5923] usb 4-1: USB disconnect, device number 5 [ 91.400930][ T5932] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 91.417154][ T5894] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 91.455943][ T5894] usb 3-1: device descriptor read/8, error -71 [ 91.575751][ T5894] usb usb3-port1: unable to enumerate USB device [ 91.810663][ T6144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.62'. [ 91.950796][ T5901] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 91.979234][ T991] usb 5-1: USB disconnect, device number 7 [ 92.153723][ T5894] usb 1-1: USB disconnect, device number 2 [ 92.277463][ T5901] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.334615][ T6164] vivid-000: disconnect [ 92.445372][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 92.464864][ T5901] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 92.482709][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 92.510005][ T5901] usb 4-1: Product: syz [ 92.519190][ T5901] usb 4-1: Manufacturer: syz [ 92.541945][ T5901] usb 4-1: SerialNumber: syz [ 92.565546][ T5901] usb 4-1: config 0 descriptor?? [ 92.578647][ T5901] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 92.779018][ T5901] gspca_sn9c2028: read1 error -32 [ 92.809533][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.826047][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.981502][ T5901] gspca_sn9c2028: read1 error -71 [ 92.996538][ T5901] gspca_sn9c2028: read1 error -71 [ 93.013607][ T5901] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 93.065666][ T5164] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.085899][ T5901] usb 4-1: USB disconnect, device number 6 [ 93.154081][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.160613][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.161971][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.188591][ T6141] vivid-000: reconnect [ 93.235582][ T5852] Bluetooth: hci4: command 0x0c1a tx timeout [ 93.477893][ T6187] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.553320][ T6187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.597544][ T6187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.620884][ T6187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.767372][ T6187] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 94.075463][ T5923] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 94.276068][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 94.303971][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 94.325609][ T5923] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 195, changing to 7 [ 94.337925][ T6195] netlink: 104 bytes leftover after parsing attributes in process `syz.1.76'. [ 94.368187][ T5923] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.391232][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.414908][ T5923] usb 4-1: Product: syz [ 94.431583][ T5923] usb 4-1: Manufacturer: syz [ 94.441782][ T5923] usb 4-1: SerialNumber: syz [ 94.683729][ T5923] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 94.713894][ T6212] geneve2: entered promiscuous mode [ 94.731640][ T5923] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 94.741783][ T6206] kvm: kvm [6202]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbe [ 94.864774][ T5923] usb 4-1: USB disconnect, device number 7 [ 94.916032][ T6216] fuse: Unknown parameter './file0' [ 94.923713][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.555514][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.605461][ T5894] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 95.625441][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.632639][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.717446][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.785392][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 95.785555][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.792550][ T5894] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 95.806504][ T5894] usb 4-1: config 179 has no interface number 0 [ 95.812929][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 95.828307][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 95.842678][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 95.917259][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 95.994954][ T5894] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 96.079535][ T5894] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 96.136533][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.210385][ T6231] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.306238][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 96.436094][ T5902] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.510031][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 96.520907][ T5894] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input7 [ 96.546115][ T10] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.618701][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 96.625804][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.655595][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.659210][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.711106][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 96.744629][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.751515][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.763325][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.804089][ T5902] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 96.836616][ T10] usb 5-1: config 0 descriptor?? [ 96.878349][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.963643][ T5902] usb 1-1: config 0 descriptor?? [ 97.145529][ T5923] usb 4-1: USB disconnect, device number 8 [ 97.145628][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 97.159972][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 97.459111][ T5902] zydacron 0003:13EC:0006.0003: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.0-1/input0 [ 97.625487][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.677764][ T5902] usb 1-1: USB disconnect, device number 3 [ 97.705518][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.706836][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.785447][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.875637][ T5852] Bluetooth: hci4: command 0x0c1a tx timeout [ 98.095394][ T5923] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 98.276552][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 98.297635][ T5923] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 98.366187][ T5923] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 98.391849][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 98.423265][ T5923] usb 4-1: Product: syz [ 98.447524][ T5923] usb 4-1: Manufacturer: syz [ 98.455066][ T5923] usb 4-1: SerialNumber: syz [ 98.477299][ T6266] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.503134][ T5923] usb 4-1: config 0 descriptor?? [ 98.516717][ T6266] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.535703][ T6263] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.558277][ T5923] hub 4-1:0.0: bad descriptor, ignoring hub [ 98.564318][ T6266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.588634][ T6266] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.598886][ T5923] hub 4-1:0.0: probe with driver hub failed with error -5 [ 98.616520][ T6266] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.374903][ T6289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.971020][ T6284] xt_hashlimit: size too large, truncated to 1048576 [ 100.035475][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 100.035541][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 100.056557][ T10] usb 5-1: USB disconnect, device number 8 [ 100.332466][ T6300] libceph: resolve '0.' (ret=-3): failed [ 100.505356][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.585554][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.585570][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.665409][ T5852] Bluetooth: hci4: command 0x0c1a tx timeout [ 100.665841][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.885412][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 101.075725][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 101.089832][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 101.109408][ T29] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 101.118697][ T29] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 101.133458][ T29] usb 5-1: Product: syz [ 101.138422][ T29] usb 5-1: Manufacturer: syz [ 101.151590][ T29] usb 5-1: SerialNumber: syz [ 101.186229][ T29] usb 5-1: config 0 descriptor?? [ 101.197619][ T6303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.212787][ T29] hub 5-1:0.0: bad descriptor, ignoring hub [ 101.222962][ T29] hub 5-1:0.0: probe with driver hub failed with error -5 [ 101.261767][ T29] chaoskey 5-1:0.0: Unable to register with hwrng [ 101.277191][ T5902] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 101.386280][ T6306] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.410488][ T6306] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 101.432786][ T6306] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.438906][ T6306] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 101.455827][ T6306] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.461780][ T6306] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 101.480519][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 101.500867][ T6306] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.501428][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.516355][ T6306] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 101.542634][ T6306] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.547421][ T29] usb 5-1: USB disconnect, device number 9 [ 101.561588][ T6306] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 101.582120][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.621826][ T5902] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 101.643843][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.684204][ T5902] usb 2-1: config 0 descriptor?? [ 102.161474][ T5902] zydacron 0003:13EC:0006.0004: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0 [ 102.195396][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 102.221502][ T6305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.359062][ T5923] usb 2-1: USB disconnect, device number 8 [ 102.375472][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 102.407571][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.434786][ T10] usb 5-1: config 1 has an invalid descriptor of length 82, skipping remainder of the config [ 102.461676][ T10] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 102.493586][ T10] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 102.509948][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 102.515709][ T10] usb 5-1: Product: syz [ 102.524910][ T10] usb 5-1: Manufacturer: syz [ 102.536136][ T10] usb 5-1: SerialNumber: syz [ 102.759656][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.791498][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.075460][ T5894] usb 4-1: USB disconnect, device number 9 [ 103.189098][ T5923] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 103.399388][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 103.453000][ T6373] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:21 [ 103.486207][ T5923] usb 3-1: config 0 has no interfaces? [ 103.525395][ T5923] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 103.576263][ T5923] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 103.612240][ T5923] usb 3-1: Manufacturer: syz [ 103.632274][ T10] usb 5-1: USB disconnect, device number 10 [ 103.676428][ T5923] usb 3-1: config 0 descriptor?? [ 103.822469][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.373124][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.475605][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.484100][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.563775][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.551979][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.121'. [ 105.578680][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 105.865788][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 106.009486][ T6438] bond1: Unable to set down delay as MII monitoring is disabled [ 106.024130][ T6438] bond1 (unregistering): Released all slaves [ 106.057019][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 106.089984][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 106.131087][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 106.165380][ T10] usb 5-1: config 220 has no interface number 2 [ 106.175681][ T5894] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.208799][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 106.258798][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 106.289662][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 106.313529][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 106.348438][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 106.368180][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 106.388348][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.411249][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.448271][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.464954][ T10] usb 5-1: Product: syz [ 106.474375][ T5894] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 106.500941][ T10] usb 5-1: Manufacturer: syz [ 106.514720][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.530567][ T10] usb 5-1: SerialNumber: syz [ 106.548346][ T5894] usb 4-1: config 0 descriptor?? [ 106.696014][ T5921] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 106.892820][ T5921] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 106.917276][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 106.923790][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.959751][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 106.962240][ T5921] usb 2-1: config 0 descriptor?? [ 106.997539][ T10] usb 5-1: selecting invalid altsetting 0 [ 107.046434][ T5894] zydacron 0003:13EC:0006.0005: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 107.099088][ T10] usb 5-1: selecting invalid altsetting 0 [ 107.125099][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 107.200249][ T5921] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 107.222357][ T991] usb 4-1: USB disconnect, device number 10 [ 107.239627][ T10] usb 5-1: USB disconnect, device number 11 [ 107.410406][ T5894] usb 3-1: USB disconnect, device number 11 [ 107.421713][ T5921] [drm:udl_init] *ERROR* Selecting channel failed [ 107.518990][ T5921] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 107.534193][ T5921] [drm] Initialized udl on minor 2 [ 107.583629][ T5921] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 107.611103][ T5921] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 107.651382][ T29] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 107.664856][ T5921] usb 2-1: USB disconnect, device number 9 [ 107.675158][ T29] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 107.825744][ T5894] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 107.997535][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.038518][ T5894] usb 3-1: not running at top speed; connect to a high speed hub [ 108.061192][ T5894] usb 3-1: config 2 has an invalid interface number: 171 but max is 0 [ 108.083356][ T5894] usb 3-1: config 2 has no interface number 0 [ 108.107535][ T5894] usb 3-1: config 2 interface 171 has no altsetting 0 [ 108.132938][ T5894] usb 3-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=c4.e0 [ 108.161880][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.190710][ T5894] usb 3-1: Product: syz [ 108.220522][ T5894] usb 3-1: Manufacturer: syz [ 108.241752][ T5894] usb 3-1: SerialNumber: syz [ 108.492542][ T6493] C: renamed from team_slave_0 (while UP) [ 108.503136][ T5894] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 108.524062][ T5894] gspca_sunplus: reg_w_riv err -71 [ 108.544061][ T6493] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 108.555768][ T5894] sunplus 3-1:2.171: probe with driver sunplus failed with error -71 [ 108.570516][ T6493] netlink: 152 bytes leftover after parsing attributes in process `syz.1.134'. [ 108.580463][ T5894] usb 3-1: USB disconnect, device number 12 [ 108.618529][ T6493] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 108.715438][ T5921] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 108.878779][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.912702][ T5921] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 75, changing to 7 [ 108.924294][ T5921] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 108.950217][ T5921] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 108.960551][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.968836][ T5921] usb 4-1: Product: syz [ 108.975638][ T5921] usb 4-1: Manufacturer: syz [ 108.982000][ T5921] usb 4-1: SerialNumber: syz [ 109.152180][ T5894] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 109.219614][ T6491] fuse: Unknown parameter 'user_i00000000000000000000' [ 109.292135][ T6514] binder: 6508:6514 ioctl c0306201 2000000004c0 returned -22 [ 109.336628][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 109.355404][ T991] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 109.357093][ T5894] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 109.404511][ T5894] usb 2-1: config 0 has no interface number 0 [ 109.421520][ T5894] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 109.426185][ T5894] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 109.426210][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.426229][ T5894] usb 2-1: Product: syz [ 109.426247][ T5894] usb 2-1: Manufacturer: syz [ 109.426281][ T5894] usb 2-1: SerialNumber: syz [ 109.428227][ T5894] usb 2-1: config 0 descriptor?? [ 109.540136][ T991] usb 3-1: Using ep0 maxpacket: 32 [ 109.619428][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.629172][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.647929][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.680359][ T991] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 109.702918][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.751190][ T991] usb 3-1: config 0 descriptor?? [ 110.206674][ T991] zydacron 0003:13EC:0006.0006: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 110.385428][ T29] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 110.432770][ T10] usb 3-1: USB disconnect, device number 13 [ 110.566938][ T29] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 110.585393][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.621590][ T29] usb 1-1: config 0 descriptor?? [ 111.219623][ T6524] program syz.0.142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.328186][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.347097][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.425515][ T991] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 111.547082][ T29] usb 1-1: string descriptor 0 read error: -71 [ 111.614357][ T991] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 111.643293][ T29] usb 1-1: USB disconnect, device number 4 [ 111.659877][ T5921] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 111.673601][ T5921] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 111.673941][ T991] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 111.746620][ T991] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 111.781546][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.816790][ T991] usb 3-1: Product: syz [ 111.837890][ T991] usb 3-1: Manufacturer: syz [ 111.850534][ T991] usb 3-1: SerialNumber: syz [ 111.875206][ T991] usb 3-1: config 0 descriptor?? [ 111.893552][ T991] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 112.006142][ T5921] usb 4-1: USB disconnect, device number 11 [ 112.109060][ T10] usb 2-1: USB disconnect, device number 10 [ 112.195742][ T5932] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 112.390540][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.409173][ T5932] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.425187][ T5932] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 112.438248][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.446834][ T5932] usb 5-1: Product: syz [ 112.457624][ T5932] usb 5-1: Manufacturer: syz [ 112.462710][ T5932] usb 5-1: SerialNumber: syz [ 112.497401][ T5932] usb 5-1: config 0 descriptor?? [ 112.515627][ T5921] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.615362][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 112.675348][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 112.685397][ T5901] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.697221][ T5921] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 112.709232][ T5921] usb 4-1: config 0 has no interface number 0 [ 112.719087][ T5921] usb 4-1: config 0 interface 184 has no altsetting 0 [ 112.735791][ T5921] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 112.748150][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.757173][ T5921] usb 4-1: Product: syz [ 112.761729][ T5921] usb 4-1: Manufacturer: syz [ 112.769567][ T5921] usb 4-1: SerialNumber: syz [ 112.781998][ T5921] usb 4-1: config 0 descriptor?? [ 112.787729][ T10] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 112.813015][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.837210][ T10] usb 2-1: Product: syz [ 112.846712][ T10] usb 2-1: Manufacturer: syz [ 112.856606][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 112.863401][ T10] usb 2-1: SerialNumber: syz [ 112.874993][ T5901] usb 1-1: config 1 has an invalid descriptor of length 194, skipping remainder of the config [ 112.896564][ T10] usb 2-1: config 0 descriptor?? [ 112.910271][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.932344][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 112.953139][ T5901] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.963687][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 112.996741][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.031303][ T5901] usb 1-1: Product: syz [ 113.047075][ T5901] usb 1-1: Manufacturer: syz [ 113.062289][ T5901] usb 1-1: SerialNumber: syz [ 113.101198][ T5901] usb 1-1: 0:2 : does not exist [ 113.133735][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 113.193934][ T5894] usb 3-1: USB disconnect, device number 14 [ 113.238484][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 113.253795][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 113.257485][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.300881][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 113.302649][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 113.322648][ T10] usb 2-1: media controller created [ 113.343757][ T5921] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 113.423135][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.467265][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.498384][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.581785][ T10] DVB: Unable to find symbol dib7000p_attach() [ 113.588528][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 113.624716][ T6562] fuse: Bad value for 'fd' [ 113.725672][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 113.744381][ T10] Registered IR keymap rc-empty [ 113.749914][ T10] dvb-usb: could not initialize remote control. [ 113.759195][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 113.800787][ T10] usb 2-1: USB disconnect, device number 11 [ 113.884842][ T6561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.151'. [ 113.925883][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 114.128162][ T6570] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 114.525414][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 114.685459][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 114.694138][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.705761][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.715880][ T10] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 114.725416][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.738429][ T10] usb 2-1: config 0 descriptor?? [ 114.806741][ T5921] usb 5-1: USB disconnect, device number 12 [ 114.883038][ T6576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.156'. [ 114.899044][ T6576] netlink: 120 bytes leftover after parsing attributes in process `syz.4.156'. [ 114.929191][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'. [ 114.938527][ T6576] netem: incorrect ge model size [ 114.945077][ T6576] netem: change failed [ 115.211427][ T10] zydacron 0003:13EC:0006.0007: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0 [ 115.380504][ T5894] usb 2-1: USB disconnect, device number 12 [ 115.430188][ T5932] usb 4-1: USB disconnect, device number 12 [ 115.505680][ T10] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 115.555565][ T5921] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 115.581585][ T5901] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 115.642374][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 115.655546][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 115.668425][ T5901] usb 1-1: USB disconnect, device number 5 [ 115.691289][ T10] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 115.705736][ T10] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 115.718392][ T5921] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 115.732938][ T10] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 115.738062][ T5921] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 115.753834][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.779501][ T5921] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 115.780157][ T10] usb 3-1: string descriptor 0 read error: -22 [ 115.793557][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.813290][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 115.830581][ T5921] usb 5-1: Product: syz [ 115.836617][ T5921] usb 5-1: Manufacturer: syz [ 115.839323][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.841568][ T5921] usb 5-1: SerialNumber: syz [ 115.855716][ T5932] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 115.870962][ T5921] usb 5-1: config 0 descriptor?? [ 115.884336][ T10] adutux 3-1:168.0: interrupt endpoints not found [ 115.898526][ T5921] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 116.015390][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 116.028090][ T5932] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.036681][ T5932] usb 4-1: config 0 has no interface number 0 [ 116.045495][ T5932] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 116.054601][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.066063][ T5932] usb 4-1: Product: syz [ 116.070465][ T5932] usb 4-1: Manufacturer: syz [ 116.075154][ T5932] usb 4-1: SerialNumber: syz [ 116.089980][ T5932] usb 4-1: config 0 descriptor?? [ 116.118418][ T5932] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 116.120060][ T6589] input: syz0 as /devices/virtual/input/input10 [ 116.127330][ T5932] usb 4-1: selecting invalid altsetting 1 [ 116.127350][ T5932] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 116.180715][ T10] usb 3-1: USB disconnect, device number 15 [ 116.214276][ T5932] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 116.248300][ T5932] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 116.265784][ T5932] usb 4-1: media controller created [ 116.333509][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.735389][ T10] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 116.900007][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.928212][ T10] usb 1-1: config 16 has an invalid interface number: 8 but max is 0 [ 116.953117][ T10] usb 1-1: config 16 has no interface number 0 [ 116.976349][ T10] usb 1-1: config 16 interface 8 altsetting 127 endpoint 0xA has invalid maxpacket 1024, setting to 8 [ 117.010943][ T10] usb 1-1: config 16 interface 8 has no altsetting 0 [ 117.041549][ T10] usb 1-1: string descriptor 0 read error: -22 [ 117.062761][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=5008, bcdDevice=1d.48 [ 117.095454][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.142052][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.184886][ T5921] usb 5-1: USB disconnect, device number 13 [ 117.307673][ T6629] xt_policy: output policy not valid in PREROUTING and INPUT [ 117.386703][ T6594] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 117.409234][ T6633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.428198][ T10] snd-usb-audio 1-1:16.8: probe with driver snd-usb-audio failed with error -2 [ 117.454216][ T5932] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 117.466012][ T6633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.485045][ T5932] zl10353_read_register: readreg error (reg=127, ret==-71) [ 117.500259][ T10] usb 1-1: USB disconnect, device number 6 [ 117.531158][ T5932] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 117.660950][ T6641] netlink: 48 bytes leftover after parsing attributes in process `syz.2.173'. [ 117.714609][ T5932] usb 4-1: USB disconnect, device number 13 [ 117.855488][ T6646] FAULT_INJECTION: forcing a failure. [ 117.855488][ T6646] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.880444][ T6646] CPU: 1 UID: 0 PID: 6646 Comm: syz.4.176 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.880474][ T6646] Tainted: [L]=SOFTLOCKUP [ 117.880481][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.880499][ T6646] Call Trace: [ 117.880509][ T6646] [ 117.880517][ T6646] dump_stack_lvl+0xe8/0x150 [ 117.880550][ T6646] should_fail_ex+0x412/0x560 [ 117.880580][ T6646] _copy_from_user+0x2d/0xb0 [ 117.880600][ T6646] ___sys_sendmsg+0x1c6/0x360 [ 117.880624][ T6646] ? __lock_acquire+0x6b5/0x2cf0 [ 117.880654][ T6646] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.880708][ T6646] ? __fget_files+0x2a/0x420 [ 117.880725][ T6646] ? __fget_files+0x3a0/0x420 [ 117.880750][ T6646] __x64_sys_sendmsg+0x1bd/0x2a0 [ 117.880774][ T6646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.880805][ T6646] ? __pfx_ksys_write+0x10/0x10 [ 117.880832][ T6646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.880851][ T6646] do_syscall_64+0x15f/0xf80 [ 117.880875][ T6646] ? trace_irq_disable+0x3b/0x140 [ 117.880901][ T6646] ? clear_bhb_loop+0x40/0x90 [ 117.880923][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.880940][ T6646] RIP: 0033:0x7f65b639c819 [ 117.880962][ T6646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.880976][ T6646] RSP: 002b:00007f65b72b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.880996][ T6646] RAX: ffffffffffffffda RBX: 00007f65b6615fa0 RCX: 00007f65b639c819 [ 117.881009][ T6646] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000003 [ 117.881021][ T6646] RBP: 00007f65b72b0090 R08: 0000000000000000 R09: 0000000000000000 [ 117.881032][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.881042][ T6646] R13: 00007f65b6616038 R14: 00007f65b6615fa0 R15: 00007f65b673fa48 [ 117.881071][ T6646] [ 118.555360][ T5894] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 118.746790][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 118.760417][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.786268][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.835661][ T5894] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 118.899819][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.101386][ T5894] usb 5-1: config 0 descriptor?? [ 119.600368][ T6673] vivid-000: disconnect [ 119.651442][ T6670] vivid-000: reconnect [ 119.685038][ T5894] zydacron 0003:13EC:0006.0008: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 119.768248][ T6675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.183'. [ 119.809125][ T6675] netlink: 45 bytes leftover after parsing attributes in process `syz.3.183'. [ 119.894169][ T5901] usb 5-1: USB disconnect, device number 14 [ 120.269991][ T6695] FAULT_INJECTION: forcing a failure. [ 120.269991][ T6695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.284347][ T6695] CPU: 1 UID: 0 PID: 6695 Comm: syz.3.188 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.284376][ T6695] Tainted: [L]=SOFTLOCKUP [ 120.284383][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.284393][ T6695] Call Trace: [ 120.284401][ T6695] [ 120.284409][ T6695] dump_stack_lvl+0xe8/0x150 [ 120.284452][ T6695] should_fail_ex+0x412/0x560 [ 120.284481][ T6695] _copy_from_user+0x2d/0xb0 [ 120.284500][ T6695] __copy_msghdr+0x3c5/0x5b0 [ 120.284527][ T6695] ___sys_sendmsg+0x213/0x360 [ 120.284548][ T6695] ? __lock_acquire+0x6b5/0x2cf0 [ 120.284575][ T6695] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.284634][ T6695] ? __fget_files+0x2a/0x420 [ 120.284652][ T6695] ? __fget_files+0x3a0/0x420 [ 120.284680][ T6695] __x64_sys_sendmsg+0x1bd/0x2a0 [ 120.284706][ T6695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.284739][ T6695] ? __pfx_ksys_write+0x10/0x10 [ 120.284769][ T6695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.284789][ T6695] do_syscall_64+0x15f/0xf80 [ 120.284814][ T6695] ? trace_irq_disable+0x3b/0x140 [ 120.284836][ T6695] ? clear_bhb_loop+0x40/0x90 [ 120.284856][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.284872][ T6695] RIP: 0033:0x7f6037f9c819 [ 120.284892][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.284906][ T6695] RSP: 002b:00007f6038e6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.284931][ T6695] RAX: ffffffffffffffda RBX: 00007f6038215fa0 RCX: 00007f6037f9c819 [ 120.284943][ T6695] RDX: 0000000020048884 RSI: 0000200000000780 RDI: 0000000000000003 [ 120.284953][ T6695] RBP: 00007f6038e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 120.284964][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.284974][ T6695] R13: 00007f6038216038 R14: 00007f6038215fa0 R15: 00007f603833fa48 [ 120.285002][ T6695] [ 120.545396][ T5901] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 120.732412][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.748591][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 120.753311][ T5901] usb 3-1: config 208 has an invalid interface number: 119 but max is 0 [ 120.809969][ T5901] usb 3-1: config 208 has no interface number 0 [ 120.826317][ T5901] usb 3-1: config 208 interface 119 has no altsetting 0 [ 120.839154][ T5901] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 120.860618][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.877517][ T5901] usb 3-1: Product: syz [ 120.881861][ T5901] usb 3-1: Manufacturer: syz [ 120.887463][ T5901] usb 3-1: SerialNumber: syz [ 120.896211][ T5923] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 121.055393][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 121.063757][ T5923] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.075215][ T5923] usb 5-1: config 0 has no interface number 0 [ 121.114535][ T5923] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 121.150963][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.180926][ T5923] usb 5-1: Product: syz [ 121.197893][ T6719] process 'syz.2.184' launched '/dev/fd/5/./file1' with NULL argv: empty string added [ 121.211261][ T5923] usb 5-1: Manufacturer: syz [ 121.223040][ T5923] usb 5-1: SerialNumber: syz [ 121.258000][ T5923] usb 5-1: config 0 descriptor?? [ 121.281064][ T5923] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 121.298809][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.311761][ T5923] usb 5-1: selecting invalid altsetting 1 [ 121.323884][ T5923] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 121.332155][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.346914][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 121.378687][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.389597][ T5923] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.429070][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.443459][ T5923] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 121.479557][ T5923] usb 5-1: media controller created [ 121.516419][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 121.528650][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.539631][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.561474][ T10] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 121.603318][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.658665][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 121.682631][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.693190][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.737191][ T10] usb 2-1: Product: syz [ 121.741487][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.754141][ T10] usb 2-1: Manufacturer: syz [ 121.775602][ T10] usb 2-1: SerialNumber: syz [ 121.869383][ T10] usb 2-1: config 0 descriptor?? [ 121.886311][ T6728] vivid-000: disconnect [ 121.895045][ T6727] vivid-000: reconnect [ 122.225369][ T5894] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.287128][ T10] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 122.342531][ T6733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.200'. [ 122.375391][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 122.397884][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.416152][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.426470][ T5894] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 122.435773][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.447368][ T5894] usb 1-1: config 0 descriptor?? [ 122.495931][ T10] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 122.506717][ T6699] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 122.516092][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 122.525716][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 122.533008][ T5923] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 122.540125][ T5923] zl10353_read_register: readreg error (reg=127, ret==-32) [ 122.556548][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.201'. [ 122.569466][ T5923] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 122.641098][ T5923] usb 5-1: USB disconnect, device number 15 [ 122.880216][ T5894] zydacron 0003:13EC:0006.0009: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.0-1/input0 [ 123.054654][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.063963][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.086773][ T5901] ums-alauda 3-1:208.119: USB Mass Storage device detected [ 123.114525][ T5921] usb 1-1: USB disconnect, device number 7 [ 123.188433][ T5901] usb 3-1: USB disconnect, device number 16 [ 123.223683][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 123.280604][ T6747] netlink: 52 bytes leftover after parsing attributes in process `syz.2.204'. [ 123.481183][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 123.694270][ T6765] batadv_slave_1: entered promiscuous mode [ 123.703645][ T6765] netlink: 200 bytes leftover after parsing attributes in process `syz.2.210'. [ 123.713609][ T5921] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 123.722683][ T6766] vivid-000: disconnect [ 123.736680][ T6764] batadv_slave_1: left promiscuous mode [ 123.765016][ T6761] vivid-000: reconnect [ 123.875425][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 123.894819][ T5921] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.920716][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.934949][ T5921] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 123.948197][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.961873][ T5921] usb 4-1: config 0 descriptor?? [ 123.989341][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 124.178934][ T29] usb 2-1: USB disconnect, device number 14 [ 124.191094][ T5894] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.234283][ T6786] fuse: Unknown parameter 'ÿÿ' [ 124.331243][ T6795] FAULT_INJECTION: forcing a failure. [ 124.331243][ T6795] name failslab, interval 1, probability 0, space 0, times 1 [ 124.344920][ T6795] CPU: 1 UID: 0 PID: 6795 Comm: syz.4.220 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.344937][ T6795] Tainted: [L]=SOFTLOCKUP [ 124.344941][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 124.344948][ T6795] Call Trace: [ 124.344954][ T6795] [ 124.344959][ T6795] dump_stack_lvl+0xe8/0x150 [ 124.344980][ T6795] should_fail_ex+0x412/0x560 [ 124.344998][ T6795] should_failslab+0xa8/0x100 [ 124.345012][ T6795] ? dst_alloc+0x105/0x170 [ 124.345026][ T6795] kmem_cache_alloc_noprof+0x87/0x650 [ 124.345038][ T6795] ? ip6_pol_route+0x160/0x13d0 [ 124.345055][ T6795] ? __pfx_ip6_dst_gc+0x10/0x10 [ 124.345070][ T6795] dst_alloc+0x105/0x170 [ 124.345086][ T6795] ip6_pol_route+0xafb/0x13d0 [ 124.345101][ T6795] ? ip6_pol_route+0x160/0x13d0 [ 124.345117][ T6795] ? __pfx_ip6_pol_route+0x10/0x10 [ 124.345134][ T6795] ? is_bpf_text_address+0x26/0x2b0 [ 124.345153][ T6795] fib6_rule_action+0x265/0xc00 [ 124.345170][ T6795] ? fib_rules_lookup+0x9b/0xea0 [ 124.345183][ T6795] ? __pfx_fib6_rule_action+0x10/0x10 [ 124.345199][ T6795] ? kernel_text_address+0xa5/0xe0 [ 124.345212][ T6795] ? __kernel_text_address+0xd/0x30 [ 124.345223][ T6795] ? fib6_rule_match+0x79a/0xa80 [ 124.345237][ T6795] ? __pfx_fib6_rule_action+0x10/0x10 [ 124.345262][ T6795] fib_rules_lookup+0x768/0xea0 [ 124.345283][ T6795] ? fib_rules_lookup+0x9b/0xea0 [ 124.345309][ T6795] ? __pfx_fib_rules_lookup+0x10/0x10 [ 124.345329][ T6795] ? l3mdev_update_flow+0x29/0x640 [ 124.345345][ T6795] ? l3mdev_update_flow+0x4d1/0x640 [ 124.345361][ T6795] ? l3mdev_update_flow+0x29/0x640 [ 124.345377][ T6795] fib6_rule_lookup+0x1a0/0x730 [ 124.345391][ T6795] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 124.345401][ T6795] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 124.345419][ T6795] ? ip6_route_output_flags+0x2e/0x5d0 [ 124.345429][ T6795] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 124.345441][ T6795] ? dev_get_by_index_rcu+0xf4/0x110 [ 124.345459][ T6795] ip6_route_output_flags+0x364/0x5d0 [ 124.345469][ T6795] ? ip6_route_output_flags+0x2e/0x5d0 [ 124.345480][ T6795] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 124.345493][ T6795] ? bpf_lsm_capable+0x9/0x20 [ 124.345511][ T6795] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 124.345522][ T6795] ? sk_dst_check+0x25/0x480 [ 124.345535][ T6795] ? sk_dst_check+0x25/0x480 [ 124.345546][ T6795] ? sk_dst_check+0x25/0x480 [ 124.345555][ T6795] ? sk_dst_check+0x30e/0x480 [ 124.345566][ T6795] ip6_sk_dst_lookup_flow+0x765/0xa20 [ 124.345579][ T6795] ? udpv6_sendmsg+0x1864/0x25c0 [ 124.345592][ T6795] udpv6_sendmsg+0x1a69/0x25c0 [ 124.345609][ T6795] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 124.345617][ T6795] ? udp_lib_get_port+0x177a/0x1c60 [ 124.345635][ T6795] ? ip6_datagram_release_cb+0x7c/0x550 [ 124.345654][ T6795] ? inet_send_prepare+0x1b9/0x270 [ 124.345673][ T6795] ? inet_send_prepare+0x1b9/0x270 [ 124.345688][ T6795] ? inet_send_prepare+0x1b9/0x270 [ 124.345700][ T6795] ? __local_bh_enable_ip+0xd0/0x130 [ 124.345715][ T6795] ? inet_send_prepare+0x1b9/0x270 [ 124.345729][ T6795] ? inet6_sendmsg+0xe4/0x120 [ 124.345744][ T6795] ____sys_sendmsg+0x5c7/0x9f0 [ 124.345761][ T6795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.345778][ T6795] ? import_iovec+0x73/0xa0 [ 124.345790][ T6795] ___sys_sendmsg+0x2a5/0x360 [ 124.345802][ T6795] ? __lock_acquire+0x6b5/0x2cf0 [ 124.345819][ T6795] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.345849][ T6795] ? __fget_files+0x2a/0x420 [ 124.345858][ T6795] ? __fget_files+0x3a0/0x420 [ 124.345873][ T6795] __x64_sys_sendmsg+0x1bd/0x2a0 [ 124.345888][ T6795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.345905][ T6795] ? __pfx_ksys_write+0x10/0x10 [ 124.345921][ T6795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.345932][ T6795] do_syscall_64+0x15f/0xf80 [ 124.345948][ T6795] ? clear_bhb_loop+0x40/0x90 [ 124.345961][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.345971][ T6795] RIP: 0033:0x7f65b639c819 [ 124.345982][ T6795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.345991][ T6795] RSP: 002b:00007f65b72b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.346003][ T6795] RAX: ffffffffffffffda RBX: 00007f65b6615fa0 RCX: 00007f65b639c819 [ 124.346010][ T6795] RDX: 0000000020048884 RSI: 0000200000000780 RDI: 0000000000000003 [ 124.346016][ T6795] RBP: 00007f65b72b0090 R08: 0000000000000000 R09: 0000000000000000 [ 124.346022][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.346028][ T6795] R13: 00007f65b6616038 R14: 00007f65b6615fa0 R15: 00007f65b673fa48 [ 124.346043][ T6795] [ 124.815333][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 124.827628][ T5894] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.838545][ T5894] usb 1-1: config 0 has no interface number 0 [ 124.853792][ T5894] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 124.863025][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.871123][ T5894] usb 1-1: Product: syz [ 124.875440][ T5894] usb 1-1: Manufacturer: syz [ 124.880140][ T5894] usb 1-1: SerialNumber: syz [ 124.900843][ T6799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.915015][ T5894] usb 1-1: config 0 descriptor?? [ 124.924603][ T5894] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 124.933441][ T5894] usb 1-1: selecting invalid altsetting 1 [ 124.939206][ T5894] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 124.950239][ T5894] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 124.962277][ T5894] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 124.970604][ T5894] usb 1-1: media controller created [ 124.983494][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.378681][ T6803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.219'. [ 125.663421][ T6808] vivid-000: disconnect [ 125.669307][ T6806] vivid-000: reconnect [ 125.885507][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 126.025608][ T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 126.045329][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 126.063792][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.099146][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.115827][ T5894] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 126.124900][ T5894] zl10353_read_register: readreg error (reg=127, ret==-110) [ 126.149323][ T10] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 126.149376][ T6779] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 126.192004][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.205402][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 126.229324][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.240325][ T10] usb 3-1: config 0 descriptor?? [ 126.265329][ T29] usb 5-1: config 0 has no interfaces? [ 126.290731][ T29] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 126.306406][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.324949][ T5894] usb 1-1: USB disconnect, device number 8 [ 126.379685][ T29] usb 5-1: config 0 descriptor?? [ 126.793573][ T10] zydacron 0003:13EC:0006.000A: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 126.977355][ T6825] random: crng reseeded on system resumption [ 127.004131][ T29] usb 3-1: USB disconnect, device number 17 [ 127.129842][ T5894] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 127.202942][ T5921] usbhid 4-1:0.0: can't add hid device: -71 [ 127.231106][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 127.274205][ T6823] fido_id[6823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 127.300037][ T5921] usb 4-1: USB disconnect, device number 14 [ 127.370627][ T5894] usb 2-1: config index 0 descriptor too short (expected 90, got 45) [ 127.406537][ T5894] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 127.442247][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.468506][ T5894] usb 2-1: Product: syz [ 127.480503][ T5894] usb 2-1: Manufacturer: syz [ 127.500969][ T5894] usb 2-1: SerialNumber: syz [ 127.967579][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 127.995638][ T6844] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.112833][ T6850] vivid-000: disconnect [ 128.214835][ T6845] vivid-000: reconnect [ 128.415563][ T5932] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.595371][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 128.620501][ T5932] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 128.657919][ T5932] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 128.691537][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 128.729676][ T5932] usb 1-1: config 1 has no interface number 0 [ 128.753264][ T29] usb 5-1: USB disconnect, device number 16 [ 128.777313][ T5932] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.815322][ T5921] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 128.859134][ T5932] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 128.927467][ T5894] rtl8150 2-1:1.0: couldn't reset the device [ 128.944602][ T5932] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 128.965792][ T5894] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 128.999984][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.025443][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 129.052548][ T5921] usb 3-1: config 0 has no interfaces? [ 129.084187][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 129.122021][ T5921] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 129.142065][ T5932] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 129.183489][ T5921] usb 3-1: Manufacturer: syz [ 129.243043][ T5921] usb 3-1: config 0 descriptor?? [ 129.315727][ T5932] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 129.724548][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.770450][ T5932] usb 1-1: USB disconnect, device number 9 [ 129.784861][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.819271][ T5932] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 130.131089][ T5921] usb 2-1: USB disconnect, device number 15 [ 130.228420][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 130.538502][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 130.715497][ T5932] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 130.843948][ T6893] vivid-000: disconnect [ 130.879210][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.891116][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.904855][ T5932] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 130.914555][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.928424][ T6884] vivid-000: reconnect [ 130.937884][ T5932] usb 4-1: config 0 descriptor?? [ 130.965339][ T5921] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 131.059886][ T6895] FAULT_INJECTION: forcing a failure. [ 131.059886][ T6895] name failslab, interval 1, probability 0, space 0, times 0 [ 131.073525][ T6895] CPU: 0 UID: 0 PID: 6895 Comm: syz.4.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.073552][ T6895] Tainted: [L]=SOFTLOCKUP [ 131.073559][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 131.073568][ T6895] Call Trace: [ 131.073575][ T6895] [ 131.073582][ T6895] dump_stack_lvl+0xe8/0x150 [ 131.073618][ T6895] should_fail_ex+0x412/0x560 [ 131.073648][ T6895] should_failslab+0xa8/0x100 [ 131.073673][ T6895] __kmalloc_noprof+0xe8/0x760 [ 131.073693][ T6895] ? irqentry_exit+0x218/0x730 [ 131.073721][ T6895] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 131.073754][ T6895] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 131.073788][ T6895] genl_family_rcv_msg_doit+0xd9/0x330 [ 131.073821][ T6895] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 131.073855][ T6895] ? apparmor_capable+0x126/0x170 [ 131.073877][ T6895] ? bpf_lsm_capable+0x9/0x20 [ 131.073901][ T6895] ? security_capable+0x7e/0x2c0 [ 131.073932][ T6895] genl_rcv_msg+0x61c/0x7a0 [ 131.073964][ T6895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.073988][ T6895] ? __pfx_batadv_pre_doit+0x10/0x10 [ 131.074008][ T6895] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 131.074030][ T6895] ? __pfx_batadv_post_doit+0x10/0x10 [ 131.074053][ T6895] ? __pfx_ref_tracker_free+0x10/0x10 [ 131.074090][ T6895] netlink_rcv_skb+0x232/0x4b0 [ 131.074112][ T6895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.074146][ T6895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.074184][ T6895] ? down_read+0x270/0x2e0 [ 131.074200][ T6895] ? genl_rcv+0xd/0x40 [ 131.074226][ T6895] genl_rcv+0x28/0x40 [ 131.074249][ T6895] netlink_unicast+0x75c/0x8e0 [ 131.074280][ T6895] netlink_sendmsg+0x813/0xb40 [ 131.074310][ T6895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.074335][ T6895] ? aa_sock_msg_perm+0xf1/0x1b0 [ 131.074363][ T6895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.074387][ T6895] ____sys_sendmsg+0x972/0x9f0 [ 131.074410][ T6895] ? __might_fault+0xaf/0x130 [ 131.074436][ T6895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.074468][ T6895] ? import_iovec+0x73/0xa0 [ 131.074490][ T6895] ___sys_sendmsg+0x2a5/0x360 [ 131.074512][ T6895] ? __lock_acquire+0x6b5/0x2cf0 [ 131.074542][ T6895] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.074590][ T6895] ? __fget_files+0x2a/0x420 [ 131.074608][ T6895] ? __fget_files+0x3a0/0x420 [ 131.074636][ T6895] __x64_sys_sendmsg+0x1bd/0x2a0 [ 131.074662][ T6895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.074693][ T6895] ? __pfx_ksys_write+0x10/0x10 [ 131.074724][ T6895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.074745][ T6895] do_syscall_64+0x15f/0xf80 [ 131.074772][ T6895] ? clear_bhb_loop+0x40/0x90 [ 131.074793][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.074810][ T6895] RIP: 0033:0x7f65b639c819 [ 131.074827][ T6895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.074842][ T6895] RSP: 002b:00007f65b72b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.074861][ T6895] RAX: ffffffffffffffda RBX: 00007f65b6615fa0 RCX: 00007f65b639c819 [ 131.074874][ T6895] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000003 [ 131.074885][ T6895] RBP: 00007f65b72b0090 R08: 0000000000000000 R09: 0000000000000000 [ 131.074896][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.074907][ T6895] R13: 00007f65b6616038 R14: 00007f65b6615fa0 R15: 00007f65b673fa48 [ 131.074937][ T6895] [ 131.437816][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.446924][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.489444][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.509604][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.579134][ T5921] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.619913][ T6901] binder: 6900:6901 ioctl c0205866 200000000600 returned -22 [ 131.634092][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.676029][ T5921] usb 2-1: SerialNumber: syz [ 131.703133][ T5932] aquacomputer_d5next 0003:0C70:F014.000B: unknown main item tag 0x0 [ 131.711606][ T5932] aquacomputer_d5next 0003:0C70:F014.000B: unknown main item tag 0x0 [ 131.720029][ T5932] aquacomputer_d5next 0003:0C70:F014.000B: unknown main item tag 0x0 [ 131.728523][ T5932] aquacomputer_d5next 0003:0C70:F014.000B: unknown main item tag 0x0 [ 131.737874][ T5932] aquacomputer_d5next 0003:0C70:F014.000B: unknown main item tag 0x0 [ 131.746347][ T5932] aquacomputer_d5next 0003:0C70:F014.000B: unknown main item tag 0x0 [ 131.754442][ T5932] aquacomputer_d5next 0003:0C70:F014.000B: unknown main item tag 0x0 [ 131.763069][ T5932] aquacomputer_d5next 0003:0C70:F014.000B: unknown main item tag 0x0 [ 131.771458][ T5932] aquacomputer_d5next 0003:0C70:F014.000B: unknown main item tag 0x0 [ 131.785654][ T5932] aquacomputer_d5next 0003:0C70:F014.000B: unknown main item tag 0x0 [ 131.817536][ T5932] aquacomputer_d5next 0003:0C70:F014.000B: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 131.939910][ T5932] usb 4-1: USB disconnect, device number 15 [ 131.943030][ T5921] usb 2-1: 0:2 : does not exist [ 132.009078][ T29] usb 3-1: USB disconnect, device number 18 [ 132.031888][ T6910] fido_id[6910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 132.144123][ T5921] usb 2-1: USB disconnect, device number 16 [ 132.320079][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.494515][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 132.576931][ T5932] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 132.635964][ T5901] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 132.725006][ T6924] vivid-000: disconnect [ 132.730390][ T6923] vivid-000: reconnect [ 132.758684][ T5932] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.780766][ T5932] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.800319][ T5901] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 132.811403][ T5932] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.823713][ T5901] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 132.838675][ T5932] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 132.839049][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.848620][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.862534][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.864054][ T5901] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 132.880146][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.890323][ T6916] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.912681][ T5901] usb 3-1: Product: syz [ 132.920200][ T5901] usb 3-1: Manufacturer: syz [ 132.924919][ T5901] usb 3-1: SerialNumber: syz [ 132.938330][ T5901] usb 3-1: config 0 descriptor?? [ 132.950735][ T5901] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 133.665380][ T29] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 133.689696][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 133.838980][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.849914][ T29] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.873803][ T29] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 133.896725][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.921506][ T29] usb 1-1: Product: syz [ 133.935739][ T29] usb 1-1: Manufacturer: syz [ 133.951772][ T29] usb 1-1: SerialNumber: syz [ 133.997669][ T29] usb 1-1: config 0 descriptor?? [ 134.187609][ T5921] usb 3-1: USB disconnect, device number 19 [ 134.807957][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 135.135303][ T6963] vivid-000: disconnect [ 135.150548][ T6962] vivid-000: reconnect [ 135.242424][ T6968] syz.3.271 uses obsolete (PF_INET,SOCK_PACKET) [ 135.495341][ T29] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 135.591446][ T5932] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 135.603067][ T5932] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input11 [ 135.659193][ T5932] usb 5-1: USB disconnect, device number 17 [ 135.665180][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 135.675997][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.700491][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.717079][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.731420][ T29] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 135.741930][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.755911][ T29] usb 4-1: config 0 descriptor?? [ 136.077490][ T5932] usb 4-1: USB disconnect, device number 16 [ 136.247640][ T5921] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 136.257927][ T29] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 136.375648][ T5932] usb 1-1: USB disconnect, device number 10 [ 136.406785][ T29] usb 2-1: device descriptor read/64, error -71 [ 136.453479][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.483981][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 136.484058][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.516598][ T5921] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 136.545671][ T5921] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 136.559977][ T5921] usb 3-1: Manufacturer: syz [ 136.592995][ T5921] usb 3-1: config 0 descriptor?? [ 136.651439][ T6991] vivid-000: disconnect [ 136.663667][ T6990] vivid-000: reconnect [ 136.677323][ T29] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 136.829230][ T29] usb 2-1: device descriptor read/64, error -71 [ 136.865375][ T5894] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 136.966741][ T29] usb usb2-port1: attempt power cycle [ 137.006767][ T5894] usb 5-1: device descriptor read/64, error -71 [ 137.051577][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 137.062753][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.289'. [ 137.257738][ T5894] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 137.315365][ T29] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 137.337050][ T29] usb 2-1: device descriptor read/8, error -71 [ 137.395372][ T5894] usb 5-1: device descriptor read/64, error -71 [ 137.433870][ T5921] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input12 [ 137.517407][ T5894] usb usb5-port1: attempt power cycle [ 137.533714][ T5921] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input13 [ 137.567150][ T5921] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input14 [ 137.585597][ T29] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 137.616804][ T29] usb 2-1: device descriptor read/8, error -71 [ 137.623196][ T5921] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input15 [ 137.684913][ T5921] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 137.737610][ T5921] usb 3-1: USB disconnect, device number 20 [ 137.758465][ T29] usb usb2-port1: unable to enumerate USB device [ 137.885903][ T5894] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 137.922581][ T5894] usb 5-1: device descriptor read/8, error -71 [ 137.985120][ T7027] vivid-000: disconnect [ 138.056525][ T7024] fido_id[7024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 138.105067][ T7020] vivid-000: reconnect [ 138.198267][ T5894] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 138.226712][ T5894] usb 5-1: device descriptor read/8, error -71 [ 138.346342][ T10] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 138.347666][ T5894] usb usb5-port1: unable to enumerate USB device [ 138.539474][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 138.562335][ T10] usb 4-1: can't read configurations, error -71 [ 138.875388][ T5894] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 139.055451][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 139.093227][ T5894] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.135152][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 139.151813][ T5894] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 139.173824][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.197533][ T5894] usb 3-1: config 0 descriptor?? [ 139.643823][ T7060] vivid-000: disconnect [ 139.664993][ T7054] vivid-000: reconnect [ 140.354767][ T7079] netlink: 'syz.0.309': attribute type 10 has an invalid length. [ 140.927425][ T30] audit: type=1326 audit(1776674685.067:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 140.999208][ T30] audit: type=1326 audit(1776674685.067:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 141.069820][ T7094] binder: 7087:7094 ioctl c0306201 0 returned -14 [ 141.093544][ T30] audit: type=1326 audit(1776674685.077:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 141.201617][ T30] audit: type=1326 audit(1776674685.077:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 141.275598][ T30] audit: type=1326 audit(1776674685.077:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 141.367278][ T30] audit: type=1326 audit(1776674685.077:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 141.447476][ T30] audit: type=1326 audit(1776674685.077:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 141.541274][ T30] audit: type=1326 audit(1776674685.077:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 141.621630][ T30] audit: type=1326 audit(1776674685.077:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 141.702298][ T30] audit: type=1326 audit(1776674685.077:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 142.789081][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 142.855414][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 142.922917][ T5894] usb 3-1: USB disconnect, device number 21 [ 143.238012][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.246345][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.476458][ T7112] bridge_slave_0: left allmulticast mode [ 143.482726][ T7112] bridge_slave_0: left promiscuous mode [ 143.491813][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.516988][ T7112] bridge_slave_1: left allmulticast mode [ 143.522652][ T7112] bridge_slave_1: left promiscuous mode [ 143.530024][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.553553][ T7112] bond0: (slave bond_slave_0): Releasing backup interface [ 143.576803][ T7112] bond0: (slave bond_slave_1): Releasing backup interface [ 143.634416][ T7112] team0: Port device team_slave_0 removed [ 143.689580][ T7112] team0: Port device team_slave_1 removed [ 143.717298][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.753601][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.813482][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.836731][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.857482][ T7112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.878678][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 143.999393][ T7125] FAULT_INJECTION: forcing a failure. [ 143.999393][ T7125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.017023][ T7125] CPU: 0 UID: 0 PID: 7125 Comm: syz.1.321 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.017052][ T7125] Tainted: [L]=SOFTLOCKUP [ 144.017058][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 144.017068][ T7125] Call Trace: [ 144.017075][ T7125] [ 144.017083][ T7125] dump_stack_lvl+0xe8/0x150 [ 144.017115][ T7125] should_fail_ex+0x412/0x560 [ 144.017144][ T7125] _copy_to_user+0x31/0xb0 [ 144.017166][ T7125] simple_read_from_buffer+0xe1/0x170 [ 144.017189][ T7125] proc_fail_nth_read+0x1bb/0x230 [ 144.017212][ T7125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.017236][ T7125] ? rw_verify_area+0x2a6/0x4d0 [ 144.017256][ T7125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.017277][ T7125] vfs_read+0x20c/0xa70 [ 144.017302][ T7125] ? __pfx___mutex_lock+0x10/0x10 [ 144.017322][ T7125] ? __pfx_vfs_read+0x10/0x10 [ 144.017345][ T7125] ? __fget_files+0x2a/0x420 [ 144.017367][ T7125] ? __fget_files+0x3a0/0x420 [ 144.017383][ T7125] ? __fget_files+0x2a/0x420 [ 144.017410][ T7125] ksys_read+0x150/0x270 [ 144.017433][ T7125] ? __pfx_ksys_read+0x10/0x10 [ 144.017462][ T7125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.017482][ T7125] do_syscall_64+0x15f/0xf80 [ 144.017507][ T7125] ? trace_irq_disable+0x3b/0x140 [ 144.017530][ T7125] ? clear_bhb_loop+0x40/0x90 [ 144.017553][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.017571][ T7125] RIP: 0033:0x7f448b95d04e [ 144.017588][ T7125] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.017603][ T7125] RSP: 002b:00007f448c89ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.017622][ T7125] RAX: ffffffffffffffda RBX: 00007f448c8a06c0 RCX: 00007f448b95d04e [ 144.017635][ T7125] RDX: 000000000000000f RSI: 00007f448c8a00a0 RDI: 0000000000000004 [ 144.017646][ T7125] RBP: 00007f448c8a0090 R08: 0000000000000000 R09: 0000000000000000 [ 144.017658][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.017668][ T7125] R13: 00007f448bc16038 R14: 00007f448bc15fa0 R15: 00007f448bd3fa48 [ 144.017712][ T7125] [ 144.250478][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 144.386228][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 144.408849][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 144.418056][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.426126][ T10] usb 5-1: Product: syz [ 144.430295][ T10] usb 5-1: Manufacturer: syz [ 144.434895][ T10] usb 5-1: SerialNumber: syz [ 144.442525][ T10] usb 5-1: config 0 descriptor?? [ 144.521178][ T7136] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 144.551814][ T7136] netlink: 56 bytes leftover after parsing attributes in process `syz.0.322'. [ 144.615723][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.627579][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.641192][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.716313][ T9] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 144.749986][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.752713][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 144.842139][ T9] usb 3-1: config 0 descriptor?? [ 145.188207][ T9] usb 3-1: USB disconnect, device number 22 [ 145.226767][ T5901] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 145.386223][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 145.398401][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.426858][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.456830][ T5901] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 145.466067][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.474231][ T10] usb 5-1: non-Atmel transceiver xxxx9700 [ 145.492113][ T5901] usb 2-1: config 0 descriptor?? [ 145.681223][ T10] usb 5-1: Firmware version (0.0) predates our first public release. [ 145.702730][ T10] usb 5-1: Please update to version 0.2 or newer [ 145.733298][ T10] usb 5-1: atusb_probe: initialization failed, error = -19 [ 145.775134][ T10] usb 5-1: USB disconnect, device number 22 [ 145.848594][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 145.928428][ T5901] zydacron 0003:13EC:0006.000D: item fetching failed at offset 0/2 [ 145.965737][ T5901] zydacron 0003:13EC:0006.000D: parse failed [ 145.975458][ T5894] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 145.992245][ T5901] zydacron 0003:13EC:0006.000D: probe with driver zydacron failed with error -22 [ 146.125330][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 146.132159][ T5894] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.143196][ T5894] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.150954][ T5894] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 146.160765][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.168923][ T5902] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 146.191011][ T5894] usb 4-1: config 0 descriptor?? [ 146.335310][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 146.375596][ T5902] usb 3-1: config 1 has an invalid interface number: 185 but max is 1 [ 146.388483][ T5902] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 146.397796][ T5902] usb 3-1: config 1 has an invalid interface number: 179 but max is 1 [ 146.406617][ T5902] usb 3-1: config 1 has an invalid interface number: 186 but max is 1 [ 146.424562][ T5902] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 146.434175][ T7169] fuse: Unknown parameter './file0' [ 146.440485][ T5902] usb 3-1: config 1 has no interface number 0 [ 146.447237][ T5902] usb 3-1: config 1 has no interface number 1 [ 146.466525][ T5902] usb 3-1: config 1 has no interface number 2 [ 146.495106][ T5902] usb 3-1: config 1 interface 185 altsetting 62 endpoint 0xD has invalid wMaxPacketSize 0 [ 146.593132][ T5902] usb 3-1: config 1 interface 185 altsetting 62 has an invalid descriptor for endpoint zero, skipping [ 146.616524][ T5902] usb 3-1: config 1 interface 185 altsetting 62 has a duplicate endpoint with address 0xC, skipping [ 146.628196][ T5902] usb 3-1: config 1 interface 185 altsetting 62 has a duplicate endpoint with address 0xD, skipping [ 146.640296][ T5902] usb 3-1: config 1 interface 185 altsetting 62 endpoint 0x8 has invalid maxpacket 1535, setting to 1024 [ 146.761570][ T5902] usb 3-1: config 1 interface 185 altsetting 62 bulk endpoint 0x8 has invalid maxpacket 1024 [ 146.778009][ T5922] usb 2-1: USB disconnect, device number 21 [ 146.846538][ T5902] usb 3-1: config 1 interface 185 altsetting 62 has a duplicate endpoint with address 0xC, skipping [ 146.914894][ T5902] usb 3-1: config 1 interface 185 altsetting 62 has 12 endpoint descriptors, different from the interface descriptor's value: 16 [ 146.955729][ T5901] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 147.002879][ T5902] usb 3-1: too many endpoints for config 1 interface 179 altsetting 182: 212, using maximum allowed: 30 [ 147.097211][ T5902] usb 3-1: config 1 interface 179 altsetting 182 has an invalid descriptor for endpoint zero, skipping [ 147.167341][ T5902] usb 3-1: config 1 interface 179 altsetting 182 has a duplicate endpoint with address 0xC, skipping [ 147.172433][ T5901] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 147.223082][ T5901] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 147.223905][ T5902] usb 3-1: config 1 interface 179 altsetting 182 has an invalid descriptor for endpoint zero, skipping [ 147.270035][ T5901] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 147.303647][ T5901] usb 5-1: config 220 has no interface number 2 [ 147.320415][ T5901] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 147.357344][ T5901] usb 5-1: config 220 interface 0 has no altsetting 0 [ 147.369755][ T5902] usb 3-1: config 1 interface 179 altsetting 182 has 4 endpoint descriptors, different from the interface descriptor's value: 212 [ 147.393705][ T5901] usb 5-1: config 220 interface 76 has no altsetting 0 [ 147.413059][ T5901] usb 5-1: config 220 interface 1 has no altsetting 0 [ 147.430010][ T5901] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 147.439260][ T5902] usb 3-1: config 1 interface 186 altsetting 7 endpoint 0x3 has an invalid bInterval 255, changing to 7 [ 147.454938][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.476465][ T5901] usb 5-1: Product: syz [ 147.488399][ T5901] usb 5-1: Manufacturer: syz [ 147.500229][ T5901] usb 5-1: SerialNumber: syz [ 147.517352][ T5902] usb 3-1: config 1 interface 186 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 147.571655][ T5902] usb 3-1: config 1 interface 186 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 147.631877][ T5902] usb 3-1: config 1 interface 186 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 147.669858][ T5902] usb 3-1: config 1 interface 185 has no altsetting 0 [ 147.733244][ T5902] usb 3-1: config 1 interface 179 has no altsetting 0 [ 147.774397][ T5902] usb 3-1: config 1 interface 186 has no altsetting 0 [ 147.817105][ T5902] usb 3-1: language id specifier not provided by device, defaulting to English [ 147.858598][ T5902] usb 3-1: New USB device found, idVendor=12d1, idProduct=76eb, bcdDevice=a9.5e [ 147.957419][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.979176][ T5902] usb 3-1: Product: syz [ 147.995113][ T5902] usb 3-1: Manufacturer: syz [ 148.012296][ T5902] usb 3-1: SerialNumber: syz [ 148.047219][ T7156] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 148.054915][ T7156] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 148.081131][ T7156] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 148.264025][ T5901] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 148.280637][ T5901] uvcvideo 5-1:220.0: No valid video chain found. [ 148.305805][ T5901] usb 5-1: selecting invalid altsetting 0 [ 148.360045][ T5901] usb 5-1: selecting invalid altsetting 0 [ 148.367922][ T5901] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 148.409964][ T5901] usb 5-1: USB disconnect, device number 23 [ 148.491313][ T5902] option 3-1:1.185: GSM modem (1-port) converter detected [ 148.545352][ T5932] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.603251][ T5902] option 3-1:1.186: GSM modem (1-port) converter detected [ 148.644770][ T5902] usb 3-1: USB disconnect, device number 23 [ 148.698859][ T5902] option 3-1:1.185: device disconnected [ 148.709746][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 148.722960][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.750354][ T5932] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 148.772793][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.773407][ T5902] option 3-1:1.186: device disconnected [ 148.795611][ T5901] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 148.818063][ T5932] usb 1-1: config 0 descriptor?? [ 148.977464][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 149.003750][ T5901] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 149.041367][ T5901] usb 5-1: config 0 has no interface number 0 [ 149.071844][ T5901] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 149.098467][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.107902][ T5901] usb 5-1: Product: syz [ 149.112932][ T5901] usb 5-1: Manufacturer: syz [ 149.119681][ T5901] usb 5-1: SerialNumber: syz [ 149.148528][ T5901] usb 5-1: config 0 descriptor?? [ 149.398808][ T5932] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 149.430603][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 149.430645][ T30] audit: type=1326 audit(1776674693.557:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 149.519761][ T30] audit: type=1326 audit(1776674693.567:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 149.543418][ T5894] usbhid 4-1:0.0: can't add hid device: -71 [ 149.561154][ T5894] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 149.591459][ T5894] usb 4-1: USB disconnect, device number 19 [ 149.619295][ T30] audit: type=1326 audit(1776674693.567:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 149.684925][ T30] audit: type=1326 audit(1776674693.567:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 149.718653][ T7188] xt_TCPMSS: Only works on TCP SYN packets [ 149.783848][ T30] audit: type=1326 audit(1776674693.567:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 149.894843][ T30] audit: type=1326 audit(1776674693.567:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 149.978742][ T30] audit: type=1326 audit(1776674693.567:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 150.274909][ T30] audit: type=1326 audit(1776674693.577:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 150.394498][ T7204] capability: warning: `syz.3.345' uses 32-bit capabilities (legacy support in use) [ 150.509487][ T30] audit: type=1326 audit(1776674693.577:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 150.649723][ T30] audit: type=1326 audit(1776674693.577:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f65b639c819 code=0x7ffc0000 [ 151.260585][ T5901] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 151.327480][ T5901] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 151.450324][ T5922] usb 1-1: USB disconnect, device number 11 [ 152.500543][ T7218] kAFS: unable to lookup cell 'ÿ' [ 152.613460][ T5901] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 152.653040][ T5901] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 152.755409][ T5922] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 152.835793][ T5901] usb 5-1: USB disconnect, device number 24 [ 153.059724][ T5922] usb 4-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.093649][ T5922] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.110603][ T5922] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 153.142729][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.190141][ T5922] usb 4-1: config 0 descriptor?? [ 153.426518][ T5922] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 153.602022][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.669127][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.593649][ T5922] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 155.352625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 155.369541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 157.603690][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 158.972368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 158.989257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 159.006083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 159.112582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 159.129401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 159.146338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 159.172581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 159.220037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #188!!! [ 160.505259][ C1] sched: DL replenish lagged too much [ 162.728799][ T5922] usb 5-1: device descriptor read/all, error -110 [ 197.680751][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.700986][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.231622][ T5932] usb 4-1: USB disconnect, device number 20 [ 255.867212][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.880641][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 305.035209][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 305.042199][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7195/1:b..l [ 305.050493][ C0] rcu: (detected by 0, t=10502 jiffies, g=26773, q=1512 ncpus=2) [ 305.058318][ C0] task:syz.2.344 state:R running task stack:25000 pid:7195 tgid:7193 ppid:5858 task_flags:0x400040 flags:0x00080003 [ 305.072701][ C0] Call Trace: [ 305.075992][ C0] [ 305.078936][ C0] __schedule+0x17b4/0x5680 [ 305.083471][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 305.088448][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 305.093403][ C0] ? __pfx___schedule+0x10/0x10 [ 305.098271][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 305.103235][ C0] preempt_schedule_irq+0x4d/0xa0 [ 305.108277][ C0] irqentry_exit+0x14f/0x730 [ 305.112885][ C0] ? trace_irq_disable+0x3b/0x140 [ 305.117928][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 305.124004][ C0] RIP: 0010:lock_release+0xd/0x3c0 [ 305.129141][ C0] Code: 00 00 00 e9 0e ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 <53> 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 a0 33 9e 11 48 89 44 [ 305.148753][ C0] RSP: 0018:ffffc9001ba574a8 EFLAGS: 00000202 [ 305.154828][ C0] RAX: 0000000000000001 RBX: 00007fbeb0632c01 RCX: 0000000080000001 [ 305.162808][ C0] RDX: ffffffff90bf5b00 RSI: ffffffff81770256 RDI: ffffffff8e95cce0 [ 305.170790][ C0] RBP: dffffc0000000000 R08: 0000000000000022 R09: ffffffff8e95cce0 [ 305.178773][ C0] R10: ffffc9001ba575f8 R11: ffffffff81b0f560 R12: 00007fbeb13f1028 [ 305.186750][ C0] R13: ffffc9001ba50000 R14: ffffc9001ba575a8 R15: ffffffff81770256 [ 305.194726][ C0] ? unwind_next_frame+0xa6/0x2550 [ 305.199855][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 305.206027][ C0] ? unwind_next_frame+0xa6/0x2550 [ 305.211154][ C0] ? unwind_next_frame+0xa6/0x2550 [ 305.216271][ C0] ? unwind_next_frame+0xa6/0x2550 [ 305.221387][ C0] unwind_next_frame+0x1bba/0x2550 [ 305.226510][ C0] ? unwind_next_frame+0xa6/0x2550 [ 305.231631][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.237713][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 305.243902][ C0] arch_stack_walk+0x11b/0x150 [ 305.248689][ C0] stack_trace_save+0xa9/0x100 [ 305.253465][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 305.258865][ C0] save_stack+0x122/0x230 [ 305.263207][ C0] ? __pfx_save_stack+0x10/0x10 [ 305.268072][ C0] ? __free_frozen_pages+0xbc7/0xd30 [ 305.273365][ C0] ? kvm_mmu_free_memory_cache+0x11a/0x240 [ 305.279181][ C0] ? kvm_mmu_destroy+0x336/0x390 [ 305.284126][ C0] ? kvm_arch_vcpu_destroy+0x28e/0x380 [ 305.289599][ C0] ? kvm_destroy_vcpus+0x123/0x380 [ 305.294714][ C0] ? kvm_arch_destroy_vm+0xf9/0x2d0 [ 305.299934][ C0] ? kvm_put_kvm+0x6ca/0xa50 [ 305.304537][ C0] ? kvm_vcpu_release+0x54/0x60 [ 305.309397][ C0] ? __fput+0x44f/0xa60 [ 305.313564][ C0] ? task_work_run+0x1d9/0x270 [ 305.318337][ C0] ? get_signal+0x11eb/0x1330 [ 305.323025][ C0] ? arch_do_signal_or_restart+0xbc/0x830 [ 305.328753][ C0] ? exit_to_user_mode_loop+0x86/0x480 [ 305.334227][ C0] ? do_syscall_64+0x33e/0xf80 [ 305.339005][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.345083][ C0] ? page_ext_put+0x97/0xc0 [ 305.349604][ C0] __reset_page_owner+0x71/0x1f0 [ 305.354554][ C0] __free_frozen_pages+0xbc7/0xd30 [ 305.359681][ C0] ? ___free_pages+0x9a/0x1b0 [ 305.364374][ C0] kvm_mmu_free_memory_cache+0x11a/0x240 [ 305.370021][ C0] kvm_mmu_destroy+0x336/0x390 [ 305.374797][ C0] ? kvm_arch_vcpu_destroy+0x266/0x380 [ 305.380277][ C0] kvm_arch_vcpu_destroy+0x28e/0x380 [ 305.385578][ C0] kvm_destroy_vcpus+0x123/0x380 [ 305.390526][ C0] ? __pfx_kvm_destroy_vcpus+0x10/0x10 [ 305.395989][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 305.401553][ C0] ? synchronize_srcu+0x20d/0x270 [ 305.406600][ C0] kvm_arch_destroy_vm+0xf9/0x2d0 [ 305.411644][ C0] kvm_put_kvm+0x6ca/0xa50 [ 305.416075][ C0] ? __pfx_kvm_vcpu_release+0x10/0x10 [ 305.421456][ C0] kvm_vcpu_release+0x54/0x60 [ 305.426153][ C0] __fput+0x44f/0xa60 [ 305.430161][ C0] task_work_run+0x1d9/0x270 [ 305.434765][ C0] ? __pfx_task_work_run+0x10/0x10 [ 305.439909][ C0] get_signal+0x11eb/0x1330 [ 305.444446][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 305.450006][ C0] ? __pfx_task_work_add+0x10/0x10 [ 305.455132][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 305.461303][ C0] ? __fput_deferred+0x216/0x380 [ 305.466255][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.472327][ C0] exit_to_user_mode_loop+0x86/0x480 [ 305.477626][ C0] ? rcu_is_watching+0x15/0xb0 [ 305.482394][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.488468][ C0] do_syscall_64+0x33e/0xf80 [ 305.493087][ C0] ? clear_bhb_loop+0x40/0x90 [ 305.497785][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.503691][ C0] RIP: 0033:0x7fbeb059c819 [ 305.508112][ C0] RSP: 002b:00007fbeb13f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.516530][ C0] RAX: fffffffffffffffc RBX: 00007fbeb0816090 RCX: 00007fbeb059c819 [ 305.524508][ C0] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 305.532483][ C0] RBP: 00007fbeb0632c91 R08: 0000000000000000 R09: 0000000000000000 [ 305.540459][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.548430][ C0] R13: 00007fbeb0816128 R14: 00007fbeb0816090 R15: 00007fbeb093fa48 [ 305.556428][ C0]